last executing test programs: 3m1.005070845s ago: executing program 2 (id=632): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000600030001232c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m0.821335368s ago: executing program 2 (id=633): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000280)={0x7, {{0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x7}}, {{0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x7f}}}, 0x108) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x5, 0x400) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x8000, 0x7) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) mbind(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000001c0)=0xc00000000, 0x7, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20048000) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x804000000000000) 2m59.771980621s ago: executing program 2 (id=636): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x50b080, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='\xc9{%!)[,\x00', 0x0, r1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x23) ioctl$KVM_CAP_HYPERV_SEND_IPI(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000340)={{&(0x7f00000002c0)={'GENERAL\x00', {&(0x7f0000000200)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingEnabled\x00'}, {0x400}, {&(0x7f0000000140)=@adf_dec={@format={'Cy', '3', 'RingSymTx\x00'}, {0x3}}}}}}}, 0x5}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/reserved_size', 0x101140, 0x102) ioctl$XFS_IOC_FREE_EOFBLOCKS(r3, 0x8080583a, &(0x7f00000003c0)={0xfffffffa, 0x32b8c44a, 0x4, 0x200, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000440)={0x0, 0x0, "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", "e3ea7cb6117a4578bfb67977e956f3f05537905c5d1ba52c1768f0fe435f30e9e9d843482adb82cd1a9b9ea9d80e02eef111221b08abdefd3284ee49f282649094420a4f4f8002ab45648610394a649c5379595be747c6393ddfd1f2090db2eef7b2e8f77c9f05d1ba670023907de57b007dae21006576c25d570f5fe50d8fd4f5b2bf14b95e5c943d6553745cb3e9da8857004089a94d6154fd4a8874e37aeda32c7ce57d806f92dd67ee76b9e672139a5538ba31587771e47bda6b895b3addc426b3204868c950f6300bb592dfe76e8c9fcaaa19612a5866efe19d574fdb3bc9f20dc47d8b0dbcec29cd0bd4911aa296f0198e0584331c6487a56b054aa1a66c5edaddeea8bd5ef112b41450c647ca25a6899fa3a4c075fc8b3f91ad9c4986fadb09f7b9d04cb9b983a2c72f3ba382e1d0f12fa3ddead47ab94655e20ee8e8032e89d8ed59191033f06dfc42b31f60665d37df156560914ec30a5f875665a58b1bb5693f517456e2215b6ec6a2e410f97311ce9b526815218bb6e54a1cccb3e85a10a69f4fd65748ac9389cba1c69b4531a9ad5a4775254cbf32ea9c3a33b44e54d58fc9bc19961837418ba3b00415a953a909beef86a0a0242701f7f0fa2005123b2817c23af33a65113f3ec5b62b32a41163b3c3c9fd6ad64c71be4c6d1d4489b4284cbeda3574a4d0e4838f991bb98a3d6dc7de0ec4539d98921c83d63ddaf6ccd15727a16aca836420284f12f9c2838eaeec5cf3e6c52f7ca584417a02438309ccb165b97d33d2afca6314f25ac5b0bdd15ab85ef579a8e495450c6663a7bb1226c783fb0529a61724c7921a29ed11513d9c43277abe65253f7cf0cf034be314485a5bdd2047c73af3b67a46bbdc1b771384e57d8bbfd3209fcdf78ccee83cbc3ba91d2083b1bf358ff34c0bbec50b7518517e4c08dc36f6850b2f315add4f81f82e5df2ba8ad2cf6b3501d7872da8b0bcd790f55675e92a4b98569efbc7914a25a8c3c14008a048b77edd6bfa9eb3333b8e8e85974b4ac4f64dcd9aabddf2b8cac110570763be4ba825a727f67545ca3dd1991f2e32be2d44c7fd7d3c473570baee3671eb2c411352798f96719313b1fe2ace9885e5a5eeee7c632dd71f76a3d617b5ace916d1e40f856bb006a20d2d232ddbbd1f6d146f061a3e4fbb4dd2753a5d68754b1f47b4b82760affd53c04918aafb9f608dce121d6e68398688c7ee40e559a2188d737a7505c3baf4a9d583b7ed1ad0daac8659e89000004197e51330e4d19e370f619a4fda70796d9ed96c601993f29b3cf814179ddc350eec4fe463716a8f80f9493339382b9098b8152f975e8fee407e953256c19aa662a2e311ef0d4ce7d878d157f0ee7c66986fd960e67811d9e3cbbe8692d44b915355ae5ad28a64e5cd44ded38f981368dfdd879f13123636a3c695a9e8e3585b764b4bd494faeb303866744ad1f5cc122790f13e2eaa74d7111053430b4273b09c83ce3cc9c064c1d3eaf7e52cb3338e607b30d95799e0b317bf6242a35bf389f59056357ae2071131c43ef9f296b35a08468a3f3c196b2cc8e8b8dad03cfe9e89f42092a1404b656ae3f1ef3a6c8161fc0a1676db9dd94068480918feb780c6fe78b3a1341ca69804ac5b51bdfc825ac5f254b76de842c718e0f3f7e05c41d42128b1ff34e315991b41541cdcaab70622203e8c80a698e54de51e88b029082edb7ccc5e89f33baf3508b888e9d10856837e19f696d48bd7a7ab987025e87a4b4ed52c150a0499948ba2014d7adfdf09565ecac6ac51d76dc1043b63dfbfca6e462f5f80ce7004f1c0769600dee9badf891efb08ac24f041a52190bfe22794c8dab9db17e7f26cb4dfb2580bc2e8ae6d4e50b60aca5746fc0c1dafee32fa4edf6c5234fb9a67f0e717d50b0b684b83e9ff3a5b930714023643f0f183c0ef13f0a23eb6452d738a575909fc0a535fd36f319ca51ebc6fd9d04b0fd2df6c9e9a598072aeec8d904ac256392c189e696787680ca5d7cf10d9c606191c616bfc4c3ea797678e15d55e8de66094ac1e400b3e28e272caaa30837527ea53718b44e43e8eea0e7f72da49b172c05f938e73e3fdd8b0ff844ba4c4165cbc62a118e9d14aed689149db6773c3e70846e74b9661e7e928418d2f9ef634d184b718eb5614eef6a5422e3817e058660a38749c0a4f62265c5ef7de5d5e456f55a9edc279901d826c2feb15f80cc8b9777981ad5f8d2c37b319c18ff8cc4f809e39ebdf0d7902c2fcab89952f3d1341ebf13f8645632dbcf4f2470dd19d94aeac7ff3eec1a7f9344a0fef8df2443a9db83ac2788c023b80937ce5efa24b9c67ac4d074dc70f6ff200d86fdf2131acbb42f4fe939f2dfad4b14b05856d446282b97cd07491f35c18be4220bad7210b8a44120ef81e56558432d7a4a8800226759e3a64e81cdf94324974130af596ed5919da8ede0da6e048a460e91d4b1ab1f97cd95e4a0e39e2758c5234a0f23dc8c3b70d1f9e9b44973c4120ff321d2e8ba3da0026448c6a83109b2876704437127525a193c3a25c370e3531c3d4d0fc2d3d8593e89da5392bdff3bae8ea190c944e28de92becbcf139c9b63c5c0a1d0b37451e89e6928aadc0164c924c5298d58f181ecb3cabf16cf618dc257da6c9cfe177c4fd1fe50b4aa5c1c74c0b812c25e0b45ad5ddca9a130183052bb147d34ea5c2e771cea0c54dcf55baa64d85b562b4fc0b70feffb355dc0a80aa3c6251e3eca6a3127f8e27e994d09ade66c76555b378dc4e41bf87af29773524934bd0d65fb7cc7d3fe0c0ff8933b77051733d85b3072a98ec4bb8b1031d8673183e3c6e1fd2bf9462c78662753f791ed7a670d71ea269577c8b295a2ee1b6421457ab843e1df19781cead9ec2fa4d035d590ab14eb37861e674fcb93658365d2a6f4ba5ffdc9972cd7a8e0eb211cb4a49e1e816fee9d18215c81a212dbdf77068dae306950b0c9f77b9015bc7c2ee53e2d3364b7bcba393434cb0f940443f1f8c2bc5d5fdda89ad709dfae0c75a4bcfb6ebac503094ff0ebdb4eb3da06bb13521e175732b3b4326fd66dc6239c481c68b42046ee61d5af257c77388c900e1c3a5da5aad7ca88ac971c69fdf85a6b329fd303395f29bca9b76c5c0f3b8d4050bbb80a0b0408b680b3a5c2f2af3ca662e03c78f8aa1d353f406000478f8c102067a763cf3f087d79f655d42b7e100a474753b5908124f22a8de659733ad99efc175bbfc9902a67f60a09bb0fad61303b1ff867854387f4ed1197723f5e1e064879b6d7b721b3259c6f3b46e4fedcda9770c83ce21378d75775397e8929908206d1efb9cf7becc8fc632f9663189f2d1317f8ca76f3205ed06792c02752fe9c2d185c5bbe0892bce17ec09f4f20302cb9613cfaced3847e3c5e7a6616bc41a76891cb6be802889c388e91147992cdc1a4fe6c2baba65a9247f03aa58062bf000edc0a85d3bb404a74194d26543af05933e263eafd9c59b63b765732395f861dc20c0c6f0250db788da80821066c58020109ce7b681649b5145d5c46f20ae08f62775e716254d99551294cb4dc3ceb3674f8c2fe8e1f00c08c69f18a31eb261bae0e6c71f45bec5619226f64f3c0448785698db11a011def4b110284ada621b37a6fdc06cc80bf4fc7ec1ea66bd399960c60ac8e33e7935cb3602ac65615d6430c1a538e1ee03e711e84ed9fa5dc2021708039fd2abaa18240c415c5385233034f5992b10d58d23ad6ec526cac57f6cfd202a90770aa4019da48cd8c32b4a496ff5f56f659cc9c1baa14065b5237d9f64b06af4ddbd7a0a1bd94103427547145c731ad9c94fc562389c3815061fc90a53e3b0f6e3c8f757a7ea9e55dbb587de151f59ec149db45f48e4556053eae03421831c7d1730ba0cc6469f6bbfc0c286c541f2026ad1ccb7b24eaca23698f52fcf71697a45fc42a88bacea185416c4b0871d19e6dd658a7ac58a8d3ef828c5658bb8112a5d01e17960d867f7ea0810194423d7398b522b89ea2f1d3f534ea4d8493b7e8d4b1eab5ff8f27ec6536f7e3bafdb4c47cce3c640c520834554467201e8a60d0e41043d268fe05dd60da7f7b1d39cc3f038d5521978c4980257399826f2247c017f4954cc04c6e5f92cacb5e3f4889da602823cfdc88158fb18a0e8f3b06c79c3809d1a3f391e4929084e2bae0c83abf7ec9c79f9c04ed2a734cc682855cc0fc2490b45a278b1c83a9a26099bebd9a96ce77cf4b56f83f48347eeb8536438eef6d94ce59815209ab6cc280556bd3e49cafd4fba8d85bf67e6f4dcacdcc6ac04acccc07ae126c5f904b85298f60d8019b6a5f9f0f9fa208f4f5bf32c67eead4bc9b0a300fe323b0db0c4e08a91965c7f115f6ac96a53e16a785ebf883029e11b8dcafffd8ccfbff37c6ff1479affbf1284b298a7f0728dbdcc9a2212e57b2c0b3529bcefcf176449366416b82ce2df7d1c43ffd99ec8b6d69d1211e060087c67d5a05aa446da98fcd2dcc944cfddfff4e8d97b4e413ac6a14cb6564616aa0f4180e48bb7f833db3dce6c761529c565a56bb184843c2777e84386ca5042a610137ea396a49df611ab262c580cad1deee71097c63ef3114dd883000982f6cc167a20678b7e8269fc5cc7ae9228185959a84493930ea04955964fea49c76a07282327786759d656d6b2aa5c4bf0f95fe175ddec9232b37d5edaff24716cece9be870d8fad51a8e488765b04e3c131774899506764f249e2879b51aba524ac24b2c9964209779fb0e34d1a4911364d821bf3766f87a7bfcb7c622a155521171c69296881053133ad5c9611d36ee299f29512e89aa437a559a493315f398c43d4f409da2e25793a7720aec0a5322b3493efb5f337dbd48e75e7d8402181918e0b4c7d3ff784db3733b99cf4bc2481e5f1f6470e64badc8d28c7209214de780dcfc263e66feebb141c755de5fb7e7c33df6a005c43f5b01d629e14025fb48efec199f06659fc9243b9f736f53fb5ed877f59bc8cb2a4893703b2f775688785d884c32d28e1add247be828e9e9e05e7c3edb3101fb3f2511a15297df766b46446c56fa3bee93244ab65359965152e1d48b6932b7e7a7452c12ce90bce39cd37357a564f629d5d0d177a7d4e5789a10bd1da6e7db6e60c870d4f18ca41f6e5fe0ce996c8b036da68de75b4711a8cbe5b2ea7262fdf5271ff2b542cabe204ffc6d1474e6ec38b9b9269e057555821d9cb22a054155944e79fcd2bd1a90d702d724525af6d70f32558a44e79643841692c913d1dc13fc89f854db4f1762726cf1a0d120d2b60cb5489e3e161fd94a8cd0b5add4cdeb7d6397d73daf3127007ebee74a0474fb0a6f84c8ab66f70e0cb94845ceeb672d9e1a83ddd1a5b43ed5b75dc8796b0eaa1087aaccd12318153eb7da15"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001440)={0x0, r4, "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", "7c58432c39632638b711da2009ecd7899f68f2d9cc183d52237f7e45d75b9667602e53fc2af6ede62231c3612da38176bef5d2032f84f5c2f84332bbd664783300a7fb4ff1941e63a6a53bc4b9c80d7e3bbd8fbbf6b3e8914f8c61a1d49f88f59f81751f929eaf23e94bd922e5de79714e32bb6c5c8b3a94251c818acbe33df7547ccbf98c16e0d0bbba459334c1345855ff24fd332a21918505e5320d063e9c9c6798abae2c81cb3549b29d95ca761795ad891cb2037f891175f3a35d8c43435275f463d18495cdaa05b00f86151a76cea2aeddcc5269957b13464206be47d1c9fc64d8733e524684611c1c73dace52fd53be6b6f0fb9efe5fad7a9bbf09d40a84630cde76cf3bea7ddba94e8a93d5d8e93781c77c634dce58cdfc59e6d84aec74e9919d94ad6259c27f37a4f46df5e12c6256208e43e33b50e99f1ff47275f4763aa11d9e7e2be3c6451dccb5d0e440424bf118ea96f3317884828b09126ad1b352af0118599716f8f9f7ddc39298d685c866fc489d3c7474412ddda3761cfd0e20e4503460d882a1828bab96a73a8c32d16d79f923439d9ade5f3c38e8108bf270bf787483bd2c125de4594f1046c7add83ca138daa76aa1c40fdf2bc6355796bb8c276719c32d7e4592e9b28cff17e901e6f702fe8aaae48109d730ef472c6e65e3eeea0bac892d2b2ecb83286bcddd08b22fa5ea5018d95f379ecfd882094085df6054537bc7f8b623ccd0b8dd06b4df7656648038489c92c15f638dadb9616ddade95a1742e1d3fe4f937364c3f80fead694fb7cdd4be28b9af317ff4b863ab11f8a2eb6672d4bcd0096eb141e77b2d9aa13f7bc9fa6194146d289ad8b9d4851f975b5e12745f2a85114871ac6150d0ef6084fd8bcf0eed576d872a189bcbc59b165b270f6f90ba540815cae1fc4a3e63ec9f90906cb5cd3ff1f319d7450bf7d076bbdf6dbdf15729ebbd00dbdc54ee201ab70da8a5f22c6b2e41de7a4edeffd1668c2b093c1833e26db6b2db28735d8154eb005c14f586e2412d820236d4a89aa8651ffa364f4db445fa7674a71eae391680f313fce7704c0f3f6ce2323757b394e7b29db4b3f32894463141ece1d250ffa84ce4932722fbfc8104fdf4560b1c8eafc15ae8a39d8b32b11afa87d44f4a90053ef93552815040dda452dbf5ce85d14e642003f68fffe75c16afc9e44a6202e431e9c6104f589f0342cbd64a77fc11707b5647d60ae2af00fe63b1e1665c9bfa991c6b324b847be9936e114af26e841de7575e4e36825bdb7d1b34fe21e6296a4e5250493fca587a8bbf5836fb5bf25acb7456a1d389f5d2d76a29910d00bb1daf10e63283e222fe27d28f2ef3ef48644e14a1aff9fa2ec0daa4f00745fc2a03c8af8d7d460195e3d3afd95967adb5b5b392fda7713288e8580e3518421283dbb8bd95149e79fd3e0b027717de16bdaa3e2f364acbc99b2f7634901a73f8fc6f9f2d3f78b3c2445a7b98e8a86e09b8097b7a62e8ba1cae89801cd6f63cf22f8d2a6c4f69ad74cc21f83758edb82e249ba1b81650815ce36949722fd4b7ee3bbbae8cf9533e2ecfbfee2fe04fc3bac6666009e27c340c2957d04970b5c0ce6091a8b3f2da976a462caea7d52fbc44e23d7eb7399b1734cba225c2ef1fe85bbe3bdbcc0576f7e5c3cbd0357ee0101a9914c0b1371d29392909cc632a85d1ac8b6e24b5d5fac630a290ab813eaea0945c0920136010c7952aa4aa8923501e647445f01d138f07677148e96670b5925c474103284037d14e1750c5dffa17bd444d46561058bad76325a2cfad1a3ce8c8ce633966beec3e8a36fe09d7575547e8cdbb42e41152a5fa1b6999b5139febda751778cb35636b11890725941c4629b2e4c865906ff9dafb3a208bc6f17f90e5674f7760bb8d1df36f32969f55f726deaf17bfaeaf96ac908c405b7bb977984cd5ee595330fc8bc2650101cb01c290b353035b03211578309d2e45d4af7bd24f6e21ec81678065da1b5127268c146a4c4a1136a419cafb6812700501c8ad95b99a226befc28566ef41da7b9a29c952230ecafe86d18665b83c7bc592bda281e31cf6c46c9bd0ed6531a1046d6294fb3c9ef5258b55ab95338ebe02bbd415cea2726b9d4e5b5a115332fe542e64a2abbbb695a36371700229c893002e16e563bf9f08caacc22c44cd460d0ce93e173da3d67d742fa932ce51885ec099065b44805d1bcfe4940b5cc4caf61e99cc598c05ee3dc706488b74f0f56ca70eed73e3ef78a85b5337e13c53e3923ec0df439224b1200d1c755a070b216a350db7241dd478ed36e5e96b6047c00284fb862d7084bc651b88cbf4ced02cd099ea637fdc58ccce7dbdebeb2216ba1d4b1cdaec7df1cc989e3beb14f521fc1398700444428ee7fbd95d04ab17ded15be234e6709bc17538bf5542f0b436af2ffa5bd9ed7418897ed4d10315828f001cc546587e70e274b5bab737234b3381d058d98d2ee9ed7a1dac5f266ce060e5b480e1cbbc618cee5e3792b5434fd52f1333d30e74bd34c08746da709aa93b3395063aa3e881ff2dc3ce90a7886cf75de18e4b87debb99bcf690d43060d7f8f622d7f3f924cfc8c64d28e3739b62de1db45c9f4f6eb5d346f166074e19d98c41cb3c9116aac83135cec8a41e0f546206a33f48fdb81c6087fa86bbf8a3d43e093b419c62ff0ceb8fcbc158489f657bb169c7988b7207f5ac253050fc371647d74274a6209d32b111225eedb7b6e66c4745d44c9c6bc1e541440949b90918546482b2ee772b12e1a6a79a78e3b13ba42f2cd79bbc7ebd71bfce9bf041cec31937a0fb0c2e7a90d72be47205e68b462fad45f164c22acdef1461472247acfd6694a906d4edf77b240ea0c1c61a11d4f2d0eab6499f61760baf4a3dfa282c3291bf9aad5d9c50a7cc0fcf1e2850d652e5a70927b3ed25dbaef5f2205a7184edae98525ef0e0831b4a8ed281e68fd59456b708deac09c7c73224538b744d84eea5dc71d2c131fb1a7c68fa54d7774043922f51e943868a6a6749f07b8ad052dc9a6f138c6d603b5bf2ddfc1a2feec7055c9cd9d457f7b78f69f74fb05563a5643061dff383f21777e623632b78dc71281bb47e51622a147cab697c8586cee41ac9fe7606a3802e8083054e607e93c01449ce99906a12950f9bcedd9d83e443f90bb6a4285dc92cf369e6cb5767e5009eeff9d19b6e7bfac35d95a9a25de11892004cf862cc51402c9a77b29d32474ccef97a2d290b292076531fd80dc66131f0a64ec31facba2b32fb446e9f70fadc52d1c1b9f6873b1069313ad490213de36553026c4f80325e084064b0b9578dbcb87f7ef12bec1fca6095683b21b85360368a0b37eaaa687b44a5905bf640c79d6a0db90044d145ff2feaf3bfc4c572207b7727259c8d3c1879982b089123134d5a3a8bfd5f144c1bc508f97ed05a90c6c00b7f74cdcd7cb77045a7203333f0d67371e4ce6f42f2a7faced7997a7992a5fd79d6e11f780cf255a27a222093961356217d2dbef46bac8f188d8bfa6922780e1d751035f3592f708f679035d62359bfaa657e4ca3cfc1129f9f171c539efb5876326e77bbfbaebbe48ff4875a14d774d9461134ff3823256dee80fc563b5fa1237c3d1b90364c121cfaba50e187acd61fd3165ecc1b77ace2b9d05ee13fbdf59a72bcb614f1dbe78515acea86ac840302a8f3d111aaf04d2cb1abd2f0f47b234d2875d619d38afe7f4629f14bca28630764c1818a1bee86f3efce562e6cfa2f19a8665de121edbb3faa01d825abc50622805ee979b307b76f8a4b6302a7f0ebf28cdafe3f97676653db7b556020251d77145e20d79543f9a4a9329470c8ef7c5fe3b78fa13e0d1453b92c60e1b9e6482ccbb034a5f277699fa2f5acf0f662adc534f99b2f2fc79f6d14a7bbe92037d49ae759682dbad88977df27f5998b879a218a59023ebb47a74602ca9ff8c4b7070ce493c0a1d0784a1551058b464e3f91735f5cc4b51db8b62aac4eff90165f996fcd1c972e2545e7e0fa884e353570a89cc3fb7417f91ed183be113833f1deadef6c0e2b221fc5398d2eb80acbaf3e84500b0bb03251c79ac4df4ede1a4dc3749d7a4180ff4a59ee1e4743e0627dcadea1ca847e3bb54ee9cb628f3f410acfcbe0c39eed98f19b1ef6144a3316190128089edfef1bd7cb581c1033a2e0cf60705ae3b8c70e0a07fcce9f0d23b8d066af28bf0ef89952e9f98a00af736c0e22fd35503898d5905df818138df1e312356d7f52684d60be7c0f84a83418b03e409d29b2841dd73af4c088dbe4f24cafe043440fb526e4e53b2e3098025be6700f098eefe99bf4d6a6067edf7d3422aec220edfe040bdda4262ac4377199116994510e910e513051acd133b696a82218247d1e8ff31ff05da5c54f71306e619ee52b0e0b00af43e90bbe709ada64c73f5a44d04de3ca26c0cba9b971b6122fa31417da613ffae85577257945db951969eef6e0da95e1c73b6c66e8c8a835680f53daa1c8294089a35231939bb1707f0ef06a4e9d79a3ef64d92024a2fec0df9a2c13c10c7fe18a1c14e809c7f334a76be2bd98d0b9d29a98f87732e88048fdd1336e13fa30891487d9ede95856cde0563d4c959bbe19cac35b9d9229fbb3ada81857edde3bd1f06875db99d00b46c0b12a432a04a0c3b53ea148ac0431552271cd6757a2308cbc28dedfd7633c8324c5ec5efd467f8aca01fb09cfab406efe18f6eefcae22aa0e450dc5cdb9e4629f84175986082c2d80f7f119e5db628fd869ecbf5467e820cad8d71da47766d9f9e92916a5671d3f5a8b8041b13b2ac3298e465739641e85aa9f1ae0fabf0d0c506f3487673735f518a10b91d1b8457bbb69035eb40d61c4170d235d617106ed6ae8a7e09ead3c4139a884e5ffa4c3f5724dacdfc65cc8abb3a49e665eecbdca701e2e7c1edccca23351b6e9c748a60d827ad08037da61b92ce47706ce86d8e2b6b8bfe53898687c3e53619540788797c8b0221e102489471b65d241a1dc5d01ccbed020e6bdcd57b9cbb091fbdd82ec1621218526e2dbbecdbd3b6fd7b927ea258920f61656aac9df962268d076e6989157b321bf25df452b27fa032d4dad23712376764154eb83687a54826e01c2a4a0e021411c1a16036875c879e5daddbf3fc8ad30cf198edd05f5f717b5b6d35d49f8e2a7f69ef3121600920f213e7f5d71fbbf24554d7fec39d0b9df186c582e65f4c0432875886656c5724f5878607783dfd611deb71d5211bcd262de91df787c5013a5fbaf4c802a4556f570ca099b34cc928d2daa26ef6c8f5e57d804fedd6d942608ed5ed7a507ba87202f92edbf776161c15acdcc38f4895b5fdf66bc40f21a9351ad61e8f21f9084f520f1e906a6c91a70bb99c868abf"}) fcntl$setstatus(r3, 0x4, 0x6c00) io_setup(0x1, &(0x7f0000002440)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000002480)={0x2, 'ipvlan1\x00', {0x800}, 0xe}) write$tun(r3, &(0x7f00000024c0)={@val={0x0, 0x892f}, @val={0x3, 0x1, 0x3, 0x6, 0x5, 0x3}, @ipv6=@gre_packet={0x3, 0x6, "77e313", 0x405, 0x2f, 0x1, @empty, @remote, {[@hopopts={0x6c, 0xa, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0x80, [0x6, 0xff]}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x40, 0x5, [0x2, 0x2, 0x5, 0x5, 0x40, 0x5]}}]}, @srh={0x35, 0x8, 0x4, 0x4, 0x6, 0x10, 0x9, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x7}, @private0, @private2]}, @fragment={0x77, 0x0, 0x9, 0x0, 0x0, 0x7, 0x66}, @routing={0x33, 0x8, 0x0, 0x5, 0x0, [@private2, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @loopback]}, @dstopts={0x62, 0x4, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x7, 0x4, [0x0, 0x6]}}, @jumbo={0xc2, 0x4, 0x5}]}, @hopopts={0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}, @dstopts={0x5e, 0x23, '\x00', [@generic={0x10, 0xe6, "a6071581b8f26b1c533087a28018ea16e541893ddde2200803dbd92a5c2444d6d58002af4a7adc9b846a0090f3ed8af791961286992386678b56f0377440ce54412c8899ab5d852a4c158dc92890e9caeccdc2e9390188aa55ea05ec0673d4fe6d13b69dd67f1a9f74eb3901c17e6d0b68af453a20b6ba232e9e27fc8a160c34240459f009d305ad80e00bf63f606d9e3e460f09e7bb62eac69a1624cd371dcfb91b65ae2ae97a86fb65d4f75d6a181984e35bf505f85f1ad0815a6c6b6dc5cf7c8b15958bf5b76ca20ce1f9d579351a63af397d371bcdbc21e2fdbdcbe7086e3ad3b2d0b2f6"}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0xd149, [0x1, 0x1000, 0x3, 0x7, 0x1ff]}}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x2a, 0x3, [], "3f07b7277a5a5dc2a243bd371dd4ef5c20f7429e40d7f78198461e100ef59a138bfff859456b5e492534"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x1], "aaf64eaca79a065ddf65cffbfd27597ff19da92ebf6b9973bb2d1e2cab5d2296bb4b917eb31bc6accfe03658435f513e989434d1ca9e7eec61c98b0763436b64282ff82cdc89be6cea3dbd544d8f587251c4264adb893c96f824f1c73c1ccaaaa6ae53f6332e1911bcdcae1c194028367c689ca1d52b4b5e0b9f66de4e5f2a23ebfd0f378e8ba57fcb0643c60593fbe6e299837ac87cf6a86988c6c18b067ce742212cb8b6eac1c626e53357e3841b3ae803011c32093aeab456d25b2e9c5079ef3b8d60da88"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "c34213a099ec6d26d1a09aecbbee29e5c4735952ffc60e7ff6b3d494b37242e89a30cb3b200c1511e945a6375d9f1933ca4769d2f0972928b8cfadd127d704bf4b33b4e6d2aa48a2351b7508aabeb259236b4cc330b345"}, {0x8, 0x88be, 0x3, {{0xf, 0x1, 0xa6, 0x2, 0x0, 0x3, 0x3, 0x7f}, 0x1, {0xd642}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8, 0x0, 0x1, 0x0, 0x7, 0x8}, 0x2, {0x0, 0x2, 0x1, 0x5, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "83700418060bd865"}}}}}, 0x43b) r5 = add_key$fscrypt_v1(&(0x7f0000002900), &(0x7f0000002940)={'fscrypt:', @desc4}, &(0x7f0000002980)={0x0, "6fcd99b59959f6172828d075b6a4f7e2f9aaa9d7adeecc9f39f266397ab1b3a5e7f19a8b733f1feaae6aea9c446c67e7516c4c028e487729325467c086d44c82", 0x17}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, r5, 0xc000000000000, 0x9, 0xfffffffffffffffa) add_key$fscrypt_provisioning(&(0x7f0000002a00), &(0x7f0000002a40)={'syz', 0x0}, &(0x7f0000002a80)={0x6, 0x0, @c}, 0x29, r5) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000002ac0)={0x80, r1, 0x13, {0x1000, 0xa5e}, 0x7}, 0x1) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000002b00)) fcntl$addseals(r1, 0x409, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000003b40)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003b00)="d150ba74db", 0x5, r1}, 0x68) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000003bc0)={{0x165, 0xdd8, 0xb4, 0x3ff}, 'syz0\x00', 0x1f}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000003c40)={0x0, @in={{0x2, 0x4e20, @local}}, 0xfff, 0x1, 0xd, 0xa, 0x10, 0x2, 0x8}, &(0x7f0000003d00)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000003d40)={r6, 0xff, 0x1, [0x7]}, 0xa) add_key$fscrypt_provisioning(&(0x7f0000003d80), &(0x7f0000003dc0)={'syz', 0x3}, &(0x7f0000003e00)={0x2, 0x0, @a}, 0x48, r5) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000003e80)) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000003f80)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x30, 0xa, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x9814) request_key(&(0x7f0000003fc0)='ceph\x00', &(0x7f0000004000)={'syz', 0x2}, &(0x7f0000004040)='fscrypt:', r5) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x17, 0x10010, r3, 0xb2753000) 2m59.201521207s ago: executing program 2 (id=638): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000140)=""/116, 0x74, 0x4) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0xa, 0x0, &(0x7f00000001c0)) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x240480c3) r4 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x3}}, 0x20) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r4) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x800007, 0x0, 0x0, 0xa1}}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000006c0)={r0}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x5, 0x3}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r8, 0x4) 2m58.715844159s ago: executing program 2 (id=640): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m57.737838922s ago: executing program 2 (id=642): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x5, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}], 0x20}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000240)="32c046", 0x3}], 0x1, 0x0, 0x0, 0xa000000}, 0x20000080) 2m56.955779151s ago: executing program 32 (id=642): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x5, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}], 0x20}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000240)="32c046", 0x3}], 0x1, 0x0, 0x0, 0xa000000}, 0x20000080) 11.425179959s ago: executing program 4 (id=1142): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000000c0)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0xf0) sendto$inet6(r1, 0x0, 0x0, 0x400c804, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffec1, @local, 0xffff8003}, 0x1c) socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x1b6e, &(0x7f00000003c0)={0x0, 0xffd1, 0x10000, 0x2, 0x24d}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616ea7dbce488dbcded3e94691a333c8512f65f2906c9b46d803f05235ae7505006600d6a49617e31da76238390520eaf610ac108b635b255c9cc73d6f102c4f03eca4c57fcfe83af1d2accec2262fb519492d35f16af03b18e5b1efffe7f38e81ac291335600f5a1f586787c088e59df35d6bbf032e5de86d458b2a318ddad63181292f83e8e265d64daa39ee96c4c5f5e055fc89fdb845d7d5a765246f4cb8d077a5685dc64024", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) 10.144806441s ago: executing program 4 (id=1146): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x804}, 0x20040014) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r2, 0x7aa, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x80000001, 0x100000000, 0x1000045, 0x10000, 0x9, 0xf, 0xfffffffffffffffc, 0x0, 0xab], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x100000d6}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r9 = socket$alg(0x26, 0x5, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x34, r11, 0xf1aad47e89fb43b5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r12 = accept4(r9, 0x0, 0x0, 0x800) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r12, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r6, 0x623, 0x4c1, 0x4, 0x0, 0x0) 8.05662044s ago: executing program 1 (id=1152): socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'dvmrp1\x00'}) (async, rerun: 32) sched_setaffinity(0x0, 0x0, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 64) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x3c}, 0x20) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4a21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c, 0x0}, 0xd158e5cd3365400d) recvmmsg(r2, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 32) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 8.05587843s ago: executing program 4 (id=1153): mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000300)='usrquota') bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x48810}, 0x4044000) chdir(&(0x7f0000000140)='./file1\x00') utimes(&(0x7f0000000240)='./file1\x00', &(0x7f0000000500)={{0x77359400}, {0x0, 0xea60}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) r4 = memfd_create(&(0x7f0000000180)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x7f\x00~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1) pwrite64(r4, &(0x7f00000008c0), 0x0, 0x0) 7.694961112s ago: executing program 1 (id=1156): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010100}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40810) io_uring_setup(0x382c, &(0x7f0000000040)={0x0, 0xc89b, 0x400, 0x800007, 0x141}) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x7, 0x8c, 0x0, 0x6, 0xd, 0x81, 0xb6, 0xa, 0xfc, 0x8, 0x44, 0x0, 0xee5, 0x0, 0x9a, 0x2, 0x80, 0xa7, '\x00', 0x3, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 7.692840527s ago: executing program 5 (id=1157): fchdir(0xffffffffffffffff) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000000d40)=[{0x0, 0x1, 0x0, 0x0, &(0x7f0000000d00)=[0x6, 0x9, 0x7fff, 0x4a, 0xfffffffffffffffd]}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000"], 0x0, 0x5a}, 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 7.263399046s ago: executing program 5 (id=1159): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 6.665181299s ago: executing program 3 (id=1160): syz_emit_ethernet(0x18b, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x1f, 0x4, 0x0, 0x7, 0x17d, 0x67, 0x0, 0x0, 0x2, 0x0, @multicast2, @remote, {[@cipso={0x86, 0x42, 0xffffffffffffffff, [{0x2, 0x7, "c87c732914"}, {0x5, 0x3, "bd"}, {0x1, 0x6, "460aec91"}, {0x5, 0x5, "c67b41"}, {0x1, 0x6, "a493156a"}, {0x5, 0x8, "18cac0a36e07"}, {0x7, 0xb, "50fda7fdbc32c8226d"}, {0x2, 0x7, "3247dac918"}, {0x0, 0x7, "7eb6ec6061"}]}, @rr={0x7, 0x13, 0x58, [@multicast1, @multicast2, @broadcast, @multicast2]}, @end, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0xb, "78d25a2df5deb82774"}]}}, {0x11, 0xf8, 0x0, @private=0xa010101, "98d1e0614f79366a6d005f0884c959728ef17eb8eed7c46a5ee954b8102a461c33c3074353396995a1c6fb2a2c764667d997906f0df6dc0dbc9514ac68e3f538b7f64dbba7652b66af97396f4697c0042e8b3008d3d1d1c8937fd35273d5d31450c606d95b5b9fbf83811ccac9a4e862a9da9a39f777b7a755bdcaa0a3f87a3a7a728468121bd3ee339d0279c448d2a520b5097c6438387e41e79c59e6af0f78b7b81f6275df1e8f4f80f9f599cef5d15dcbb0bccbd49869e9440a1d52a5c4ec747a38a3c8dbeae5bfed715686c15a98486caa94858e854827bb31b357db600265e285fe8f8a2651fced009f061eb274e23c5f403298215ab2"}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x2, 0x1}, 0x20) socket$inet6(0xa, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000010401013100000000000000000004000500010001"], 0x24}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r8) 6.53496575s ago: executing program 5 (id=1161): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002d00), 0x2802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f000038b000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab", 0x1b, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 5.970657346s ago: executing program 4 (id=1163): fsopen(&(0x7f0000000280)='xfs\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2f8c82, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0076303a00000000000000000000000000f2ff"}) r1 = syz_open_pts(r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYBLOB="0200"/20, @ANYBLOB, @ANYRES32=r1, @ANYRES16=r0], 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) socket(0x10, 0x4, 0x2) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x238, 0x0, 0xffffffff, 0x2e0, 0x238, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) r5 = io_uring_setup(0x4b55, &(0x7f00000005c0)={0x0, 0xfc7f, 0x80, 0x2, 0x1ab}) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f00000008c0)={0x1, 0x1, 0x0, &(0x7f0000000840)=[{0x0}], 0x0}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000380)={0x8ac, r5, 'id1\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1f01, &(0x7f0000000480)={0x0, 0xaebb, 0x2, 0xfdfffffe, 0x40000dc}) 5.71307631s ago: executing program 3 (id=1164): r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) 5.585735022s ago: executing program 3 (id=1165): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9) r0 = getpid() ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(0xffffffffffffffff, 0x8b22, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r5, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f00000000c0)={0x4, 0x0, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a0300000000000000"], 0x0, 0x56}, 0x28) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x7, @empty}}, 0x0, 0x7fc, 0x0, 0x0, 0x8a, 0x0, 0x3}, 0x9c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 4.808897366s ago: executing program 4 (id=1166): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000100000080000000", @ANYRES32=r4, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ffe4306844ebe99b554e0fe9ad", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000000000000000000eec50a36ba312c683a03ff00000085d6fc3fff00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 4.729852496s ago: executing program 1 (id=1167): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @default, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdc, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open$dir(&(0x7f0000000400)='./file0\x00', 0x60c180, 0xa) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f00000004c0), 0x48, 0x820b, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 4.373592642s ago: executing program 3 (id=1168): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000000c0)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0xf0) sendto$inet6(r1, 0x0, 0x0, 0x400c804, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffec1, @local, 0xffff8003}, 0x1c) socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x1b6e, &(0x7f00000003c0)={0x0, 0xffd1, 0x10000, 0x2, 0x24d}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616ea7dbce488dbcded3e94691a333c8512f65f2906c9b46d803f05235ae7505006600d6a49617e31da76238390520eaf610ac108b635b255c9cc73d6f102c4f03eca4c57fcfe83af1d2accec2262fb519492d35f16af03b18e5b1efffe7f38e81ac291335600f5a1f586787c088e59df35d6bbf032e5de86d458b2a318ddad63181292f83e8e265d64daa39ee96c4c5f5e055fc89fdb845d7d5a765246f4cb8d077a5685dc64024", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) 3.905608079s ago: executing program 5 (id=1169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = syz_clone3(&(0x7f0000000540)={0x0, &(0x7f0000000380)=0xffffffffffffffff, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, {0x12}, &(0x7f0000000440)=""/98, 0x62, &(0x7f00000004c0)=""/16, &(0x7f0000000500)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x8}, 0x58) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000001a80)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004cc0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) fstat(0xffffffffffffffff, &(0x7f0000005f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getuid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000005f80)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005fc0)={0x0, 0x0}, &(0x7f0000006000)=0xc) stat(&(0x7f0000006040)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000006100)='./file0\x00', &(0x7f0000006140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getresgid(&(0x7f00000061c0)=0x0, &(0x7f0000006200), &(0x7f0000006240)) r13 = openat$mixer(0xffffffffffffff9c, &(0x7f0000006300), 0x140800, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000006340)={0x69f, 0x200, {r3}, {0x0}, 0x87, 0x401}) getresgid(&(0x7f0000006380)=0x0, &(0x7f00000063c0), &(0x7f0000006400)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006580)={&(0x7f0000001b00)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000005e80)=[{&(0x7f0000001b40)={0x268, 0x2f, 0x800, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x246, 0x9, 0x0, 0x1, [@typed={0xc, 0xb1, 0x0, 0x0, @u64=0x7}, @generic="9ca2edad39db96ed1ab174b52f16e6ab49aae8deaee46b685e826c40db4ff4f67565752fbd3c038b0ecd0ff2d1836f9d95fb49ac541b1f7fe784431cd417d8fc2c202a6baf34579b5ed530702ba443b85d767a72", @generic="f30d317ba5b93028ed78f83252d31560f4959bd6903cd6db651659f6867cf5985a56e27dc16ec3719263a6b961d38bc4b9", @typed={0x4, 0x9f}, @generic="18bbf8dc32a3e340aaf03dbc8193ec1d8b98c59d178c2001941ee7889992bb25bbac38617354958a5b52c0febde75a86153b68bb5c135d995e921e10e3b4e79d4d7e12bfb54f05da4cb9ea5c8c79cccd66a1822afe1fdb6e76a6121e3a9f2149f397202de2fcca5f07ad530a86736e7bffb42811dd37f2a7da429ee8b6e1177f935b9dd0a1271712cb6c567003025ccb869346ee90b6b60a11d1fda7", @typed={0x8, 0x11a, 0x0, 0x0, @fd}, @nested={0x4, 0x15b}, @typed={0xc, 0x131, 0x0, 0x0, @u64=0x5}, @generic="3c1196ae0c00d576357f859327d92c4a743ae441b05cf96c5c0afb18e4dd132863ed91e638aba8370e16b8a68c5a52d367122ce023331590e29dfb812ab1169b84dd20a1b4fca04ee85f4091348c1234b51b738241bff4cb2bfb1f81f14ac45dcaa5dae4c77c7874ab45f5dc60b291292917635e08f387c22b225cf9c8d7082954c7d823ad9ab44a5cf925ef22cfdbec73d5f1c376a2e00a033afff34e32a22cccd344a53faf8cd9eec9e5197914693fcc3400ac5cd0c64c647398018e24767578d072b466fb9013acd4da8994cf3dbb0b2bf96bd25ab39008020226d651d9202ceb3630166056143ba72a3eb203d08bfbe4dc8da8edb5ea4a"]}, @typed={0x8, 0x10c, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x8d, 0x0, 0x0, @pid=r1}]}, 0x268}, {&(0x7f0000001dc0)={0x224, 0x10, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@typed={0xc, 0x72, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x13e, 0x0, 0x0, @ipv4=@local}, @nested={0x1a5, 0x55, 0x0, 0x1, [@generic="e4479a723f1e5ef5351908666ec4584b8bfda32718da8f9101b202077be04c9c8cb828795e4ab27043392bc8d3627acb29305784b0942e78d0a0518b1450c7c013546dd660656b3812503d39af036fbcffcaf1e806e3e501b420d0ac5f2782099488b4269c03480f256b8a2a8f6e1cf6a567b87237a0c055123200220145c780324b26d6515f54ed3468892609120a7edf066b50fc23ed69125ce7307b39871723cf8ffce1b1f9fbb8d5e68246510208ba48eef85ee2f11689a5a1", @generic="ae0fa02179a0f1401ef530da86f26ac1ad53cff215fbdb12cd533476203fc339f21bbc715a927221d01d8a49a12f30b58264a2a5885c526b39639a7836b742acf7f97f6bcae2317144b7d55780b7d9f93007a8752dd31de7566c0ceec094c1c197c05eb7ddc75a2d6b712efd332db8927cd07aac5add75ff989bcf84cb6055e69630e79db39843a55f5a74ef2242d6d9ad9165ed", @generic="d9d9177d072c9dec412d99d46229f9db8ea51124111998836850d7d06cab62c0504ea5084b5aacfa6a5b8fcc962a2e1517abc48f12264f55a372935476f06585de3943b71982023b7251d6b2e0b2c820c370"]}, @generic="f2ae00e89583f5f771c4a5cf925f7a51830c0e34b4b3c1521272f9188bcb78d609b4dbfbd6518f014754599d5a1938f53b4da938ac80bee891fc185d2d00b2ec98bfd8f5d83b8cf9123cd562e578df66cc195a4f97"]}, 0x224}, {&(0x7f0000002000)={0x180, 0x3c, 0x100, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0x146, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x164, 0xa3, 0x0, 0x1, [@nested={0x4, 0x7}, @generic="712a6f9e70bcc246eb084b7a9491d900607953b1ce0f31866e", @generic="8cb897788a41d46b1fa7c327189579d005dc8ff9e50aac72c092df34142e0e753684bf231adbc2438f7b65e09d3a9f1c6485e8c14d51cbf1174b93f4533206ab2f51a1a4", @nested={0x4, 0xe7}, @generic="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"]}, @generic="b4ca9d"]}, 0x180}, {&(0x7f0000002180)={0x258, 0x3e, 0x0, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0xe9, 0x0, 0x0, @u32=0x5}, @generic="822899eca24529bc959bd76c0d626d1d405229d7bbd2bab36e9a7498782b7acd8f0298de8709c3b9423d770a8856fee218f4", @generic="618fc52b08dd8cc5e434998d2b19ee0597a24c6844883ed278939593a2d9fe36212266dc5b194dd183bd30c2b6eee3e32e0007393c91935cd7d3ed2509c97c1ff6346bb2457600a2dd199cfe165739a9d6792f76588240ee2e9bc6ca35546d157d53696c9acfdb8faccd8748e2ad5bbfe06409b14a804b4987db76ff24d04bf004f5a1453fc35e38939d2cfcf0de5f4a56906eeea8de88cad49a4a51f9b4391bc15cf384ffebdb7c3e0c721066f9db114f21c0ac2aca3ec6953fabf030d9c5bd4a9a", @typed={0x8, 0x124, 0x0, 0x0, @u32=0x9376}, @generic="aa69522499742de1f5772f68c4ed7810d61b192406789b85138f578b6addfd35344a730d10eda93844f8ac27bdeeedf6af4160f5807adf1e712e4d63b6ef04ad728723f0c3b4db1587b9ec4c227138e3cff5766b8eb24e43949d0eda8c3ec1d2a7a0fb23d0aa982b4aed31710e1034d1ecde55a610405e940e17886d433408a43a23f05c4fc1d5a40003700e7d7e7a159a3041876b3d75dd8fc0efaac593170dc6", @generic="c9e0637c5f4d8741f60fb07e6fd8364f06dad4bf0735eca61aeb4ce0343739e05236f2a2491b92ea70e5e6909e51fbf46fd4b22b36f1b8ed89ea5b50bb237bb3ecb59ed2652048b64da954299df149f0fec1f07052b5aebad2aeeb3027c1fb001d96f3c4faa9a156cf9f293b984a94f82c2ec7ed7235ea63acc8a143ae7b626b3cf0af27ccefb4453a378d3234b2babbf49a23153efc51f12504368d12ec446ecd"]}, 0x258}, {&(0x7f0000002400)={0x12cc, 0x2c, 0x800, 0x70bd25, 0x25dfdbfd, "", [@generic="6d20fe470ba94f25b6ec4d742ffebbae31a2ee03306ee918998bd0cef749591502c023d343914bd0f9edd9d4b11c753dc76c464c6cb597bc51f3a92fc4e4606a749600f59d4bc313659acbf71efe8facc4917c6787c4d38a6b87515cfd401883f9caf372e8", @nested={0x11de, 0x88, 0x0, 0x1, [@typed={0x9, 0xeb, 0x0, 0x0, @str='syz0\x00'}, @typed={0x8, 0x6, 0x0, 0x0, @u32=0xfffffff0}, @typed={0x14, 0x25, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="7d30e67fce53bdecdf7ce14a5469984a35586afdd6e29c8dad664a894a66b9ea4e8844df4f218bc9641702fe488d9bde1078fd2271dfa2eb95ba576eaf532ae1bae26f9808f06bd6f60a4e46c090967432ad37f78588c8a3c0b7914d976eac13769da055b56a113d4130eb80af56d276864c5aeb37c1813feb64e7769a9b2aee5cd60f48cd31c377c3383374ef7036fa814f7e6b74fcc475d151534f2533998e27cf9f20e91f9b5296afae08330fcf298984e60c3ac61aefa927d80e7fadd895d5075c5866a7030e80771707e27cdf2c6625bfc74eeb2d85120d30e0cc8c860f6ae7c66f446dec876ebebb78f06e", @generic="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", @typed={0xb9, 0x38, 0x0, 0x0, @binary="dd8987665caa8f969ffb99f4f88659a9da000472044d88ec0ab4a82454043d66fcb846d2122ae70c3e7db262db2a834fe7d1adfff3a189b8dace15834683a7728ff0a86b5ff2619fa05e4b1be52108d25cf1c39269f3ed340fc1037f156d65836641052db3499eb04379ed7f7e4dd32af516cd49f4c0040dfe930fd30f058c9d8c7da819d5cd7341479337bd2ae8c29a6235bf68e718f586097b1fd170c91fd18e67ce55409350b5667d8614eb82d87d00840b6e93"}, @typed={0x8, 0x2b, 0x0, 0x0, @pid=r3}]}, @typed={0x8, 0x41, 0x0, 0x0, @u32=0x94}, @generic="79f2688bacfa0f74818f6cd6a468bc4559ec1bfe5b0303aca041b31cd7affa23b8463413935c910c87a440810e69bb8b6b7afc065cb8f87b17837e67dcb8dd7356bad2c2538393a66bdabb3f2cdf93fe227edce83200e5879f406e5a1d682d99349422a7ff3b22c8737b9f8a6d5c7b"]}, 0x12cc}, {0x0}, {&(0x7f0000004d00)={0x28, 0x20, 0x200, 0x70bd26, 0x25dfdbfb, "", [@typed={0x14, 0x27, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x150}]}, 0x28}], 0x7, &(0x7f0000006440)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, r7}}}, @cred={{0x1c, 0x1, 0x2, {r4, r8}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r3, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [r13, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r14, r15}}}], 0x110}, 0x0) setitimer(0x1, &(0x7f00000065c0)={{}, {0x0, 0x2710}}, &(0x7f0000006600)) syz_usb_connect(0x3, 0x54d, &(0x7f0000006640)={{0x12, 0x1, 0x250, 0x6e, 0x9a, 0x5b, 0xff, 0x830, 0x50, 0x9083, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53b, 0x1, 0x4, 0xfb, 0x20, 0x8, [{{0x9, 0x4, 0x83, 0x6, 0xa, 0xac, 0x73, 0x1, 0xff, [], [{{0x9, 0x5, 0x8, 0x0, 0x197, 0x4, 0x5, 0x9, [@generic={0xb6, 0x1, "486698c028c034d278da7b378634b8b68c096d66668d18a8c64fd116928f8c21fc351a5538d69886661d3ec960ad7e85503b0e061f8a0394021eefde61701bf4dbefa7f143e0e8dbeb82e1b3682e236c2ad2e9747e465ada2cc9067d7bb0db825828a308e0e2abedf58864087e14a046e7bc3d8d41d1fa7bb99100d050d459e0e2a1f71404149690aac40b14bc5357553839fc42c03fbc430c1b1a0af00679f4ce9a26b8025f05b178d5966aed415beeb1a7dd5e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x200}]}}, {{0x9, 0x5, 0x88, 0x4, 0x1a956ed16c8c4c15, 0x5, 0xa0, 0x5a}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0xf, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x6}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x9, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x6}, @generic={0x2a, 0x21, "064839e88e26f795346d4ae05e02deb6a140c0381b234ef21e99c1d8e76ffb357abf312065f734b1"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x3, 0x1, 0x5, [@generic={0xc6, 0x7, "403e84fff0f78006ce7db0eaf755dc33f131d4658493bcccd3ab9f89e0db0c38aef508fc4d7633ddf4613bf4782e2aa1d87cb340a8c6e6544684f78f91bc7f913c8db9ae9705983895f5fb70ec68e52181290927bfd8b2d5734f598bafd91ed80a66a1298a02482ebf8610d24b786cb102b713aa24002f5bc94609fab307970fa29c3cd454ba58bdda56ae019d6ccc9b20f65598fef6de5abc0e679f789723b6d97dd2ff623f8c9f16e96ae4e73bfa4f4428689fa927ce1302f181904c49dbb6d81f6cae"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x9, 0xb, 0x2, [@generic={0x29, 0x15ed7580b15a674a, "f952a1c714f38decfc989c8da0195fe7a1ab9c5a197b637afc0742487186df7d30b4a947f14e45"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x0, 0x5, 0xf5, [@generic={0xf7, 0xf, "e307dda2ff76f748cf8463dbd5bf737f640af36f608fe7960bb14d2b6245bb0d9cb7110d2b60e9b2475697c95f8771bca9fbe59b0d4afeb650b918469bd0c134a2fd452fe62b370eeb6683b64b456acf7aeeb022733bdb532c5cc89c8a2860544b955e1ce2b2f42a34d0916d136b8afd78916369dd2fd9eff8ae09a48675b1ba11c6ca37faf05712f878e16cb90e2e4e72af6e3c1ebfcfd3afb7b8367db5c724a8731eb3ba9ddfcdf5c0bec76d296c7b0373a2fd0b388eb94cd27e5dac2015455fcfba81086f979efa6b7da30f867f9cb4875decb5b4eb3ea6322c02507c30ffadd6136522f3285051244aeda6a3808005ead69529"}, @generic={0x52, 0x22, "60df7b2eb2c05f1157ede77ee3b18a36df8019c70dc285544db6051905dc37cd154417834fadbde5fff9f98a48f18caf6236b28ea3868fbd15573f8e7b48c99ec50c057876cf913a962bd9c388680d4f"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0x6, 0x81, 0x7}}, {{0x9, 0x5, 0xa, 0x2, 0x10, 0x46, 0xd, 0x9, [@generic={0xc1, 0xd, "3f865047cd3bcf7ea97a998063322f7ece78b5461972d66bbf5a5473520a817c664d7562bc3a4c9a90e0b51c0528635a5d30b065abb025dd02acfb2fab8354d2ffe6a4ebec56d3984aafa50caf2fa66bc7894f6e4501351a5d0a4c6eff4331369b1d7aaf22cd95d050391ae41f3a51228f55077c2363b5822ec916be8f1c027428056127264a7ad37a7c4e18d6f9e00069b85edf6ec9197f150c1e7f3e9c2395b4045605d74d3f8cd6add4d41444d2970532b815eb15efdb526c7788b4fc8b"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0xf0, 0x5d, 0x3, [@generic={0xda, 0x23, "4820e9fa9c10465c1efe9155b40105e6b3a81fb142e8f7d45e95e912fdc11f2e6b2517544007e5a2b1486e6c7c7fdc26350160c5dfeb33ad1d2ff0ecf0216d9f32335be47cd4a65617db83302756e76f1c2bfdf421a703a1f4bdc60ddf3e9aa8d3e6a63271e166941a9c37e19443fe4e4b7ab668b33afea155d903a80e3d19b1edd29488013623eba4544ed7178ff0c2558e17a744509b3dc5c48d60400bdcaf87018b7637d3d57cd22fa90dd0bfc445e6501e8cd49772ad675e556e13cbac6f4bac175d9aaf3e49f9a819264a2d279e63d7c4547854954a"}]}}]}}]}}]}}, &(0x7f0000007100)={0xa, &(0x7f0000006bc0)={0xa, 0x6, 0x310, 0x3, 0x0, 0xe, 0x8}, 0xa2, &(0x7f0000006c00)={0x5, 0xf, 0xa2, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x2, 0x7, 0xfffc}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xf, 0x2, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "da4720e515b37401c951cc1ce97b5264"}, @generic={0x6a, 0x10, 0x0, "b01d3c3a94da41309b84c6b2f7c56ee674304b0ab3eff9718a76bef0a8798c56ece2709569d4a0ed7eaed0127df8c61337cce66a7c70ce8f49c181138470482607da0cb8a052f2cab19452db8a52354434ad6db3f59bf575f20bf030b9b134fdba22bb27a77cb9"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xa7, 0x2, 0x2, 0xe}]}, 0xa, [{0x4, &(0x7f0000006cc0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000006d00)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000006d40)=@lang_id={0x4, 0x3, 0x3411}}, {0x4, &(0x7f0000006d80)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000006dc0)=@lang_id={0x4}}, {0x41, &(0x7f0000006e00)=@string={0x41, 0x3, "7877dac761abe608ede85385e65274c6268842a6406cfce2fd87face0e81aea1a45bd9315da33a80fc1ce6ce72fa7273da025f1fd1354e9e8d319418e249c4"}}, {0xe1, &(0x7f0000006e80)=@string={0xe1, 0x3, "940d3d6b94d0b11a89c1a65b1f5893bae7280b8896006146c526c1639859926c97e49d8aad669fe51f295d27206849d90c6f4b95ec5cce90e096f4c81346b1430d6afe8af6487f598cf222ff9387ab60ba7f6b2e2045b8cb2da3db8162cf7cd522f2077cc2f8b6502a65dcb00ea8b261035530a69903a058666e9b884f4244b39a68d8f776ddd746feaa663aa593b87799bd02cdc6ef9961defabd80c984c933ee3a5839db1886074436f90ef16b7c6772b6215bbfb1853dc2fb2281713dd3fc500736d08b5c350c5169ede194dfd530357577937839946ae28102b20f1f31"}}, {0xde, &(0x7f0000006f80)=@string={0xde, 0x3, "81605ebe2387d543eb61c9748d09163c047fc976eb4a62a19d18d7ae05cd306011d679d2b1d0e13a086d8260bfd3e1a5a80d978550b3c49ae9c142fbde7ce605abb73a0edf22f8853897fd20ba02f1dd1e106111a396784b986b9670fdb597e777a43000f8cdf4341536eaa11d548ae49faabd8023ddbf3ee90fd9106aa93d236f7d10427c4adf16153d10ac70a7b9ba7388669dc55ab1e664fda224ec7a13214e1290f64449df30f124e332314838eb756fa4eb7dcb90d0b6156247c15b3e15513637c068b90675201c7794e4828d34c42e4ecb3cf1a3ad038c61f2"}}, {0x4, &(0x7f0000007080)=@lang_id={0x4, 0x3, 0x459}}, {0x2f, &(0x7f00000070c0)=@string={0x2f, 0x3, "4a28edf7a791492fc82d1bf22c378c6d2abf08d084f4e98a795a458f8df13f5fe227f436542417a25c1b70fe50"}}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000071c0)={0x3ff, 0x0, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000007200)={r16}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007440)={&(0x7f0000007240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa1, 0xa1, 0xc, [@enum64={0xb, 0x2, 0x0, 0x13, 0x0, 0x0, [{0xa, 0xefd0, 0x9}, {0x9, 0x3, 0x10001}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa}, @datasec={0x3, 0x4, 0x0, 0xf, 0x1, [{0x5, 0x0, 0x8001}, {0x5, 0x6, 0xfffffff0}, {0x3, 0xd, 0x1}, {0x2, 0x9}], 'a'}, @union={0x9, 0x3, 0x0, 0x5, 0x0, 0x200, [{0x10, 0x4, 0x7fff}, {0xe, 0x2, 0x6}, {0x3, 0x4, 0x240}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x5f, 0x2e, 0x5f, 0x9e9608da34803fc9, 0x15ea916d42ac2b21, 0x0, 0x6f]}}, &(0x7f0000007340)=""/223, 0xc8, 0xdf, 0x1, 0x7fff}, 0x28) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x17) 3.78018208s ago: executing program 3 (id=1170): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 3.525076731s ago: executing program 0 (id=1172): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000000c0)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0xf0) sendto$inet6(r1, 0x0, 0x0, 0x400c804, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffec1, @local, 0xffff8003}, 0x1c) socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x1b6e, &(0x7f00000003c0)={0x0, 0xffd1, 0x10000, 0x2, 0x24d}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616ea7dbce488dbcded3e94691a333c8512f65f2906c9b46d803f05235ae7505006600d6a49617e31da76238390520eaf610ac108b635b255c9cc73d6f102c4f03eca4c57fcfe83af1d2accec2262fb519492d35f16af03b18e5b1efffe7f38e81ac291335600f5a1f586787c088e59df35d6bbf032e5de86d458b2a318ddad63181292f83e8e265d64daa39ee96c4c5f5e055fc89fdb845d7d5a765246f4cb8d077a5685dc64024", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) 2.943717839s ago: executing program 0 (id=1173): fsopen(&(0x7f0000000280)='xfs\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2f8c82, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) socket(0x10, 0x4, 0x2) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x238, 0x0, 0xffffffff, 0x2e0, 0x238, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000008c0)={0x1, 0x1, 0x0, &(0x7f0000000840)=[{0x0}], 0x0}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000380)={0x8ac, 0xffffffffffffffff, 'id1\x00'}) accept4(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000200)=0xffffffffffffffd1, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x3c) 2.552712696s ago: executing program 1 (id=1174): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0xc7f}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000005c0)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x10005}], 0x1, 0x40000122, 0x0) 2.462627272s ago: executing program 0 (id=1175): r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) 2.330871304s ago: executing program 0 (id=1176): fsopen(&(0x7f0000000280)='xfs\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2f8c82, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0076303a00000000000000000000000000f2ff"}) r1 = syz_open_pts(r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r2, @ANYBLOB="0200"/20, @ANYBLOB, @ANYRES32=r1, @ANYRES16=r0], 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) socket(0x10, 0x4, 0x2) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x238, 0x0, 0xffffffff, 0x2e0, 0x238, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) r5 = io_uring_setup(0x4b55, &(0x7f00000005c0)={0x0, 0xfc7f, 0x80, 0x2, 0x1ab}) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f00000008c0)={0x1, 0x1, 0x0, &(0x7f0000000840)=[{0x0}], 0x0}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000380)={0x8ac, r5, 'id1\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1f01, &(0x7f0000000480)={0x0, 0xaebb, 0x2, 0xfdfffffe, 0x40000dc}) 2.275316443s ago: executing program 1 (id=1177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f00000003c0)={0x0, 0x0, {0xa7c, 0x3, 0x1, 0xfff}}) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r6) r8 = open(&(0x7f0000000300)='./file0\x00', 0x400, 0x0) fcntl$setlease(r8, 0x400, 0x1) r9 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r9, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000004"], 0x48}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000001000)={0x1414, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}]}, @TIPC_NLA_NODE={0x1074, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "9afd3407158ad7debfe6f80cd6988fd1b68e32135b874eb4bc"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "d1d1be5cc833a2ddccf1804e560677ad886a87639254"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x1e4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x68, 0x3, "89753be0560774017b0abfcdc1e3dbb08e4f5ea11e4a010808c7499ae5f68aa0c0636b97f17248ee21821aaf436ad2b7f66534144d8f598a91bdc10752ddafb6100bef6acb8471ee44bd18b09df0abc814c5f2d9da038fe3ef47f55e61f93a9cd7cc5143"}, @TIPC_NLA_NODE_ID={0xc2, 0x3, "080db7ff9b43c2e52d2044cb3c99f09f849553cea8ffc877fd3c2a0df4d0166ad1a297fdffbcc156a3b59c4c589e562077ee49d6f1f51aa23e9b26291e591c434ab2498d22831f11dffff49a2d0bab84aaafb27214a3235939bcdbb1f44fd9b66a3cf02eb8ca6fdf22d4912ea5c75e5869ce0b5d624c4591396d618075f379b196008933c960dadd773487069e4d1e12764065d934e241d3f0896f72147e4d552519007a86aaa28332b968bd1102857e1dfa9c3a12ea908621be1667f33d"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa1, 0x3, "56ac7d3a64285c2a941c0e50833e30b748e70e2837626832aaa458668329ac1823d319ec1809a9dc0d203fea4cc2c96029674d00ab95d8fb927646add153c121473ff50f6610bcf6814ed533ad9bfc67da03aebef314c7316dd1358a9529f8a18f45ca01ed3eaf7a31574bb3f8c7d84d5cd4d40f06f0b23f8b35fb603f1b210477c2dc55f95e32694cbbeb02cf6e9e673254ad4fb206319ceebf8e29ec"}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc, 0x3, "b3f1c547e6c7e187"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}]}, 0x1414}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) 2.273257188s ago: executing program 4 (id=1178): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, 0x5, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xe83df000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010300000000ffffffff1100000008000300", @ANYRES32=0x0, @ANYBLOB="2b2c8cbf9527911da7e7705ecdfdc4087d8514f4e2f2f3934f5c6a45d568ea75adbafdcdb1deb7bf207856215342a7e00381102f874b9c4c5cfecb52be4bb4711f2fe0f4a6ec91b9650a18001895baf6c152fd0ddb3a0fbca7c0639190c0bd43c06f8b33a4"], 0x1c}}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x41) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r7, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r7, 0x60}], 0x1, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.350313679s ago: executing program 0 (id=1179): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002d00), 0x2802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f000038b000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab", 0x1b, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1.050466978s ago: executing program 1 (id=1180): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x9, 0x1, 0x3) close_range(r3, 0xffffffffffffffff, 0x0) epoll_create1(0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000001080)={0xc, {"a2e3ad21ed0d30f91b5d310987f70e06d038e7ff7fc6e5539b3263298b089b0708356e090890e0878f0e1ac6e7049b3350959bfc9b240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31300d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a204f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b54b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5e3728ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000004000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5182cff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec6800068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000681e6756", 0x1000}}, 0x1006) 853.758193ms ago: executing program 3 (id=1181): socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x1) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x0, r6, 0x1, &(0x7f0000000140)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) 758.912146ms ago: executing program 5 (id=1182): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000040)=0xce, 0x4) getsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x103042, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000000)=0x3) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000600)=0x9) recvmmsg(r5, 0x0, 0x0, 0x20102, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r7 = userfaultfd(0x1) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f00000000c0), 0x4) poll(&(0x7f0000000000)=[{r7, 0x260}], 0x1, 0x3) 298.041393ms ago: executing program 5 (id=1183): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000100000080000000", @ANYRES32=r4, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ffe4306844ebe99b554e0fe9ad", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000000000000000000eec50a36ba312c683a03ff00000085d6fc3fff00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 0s ago: executing program 0 (id=1184): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x8d) close(r4) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r7 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB="142000003e0007010300000000000000017c00000400428011000100686d61d31acb1b323234290100000000e81f02"], 0x2014}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) kernel console output (not intermixed with test programs): 878:1114): avc: denied { read } for pid=8998 comm="syz.5.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 306.490178][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 306.496330][ T30] audit: type=1400 audit(1771223135.028:1115): avc: denied { create } for pid=9001 comm="syz.0.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 306.800132][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.800924][ T30] audit: type=1400 audit(1771223135.218:1116): avc: denied { create } for pid=9004 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 306.810707][ T5917] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.862563][ T5917] usb 5-1: config 0 interface 0 has no altsetting 0 [ 306.869332][ T5917] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 306.879033][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.933428][ T30] audit: type=1400 audit(1771223135.238:1117): avc: denied { setopt } for pid=9004 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 307.008349][ T5917] usb 5-1: config 0 descriptor?? [ 307.028418][ T30] audit: type=1400 audit(1771223135.268:1118): avc: denied { sqpoll } for pid=9004 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 307.045990][ T5917] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 307.408453][ T9032] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 307.952510][ T9029] netlink: 'syz.1.742': attribute type 2 has an invalid length. [ 307.960238][ T9029] netlink: 'syz.1.742': attribute type 1 has an invalid length. [ 308.468503][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.745'. [ 309.167609][ T24] usb 5-1: USB disconnect, device number 16 [ 310.670438][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 310.670453][ T30] audit: type=1400 audit(1771223139.348:1129): avc: denied { map_read map_write } for pid=9084 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 311.549770][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.563221][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.254611][ T5816] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 312.259741][ T30] audit: type=1400 audit(1771223140.918:1130): avc: denied { write } for pid=9108 comm="syz.0.754" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 313.153599][ T9122] syzkaller0: entered promiscuous mode [ 313.162100][ T9122] syzkaller0: entered allmulticast mode [ 313.551478][ T30] audit: type=1400 audit(1771223142.188:1131): avc: denied { ioctl } for pid=9123 comm="syz.0.758" path="socket:[21180]" dev="sockfs" ino=21180 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 313.616286][ T30] audit: type=1400 audit(1771223142.188:1132): avc: denied { ioctl } for pid=9123 comm="syz.0.758" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=929 ioctlcmd=0x6f2c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 313.664169][ T30] audit: type=1400 audit(1771223142.188:1133): avc: denied { bind } for pid=9123 comm="syz.0.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 313.693973][ T30] audit: type=1400 audit(1771223142.188:1134): avc: denied { name_bind } for pid=9123 comm="syz.0.758" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 313.842523][ T30] audit: type=1400 audit(1771223142.188:1135): avc: denied { node_bind } for pid=9123 comm="syz.0.758" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 314.062932][ T9138] netlink: 24 bytes leftover after parsing attributes in process `syz.5.760'. [ 314.071836][ T9138] netlink: 24 bytes leftover after parsing attributes in process `syz.5.760'. [ 314.745661][ T30] audit: type=1400 audit(1771223143.008:1136): avc: denied { mount } for pid=9139 comm="syz.4.762" name="/" dev="autofs" ino=22485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 314.819954][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 314.870814][ T30] audit: type=1400 audit(1771223143.088:1137): avc: denied { create } for pid=9139 comm="syz.4.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 314.901626][ T30] audit: type=1400 audit(1771223143.088:1138): avc: denied { connect } for pid=9139 comm="syz.4.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 315.565105][ T24] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 315.576103][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.585448][ T24] usb 4-1: Product: syz [ 315.598776][ T24] usb 4-1: Manufacturer: syz [ 315.613250][ T24] usb 4-1: SerialNumber: syz [ 315.638329][ T24] usb 4-1: config 0 descriptor?? [ 315.654185][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 315.665543][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 315.685452][ T24] f81232 4-1:0.0: f81534a converter detected [ 315.720141][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 315.720153][ T30] audit: type=1404 audit(1771223144.398:1150): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 315.812040][ T30] audit: type=1400 audit(1771223144.478:1151): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.876739][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.952842][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.982770][ T30] audit: type=1400 audit(1771223144.488:1152): avc: denied { open } for pid=5805 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.063785][ T24] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 316.077614][ T30] audit: type=1400 audit(1771223144.488:1153): avc: denied { ioctl } for pid=5805 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.148274][ T24] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 316.166849][ T30] audit: type=1400 audit(1771223144.548:1154): avc: denied { read write } for pid=9134 comm="syz.3.761" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.229147][ T30] audit: type=1400 audit(1771223144.548:1155): avc: denied { open } for pid=9134 comm="syz.3.761" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.229372][ T24] usb 4-1: USB disconnect, device number 23 [ 316.543061][ T30] audit: type=1400 audit(1771223144.548:1156): avc: denied { ioctl } for pid=9134 comm="syz.3.761" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.588687][ T24] f81232 4-1:0.0: device disconnected [ 316.638645][ T30] audit: type=1400 audit(1771223144.618:1157): avc: denied { create } for pid=9152 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 316.987696][ T30] audit: type=1400 audit(1771223144.628:1158): avc: denied { prog_load } for pid=9152 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 316.992678][ T9167] : entered promiscuous mode [ 317.294740][ T30] audit: type=1400 audit(1771223144.628:1159): avc: denied { bpf } for pid=9152 comm="syz.0.765" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 318.023560][ T9174] netlink: 'syz.3.769': attribute type 2 has an invalid length. [ 318.032038][ T9174] netlink: 'syz.3.769': attribute type 1 has an invalid length. [ 320.848673][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 320.848857][ T30] audit: type=1400 audit(1771223149.518:1198): avc: denied { unmount } for pid=8492 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 320.922959][ T9200] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.923547][ T30] audit: type=1400 audit(1771223149.598:1199): avc: denied { create } for pid=9198 comm="syz.0.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 321.780242][ T30] audit: type=1400 audit(1771223149.598:1200): avc: denied { write } for pid=9198 comm="syz.0.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 321.995623][ T30] audit: type=1400 audit(1771223150.018:1201): avc: denied { create } for pid=9205 comm="syz.5.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 322.196953][ T30] audit: type=1400 audit(1771223150.018:1202): avc: denied { ioctl } for pid=9205 comm="syz.5.778" path="socket:[22576]" dev="sockfs" ino=22576 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 322.303098][ T30] audit: type=1400 audit(1771223150.018:1203): avc: denied { connect } for pid=9205 comm="syz.5.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 322.791176][ T30] audit: type=1400 audit(1771223150.018:1204): avc: denied { write } for pid=9205 comm="syz.5.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 322.880418][ T30] audit: type=1404 audit(1771223150.068:1205): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 322.937016][ T30] audit: type=1400 audit(1771223150.328:1206): avc: denied { execmem } for pid=9198 comm="syz.0.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 323.056992][ T30] audit: type=1400 audit(1771223150.328:1207): avc: denied { create } for pid=9198 comm="syz.0.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 323.187290][ T9226] x_tables: duplicate underflow at hook 1 [ 324.254832][ T9240] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 324.844684][ T792] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 325.039815][ T792] usb 1-1: Using ep0 maxpacket: 16 [ 325.059829][ T792] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 326.033228][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 326.279860][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 326.595386][ T9] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 326.617558][ T9] usb 5-1: config 0 has no interface number 0 [ 326.633141][ T9] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 326.663349][ T9] usb 5-1: config 0 interface 196 has no altsetting 0 [ 326.672817][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 326.688059][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.703759][ T9] usb 5-1: Product: syz [ 326.708443][ T9] usb 5-1: Manufacturer: syz [ 326.713199][ T9] usb 5-1: SerialNumber: syz [ 326.725761][ T9] usb 5-1: config 0 descriptor?? [ 326.732338][ T9256] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 326.849665][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 326.986331][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 326.986360][ T30] audit: type=1400 audit(1771223155.658:1263): avc: denied { create } for pid=9269 comm="syz.3.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 327.012938][ T30] audit: type=1400 audit(1771223155.658:1264): avc: denied { setopt } for pid=9269 comm="syz.3.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 327.035719][ T30] audit: type=1400 audit(1771223155.658:1265): avc: denied { write } for pid=9269 comm="syz.3.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 327.056530][ T10] usb 6-1: config 1 has an invalid interface number: 188 but max is 0 [ 327.064966][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.076286][ T10] usb 6-1: config 1 has no interface number 0 [ 327.084839][ T10] usb 6-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 327.098858][ T10] usb 6-1: config 1 interface 188 has no altsetting 0 [ 327.118518][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 327.128396][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.137964][ T10] usb 6-1: Product: syz [ 327.142586][ T10] usb 6-1: Manufacturer: syz [ 327.147370][ T10] usb 6-1: SerialNumber: syz [ 327.269824][ T792] usb 1-1: string descriptor 0 read error: -71 [ 327.305243][ T30] audit: type=1400 audit(1771223155.958:1266): avc: denied { create } for pid=9273 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 327.335538][ T792] usb 1-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 327.345580][ T30] audit: type=1400 audit(1771223155.968:1267): avc: denied { ioctl } for pid=9273 comm="syz.3.795" path="socket:[22658]" dev="sockfs" ino=22658 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 327.378758][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.390977][ T9256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.413930][ T792] r8152-cfgselector 1-1: Unknown version 0x0000 [ 327.461215][ T9256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.463347][ T792] r8152-cfgselector 1-1: rejected 8 configurations due to insufficient available bus power [ 327.531783][ T9] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 327.533166][ T30] audit: type=1400 audit(1771223155.968:1268): avc: denied { map_create } for pid=9273 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 327.588632][ T792] r8152-cfgselector 1-1: no configuration chosen from 8 choices [ 327.594788][ T10] usb 6-1: unknown interface protocol 0xc1, assuming v1 [ 327.611292][ T792] r8152-cfgselector 1-1: USB disconnect, device number 23 [ 327.617488][ T9] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 327.625153][ T30] audit: type=1400 audit(1771223155.968:1269): avc: denied { bind } for pid=9273 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 327.690770][ T10] usb 6-1: 188:0 : does not exist [ 327.754726][ T30] audit: type=1400 audit(1771223155.968:1270): avc: denied { name_bind } for pid=9273 comm="syz.3.795" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 327.782839][ T9] usb 5-1: USB disconnect, device number 17 [ 327.846731][ T10] usb 6-1: USB disconnect, device number 3 [ 327.861401][ T9] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 327.929642][ T30] audit: type=1400 audit(1771223155.978:1271): avc: denied { node_bind } for pid=9273 comm="syz.3.795" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 328.139693][ T30] audit: type=1400 audit(1771223155.978:1272): avc: denied { map_read map_write } for pid=9273 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 329.179760][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 329.499692][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 329.522607][ T10] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 329.589975][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 329.598056][ T10] usb 2-1: config 0 has no interface number 0 [ 329.700751][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 329.708812][ T10] usb 2-1: config 0 has no interface number 0 [ 329.715746][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 329.724162][ T10] usb 2-1: config 0 has no interface number 0 [ 329.773221][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 330.165285][ T10] usb 2-1: config 0 has no interface number 0 [ 330.183466][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 330.191557][ T10] usb 2-1: config 0 has no interface number 0 [ 330.217261][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 330.236582][ T10] usb 2-1: config 0 has no interface number 0 [ 330.268946][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 330.299120][ T10] usb 2-1: config 0 has no interface number 0 [ 330.326558][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 330.345159][ T10] usb 2-1: config 0 has no interface number 0 [ 330.501452][ T10] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 330.527579][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.196377][ T10] usb 2-1: Product: syz [ 331.200604][ T10] usb 2-1: Manufacturer: syz [ 331.205187][ T10] usb 2-1: SerialNumber: syz [ 331.212528][ T10] usb 2-1: config 0 descriptor?? [ 331.219723][ T10] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 331.423616][ T9324] netlink: 'syz.5.806': attribute type 39 has an invalid length. [ 332.271707][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 332.271722][ T30] audit: type=1400 audit(1771223160.948:1289): avc: denied { append } for pid=9298 comm="syz.1.798" name="cec0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 332.303880][ T9337] netlink: 104 bytes leftover after parsing attributes in process `syz.1.798'. [ 332.329942][ T30] audit: type=1400 audit(1771223160.948:1290): avc: denied { create } for pid=9298 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 332.376357][ T9337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.387890][ T9337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.395948][ T30] audit: type=1400 audit(1771223160.948:1291): avc: denied { write } for pid=9298 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 332.425456][ T30] audit: type=1400 audit(1771223160.948:1292): avc: denied { nlmsg_write } for pid=9298 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 332.607463][ T30] audit: type=1400 audit(1771223160.978:1293): avc: denied { nlmsg_read } for pid=9298 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 332.674222][ T30] audit: type=1400 audit(1771223161.028:1294): avc: denied { create } for pid=9298 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 332.728113][ T9342] o2cb: This node has not been configured. [ 332.733954][ T9342] o2cb: Cluster check failed. Fix errors before retrying. [ 332.741115][ T9342] (syz.4.810,9342,1):user_dlm_register:674 ERROR: status = -22 [ 332.748661][ T9342] (syz.4.810,9342,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 332.820182][ T30] audit: type=1400 audit(1771223161.128:1295): avc: denied { append } for pid=9338 comm="syz.4.810" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 332.915915][ T30] audit: type=1400 audit(1771223161.398:1296): avc: denied { mount } for pid=9338 comm="syz.4.810" name="/" dev="ocfs2_dlmfs" ino=22815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 333.177796][ T30] audit: type=1400 audit(1771223161.398:1297): avc: denied { add_name } for pid=9338 comm="syz.4.810" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.259697][ T5889] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 333.282291][ T30] audit: type=1400 audit(1771223161.398:1298): avc: denied { create } for pid=9338 comm="syz.4.810" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 333.480069][ T5889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.568139][ T5889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.699295][ T9349] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 333.976613][ T5889] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 333.989473][ T10] etas_es58x 2-1:0.2: could not retrieve the product info string [ 334.049685][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 334.073939][ T5889] usb 1-1: SerialNumber: syz [ 334.089635][ T10] usb 2-1: USB disconnect, device number 19 [ 334.110534][ T10] etas_es58x 2-1:0.2: Disconnecting syz syz [ 335.171831][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.814'. [ 335.180824][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.814'. [ 336.200096][ T5889] usb 1-1: can't set config #1, error -71 [ 336.222031][ T5889] usb 1-1: USB disconnect, device number 24 [ 336.303892][ T9381] overlay: Unknown parameter 'audit' [ 336.430277][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 336.437942][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 336.445637][ T9387] xt_TPROXY: Can be used only with -p tcp or -p udp [ 336.727095][ T9381] ceph: No mds server is up or the cluster is laggy [ 336.730769][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 336.890023][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 337.083154][ T9401] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 337.326837][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 337.326850][ T30] audit: type=1400 audit(1771223165.998:1320): avc: denied { remove_name } for pid=9397 comm="rm" name="resolv.conf.can1.link" dev="tmpfs" ino=5239 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.708435][ T30] audit: type=1400 audit(1771223166.048:1321): avc: denied { unlink } for pid=9397 comm="rm" name="resolv.conf.can1.link" dev="tmpfs" ino=5239 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 337.833425][ T30] audit: type=1400 audit(1771223166.238:1322): avc: denied { setopt } for pid=9406 comm="syz.5.821" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 337.871170][ T30] audit: type=1400 audit(1771223166.448:1323): avc: denied { create } for pid=9411 comm="syz.1.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 337.925644][ T9413] lo: entered allmulticast mode [ 338.009218][ T30] audit: type=1400 audit(1771223166.448:1324): avc: denied { connect } for pid=9411 comm="syz.1.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 338.029908][ T9419] FAULT_INJECTION: forcing a failure. [ 338.029908][ T9419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.053892][ T9419] CPU: 1 UID: 0 PID: 9419 Comm: syz.4.826 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.053909][ T9419] Tainted: [L]=SOFTLOCKUP [ 338.053913][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 338.053919][ T9419] Call Trace: [ 338.053924][ T9419] [ 338.053928][ T9419] dump_stack_lvl+0x100/0x190 [ 338.053949][ T9419] should_fail_ex.cold+0x5/0xa [ 338.053964][ T9419] _copy_from_user+0x2e/0xd0 [ 338.053977][ T9419] do_ipv6_setsockopt+0x74d/0x4510 [ 338.053996][ T9419] ? __print_lock_name+0x60/0x80 [ 338.054010][ T9419] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 338.054029][ T9419] ? avc_has_perm_noaudit+0x145/0x3b0 [ 338.054043][ T9419] ? avc_has_perm+0x135/0x1e0 [ 338.054054][ T9419] ? __pfx_avc_has_perm+0x10/0x10 [ 338.054067][ T9419] ? get_pid_task+0x106/0x250 [ 338.054086][ T9419] ? sock_has_perm+0x258/0x2f0 [ 338.054099][ T9419] ? __pfx_sock_has_perm+0x10/0x10 [ 338.054113][ T9419] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 338.054130][ T9419] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 338.054151][ T9419] ? ipv6_setsockopt+0xcb/0x170 [ 338.054166][ T9419] ipv6_setsockopt+0xcb/0x170 [ 338.054183][ T9419] tcp_setsockopt+0xa7/0x100 [ 338.054195][ T9419] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 338.054212][ T9419] do_sock_setsockopt+0xf3/0x1d0 [ 338.054229][ T9419] __sys_setsockopt+0x195/0x220 [ 338.054243][ T9419] __x64_sys_setsockopt+0xbd/0x160 [ 338.054255][ T9419] ? do_syscall_64+0x95/0xf80 [ 338.054268][ T9419] ? lockdep_hardirqs_on+0x78/0x100 [ 338.054282][ T9419] do_syscall_64+0x106/0xf80 [ 338.054294][ T9419] ? clear_bhb_loop+0x40/0x90 [ 338.054308][ T9419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.054319][ T9419] RIP: 0033:0x7f6fd0f9bf79 [ 338.054328][ T9419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.054339][ T9419] RSP: 002b:00007f6fd1ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 338.054349][ T9419] RAX: ffffffffffffffda RBX: 00007f6fd1215fa0 RCX: 00007f6fd0f9bf79 [ 338.054356][ T9419] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 338.054362][ T9419] RBP: 00007f6fd1ee3090 R08: 0000000000000658 R09: 0000000000000000 [ 338.054369][ T9419] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001 [ 338.054375][ T9419] R13: 00007f6fd1216038 R14: 00007f6fd1215fa0 R15: 00007ffea42aa8b8 [ 338.054388][ T9419] [ 338.297354][ T30] audit: type=1400 audit(1771223166.448:1325): avc: denied { shutdown } for pid=9411 comm="syz.1.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 338.373343][ T9406] lo: left allmulticast mode [ 338.641301][ T30] audit: type=1400 audit(1771223167.318:1326): avc: denied { ioctl } for pid=9414 comm="syz.3.824" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 338.867542][ T30] audit: type=1400 audit(1771223167.538:1327): avc: denied { read write } for pid=9431 comm="syz.5.829" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 339.359299][ T30] audit: type=1400 audit(1771223167.538:1328): avc: denied { open } for pid=9431 comm="syz.5.829" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 339.382782][ T30] audit: type=1400 audit(1771223167.538:1329): avc: denied { ioctl } for pid=9431 comm="syz.5.829" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 340.685620][ T5816] Bluetooth: hci0: Unknown advertising packet type: 0x73 [ 340.685664][ T5816] Bluetooth: hci0: Malformed LE Event: 0x0d [ 341.455736][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.837'. [ 342.347178][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 342.347193][ T30] audit: type=1400 audit(1771223171.018:1339): avc: denied { create } for pid=9485 comm="syz.4.839" name=FCFFFFFF scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 342.744848][ T30] audit: type=1400 audit(1771223171.418:1340): avc: denied { unlink } for pid=5803 comm="syz-executor" name=FCFFFFFF dev="tmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 342.922961][ T30] audit: type=1400 audit(1771223171.548:1341): avc: denied { read } for pid=9489 comm="syz.5.840" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 343.059672][ T30] audit: type=1400 audit(1771223171.548:1342): avc: denied { open } for pid=9489 comm="syz.5.840" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 343.279215][ T30] audit: type=1400 audit(1771223171.768:1343): avc: denied { write } for pid=9499 comm="syz.3.844" name="route" dev="proc" ino=4026533089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 343.566005][ T9504] netlink: 'syz.3.844': attribute type 2 has an invalid length. [ 343.573698][ T9504] netlink: 'syz.3.844': attribute type 1 has an invalid length. [ 343.823115][ T9507] syzkaller0: entered promiscuous mode [ 343.828573][ T9507] syzkaller0: entered allmulticast mode [ 344.199726][ T30] audit: type=1400 audit(1771223172.828:1344): avc: denied { bind } for pid=9513 comm="syz.4.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 344.615660][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'. [ 344.706092][ T30] audit: type=1400 audit(1771223172.858:1345): avc: denied { node_bind } for pid=9513 comm="syz.4.849" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 344.867774][ T30] audit: type=1400 audit(1771223173.538:1346): avc: denied { write } for pid=9513 comm="syz.4.849" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.580989][ T9525] FAULT_INJECTION: forcing a failure. [ 345.580989][ T9525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.594053][ T9525] CPU: 0 UID: 0 PID: 9525 Comm: syz.1.851 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.594070][ T9525] Tainted: [L]=SOFTLOCKUP [ 345.594073][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 345.594080][ T9525] Call Trace: [ 345.594085][ T9525] [ 345.594091][ T9525] dump_stack_lvl+0x100/0x190 [ 345.594121][ T9525] should_fail_ex.cold+0x5/0xa [ 345.594143][ T9525] _copy_from_user+0x2e/0xd0 [ 345.594155][ T9525] copy_msghdr_from_user+0x9f/0x4f0 [ 345.594173][ T9525] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 345.594197][ T9525] ___sys_sendmsg+0x106/0x1e0 [ 345.594215][ T9525] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.594248][ T9525] __sys_sendmsg+0x170/0x220 [ 345.594261][ T9525] ? __pfx___sys_sendmsg+0x10/0x10 [ 345.594283][ T9525] do_syscall_64+0x106/0xf80 [ 345.594297][ T9525] ? clear_bhb_loop+0x40/0x90 [ 345.594310][ T9525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.594322][ T9525] RIP: 0033:0x7fce3c99bf79 [ 345.594331][ T9525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.594341][ T9525] RSP: 002b:00007fce3d900028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.594351][ T9525] RAX: ffffffffffffffda RBX: 00007fce3cc15fa0 RCX: 00007fce3c99bf79 [ 345.594358][ T9525] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 345.594365][ T9525] RBP: 00007fce3d900090 R08: 0000000000000000 R09: 0000000000000000 [ 345.594371][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.594377][ T9525] R13: 00007fce3cc16038 R14: 00007fce3cc15fa0 R15: 00007fff01279418 [ 345.594391][ T9525] [ 346.387354][ T9533] FAULT_INJECTION: forcing a failure. [ 346.387354][ T9533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.401761][ T9533] CPU: 1 UID: 0 PID: 9533 Comm: syz.1.854 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.401786][ T9533] Tainted: [L]=SOFTLOCKUP [ 346.401792][ T9533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 346.401801][ T9533] Call Trace: [ 346.401807][ T9533] [ 346.401813][ T9533] dump_stack_lvl+0x100/0x190 [ 346.401835][ T9533] should_fail_ex.cold+0x5/0xa [ 346.401849][ T9533] _copy_from_user+0x2e/0xd0 [ 346.401862][ T9533] __sys_bpf+0x243/0x4b90 [ 346.401875][ T9533] ? __pfx___sys_bpf+0x10/0x10 [ 346.401883][ T9533] ? proc_fail_nth_write+0x9f/0x220 [ 346.401895][ T9533] ? find_held_lock+0x2b/0x80 [ 346.401911][ T9533] ? find_held_lock+0x2b/0x80 [ 346.401924][ T9533] ? ksys_write+0x190/0x250 [ 346.401946][ T9533] ? __mutex_unlock_slowpath+0x15c/0x790 [ 346.401961][ T9533] ? __fget_files+0x215/0x3d0 [ 346.401985][ T9533] ? fput+0x79/0x100 [ 346.401995][ T9533] ? ksys_write+0x1ac/0x250 [ 346.402009][ T9533] ? __pfx_ksys_write+0x10/0x10 [ 346.402026][ T9533] __x64_sys_bpf+0x7b/0xc0 [ 346.402036][ T9533] ? lockdep_hardirqs_on+0x78/0x100 [ 346.402050][ T9533] do_syscall_64+0x106/0xf80 [ 346.402062][ T9533] ? clear_bhb_loop+0x40/0x90 [ 346.402076][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.402087][ T9533] RIP: 0033:0x7fce3c99bf79 [ 346.402096][ T9533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.402107][ T9533] RSP: 002b:00007fce3d900028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.402118][ T9533] RAX: ffffffffffffffda RBX: 00007fce3cc15fa0 RCX: 00007fce3c99bf79 [ 346.402125][ T9533] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 346.402131][ T9533] RBP: 00007fce3d900090 R08: 0000000000000000 R09: 0000000000000000 [ 346.402138][ T9533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.402144][ T9533] R13: 00007fce3cc16038 R14: 00007fce3cc15fa0 R15: 00007fff01279418 [ 346.402158][ T9533] [ 346.807235][ T9462] syz.0.834 (9462): drop_caches: 3 [ 346.902889][ T9539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.853'. [ 346.913008][ T9539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.853'. [ 347.114749][ T30] audit: type=1400 audit(1771223175.788:1347): avc: denied { sys_module } for pid=9544 comm="syz.1.859" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 347.150509][ T30] audit: type=1400 audit(1771223175.788:1348): avc: denied { module_request } for pid=9544 comm="syz.1.859" kmod="tty-ldisc-24" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 347.986004][ T9555] kvm_intel: kvm [9554]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3 [ 348.001389][ T9555] kvm_intel: kvm [9554]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 348.023586][ T9555] kvm_intel: kvm [9554]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 348.051370][ T9555] kvm_intel: kvm [9554]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 348.081219][ T9555] kvm_intel: kvm [9554]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 348.129454][ T9555] kvm_intel: kvm [9554]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 348.269875][ T9555] kvm_intel: kvm [9554]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 348.299986][ T9555] kvm_intel: kvm [9554]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 348.510439][ T9555] kvm_intel: kvm [9554]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 348.540881][ T9555] kvm_intel: kvm [9554]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 348.692813][ T9565] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 349.289791][ T792] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 349.309470][ T30] audit: type=1400 audit(1771223177.978:1349): avc: denied { bind } for pid=9571 comm="syz.1.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 349.348121][ T30] audit: type=1400 audit(1771223178.018:1350): avc: denied { create } for pid=9571 comm="syz.1.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.459682][ T792] usb 4-1: Using ep0 maxpacket: 32 [ 349.615000][ T792] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 349.628131][ T792] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 349.649026][ T9578] netlink: 20 bytes leftover after parsing attributes in process `syz.5.867'. [ 349.658172][ T792] usb 4-1: config 0 has no interface number 0 [ 349.676089][ T30] audit: type=1400 audit(1771223178.018:1351): avc: denied { setopt } for pid=9571 comm="syz.1.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.705594][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.867'. [ 349.741799][ T9581] FAULT_INJECTION: forcing a failure. [ 349.741799][ T9581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.867213][ T9581] CPU: 0 UID: 0 PID: 9581 Comm: syz.0.869 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.867239][ T9581] Tainted: [L]=SOFTLOCKUP [ 349.867245][ T9581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.867254][ T9581] Call Trace: [ 349.867260][ T9581] [ 349.867266][ T9581] dump_stack_lvl+0x100/0x190 [ 349.867298][ T9581] should_fail_ex.cold+0x5/0xa [ 349.867321][ T9581] _copy_from_user+0x2e/0xd0 [ 349.867344][ T9581] __sys_bpf+0x243/0x4b90 [ 349.867365][ T9581] ? __pfx___sys_bpf+0x10/0x10 [ 349.867379][ T9581] ? finish_task_switch.isra.0+0x200/0xb80 [ 349.867404][ T9581] ? rcu_is_watching+0x12/0xc0 [ 349.867423][ T9581] ? finish_task_switch.isra.0+0x205/0xb80 [ 349.867445][ T9581] ? lockdep_hardirqs_on+0x78/0x100 [ 349.867466][ T9581] ? finish_task_switch.isra.0+0x205/0xb80 [ 349.867489][ T9581] ? rcu_is_watching+0x12/0xc0 [ 349.867507][ T9581] ? trace_sched_exit_tp+0x13a/0x180 [ 349.867532][ T9581] ? __schedule+0x1000/0x60e0 [ 349.867569][ T9581] ? fput+0x79/0x100 [ 349.867587][ T9581] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 349.867613][ T9581] ? rcu_is_watching+0x12/0xc0 [ 349.867636][ T9581] __x64_sys_bpf+0x7b/0xc0 [ 349.867656][ T9581] ? lockdep_hardirqs_on+0x78/0x100 [ 349.867677][ T9581] do_syscall_64+0x106/0xf80 [ 349.867696][ T9581] ? clear_bhb_loop+0x40/0x90 [ 349.867717][ T9581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.867734][ T9581] RIP: 0033:0x7f5bd039bf79 [ 349.867749][ T9581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.867765][ T9581] RSP: 002b:00007f5bd1229028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 349.867783][ T9581] RAX: ffffffffffffffda RBX: 00007f5bd0615fa0 RCX: 00007f5bd039bf79 [ 349.867794][ T9581] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 349.867805][ T9581] RBP: 00007f5bd1229090 R08: 0000000000000000 R09: 0000000000000000 [ 349.867815][ T9581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.867826][ T9581] R13: 00007f5bd0616038 R14: 00007f5bd0615fa0 R15: 00007ffe25308fd8 [ 349.867850][ T9581] [ 349.965500][ T792] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 350.040383][ T30] audit: type=1400 audit(1771223178.378:1352): avc: denied { create } for pid=9574 comm="syz.5.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 350.077032][ T9587] pimreg: entered allmulticast mode [ 350.080057][ T30] audit: type=1400 audit(1771223178.378:1353): avc: denied { write } for pid=9574 comm="syz.5.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 350.230232][ T792] usb 4-1: config 0 has no interface number 0 [ 350.237180][ T792] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 350.245882][ T792] usb 4-1: config 0 has no interface number 0 [ 350.253177][ T792] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 350.261499][ T792] usb 4-1: config 0 has no interface number 0 [ 350.269188][ T792] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 350.529767][ T792] usb 4-1: config 0 has no interface number 0 [ 350.819671][ T792] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 350.837821][ T792] usb 4-1: config 0 has no interface number 0 [ 350.862510][ T792] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 350.876318][ T792] usb 4-1: config 0 has no interface number 0 [ 350.894263][ T792] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 350.905043][ T792] usb 4-1: config 0 has no interface number 0 [ 351.027411][ T9612] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 351.240291][ T792] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 351.259984][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.290208][ T792] usb 4-1: Product: syz [ 351.294422][ T792] usb 4-1: Manufacturer: syz [ 351.299245][ T792] usb 4-1: SerialNumber: syz [ 351.320771][ T792] usb 4-1: config 0 descriptor?? [ 351.339012][ T792] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 351.717941][ T9625] netlink: 104 bytes leftover after parsing attributes in process `syz.3.865'. [ 352.292236][ T9629] FAULT_INJECTION: forcing a failure. [ 352.292236][ T9629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.309723][ T30] audit: type=1400 audit(1771223180.968:1354): avc: denied { shutdown } for pid=9626 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 352.341750][ T9625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.432191][ T9629] CPU: 1 UID: 0 PID: 9629 Comm: syz.0.879 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.432217][ T9629] Tainted: [L]=SOFTLOCKUP [ 352.432223][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 352.432232][ T9629] Call Trace: [ 352.432239][ T9629] [ 352.432248][ T9629] dump_stack_lvl+0x100/0x190 [ 352.432281][ T9629] should_fail_ex.cold+0x5/0xa [ 352.432304][ T9629] _copy_from_user+0x2e/0xd0 [ 352.432324][ T9629] do_sys_poll+0x345/0xeb0 [ 352.432349][ T9629] ? is_bpf_text_address+0x94/0x1a0 [ 352.432373][ T9629] ? kernel_text_address+0x8d/0x100 [ 352.432391][ T9629] ? unwind_get_return_address+0x59/0xa0 [ 352.432413][ T9629] ? arch_stack_walk+0xa6/0xf0 [ 352.432433][ T9629] ? __pfx_do_sys_poll+0x10/0x10 [ 352.432481][ T9629] ? __lock_acquire+0x4a5/0x2630 [ 352.432550][ T9629] ? ktime_get_ts64+0x2d2/0x3f0 [ 352.432575][ T9629] ? read_tsc+0x9/0x20 [ 352.432597][ T9629] ? ktime_get_ts64+0x256/0x3f0 [ 352.432622][ T9629] ? poll_select_set_timeout+0xcc/0x160 [ 352.432656][ T9629] __x64_sys_poll+0x1b3/0x420 [ 352.432681][ T9629] ? __pfx___x64_sys_poll+0x10/0x10 [ 352.432713][ T9629] do_syscall_64+0x106/0xf80 [ 352.432733][ T9629] ? clear_bhb_loop+0x40/0x90 [ 352.432754][ T9629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.432772][ T9629] RIP: 0033:0x7f5bd039bf79 [ 352.432786][ T9629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.432802][ T9629] RSP: 002b:00007f5bd1229028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 352.432818][ T9629] RAX: ffffffffffffffda RBX: 00007f5bd0615fa0 RCX: 00007f5bd039bf79 [ 352.432829][ T9629] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 352.432839][ T9629] RBP: 00007f5bd1229090 R08: 0000000000000000 R09: 0000000000000000 [ 352.432849][ T9629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.432859][ T9629] R13: 00007f5bd0616038 R14: 00007f5bd0615fa0 R15: 00007ffe25308fd8 [ 352.432882][ T9629] [ 352.653723][ T9625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.703503][ T30] audit: type=1400 audit(1771223181.378:1355): avc: denied { unlink } for pid=9633 comm="syz.4.880" name="#d" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 352.726094][ T9634] overlayfs: failed to set uuid (183/file1, err=-1); falling back to uuid=null. [ 352.755826][ T9634] overlayfs: failed to verify upper root origin [ 353.690294][ T9643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.171628][ T792] etas_es58x 4-1:0.2: could not retrieve the product info string [ 354.374425][ T792] usb 4-1: USB disconnect, device number 24 [ 354.451045][ T792] etas_es58x 4-1:0.2: Disconnecting syz syz [ 355.418198][ T9674] lo: entered allmulticast mode [ 355.620743][ T9678] FAULT_INJECTION: forcing a failure. [ 355.620743][ T9678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.656004][ T9678] CPU: 1 UID: 0 PID: 9678 Comm: syz.3.890 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.656028][ T9678] Tainted: [L]=SOFTLOCKUP [ 355.656032][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 355.656039][ T9678] Call Trace: [ 355.656043][ T9678] [ 355.656047][ T9678] dump_stack_lvl+0x100/0x190 [ 355.656068][ T9678] should_fail_ex.cold+0x5/0xa [ 355.656082][ T9678] _copy_from_user+0x2e/0xd0 [ 355.656095][ T9678] copy_msghdr_from_user+0x9f/0x4f0 [ 355.656113][ T9678] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 355.656137][ T9678] ___sys_sendmsg+0x106/0x1e0 [ 355.656154][ T9678] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.656187][ T9678] __sys_sendmsg+0x170/0x220 [ 355.656200][ T9678] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.656221][ T9678] do_syscall_64+0x106/0xf80 [ 355.656235][ T9678] ? clear_bhb_loop+0x40/0x90 [ 355.656248][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.656260][ T9678] RIP: 0033:0x7f2441f9bf79 [ 355.656269][ T9678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.656279][ T9678] RSP: 002b:00007f2442e15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.656290][ T9678] RAX: ffffffffffffffda RBX: 00007f2442215fa0 RCX: 00007f2441f9bf79 [ 355.656297][ T9678] RDX: 0000000020004000 RSI: 0000200000000180 RDI: 0000000000000005 [ 355.656303][ T9678] RBP: 00007f2442e15090 R08: 0000000000000000 R09: 0000000000000000 [ 355.656309][ T9678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.656315][ T9678] R13: 00007f2442216038 R14: 00007f2442215fa0 R15: 00007ffcb2f60848 [ 355.656329][ T9678] [ 356.119842][ T9663] lo: left allmulticast mode [ 356.367104][ T30] audit: type=1400 audit(1771223185.038:1356): avc: denied { create } for pid=9683 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 356.397166][ T9684] PKCS7: Unknown OID: [5] 0.0 [ 356.461212][ T9684] PKCS7: Only support pkcs7_signedData type [ 356.604641][ T30] audit: type=1400 audit(1771223185.038:1357): avc: denied { setopt } for pid=9683 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 356.604685][ T30] audit: type=1400 audit(1771223185.138:1358): avc: denied { connect } for pid=9683 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 356.712218][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 357.418932][ T9702] netlink: 24 bytes leftover after parsing attributes in process `syz.5.893'. [ 357.418947][ T9702] netlink: 24 bytes leftover after parsing attributes in process `syz.5.893'. [ 357.761859][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 357.909842][ T30] audit: type=1400 audit(1771223186.538:1359): avc: denied { write } for pid=9709 comm="syz.3.895" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 358.003876][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 358.030019][ T9] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 358.051574][ T9] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 358.115129][ T9719] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 358.238689][ T9] usb 2-1: config 0 has no interface number 0 [ 358.256520][ T9] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 358.275432][ T9] usb 2-1: config 0 has no interface number 0 [ 358.294652][ T9] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 358.314991][ T9] usb 2-1: config 0 has no interface number 0 [ 358.327524][ T9] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 358.336977][ T9] usb 2-1: config 0 has no interface number 0 [ 358.355052][ T9] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 358.379101][ T9] usb 2-1: config 0 has no interface number 0 [ 358.397520][ T9] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 358.415539][ T9] usb 2-1: config 0 has no interface number 0 [ 358.432443][ T9] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 358.459641][ T9] usb 2-1: config 0 has no interface number 0 [ 358.480037][ T9] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 358.498367][ T9] usb 2-1: config 0 has no interface number 0 [ 358.530519][ T9] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 358.564414][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.596644][ T9] usb 2-1: Product: syz [ 358.608997][ T9] usb 2-1: Manufacturer: syz [ 358.625001][ T9] usb 2-1: SerialNumber: syz [ 358.631096][ T9] usb 2-1: config 0 descriptor?? [ 358.640984][ T9] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 359.028717][ T9735] netlink: 104 bytes leftover after parsing attributes in process `syz.1.894'. [ 359.048926][ T9735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.061357][ T9735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.538039][ T9] etas_es58x 2-1:0.2: could not retrieve the product info string [ 360.641749][ T9] usb 2-1: USB disconnect, device number 20 [ 360.727149][ T9] etas_es58x 2-1:0.2: Disconnecting syz syz [ 362.067188][ T9738] syz.4.899 (9738): drop_caches: 3 [ 362.241240][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 362.440600][ T10] usb 4-1: device descriptor read/64, error -71 [ 362.719665][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 362.780129][ T30] audit: type=1400 audit(1771223191.458:1360): avc: denied { ioctl } for pid=9755 comm="syz.0.904" path="socket:[24566]" dev="sockfs" ino=24566 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 362.904955][ T30] audit: type=1400 audit(1771223191.578:1361): avc: denied { connect } for pid=9755 comm="syz.0.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 362.934587][ T30] audit: type=1400 audit(1771223191.598:1362): avc: denied { write } for pid=9755 comm="syz.0.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 363.363069][ T30] audit: type=1404 audit(1771223191.608:1363): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 363.378062][ T30] audit: type=1400 audit(1771223191.678:1364): avc: denied { prog_load } for pid=9759 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 363.397225][ T30] audit: type=1400 audit(1771223191.688:1365): avc: denied { create } for pid=9759 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 363.454858][ T10] usb 4-1: device descriptor read/64, error -71 [ 363.489703][ T30] audit: type=1400 audit(1771223191.688:1366): avc: denied { create } for pid=9759 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 363.550755][ T30] audit: type=1400 audit(1771223191.688:1367): avc: denied { mounton } for pid=9759 comm="syz.4.905" path="/189/file0" dev="tmpfs" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 363.621966][ T10] usb usb4-port1: attempt power cycle [ 363.627405][ T30] audit: type=1400 audit(1771223191.688:1368): avc: denied { create } for pid=9759 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 363.703538][ T30] audit: type=1400 audit(1771223191.698:1369): avc: denied { create } for pid=9759 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 364.187994][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 364.570131][ T10] usb 4-1: device descriptor read/8, error -71 [ 365.080108][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 365.190578][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 365.196224][ T10] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 365.206769][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 365.215089][ T10] usb 4-1: config 0 has no interface number 0 [ 365.222392][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 365.266902][ T10] usb 4-1: config 0 has no interface number 0 [ 365.658613][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 365.705480][ T10] usb 4-1: config 0 has no interface number 0 [ 365.741594][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 365.765486][ T10] usb 4-1: config 0 has no interface number 0 [ 365.786087][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 365.798512][ T10] usb 4-1: config 0 has no interface number 0 [ 365.832118][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 365.869725][ T10] usb 4-1: config 0 has no interface number 0 [ 365.912927][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 365.937057][ T10] usb 4-1: config 0 has no interface number 0 [ 365.969521][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 365.986509][ T10] usb 4-1: config 0 has no interface number 0 [ 366.025278][ T10] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 366.041098][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.069420][ T10] usb 4-1: Product: syz [ 366.094478][ T10] usb 4-1: Manufacturer: syz [ 366.164925][ T10] usb 4-1: SerialNumber: syz [ 366.192092][ T10] usb 4-1: config 0 descriptor?? [ 366.213132][ T10] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 366.523800][ T9807] netlink: 104 bytes leftover after parsing attributes in process `syz.3.911'. [ 366.536721][ T9807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.559952][ T9807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.602339][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 367.434951][ T9823] pimreg: entered allmulticast mode [ 367.611186][ T9829] loop6: detected capacity change from 0 to 8 [ 368.127346][ T9834] FAULT_INJECTION: forcing a failure. [ 368.127346][ T9834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.169688][ T9834] CPU: 0 UID: 0 PID: 9834 Comm: syz.1.925 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.169713][ T9834] Tainted: [L]=SOFTLOCKUP [ 368.169717][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.169724][ T9834] Call Trace: [ 368.169728][ T9834] [ 368.169732][ T9834] dump_stack_lvl+0x100/0x190 [ 368.169753][ T9834] should_fail_ex.cold+0x5/0xa [ 368.169768][ T9834] _copy_from_user+0x2e/0xd0 [ 368.169780][ T9834] copy_msghdr_from_user+0x9f/0x4f0 [ 368.169802][ T9834] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 368.169825][ T9834] ___sys_sendmsg+0x106/0x1e0 [ 368.169843][ T9834] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.169876][ T9834] __sys_sendmsg+0x170/0x220 [ 368.169889][ T9834] ? __pfx___sys_sendmsg+0x10/0x10 [ 368.169910][ T9834] do_syscall_64+0x106/0xf80 [ 368.169924][ T9834] ? clear_bhb_loop+0x40/0x90 [ 368.169937][ T9834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.169948][ T9834] RIP: 0033:0x7fce3c99bf79 [ 368.169957][ T9834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.169968][ T9834] RSP: 002b:00007fce3d900028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.169979][ T9834] RAX: ffffffffffffffda RBX: 00007fce3cc15fa0 RCX: 00007fce3c99bf79 [ 368.169985][ T9834] RDX: 0000000004000840 RSI: 0000200000000040 RDI: 0000000000000004 [ 368.169992][ T9834] RBP: 00007fce3d900090 R08: 0000000000000000 R09: 0000000000000000 [ 368.169998][ T9834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.170004][ T9834] R13: 00007fce3cc16038 R14: 00007fce3cc15fa0 R15: 00007fff01279418 [ 368.170017][ T9834] [ 368.550209][ T10] etas_es58x 4-1:0.2: could not retrieve the product info string [ 368.613127][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 368.613141][ T30] audit: type=1400 audit(1771223197.288:1458): avc: denied { create } for pid=9837 comm="syz.3.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 368.815466][ T10] usb 4-1: USB disconnect, device number 28 [ 368.835034][ T10] etas_es58x 4-1:0.2: Disconnecting syz syz [ 368.976640][ T30] audit: type=1400 audit(1771223197.528:1459): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 369.187463][ T30] audit: type=1400 audit(1771223197.778:1460): avc: denied { setopt } for pid=9843 comm="syz.1.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 369.210843][ T30] audit: type=1400 audit(1771223197.788:1461): avc: denied { write } for pid=9843 comm="syz.1.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 369.549752][ T30] audit: type=1400 audit(1771223198.218:1462): avc: denied { ioctl } for pid=9847 comm="syz.0.931" path="socket:[25732]" dev="sockfs" ino=25732 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 369.639644][ T30] audit: type=1400 audit(1771223198.218:1463): avc: denied { connect } for pid=9847 comm="syz.0.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 369.674626][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 369.694185][ T5473] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 369.736968][ T30] audit: type=1400 audit(1771223198.218:1464): avc: denied { write } for pid=9847 comm="syz.0.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 369.786313][ T5473] audit: backlog limit exceeded [ 371.878138][ T9867] PKCS7: Unknown OID: [5] 0.0 [ 371.882853][ T9867] PKCS7: Only support pkcs7_signedData type [ 372.968887][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.986431][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.497226][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.939'. [ 373.506261][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.939'. [ 374.074985][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 374.074995][ T30] audit: type=1400 audit(1771223202.748:1581): avc: denied { create } for pid=9895 comm="syz.4.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 374.149924][ T30] audit: type=1400 audit(1771223202.778:1582): avc: denied { setopt } for pid=9895 comm="syz.4.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 374.251177][ T30] audit: type=1400 audit(1771223202.778:1583): avc: denied { write } for pid=9895 comm="syz.4.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 374.277021][ T30] audit: type=1400 audit(1771223202.878:1584): avc: denied { write } for pid=9897 comm="syz.4.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 374.297696][ T30] audit: type=1400 audit(1771223202.878:1585): avc: denied { nlmsg_write } for pid=9897 comm="syz.4.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 374.603844][ T30] audit: type=1400 audit(1771223203.198:1586): avc: denied { read write } for pid=9899 comm="syz.4.944" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 374.633795][ T30] audit: type=1400 audit(1771223203.198:1587): avc: denied { open } for pid=9899 comm="syz.4.944" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 374.671138][ T30] audit: type=1400 audit(1771223203.348:1588): avc: denied { create } for pid=9899 comm="syz.4.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 374.919911][ T30] audit: type=1400 audit(1771223203.348:1589): avc: denied { ioctl } for pid=9899 comm="syz.4.944" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=26632 ioctlcmd=0x5532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 374.947477][ T30] audit: type=1400 audit(1771223203.368:1590): avc: denied { ioctl } for pid=9899 comm="syz.4.944" path="socket:[26631]" dev="sockfs" ino=26631 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 376.022422][ T9916] PKCS7: Unknown OID: [5] 0.0 [ 376.027094][ T9916] PKCS7: Only support pkcs7_signedData type [ 376.792861][ T9933] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 379.541572][ T9966] 9p: Bad value for 'rfdno' [ 379.546110][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 379.546119][ T30] audit: type=1400 audit(1771223208.218:1607): avc: denied { read write } for pid=9961 comm="syz.1.961" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 379.639656][ T30] audit: type=1400 audit(1771223208.218:1608): avc: denied { open } for pid=9961 comm="syz.1.961" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 379.716588][ T9968] fuse: Bad value for 'fd' [ 379.829374][ T30] audit: type=1400 audit(1771223208.218:1609): avc: denied { mounton } for pid=9961 comm="syz.1.961" path="/189" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 379.932683][ T30] audit: type=1400 audit(1771223208.378:1610): avc: denied { read } for pid=9963 comm="syz.3.962" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 380.035076][ T30] audit: type=1400 audit(1771223208.378:1611): avc: denied { open } for pid=9963 comm="syz.3.962" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 380.315699][ T30] audit: type=1400 audit(1771223208.448:1612): avc: denied { create } for pid=9961 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 380.547432][ T30] audit: type=1400 audit(1771223208.448:1613): avc: denied { setopt } for pid=9961 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 380.739617][ T30] audit: type=1400 audit(1771223208.448:1614): avc: denied { write } for pid=9961 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 380.769111][ T30] audit: type=1400 audit(1771223208.548:1615): avc: denied { module_request } for pid=9961 comm="syz.1.961" kmod=6E65742D70662D31362D70726F746F2D31362D66616D696C792DFFFF scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 382.118173][ T30] audit: type=1400 audit(1771223210.788:1616): avc: denied { create } for pid=9982 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 382.384096][ T9987] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 383.850101][T10001] lo: entered allmulticast mode [ 384.138331][ T9998] lo: left allmulticast mode [ 384.607725][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 384.607754][ T30] audit: type=1400 audit(1771223213.258:1626): avc: denied { create } for pid=10006 comm="syz.5.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.087064][ T30] audit: type=1400 audit(1771223213.268:1627): avc: denied { mounton } for pid=10006 comm="syz.5.975" path="/63/file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 385.089000][T10014] FAULT_INJECTION: forcing a failure. [ 385.089000][T10014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.169643][ T30] audit: type=1400 audit(1771223213.698:1628): avc: denied { getopt } for pid=10010 comm="syz.0.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 385.191553][T10014] CPU: 0 UID: 0 PID: 10014 Comm: syz.4.968 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.191579][T10014] Tainted: [L]=SOFTLOCKUP [ 385.191586][T10014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.191596][T10014] Call Trace: [ 385.191601][T10014] [ 385.191608][T10014] dump_stack_lvl+0x100/0x190 [ 385.191640][T10014] should_fail_ex.cold+0x5/0xa [ 385.191663][T10014] _copy_from_user+0x2e/0xd0 [ 385.191682][T10014] copy_msghdr_from_user+0x9f/0x4f0 [ 385.191710][T10014] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 385.191740][T10014] ? __pfx__kstrtoull+0x10/0x10 [ 385.191768][T10014] ___sys_sendmsg+0x106/0x1e0 [ 385.191794][T10014] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.191830][T10014] ? find_held_lock+0x2b/0x80 [ 385.191868][T10014] __sys_sendmmsg+0x205/0x430 [ 385.191890][T10014] ? __pfx___sys_sendmmsg+0x10/0x10 [ 385.191918][T10014] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 385.191951][T10014] ? fput+0x79/0x100 [ 385.191969][T10014] ? ksys_write+0x1ac/0x250 [ 385.191991][T10014] ? __pfx_ksys_write+0x10/0x10 [ 385.192018][T10014] __x64_sys_sendmmsg+0x9c/0x100 [ 385.192037][T10014] ? lockdep_hardirqs_on+0x78/0x100 [ 385.192058][T10014] do_syscall_64+0x106/0xf80 [ 385.192079][T10014] ? clear_bhb_loop+0x40/0x90 [ 385.192100][T10014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.192118][T10014] RIP: 0033:0x7f6fd0f9bf79 [ 385.192132][T10014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.192149][T10014] RSP: 002b:00007f6fd1ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 385.192166][T10014] RAX: ffffffffffffffda RBX: 00007f6fd1215fa0 RCX: 00007f6fd0f9bf79 [ 385.192177][T10014] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000006 [ 385.192187][T10014] RBP: 00007f6fd1ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 385.192202][T10014] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 385.192213][T10014] R13: 00007f6fd1216038 R14: 00007f6fd1215fa0 R15: 00007ffea42aa8b8 [ 385.192237][T10014] [ 385.404124][ T30] audit: type=1400 audit(1771223213.698:1629): avc: denied { write } for pid=10010 comm="syz.0.971" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 385.827314][ T30] audit: type=1400 audit(1771223214.488:1630): avc: denied { read } for pid=10012 comm="syz.5.976" name="demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 385.851541][ T30] audit: type=1400 audit(1771223214.488:1631): avc: denied { open } for pid=10012 comm="syz.5.976" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 385.923889][ T30] audit: type=1400 audit(1771223214.488:1632): avc: denied { ioctl } for pid=10012 comm="syz.5.976" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=929 ioctlcmd=0x6f2c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 385.958634][T10025] fuse: Bad value for 'fd' [ 386.135259][ T30] audit: type=1400 audit(1771223214.568:1633): avc: denied { prog_run } for pid=10022 comm="syz.0.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 386.789730][ T5917] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 386.982380][ T5917] usb 1-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 387.019812][ T5917] usb 1-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 387.055146][ T5917] usb 1-1: Product: syz [ 387.059707][ T5917] usb 1-1: Manufacturer: syz [ 387.070969][ T5917] usb 1-1: SerialNumber: syz [ 387.102608][ T5917] usb 1-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 387.155897][ T5917] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 387.190512][ T5917] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 387.199107][ T5917] usb 1-1: media controller created [ 387.350479][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.467048][ T5917] usb 1-1: selecting invalid altsetting 1 [ 387.479490][ T5917] set interface failed [ 387.479510][ T5917] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 387.540299][ T5917] error writing reg: 0xff, val: 0x00 [ 387.608967][T10033] lo: entered allmulticast mode [ 387.844547][T10031] lo: left allmulticast mode [ 387.960079][ T5917] dvb_usb_mxl111sf 1-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 388.007332][ T5917] usb 1-1: USB disconnect, device number 25 [ 389.045275][ T30] audit: type=1400 audit(1771223217.658:1634): avc: denied { watch watch_reads } for pid=10050 comm="syz.0.988" path="pipe:[4594]" dev="pipefs" ino=4594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 390.137339][ T30] audit: type=1400 audit(1771223218.358:1635): avc: denied { map_read map_write } for pid=10055 comm="syz.5.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 391.725692][T10082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.995'. [ 391.734648][T10082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.995'. [ 392.361697][T10089] syzkaller0: entered promiscuous mode [ 392.398995][T10089] syzkaller0: entered allmulticast mode [ 392.442701][T10091] fuse: Bad value for 'fd' [ 392.718315][T10096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.998'. [ 392.746811][T10096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.998'. [ 394.566703][ T30] audit: type=1400 audit(1771223223.228:1636): avc: denied { create } for pid=10103 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 394.594985][T10124] FAULT_INJECTION: forcing a failure. [ 394.594985][T10124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.608234][T10124] CPU: 1 UID: 0 PID: 10124 Comm: syz.4.1005 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.608258][T10124] Tainted: [L]=SOFTLOCKUP [ 394.608263][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.608274][T10124] Call Trace: [ 394.608279][T10124] [ 394.608285][T10124] dump_stack_lvl+0x100/0x190 [ 394.608315][T10124] should_fail_ex.cold+0x5/0xa [ 394.608337][T10124] _copy_from_user+0x2e/0xd0 [ 394.608355][T10124] __sys_bpf+0x243/0x4b90 [ 394.608374][T10124] ? __pfx___sys_bpf+0x10/0x10 [ 394.608394][T10124] ? proc_fail_nth_write+0x9f/0x220 [ 394.608412][T10124] ? find_held_lock+0x2b/0x80 [ 394.608438][T10124] ? find_held_lock+0x2b/0x80 [ 394.608454][T10124] ? ksys_write+0x190/0x250 [ 394.608472][T10124] ? __mutex_unlock_slowpath+0x15c/0x790 [ 394.608487][T10124] ? __fget_files+0x215/0x3d0 [ 394.608510][T10124] ? fput+0x79/0x100 [ 394.608520][T10124] ? ksys_write+0x1ac/0x250 [ 394.608535][T10124] ? __pfx_ksys_write+0x10/0x10 [ 394.608552][T10124] __x64_sys_bpf+0x7b/0xc0 [ 394.608562][T10124] ? lockdep_hardirqs_on+0x78/0x100 [ 394.608576][T10124] do_syscall_64+0x106/0xf80 [ 394.608588][T10124] ? clear_bhb_loop+0x40/0x90 [ 394.608602][T10124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.608614][T10124] RIP: 0033:0x7f6fd0f9bf79 [ 394.608623][T10124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.608633][T10124] RSP: 002b:00007f6fd1ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 394.608644][T10124] RAX: ffffffffffffffda RBX: 00007f6fd1215fa0 RCX: 00007f6fd0f9bf79 [ 394.608651][T10124] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 394.608658][T10124] RBP: 00007f6fd1ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 394.608664][T10124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.608670][T10124] R13: 00007f6fd1216038 R14: 00007f6fd1215fa0 R15: 00007ffea42aa8b8 [ 394.608684][T10124] [ 394.806622][ T30] audit: type=1400 audit(1771223223.258:1637): avc: denied { write } for pid=10125 comm="syz.3.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 394.826452][ T30] audit: type=1400 audit(1771223223.268:1638): avc: denied { create } for pid=10123 comm="syz.4.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 394.846085][ T30] audit: type=1400 audit(1771223223.268:1639): avc: denied { bind } for pid=10123 comm="syz.4.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 394.865506][ T30] audit: type=1400 audit(1771223223.268:1640): avc: denied { connect } for pid=10123 comm="syz.4.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 395.509390][ T30] audit: type=1400 audit(1771223224.178:1641): avc: denied { bind } for pid=10135 comm="syz.5.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 395.566576][ T30] audit: type=1400 audit(1771223224.178:1642): avc: denied { name_bind } for pid=10135 comm="syz.5.1009" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 395.728195][ T30] audit: type=1400 audit(1771223224.188:1643): avc: denied { node_bind } for pid=10135 comm="syz.5.1009" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 395.838006][ T30] audit: type=1400 audit(1771223224.188:1644): avc: denied { write } for pid=10135 comm="syz.5.1009" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 395.871283][ T30] audit: type=1400 audit(1771223224.188:1645): avc: denied { connect } for pid=10135 comm="syz.5.1009" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 396.090462][ T30] audit: type=1400 audit(1771223224.188:1646): avc: denied { name_connect } for pid=10135 comm="syz.5.1009" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 397.886271][T10159] lo: entered allmulticast mode [ 398.228050][T10164] No control pipe specified [ 398.632572][ T30] audit: type=1400 audit(1771223226.978:1647): avc: denied { create } for pid=10161 comm="syz.4.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 398.659674][ T30] audit: type=1400 audit(1771223226.988:1648): avc: denied { connect } for pid=10161 comm="syz.4.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 398.736869][T10156] lo: left allmulticast mode [ 398.825982][ T30] audit: type=1400 audit(1771223227.478:1649): avc: denied { create } for pid=10168 comm="syz.3.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 399.196862][ T30] audit: type=1400 audit(1771223227.818:1650): avc: denied { write } for pid=10168 comm="syz.3.1018" name="vbi3" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 399.718972][T10187] o2cb: This node has not been configured. [ 399.724964][T10187] o2cb: Cluster check failed. Fix errors before retrying. [ 399.732316][T10187] (syz.4.1021,10187,0):user_dlm_register:674 ERROR: status = -22 [ 399.740197][T10187] (syz.4.1021,10187,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 401.282366][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 401.282381][ T30] audit: type=1400 audit(1771223229.958:1662): avc: denied { connect } for pid=10200 comm="syz.3.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 401.964828][ T5816] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 402.368638][ T5816] CPU: 1 UID: 0 PID: 5816 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.368668][ T5816] Tainted: [L]=SOFTLOCKUP [ 402.368675][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.368687][ T5816] Workqueue: hci3 hci_rx_work [ 402.368709][ T5816] Call Trace: [ 402.368715][ T5816] [ 402.368722][ T5816] dump_stack_lvl+0x100/0x190 [ 402.368753][ T5816] sysfs_warn_dup.cold+0x1c/0x28 [ 402.368780][ T5816] sysfs_create_dir_ns+0x24b/0x2b0 [ 402.368803][ T5816] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 402.368824][ T5816] ? find_held_lock+0x2b/0x80 [ 402.368845][ T5816] ? kobject_add_internal+0x25f/0x930 [ 402.368873][ T5816] ? kobject_add_internal+0x25f/0x930 [ 402.368901][ T5816] ? do_raw_spin_unlock+0x145/0x1e0 [ 402.368923][ T5816] kobject_add_internal+0x2c8/0x930 [ 402.368953][ T5816] kobject_add+0x16a/0x1e0 [ 402.368980][ T5816] ? __pfx_kobject_add+0x10/0x10 [ 402.369004][ T5816] ? class_to_subsys+0x10f/0x150 [ 402.369029][ T5816] ? kobject_put+0xb9/0x640 [ 402.369052][ T5816] ? _raw_spin_unlock+0x28/0x50 [ 402.369077][ T5816] device_add+0x294/0x1950 [ 402.369095][ T5816] ? __pfx_dev_set_name+0x10/0x10 [ 402.369117][ T5816] ? __pfx_device_add+0x10/0x10 [ 402.369136][ T5816] ? mgmt_send_event_skb+0x2fb/0x460 [ 402.369163][ T5816] hci_conn_add_sysfs+0x1a3/0x260 [ 402.369187][ T5816] le_conn_complete_evt+0x11cb/0x1f40 [ 402.369214][ T5816] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 402.369240][ T5816] hci_le_conn_complete_evt+0x23c/0x3a0 [ 402.369261][ T5816] ? skb_pull_data+0x15f/0x1e0 [ 402.369289][ T5816] hci_le_meta_evt+0x34a/0x5f0 [ 402.369310][ T5816] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 402.369330][ T5816] hci_event_packet+0x682/0x11c0 [ 402.369354][ T5816] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 402.369378][ T5816] ? __pfx_hci_event_packet+0x10/0x10 [ 402.369400][ T5816] ? kcov_remote_start+0x374/0x660 [ 402.369425][ T5816] ? lockdep_hardirqs_on+0x78/0x100 [ 402.369457][ T5816] hci_rx_work+0x451/0xfc0 [ 402.369482][ T5816] process_one_work+0x9d7/0x1920 [ 402.369512][ T5816] ? __pfx_process_one_work+0x10/0x10 [ 402.369539][ T5816] ? __pfx_hci_rx_work+0x10/0x10 [ 402.369565][ T5816] worker_thread+0x5da/0xe40 [ 402.369593][ T5816] ? kthread+0x13a/0x450 [ 402.369607][ T5816] ? __pfx_worker_thread+0x10/0x10 [ 402.369621][ T5816] kthread+0x370/0x450 [ 402.369635][ T5816] ? __pfx_kthread+0x10/0x10 [ 402.369651][ T5816] ret_from_fork+0x754/0xd80 [ 402.369669][ T5816] ? __pfx_ret_from_fork+0x10/0x10 [ 402.369690][ T5816] ? __switch_to+0x7b4/0x1120 [ 402.369711][ T5816] ? __pfx_kthread+0x10/0x10 [ 402.369729][ T5816] ret_from_fork_asm+0x1a/0x30 [ 402.369764][ T5816] [ 402.643512][ T5816] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 402.671244][ T30] audit: type=1400 audit(1771223229.978:1663): avc: denied { read } for pid=10201 comm="syz.5.1027" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 402.825948][ T5816] Bluetooth: hci3: failed to register connection device [ 403.058303][ T30] audit: type=1400 audit(1771223229.978:1664): avc: denied { open } for pid=10201 comm="syz.5.1027" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 403.272521][T10218] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1031'. [ 403.421165][ T30] audit: type=1400 audit(1771223230.618:1665): avc: denied { listen } for pid=10200 comm="syz.3.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 403.528350][T10223] o2cb: This node has not been configured. [ 403.535007][T10223] o2cb: Cluster check failed. Fix errors before retrying. [ 403.545147][T10223] (syz.5.1032,10223,0):user_dlm_register:674 ERROR: status = -22 [ 403.553121][T10223] (syz.5.1032,10223,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 404.018041][ T30] audit: type=1400 audit(1771223230.698:1666): avc: denied { unlink } for pid=10200 comm="syz.3.1028" name="#f" dev="tmpfs" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 404.052863][ T30] audit: type=1400 audit(1771223230.708:1667): avc: denied { mount } for pid=10200 comm="syz.3.1028" name="/" dev="overlay" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 404.081562][ T30] audit: type=1400 audit(1771223231.038:1668): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 404.237369][T10232] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 404.366757][T10235] fuse: Unknown parameter '' [ 404.608452][T10243] lo: entered allmulticast mode [ 404.796202][ T30] audit: type=1400 audit(1771223233.458:1669): avc: denied { ioctl } for pid=10242 comm="syz.3.1038" path="socket:[27782]" dev="sockfs" ino=27782 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 404.859087][T10240] lo: left allmulticast mode [ 404.891575][ T30] audit: type=1400 audit(1771223233.458:1670): avc: denied { ioctl } for pid=10242 comm="syz.3.1038" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 406.585339][T10262] FAULT_INJECTION: forcing a failure. [ 406.585339][T10262] name failslab, interval 1, probability 0, space 0, times 0 [ 406.675497][T10262] CPU: 1 UID: 0 PID: 10262 Comm: syz.4.1045 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.675523][T10262] Tainted: [L]=SOFTLOCKUP [ 406.675527][T10262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 406.675537][T10262] Call Trace: [ 406.675543][T10262] [ 406.675549][T10262] dump_stack_lvl+0x100/0x190 [ 406.675579][T10262] should_fail_ex.cold+0x5/0xa [ 406.675601][T10262] ? io_cache_alloc_new+0x45/0xe0 [ 406.675626][T10262] should_failslab+0xc2/0x120 [ 406.675650][T10262] __kmalloc_noprof+0xe0/0x850 [ 406.675677][T10262] io_cache_alloc_new+0x45/0xe0 [ 406.675703][T10262] io_msg_alloc_async+0x1c3/0x3a0 [ 406.675727][T10262] io_recvmsg_prep+0x5c5/0xda0 [ 406.675754][T10262] ? __pfx_io_recvmsg_prep+0x10/0x10 [ 406.675777][T10262] ? lockdep_hardirqs_on+0x78/0x100 [ 406.675810][T10262] io_submit_sqes+0x9b2/0x2300 [ 406.675838][T10262] __do_sys_io_uring_enter+0x9c0/0x1a20 [ 406.675859][T10262] ? __fget_files+0x21f/0x3d0 [ 406.675880][T10262] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 406.675901][T10262] ? fput+0x79/0x100 [ 406.675914][T10262] ? ksys_write+0x1ac/0x250 [ 406.675932][T10262] ? __pfx_ksys_write+0x10/0x10 [ 406.675956][T10262] do_syscall_64+0x106/0xf80 [ 406.675972][T10262] ? clear_bhb_loop+0x40/0x90 [ 406.675989][T10262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.676003][T10262] RIP: 0033:0x7f6fd0f9bf79 [ 406.676015][T10262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.676028][T10262] RSP: 002b:00007f6fd1ee3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 406.676042][T10262] RAX: ffffffffffffffda RBX: 00007f6fd1215fa0 RCX: 00007f6fd0f9bf79 [ 406.676051][T10262] RDX: 000000000000f4f5 RSI: 0000000000003516 RDI: 0000000000000004 [ 406.676059][T10262] RBP: 00007f6fd1ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 406.676067][T10262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.676075][T10262] R13: 00007f6fd1216038 R14: 00007f6fd1215fa0 R15: 00007ffea42aa8b8 [ 406.676094][T10262] [ 407.049383][ T30] audit: type=1400 audit(1771223235.718:1671): avc: denied { write } for pid=10274 comm="syz.0.1049" name="route" dev="proc" ino=4026532825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 407.231488][T10272] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 408.123641][ T30] audit: type=1400 audit(1771223236.548:1672): avc: denied { execute } for pid=10285 comm="syz.3.1053" dev="tmpfs" ino=1227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 408.190058][ T30] audit: type=1400 audit(1771223236.548:1673): avc: denied { execute_no_trans } for pid=10285 comm="syz.3.1053" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 408.723539][ T30] audit: type=1400 audit(1771223237.338:1674): avc: denied { bind } for pid=10296 comm="syz.3.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.807832][T10291] netlink: 'syz.0.1049': attribute type 2 has an invalid length. [ 408.823334][T10291] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 408.861531][ T30] audit: type=1400 audit(1771223237.338:1675): avc: denied { listen } for pid=10296 comm="syz.3.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.920165][ T30] audit: type=1400 audit(1771223237.388:1676): avc: denied { accept } for pid=10296 comm="syz.3.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 409.650068][T10308] lo: entered allmulticast mode [ 409.943337][T10306] lo: left allmulticast mode [ 410.371249][ T30] audit: type=1400 audit(1771223239.038:1677): avc: denied { write } for pid=10311 comm="syz.4.1059" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 410.398189][T10312] kvm_intel: kvm [10311]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3 [ 410.450320][T10312] kvm_intel: kvm [10311]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 410.516997][T10312] kvm_intel: kvm [10311]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 410.553542][T10318] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 410.608160][T10312] kvm_intel: kvm [10311]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 410.811588][T10312] kvm_intel: kvm [10311]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 410.821328][T10312] kvm_intel: kvm [10311]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 411.280349][T10312] kvm_intel: kvm [10311]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 411.395339][T10312] kvm_intel: kvm [10311]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 412.092086][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1065'. [ 413.262302][T10344] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 413.525956][ T30] audit: type=1400 audit(1771223242.198:1678): avc: denied { ioctl } for pid=10346 comm="syz.5.1069" path="socket:[27505]" dev="sockfs" ino=27505 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 413.553024][T10347] syzkaller0: entered promiscuous mode [ 413.596835][T10347] syzkaller0: entered allmulticast mode [ 414.096750][T10356] netlink: 'syz.5.1071': attribute type 2 has an invalid length. [ 414.104538][T10356] netlink: 'syz.5.1071': attribute type 1 has an invalid length. [ 414.593605][ T30] audit: type=1400 audit(1771223243.268:1679): avc: denied { read write } for pid=10359 comm="syz.0.1073" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 414.681449][ T30] audit: type=1400 audit(1771223243.298:1680): avc: denied { open } for pid=10359 comm="syz.0.1073" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 414.787973][ T30] audit: type=1400 audit(1771223243.318:1681): avc: denied { ioctl } for pid=10359 comm="syz.0.1073" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 415.002566][ T5917] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 415.171046][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 415.180529][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 415.292309][ T5917] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 415.303327][ T5917] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 415.311409][ T5917] usb 2-1: config 0 has no interface number 0 [ 415.325366][ T5917] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 415.953030][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 415.962256][ T10] usb 1-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 415.975581][ T5917] usb 2-1: config 0 has no interface number 0 [ 415.983811][ T10] usb 1-1: Product: syz [ 415.990427][ T10] usb 1-1: Manufacturer: syz [ 416.008631][ T10] usb 1-1: SerialNumber: syz [ 416.025205][ T5917] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 416.052038][ T10] usb 1-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 416.071116][ T5917] usb 2-1: config 0 has no interface number 0 [ 416.093008][ T5917] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 416.101291][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 416.131052][ T5917] usb 2-1: config 0 has no interface number 0 [ 416.131287][ T10] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 416.164129][ T10] usb 1-1: media controller created [ 416.175284][ T5917] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 416.200874][ T5917] usb 2-1: config 0 has no interface number 0 [ 416.203239][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.261499][ T5917] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 416.269945][ T5917] usb 2-1: config 0 has no interface number 0 [ 416.300463][ T5917] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 416.324723][ T5917] usb 2-1: config 0 has no interface number 0 [ 416.338947][ T5917] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 416.351214][ T5917] usb 2-1: config 0 has no interface number 0 [ 416.389877][ T5917] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 416.405236][ T10] usb 1-1: selecting invalid altsetting 1 [ 416.414526][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.419526][ T10] set interface failed [ 416.431180][ T10] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 416.458096][ T5917] usb 2-1: Product: syz [ 416.467053][ T10] error writing reg: 0xff, val: 0x00 [ 416.467067][ T5917] usb 2-1: Manufacturer: syz [ 416.493522][ T5917] usb 2-1: SerialNumber: syz [ 416.519436][ T30] audit: type=1400 audit(1771223245.188:1682): avc: denied { mount } for pid=10374 comm="syz.3.1077" name="/" dev="ramfs" ino=28273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 416.543769][ T5917] usb 2-1: config 0 descriptor?? [ 416.591825][ T10] dvb_usb_mxl111sf 1-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 416.607231][ T10] usb 1-1: USB disconnect, device number 26 [ 416.616431][ T30] audit: type=1400 audit(1771223245.228:1683): avc: denied { create } for pid=10374 comm="syz.3.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 416.671307][ T5917] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 417.018433][T10384] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1075'. [ 417.029600][ T30] audit: type=1400 audit(1771223245.688:1684): avc: denied { append } for pid=10361 comm="syz.1.1075" name="cec0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 417.139250][T10384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.159871][ T30] audit: type=1400 audit(1771223245.688:1685): avc: denied { nlmsg_read } for pid=10361 comm="syz.1.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 417.526119][T10384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.546409][T10380] kvm_intel: kvm [10379]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3 [ 417.547169][T10380] kvm_intel: kvm [10379]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 417.547844][T10380] kvm_intel: kvm [10379]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 417.554993][T10380] kvm_intel: kvm [10379]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 417.824495][T10380] kvm_intel: kvm [10379]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 418.010580][T10380] kvm_intel: kvm [10379]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 418.874921][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'. [ 418.942050][ T30] audit: type=1400 audit(1771223247.608:1686): avc: denied { name_bind } for pid=10404 comm="syz.0.1086" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 419.088846][ T5917] etas_es58x 2-1:0.2: could not retrieve the product info string [ 419.274053][ T5917] usb 2-1: USB disconnect, device number 21 [ 419.350862][ T5917] etas_es58x 2-1:0.2: Disconnecting syz syz [ 419.439687][ T30] audit: type=1400 audit(1771223247.998:1687): avc: denied { bind } for pid=10411 comm="syz.1.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 419.562591][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 419.599676][ T30] audit: type=1400 audit(1771223247.998:1688): avc: denied { node_bind } for pid=10411 comm="syz.1.1087" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 419.739639][ T30] audit: type=1400 audit(1771223248.028:1689): avc: denied { search } for pid=5473 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.851578][ T30] audit: type=1400 audit(1771223248.038:1690): avc: denied { search } for pid=5473 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.949665][ T30] audit: type=1400 audit(1771223248.038:1691): avc: denied { search } for pid=5473 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.084435][ T30] audit: type=1400 audit(1771223248.038:1692): avc: denied { read } for pid=5473 comm="dhcpcd" name="n120" dev="tmpfs" ino=6225 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 420.339456][T10423] netlink: 'syz.4.1089': attribute type 2 has an invalid length. [ 420.347235][T10423] netlink: 'syz.4.1089': attribute type 1 has an invalid length. [ 420.854771][ T30] audit: type=1400 audit(1771223248.038:1693): avc: denied { open } for pid=5473 comm="dhcpcd" path="/run/udev/data/n120" dev="tmpfs" ino=6225 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 421.027232][ T30] audit: type=1400 audit(1771223248.038:1694): avc: denied { getattr } for pid=5473 comm="dhcpcd" path="/run/udev/data/n120" dev="tmpfs" ino=6225 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 422.701253][ T30] audit: type=1400 audit(1771223250.968:1695): avc: denied { mount } for pid=10432 comm="syz.5.1092" name="/" dev="autofs" ino=28514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 424.407659][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 424.407674][ T30] audit: type=1400 audit(1771223253.078:1703): avc: denied { add_name } for pid=10428 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.611542][ T30] audit: type=1400 audit(1771223253.078:1704): avc: denied { create } for pid=10428 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 424.699826][ T30] audit: type=1400 audit(1771223253.078:1705): avc: denied { write } for pid=10428 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=6266 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 424.930168][ T30] audit: type=1400 audit(1771223253.078:1706): avc: denied { append } for pid=10428 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=6266 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 425.091870][ T30] audit: type=1400 audit(1771223253.558:1707): avc: denied { remove_name } for pid=10470 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=6266 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.257166][ T30] audit: type=1400 audit(1771223253.558:1708): avc: denied { unlink } for pid=10470 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=6266 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 425.399385][ T30] audit: type=1400 audit(1771223253.798:1709): avc: denied { execute } for pid=10472 comm="syz.4.1100" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 425.480020][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 425.977006][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 425.988482][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 426.030426][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 426.041428][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 426.094993][ T10] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 426.104176][ T10] usb 5-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 426.113480][ T10] usb 5-1: Product: syz [ 426.117797][ T10] usb 5-1: Manufacturer: syz [ 426.141676][ T10] usb 5-1: SerialNumber: syz [ 426.155031][ T10] usb 5-1: config 0 descriptor?? [ 426.166029][ T10] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 426.174437][ T10] kvaser_usb 5-1:0.0: error -EMSGSIZE: Failed to initialize card [ 426.206079][ T10] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90 [ 427.211586][T10498] kvm_intel: kvm [10497]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3 [ 427.286196][T10498] kvm_intel: kvm [10497]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 427.303900][T10498] kvm_intel: kvm [10497]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 427.327448][T10498] kvm_intel: kvm [10497]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 427.374685][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1105'. [ 427.384205][T10498] kvm_intel: kvm [10497]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 427.473475][T10498] kvm_intel: kvm [10497]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 427.534876][ T5889] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 427.608558][T10498] kvm_intel: kvm [10497]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 427.683732][T10498] kvm_intel: kvm [10497]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 427.741292][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 427.834576][ T5889] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 427.895928][ T5889] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.936483][ T5909] usb 5-1: USB disconnect, device number 18 [ 427.951559][ T5889] usb 4-1: config 0 has no interface number 0 [ 428.001798][ T30] audit: type=1400 audit(1771223256.668:1710): avc: denied { setopt } for pid=10513 comm="syz.4.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 428.035328][ T5889] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 428.073530][ T5889] usb 4-1: config 0 has no interface number 0 [ 428.100474][ T5889] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 428.119743][ T5889] usb 4-1: config 0 has no interface number 0 [ 428.230518][ T5889] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 428.248645][ T5889] usb 4-1: config 0 has no interface number 0 [ 428.280072][ T5889] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 428.288059][ T5889] usb 4-1: config 0 has no interface number 0 [ 428.367214][ T5889] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 428.375334][ T5889] usb 4-1: config 0 has no interface number 0 [ 428.406589][ T5889] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 428.428788][ T5889] usb 4-1: config 0 has no interface number 0 [ 428.505824][ T5889] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 428.518914][ T5889] usb 4-1: config 0 has no interface number 0 [ 428.545627][ T5889] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 428.558503][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.662352][ T5889] usb 4-1: Product: syz [ 428.666760][ T5889] usb 4-1: Manufacturer: syz [ 428.679809][ T5889] usb 4-1: SerialNumber: syz [ 428.690226][ T5889] usb 4-1: config 0 descriptor?? [ 428.700622][ T5889] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 428.794378][T10523] netlink: 'syz.5.1108': attribute type 2 has an invalid length. [ 428.822517][T10523] hma224): entered promiscuous mode [ 429.361572][ T5816] Bluetooth: hci0: Unknown advertising packet type: 0x73 [ 429.361606][ T5816] Bluetooth: hci0: Malformed LE Event: 0x0d [ 429.711521][T10533] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1098'. [ 429.976920][T10537] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1109'. [ 430.321796][T10537] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1109'. [ 430.356369][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.370245][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.860053][ T5816] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 431.493676][T10557] PKCS7: Unknown OID: [5] 0.0 [ 431.498413][T10557] PKCS7: Only support pkcs7_signedData type [ 431.646787][ T5889] etas_es58x 4-1:0.2: could not retrieve the product info string [ 432.092990][ T5889] usb 4-1: USB disconnect, device number 29 [ 432.093836][ T5889] etas_es58x 4-1:0.2: Disconnecting syz syz [ 432.883031][T10580] netlink: 'syz.5.1120': attribute type 2 has an invalid length. [ 434.039098][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 434.048922][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.048951][ T51] Tainted: [L]=SOFTLOCKUP [ 434.048957][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 434.048970][ T51] Workqueue: hci4 hci_rx_work [ 434.048994][ T51] Call Trace: [ 434.049000][ T51] [ 434.049008][ T51] dump_stack_lvl+0x100/0x190 [ 434.049040][ T51] sysfs_warn_dup.cold+0x1c/0x28 [ 434.049066][ T51] sysfs_create_dir_ns+0x24b/0x2b0 [ 434.049089][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 434.049111][ T51] ? find_held_lock+0x2b/0x80 [ 434.049134][ T51] ? kobject_add_internal+0x25f/0x930 [ 434.049160][ T51] ? kobject_add_internal+0x25f/0x930 [ 434.049194][ T51] ? do_raw_spin_unlock+0x145/0x1e0 [ 434.049216][ T51] kobject_add_internal+0x2c8/0x930 [ 434.049247][ T51] kobject_add+0x16a/0x1e0 [ 434.049273][ T51] ? __pfx_kobject_add+0x10/0x10 [ 434.049297][ T51] ? class_to_subsys+0x10f/0x150 [ 434.049323][ T51] ? kobject_put+0xb9/0x640 [ 434.049347][ T51] ? _raw_spin_unlock+0x28/0x50 [ 434.049373][ T51] device_add+0x294/0x1950 [ 434.049393][ T51] ? __pfx_dev_set_name+0x10/0x10 [ 434.049416][ T51] ? __pfx_device_add+0x10/0x10 [ 434.049436][ T51] ? mgmt_send_event_skb+0x2fb/0x460 [ 434.049463][ T51] hci_conn_add_sysfs+0x1a3/0x260 [ 434.049487][ T51] le_conn_complete_evt+0x11cb/0x1f40 [ 434.049515][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 434.049546][ T51] hci_le_conn_complete_evt+0x23c/0x3a0 [ 434.049566][ T51] ? skb_pull_data+0x15f/0x1e0 [ 434.049597][ T51] hci_le_meta_evt+0x34a/0x5f0 [ 434.049618][ T51] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 434.049643][ T51] hci_event_packet+0x682/0x11c0 [ 434.049663][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 434.049686][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 434.049710][ T51] ? kcov_remote_start+0x384/0x660 [ 434.049739][ T51] hci_rx_work+0x451/0xfc0 [ 434.049763][ T51] process_one_work+0x9d7/0x1920 [ 434.049794][ T51] ? __pfx_process_one_work+0x10/0x10 [ 434.049821][ T51] ? __pfx_hci_rx_work+0x10/0x10 [ 434.049843][ T51] worker_thread+0x5da/0xe40 [ 434.049872][ T51] ? kthread+0x13a/0x450 [ 434.049886][ T51] ? __pfx_worker_thread+0x10/0x10 [ 434.049903][ T51] kthread+0x370/0x450 [ 434.049918][ T51] ? __pfx_kthread+0x10/0x10 [ 434.049936][ T51] ret_from_fork+0x754/0xd80 [ 434.049955][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 434.049976][ T51] ? __switch_to+0x7b4/0x1120 [ 434.049997][ T51] ? __pfx_kthread+0x10/0x10 [ 434.050015][ T51] ret_from_fork_asm+0x1a/0x30 [ 434.050050][ T51] [ 434.302095][ T51] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 434.316119][ T51] Bluetooth: hci4: failed to register connection device [ 434.363694][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.370007][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.671042][ T30] audit: type=1400 audit(1771223263.348:1711): avc: denied { mount } for pid=10588 comm="syz.0.1125" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 434.978625][T10596] FAULT_INJECTION: forcing a failure. [ 434.978625][T10596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.996488][T10596] CPU: 1 UID: 0 PID: 10596 Comm: syz.5.1124 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.996514][T10596] Tainted: [L]=SOFTLOCKUP [ 434.996519][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 434.996529][T10596] Call Trace: [ 434.996535][T10596] [ 434.996541][T10596] dump_stack_lvl+0x100/0x190 [ 434.996572][T10596] should_fail_ex.cold+0x5/0xa [ 434.996594][T10596] _copy_to_user+0x32/0xd0 [ 434.996614][T10596] simple_read_from_buffer+0xcb/0x170 [ 434.996641][T10596] proc_fail_nth_read+0x1af/0x230 [ 434.996661][T10596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 434.996690][T10596] ? rw_verify_area+0xce/0x6d0 [ 434.996709][T10596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 434.996736][T10596] vfs_read+0x1e4/0xb30 [ 434.996761][T10596] ? __pfx_vfs_read+0x10/0x10 [ 434.996782][T10596] ? __fget_files+0x215/0x3d0 [ 434.996813][T10596] ? __fget_files+0x21f/0x3d0 [ 434.996846][T10596] ksys_read+0x12a/0x250 [ 434.996868][T10596] ? __pfx_ksys_read+0x10/0x10 [ 434.996898][T10596] do_syscall_64+0x106/0xf80 [ 434.996928][T10596] ? clear_bhb_loop+0x40/0x90 [ 434.996951][T10596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.996969][T10596] RIP: 0033:0x7f2c1fb5c84e [ 434.996983][T10596] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 434.997000][T10596] RSP: 002b:00007f2c20b1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 434.997017][T10596] RAX: ffffffffffffffda RBX: 00007f2c20b1e6c0 RCX: 00007f2c1fb5c84e [ 434.997028][T10596] RDX: 000000000000000f RSI: 00007f2c20b1e0a0 RDI: 0000000000000004 [ 434.997038][T10596] RBP: 00007f2c20b1e090 R08: 0000000000000000 R09: 0000000000000000 [ 434.997048][T10596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.997058][T10596] R13: 00007f2c1fe16038 R14: 00007f2c1fe15fa0 R15: 00007ffe8cdc8788 [ 434.997081][T10596] [ 435.509997][ T30] audit: type=1400 audit(1771223264.178:1712): avc: denied { sys_module } for pid=10599 comm="syz.3.1127" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 435.762830][T10612] netlink: 'syz.1.1128': attribute type 2 has an invalid length. [ 436.235956][T10612] hma224): entered promiscuous mode [ 436.369823][ T30] audit: type=1400 audit(1771223265.028:1713): avc: denied { ioctl } for pid=10613 comm="syz.5.1129" path="socket:[29991]" dev="sockfs" ino=29991 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 436.459981][ T5917] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 436.651115][ T5917] usb 4-1: device descriptor read/64, error -71 [ 436.877882][T10590] kvm: kvm [10588]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x4000001f) = 0x3 [ 436.901566][ T5917] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 437.212036][ T5917] usb 4-1: device descriptor read/64, error -71 [ 437.349970][ T5917] usb usb4-port1: attempt power cycle [ 437.617114][ T30] audit: type=1400 audit(1771223266.288:1714): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 437.704706][ T5917] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 437.789237][T10640] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 438.064683][ T5917] usb 4-1: device descriptor read/8, error -71 [ 438.436706][T10645] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 438.765771][T10650] FAULT_INJECTION: forcing a failure. [ 438.765771][T10650] name failslab, interval 1, probability 0, space 0, times 0 [ 438.788591][T10650] CPU: 0 UID: 0 PID: 10650 Comm: syz.3.1136 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.788619][T10650] Tainted: [L]=SOFTLOCKUP [ 438.788625][T10650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.788634][T10650] Call Trace: [ 438.788640][T10650] [ 438.788646][T10650] dump_stack_lvl+0x100/0x190 [ 438.788676][T10650] should_fail_ex.cold+0x5/0xa [ 438.788697][T10650] ? sock_kmalloc+0x111/0x170 [ 438.788721][T10650] should_failslab+0xc2/0x120 [ 438.788746][T10650] __kmalloc_noprof+0xe0/0x850 [ 438.788771][T10650] sock_kmalloc+0x111/0x170 [ 438.788794][T10650] ____sys_sendmsg+0x569/0xc30 [ 438.788820][T10650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.788848][T10650] ? __pfx__kstrtoull+0x10/0x10 [ 438.788874][T10650] ___sys_sendmsg+0x190/0x1e0 [ 438.788906][T10650] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.788941][T10650] ? find_held_lock+0x2b/0x80 [ 438.788976][T10650] __sys_sendmmsg+0x205/0x430 [ 438.788998][T10650] ? __pfx___sys_sendmmsg+0x10/0x10 [ 438.789024][T10650] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 438.789056][T10650] ? fput+0x79/0x100 [ 438.789072][T10650] ? ksys_write+0x1ac/0x250 [ 438.789093][T10650] ? __pfx_ksys_write+0x10/0x10 [ 438.789118][T10650] __x64_sys_sendmmsg+0x9c/0x100 [ 438.789137][T10650] ? lockdep_hardirqs_on+0x78/0x100 [ 438.789156][T10650] do_syscall_64+0x106/0xf80 [ 438.789176][T10650] ? clear_bhb_loop+0x40/0x90 [ 438.789195][T10650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.789212][T10650] RIP: 0033:0x7f2441f9bf79 [ 438.789225][T10650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.789239][T10650] RSP: 002b:00007f2442e15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 438.789255][T10650] RAX: ffffffffffffffda RBX: 00007f2442215fa0 RCX: 00007f2441f9bf79 [ 438.789265][T10650] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 438.789274][T10650] RBP: 00007f2442e15090 R08: 0000000000000000 R09: 0000000000000000 [ 438.789283][T10650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.789292][T10650] R13: 00007f2442216038 R14: 00007f2442215fa0 R15: 00007ffcb2f60848 [ 438.789314][T10650] [ 438.949663][ T30] audit: type=1400 audit(1771223267.528:1715): avc: denied { write } for pid=10647 comm="syz.5.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 439.031850][ T5816] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 439.290777][ T5816] Bluetooth: hci1: Unknown advertising packet type: 0x73 [ 439.290863][ T5816] Bluetooth: hci1: Malformed LE Event: 0x0d [ 440.304912][T10658] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 440.521014][T10674] lo: entered allmulticast mode [ 441.088564][T10671] lo: left allmulticast mode [ 441.227426][T10686] syzkaller1: entered promiscuous mode [ 441.243329][T10686] syzkaller1: entered allmulticast mode [ 441.449268][T10693] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 442.533468][T10705] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 442.791164][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'. [ 443.169680][ T30] audit: type=1400 audit(1771223271.828:1716): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 444.103712][ T30] audit: type=1400 audit(1771223272.768:1717): avc: denied { shutdown } for pid=10730 comm="syz.5.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 444.625591][ T30] audit: type=1400 audit(1771223272.768:1718): avc: denied { getopt } for pid=10730 comm="syz.5.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 444.874346][T10736] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 445.037920][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1160'. [ 445.348670][ T30] audit: type=1400 audit(1771223274.018:1719): avc: denied { read write } for pid=10749 comm="syz.5.1161" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 445.374115][ T30] audit: type=1400 audit(1771223274.048:1720): avc: denied { open } for pid=10749 comm="syz.5.1161" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 445.664725][T10726] kvm_intel: kvm [10723]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3 [ 445.690588][T10726] kvm_intel: kvm [10723]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 445.717501][T10757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1162'. [ 445.726795][T10757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1162'. [ 445.788496][T10726] kvm_intel: kvm [10723]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 445.842616][T10726] kvm_intel: kvm [10723]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 445.936347][T10726] kvm_intel: kvm [10723]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 445.966298][T10765] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 446.122282][T10726] kvm_intel: kvm [10723]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 446.181875][T10726] kvm_intel: kvm [10723]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 446.214619][T10726] kvm_intel: kvm [10723]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 446.467319][ T51] Bluetooth: hci3: Unknown advertising packet type: 0x73 [ 446.467349][ T51] Bluetooth: hci3: Malformed LE Event: 0x0d [ 446.467966][T10726] kvm_intel: kvm [10723]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 446.490651][T10726] kvm_intel: kvm [10723]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 447.241046][T10780] lo: entered allmulticast mode [ 447.511215][T10778] lo: left allmulticast mode [ 447.642847][ T30] audit: type=1400 audit(1771223276.318:1721): avc: denied { open } for pid=10783 comm="syz.5.1169" path="/dev/ttyqe" dev="devtmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 447.701376][ T30] audit: type=1400 audit(1771223276.318:1722): avc: denied { ioctl } for pid=10783 comm="syz.5.1169" path="socket:[29550]" dev="sockfs" ino=29550 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 447.890167][ T5889] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 448.170032][ T5889] usb 6-1: device descriptor read/64, error -71 [ 448.281607][ T30] audit: type=1400 audit(1771223276.318:1723): avc: denied { getopt } for pid=10783 comm="syz.5.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 448.459646][ T5889] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 448.819609][ T5889] usb 6-1: device descriptor read/64, error -71 [ 448.853978][T10797] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 448.929914][ T5889] usb usb6-port1: attempt power cycle [ 449.066742][ T30] audit: type=1400 audit(1771223277.718:1724): avc: denied { read } for pid=10802 comm="syz.1.1174" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 449.300892][T10807] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 449.459614][ T5889] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 449.534065][ T5889] usb 6-1: device descriptor read/8, error -71 [ 449.745009][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1177'. [ 450.129618][ T5889] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 450.151659][ T5889] usb 6-1: device descriptor read/8, error -71 [ 450.439083][ T5889] usb usb6-port1: unable to enumerate USB device [ 450.704367][T10829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1181'. [ 450.725187][T10829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1181'. [ 451.865217][T10841] netlink: 'syz.0.1184': attribute type 2 has an invalid length. [ 451.878713][T10841] hma224): entered promiscuous mode [ 452.392055][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 452.401677][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.401706][ T51] Tainted: [L]=SOFTLOCKUP [ 452.401713][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 452.401726][ T51] Workqueue: hci0 hci_rx_work [ 452.401750][ T51] Call Trace: [ 452.401758][ T51] [ 452.401765][ T51] dump_stack_lvl+0x100/0x190 [ 452.401796][ T51] sysfs_warn_dup.cold+0x1c/0x28 [ 452.401823][ T51] sysfs_create_dir_ns+0x24b/0x2b0 [ 452.401852][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 452.401872][ T51] ? find_held_lock+0x2b/0x80 [ 452.401894][ T51] ? kobject_add_internal+0x25f/0x930 [ 452.401922][ T51] ? kobject_add_internal+0x25f/0x930 [ 452.401952][ T51] ? do_raw_spin_unlock+0x145/0x1e0 [ 452.401976][ T51] kobject_add_internal+0x2c8/0x930 [ 452.402008][ T51] kobject_add+0x16a/0x1e0 [ 452.402035][ T51] ? __pfx_kobject_add+0x10/0x10 [ 452.402060][ T51] ? preempt_schedule_thunk+0x16/0x30 [ 452.402088][ T51] ? kobject_put+0xb9/0x640 [ 452.402111][ T51] ? _raw_spin_unlock+0x3e/0x50 [ 452.402137][ T51] device_add+0x294/0x1950 [ 452.402158][ T51] ? __pfx_dev_set_name+0x10/0x10 [ 452.402180][ T51] ? __pfx_device_add+0x10/0x10 [ 452.402200][ T51] ? mgmt_send_event_skb+0x2fb/0x460 [ 452.402227][ T51] hci_conn_add_sysfs+0x1a3/0x260 [ 452.402251][ T51] le_conn_complete_evt+0x11cb/0x1f40 [ 452.402278][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 452.402305][ T51] hci_le_conn_complete_evt+0x23c/0x3a0 [ 452.402327][ T51] ? skb_pull_data+0x15f/0x1e0 [ 452.402358][ T51] hci_le_meta_evt+0x34a/0x5f0 [ 452.402380][ T51] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 452.402404][ T51] hci_event_packet+0x682/0x11c0 [ 452.402425][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 452.402447][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 452.402472][ T51] ? kcov_remote_start+0x384/0x660 [ 452.402501][ T51] hci_rx_work+0x451/0xfc0 [ 452.402525][ T51] process_one_work+0x9d7/0x1920 [ 452.402555][ T51] ? __pfx_process_one_work+0x10/0x10 [ 452.402582][ T51] ? __pfx_hci_rx_work+0x10/0x10 [ 452.402603][ T51] worker_thread+0x5da/0xe40 [ 452.402632][ T51] ? kthread+0x13a/0x450 [ 452.402650][ T51] ? __pfx_worker_thread+0x10/0x10 [ 452.402667][ T51] kthread+0x370/0x450 [ 452.402682][ T51] ? __pfx_kthread+0x10/0x10 [ 452.402701][ T51] ret_from_fork+0x754/0xd80 [ 452.402721][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 452.402741][ T51] ? __switch_to+0x7b4/0x1120 [ 452.402763][ T51] ? __pfx_kthread+0x10/0x10 [ 452.402781][ T51] ret_from_fork_asm+0x1a/0x30 [ 452.402815][ T51] [ 452.402954][ T51] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 452.674302][ T51] Bluetooth: hci0: failed to register connection device [ 452.690361][ T51] ================================================================== [ 452.698410][ T51] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xe57/0x1050 [ 452.706372][ T51] Read of size 8 at addr ffff8880276b3480 by task kworker/u9:0/51 [ 452.714147][ T51] [ 452.716450][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.716470][ T51] Tainted: [L]=SOFTLOCKUP [ 452.716475][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 452.716484][ T51] Workqueue: hci0 hci_rx_work [ 452.716499][ T51] Call Trace: [ 452.716505][ T51] [ 452.716510][ T51] dump_stack_lvl+0x100/0x190 [ 452.716534][ T51] print_report+0x156/0x4c9 [ 452.716555][ T51] ? __virt_addr_valid+0x81/0x620 [ 452.716576][ T51] ? __phys_addr+0xe8/0x180 [ 452.716597][ T51] ? l2cap_connect_cfm+0xe57/0x1050 [ 452.716611][ T51] kasan_report+0xdf/0x1e0 [ 452.716632][ T51] ? l2cap_connect_cfm+0xe57/0x1050 [ 452.716648][ T51] l2cap_connect_cfm+0xe57/0x1050 [ 452.716663][ T51] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 452.716679][ T51] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 452.716693][ T51] le_conn_complete_evt+0x195c/0x1f40 [ 452.716709][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 452.716726][ T51] hci_le_conn_complete_evt+0x23c/0x3a0 [ 452.716740][ T51] ? skb_pull_data+0x15f/0x1e0 [ 452.716762][ T51] hci_le_meta_evt+0x34a/0x5f0 [ 452.716777][ T51] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 452.716794][ T51] hci_event_packet+0x682/0x11c0 [ 452.716807][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 452.716823][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 452.716843][ T51] ? kcov_remote_start+0x384/0x660 [ 452.716865][ T51] hci_rx_work+0x451/0xfc0 [ 452.716880][ T51] process_one_work+0x9d7/0x1920 [ 452.716897][ T51] ? __pfx_process_one_work+0x10/0x10 [ 452.716913][ T51] ? __pfx_hci_rx_work+0x10/0x10 [ 452.716928][ T51] worker_thread+0x5da/0xe40 [ 452.716944][ T51] ? kthread+0x13a/0x450 [ 452.716955][ T51] ? __pfx_worker_thread+0x10/0x10 [ 452.716968][ T51] kthread+0x370/0x450 [ 452.716980][ T51] ? __pfx_kthread+0x10/0x10 [ 452.716994][ T51] ret_from_fork+0x754/0xd80 [ 452.717008][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 452.717021][ T51] ? __switch_to+0x7b4/0x1120 [ 452.717037][ T51] ? __pfx_kthread+0x10/0x10 [ 452.717048][ T51] ret_from_fork_asm+0x1a/0x30 [ 452.717068][ T51] [ 452.717073][ T51] [ 452.925262][ T51] Allocated by task 51: [ 452.929388][ T51] kasan_save_stack+0x30/0x50 [ 452.934049][ T51] kasan_save_track+0x14/0x30 [ 452.938705][ T51] __kasan_kmalloc+0xaa/0xb0 [ 452.943273][ T51] l2cap_chan_create+0x44/0x940 [ 452.948103][ T51] l2cap_sock_alloc.constprop.0+0xf5/0x1e0 [ 452.953887][ T51] l2cap_sock_new_connection_cb+0x101/0x260 [ 452.959757][ T51] l2cap_connect_cfm+0x4e2/0x1050 [ 452.964758][ T51] le_conn_complete_evt+0x195c/0x1f40 [ 452.970106][ T51] hci_le_conn_complete_evt+0x23c/0x3a0 [ 452.975624][ T51] hci_le_meta_evt+0x34a/0x5f0 [ 452.980363][ T51] hci_event_packet+0x682/0x11c0 [ 452.985275][ T51] hci_rx_work+0x451/0xfc0 [ 452.989664][ T51] process_one_work+0x9d7/0x1920 [ 452.994576][ T51] worker_thread+0x5da/0xe40 [ 452.999139][ T51] kthread+0x370/0x450 [ 453.003180][ T51] ret_from_fork+0x754/0xd80 [ 453.007745][ T51] ret_from_fork_asm+0x1a/0x30 [ 453.012486][ T51] [ 453.014784][ T51] Freed by task 10842: [ 453.018825][ T51] kasan_save_stack+0x30/0x50 [ 453.023485][ T51] kasan_save_track+0x14/0x30 [ 453.028141][ T51] kasan_save_free_info+0x3b/0x70 [ 453.033141][ T51] __kasan_slab_free+0x5f/0x80 [ 453.037882][ T51] kfree+0x1f6/0x6b0 [ 453.041751][ T51] l2cap_chan_put+0x235/0x300 [ 453.046408][ T51] l2cap_sock_cleanup_listen+0x4d/0x2d0 [ 453.051933][ T51] l2cap_sock_release+0x69/0x280 [ 453.056849][ T51] __sock_release+0xb3/0x260 [ 453.061418][ T51] sock_close+0x1c/0x30 [ 453.065550][ T51] __fput+0x3ff/0xb40 [ 453.069505][ T51] task_work_run+0x150/0x240 [ 453.074071][ T51] exit_to_user_mode_loop+0x100/0x4a0 [ 453.079424][ T51] do_syscall_64+0x67c/0xf80 [ 453.083995][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.089862][ T51] [ 453.092159][ T51] The buggy address belongs to the object at ffff8880276b3000 [ 453.092159][ T51] which belongs to the cache kmalloc-2k of size 2048 [ 453.106185][ T51] The buggy address is located 1152 bytes inside of [ 453.106185][ T51] freed 2048-byte region [ffff8880276b3000, ffff8880276b3800) [ 453.120128][ T51] [ 453.122426][ T51] The buggy address belongs to the physical page: [ 453.128807][ T51] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x276b0 [ 453.137541][ T51] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 453.146012][ T51] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 453.153531][ T51] page_type: f5(slab) [ 453.157487][ T51] raw: 00fff00000000040 ffff88813fe3a000 dead000000000100 dead000000000122 [ 453.166042][ T51] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 453.174599][ T51] head: 00fff00000000040 ffff88813fe3a000 dead000000000100 dead000000000122 [ 453.183243][ T51] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 453.191886][ T51] head: 00fff00000000003 ffffea00009dac01 00000000ffffffff 00000000ffffffff [ 453.200531][ T51] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 453.209169][ T51] page dumped because: kasan: bad access detected [ 453.215551][ T51] page_owner tracks the page as allocated [ 453.221236][ T51] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3559415531, free_ts 0 [ 453.240834][ T51] post_alloc_hook+0x153/0x170 [ 453.245573][ T51] get_page_from_freelist+0x111d/0x3140 [ 453.251097][ T51] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 453.256969][ T51] new_slab+0xa6/0x6e0 [ 453.261013][ T51] refill_objects+0x26b/0x400 [ 453.265667][ T51] __pcs_replace_empty_main+0x19f/0x600 [ 453.271188][ T51] __kmalloc_noprof+0x688/0x850 [ 453.276014][ T51] serdev_controller_alloc+0x37/0x2a0 [ 453.281361][ T51] serdev_tty_port_register+0x60/0x290 [ 453.286797][ T51] tty_port_register_device_attr_serdev+0xd5/0x150 [ 453.293281][ T51] serial_core_register_port+0xd41/0x17a0 [ 453.298980][ T51] serial8250_register_8250_port+0x155a/0x2260 [ 453.305108][ T51] serial_pnp_probe+0x436/0x930 [ 453.309934][ T51] pnp_device_probe+0x2b3/0x4a0 [ 453.314765][ T51] really_probe+0x241/0xa60 [ 453.319252][ T51] __driver_probe_device+0x1de/0x400 [ 453.324518][ T51] page_owner free stack trace missing [ 453.329857][ T51] [ 453.332156][ T51] Memory state around the buggy address: [ 453.337754][ T51] ffff8880276b3380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.345789][ T51] ffff8880276b3400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.353821][ T51] >ffff8880276b3480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.361856][ T51] ^ [ 453.365893][ T51] ffff8880276b3500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.373925][ T51] ffff8880276b3580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.381958][ T51] ================================================================== [ 453.391812][ T51] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 453.399015][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.409854][ T51] Tainted: [L]=SOFTLOCKUP [ 453.414163][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.424209][ T51] Workqueue: hci0 hci_rx_work [ 453.428881][ T51] Call Trace: [ 453.432148][ T51] [ 453.435065][ T51] dump_stack_lvl+0x100/0x190 [ 453.439741][ T51] vpanic+0x552/0x970 [ 453.443713][ T51] ? __pfx_vpanic+0x10/0x10 [ 453.448209][ T51] ? l2cap_connect_cfm+0xe57/0x1050 [ 453.453398][ T51] panic+0xd1/0xe0 [ 453.457110][ T51] ? __pfx_panic+0x10/0x10 [ 453.461515][ T51] ? l2cap_connect_cfm+0xe57/0x1050 [ 453.466702][ T51] ? preempt_schedule_common+0x42/0xc0 [ 453.472158][ T51] check_panic_on_warn.cold+0x19/0x34 [ 453.477519][ T51] end_report.part.0+0x3a/0x90 [ 453.482279][ T51] kasan_report.cold+0xe/0x18 [ 453.486954][ T51] ? l2cap_connect_cfm+0xe57/0x1050 [ 453.492145][ T51] l2cap_connect_cfm+0xe57/0x1050 [ 453.497163][ T51] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 453.502616][ T51] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 453.508064][ T51] le_conn_complete_evt+0x195c/0x1f40 [ 453.513429][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 453.519145][ T51] hci_le_conn_complete_evt+0x23c/0x3a0 [ 453.524684][ T51] ? skb_pull_data+0x15f/0x1e0 [ 453.529452][ T51] hci_le_meta_evt+0x34a/0x5f0 [ 453.534210][ T51] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 453.540271][ T51] hci_event_packet+0x682/0x11c0 [ 453.545201][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 453.550481][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 453.555852][ T51] ? kcov_remote_start+0x384/0x660 [ 453.560964][ T51] hci_rx_work+0x451/0xfc0 [ 453.565371][ T51] process_one_work+0x9d7/0x1920 [ 453.570300][ T51] ? __pfx_process_one_work+0x10/0x10 [ 453.575663][ T51] ? __pfx_hci_rx_work+0x10/0x10 [ 453.580592][ T51] worker_thread+0x5da/0xe40 [ 453.585179][ T51] ? kthread+0x13a/0x450 [ 453.589415][ T51] ? __pfx_worker_thread+0x10/0x10 [ 453.594516][ T51] kthread+0x370/0x450 [ 453.598565][ T51] ? __pfx_kthread+0x10/0x10 [ 453.603130][ T51] ret_from_fork+0x754/0xd80 [ 453.607697][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 453.612784][ T51] ? __switch_to+0x7b4/0x1120 [ 453.617440][ T51] ? __pfx_kthread+0x10/0x10 [ 453.622005][ T51] ret_from_fork_asm+0x1a/0x30 [ 453.626750][ T51] [ 453.630038][ T51] Kernel Offset: disabled [ 453.634333][ T51] Rebooting in 86400 seconds..