last executing test programs: 3m1.722826619s ago: executing program 2 (id=184): syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x90, 0x2}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x80, 0x0, 0x7}, @generic={0x3}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10002, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000380)="031bb31f8b03b4c9739ce71a9cbff877b810e0b1217d1924cc6aa1428b5a439fa9ed786d98d0d6cad3c7f1aaca999d93d6653b3eab6709c5f41154899b8ea7890f83f2698826b39afe2ef68d1e2340c9d7351cf8d8d0392fb490957059d21da3a02da2e641f41ded422ee0f38a", 0x6d}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0xd) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3m0.491730183s ago: executing program 2 (id=195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x700, r1, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x84}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe6}]}]}, @NL80211_ATTR_TID_CONFIG={0x310, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1}]}, {0x278, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x264, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x1, 0x6c, 0x16, 0x36, 0x60, 0x9, 0x6, 0x12, 0x30, 0x4b, 0x3, 0x15, 0xb, 0x48, 0x4, 0x1, 0x6c, 0x3, 0x16, 0x24, 0xd, 0x30, 0x30, 0x9, 0x60, 0x3964c9b47588f113, 0x16, 0x3, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x5, 0x400, 0xd2, 0xfff7, 0x1ff, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x16, 0x875, 0x4, 0x178, 0x800, 0x1, 0x9, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x8}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x5, 0x5, 0x3, 0x50d4, 0x8, 0xb, 0xb5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xb, 0x36]}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x2, 0x5}, {0x3, 0x6}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x6}, {0x1, 0x8}, {0x4, 0x8}, {0x0, 0x5}, {0x1, 0x6}, {0x7, 0x5}, {0x6, 0x3}, {0x5, 0x4}, {0x7, 0x2}, {0x4}, {0x6, 0x1}, {0x6, 0xa}, {0x1, 0x3}, {0x5, 0x1}, {0x4, 0x5}, {0x0, 0x7}, {0x6, 0x8}, {0x0, 0x1}, {0x4}, {}, {0x2, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xc, 0x4, 0xfe61, 0xfff9, 0x8, 0x7, 0x8]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x4}, {0x7, 0x2}, {0x6, 0x8}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0x6}, {0x0, 0x5}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x7}, {0x7, 0x1}, {0x4, 0x8}, {0x0, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x4}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x5}, {0x7, 0x6}, {0x4, 0x5}, {0x2}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x6, 0xa}, {0x6, 0xa}, {0x2, 0x8}, {0x7, 0x7}, {0x7, 0x8}, {0x6, 0x3}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x16, 0x60, 0xded3be68ca6d6acd, 0x5, 0x12, 0x6, 0x48, 0x30, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x4, 0x7, 0xfffc, 0x5, 0x5, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x101, 0x668, 0xffff, 0x5, 0x1ff, 0x4, 0xb]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x4, 0x1b, 0x9, 0x16, 0x6, 0x48, 0x48, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xd28, 0xe, 0x5, 0x5, 0x6, 0x0, 0x6]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x5, 0x1, 0x4, 0x5, 0x8000, 0xfffe, 0x5]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x4}, {0x0, 0xa}, {0x1, 0x7}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0x7}, {0x6, 0x7}, {0x6, 0x4}, {0x4, 0x3}, {0x6, 0x4}, {0x7, 0x4}, {0x7, 0x6}, {0x7, 0x5}, {0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0xa}, {0x0, 0x6}, {0x7, 0x4}, {0x5, 0xa}, {0x3, 0xa}, {0x0, 0x7}, {0x3, 0x7}, {0x0, 0x3}, {0x2, 0x2}, {0x2, 0x9}, {0x4}, {0x4, 0x8}, {0x0, 0xa}, {0x5, 0x8}, {0x0, 0x7}, {0x4, 0x9}, {0x1, 0x5}, {0x2, 0x6}, {0x7}, {0x2, 0x3}, {0x5, 0x6}, {0x4, 0x9}, {0x4, 0x6}, {0x6, 0x4}, {0x0, 0x4}, {0x3, 0x7}, {0x7, 0x2}, {0x6, 0x5}, {0x7, 0xa}, {0x5, 0x9}, {0x6, 0x8}, {0x5, 0x1}, {0x1, 0x9}, {0x1, 0xa}, {0x2, 0x2}, {0x7, 0x7}, {0x3, 0x5}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x5}, {0x3}, {0x0, 0x4}, {0x4, 0x5}, {0x0, 0xa}, {0x6, 0x5}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x9, 0xb, 0x3, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x2}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x6}, {0x3, 0x5}, {0x2, 0x2}, {0x6, 0x3}, {0x4, 0x5}, {0x5, 0x8}, {0x6, 0x9}, {0x7}, {0x2, 0x6}, {0x0, 0x9}, {0x6, 0x1}, {0x6}, {0x7, 0x6}, {0x5, 0x9}, {0x1, 0x2}, {0x5}, {0x2}, {0x1, 0x3}, {0x6, 0x6}, {0x1}, {0x1}, {0x7, 0xa}, {0x4, 0x3}, {0x4, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x5, 0x9}, {0x6, 0x3}, {0x1, 0x4}, {0x6, 0x4}, {0x3, 0x4}, {0x4, 0x8}, {0x3, 0x3}, {0x4, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x3, 0x8}, {0x6, 0x4}, {0x4, 0x8}, {0x3, 0x7}, {0x0, 0x8}, {0x4, 0x5}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2636, 0x1, 0x6, 0x4, 0x6, 0x9, 0x677]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x6c, 0x5, 0x30, 0x18, 0x1b, 0x24, 0xc, 0x6, 0x9, 0x1, 0x48, 0x5, 0x0, 0x3, 0x60, 0x1, 0x48, 0x4, 0x1, 0x18, 0x12, 0x5, 0x9, 0x18, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x80}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2e}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x358, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x62}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcb}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x234, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x20c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x9, 0x1, 0x800, 0x4, 0x0, 0xffff, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0xa}, {0x4, 0x5}, {0x5, 0xa}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0xa}, {0x2, 0x4}, {0x5, 0xa}, {0x3, 0x7}, {0x1}, {0x6, 0x8}, {0x4, 0x9}, {0x3, 0x9}, {0x4, 0xa}, {0x0, 0x8}, {0x2, 0x2}, {0x4, 0x7}, {0x2, 0x6}, {0x0, 0x5}, {0x0, 0x9}, {0x5}, {0x2, 0x7}, {0x2, 0x6}, {0x2, 0xa}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0x4}, {0x3, 0x6}, {0x6, 0x4}, {0x3, 0x2}, {0x3, 0x6}, {}, {0x6, 0x9}, {0x7, 0x2}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0xa}, {0x6, 0xa}, {0x1, 0x4}, {0x7, 0x3}, {0x6, 0xa}, {0x2, 0x9}, {0x2, 0x8}, {0x7, 0x3}, {0x2, 0x3}, {0x3, 0x7}, {0x5, 0x4}, {0x1}, {0x5}, {0x1, 0x2}, {0x7, 0x3}, {0x2, 0x7}, {0x1, 0x4}, {0x1, 0x5}, {0x6, 0x5}, {0x2, 0x5}, {0x3, 0x8}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7f, 0x400, 0x6, 0xffff, 0xd1, 0x2, 0x4]}}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x2, 0x8}, {}, {0x3, 0x2}, {0x5, 0x9}, {0x5, 0x3}, {0x7, 0x1}, {0x2, 0xa}, {0x5, 0x4}, {0x0, 0x8}, {0x2, 0x5}, {0x6, 0x5}, {0x1, 0x4}, {0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x7, 0x8}, {0x3, 0x9}, {0x1, 0x9}, {0x5, 0x6}, {0x0, 0xa}, {0x0, 0x9}, {0x4, 0x9}, {0x2, 0xa}, {0x6, 0x4}, {0x5, 0x3}, {0x4}, {0x1, 0x3}, {0x3, 0x3}, {0x6, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {}, {0x0, 0x7}, {0x5, 0x1}, {0x7, 0x6}, {0x6, 0x3}, {0x0, 0x4}, {0x2, 0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x7, 0x5}, {0x6, 0x3}, {0x5, 0x7}, {0x1, 0x4}, {0x2, 0x5}, {0x1}, {0x3, 0x1}, {0x1, 0x6}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x2}, {0x4, 0x2}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x7}, {0x3, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x5}, {0x6, 0x2}, {0x5, 0xa}, {0x3, 0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0x5}, {0x3, 0x8}, {0x6, 0x9}, {0x0, 0x1}, {0x6, 0x3}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x6}, {0x7, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x800, 0x0, 0x2, 0x5, 0x7, 0xff, 0x7fff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x1b, 0x12, 0x6c, 0x77, 0x4, 0x26, 0x30, 0x6c, 0x48, 0x2, 0x18, 0x3a, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0xa}, {0x0, 0x3}, {0x6, 0x7}, {}, {0x5, 0x6}, {0x1, 0xa}, {0x2, 0x4}, {0x6, 0x1}, {0x0, 0x4}, {0x4, 0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0x12, 0x48, 0x24, 0x16, 0x60, 0x18, 0x18, 0x1b, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x85, 0xb2, 0xf, 0x1, 0x1, 0x5, 0x7, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x4, 0x3ff, 0x2, 0x80, 0x7ff, 0xa]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x9}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0xa}, {0x4}, {0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x3, 0x1}, {0x5, 0xa}, {0x1, 0x9}, {0x2, 0x3}, {0x7, 0x3}, {0x1}, {0x1, 0x9}, {0x2, 0x2}, {0x7, 0x9}, {0x6, 0x4}, {0x5, 0x1}, {0x1, 0x4}, {0x3, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x0, 0x9}, {0x2, 0x9}, {0x7, 0x6}, {0x0, 0x7}, {0x5, 0xa}, {0x4, 0x8}, {0x1, 0x1}, {0x3, 0x8}, {0x2, 0x4}, {0x1, 0x4}, {0x1, 0x2}, {0x1, 0x5}, {0x4, 0x6}, {0x4, 0x5}, {0x4, 0x5}]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x5}, {0x1, 0x2}, {0x0, 0x9}, {0x4, 0x7}, {0x1, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x5, 0x9}, {0x4, 0x8}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0x8}, {0x7, 0x8}, {0x7, 0x7}, {0x6, 0x6}, {0x5, 0x7}, {0x3, 0x4}, {0x4, 0x5}, {0x1, 0x3}, {}, {0x3, 0x6}, {0x0, 0x4}, {0x5, 0x7}, {0x2, 0x6}, {0x7, 0x8}, {0x3, 0x2}, {0x0, 0xa}, {0x1, 0x5}, {0x0, 0x3}, {0x2, 0x4}, {0x7, 0x9}, {0x4, 0x9}, {0x0, 0x3}, {0x2}, {0x7, 0x7}, {0x6, 0x3}, {0x1, 0x8}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0xc, 0x3, 0x6, 0xc, 0xb, 0x9, 0x4, 0x12, 0x30, 0x16, 0x1, 0x13, 0x5, 0x18, 0x6c, 0x10, 0xc, 0x9, 0x30, 0x6c, 0x6, 0x6, 0x6c, 0x12, 0x7, 0x0, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x50}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xaa}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7c}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x26}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x90}]}]}]}, 0x700}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xb) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r4, 0x100, 0x2) r5 = socket$inet6(0xa, 0x1, 0x88) sendto$inet6(r5, 0x0, 0xfd, 0x40000c0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xac}}, 0x9}, 0x1c) getdents64(r4, 0x0, 0x22) 3m0.491293443s ago: executing program 2 (id=196): r0 = socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xeb, @dev={0xfe, 0x80, '\x00', 0x35}, 0xfffff000}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xeb, @dev={0xfe, 0x80, '\x00', 0x35}, 0xfffff000}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) sendmmsg$inet6(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x241}], 0x1}}], 0x1, 0x4000001) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x9}]}) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x9}]}) syz_open_procfs(0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000015002b0128bd7000fcdbdf250a0807000100506ac1000000503382a661822fc5b35375f67e787bb53c0730c3f4ec25bbed094e2c4808a33c4241ba9f573c4bc605c4e94145bef30dc33a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) 2m59.678534776s ago: executing program 2 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x183) landlock_create_ruleset(&(0x7f0000000280)={0x4002, 0x18, 0x6}, 0x18, 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x8, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000240)=0xad, 0x4) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000b40)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x6b, '\x00', 0x5, 0x8}) setsockopt$inet_int(r2, 0x0, 0x15, &(0x7f0000000080)=0x1c, 0x4) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') preadv(r6, &(0x7f0000000400)=[{&(0x7f0000000340)=""/152, 0x98}], 0x1, 0x1, 0xe3d0) chdir(&(0x7f00000000c0)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xb6) 2m59.622763736s ago: executing program 2 (id=199): sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000005780)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="030328bd00000000004684a7a1eb71c508000000000000"], 0x14}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000004c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) (async) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) sendmmsg(r0, &(0x7f0000006180)=[{{&(0x7f0000000100)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="ec8090a81ee533ce542635228f234bf8bf13f6c4b728396e79702b74f93f846f028e0e8a411aa5636028596a9b0f67f30184ad45cbe9f7be00f9474c96b496992a0b652a20cea40c8ef0b144eb315588390a44981caea52cb3069fc9604fe9c2a61255e80a76d8f0ea21ef979eed512cfeac81780e1478c347a0462275636e88ea3f3165eaa3a3c8c02ba91e0d7437d4de28b8aa7664744cc23f2903a2d5321cd49fc3ef0466cda93c", 0xa9}, {&(0x7f0000002500)="aee3230164de6ef9dc1c7b017877518453d3907282d1cf0742351c861fc6323fb18de6d8951354595182e9495f2fb8f753255e017d5a5db49b199250f5c16896dcbbbbcef205a476519a0ac89130a99d2eb7646004592b3043f2d186d176fd3e73c1604d4ad66d801153d1babac821a1c4a26d1ad3336335391cb7d0dd7e91fe39f8c1c3922bc9d2ef60bb939fb8f4421101455a9eb98f8660348b21c08ca67b05a5a81adf79251afbb98f171db22df417a7ac8364b3a9384f3d5ae4efab1ea29128cc60cf93c5ed53daf2c7cd1a2589f77f2d16b7c77818430b43eaacb67781bfebd63e8edd0f18fcdb91395b86ad27b88845", 0xf3}], 0x2, &(0x7f0000002600)}}, {{&(0x7f0000000340)=@can={0x1d, r2}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002840)="a83fde64dc3cd5fd9b873cbd1aa92ab59023c80d70d8bbaae65a8df0ea994fbb4d295b3d2a8660dd67d64db67ff8490ad6a5e43cf82ed00a4d02d494f83f59945ed5133a939274a6da36cef6543406eaa1571744ab87f7e4b03c3f1943b080f3816272cb6cc1d2104a7af7a314980b6bf84e41a284fc65f1edd788b21803f663ca71d5d11d5ab36cdeda8d", 0x8b}], 0x1}}, {{&(0x7f0000002940)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffffe, @remote, 0x20000}}, 0x80, &(0x7f0000003000)=[{&(0x7f00000029c0)="476d8f052f4fe227793715d80745edca21c9c104e8e2ec491eb80c4315b62c7c36c1d127bd7ba7b5cdfc40d123e974afae9453fbff747a3cb7c62b876f7676f0086aac14d189c0d171f9a5f54ec3ce78b6f17d6caf6b92c726df177d572c08a74b79373f1ef71fdb13f3b411ddecc679ad4b86476d817cd56db77bcd534896a45c13f0675246783f50ea038c143a141b21c49ff4fe1b2f0ce0cd7f1e733efe3c923ac71a21d9c4d109b459296fcddf6c66eb7317a367775a9fccca5a269364349011e5aa", 0xc4}, {&(0x7f0000002ac0)="267b26f9b46977de0f7cd37febe01cc0fd829abdf5eb933a6c51", 0x1a}, {&(0x7f0000002b00)="5290b87c25d38a15762a49855acb380402b0216baddce549c0579d61fe73a28b1a1b66f0a45af151389b85ab19851b842b8d899568d6e18f6124d7106ab1064d1e25dbbd5a699c9794311dac6dfaef1d06c81bc7ad7b3b2279e7ff266fc0c8c66513b12548773ba58eb235e5e96d6232a35c80b2cbe7e15915598f1682e7fffcf237ecd0ecb165d1e84bb60e9743a8", 0x8f}, {&(0x7f0000002bc0)="03f19b1c1800d01f8584ad30194bed6f529bf009f0fbe2ba5b74eacdf3d4748a018825e9174de691710e597f74acdbbc1092c4a259275d52a2da78673762a25d96de7b3469ea4d38db504522955a72305861f4ef88178381d18fbaf1ef4c809a8a991ec531d05a4eb4d63d4dddcdedb4b1b93ddc2f1ccbffcecdfec68b95c520860db12bbe2b6d8e6ff40d52b0e94141c9641c2dcf67ac32230a22d183ec0512be7b89afc5e99f793e09a87f76085cb43fa2985f3aac0037f5f56a1e1ee427abc88d3ac695f96d65d67bb23b78fae324a94ffac2d91b0c535337c29aeb9e54d53751", 0xe2}, {&(0x7f0000002cc0)="526369777c52787291828583fae9e0bfe89f0324b1e043ece8dedf800a89f9f57b8814c8eccf686b66db1a98d1eedcee3cea45ce3318002b18c068ac09621c915f7159ab64de97e2c4", 0x49}, {&(0x7f0000002d40)="7282cade6610b40a2700d6eb24186d833672db20b05465f9ed54b0a75659c138aad22f4547d613b1889bcc6902dcee06c51970bcdb5f19262ea2aa584293f9d9da842251450a6f69d69add42dce81dc19186bcfaa25ac93b6007c5e1", 0x5c}, {&(0x7f0000002dc0)="f290c10a552ef94dfad6df806a5351b89c6931e687f6fa1067b31c077bd1c01f3839a282632f617d89badc276a56241db2c23d565526403aa347da25ad7074e028ee60c4db0c24b6eb3146ea3f7aaa048f562be00b9a72aab452aa652506b9bbc6dbab252b81eee81491016efc9e1f0c1aecd1cb6f210c76138f63e6910a0dba9ddb7426918aaca5c0", 0x89}, {&(0x7f0000002e80)="86712ff6e1454c29ff6723e96c3ef4e1c6912c718df4819dc21f11a63e94d240ca8520dee727596324f4bfa0cb8c0f00d3dd5c043e70e8d8ad09fc0b739031fd101a395db3d4c6ea2f16675b985eb9b51857722e8af6cf096b9e96bb8e11fc957fcccd9582ffc49b6f38d77c7dc3550f891d98f8af8534dfe457f4fca4b4c83f28830905686dc42bf4a266d49d3ff975dadc84a91a9058b9fd0a78cc9f21a40c54fc6b4bb957fed353be7d1554c708baf4580bd6d6ef9e6c7220250e08a2", 0xbe}, {&(0x7f0000002f40)="7391fbedd9191ff0499a94abf883f7d481bc7468ab83fb47b7cc96b4d7232e522a1878374f8b710fcbfb2cf2bd10787658535eafb34b0b777058016c7ead81cab9b6d647d7a10a20fff0822072705fb86995d845dc0726450bbb77212fd8e07f1b6763c2c2cecbf025898922910c45d24c0aa4d9d007184bc3f8e452abcffbe8b2bddc0fc86ade53351dc4f742f99c63eb34d12ea1b0b527195c358fb15fe5ced8bf1e37ec136068dcf741206da8de59dd01290704caa30280ed", 0xba}], 0x9, &(0x7f00000030c0)=[{0x48, 0x1, 0x8000, "bdeeeaf9647096824542b03a9c0a73cbb6175d380c6278b6ca8a6e330014955d249ffb41ccfd4ee8f545263d7a50195d2de7ecefa44a96dd"}, {0x78, 0x10c, 0x6, "6f1068ef1129fc838bafe46f4dea96946b8b79ed4b253a58dd9a910bf142c7344ad1de9eff134951b2dad2eea1704984e7cfe47acf9b760521ec0aa032b7abfc4946a35bf23f99dfc4a89b7d1644b6dcb3675db0d9636d252f71bc12c0b8b56fc9"}], 0xc0}}, {{&(0x7f0000003180)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(cbc(camellia),tgr128)\x00'}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003200)="0e9d1a24ff09e3f1592590aa9c773a583a0b73b5916006f66c5ab884eefb68ffdbddfade007f0e92e216167bcbb01c4a03c87484922676fa494d12b98ad57f7a8336d5f2ad72647abbe8516167ef97c120b86eb37e6d1f8fa7ca8c18fa0f5e8c43307e1bf7748acfdff8177725cb21da264f7617ed24baeae455813e3d6cb32b18b2b0f7d74bca1b7d7744ead9ea88f1daaaaa41fe2e682fd625529c3c8ff004ca8f15385091721b2f64f04fdad911b3bf33d4640054cad0ce54e836548f156a0f6755efdd339a6a5e02a9b0ad25ac1f869d4bef8ad9d3db714cf4bf597c", 0xde}, {&(0x7f0000003300)="b49f56ab5dce843b87b9dec78cc6b0d961d4375e323295d8d6d0b26d04ca8d4e6a47ecfae72700b10f7ccae0f7c5480b015b2a9c7662374f08d9dcb613e7925aa78920375c1abcccb431598e0efa5882fc506a3db9e9a36b28f21ea110bbd7c224f84c651142dd5e0c0fe1847afb0904a6c8e2387fbf6f1f94b9587ab3b38fa672633eaf6720dc6cb692f6f64d457c503b7378b75b60bea00e99c72c4ce57d10b500d5fcbcfc79081c41959ea649ab6d381f58d63128cb45857b0f8ddb6a76d27e29448332d0", 0xc6}, {&(0x7f0000003400)="47b4f2ccc8", 0x5}], 0x3}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000003480)="13b85ddf9f8c594da4c8ca1d6ce0c7790a945a3d88e94be9ec3a090aa921ec2c1b90af84402301c782da06728df03a21b748a7d9a99f58694aacb836c40845bd86cb07c6369d4e14765c4544ed4e25aa576cedb67162bd5f4692c1983c268af9fa715263e94eb981670ecdf2d040a56c11d83c71f5e37de8cb938fa3ed2c7c2a9cb39c915dcdd7a453b0343663ae1b171d57c99a9aaf3061c871478bf08d494c4a190a9d7af7dcd15909a71ecac7eb1c701894b03f55d0b40bed9b1928f59eb55d8d37253a80f15e4d205a4a1974f8c5ed43d4b78964784997e946843a92fc73b645c61bd6cc", 0xe6}, {&(0x7f0000003580)="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", 0x1000}, {&(0x7f0000004580)="fcb0d0462af09add6500d8dacb670b3d6dc0f0c7b32b23183b236f641ec8da1904a3e585b9ec328c5b148a484a783d7c7b0ebbb976e66d1f46b8980611d8b1202bf1a951388eb8d58f21a243eccbe7bf399d5f4e57ecd4a0e325f0ac69e92a298dac71413eadc2aba2f579", 0x6b}, {&(0x7f0000004600)="ad859dfa93592f4a7b160c1453cd97de03f9ba6131f857636f0aa990c125d939bbd8b1abbffdd5086c580d25629ab9410a1ccf8e362577dd4594301ff0385259bacdca7b99f034cf6f89a6da4d10c8a9b75d36003da91cbd881d054e4bf67e4da37cdd7701b4cc0d9dbd022b76968cfb579cc84f0cdeebb90081fd5aed326f3c262e740a8711ca22", 0x88}, {&(0x7f00000046c0)="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", 0x1000}, {&(0x7f00000056c0)="298edc2d8d769e59cd6c466614d3a53bba7631dc38b53b980ab4709a8c2f1dfff4d85b3479b5a1f8dd391b82693fd34d83b8824a41", 0x35}], 0x6, &(0x7f00000063c0)=ANY=[@ANYBLOB="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"], 0x1b0}}, {{&(0x7f0000005940)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x80, &(0x7f0000005d40)=[{&(0x7f00000059c0)="df101d5ddae8612b4638a3f387836943114f4b3e8fae97d2786935e94190d31927681f7cfbd2653ba4f223d340789df797dce22a0e27fef400f8a67b9944aba4dde3c4858d5f44f63727ebeb3cbb3f904c2db255471a8dbb57623308571af87abdb3ca1cb28670347f377035a1d33a426720a64e16f6ecc348507b410124d7232e066f15319ed12b6cdb354474e69fcc425eb508d25640d4ad72f8586921d8db48721d5b306fca1a512f2d8b302603a1089eb87662e80db9aa6453554d43cefe597ce861138a44a4825ab1fc3d83", 0xce}, {&(0x7f0000005ac0)="fe653af6b7be864d0e7482c09069069f0809e431b059d4926ea5c68d8059068bbcae140aa3553dd99ef0f2074d7a6f3269abf9d650da92e609bff05c80ed90891823a03408569cf264b061d1651d95901d8ddc155e2f002f10d9a32007aaa93a3ec1bed3221e8fce215e31842f36edec5bee06b55ab4b7fc6aa540a18671eb762c87cbbd6a4a45f11f75bef17a603157db5676813e8ea9394fc19ecdb3140544f0e9efe6def41fc170ec0b5a645c3dfbc7e4e4c09cdc", 0xb6}, {&(0x7f0000005b80)="641292bd3b3a712f461e857260e2b9cb2215680bcd383da7650a47a6eb5f8d2109762a9b6f3498e26d81b6b9fdd7eca8", 0x30}, {&(0x7f0000005bc0)="49ff471ac93e110959c517ced792d2f1b7fba39236f84c9a3441af3e399f7a9c15ede903441b1982ed2b15fc3c38c20d182059d9b8d8ce352a9e119709992a06c0207487cc33f25cf057e98494a859236c3f1511364a4f821f8bca8d1098418e872e415d9d6a5c2b716a8aef1faf3710450f2f6bea3d6f8b666ae553cd2d84734ef13c2806171e57cf130fa32a63b5d0", 0x90}, {&(0x7f0000005c80)="a40d42b088c86274eda569ac4e885551fb938a61b41f96907d9413fc415abd7281a21ae625191106126f39022fa0cd3b6e646de5c14b1a9912e5432d83f85cf319ddf1f20cbe90dcad7bacfe573e62191e35b5d47ec9699809a4b65ed0a79c1966effdac24d46143c1c12a609022162ce763fe1f0826ed7c0f5dde6bebca8c6768c0", 0x82}], 0x5}}, {{0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000005dc0)="491994f6c8da29a9024c2aeb6b5fad8b737e14613ce23047b84cee70c3c1d988f494a2e4e5f369ccf714083dff44ef41c595c9500a622812404395da69aa014dd7eaf69cf26b9892fa985ed9c7c30e243e0cd5c57409e540c2d76013e9f8b89864a16fc87a4cae38", 0x68}, {&(0x7f0000005e40)="20e43bfd53f893bb05cd547df9d61b21c2ad0dedae941c6b024bbeeceb50071901635a487ead96c62d3b19df691f33be690abb89f52ef6e4625ff04d900e7f304555194117ec13590ad94a087a2f224107e0dae9ba7116c85cbae5484f08e4a74dc0768c4753bb4e85c929d845a501", 0x6f}, {&(0x7f00000057c0)="0f5bb87e62a8d931d9f3f4bd667eebb37e9b938260f714a4285b1dd152e4fefd45afedfc6938d04707882f4ca5d7f0e4abf14d02a0a2306c8bd05a419c831704abf41879ad89e6202e751fd7acc294945c224ffa916abf3e531a8c4c3979caed67e8a8810fddf84eb7867bfb18936cc13b70ec2e825a58c731980bdd252550527cf250514ceea08179d9dfaadbad9795fdcf8a4632921b760248c3b9a9ebb35d0c295cdc5a4d3ffff4f5d026ae87e9d4266710430499bff6d306ed239a7b2541dc4a2cc877121996928156ed3fd74260cf22369f89398c", 0xd7}], 0x3, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], 0x158}}], 0x7, 0x800) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0xfff8, 0x10, 0x20, 0x7}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) write$char_usb(r4, &(0x7f0000000040)="34ded9eea7d7aefd2ba1d0a898dd04a3a5666325c307ec5c6af87cac58de41f9ae171c083d8e90d71c4139a550e31160159eeec9f3244939bb386822cf067b1dab4be811cdc76820dc811ea587a5833ac34d638a1bc91e2c96a4249d37", 0x5d) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000440)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async) dup(r5) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r12, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x24}}, 0x0) (async, rerun: 64) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) 2m59.544750541s ago: executing program 2 (id=201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000001c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xffffffff, 0x0, 0x9a, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x0, 0x7f}, {0xd000, 0x8080000, 0x3, 0x5, 0xc2, 0xc0, 0x9, 0x66, 0xc5, 0x7, 0x30, 0x40}, {0xdddd0000, 0xdddd1000, 0xf, 0x6, 0xb, 0x34, 0xe, 0x6, 0x3, 0xc, 0x2, 0xff}, {0x8000000, 0xeeef0000, 0xc, 0x58, 0x7f, 0x76, 0x2, 0xc, 0x7f, 0xfc, 0x9, 0xf}, {0x504ce1cb89483871, 0x1000, 0xa, 0x8f, 0x80, 0x2, 0x9, 0x3, 0x1, 0x8, 0x4, 0x6}, {0xdddd1000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0xf8, 0xd}, {0xffff1000, 0x100000, 0x10, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0xeeee0000, 0x5000, 0x9, 0x2, 0xff, 0x0, 0x9, 0x80, 0x9, 0x8f, 0xdb, 0x31}, {0x8080000, 0x59}, {0x4, 0x6}, 0x10000, 0x0, 0x1, 0x151, 0x3, 0x1000, 0xdddd1000, [0x8, 0x80000000003, 0x3, 0x3]}) (async) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (rerun: 32) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) (rerun: 64) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) (async) syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x64010100}, {0x2, 0x4e20, @loopback}, {0x2, 0xfffd, @broadcast}, 0xaf, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x2, 0xfffffffffffffffc, 0x1000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x7, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd0000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m59.53950602s ago: executing program 32 (id=201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000001c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xffffffff, 0x0, 0x9a, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x0, 0x7f}, {0xd000, 0x8080000, 0x3, 0x5, 0xc2, 0xc0, 0x9, 0x66, 0xc5, 0x7, 0x30, 0x40}, {0xdddd0000, 0xdddd1000, 0xf, 0x6, 0xb, 0x34, 0xe, 0x6, 0x3, 0xc, 0x2, 0xff}, {0x8000000, 0xeeef0000, 0xc, 0x58, 0x7f, 0x76, 0x2, 0xc, 0x7f, 0xfc, 0x9, 0xf}, {0x504ce1cb89483871, 0x1000, 0xa, 0x8f, 0x80, 0x2, 0x9, 0x3, 0x1, 0x8, 0x4, 0x6}, {0xdddd1000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0xf8, 0xd}, {0xffff1000, 0x100000, 0x10, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0xeeee0000, 0x5000, 0x9, 0x2, 0xff, 0x0, 0x9, 0x80, 0x9, 0x8f, 0xdb, 0x31}, {0x8080000, 0x59}, {0x4, 0x6}, 0x10000, 0x0, 0x1, 0x151, 0x3, 0x1000, 0xdddd1000, [0x8, 0x80000000003, 0x3, 0x3]}) (async) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (rerun: 32) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) (rerun: 64) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) (async) syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x64010100}, {0x2, 0x4e20, @loopback}, {0x2, 0xfffd, @broadcast}, 0xaf, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x2, 0xfffffffffffffffc, 0x1000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x7, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd0000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.276353754s ago: executing program 4 (id=1823): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "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"}, 0x10b) (async) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r2, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, r3, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800040, 0x81}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) (async) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) (async) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) (async) sendto$inet6(r4, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4050, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c) r5 = timerfd_create(0x7, 0x80800) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r6, 0x29, 0x1, 0x0, &(0x7f0000002c40)) timerfd_settime(r5, 0x3, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) mmap(&(0x7f0000614000/0x3000)=nil, 0x3000, 0x0, 0xec2ab55ce485c7de, r0, 0x6661a000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) 22.968155635s ago: executing program 4 (id=1824): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000080)={0x6, 'veth0_to_batadv\x00', {0x1}, 0x9}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000023c0)={0x0, 'bond_slave_1\x00', {0x1}, 0x109}) pwritev2(r0, &(0x7f0000000680)=[{&(0x7f00000007c0)="d190033f19d34c118ce88957d625c91ae547b86be11e40b283d37fe80e15749ddf0f927014dd035f1a4e6613494f9e8997137e174af122dfdf0536c1d6ca2cdc47b5d3d6b3b045822953127be8df47b92521262204a235cff0f34604ebd0d049e77adde210b8f0283598794bed61912e3c61099823153cade293546143edded11ff38fad0d3be2b321a2bd8e55227c0e3daaebfafa42fcb5b30a9e324689f73e1dbab4ead8058d21e4ec5ef8984683fe5fe363c4fd3b780982d99b499a44d89c0c7b1ed548983fb32a7b0dbf3c5b41c04b57cb8f8a92053e3804b0d2a03be01029f8b4c3abd7502d356b46", 0xeb}, {&(0x7f0000000100)="2ad01f8e96e369a2c1e746300f950dc418b0a0a706dea8775b9d3a8e5bcc2324d669d385b9c93bc6af691d2baac8e2a1a53f1d94399c18caa22df8060f13a7b176ca77f8d51be9568683cd8c15cbdbef82ce1a2d6f03ff0f32dd7467566dbf02674d69b5ac9371bfcbad64d832fd5a7257f10c67ae36f11ae04432f386d82a0faa769453ce26715ee40934f020078fabe435c54e66387699bb556157429072066a7fa192a66dd447c383f5925a499b7b8b42eeaa69ca662c06d30c9ef9f141decae3dfff1c4d324eb991c01b", 0xcc}, {&(0x7f0000000740)="a7de55c076c8be2544a2440902b0386c7b5902178a938db916ccfd4680f6aaa09beb6c3ed16d7b2e3707b57ae9eececc806fd159c2b0c2a3eaa8b75d79fc0ffa464d7e23f6240f075c49e80a71f8c9ae", 0x50}, {&(0x7f0000000280)="f8ef1a0ba43028", 0x7}, {&(0x7f00000002c0)="881f9f01aff50dd337e8741e7a0055ca94ca5eed0987a5619eef8ecd595f55d39b32a9406b23f6461936f6a4990a06813f0bddb3c1ee94b265a33843352354b3cdae5887ed38dd6df4c667bed05796ee300923248d3c38c5d28f5532cc6417b1db95", 0x62}, {&(0x7f0000000340)="898626c3e20374bdff579b0469562e357b484466b12998799a5b9818185a9fe3b2357469591d19c9edd6080e4329e235b06314cc6d6d9bfcf7c652a2e4c11228b15dbce12d062277ef2a39667e2ae2d61bb6ca0eecd462f184d75e64f3264a4d7827a738a1c89bc9eda0030f4bcd1ca928162acb67bd2aecbabf191b3457c3bf8c8c0eac88c7300b8da3bc7295557d45ac6286ba214b8065ccc2a6ba920d860e248217c52bea92def219cc22", 0xac}, {&(0x7f0000000400)="c1fb4dd962c27a795cb204059d35053ffe33805a2449c6dffb8fca9b5954ffd3118ab28c2983d8b78bdf3b15164dd0f66362959a910d1a93e16fb2af80f0d32ff1c0be9637308c1627ee8340b712aac863abd07261eb5af75fc56b27c58346646924825b42ad388af88a8b6d67df59d9fc50a9b84766c15c76ee02b105d81ac1ec4d67e208db18e8c72ec5090669b680d44218114bbe874ee02fea4d2bccf46c89bc052be2528bea2babdf4b40f62a0e179c6a1d0384868fb753dc19eed6fa90caef0bcd140ce88b1fbf7ffa4daac7585f98d280f53194c4fef958b80a5c1222", 0xe0}, {&(0x7f00000008c0)="a85cded781c2cca83485c23d34d205232b44e065edc46fce72de270e66ba26af16a47e42b79024920f76c35f664dffccba5591fa812ed79bf2d469b6751158f5301dc7336f965809c7aa549b4c523480d69b31df22a0965034dfc5bfe9fe5c5278ede3380131a0d23ace20f18224fe93f57eac4e06167db8180a1500b450090c6e61f0b9b456b598075a6e", 0x8b}, {&(0x7f00000005c0)="5f6b9c923851d195fe0ccb7945921bc790020e5b7fa9f67fcaa1cf605e5f07fac9ba5ca86f99e9405d1cf512298d43bd0d07eaa1a0f053b2f7e1c6e2196ba0f60fe3c90ee6c749e98347e3b49724608a5fe0d0ce2c1dff2913ebf4324975dd42ff6474273125b278f5c88e3d778cfd09c2ad9fed62cd90bcc44cfb9dcb6f3ad4045b6dd562014f70", 0x88}], 0x9, 0x6, 0xe9, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00) write(r4, &(0x7f0000000980)="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", 0x3dd) sendfile(r3, r2, 0x0, 0x7fffffff) timer_delete(0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) 22.178015264s ago: executing program 4 (id=1841): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bb0b1250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, &(0x7f0000000240)={0x1001, 0xfffffffffffffffe, 0x1, 0x6}) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="400000000000000017010000030000007b"], 0x40}}], 0x1, 0xc000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c00210000000000000000000700000016000000020000000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1, 0x141, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fc6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000840)="660f3881420a0f18c2baf80c66b896dc2c8c66efbafc0ced6436660f3a41c312b8f9008ec00fc7aa0a000ff2276766c7442400554ad7e96766c7442402000000006766c744240600000000670f011424640f01be0e0026f4", 0x58}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x1d, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20004010) fadvise64(r6, 0x1, 0xb36, 0x3) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f00000001c0)={[], 0xf000}, 0x0) 22.068680103s ago: executing program 4 (id=1842): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000040)={{r3}, 0xb, 0xfffffffffffffffc, 0xffffffffffffff63}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r2, 0xffffdc47) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r4, &(0x7f000000af40)={0xa000000a}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r1, 0x0, 0x0, 0x2000877d, &(0x7f0000e68000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) capset(0x0, 0x0) socket(0x10, 0x803, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x171) ioctl$TCSBRKP(r8, 0x5425, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r8, 0x8010661b, &(0x7f0000000080)) sendto$inet6(r5, &(0x7f0000000280)="020409fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$cgroup_freezer_state(r9, &(0x7f00000001c0)='THAWED\x00', 0x7) read(r0, &(0x7f0000021000)=""/4096, 0x1000) 21.781890068s ago: executing program 4 (id=1844): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000ac0)) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f5c09000000000000000006241a000018090581220d000000fd0904010000020d000009040101"], 0x0) geteuid() syz_usb_control_io(r1, &(0x7f0000000500)={0xffffffffffffff8d, &(0x7f0000000180)={0x40, 0x11, 0x96, {0x96, 0x22, "0120f2d332b86928f915957f2a9b8eb58219fe68d7d058253cde91ee66f7b525bb409f9ac2e11ff4d417168df2d8d8a1d43915772cdab695b9bf79684c664461ca4c06aa9031d7ad46bdacd5808926648aebe1d048e8815d7080c6fc98ebe3606d7686a327da147d6fe40e1d78b65f3a5ae9079145b7c7cf0f099674c3d090e221f025204aafa3da9c194f0bce9ddfe62918286c"}}, &(0x7f00000002c0)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "9c1e0c4ce4592aff5b7bb8a9a3be6739427d70bad3f9558e565081a4e7720af16b8542561485d9bdea6f3ed87a5a66e5a6ed29a3a61c9db56549f50a19bbd5a3815229b89e220dba39fda1f401783c207d77de8e30c83c027299e26c27e4e7f63016e0c6654e86dfeade7d7d3d5476f5ff90c07fc082dda3efc457a01721b230be19d088f56436b478d6dbdb622f99afe889267e8f9e9001522945b3c3170c0a34ee674d8fdf895ffe8a328612240a311ab602dd915e38325d857f31ef72be8cf0778c2acebb3591f5be6b0c8a5cb69cf065932cc22e44909e477933bb5465e5db9bee2b33b3ee93b7d6d1e0033f52939b48ef8501ce77dda6f3f033"}}, &(0x7f0000000400)={0x0, 0xf, 0x51, {0x5, 0xf, 0x51, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0xc0, 0xc, 0x5, 0x9, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0xa6, 0x4, 0x2, 0xd8}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x4, 0xf, 0x401, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x2, 0x8}, @wireless={0xb, 0x10, 0x1, 0xa, 0x9, 0x0, 0xf0}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "8f5d963b64af99952ddecc8ae1e8ea84"}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x80, 0x9, 0x6, "9698f812", "56ca6298"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x9, 0x7, 0x3, 0x0, 0x5}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x1e}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000e00)=ANY=[@ANYBLOB="abd4c02d10bc683963bba7b20bfae43fa5645d71c7026de067db8cc72ce11dd251cf6fd17c10ba3286c7276773174224f85319f0f92fe6a6c8ff05bf4fa95f6d8d02b224d88c3ae9a79c1b033dea00ff39723c8940e47e3bf075fe939f3cdc6c8675abd985e95a57b9315268ff8deb439a902dacb8aba0e1df88679ebf866c7b155cbb27019b1e8b019e33e3d79fa79628827eca20b3e368536630bd8ff7462693b4656436643a34746e337aa3f391e926f4611c620493622cf44930551030957257e763e313574d73f07bbc3c5af807bff9d10f89adfd60db0b721df4c84b8265257aebb3445d62e52440d8c891a23faf8b8648f6c69992ae73686c0acdb07c0000cb434dab02a0c17245970e076702ad0a5ae5524439a3cbf7c4caf4bbf2ba3963b67e6150532cce127f85b85c8e282f9a006fdcd812d3eaf4438bcbb43571efdba9ab7b61fc69c35ec42f283ace4190dc4ff17d3b93427d84f25edccd889fb107865a52ddc989d9176c4d7393426c1e7ebf981a39a046362fb683ca72647a39f9d0f66bd42c8c25dc6e2c97cedfa7e903181de1c6d685841aea20b80fd062da5103d69af0d1d99632c09a1f1e"], &(0x7f0000000740)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "ba66"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0xa}, &(0x7f0000000840)={0x40, 0x13, 0x6}, &(0x7f0000000880)={0x40, 0x17, 0x6, @local}, &(0x7f00000008c0)={0x40, 0x19, 0x2, 'G-'}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0xd}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0xe}}) syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xc, 0x2, 0x400, 0x6, 0x4, 0x40}, {0x9, 0x5, 0x4, 0x2, 0x10, 0x8, 0x6, 0x6}, {0x9, 0x5, 0xd, 0x3, 0x400, 0x4, 0x40, 0x1}}}}}}]}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x5746, 0x6, 0x0, 0x7}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000080)="441f0803d938fd27fa00000005004ef5649180ed000e1c2074ed27c1c684ba990a7a54c44c2df1d62b6dbde8cd1959995f09907828dcac347a4c0006e83a24716826bedfd3856f3b901ccc600c36e0eda365cce5694808c5033b09cac9a8fef6bcdc728a5f418aabab958f28a6dadb97e9a5190135ec1660d651c09d06b0be29501d0fe549549c61f78b7553f7f4d1923979865e74343f80e5cc302943612f32d0f38f947950676cb7e00dbbfc8e585decca4ebd8272c38c3f5810a9c8824bfe88cba6e8594ab2793efde6fbff02cb138d8c5d6451a95570da2f08a62afb29ec47349afa2a790100"/247, 0xf7) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000280)) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000d80)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x20, 0x80, 0x1c, {0x5ad, 0xfe, 0x8, 0x0, 0x8, 0xff80, 0x59d, 0x6, 0xe6, 0x5, 0x8, 0x9}}, 0x0, 0x0, 0x0, 0x0}) 21.249321116s ago: executing program 4 (id=1848): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2101, 0x10, 0x34}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000380)={0x1, 0x0, 0x8080000, 0x1000, &(0x7f0000001000/0x1000)=nil, 0x400, r2}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x1d0, 0x6, 0x3, 0x201, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x9}, [@nested={0x7, 0xa, 0x0, 0x1, [@generic="4093c0"]}, @typed={0x8, 0x11c, 0x0, 0x0, @uid}, @typed={0x8, 0x64, 0x0, 0x0, @ipv4=@remote}, @typed={0x4, 0x7b, 0x0, 0x0, @binary}, @nested={0x19e, 0xfc, 0x0, 0x1, [@nested={0x4, 0xc1}, @generic="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"]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21.237217523s ago: executing program 33 (id=1848): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2101, 0x10, 0x34}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000380)={0x1, 0x0, 0x8080000, 0x1000, &(0x7f0000001000/0x1000)=nil, 0x400, r2}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x1d0, 0x6, 0x3, 0x201, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x9}, [@nested={0x7, 0xa, 0x0, 0x1, [@generic="4093c0"]}, @typed={0x8, 0x11c, 0x0, 0x0, @uid}, @typed={0x8, 0x64, 0x0, 0x0, @ipv4=@remote}, @typed={0x4, 0x7b, 0x0, 0x0, @binary}, @nested={0x19e, 0xfc, 0x0, 0x1, [@nested={0x4, 0xc1}, @generic="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"]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.236292891s ago: executing program 1 (id=1881): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) (async) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x63}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000400}, 0x4000) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x63}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000400}, 0x4000) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0x8b, 0x202, 0x0, 0xf5ed, 0xf34}) 9.234190391s ago: executing program 3 (id=1882): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) capset(0x0, &(0x7f0000000000)={0x200000, 0x200003, 0x801, 0x4, 0x200007}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x224c42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) 7.628556653s ago: executing program 0 (id=1883): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x30, r0, 0x8f95e000) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 7.624921232s ago: executing program 1 (id=1884): r0 = socket(0x3, 0x6, 0xfffffffc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) setpriority(0x1, 0x0, 0xfffffffffffff000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x606ab3b0, 0x80, 0xfff, 0xfffff801, 0xd, 0x87a8, 0x400000}, 0x1c) add_key$keyring(&(0x7f0000000180), 0xfffffffffffffffd, 0x0, 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000180), 0xfffffffffffffffd, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448df, &(0x7f0000000100)) (async) ioctl$sock_bt_hci(r2, 0x400448df, &(0x7f0000000100)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002840)=ANY=[], 0x340}}, {{0x0, 0x0, 0x0}}], 0x2, 0x9200000000008001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r4 = socket(0x2, 0x3, 0x100000001) setsockopt(r4, 0xff, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000001c0)={0x28, r6, 0x801, 0x70bd28, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x840) fcntl$lock(r3, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r7, 0x0, 0x0, 0xfffff, 0x0, 0x17) fcntl$lock(r7, 0x5, &(0x7f00000000c0)={0x2, 0x2, 0x401, 0x401}) sendto$inet(r3, &(0x7f0000000000)="906730bf69e99c9baec588631912e69b1ef6b9de41f636ae2a30d9e4aa94881686a10d04aa4b8472becb77c5b8494c8705115d3777f6d8ffc218d27a38ce865d467c41a49814a6975c180cc4922159daad08", 0x52, 0x4000, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000081e044830400001020301090260000301d220060904000000010100000a240109000a000201020904010000010200000904010101010200c00e00000000000006800725010807030009040200000102000009f2020101010200000905820908000cd4090725010c070000"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000081e044830400001020301090260000301d220060904000000010100000a240109000a000201020904010000010200000904010101010200c00e00000000000006800725010807030009040200000102000009f2020101010200000905820908000cd4090725010c070000"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 7.580781894s ago: executing program 3 (id=1885): syz_usb_connect(0x5, 0x34, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r3, 0x400, 0x1) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioprio_set$uid(0x3, 0x0, 0x2004) dup2(r0, r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, 0x0, 0x0) 7.580546494s ago: executing program 0 (id=1886): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x4, &(0x7f0000000000)=""/86, 0x56) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000000c0)={0x5}) r2 = fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x0, r0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x140, 0x107) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f00000001c0)=0x2) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x5}) fstat(r2, &(0x7f0000000240)) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='@(^\'-#\',#(^,^!#\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000380)={{0x0, 0x8, 0x10001, 0x5, 0x1, 0x3, 0xda0, 0x1, 0xfff, 0x2, 0x5, 0x0, 0x0, 0x4, 0x1}, 0x8, [0x0]}) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000400)={[0xa000, 0xeeee8000, 0x0, 0x2], 0x6, 0xd1, 0x7}) r5 = syz_open_dev$evdev(&(0x7f0000000480), 0x9, 0x800) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f00000004c0)=""/106) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000540)={0x2, 0x2, 0x0, 0x6, 0x2, 0x0, [{0x2d, 0x8000000000000000, 0x4, '\x00', 0x1006}, {0x6, 0x401, 0x2, '\x00', 0x880}]}) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000600)=0x38, 0x4) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000640)) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000680)={0x0, 0x1, 0x7, 0x8fa, 0x5}) r6 = accept4$bt_l2cap(r3, &(0x7f00000006c0), &(0x7f0000000700)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000740), &(0x7f0000000780)=0x4) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000007c0), 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000800)={{r4, 0x4, 0x31, 0x6, 0x1, 0xfffffffffffffffe, 0x7fffffff, 0x4, 0x7, 0x6, 0x80000001, 0x101, 0x1, 0x40, 0x2}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000a80)={0x1, 0x1, &(0x7f00000008c0)=""/206, &(0x7f00000009c0)=""/91, &(0x7f0000000a40)=""/53, 0xa000}) faccessat(r3, &(0x7f0000000ac0)='./file0\x00', 0x90) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000d00)={0x3, 0x0, [{0x70000, 0x74, &(0x7f0000000b00)=""/116}, {0xe000, 0x41, &(0x7f0000000b80)=""/65}, {0xcc814acda741d057, 0xef, &(0x7f0000000c00)=""/239}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000dc0)={0x4, 0x20, 0x7, 0x1, "5ebd6bb8e6d82e3fa84df959fad37e982b6dcb4f924c785495f7138bb114fba8"}) 5.847272461s ago: executing program 0 (id=1887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r1}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x1a, &(0x7f0000000080)=ANY=[], 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x80000001, 0x100) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f00000000c0)={0x3, 0x2, "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"}) 5.816882055s ago: executing program 1 (id=1888): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x81, 0x3, 0x81, 0x100000, 0x4, 0x80002004c8, 0x8000000, 0x0, 0x0, 0x7, 0xbc, 0x5, 0x81, 0x6, 0xffffffffffffffff], 0x0, 0xcb190}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000040)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09e3650f01efeff8000f0d35", 0x29}], 0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'dvmrp0\x00', @ifru_data=&(0x7f0000000040)="88eee828e77931aca30f8af78057358d79c7b87b0fea64088ab87c18ce7db0fc"}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r2, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r2, &(0x7f0000000000)={0xa, 0xfffc, 0x1, @empty, 0x200}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x1, 0x3, 0x101, 0x400, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0x6, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7ff, 0xa0, 0x80000000, 0x0, 0xfffffffc, 0xea16, 0x7, 0x11fc, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x30, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x1, 0xd7e, 0xffffff34, 0x3, 0x7fffffff, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x6, 0x6, 0x3, 0x10000, 0x206, 0x7, 0xf19], [0x27, 0x0, 0x6, 0x9, 0x7, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0xf22, 0x7230, 0x9, 0x0, 0xa8b, 0x36, 0x101, 0xa, 0x200400, 0x8000, 0x8, 0x81, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x1, 0x18, 0xa9, 0x60c2, 0x0, 0xd1, 0xee6, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0xf, 0x5, 0x80003e, 0xc436, 0x0, 0x5, 0xdd, 0x4, 0x100], [0x8000005, 0x8, 0x5, 0x0, 0x9, 0x2, 0x7, 0xfffffff8, 0x4, 0x0, 0xffffffff, 0xff, 0xfffffffc, 0xfd, 0x1, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x1000003, 0x2, 0x4, 0x4e, 0x8000, 0x46, 0x4, 0xa, 0x0, 0x64, 0x7ffffffc, 0x5, 0xa48, 0x5, 0x200, 0x4, 0xfffffffd, 0x8001, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0xfffffffe, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x3, 0x8], [0x1ff, 0x2, 0x5, 0x8, 0x6, 0x5, 0xe00000, 0xa, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x9, 0x9, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x2, 0x6, 0x7, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x7, 0x1, 0xdc7a, 0xe8, 0x8, 0x42000, 0x9, 0x2, 0xb, 0x1, 0xa, 0x6, 0x0, 0x6, 0x6, 0xfffffffb, 0x1, 0x9, 0x34, 0x6, 0x5, 0x6, 0xae, 0x1, 0x9]}, 0x45c) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r3, &(0x7f0000000100), 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) setsockopt(r2, 0x1, 0x9, &(0x7f0000000040), 0x29) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0x5}) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f00000000c0)={0x6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000580)=@vmx={0x108, 0x0, 0x2080, {0x0, 0x8000000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x8b189a, 0x0) 5.811344834s ago: executing program 3 (id=1889): r0 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084504, &(0x7f0000ffcffc)=0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x80000001, 0x4) syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) (async) ioctl$EVIOCSCLOCKID(r0, 0x40084504, &(0x7f0000ffcffc)=0x3) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x80000001, 0x4) (async) 3.999612436s ago: executing program 0 (id=1890): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000, 0x2, 0x0, 0x12, 0x8, 0x3}, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 3.956636379s ago: executing program 1 (id=1891): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7b19e3e2942af75b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7b75cf759f99cbccabaa4c4b7e828fee"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3c8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="795f6fd6e4971f785e050d2905844b0f9faddea26635d597"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d888b3e2a27f6794965b2f0fd9739d48"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4108ffc4f254c667bbe0e04f513ce0ad"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="901ff1144d55402758f0b90d1c7f6b16"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4001}, 0x20004001) 3.954874378s ago: executing program 3 (id=1892): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000100), 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2.046584342s ago: executing program 0 (id=1893): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000009) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000100)) 2.042232461s ago: executing program 1 (id=1894): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x1, 0x41000, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000440)=""/134, 0x86}], 0x1, 0x0, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/uevent_helper', 0x600081, 0x40) read$FUSE(0xffffffffffffffff, &(0x7f0000002a00)={0x2020}, 0x2020) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$loop(0x0, 0xe, 0x10400) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x38) listen(0xffffffffffffffff, 0xd) sendto(r3, &(0x7f0000000200)="fa6d51a7acf28acf0861b1f95fdddd59228b5ac7c1fbfb994af00c0afba4c5e8ccaea854e8a506b9cecef6e28e946e0cefe430ddcce388566ace9baabd0b1b4f847601830ba0fcf41bfd00b383e36f87d5885174421732d4339f515b949b47e0af956fb935a268ab181ef4b93ceda62cf51437372b5cb7cd277d6567567f1516dc1877daee798ea75012eb351632c308c8694f8c6e8e9db1d61b9f4d66a9c15d7bcc0169ad9becaff7d0481ec4b2899ab89ea8d4182c7bd7e9d5d214ea65f66a0a541b685001388ffc428a2dd2e2bf291479be", 0xd3, 0x804, 0x0, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl(r5, 0x1, &(0x7f0000000380)="35738b86") r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet6(0xa, 0x803, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e20, 0x8, @remote, 0x7}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000700), 0x100000000000007c) close_range(r6, 0xffffffffffffffff, 0x0) 2.040563931s ago: executing program 3 (id=1895): setresgid(0xee00, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc9610e10ac69ac094b0fac70100000000000040d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d490254eab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0xee00) keyctl$chown(0x4, r1, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000002100)=@chain={'key_or_keyring:', r0}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) setgid(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}], 0x20, 0x20000010}}], 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000002140)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x20, r9, 0x301, 0x2, 0x2000000, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x220002}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x1c, r9, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4011) setregid(r5, r6) 1.88093ms ago: executing program 0 (id=1896): mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400b74c2bae07089ac67d7d2b5c2d4040000000"], 0x14) write$selinux_user(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) 1.23309ms ago: executing program 1 (id=1897): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000003100)={{0x12, 0x1, 0x211, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0xb0, 0xf}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x16, &(0x7f0000000040)=@string={0x16, 0x3, "c8d0a915b8c42196c07f8723ad7828bc58d961dd"}}, {0x0, 0x0}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x3000, 0x8, 0xb, 0x3, 0xd0, 0x42, 0x7, 0x0, 0x34, 0x19}, {0x10000, 0x2, 0x0, 0x2, 0x43, 0x7, 0x7f, 0x6, 0x5, 0x6, 0x3}, {0x5000, 0x4000, 0x3, 0x5, 0x1, 0x7, 0x0, 0x9, 0x0, 0x8, 0x8, 0x81}, {0x6000, 0x8000000, 0xa, 0x6, 0x3, 0x2, 0xfd, 0xf8, 0xa, 0x7, 0x9, 0xf1}, {0xc000, 0x2000, 0x10, 0x3, 0xf6, 0x2, 0xa7, 0x7f, 0x41, 0x83, 0xf7, 0x6}, {0xeeef0000, 0x191bd000, 0xc, 0x77, 0xb3, 0x6, 0x1, 0x4, 0x80, 0x13, 0x5}, {0x25000, 0x1, 0xb, 0x5, 0x0, 0x2, 0x4, 0x43, 0x3, 0x7d, 0x2, 0x70}, {0x80a0000, 0xeeef0000, 0xc, 0x8, 0xf, 0x7, 0x0, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0xeeef0000, 0x29ad}, {0x1000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x400000006, 0x0, 0x3000, [0xa4, 0x1000, 0x400000000063, 0xfffffffffffffff8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=1898): r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x78, 0x2a}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x4000050) (async) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000001c0)=0x101, 0x4) (async) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10120}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4008010}, 0x80) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4111}, 0x40) (async) pread64(r0, &(0x7f00000004c0)=""/244, 0xf4, 0x7ae7) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001b80)={0x108, 0x0, &(0x7f0000001940)=[@acquire_done={0x40106309, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000015c0)={@ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/4096, 0x1000, 0x0, 0x1a}, @fd={0x66642a85, 0x0, r3}, @flat=@handle={0x73682a85, 0xa, 0x3}}, &(0x7f0000001640)={0x0, 0x28, 0x40}}}, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000017c0)={@ptr={0x70742a85, 0x0, &(0x7f0000001680)=""/246, 0xf6, 0x1, 0x30}, @flat=@binder={0x73622a85, 0x101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000001780)=""/48, 0x30, 0x2, 0xc}}, &(0x7f0000001840)={0x0, 0x28, 0x40}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001880)={@flat=@handle, @fda={0x66646185, 0x0, 0x2, 0x11}, @fda={0x66646185, 0x2, 0x2, 0x2b}}, &(0x7f0000001900)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x3}, @release], 0xd4, 0x0, &(0x7f0000001a80)="cd8663e966c802ed35f348bdd9384ea0764a05e20ded9219cc4a3ab4899ac82b1b01f21d091793000ecb6699a73180f74a810278930cb7e7a6af5426929743654f86325f10048336d270be06b2d533dc82ecce331abded03414d5807472f2514082411440a77e807f5fdcd6ca5557efd875bacd56a21eac938ad9c16dff0ddbc3b9e936b78b8dace4acd927879a994c634891290f2e749c7356991bbec56d5c634e654ff93b9c621479840ab7450027d1024c6bb0ab86be6fab320e25740855e3a0d72d92d91bf78c3d9d1ec2e213a91939cdcfe"}) timer_create(0x4, &(0x7f0000001d00)={0x0, 0x38, 0x1, @thr={&(0x7f0000001bc0)="9b172814af3f61af794a408bca2e73b5d3edf103b80b8bc21ad670cdcdca4582c3f0b64421e723c0f4a3199048f45fadc854c7bf750ef91f6ac68f585b8f2b23b2292b0aaefb14ab1e82d09177e0aa380742c654e61962d3b57704d3985632093bd411e213edd7b1fd3a2d83615c458e0338f15bef15a68b878ddcb26d3371b37ddd0cdfe55ccb5036e0e38dcb60a2a712a34581dddfd80b0a55d2745179fc6032d9b2b768535ad631a232c7ab8bf9ad8f3f6db685f8a2112401d6f69ac5832b91b609d82a3b25af219bd24c977fffb756637af64b2c76a098a70fc52398366024ef5477ca5752db123d274c1c", &(0x7f0000001cc0)="c2d9ac296226379565e75d458dfd28c2f0f853bca693b434c809d24f18a608a00499745634771c93068bfb414eb36c"}}, &(0x7f0000001d40)=0x0) (async) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000001d80)) fcntl$setlease(r3, 0x400, 0x0) (async) timer_getoverrun(r5) ioctl$XFS_IOC_EXCHANGE_RANGE(r3, 0x40285881, &(0x7f0000001dc0)={0xffffffffffffffff, 0x0, 0x6, 0x9, 0x8ed2, 0x1}) (async) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000001e00)="4931b46322b6df481b167b2890c8b7c18b231b31a77ea496f4456d423d1916843e60dda74c53ae74f045b20652fc3835dcc5422f5f3e6a66d6f8884c6d1f398c87ea44d647a564bcefb4afcc470697879cdc9a00c623690c4ddea1bb80f9fd5b5e5628c3805cf705f43761b7ad536c436bd4086814340420c79ff2e304f39c68fd0c918bdceda2300e96e35e1bc17dc602ff285b1eea657a170cae44c0029b6da4bf24a4d8fa84148abafea1bcc1") socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$unix(r0, &(0x7f0000001fc0)={&(0x7f0000001ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001f40)="c17de01db0e7aec4a2dbf80578", 0xd}], 0x1, 0x0, 0x0, 0x4000000}, 0x4010) (async) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000002000)={0x4b41, 0x4}) (async) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000002500)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000024c0)={&(0x7f0000002080)={0x3a0, r1, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_IE={0x164, 0x2a, [@perr={0x84, 0x11c, {0xb1, 0x12, [{{}, @device_a, 0x89c5, @void, 0xe}, {{}, @device_a, 0xb1, @void, 0x3}, {{}, @device_b, 0x2, @void, 0x3a}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x2b}, {{}, @broadcast, 0x7ff, @void, 0x11}, {{}, @broadcast, 0xff, @void, 0x26}, {{}, @device_b, 0x1, @void, 0x28}, {{0x0, 0x1}, @device_a, 0x8001, @value=@device_b, 0x31}, {{}, @broadcast, 0x80000001, @void, 0x1}, {{0x0, 0x1}, @broadcast, 0xfffffffd, @value=@device_b, 0x1b}, {{0x0, 0x1}, @device_a, 0x3ff, @value=@broadcast, 0x8}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x28}, {{}, @device_b, 0x1ff, @void, 0x2}, {{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0x1}, {{}, @device_a, 0x6, @void, 0x14}, {{}, @device_a, 0x0, @void, 0x10}, {{0x0, 0x1}, @device_a, 0x6, @value=@device_b, 0x13}, {{0x0, 0x1}, @device_b, 0x5, @value=@device_b, 0x7}]}}, @sec_chan_ofs={0x3e, 0x1}, @measure_req={0x26, 0x3d, {0xf, 0x0, 0xb, "b59810d3d3d26ac9c0a36431be79c1070dc1680a6363a7b2454a666750f1dc44ce083d1b369eab93521a7ca872adedb9438788b5c2935a374cff"}}]}, @NL80211_ATTR_IE={0xf3, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x21}}, @perr={0x84, 0xe1, {0xc, 0xd, [{{}, @device_b, 0x8, @void, 0x2f}, {{0x0, 0x1}, @device_b, 0x100, @value=@device_b, 0x3b}, {{0x0, 0x1}, @broadcast, 0xfffffffc, @value, 0xe}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x28}, {{}, @broadcast, 0x0, @void, 0x41}, {{}, @device_b, 0x4, @void, 0x10}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0x29}, {{0x0, 0x1}, @broadcast, 0x8, @value=@broadcast, 0x1a}, {{0x0, 0x1}, @device_a, 0xe, @value, 0xd}, {{}, @broadcast, 0x9e, @void, 0x13}, {{0x0, 0x1}, @broadcast, 0x3ff, @value, 0x1b}, {{0x0, 0x1}, @device_a, 0x27, @value=@broadcast, 0x9}, {{0x0, 0x1}, @device_b, 0x4, @value=@broadcast, 0x6}]}}]}, @NL80211_ATTR_IE={0x114, 0x2a, [@mesh_chsw={0x76, 0x6, {0x4, 0x5, 0x26, 0x6}}, @ht={0x2d, 0x1a, {0xc, 0x1, 0x5, 0x0, {0x1, 0x8cb, 0x0, 0x3f9, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x5}}, @perr={0x84, 0x88, {0x5, 0x8, [{{}, @device_a, 0x6, @void, 0x5}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x3}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x2c}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x23}, {{}, @device_a, 0x9, @void, 0x20}, {{}, @device_b, 0x87, @void, 0x6}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x39}, {{0x0, 0x1}, @device_b, 0x3, @value=@device_b, 0x20}]}}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x4, 0x0, @device_a, 0x8, 0x4, 0x1}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6}, @tim={0x5, 0x31, {0xf8, 0x66, 0x0, "c25c7d826538ff22005f7cd7f03cb49907cd8c2310d5bfaca8295122abfd9e7d44cdcd24065731e9aa62797cd12f"}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_MAC={0xa}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) (async) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) splice(r3, &(0x7f0000002540)=0x5, r6, &(0x7f0000002580)=0x4, 0x2, 0x8) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f00000025c0)={0x2, 0x8}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002600), 0x408100, 0x0) ioctl$PTP_ENABLE_PPS(r7, 0x40043d04, 0x1) (async) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000002640)) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000026c0)=0x0) fcntl$lock(r6, 0x6, &(0x7f0000002700)={0x1, 0x3, 0x7, 0xf6, r8}) kernel console output (not intermixed with test programs): ass=blk_file permissive=0 [ 187.907089][ T36] audit: type=1400 audit(187.480:20877): avc: denied { read } for pid=4670 comm="syz.3.1520" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 187.927996][ T4695] FAULT_INJECTION: forcing a failure. [ 187.927996][ T4695] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 187.931014][ T36] audit: type=1400 audit(187.480:20878): avc: denied { write } for pid=4670 comm="syz.3.1520" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 187.943158][ T4695] CPU: 0 UID: 0 PID: 4695 Comm: syz.3.1528 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 187.943190][ T4695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.943203][ T4695] Call Trace: [ 187.943211][ T4695] [ 187.943220][ T4695] __dump_stack+0x21/0x30 [ 187.943250][ T4695] dump_stack_lvl+0x140/0x1c0 [ 187.943273][ T4695] ? __cfi_dump_stack_lvl+0x10/0x10 [ 187.943298][ T4695] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 187.943320][ T4695] dump_stack+0x19/0x20 [ 187.943342][ T4695] should_fail_ex+0x3d7/0x530 [ 187.943363][ T4695] should_fail_alloc_page+0xec/0x110 [ 187.943391][ T4695] __alloc_pages_noprof+0x1c0/0x7e0 [ 187.943411][ T4695] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 187.943431][ T4695] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 187.943454][ T4695] __folio_alloc_noprof+0x14/0x80 [ 187.943474][ T4695] folio_prealloc+0x46/0x220 [ 187.943501][ T4695] do_pte_missing+0x1e80/0x44f0 [ 187.943529][ T4695] ? _raw_spin_unlock+0x45/0x60 [ 187.943549][ T4695] ? pte_marker_clear+0x1b0/0x1b0 [ 187.943576][ T4695] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 187.943605][ T4695] ? walk_pgd_range+0x1b58/0x1c20 [ 187.943626][ T4695] ? __pte_offset_map+0x1b0/0x230 [ 187.943647][ T4695] ? pte_offset_map_rw_nolock+0xba/0x110 [ 187.943669][ T4695] handle_mm_fault+0x11b8/0x1bf0 [ 187.943695][ T4695] ? __kasan_check_write+0x18/0x20 [ 187.943720][ T4695] ? __cfi_handle_mm_fault+0x10/0x10 [ 187.943746][ T4695] ? follow_page_pte+0x4b9/0xbc0 [ 187.943766][ T4695] ? gup_must_unshare+0x1e0/0x1e0 [ 187.943785][ T4695] ? vma_is_secretmem+0x11/0x50 [ 187.943806][ T4695] __get_user_pages+0x1170/0x22b0 [ 187.943838][ T4695] ? populate_vma_page_range+0x220/0x220 [ 187.943866][ T4695] ? down_read+0x7f/0xe0 [ 187.943889][ T4695] ? __cfi_down_read+0x10/0x10 [ 187.943913][ T4695] __mm_populate+0x2f8/0x430 [ 187.943942][ T4695] do_mlock+0x7eb/0xa00 [ 187.943971][ T4695] ? fput+0x1a4/0x240 [ 187.943988][ T4695] ? lru_gen_add_folio+0x860/0x860 [ 187.944008][ T4695] ? ksys_write+0x1f3/0x260 [ 187.944031][ T4695] ? __cfi_ksys_write+0x10/0x10 [ 187.944054][ T4695] ? __kasan_check_read+0x15/0x20 [ 187.944077][ T4695] __x64_sys_mlock+0x64/0x80 [ 187.944096][ T4695] x64_sys_call+0x670/0x2ee0 [ 187.944121][ T4695] do_syscall_64+0x57/0xf0 [ 187.944146][ T4695] ? clear_bhb_loop+0x50/0xa0 [ 187.944166][ T4695] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 187.944195][ T4695] RIP: 0033:0x7f523cf9c799 [ 187.944213][ T4695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.944230][ T4695] RSP: 002b:00007f523defc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 187.944253][ T4695] RAX: ffffffffffffffda RBX: 00007f523d215fa0 RCX: 00007f523cf9c799 [ 187.944269][ T4695] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 187.944284][ T4695] RBP: 00007f523defc090 R08: 0000000000000000 R09: 0000000000000000 [ 187.944297][ T4695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.944311][ T4695] R13: 00007f523d216038 R14: 00007f523d215fa0 R15: 00007ffc95ef04e8 [ 187.944329][ T4695] [ 188.805713][ T4723] netlink: 'syz.4.1537': attribute type 16 has an invalid length. [ 188.813913][ T4723] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1537'. [ 189.131238][ T4731] FAULT_INJECTION: forcing a failure. [ 189.131238][ T4731] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 189.145469][ T4731] CPU: 0 UID: 0 PID: 4731 Comm: syz.3.1540 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 189.145495][ T4731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.145504][ T4731] Call Trace: [ 189.145509][ T4731] [ 189.145515][ T4731] __dump_stack+0x21/0x30 [ 189.145536][ T4731] dump_stack_lvl+0x140/0x1c0 [ 189.145552][ T4731] ? __cfi_dump_stack_lvl+0x10/0x10 [ 189.145568][ T4731] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 189.145583][ T4731] dump_stack+0x19/0x20 [ 189.145598][ T4731] should_fail_ex+0x3d7/0x530 [ 189.145612][ T4731] should_fail_alloc_page+0xec/0x110 [ 189.145631][ T4731] __alloc_pages_noprof+0x1c0/0x7e0 [ 189.145644][ T4731] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 189.145659][ T4731] __folio_alloc_noprof+0x14/0x80 [ 189.145672][ T4731] folio_prealloc+0x46/0x220 [ 189.145690][ T4731] do_pte_missing+0x1e80/0x44f0 [ 189.145708][ T4731] ? _raw_spin_unlock+0x45/0x60 [ 189.145722][ T4731] ? pte_marker_clear+0x1b0/0x1b0 [ 189.145758][ T4731] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 189.145778][ T4731] ? walk_pgd_range+0x1b58/0x1c20 [ 189.145791][ T4731] ? __pte_offset_map+0x1b0/0x230 [ 189.145805][ T4731] ? pte_offset_map_rw_nolock+0xba/0x110 [ 189.145820][ T4731] handle_mm_fault+0x11b8/0x1bf0 [ 189.145838][ T4731] ? __kasan_check_write+0x18/0x20 [ 189.145857][ T4731] ? __cfi_handle_mm_fault+0x10/0x10 [ 189.145874][ T4731] ? follow_page_pte+0x4b9/0xbc0 [ 189.145887][ T4731] ? gup_must_unshare+0x1e0/0x1e0 [ 189.145899][ T4731] ? vma_is_secretmem+0x11/0x50 [ 189.145913][ T4731] __get_user_pages+0x1170/0x22b0 [ 189.145935][ T4731] ? populate_vma_page_range+0x220/0x220 [ 189.145953][ T4731] ? down_read+0x7f/0xe0 [ 189.145969][ T4731] ? __cfi_down_read+0x10/0x10 [ 189.145992][ T4731] __mm_populate+0x2f8/0x430 [ 189.146014][ T4731] do_mlock+0x7eb/0xa00 [ 189.146027][ T4731] ? fput+0x1a4/0x240 [ 189.146039][ T4731] ? lru_gen_add_folio+0x860/0x860 [ 189.146053][ T4731] ? ksys_write+0x1f3/0x260 [ 189.146073][ T4731] ? __cfi_ksys_write+0x10/0x10 [ 189.146089][ T4731] ? __kasan_check_read+0x15/0x20 [ 189.146103][ T4731] __x64_sys_mlock+0x64/0x80 [ 189.146116][ T4731] x64_sys_call+0x670/0x2ee0 [ 189.146133][ T4731] do_syscall_64+0x57/0xf0 [ 189.146145][ T4731] ? clear_bhb_loop+0x50/0xa0 [ 189.146160][ T4731] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 189.146179][ T4731] RIP: 0033:0x7f523cf9c799 [ 189.146192][ T4731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.146203][ T4731] RSP: 002b:00007f523defc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 189.146219][ T4731] RAX: ffffffffffffffda RBX: 00007f523d215fa0 RCX: 00007f523cf9c799 [ 189.146232][ T4731] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 189.146241][ T4731] RBP: 00007f523defc090 R08: 0000000000000000 R09: 0000000000000000 [ 189.146253][ T4731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.146267][ T4731] R13: 00007f523d216038 R14: 00007f523d215fa0 R15: 00007ffc95ef04e8 [ 189.146285][ T4731] [ 190.116016][ T4755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4755 comm=syz.1.1547 [ 190.197891][ T4765] FAULT_INJECTION: forcing a failure. [ 190.197891][ T4765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 190.212660][ T4765] CPU: 1 UID: 0 PID: 4765 Comm: syz.1.1550 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 190.212688][ T4765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.212696][ T4765] Call Trace: [ 190.212701][ T4765] [ 190.212706][ T4765] __dump_stack+0x21/0x30 [ 190.212728][ T4765] dump_stack_lvl+0x140/0x1c0 [ 190.212744][ T4765] ? __cfi_dump_stack_lvl+0x10/0x10 [ 190.212760][ T4765] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 190.212774][ T4765] dump_stack+0x19/0x20 [ 190.212789][ T4765] should_fail_ex+0x3d7/0x530 [ 190.212802][ T4765] should_fail_alloc_page+0xec/0x110 [ 190.212820][ T4765] __alloc_pages_noprof+0x1c0/0x7e0 [ 190.212834][ T4765] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 190.212849][ T4765] __folio_alloc_noprof+0x14/0x80 [ 190.212861][ T4765] folio_prealloc+0x46/0x220 [ 190.212879][ T4765] do_pte_missing+0x1e80/0x44f0 [ 190.212901][ T4765] ? _raw_spin_unlock+0x45/0x60 [ 190.212915][ T4765] ? pte_marker_clear+0x1b0/0x1b0 [ 190.212934][ T4765] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 190.213176][ T4765] ? walk_pgd_range+0x1b58/0x1c20 [ 190.213195][ T4765] ? __pte_offset_map+0x1b0/0x230 [ 190.213210][ T4765] ? pte_offset_map_rw_nolock+0xba/0x110 [ 190.213225][ T4765] handle_mm_fault+0x11b8/0x1bf0 [ 190.213243][ T4765] ? __kasan_check_write+0x18/0x20 [ 190.213260][ T4765] ? __cfi_handle_mm_fault+0x10/0x10 [ 190.213278][ T4765] ? follow_page_pte+0x4b9/0xbc0 [ 190.213291][ T4765] ? gup_must_unshare+0x1e0/0x1e0 [ 190.213309][ T4765] ? vma_is_secretmem+0x11/0x50 [ 190.213334][ T4765] __get_user_pages+0x1170/0x22b0 [ 190.213370][ T4765] ? populate_vma_page_range+0x220/0x220 [ 190.213400][ T4765] ? down_read+0x7f/0xe0 [ 190.213425][ T4765] ? __cfi_down_read+0x10/0x10 [ 190.213451][ T4765] __mm_populate+0x2f8/0x430 [ 190.213483][ T4765] do_mlock+0x7eb/0xa00 [ 190.213502][ T4765] ? fput+0x1a4/0x240 [ 190.213513][ T4765] ? lru_gen_add_folio+0x860/0x860 [ 190.213527][ T4765] ? ksys_write+0x1f3/0x260 [ 190.213542][ T4765] ? __cfi_ksys_write+0x10/0x10 [ 190.213558][ T4765] ? __kasan_check_read+0x15/0x20 [ 190.213574][ T4765] __x64_sys_mlock+0x64/0x80 [ 190.213588][ T4765] x64_sys_call+0x670/0x2ee0 [ 190.213606][ T4765] do_syscall_64+0x57/0xf0 [ 190.213619][ T4765] ? clear_bhb_loop+0x50/0xa0 [ 190.213631][ T4765] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 190.213651][ T4765] RIP: 0033:0x7fa04f19c799 [ 190.213664][ T4765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.213677][ T4765] RSP: 002b:00007fa0500ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 190.213694][ T4765] RAX: ffffffffffffffda RBX: 00007fa04f415fa0 RCX: 00007fa04f19c799 [ 190.213705][ T4765] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 190.213714][ T4765] RBP: 00007fa0500ef090 R08: 0000000000000000 R09: 0000000000000000 [ 190.213724][ T4765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.213733][ T4765] R13: 00007fa04f416038 R14: 00007fa04f415fa0 R15: 00007ffda5730828 [ 190.213744][ T4765] [ 191.238141][ T4792] sit0: entered promiscuous mode [ 191.244989][ T4792] netlink: 'syz.0.1560': attribute type 1 has an invalid length. [ 191.253043][ T4792] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1560'. [ 191.306680][ T4794] FAULT_INJECTION: forcing a failure. [ 191.306680][ T4794] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 191.320946][ T4794] CPU: 1 UID: 0 PID: 4794 Comm: syz.1.1561 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 191.320983][ T4794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.320997][ T4794] Call Trace: [ 191.321005][ T4794] [ 191.321014][ T4794] __dump_stack+0x21/0x30 [ 191.321046][ T4794] dump_stack_lvl+0x140/0x1c0 [ 191.321071][ T4794] ? __cfi_dump_stack_lvl+0x10/0x10 [ 191.321097][ T4794] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 191.321122][ T4794] dump_stack+0x19/0x20 [ 191.321146][ T4794] should_fail_ex+0x3d7/0x530 [ 191.321178][ T4794] should_fail_alloc_page+0xec/0x110 [ 191.321209][ T4794] __alloc_pages_noprof+0x1c0/0x7e0 [ 191.321231][ T4794] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 191.321255][ T4794] __folio_alloc_noprof+0x14/0x80 [ 191.321277][ T4794] folio_prealloc+0x46/0x220 [ 191.321307][ T4794] do_pte_missing+0x1e80/0x44f0 [ 191.321337][ T4794] ? _raw_spin_unlock+0x45/0x60 [ 191.321360][ T4794] ? pte_marker_clear+0x1b0/0x1b0 [ 191.321390][ T4794] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 191.321422][ T4794] ? walk_pgd_range+0x1b58/0x1c20 [ 191.321444][ T4794] ? __pte_offset_map+0x1b0/0x230 [ 191.321467][ T4794] ? pte_offset_map_rw_nolock+0xba/0x110 [ 191.321493][ T4794] handle_mm_fault+0x11b8/0x1bf0 [ 191.321521][ T4794] ? __kasan_check_write+0x18/0x20 [ 191.321549][ T4794] ? __cfi_handle_mm_fault+0x10/0x10 [ 191.321577][ T4794] ? follow_page_pte+0x4b9/0xbc0 [ 191.321599][ T4794] ? gup_must_unshare+0x1e0/0x1e0 [ 191.321620][ T4794] ? vma_is_secretmem+0x11/0x50 [ 191.321642][ T4794] __get_user_pages+0x1170/0x22b0 [ 191.321677][ T4794] ? populate_vma_page_range+0x220/0x220 [ 191.321707][ T4794] ? down_read+0x7f/0xe0 [ 191.321733][ T4794] ? __cfi_down_read+0x10/0x10 [ 191.321760][ T4794] __mm_populate+0x2f8/0x430 [ 191.321791][ T4794] do_mlock+0x7eb/0xa00 [ 191.321812][ T4794] ? fput+0x1a4/0x240 [ 191.321831][ T4794] ? lru_gen_add_folio+0x860/0x860 [ 191.321853][ T4794] ? ksys_write+0x1f3/0x260 [ 191.321876][ T4794] ? __cfi_ksys_write+0x10/0x10 [ 191.321901][ T4794] ? __kasan_check_read+0x15/0x20 [ 191.321924][ T4794] __x64_sys_mlock+0x64/0x80 [ 191.321944][ T4794] x64_sys_call+0x670/0x2ee0 [ 191.321973][ T4794] do_syscall_64+0x57/0xf0 [ 191.321992][ T4794] ? clear_bhb_loop+0x50/0xa0 [ 191.322014][ T4794] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 191.322045][ T4794] RIP: 0033:0x7fa04f19c799 [ 191.322065][ T4794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.322085][ T4794] RSP: 002b:00007fa0500ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 191.322110][ T4794] RAX: ffffffffffffffda RBX: 00007fa04f415fa0 RCX: 00007fa04f19c799 [ 191.322128][ T4794] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 191.322144][ T4794] RBP: 00007fa0500ef090 R08: 0000000000000000 R09: 0000000000000000 [ 191.322167][ T4794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.322182][ T4794] R13: 00007fa04f416038 R14: 00007fa04f415fa0 R15: 00007ffda5730828 [ 191.322200][ T4794] [ 192.165940][ T4826] FAULT_INJECTION: forcing a failure. [ 192.165940][ T4826] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 192.179961][ T4826] CPU: 1 UID: 0 PID: 4826 Comm: syz.4.1573 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 192.179999][ T4826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.180014][ T4826] Call Trace: [ 192.180021][ T4826] [ 192.180030][ T4826] __dump_stack+0x21/0x30 [ 192.180062][ T4826] dump_stack_lvl+0x140/0x1c0 [ 192.180087][ T4826] ? __cfi_dump_stack_lvl+0x10/0x10 [ 192.180113][ T4826] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 192.180136][ T4826] dump_stack+0x19/0x20 [ 192.180160][ T4826] should_fail_ex+0x3d7/0x530 [ 192.180181][ T4826] should_fail_alloc_page+0xec/0x110 [ 192.180210][ T4826] __alloc_pages_noprof+0x1c0/0x7e0 [ 192.180233][ T4826] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 192.180258][ T4826] __folio_alloc_noprof+0x14/0x80 [ 192.180279][ T4826] folio_prealloc+0x46/0x220 [ 192.180308][ T4826] do_pte_missing+0x1e80/0x44f0 [ 192.180334][ T4826] ? _raw_spin_unlock+0x45/0x60 [ 192.180349][ T4826] ? pte_marker_clear+0x1b0/0x1b0 [ 192.180367][ T4826] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 192.180386][ T4826] ? walk_pgd_range+0x1b58/0x1c20 [ 192.180401][ T4826] ? __pte_offset_map+0x1b0/0x230 [ 192.180415][ T4826] ? pte_offset_map_rw_nolock+0xba/0x110 [ 192.180430][ T4826] handle_mm_fault+0x11b8/0x1bf0 [ 192.180447][ T4826] ? __kasan_check_write+0x18/0x20 [ 192.180464][ T4826] ? __cfi_handle_mm_fault+0x10/0x10 [ 192.180481][ T4826] ? follow_page_pte+0x4b9/0xbc0 [ 192.180494][ T4826] ? gup_must_unshare+0x1e0/0x1e0 [ 192.180507][ T4826] ? vma_is_secretmem+0x11/0x50 [ 192.180520][ T4826] __get_user_pages+0x1170/0x22b0 [ 192.180542][ T4826] ? populate_vma_page_range+0x220/0x220 [ 192.180561][ T4826] ? down_read+0x7f/0xe0 [ 192.180577][ T4826] ? __cfi_down_read+0x10/0x10 [ 192.180593][ T4826] __mm_populate+0x2f8/0x430 [ 192.180612][ T4826] do_mlock+0x7eb/0xa00 [ 192.180625][ T4826] ? fput+0x1a4/0x240 [ 192.180636][ T4826] ? lru_gen_add_folio+0x860/0x860 [ 192.180650][ T4826] ? ksys_write+0x1f3/0x260 [ 192.180665][ T4826] ? __cfi_ksys_write+0x10/0x10 [ 192.180680][ T4826] ? __kasan_check_read+0x15/0x20 [ 192.180696][ T4826] __x64_sys_mlock+0x64/0x80 [ 192.180708][ T4826] x64_sys_call+0x670/0x2ee0 [ 192.180725][ T4826] do_syscall_64+0x57/0xf0 [ 192.180737][ T4826] ? clear_bhb_loop+0x50/0xa0 [ 192.180750][ T4826] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 192.180769][ T4826] RIP: 0033:0x7feb8139c799 [ 192.180782][ T4826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.180795][ T4826] RSP: 002b:00007feb82172028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 192.180812][ T4826] RAX: ffffffffffffffda RBX: 00007feb81615fa0 RCX: 00007feb8139c799 [ 192.180823][ T4826] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 192.180832][ T4826] RBP: 00007feb82172090 R08: 0000000000000000 R09: 0000000000000000 [ 192.180841][ T4826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.180850][ T4826] R13: 00007feb81616038 R14: 00007feb81615fa0 R15: 00007fff13c36bd8 [ 192.180861][ T4826] [ 192.386958][ T4829] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4829 comm=syz.1.1574 [ 192.447711][ T36] kauditd_printk_skb: 239 callbacks suppressed [ 192.447730][ T36] audit: type=1400 audit(192.360:21118): avc: denied { create } for pid=4827 comm="syz.1.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 192.531053][ T36] audit: type=1400 audit(192.430:21119): avc: denied { read write } for pid=961 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 192.550294][ T4828] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4828 comm=syz.1.1574 [ 192.555019][ T36] audit: type=1400 audit(192.440:21120): avc: denied { read write } for pid=4830 comm="syz.4.1575" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 192.590963][ T36] audit: type=1400 audit(192.490:21121): avc: denied { sys_module } for pid=4827 comm="syz.1.1574" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 192.612332][ T36] audit: type=1400 audit(192.540:21122): avc: denied { read write } for pid=292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 192.643969][ T36] audit: type=1400 audit(192.580:21123): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 192.668696][ T36] audit: type=1400 audit(192.610:21124): avc: denied { create } for pid=4832 comm="syz.0.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 192.689536][ T36] audit: type=1400 audit(192.610:21125): avc: denied { read write } for pid=4834 comm="syz.1.1577" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 192.714607][ T36] audit: type=1400 audit(192.610:21126): avc: denied { create } for pid=4834 comm="syz.1.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 192.734263][ T36] audit: type=1400 audit(192.630:21127): avc: denied { name_bind } for pid=4832 comm="syz.0.1576" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 194.734508][ T4884] FAULT_INJECTION: forcing a failure. [ 194.734508][ T4884] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 194.748129][ T4884] CPU: 1 UID: 0 PID: 4884 Comm: syz.4.1591 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 194.748158][ T4884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.748167][ T4884] Call Trace: [ 194.748173][ T4884] [ 194.748179][ T4884] __dump_stack+0x21/0x30 [ 194.748204][ T4884] dump_stack_lvl+0x140/0x1c0 [ 194.748219][ T4884] ? __cfi_dump_stack_lvl+0x10/0x10 [ 194.748235][ T4884] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 194.748252][ T4884] dump_stack+0x19/0x20 [ 194.748266][ T4884] should_fail_ex+0x3d7/0x530 [ 194.748289][ T4884] should_fail_alloc_page+0xec/0x110 [ 194.748319][ T4884] __alloc_pages_noprof+0x1c0/0x7e0 [ 194.748342][ T4884] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 194.748368][ T4884] __folio_alloc_noprof+0x14/0x80 [ 194.748387][ T4884] folio_prealloc+0x46/0x220 [ 194.748406][ T4884] do_pte_missing+0x1e80/0x44f0 [ 194.748424][ T4884] ? _raw_spin_unlock+0x45/0x60 [ 194.748439][ T4884] ? pte_marker_clear+0x1b0/0x1b0 [ 194.748457][ T4884] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 194.748477][ T4884] ? walk_pgd_range+0x1b58/0x1c20 [ 194.748491][ T4884] ? __pte_offset_map+0x1b0/0x230 [ 194.748505][ T4884] ? pte_offset_map_rw_nolock+0xba/0x110 [ 194.748520][ T4884] handle_mm_fault+0x11b8/0x1bf0 [ 194.748537][ T4884] ? __kasan_check_write+0x18/0x20 [ 194.748553][ T4884] ? __cfi_handle_mm_fault+0x10/0x10 [ 194.748571][ T4884] ? follow_page_pte+0x4b9/0xbc0 [ 194.748584][ T4884] ? gup_must_unshare+0x1e0/0x1e0 [ 194.748596][ T4884] ? vma_is_secretmem+0x11/0x50 [ 194.748610][ T4884] __get_user_pages+0x1170/0x22b0 [ 194.748632][ T4884] ? populate_vma_page_range+0x220/0x220 [ 194.748650][ T4884] ? down_read+0x7f/0xe0 [ 194.748666][ T4884] ? __cfi_down_read+0x10/0x10 [ 194.748682][ T4884] __mm_populate+0x2f8/0x430 [ 194.748725][ T4884] do_mlock+0x7eb/0xa00 [ 194.748739][ T4884] ? fput+0x1a4/0x240 [ 194.748750][ T4884] ? lru_gen_add_folio+0x860/0x860 [ 194.748763][ T4884] ? ksys_write+0x1f3/0x260 [ 194.748779][ T4884] ? __cfi_ksys_write+0x10/0x10 [ 194.748795][ T4884] ? __kasan_check_read+0x15/0x20 [ 194.748810][ T4884] __x64_sys_mlock+0x64/0x80 [ 194.748823][ T4884] x64_sys_call+0x670/0x2ee0 [ 194.748840][ T4884] do_syscall_64+0x57/0xf0 [ 194.748853][ T4884] ? clear_bhb_loop+0x50/0xa0 [ 194.748866][ T4884] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 194.748886][ T4884] RIP: 0033:0x7feb8139c799 [ 194.748900][ T4884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.748912][ T4884] RSP: 002b:00007feb82172028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 194.748928][ T4884] RAX: ffffffffffffffda RBX: 00007feb81615fa0 RCX: 00007feb8139c799 [ 194.748938][ T4884] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 194.748951][ T4884] RBP: 00007feb82172090 R08: 0000000000000000 R09: 0000000000000000 [ 194.748969][ T4884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.748978][ T4884] R13: 00007feb81616038 R14: 00007feb81615fa0 R15: 00007fff13c36bd8 [ 194.748989][ T4884] [ 195.155065][ T4896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4896 comm=syz.3.1595 [ 195.726203][ T4922] FAULT_INJECTION: forcing a failure. [ 195.726203][ T4922] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 195.742166][ T4922] CPU: 0 UID: 0 PID: 4922 Comm: syz.0.1603 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 195.742202][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.742213][ T4922] Call Trace: [ 195.742220][ T4922] [ 195.742229][ T4922] __dump_stack+0x21/0x30 [ 195.742259][ T4922] dump_stack_lvl+0x140/0x1c0 [ 195.742282][ T4922] ? __cfi_dump_stack_lvl+0x10/0x10 [ 195.742307][ T4922] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 195.742329][ T4922] dump_stack+0x19/0x20 [ 195.742350][ T4922] should_fail_ex+0x3d7/0x530 [ 195.742371][ T4922] should_fail_alloc_page+0xec/0x110 [ 195.742402][ T4922] __alloc_pages_noprof+0x1c0/0x7e0 [ 195.742422][ T4922] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 195.742448][ T4922] __folio_alloc_noprof+0x14/0x80 [ 195.742469][ T4922] folio_prealloc+0x46/0x220 [ 195.742498][ T4922] do_pte_missing+0x1e80/0x44f0 [ 195.742529][ T4922] ? _raw_spin_unlock+0x45/0x60 [ 195.742552][ T4922] ? pte_marker_clear+0x1b0/0x1b0 [ 195.742571][ T4922] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 195.742591][ T4922] ? walk_pgd_range+0x1b58/0x1c20 [ 195.742605][ T4922] ? __pte_offset_map+0x1b0/0x230 [ 195.742619][ T4922] ? pte_offset_map_rw_nolock+0xba/0x110 [ 195.742634][ T4922] handle_mm_fault+0x11b8/0x1bf0 [ 195.742650][ T4922] ? __kasan_check_write+0x18/0x20 [ 195.742667][ T4922] ? __cfi_handle_mm_fault+0x10/0x10 [ 195.742684][ T4922] ? follow_page_pte+0x4b9/0xbc0 [ 195.742698][ T4922] ? gup_must_unshare+0x1e0/0x1e0 [ 195.742711][ T4922] ? vma_is_secretmem+0x11/0x50 [ 195.742724][ T4922] __get_user_pages+0x1170/0x22b0 [ 195.742746][ T4922] ? populate_vma_page_range+0x220/0x220 [ 195.742764][ T4922] ? down_read+0x7f/0xe0 [ 195.742780][ T4922] ? __cfi_down_read+0x10/0x10 [ 195.742797][ T4922] __mm_populate+0x2f8/0x430 [ 195.742824][ T4922] do_mlock+0x7eb/0xa00 [ 195.742838][ T4922] ? fput+0x1a4/0x240 [ 195.742849][ T4922] ? lru_gen_add_folio+0x860/0x860 [ 195.742862][ T4922] ? ksys_write+0x1f3/0x260 [ 195.742877][ T4922] ? __cfi_ksys_write+0x10/0x10 [ 195.742899][ T4922] ? __kasan_check_read+0x15/0x20 [ 195.742914][ T4922] __x64_sys_mlock+0x64/0x80 [ 195.742927][ T4922] x64_sys_call+0x670/0x2ee0 [ 195.742944][ T4922] do_syscall_64+0x57/0xf0 [ 195.742956][ T4922] ? clear_bhb_loop+0x50/0xa0 [ 195.742969][ T4922] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 195.742989][ T4922] RIP: 0033:0x7fe93e59c799 [ 195.743002][ T4922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.743014][ T4922] RSP: 002b:00007fe93cff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 195.743030][ T4922] RAX: ffffffffffffffda RBX: 00007fe93e815fa0 RCX: 00007fe93e59c799 [ 195.743046][ T4922] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 195.743062][ T4922] RBP: 00007fe93cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 195.743076][ T4922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.743091][ T4922] R13: 00007fe93e816038 R14: 00007fe93e815fa0 R15: 00007ffc14d895f8 [ 195.743108][ T4922] [ 196.215074][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.222368][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.244831][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.262010][ T4943] FAULT_INJECTION: forcing a failure. [ 196.262010][ T4943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 196.262896][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.283157][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.284222][ T4943] CPU: 1 UID: 0 PID: 4943 Comm: syz.1.1613 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 196.284251][ T4943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 196.284263][ T4943] Call Trace: [ 196.284270][ T4943] [ 196.284278][ T4943] __dump_stack+0x21/0x30 [ 196.284308][ T4943] dump_stack_lvl+0x140/0x1c0 [ 196.284331][ T4943] ? __cfi_dump_stack_lvl+0x10/0x10 [ 196.284355][ T4943] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 196.284377][ T4943] dump_stack+0x19/0x20 [ 196.284399][ T4943] should_fail_ex+0x3d7/0x530 [ 196.284420][ T4943] should_fail_alloc_page+0xec/0x110 [ 196.284448][ T4943] __alloc_pages_noprof+0x1c0/0x7e0 [ 196.284468][ T4943] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 196.284491][ T4943] __folio_alloc_noprof+0x14/0x80 [ 196.284511][ T4943] folio_prealloc+0x46/0x220 [ 196.284538][ T4943] do_pte_missing+0x1e80/0x44f0 [ 196.284565][ T4943] ? _raw_spin_unlock+0x45/0x60 [ 196.284586][ T4943] ? pte_marker_clear+0x1b0/0x1b0 [ 196.284614][ T4943] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 196.284644][ T4943] ? walk_pgd_range+0x1b58/0x1c20 [ 196.284663][ T4943] ? __pte_offset_map+0x1b0/0x230 [ 196.284685][ T4943] ? pte_offset_map_rw_nolock+0xba/0x110 [ 196.284707][ T4943] handle_mm_fault+0x11b8/0x1bf0 [ 196.284733][ T4943] ? __kasan_check_write+0x18/0x20 [ 196.284758][ T4943] ? __cfi_handle_mm_fault+0x10/0x10 [ 196.284783][ T4943] ? follow_page_pte+0x4b9/0xbc0 [ 196.284804][ T4943] ? gup_must_unshare+0x1e0/0x1e0 [ 196.284822][ T4943] ? vma_is_secretmem+0x11/0x50 [ 196.284842][ T4943] __get_user_pages+0x1170/0x22b0 [ 196.284874][ T4943] ? populate_vma_page_range+0x220/0x220 [ 196.284901][ T4943] ? down_read+0x7f/0xe0 [ 196.284925][ T4943] ? __cfi_down_read+0x10/0x10 [ 196.284949][ T4943] __mm_populate+0x2f8/0x430 [ 196.284977][ T4943] do_mlock+0x7eb/0xa00 [ 196.284997][ T4943] ? fput+0x1a4/0x240 [ 196.285013][ T4943] ? lru_gen_add_folio+0x860/0x860 [ 196.285042][ T4943] ? ksys_write+0x1f3/0x260 [ 196.285065][ T4943] ? __cfi_ksys_write+0x10/0x10 [ 196.285088][ T4943] ? __kasan_check_read+0x15/0x20 [ 196.285111][ T4943] __x64_sys_mlock+0x64/0x80 [ 196.285130][ T4943] x64_sys_call+0x670/0x2ee0 [ 196.285155][ T4943] do_syscall_64+0x57/0xf0 [ 196.285174][ T4943] ? clear_bhb_loop+0x50/0xa0 [ 196.285194][ T4943] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 196.285222][ T4943] RIP: 0033:0x7fa04f19c799 [ 196.285239][ T4943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.285256][ T4943] RSP: 002b:00007fa0500ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 196.285278][ T4943] RAX: ffffffffffffffda RBX: 00007fa04f415fa0 RCX: 00007fa04f19c799 [ 196.285294][ T4943] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 196.285308][ T4943] RBP: 00007fa0500ef090 R08: 0000000000000000 R09: 0000000000000000 [ 196.285321][ T4943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.285333][ T4943] R13: 00007fa04f416038 R14: 00007fa04f415fa0 R15: 00007ffda5730828 [ 196.285350][ T4943] [ 196.497313][ T4955] futex_wake_op: syz.4.1615 tries to shift op by 32; fix this program [ 196.499306][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.619510][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.627016][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.634522][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.642727][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.650240][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.657803][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.665232][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.672416][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.679852][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.687062][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.694509][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.701941][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.709212][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.716439][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.723488][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.730720][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.738114][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.745415][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.752841][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.760286][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.767741][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.775253][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.782457][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.790082][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.797236][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.805116][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.812382][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.819985][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.827500][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.834913][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.842195][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.850690][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.857988][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.865291][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.872720][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.880516][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.887738][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.894958][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.902442][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.910087][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.917332][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.924757][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.932119][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.939391][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.946560][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.953958][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.961253][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.968511][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.975742][ T4937] syzkaller0: refused to change device tx_queue_len [ 196.983007][ T4937] syzkaller0: refused to change device tx_queue_len [ 197.083735][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1620'. [ 197.147366][ T4970] 8021q: VLANs not supported on ip_vti0 [ 197.207746][ T4975] netlink: 'syz.1.1623': attribute type 4 has an invalid length. [ 197.380706][ T4983] FAULT_INJECTION: forcing a failure. [ 197.380706][ T4983] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.394357][ T4983] CPU: 1 UID: 0 PID: 4983 Comm: syz.1.1626 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 197.394395][ T4983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.394409][ T4983] Call Trace: [ 197.394417][ T4983] [ 197.394426][ T4983] __dump_stack+0x21/0x30 [ 197.394460][ T4983] dump_stack_lvl+0x140/0x1c0 [ 197.394487][ T4983] ? __cfi_dump_stack_lvl+0x10/0x10 [ 197.394514][ T4983] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 197.394540][ T4983] dump_stack+0x19/0x20 [ 197.394565][ T4983] should_fail_ex+0x3d7/0x530 [ 197.394590][ T4983] should_fail_alloc_page+0xec/0x110 [ 197.394621][ T4983] __alloc_pages_noprof+0x1c0/0x7e0 [ 197.394645][ T4983] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 197.394672][ T4983] __folio_alloc_noprof+0x14/0x80 [ 197.394696][ T4983] folio_prealloc+0x46/0x220 [ 197.394727][ T4983] do_pte_missing+0x1e80/0x44f0 [ 197.394757][ T4983] ? _raw_spin_unlock+0x45/0x60 [ 197.394782][ T4983] ? pte_marker_clear+0x1b0/0x1b0 [ 197.394815][ T4983] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 197.394848][ T4983] ? walk_pgd_range+0x1b58/0x1c20 [ 197.394871][ T4983] ? __pte_offset_map+0x1b0/0x230 [ 197.394896][ T4983] ? pte_offset_map_rw_nolock+0xba/0x110 [ 197.394921][ T4983] handle_mm_fault+0x11b8/0x1bf0 [ 197.394951][ T4983] ? __kasan_check_write+0x18/0x20 [ 197.394980][ T4983] ? __cfi_handle_mm_fault+0x10/0x10 [ 197.395019][ T4983] ? follow_page_pte+0x4b9/0xbc0 [ 197.395043][ T4983] ? gup_must_unshare+0x1e0/0x1e0 [ 197.395066][ T4983] ? vma_is_secretmem+0x11/0x50 [ 197.395089][ T4983] __get_user_pages+0x1170/0x22b0 [ 197.395126][ T4983] ? populate_vma_page_range+0x220/0x220 [ 197.395157][ T4983] ? down_read+0x7f/0xe0 [ 197.395184][ T4983] ? __cfi_down_read+0x10/0x10 [ 197.395212][ T4983] __mm_populate+0x2f8/0x430 [ 197.395243][ T4983] do_mlock+0x7eb/0xa00 [ 197.395264][ T4983] ? fput+0x1a4/0x240 [ 197.395284][ T4983] ? lru_gen_add_folio+0x860/0x860 [ 197.395307][ T4983] ? ksys_write+0x1f3/0x260 [ 197.395332][ T4983] ? xfd_validate_state+0x68/0x140 [ 197.395359][ T4983] ? __cfi_ksys_write+0x10/0x10 [ 197.395385][ T4983] ? __kasan_check_read+0x15/0x20 [ 197.395410][ T4983] __x64_sys_mlock+0x64/0x80 [ 197.395431][ T4983] x64_sys_call+0x670/0x2ee0 [ 197.395459][ T4983] do_syscall_64+0x57/0xf0 [ 197.395480][ T4983] ? clear_bhb_loop+0x50/0xa0 [ 197.395502][ T4983] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 197.395534][ T4983] RIP: 0033:0x7fa04f19c799 [ 197.395553][ T4983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.395572][ T4983] RSP: 002b:00007fa0500ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 197.395597][ T4983] RAX: ffffffffffffffda RBX: 00007fa04f415fa0 RCX: 00007fa04f19c799 [ 197.395615][ T4983] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 197.395631][ T4983] RBP: 00007fa0500ef090 R08: 0000000000000000 R09: 0000000000000000 [ 197.395723][ T4983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.395738][ T4983] R13: 00007fa04f416038 R14: 00007fa04f415fa0 R15: 00007ffda5730828 [ 197.395757][ T4983] [ 197.564680][ T36] kauditd_printk_skb: 368 callbacks suppressed [ 197.564701][ T36] audit: type=1400 audit(197.480:21496): avc: denied { read } for pid=4984 comm="syz.4.1625" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 197.945689][ T36] audit: type=1400 audit(197.720:21497): avc: denied { mounton } for pid=4980 comm="syz.3.1624" path="/389/file0" dev="tmpfs" ino=2104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 197.999687][ T36] audit: type=1400 audit(197.730:21498): avc: denied { mounton } for pid=4980 comm="syz.3.1624" path="/389/file0" dev="tmpfs" ino=2104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 198.105932][ T36] audit: type=1400 audit(197.730:21499): avc: denied { write } for pid=4980 comm="syz.3.1624" name="netlink" dev="proc" ino=4026532475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 198.186196][ T36] audit: type=1400 audit(197.730:21500): avc: denied { read write } for pid=4980 comm="syz.3.1624" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0 [ 198.221677][ T36] audit: type=1400 audit(197.740:21501): avc: denied { read write } for pid=961 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 198.274185][ T36] audit: type=1400 audit(197.760:21502): avc: denied { create } for pid=4987 comm="syz.4.1628" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 198.330851][ T36] audit: type=1400 audit(197.770:21503): avc: denied { read } for pid=4987 comm="syz.4.1628" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 198.374127][ T36] audit: type=1400 audit(197.770:21504): avc: denied { read } for pid=4987 comm="syz.4.1628" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 198.414358][ T36] audit: type=1400 audit(197.780:21505): avc: denied { read write } for pid=961 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 198.468944][ T4995] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1632'. [ 199.015398][ T5022] FAULT_INJECTION: forcing a failure. [ 199.015398][ T5022] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 199.028804][ T5022] CPU: 0 UID: 0 PID: 5022 Comm: syz.4.1641 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 199.028843][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.028857][ T5022] Call Trace: [ 199.028865][ T5022] [ 199.028873][ T5022] __dump_stack+0x21/0x30 [ 199.028905][ T5022] dump_stack_lvl+0x140/0x1c0 [ 199.028931][ T5022] ? __cfi_dump_stack_lvl+0x10/0x10 [ 199.028958][ T5022] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 199.028983][ T5022] dump_stack+0x19/0x20 [ 199.029008][ T5022] should_fail_ex+0x3d7/0x530 [ 199.029032][ T5022] should_fail_alloc_page+0xec/0x110 [ 199.029063][ T5022] __alloc_pages_noprof+0x1c0/0x7e0 [ 199.029085][ T5022] ? __switch_to_asm+0x3d/0x70 [ 199.029112][ T5022] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 199.029139][ T5022] __folio_alloc_noprof+0x14/0x80 [ 199.029160][ T5022] folio_prealloc+0x46/0x220 [ 199.029192][ T5022] do_pte_missing+0x1e80/0x44f0 [ 199.029224][ T5022] ? pte_marker_clear+0x1b0/0x1b0 [ 199.029255][ T5022] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 199.029288][ T5022] ? irqentry_exit+0x4a/0x60 [ 199.029318][ T5022] ? __pte_offset_map+0x1b0/0x230 [ 199.029343][ T5022] ? pte_offset_map_rw_nolock+0xba/0x110 [ 199.029368][ T5022] handle_mm_fault+0x11b8/0x1bf0 [ 199.029396][ T5022] ? __kasan_check_write+0x18/0x20 [ 199.029424][ T5022] ? __cfi_handle_mm_fault+0x10/0x10 [ 199.029452][ T5022] ? follow_page_pte+0x4b9/0xbc0 [ 199.029474][ T5022] ? gup_must_unshare+0x1e0/0x1e0 [ 199.029495][ T5022] ? vma_is_secretmem+0x11/0x50 [ 199.029518][ T5022] __get_user_pages+0x1170/0x22b0 [ 199.029555][ T5022] ? populate_vma_page_range+0x220/0x220 [ 199.029586][ T5022] ? down_read+0x7f/0xe0 [ 199.029613][ T5022] ? __cfi_down_read+0x10/0x10 [ 199.029640][ T5022] __mm_populate+0x2f8/0x430 [ 199.029670][ T5022] do_mlock+0x7eb/0xa00 [ 199.029692][ T5022] ? fput+0x1a4/0x240 [ 199.029711][ T5022] ? lru_gen_add_folio+0x860/0x860 [ 199.029733][ T5022] ? ksys_write+0x1f3/0x260 [ 199.029757][ T5022] ? xfd_validate_state+0x68/0x140 [ 199.029788][ T5022] ? __cfi_ksys_write+0x10/0x10 [ 199.029823][ T5022] ? __kasan_check_read+0x15/0x20 [ 199.029848][ T5022] __x64_sys_mlock+0x64/0x80 [ 199.029870][ T5022] x64_sys_call+0x670/0x2ee0 [ 199.029899][ T5022] do_syscall_64+0x57/0xf0 [ 199.029918][ T5022] ? clear_bhb_loop+0x50/0xa0 [ 199.029939][ T5022] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 199.029971][ T5022] RIP: 0033:0x7feb8139c799 [ 199.029990][ T5022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.030009][ T5022] RSP: 002b:00007feb82172028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 199.030035][ T5022] RAX: ffffffffffffffda RBX: 00007feb81615fa0 RCX: 00007feb8139c799 [ 199.030053][ T5022] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 199.030069][ T5022] RBP: 00007feb82172090 R08: 0000000000000000 R09: 0000000000000000 [ 199.030085][ T5022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.030099][ T5022] R13: 00007feb81616038 R14: 00007feb81615fa0 R15: 00007fff13c36bd8 [ 199.030119][ T5022] [ 200.943629][ T5051] FAULT_INJECTION: forcing a failure. [ 200.943629][ T5051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 200.957114][ T5051] CPU: 1 UID: 0 PID: 5051 Comm: syz.0.1653 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 200.957141][ T5051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 200.957150][ T5051] Call Trace: [ 200.957155][ T5051] [ 200.957162][ T5051] __dump_stack+0x21/0x30 [ 200.957184][ T5051] dump_stack_lvl+0x140/0x1c0 [ 200.957200][ T5051] ? __cfi_dump_stack_lvl+0x10/0x10 [ 200.957223][ T5051] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 200.957238][ T5051] dump_stack+0x19/0x20 [ 200.957252][ T5051] should_fail_ex+0x3d7/0x530 [ 200.957267][ T5051] should_fail_alloc_page+0xec/0x110 [ 200.957286][ T5051] __alloc_pages_noprof+0x1c0/0x7e0 [ 200.957299][ T5051] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 200.957314][ T5051] __folio_alloc_noprof+0x14/0x80 [ 200.957327][ T5051] folio_prealloc+0x46/0x220 [ 200.957346][ T5051] do_pte_missing+0x1e80/0x44f0 [ 200.957364][ T5051] ? _raw_spin_unlock+0x45/0x60 [ 200.957378][ T5051] ? pte_marker_clear+0x1b0/0x1b0 [ 200.957396][ T5051] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 200.957415][ T5051] ? walk_pgd_range+0x1b58/0x1c20 [ 200.957429][ T5051] ? __pte_offset_map+0x1b0/0x230 [ 200.957453][ T5051] ? pte_offset_map_rw_nolock+0xba/0x110 [ 200.957478][ T5051] handle_mm_fault+0x11b8/0x1bf0 [ 200.957502][ T5051] ? __kasan_check_write+0x18/0x20 [ 200.957519][ T5051] ? __cfi_handle_mm_fault+0x10/0x10 [ 200.957535][ T5051] ? follow_page_pte+0x4b9/0xbc0 [ 200.957549][ T5051] ? gup_must_unshare+0x1e0/0x1e0 [ 200.957561][ T5051] ? vma_is_secretmem+0x11/0x50 [ 200.957575][ T5051] __get_user_pages+0x1170/0x22b0 [ 200.957596][ T5051] ? populate_vma_page_range+0x220/0x220 [ 200.957614][ T5051] ? down_read+0x7f/0xe0 [ 200.957630][ T5051] ? __cfi_down_read+0x10/0x10 [ 200.957646][ T5051] __mm_populate+0x2f8/0x430 [ 200.957665][ T5051] do_mlock+0x7eb/0xa00 [ 200.957678][ T5051] ? fput+0x1a4/0x240 [ 200.957689][ T5051] ? lru_gen_add_folio+0x860/0x860 [ 200.957792][ T5051] ? ksys_write+0x1f3/0x260 [ 200.957807][ T5051] ? __cfi_ksys_write+0x10/0x10 [ 200.957823][ T5051] ? __kasan_check_read+0x15/0x20 [ 200.957838][ T5051] __x64_sys_mlock+0x64/0x80 [ 200.957851][ T5051] x64_sys_call+0x670/0x2ee0 [ 200.957868][ T5051] do_syscall_64+0x57/0xf0 [ 200.957880][ T5051] ? clear_bhb_loop+0x50/0xa0 [ 200.957892][ T5051] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 200.957911][ T5051] RIP: 0033:0x7fe93e59c799 [ 200.957924][ T5051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.957936][ T5051] RSP: 002b:00007fe93cff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 200.957953][ T5051] RAX: ffffffffffffffda RBX: 00007fe93e815fa0 RCX: 00007fe93e59c799 [ 200.957966][ T5051] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 200.957975][ T5051] RBP: 00007fe93cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 200.957984][ T5051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.957992][ T5051] R13: 00007fe93e816038 R14: 00007fe93e815fa0 R15: 00007ffc14d895f8 [ 200.958004][ T5051] [ 202.006839][ T5072] netlink: 57 bytes leftover after parsing attributes in process `syz.4.1661'. [ 202.100152][ T3296] Bluetooth: hci0: Frame reassembly failed (-84) [ 202.235202][ T5089] FAULT_INJECTION: forcing a failure. [ 202.235202][ T5089] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 202.248789][ T5089] CPU: 0 UID: 0 PID: 5089 Comm: syz.0.1667 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 202.248815][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 202.248823][ T5089] Call Trace: [ 202.248829][ T5089] [ 202.248835][ T5089] __dump_stack+0x21/0x30 [ 202.248857][ T5089] dump_stack_lvl+0x140/0x1c0 [ 202.248873][ T5089] ? __cfi_dump_stack_lvl+0x10/0x10 [ 202.248888][ T5089] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 202.248903][ T5089] dump_stack+0x19/0x20 [ 202.248918][ T5089] should_fail_ex+0x3d7/0x530 [ 202.248932][ T5089] should_fail_alloc_page+0xec/0x110 [ 202.248950][ T5089] __alloc_pages_noprof+0x1c0/0x7e0 [ 202.248966][ T5089] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 202.248982][ T5089] __folio_alloc_noprof+0x14/0x80 [ 202.248994][ T5089] folio_prealloc+0x46/0x220 [ 202.249013][ T5089] do_pte_missing+0x1e80/0x44f0 [ 202.249031][ T5089] ? _raw_spin_unlock+0x45/0x60 [ 202.249045][ T5089] ? pte_marker_clear+0x1b0/0x1b0 [ 202.249070][ T5089] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 202.249090][ T5089] ? walk_pgd_range+0x1b58/0x1c20 [ 202.249103][ T5089] ? __pte_offset_map+0x1b0/0x230 [ 202.249117][ T5089] ? pte_offset_map_rw_nolock+0xba/0x110 [ 202.249132][ T5089] handle_mm_fault+0x11b8/0x1bf0 [ 202.249149][ T5089] ? __kasan_check_write+0x18/0x20 [ 202.249165][ T5089] ? __cfi_handle_mm_fault+0x10/0x10 [ 202.249181][ T5089] ? follow_page_pte+0x4b9/0xbc0 [ 202.249195][ T5089] ? gup_must_unshare+0x1e0/0x1e0 [ 202.249207][ T5089] ? vma_is_secretmem+0x11/0x50 [ 202.249220][ T5089] __get_user_pages+0x1170/0x22b0 [ 202.249241][ T5089] ? populate_vma_page_range+0x220/0x220 [ 202.249259][ T5089] ? down_read+0x7f/0xe0 [ 202.249274][ T5089] ? __cfi_down_read+0x10/0x10 [ 202.249290][ T5089] __mm_populate+0x2f8/0x430 [ 202.249309][ T5089] do_mlock+0x7eb/0xa00 [ 202.249322][ T5089] ? fput+0x1a4/0x240 [ 202.249333][ T5089] ? lru_gen_add_folio+0x860/0x860 [ 202.249347][ T5089] ? ksys_write+0x1f3/0x260 [ 202.249361][ T5089] ? __cfi_ksys_write+0x10/0x10 [ 202.249377][ T5089] ? __kasan_check_read+0x15/0x20 [ 202.249392][ T5089] __x64_sys_mlock+0x64/0x80 [ 202.249405][ T5089] x64_sys_call+0x670/0x2ee0 [ 202.249422][ T5089] do_syscall_64+0x57/0xf0 [ 202.249434][ T5089] ? clear_bhb_loop+0x50/0xa0 [ 202.249447][ T5089] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 202.249466][ T5089] RIP: 0033:0x7fe93e59c799 [ 202.249478][ T5089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.249490][ T5089] RSP: 002b:00007fe93cff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 202.249506][ T5089] RAX: ffffffffffffffda RBX: 00007fe93e815fa0 RCX: 00007fe93e59c799 [ 202.249516][ T5089] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 202.249526][ T5089] RBP: 00007fe93cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 202.249535][ T5089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.249543][ T5089] R13: 00007fe93e816038 R14: 00007fe93e815fa0 R15: 00007ffc14d895f8 [ 202.249554][ T5089] [ 202.602560][ T36] kauditd_printk_skb: 311 callbacks suppressed [ 202.602582][ T36] audit: type=1400 audit(202.560:21817): avc: denied { read write } for pid=292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 202.633201][ T36] audit: type=1400 audit(202.580:21818): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 202.661700][ T36] audit: type=1400 audit(202.620:21819): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 202.718915][ T36] audit: type=1400 audit(202.660:21820): avc: denied { read write } for pid=961 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 202.731672][ T5104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1672'. [ 202.760237][ T36] audit: type=1400 audit(202.670:21821): avc: denied { read write } for pid=292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 202.808874][ T36] audit: type=1400 audit(202.720:21822): avc: denied { read write } for pid=5100 comm="syz.1.1671" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 202.832056][ T36] audit: type=1400 audit(202.720:21823): avc: denied { read write } for pid=5101 comm="syz.4.1672" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 202.855439][ T36] audit: type=1400 audit(202.720:21824): avc: denied { mounton } for pid=5101 comm="syz.4.1672" path="/409/file0" dev="tmpfs" ino=2171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 202.879514][ T36] audit: type=1400 audit(202.720:21825): avc: denied { read write } for pid=5100 comm="syz.1.1671" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 202.902858][ T36] audit: type=1400 audit(202.720:21826): avc: denied { create } for pid=5101 comm="syz.4.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 203.359753][ T5118] FAULT_INJECTION: forcing a failure. [ 203.359753][ T5118] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 203.378468][ T5118] CPU: 0 UID: 0 PID: 5118 Comm: syz.4.1678 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 203.378506][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.378518][ T5118] Call Trace: [ 203.378526][ T5118] [ 203.378535][ T5118] __dump_stack+0x21/0x30 [ 203.378566][ T5118] dump_stack_lvl+0x140/0x1c0 [ 203.378591][ T5118] ? __cfi_dump_stack_lvl+0x10/0x10 [ 203.378616][ T5118] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 203.378639][ T5118] dump_stack+0x19/0x20 [ 203.378674][ T5118] should_fail_ex+0x3d7/0x530 [ 203.378696][ T5118] should_fail_alloc_page+0xec/0x110 [ 203.378725][ T5118] __alloc_pages_noprof+0x1c0/0x7e0 [ 203.378747][ T5118] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 203.378772][ T5118] __folio_alloc_noprof+0x14/0x80 [ 203.378793][ T5118] folio_prealloc+0x46/0x220 [ 203.378823][ T5118] do_pte_missing+0x1e80/0x44f0 [ 203.378863][ T5118] ? _raw_spin_unlock+0x45/0x60 [ 203.378887][ T5118] ? pte_marker_clear+0x1b0/0x1b0 [ 203.378915][ T5118] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 203.378943][ T5118] ? walk_pgd_range+0x1b58/0x1c20 [ 203.378964][ T5118] ? __pte_offset_map+0x1b0/0x230 [ 203.378987][ T5118] ? pte_offset_map_rw_nolock+0xba/0x110 [ 203.379011][ T5118] handle_mm_fault+0x11b8/0x1bf0 [ 203.379038][ T5118] ? __kasan_check_write+0x18/0x20 [ 203.379066][ T5118] ? __cfi_handle_mm_fault+0x10/0x10 [ 203.379093][ T5118] ? follow_page_pte+0x4b9/0xbc0 [ 203.379115][ T5118] ? gup_must_unshare+0x1e0/0x1e0 [ 203.379136][ T5118] ? vma_is_secretmem+0x11/0x50 [ 203.379158][ T5118] __get_user_pages+0x1170/0x22b0 [ 203.379193][ T5118] ? populate_vma_page_range+0x220/0x220 [ 203.379223][ T5118] ? down_read+0x7f/0xe0 [ 203.379248][ T5118] ? __cfi_down_read+0x10/0x10 [ 203.379275][ T5118] __mm_populate+0x2f8/0x430 [ 203.379306][ T5118] do_mlock+0x7eb/0xa00 [ 203.379329][ T5118] ? fput+0x1a4/0x240 [ 203.379347][ T5118] ? lru_gen_add_folio+0x860/0x860 [ 203.379369][ T5118] ? ksys_write+0x1f3/0x260 [ 203.379395][ T5118] ? __cfi_ksys_write+0x10/0x10 [ 203.379421][ T5118] ? __kasan_check_read+0x15/0x20 [ 203.379446][ T5118] __x64_sys_mlock+0x64/0x80 [ 203.379467][ T5118] x64_sys_call+0x670/0x2ee0 [ 203.379495][ T5118] do_syscall_64+0x57/0xf0 [ 203.379515][ T5118] ? clear_bhb_loop+0x50/0xa0 [ 203.379536][ T5118] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 203.379567][ T5118] RIP: 0033:0x7feb8139c799 [ 203.379595][ T5118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.379614][ T5118] RSP: 002b:00007feb82172028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 203.379638][ T5118] RAX: ffffffffffffffda RBX: 00007feb81615fa0 RCX: 00007feb8139c799 [ 203.379662][ T5118] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 203.379677][ T5118] RBP: 00007feb82172090 R08: 0000000000000000 R09: 0000000000000000 [ 203.379691][ T5118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.379704][ T5118] R13: 00007feb81616038 R14: 00007feb81615fa0 R15: 00007fff13c36bd8 [ 203.379722][ T5118] [ 203.769901][ T3294] Bluetooth: hci1: Frame reassembly failed (-84) [ 203.776889][ T5129] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 203.786387][ T3295] Bluetooth: hci1: Frame reassembly failed (-84) [ 204.174294][ T380] Bluetooth: hci0: command 0x1003 tx timeout [ 204.174288][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 204.375610][ T5148] FAULT_INJECTION: forcing a failure. [ 204.375610][ T5148] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 204.389211][ T5148] CPU: 0 UID: 0 PID: 5148 Comm: syz.1.1690 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 204.389235][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 204.389244][ T5148] Call Trace: [ 204.389250][ T5148] [ 204.389255][ T5148] __dump_stack+0x21/0x30 [ 204.389276][ T5148] dump_stack_lvl+0x140/0x1c0 [ 204.389292][ T5148] ? __cfi_dump_stack_lvl+0x10/0x10 [ 204.389308][ T5148] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 204.389323][ T5148] dump_stack+0x19/0x20 [ 204.389337][ T5148] should_fail_ex+0x3d7/0x530 [ 204.389351][ T5148] should_fail_alloc_page+0xec/0x110 [ 204.389370][ T5148] __alloc_pages_noprof+0x1c0/0x7e0 [ 204.389383][ T5148] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 204.389399][ T5148] __folio_alloc_noprof+0x14/0x80 [ 204.389411][ T5148] folio_prealloc+0x46/0x220 [ 204.389430][ T5148] do_pte_missing+0x1e80/0x44f0 [ 204.389449][ T5148] ? _raw_spin_unlock+0x45/0x60 [ 204.389462][ T5148] ? pte_marker_clear+0x1b0/0x1b0 [ 204.389489][ T5148] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 204.389521][ T5148] ? walk_pgd_range+0x1b58/0x1c20 [ 204.389543][ T5148] ? __pte_offset_map+0x1b0/0x230 [ 204.389557][ T5148] ? pte_offset_map_rw_nolock+0xba/0x110 [ 204.389572][ T5148] handle_mm_fault+0x11b8/0x1bf0 [ 204.389589][ T5148] ? __kasan_check_write+0x18/0x20 [ 204.389605][ T5148] ? __cfi_handle_mm_fault+0x10/0x10 [ 204.389623][ T5148] ? follow_page_pte+0x4b9/0xbc0 [ 204.389636][ T5148] ? gup_must_unshare+0x1e0/0x1e0 [ 204.389648][ T5148] ? vma_is_secretmem+0x11/0x50 [ 204.389661][ T5148] __get_user_pages+0x1170/0x22b0 [ 204.389682][ T5148] ? populate_vma_page_range+0x220/0x220 [ 204.389708][ T5148] ? down_read+0x7f/0xe0 [ 204.389725][ T5148] ? __cfi_down_read+0x10/0x10 [ 204.389741][ T5148] __mm_populate+0x2f8/0x430 [ 204.389760][ T5148] do_mlock+0x7eb/0xa00 [ 204.389773][ T5148] ? fput+0x1a4/0x240 [ 204.389784][ T5148] ? lru_gen_add_folio+0x860/0x860 [ 204.389797][ T5148] ? ksys_write+0x1f3/0x260 [ 204.389812][ T5148] ? __cfi_ksys_write+0x10/0x10 [ 204.389827][ T5148] ? __kasan_check_read+0x15/0x20 [ 204.389842][ T5148] __x64_sys_mlock+0x64/0x80 [ 204.389855][ T5148] x64_sys_call+0x670/0x2ee0 [ 204.389872][ T5148] do_syscall_64+0x57/0xf0 [ 204.389884][ T5148] ? clear_bhb_loop+0x50/0xa0 [ 204.389896][ T5148] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 204.389916][ T5148] RIP: 0033:0x7fa04f19c799 [ 204.389928][ T5148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.389940][ T5148] RSP: 002b:00007fa0500ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 204.389960][ T5148] RAX: ffffffffffffffda RBX: 00007fa04f415fa0 RCX: 00007fa04f19c799 [ 204.389970][ T5148] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 204.389979][ T5148] RBP: 00007fa0500ef090 R08: 0000000000000000 R09: 0000000000000000 [ 204.389988][ T5148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.389997][ T5148] R13: 00007fa04f416038 R14: 00007fa04f415fa0 R15: 00007ffda5730828 [ 204.390008][ T5148] [ 205.360657][ T5169] netlink: 'syz.0.1699': attribute type 1 has an invalid length. [ 205.370874][ T5169] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1699'. [ 205.662098][ T5176] FAULT_INJECTION: forcing a failure. [ 205.662098][ T5176] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 205.676503][ T5176] CPU: 0 UID: 0 PID: 5176 Comm: syz.3.1701 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 205.676544][ T5176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.676557][ T5176] Call Trace: [ 205.676565][ T5176] [ 205.676575][ T5176] __dump_stack+0x21/0x30 [ 205.676608][ T5176] dump_stack_lvl+0x140/0x1c0 [ 205.676632][ T5176] ? __cfi_dump_stack_lvl+0x10/0x10 [ 205.676657][ T5176] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 205.676681][ T5176] dump_stack+0x19/0x20 [ 205.676696][ T5176] should_fail_ex+0x3d7/0x530 [ 205.676710][ T5176] should_fail_alloc_page+0xec/0x110 [ 205.676729][ T5176] __alloc_pages_noprof+0x1c0/0x7e0 [ 205.676752][ T5176] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 205.676768][ T5176] __folio_alloc_noprof+0x14/0x80 [ 205.676781][ T5176] folio_prealloc+0x46/0x220 [ 205.676801][ T5176] do_pte_missing+0x1e80/0x44f0 [ 205.676819][ T5176] ? _raw_spin_unlock+0x45/0x60 [ 205.676833][ T5176] ? pte_marker_clear+0x1b0/0x1b0 [ 205.676852][ T5176] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 205.676873][ T5176] ? walk_pgd_range+0x1b58/0x1c20 [ 205.676887][ T5176] ? __pte_offset_map+0x1b0/0x230 [ 205.676901][ T5176] ? pte_offset_map_rw_nolock+0xba/0x110 [ 205.676916][ T5176] handle_mm_fault+0x11b8/0x1bf0 [ 205.676933][ T5176] ? __kasan_check_write+0x18/0x20 [ 205.676949][ T5176] ? __cfi_handle_mm_fault+0x10/0x10 [ 205.676966][ T5176] ? follow_page_pte+0x4b9/0xbc0 [ 205.676980][ T5176] ? gup_must_unshare+0x1e0/0x1e0 [ 205.676993][ T5176] ? vma_is_secretmem+0x11/0x50 [ 205.677007][ T5176] __get_user_pages+0x1170/0x22b0 [ 205.677028][ T5176] ? populate_vma_page_range+0x220/0x220 [ 205.677046][ T5176] ? down_read+0x7f/0xe0 [ 205.677062][ T5176] ? __cfi_down_read+0x10/0x10 [ 205.677078][ T5176] __mm_populate+0x2f8/0x430 [ 205.677097][ T5176] do_mlock+0x7eb/0xa00 [ 205.677111][ T5176] ? fput+0x1a4/0x240 [ 205.677123][ T5176] ? lru_gen_add_folio+0x860/0x860 [ 205.677136][ T5176] ? ksys_write+0x1f3/0x260 [ 205.677152][ T5176] ? __cfi_ksys_write+0x10/0x10 [ 205.677167][ T5176] ? __kasan_check_read+0x15/0x20 [ 205.677182][ T5176] __x64_sys_mlock+0x64/0x80 [ 205.677194][ T5176] x64_sys_call+0x670/0x2ee0 [ 205.677212][ T5176] do_syscall_64+0x57/0xf0 [ 205.677224][ T5176] ? clear_bhb_loop+0x50/0xa0 [ 205.677237][ T5176] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 205.677257][ T5176] RIP: 0033:0x7f523cf9c799 [ 205.677270][ T5176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.677283][ T5176] RSP: 002b:00007f523defc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 205.677299][ T5176] RAX: ffffffffffffffda RBX: 00007f523d215fa0 RCX: 00007f523cf9c799 [ 205.677310][ T5176] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 205.677320][ T5176] RBP: 00007f523defc090 R08: 0000000000000000 R09: 0000000000000000 [ 205.677329][ T5176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.677337][ T5176] R13: 00007f523d216038 R14: 00007f523d215fa0 R15: 00007ffc95ef04e8 [ 205.677348][ T5176] [ 205.824231][ T1253] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 205.824764][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 206.123711][ T5190] devpts: called with bogus options [ 206.213003][ T5198] FAULT_INJECTION: forcing a failure. [ 206.213003][ T5198] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 206.256125][ T5198] CPU: 0 UID: 0 PID: 5198 Comm: syz.0.1711 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 206.256162][ T5198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 206.256175][ T5198] Call Trace: [ 206.256182][ T5198] [ 206.256190][ T5198] __dump_stack+0x21/0x30 [ 206.256224][ T5198] dump_stack_lvl+0x140/0x1c0 [ 206.256248][ T5198] ? __cfi_dump_stack_lvl+0x10/0x10 [ 206.256273][ T5198] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 206.256298][ T5198] dump_stack+0x19/0x20 [ 206.256322][ T5198] should_fail_ex+0x3d7/0x530 [ 206.256346][ T5198] should_fail_alloc_page+0xec/0x110 [ 206.256376][ T5198] __alloc_pages_noprof+0x1c0/0x7e0 [ 206.256404][ T5198] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 206.256431][ T5198] __folio_alloc_noprof+0x14/0x80 [ 206.256453][ T5198] folio_prealloc+0x46/0x220 [ 206.256485][ T5198] do_pte_missing+0x1e80/0x44f0 [ 206.256513][ T5198] ? _raw_spin_unlock+0x45/0x60 [ 206.256536][ T5198] ? pte_marker_clear+0x1b0/0x1b0 [ 206.256564][ T5198] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 206.256605][ T5198] ? walk_pgd_range+0x1b58/0x1c20 [ 206.256629][ T5198] ? __pte_offset_map+0x1b0/0x230 [ 206.256654][ T5198] ? pte_offset_map_rw_nolock+0xba/0x110 [ 206.256678][ T5198] handle_mm_fault+0x11b8/0x1bf0 [ 206.256706][ T5198] ? __kasan_check_write+0x18/0x20 [ 206.256734][ T5198] ? __cfi_handle_mm_fault+0x10/0x10 [ 206.256760][ T5198] ? follow_page_pte+0x4b9/0xbc0 [ 206.256781][ T5198] ? gup_must_unshare+0x1e0/0x1e0 [ 206.256800][ T5198] ? vma_is_secretmem+0x11/0x50 [ 206.256820][ T5198] __get_user_pages+0x1170/0x22b0 [ 206.256854][ T5198] ? populate_vma_page_range+0x220/0x220 [ 206.256886][ T5198] ? down_read+0x7f/0xe0 [ 206.256913][ T5198] ? __cfi_down_read+0x10/0x10 [ 206.256940][ T5198] __mm_populate+0x2f8/0x430 [ 206.256972][ T5198] do_mlock+0x7eb/0xa00 [ 206.256992][ T5198] ? fput+0x1a4/0x240 [ 206.257010][ T5198] ? lru_gen_add_folio+0x860/0x860 [ 206.257031][ T5198] ? ksys_write+0x1f3/0x260 [ 206.257055][ T5198] ? __cfi_ksys_write+0x10/0x10 [ 206.257079][ T5198] ? __kasan_check_read+0x15/0x20 [ 206.257101][ T5198] __x64_sys_mlock+0x64/0x80 [ 206.257121][ T5198] x64_sys_call+0x670/0x2ee0 [ 206.257148][ T5198] do_syscall_64+0x57/0xf0 [ 206.257167][ T5198] ? clear_bhb_loop+0x50/0xa0 [ 206.257189][ T5198] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 206.257221][ T5198] RIP: 0033:0x7fe93e59c799 [ 206.257241][ T5198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.257262][ T5198] RSP: 002b:00007fe93cff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 206.257288][ T5198] RAX: ffffffffffffffda RBX: 00007fe93e815fa0 RCX: 00007fe93e59c799 [ 206.257305][ T5198] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 206.257321][ T5198] RBP: 00007fe93cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 206.257336][ T5198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.257349][ T5198] R13: 00007fe93e816038 R14: 00007fe93e815fa0 R15: 00007ffc14d895f8 [ 206.257368][ T5198] [ 206.282854][ T5205] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1715'. [ 206.588243][ T5210] tc_dump_action: action bad kind [ 206.662321][ T5223] netlink: 'syz.1.1721': attribute type 4 has an invalid length. [ 206.688723][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 206.771106][ T5230] FAULT_INJECTION: forcing a failure. [ 206.771106][ T5230] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 206.785394][ T5230] CPU: 0 UID: 0 PID: 5230 Comm: syz.1.1724 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 206.785433][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 206.785447][ T5230] Call Trace: [ 206.785455][ T5230] [ 206.785480][ T5230] __dump_stack+0x21/0x30 [ 206.785514][ T5230] dump_stack_lvl+0x140/0x1c0 [ 206.785538][ T5230] ? __cfi_dump_stack_lvl+0x10/0x10 [ 206.785564][ T5230] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 206.785587][ T5230] dump_stack+0x19/0x20 [ 206.785621][ T5230] should_fail_ex+0x3d7/0x530 [ 206.785644][ T5230] should_fail_alloc_page+0xec/0x110 [ 206.785674][ T5230] __alloc_pages_noprof+0x1c0/0x7e0 [ 206.785695][ T5230] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 206.785720][ T5230] __folio_alloc_noprof+0x14/0x80 [ 206.785742][ T5230] folio_prealloc+0x46/0x220 [ 206.785773][ T5230] do_pte_missing+0x1e80/0x44f0 [ 206.785802][ T5230] ? _raw_spin_unlock+0x45/0x60 [ 206.785820][ T5230] ? pte_marker_clear+0x1b0/0x1b0 [ 206.785838][ T5230] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 206.785861][ T5230] ? walk_pgd_range+0x1b58/0x1c20 [ 206.785875][ T5230] ? __pte_offset_map+0x1b0/0x230 [ 206.785889][ T5230] ? pte_offset_map_rw_nolock+0xba/0x110 [ 206.785903][ T5230] handle_mm_fault+0x11b8/0x1bf0 [ 206.785920][ T5230] ? __kasan_check_write+0x18/0x20 [ 206.785937][ T5230] ? __cfi_handle_mm_fault+0x10/0x10 [ 206.785954][ T5230] ? follow_page_pte+0x4b9/0xbc0 [ 206.785966][ T5230] ? gup_must_unshare+0x1e0/0x1e0 [ 206.785978][ T5230] ? vma_is_secretmem+0x11/0x50 [ 206.785992][ T5230] __get_user_pages+0x1170/0x22b0 [ 206.786021][ T5230] ? populate_vma_page_range+0x220/0x220 [ 206.786040][ T5230] ? down_read+0x7f/0xe0 [ 206.786056][ T5230] ? __cfi_down_read+0x10/0x10 [ 206.786072][ T5230] __mm_populate+0x2f8/0x430 [ 206.786091][ T5230] do_mlock+0x7eb/0xa00 [ 206.786103][ T5230] ? fput+0x1a4/0x240 [ 206.786115][ T5230] ? lru_gen_add_folio+0x860/0x860 [ 206.786127][ T5230] ? ksys_write+0x1f3/0x260 [ 206.786142][ T5230] ? __cfi_ksys_write+0x10/0x10 [ 206.786163][ T5230] ? __kasan_check_read+0x15/0x20 [ 206.786187][ T5230] __x64_sys_mlock+0x64/0x80 [ 206.786207][ T5230] x64_sys_call+0x670/0x2ee0 [ 206.786232][ T5230] do_syscall_64+0x57/0xf0 [ 206.786244][ T5230] ? clear_bhb_loop+0x50/0xa0 [ 206.786257][ T5230] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 206.786276][ T5230] RIP: 0033:0x7fa04f19c799 [ 206.786289][ T5230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.786300][ T5230] RSP: 002b:00007fa0500ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 206.786317][ T5230] RAX: ffffffffffffffda RBX: 00007fa04f415fa0 RCX: 00007fa04f19c799 [ 206.786327][ T5230] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 206.786336][ T5230] RBP: 00007fa0500ef090 R08: 0000000000000000 R09: 0000000000000000 [ 206.786344][ T5230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.786353][ T5230] R13: 00007fa04f416038 R14: 00007fa04f415fa0 R15: 00007ffda5730828 [ 206.786364][ T5230] [ 207.506192][ T5250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=5250 comm=syz.0.1730 [ 207.604584][ T36] kauditd_printk_skb: 215 callbacks suppressed [ 207.604604][ T36] audit: type=1400 audit(2000000002.190:22042): avc: denied { read } for pid=5257 comm="syz.0.1734" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 207.638059][ T5258] FAULT_INJECTION: forcing a failure. [ 207.638059][ T5258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 207.653823][ T5258] CPU: 0 UID: 0 PID: 5258 Comm: syz.0.1734 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 207.653863][ T5258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.653877][ T5258] Call Trace: [ 207.653884][ T5258] [ 207.653892][ T5258] __dump_stack+0x21/0x30 [ 207.653923][ T5258] dump_stack_lvl+0x140/0x1c0 [ 207.653946][ T5258] ? __cfi_dump_stack_lvl+0x10/0x10 [ 207.653970][ T5258] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 207.653995][ T5258] dump_stack+0x19/0x20 [ 207.654020][ T5258] should_fail_ex+0x3d7/0x530 [ 207.654042][ T5258] should_fail_alloc_page+0xec/0x110 [ 207.654071][ T5258] __alloc_pages_noprof+0x1c0/0x7e0 [ 207.654091][ T5258] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 207.654115][ T5258] __folio_alloc_noprof+0x14/0x80 [ 207.654141][ T5258] folio_prealloc+0x46/0x220 [ 207.654171][ T5258] do_pte_missing+0x1e80/0x44f0 [ 207.654199][ T5258] ? _raw_spin_unlock+0x45/0x60 [ 207.654230][ T5258] ? pte_marker_clear+0x1b0/0x1b0 [ 207.654260][ T5258] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 207.654291][ T5258] ? walk_pgd_range+0x1b58/0x1c20 [ 207.654312][ T5258] ? __pte_offset_map+0x1b0/0x230 [ 207.654333][ T5258] ? pte_offset_map_rw_nolock+0xba/0x110 [ 207.654356][ T5258] handle_mm_fault+0x11b8/0x1bf0 [ 207.654383][ T5258] ? __kasan_check_write+0x18/0x20 [ 207.654410][ T5258] ? __cfi_handle_mm_fault+0x10/0x10 [ 207.654440][ T5258] ? follow_page_pte+0x4b9/0xbc0 [ 207.654462][ T5258] ? gup_must_unshare+0x1e0/0x1e0 [ 207.654483][ T5258] ? vma_is_secretmem+0x11/0x50 [ 207.654505][ T5258] __get_user_pages+0x1170/0x22b0 [ 207.654539][ T5258] ? populate_vma_page_range+0x220/0x220 [ 207.654568][ T5258] ? down_read+0x7f/0xe0 [ 207.654602][ T5258] ? __cfi_down_read+0x10/0x10 [ 207.654628][ T5258] __mm_populate+0x2f8/0x430 [ 207.654659][ T5258] do_mlock+0x7eb/0xa00 [ 207.654680][ T5258] ? fput+0x1a4/0x240 [ 207.654699][ T5258] ? lru_gen_add_folio+0x860/0x860 [ 207.654720][ T5258] ? ksys_write+0x1f3/0x260 [ 207.654743][ T5258] ? __cfi_ksys_write+0x10/0x10 [ 207.654766][ T5258] ? __kasan_check_read+0x15/0x20 [ 207.654789][ T5258] __x64_sys_mlock+0x64/0x80 [ 207.654808][ T5258] x64_sys_call+0x670/0x2ee0 [ 207.654835][ T5258] do_syscall_64+0x57/0xf0 [ 207.654854][ T5258] ? clear_bhb_loop+0x50/0xa0 [ 207.654876][ T5258] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 207.654908][ T5258] RIP: 0033:0x7fe93e59c799 [ 207.654928][ T5258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.654947][ T5258] RSP: 002b:00007fe93cff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 207.654971][ T5258] RAX: ffffffffffffffda RBX: 00007fe93e815fa0 RCX: 00007fe93e59c799 [ 207.654986][ T5258] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 207.655001][ T5258] RBP: 00007fe93cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 207.655014][ T5258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.655027][ T5258] R13: 00007fe93e816038 R14: 00007fe93e815fa0 R15: 00007ffc14d895f8 [ 207.655044][ T5258] [ 207.784209][ T36] audit: type=1400 audit(2000000002.190:22043): avc: denied { read write } for pid=961 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 208.002902][ T36] audit: type=1400 audit(2000000002.190:22044): avc: denied { read write } for pid=5259 comm="syz.3.1735" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 208.033738][ T36] audit: type=1400 audit(2000000002.190:22045): avc: denied { create } for pid=5261 comm="syz.4.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 208.056480][ T36] audit: type=1400 audit(2000000002.190:22046): avc: denied { write } for pid=5261 comm="syz.4.1736" name="ip6_tables_matches" dev="proc" ino=4026532878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 208.085241][ T36] audit: type=1400 audit(2000000002.230:22047): avc: denied { read write } for pid=961 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 208.116102][ T36] audit: type=1400 audit(2000000002.240:22048): avc: denied { read write } for pid=5259 comm="syz.3.1735" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 208.142080][ T36] audit: type=1400 audit(2000000002.250:22049): avc: denied { read write } for pid=961 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 208.167101][ T36] audit: type=1400 audit(2000000002.250:22050): avc: denied { read } for pid=5265 comm="syz.4.1738" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 208.198988][ T36] audit: type=1400 audit(2000000002.250:22051): avc: denied { create } for pid=5265 comm="syz.4.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 208.327889][ T5299] FAULT_INJECTION: forcing a failure. [ 208.327889][ T5299] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 208.341726][ T5299] CPU: 1 UID: 0 PID: 5299 Comm: syz.4.1750 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 208.341765][ T5299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 208.341779][ T5299] Call Trace: [ 208.341787][ T5299] [ 208.341795][ T5299] __dump_stack+0x21/0x30 [ 208.341828][ T5299] dump_stack_lvl+0x140/0x1c0 [ 208.341852][ T5299] ? __cfi_dump_stack_lvl+0x10/0x10 [ 208.341876][ T5299] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 208.341898][ T5299] dump_stack+0x19/0x20 [ 208.341918][ T5299] should_fail_ex+0x3d7/0x530 [ 208.341938][ T5299] should_fail_alloc_page+0xec/0x110 [ 208.341964][ T5299] __alloc_pages_noprof+0x1c0/0x7e0 [ 208.341988][ T5299] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 208.342015][ T5299] __folio_alloc_noprof+0x14/0x80 [ 208.342037][ T5299] folio_prealloc+0x46/0x220 [ 208.342066][ T5299] do_pte_missing+0x1e80/0x44f0 [ 208.342096][ T5299] ? _raw_spin_unlock+0x45/0x60 [ 208.342120][ T5299] ? pte_marker_clear+0x1b0/0x1b0 [ 208.342150][ T5299] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 208.342181][ T5299] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 208.342208][ T5299] ? __pte_offset_map+0x1b0/0x230 [ 208.342231][ T5299] ? pte_offset_map_rw_nolock+0xba/0x110 [ 208.342254][ T5299] handle_mm_fault+0x11b8/0x1bf0 [ 208.342280][ T5299] ? __kasan_check_write+0x18/0x20 [ 208.342305][ T5299] ? __cfi_handle_mm_fault+0x10/0x10 [ 208.342333][ T5299] ? follow_page_pte+0x4b9/0xbc0 [ 208.342355][ T5299] ? gup_must_unshare+0x1e0/0x1e0 [ 208.342375][ T5299] ? vma_is_secretmem+0x11/0x50 [ 208.342398][ T5299] __get_user_pages+0x1170/0x22b0 [ 208.342432][ T5299] ? populate_vma_page_range+0x220/0x220 [ 208.342462][ T5299] ? down_read+0x7f/0xe0 [ 208.342485][ T5299] ? __cfi_down_read+0x10/0x10 [ 208.342510][ T5299] __mm_populate+0x2f8/0x430 [ 208.342541][ T5299] do_mlock+0x7eb/0xa00 [ 208.342564][ T5299] ? fput+0x1a4/0x240 [ 208.342582][ T5299] ? lru_gen_add_folio+0x860/0x860 [ 208.342603][ T5299] ? ksys_write+0x1f3/0x260 [ 208.342626][ T5299] ? __cfi_ksys_write+0x10/0x10 [ 208.342662][ T5299] ? __kasan_check_read+0x15/0x20 [ 208.342687][ T5299] __x64_sys_mlock+0x64/0x80 [ 208.342707][ T5299] x64_sys_call+0x670/0x2ee0 [ 208.342735][ T5299] do_syscall_64+0x57/0xf0 [ 208.342754][ T5299] ? clear_bhb_loop+0x50/0xa0 [ 208.342773][ T5299] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 208.342802][ T5299] RIP: 0033:0x7feb8139c799 [ 208.342820][ T5299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.342838][ T5299] RSP: 002b:00007feb82172028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 208.342863][ T5299] RAX: ffffffffffffffda RBX: 00007feb81615fa0 RCX: 00007feb8139c799 [ 208.342878][ T5299] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 208.342893][ T5299] RBP: 00007feb82172090 R08: 0000000000000000 R09: 0000000000000000 [ 208.342907][ T5299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.342921][ T5299] R13: 00007feb81616038 R14: 00007feb81615fa0 R15: 00007fff13c36bd8 [ 208.342939][ T5299] [ 209.156055][ T5342] FAULT_INJECTION: forcing a failure. [ 209.156055][ T5342] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 209.204346][ T5342] CPU: 1 UID: 0 PID: 5342 Comm: syz.3.1764 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 209.204387][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.204402][ T5342] Call Trace: [ 209.204410][ T5342] [ 209.204419][ T5342] __dump_stack+0x21/0x30 [ 209.204452][ T5342] dump_stack_lvl+0x140/0x1c0 [ 209.204479][ T5342] ? __cfi_dump_stack_lvl+0x10/0x10 [ 209.204507][ T5342] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 209.204531][ T5342] dump_stack+0x19/0x20 [ 209.204556][ T5342] should_fail_ex+0x3d7/0x530 [ 209.204579][ T5342] should_fail_alloc_page+0xec/0x110 [ 209.204610][ T5342] __alloc_pages_noprof+0x1c0/0x7e0 [ 209.204634][ T5342] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 209.204659][ T5342] __folio_alloc_noprof+0x14/0x80 [ 209.204681][ T5342] folio_prealloc+0x46/0x220 [ 209.204712][ T5342] do_pte_missing+0x1e80/0x44f0 [ 209.204749][ T5342] ? _raw_spin_unlock+0x45/0x60 [ 209.204774][ T5342] ? pte_marker_clear+0x1b0/0x1b0 [ 209.204805][ T5342] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 209.204838][ T5342] ? walk_pgd_range+0x1b58/0x1c20 [ 209.204860][ T5342] ? __pte_offset_map+0x1b0/0x230 [ 209.204885][ T5342] ? pte_offset_map_rw_nolock+0xba/0x110 [ 209.204960][ T5342] handle_mm_fault+0x11b8/0x1bf0 [ 209.204989][ T5342] ? __kasan_check_write+0x18/0x20 [ 209.205018][ T5342] ? __cfi_handle_mm_fault+0x10/0x10 [ 209.205048][ T5342] ? follow_page_pte+0x4b9/0xbc0 [ 209.205070][ T5342] ? gup_must_unshare+0x1e0/0x1e0 [ 209.205092][ T5342] ? vma_is_secretmem+0x11/0x50 [ 209.205115][ T5342] __get_user_pages+0x1170/0x22b0 [ 209.205151][ T5342] ? populate_vma_page_range+0x220/0x220 [ 209.205183][ T5342] ? down_read+0x7f/0xe0 [ 209.205209][ T5342] ? __cfi_down_read+0x10/0x10 [ 209.205237][ T5342] __mm_populate+0x2f8/0x430 [ 209.205268][ T5342] do_mlock+0x7eb/0xa00 [ 209.205291][ T5342] ? fput+0x1a4/0x240 [ 209.205311][ T5342] ? lru_gen_add_folio+0x860/0x860 [ 209.205334][ T5342] ? ksys_write+0x1f3/0x260 [ 209.205360][ T5342] ? __cfi_ksys_write+0x10/0x10 [ 209.205387][ T5342] ? __kasan_check_read+0x15/0x20 [ 209.205412][ T5342] __x64_sys_mlock+0x64/0x80 [ 209.205454][ T5342] x64_sys_call+0x670/0x2ee0 [ 209.205482][ T5342] do_syscall_64+0x57/0xf0 [ 209.205503][ T5342] ? clear_bhb_loop+0x50/0xa0 [ 209.205525][ T5342] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 209.205556][ T5342] RIP: 0033:0x7f523cf9c799 [ 209.205576][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.205595][ T5342] RSP: 002b:00007f523defc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 209.205621][ T5342] RAX: ffffffffffffffda RBX: 00007f523d215fa0 RCX: 00007f523cf9c799 [ 209.205638][ T5342] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 209.205653][ T5342] RBP: 00007f523defc090 R08: 0000000000000000 R09: 0000000000000000 [ 209.205669][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.205684][ T5342] R13: 00007f523d216038 R14: 00007f523d215fa0 R15: 00007ffc95ef04e8 [ 209.205704][ T5342] [ 209.697159][ T5350] netlink: 'syz.1.1766': attribute type 5 has an invalid length. [ 209.705760][ T5350] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1766'. [ 210.283526][ T5361] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1773'. [ 210.293237][ T5361] gretap0: entered promiscuous mode [ 210.298737][ T5361] gretap0: left allmulticast mode [ 210.564462][ T5367] tc_dump_action: action bad kind [ 210.594329][ T5371] FAULT_INJECTION: forcing a failure. [ 210.594329][ T5371] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 210.608110][ T5371] CPU: 0 UID: 0 PID: 5371 Comm: syz.1.1777 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 210.608137][ T5371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.608146][ T5371] Call Trace: [ 210.608152][ T5371] [ 210.608159][ T5371] __dump_stack+0x21/0x30 [ 210.608181][ T5371] dump_stack_lvl+0x140/0x1c0 [ 210.608196][ T5371] ? __cfi_dump_stack_lvl+0x10/0x10 [ 210.608212][ T5371] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 210.608227][ T5371] dump_stack+0x19/0x20 [ 210.608242][ T5371] should_fail_ex+0x3d7/0x530 [ 210.608256][ T5371] should_fail_alloc_page+0xec/0x110 [ 210.608274][ T5371] __alloc_pages_noprof+0x1c0/0x7e0 [ 210.608288][ T5371] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 210.608303][ T5371] __folio_alloc_noprof+0x14/0x80 [ 210.608316][ T5371] folio_prealloc+0x46/0x220 [ 210.608335][ T5371] do_pte_missing+0x1e80/0x44f0 [ 210.608354][ T5371] ? _raw_spin_unlock+0x45/0x60 [ 210.608367][ T5371] ? pte_marker_clear+0x1b0/0x1b0 [ 210.608386][ T5371] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 210.608405][ T5371] ? walk_pgd_range+0x1b58/0x1c20 [ 210.608418][ T5371] ? __pte_offset_map+0x1b0/0x230 [ 210.608432][ T5371] ? pte_offset_map_rw_nolock+0xba/0x110 [ 210.608447][ T5371] handle_mm_fault+0x11b8/0x1bf0 [ 210.608464][ T5371] ? __kasan_check_write+0x18/0x20 [ 210.608480][ T5371] ? __cfi_handle_mm_fault+0x10/0x10 [ 210.608497][ T5371] ? follow_page_pte+0x4b9/0xbc0 [ 210.608510][ T5371] ? gup_must_unshare+0x1e0/0x1e0 [ 210.608523][ T5371] ? vma_is_secretmem+0x11/0x50 [ 210.608536][ T5371] __get_user_pages+0x1170/0x22b0 [ 210.608557][ T5371] ? populate_vma_page_range+0x220/0x220 [ 210.608583][ T5371] ? down_read+0x7f/0xe0 [ 210.608599][ T5371] ? __cfi_down_read+0x10/0x10 [ 210.608615][ T5371] __mm_populate+0x2f8/0x430 [ 210.608635][ T5371] do_mlock+0x7eb/0xa00 [ 210.608648][ T5371] ? fput+0x1a4/0x240 [ 210.608659][ T5371] ? lru_gen_add_folio+0x860/0x860 [ 210.608672][ T5371] ? ksys_write+0x1f3/0x260 [ 210.608687][ T5371] ? __cfi_ksys_write+0x10/0x10 [ 210.608702][ T5371] ? __kasan_check_read+0x15/0x20 [ 210.608717][ T5371] __x64_sys_mlock+0x64/0x80 [ 210.608730][ T5371] x64_sys_call+0x670/0x2ee0 [ 210.608746][ T5371] do_syscall_64+0x57/0xf0 [ 210.608758][ T5371] ? clear_bhb_loop+0x50/0xa0 [ 210.608771][ T5371] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 210.608789][ T5371] RIP: 0033:0x7fa04f19c799 [ 210.608802][ T5371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.608814][ T5371] RSP: 002b:00007fa0500ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 210.608830][ T5371] RAX: ffffffffffffffda RBX: 00007fa04f415fa0 RCX: 00007fa04f19c799 [ 210.608841][ T5371] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 210.608850][ T5371] RBP: 00007fa0500ef090 R08: 0000000000000000 R09: 0000000000000000 [ 210.608859][ T5371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.608867][ T5371] R13: 00007fa04f416038 R14: 00007fa04f415fa0 R15: 00007ffda5730828 [ 210.608878][ T5371] [ 211.077400][ T3309] Bluetooth: hci0: Frame reassembly failed (-84) [ 211.383703][ T5404] FAULT_INJECTION: forcing a failure. [ 211.383703][ T5404] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 211.397350][ T5404] CPU: 0 UID: 0 PID: 5404 Comm: syz.0.1787 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 211.397388][ T5404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 211.397402][ T5404] Call Trace: [ 211.397411][ T5404] [ 211.397421][ T5404] __dump_stack+0x21/0x30 [ 211.397450][ T5404] dump_stack_lvl+0x140/0x1c0 [ 211.397466][ T5404] ? __cfi_dump_stack_lvl+0x10/0x10 [ 211.397482][ T5404] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 211.397497][ T5404] dump_stack+0x19/0x20 [ 211.397512][ T5404] should_fail_ex+0x3d7/0x530 [ 211.397526][ T5404] should_fail_alloc_page+0xec/0x110 [ 211.397545][ T5404] __alloc_pages_noprof+0x1c0/0x7e0 [ 211.397558][ T5404] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 211.397573][ T5404] __folio_alloc_noprof+0x14/0x80 [ 211.397587][ T5404] folio_prealloc+0x46/0x220 [ 211.397608][ T5404] do_pte_missing+0x1e80/0x44f0 [ 211.397627][ T5404] ? _raw_spin_unlock+0x45/0x60 [ 211.397641][ T5404] ? pte_marker_clear+0x1b0/0x1b0 [ 211.397659][ T5404] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 211.397679][ T5404] ? walk_pgd_range+0x1b58/0x1c20 [ 211.397700][ T5404] ? __pte_offset_map+0x1b0/0x230 [ 211.397715][ T5404] ? pte_offset_map_rw_nolock+0xba/0x110 [ 211.397729][ T5404] handle_mm_fault+0x11b8/0x1bf0 [ 211.397746][ T5404] ? __kasan_check_write+0x18/0x20 [ 211.397762][ T5404] ? __cfi_handle_mm_fault+0x10/0x10 [ 211.397779][ T5404] ? follow_page_pte+0x4b9/0xbc0 [ 211.397792][ T5404] ? gup_must_unshare+0x1e0/0x1e0 [ 211.397805][ T5404] ? vma_is_secretmem+0x11/0x50 [ 211.397818][ T5404] __get_user_pages+0x1170/0x22b0 [ 211.397839][ T5404] ? populate_vma_page_range+0x220/0x220 [ 211.397864][ T5404] ? down_read+0x7f/0xe0 [ 211.397880][ T5404] ? __cfi_down_read+0x10/0x10 [ 211.397896][ T5404] __mm_populate+0x2f8/0x430 [ 211.397915][ T5404] do_mlock+0x7eb/0xa00 [ 211.397928][ T5404] ? fput+0x1a4/0x240 [ 211.397939][ T5404] ? lru_gen_add_folio+0x860/0x860 [ 211.397952][ T5404] ? ksys_write+0x1f3/0x260 [ 211.397967][ T5404] ? __cfi_ksys_write+0x10/0x10 [ 211.397983][ T5404] ? __kasan_check_read+0x15/0x20 [ 211.397998][ T5404] __x64_sys_mlock+0x64/0x80 [ 211.398029][ T5404] x64_sys_call+0x670/0x2ee0 [ 211.398046][ T5404] do_syscall_64+0x57/0xf0 [ 211.398058][ T5404] ? clear_bhb_loop+0x50/0xa0 [ 211.398070][ T5404] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 211.398097][ T5404] RIP: 0033:0x7fe93e59c799 [ 211.398110][ T5404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.398122][ T5404] RSP: 002b:00007fe93cff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 211.398138][ T5404] RAX: ffffffffffffffda RBX: 00007fe93e815fa0 RCX: 00007fe93e59c799 [ 211.398149][ T5404] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 211.398158][ T5404] RBP: 00007fe93cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.398167][ T5404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.398175][ T5404] R13: 00007fe93e816038 R14: 00007fe93e815fa0 R15: 00007ffc14d895f8 [ 211.398186][ T5404] [ 212.011611][ T5432] FAULT_INJECTION: forcing a failure. [ 212.011611][ T5432] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 212.025377][ T5432] CPU: 0 UID: 0 PID: 5432 Comm: syz.0.1798 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 212.025432][ T5432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.025445][ T5432] Call Trace: [ 212.025451][ T5432] [ 212.025460][ T5432] __dump_stack+0x21/0x30 [ 212.025492][ T5432] dump_stack_lvl+0x140/0x1c0 [ 212.025517][ T5432] ? __cfi_dump_stack_lvl+0x10/0x10 [ 212.025534][ T5432] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 212.025549][ T5432] dump_stack+0x19/0x20 [ 212.025563][ T5432] should_fail_ex+0x3d7/0x530 [ 212.025577][ T5432] should_fail_alloc_page+0xec/0x110 [ 212.025603][ T5432] __alloc_pages_noprof+0x1c0/0x7e0 [ 212.025616][ T5432] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 212.025640][ T5432] __folio_alloc_noprof+0x14/0x80 [ 212.025654][ T5432] folio_prealloc+0x46/0x220 [ 212.025673][ T5432] do_pte_missing+0x1e80/0x44f0 [ 212.025691][ T5432] ? _raw_spin_unlock+0x45/0x60 [ 212.025705][ T5432] ? pte_marker_clear+0x1b0/0x1b0 [ 212.025726][ T5432] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 212.025747][ T5432] ? walk_pgd_range+0x1b58/0x1c20 [ 212.025760][ T5432] ? __pte_offset_map+0x1b0/0x230 [ 212.025774][ T5432] ? pte_offset_map_rw_nolock+0xba/0x110 [ 212.025789][ T5432] handle_mm_fault+0x11b8/0x1bf0 [ 212.025806][ T5432] ? __kasan_check_write+0x18/0x20 [ 212.025822][ T5432] ? __cfi_handle_mm_fault+0x10/0x10 [ 212.025839][ T5432] ? follow_page_pte+0x4b9/0xbc0 [ 212.025852][ T5432] ? gup_must_unshare+0x1e0/0x1e0 [ 212.025864][ T5432] ? vma_is_secretmem+0x11/0x50 [ 212.025880][ T5432] __get_user_pages+0x1170/0x22b0 [ 212.025902][ T5432] ? populate_vma_page_range+0x220/0x220 [ 212.025920][ T5432] ? down_read+0x7f/0xe0 [ 212.025936][ T5432] ? __cfi_down_read+0x10/0x10 [ 212.025952][ T5432] __mm_populate+0x2f8/0x430 [ 212.025974][ T5432] do_mlock+0x7eb/0xa00 [ 212.025990][ T5432] ? fput+0x1a4/0x240 [ 212.026001][ T5432] ? lru_gen_add_folio+0x860/0x860 [ 212.026015][ T5432] ? ksys_write+0x1f3/0x260 [ 212.026030][ T5432] ? __cfi_ksys_write+0x10/0x10 [ 212.026045][ T5432] ? __kasan_check_read+0x15/0x20 [ 212.026060][ T5432] __x64_sys_mlock+0x64/0x80 [ 212.026073][ T5432] x64_sys_call+0x670/0x2ee0 [ 212.026090][ T5432] do_syscall_64+0x57/0xf0 [ 212.026102][ T5432] ? clear_bhb_loop+0x50/0xa0 [ 212.026114][ T5432] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 212.026133][ T5432] RIP: 0033:0x7fe93e59c799 [ 212.026146][ T5432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.026158][ T5432] RSP: 002b:00007fe93cff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 212.026175][ T5432] RAX: ffffffffffffffda RBX: 00007fe93e815fa0 RCX: 00007fe93e59c799 [ 212.026186][ T5432] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 212.026195][ T5432] RBP: 00007fe93cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 212.026204][ T5432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.026212][ T5432] R13: 00007fe93e816038 R14: 00007fe93e815fa0 R15: 00007ffc14d895f8 [ 212.026224][ T5432] [ 212.753592][ T36] kauditd_printk_skb: 362 callbacks suppressed [ 212.753616][ T36] audit: type=1400 audit(2000000007.335:22414): avc: denied { read write } for pid=961 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 212.784728][ T36] audit: type=1400 audit(2000000007.355:22415): avc: denied { read write } for pid=5456 comm="syz.4.1806" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 212.808785][ T36] audit: type=1400 audit(2000000007.365:22416): avc: denied { read open } for pid=5456 comm="syz.4.1806" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 212.953562][ T36] audit: type=1400 audit(2000000007.535:22417): avc: denied { read write } for pid=292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 212.981493][ T36] audit: type=1400 audit(2000000007.565:22418): avc: denied { read write } for pid=5459 comm="syz.0.1807" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 213.062614][ T36] audit: type=1400 audit(2000000007.645:22419): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 213.088410][ T36] audit: type=1400 audit(2000000007.665:22420): avc: denied { read } for pid=5462 comm="syz.3.1808" dev="nsfs" ino=4026532466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 213.112490][ T36] audit: type=1400 audit(2000000007.675:22421): avc: denied { read } for pid=5462 comm="syz.3.1808" dev="nsfs" ino=4026532466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 213.135043][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 213.135062][ T1253] Bluetooth: hci0: command 0x1003 tx timeout [ 213.135116][ T36] audit: type=1400 audit(2000000007.685:22422): avc: denied { read } for pid=5462 comm="syz.3.1808" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 213.171140][ T36] audit: type=1400 audit(2000000007.685:22423): avc: denied { read write } for pid=5462 comm="syz.3.1808" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 213.234363][ T5469] FAULT_INJECTION: forcing a failure. [ 213.234363][ T5469] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 213.248191][ T5469] CPU: 1 UID: 0 PID: 5469 Comm: syz.1.1810 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 213.248228][ T5469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.248238][ T5469] Call Trace: [ 213.248245][ T5469] [ 213.248252][ T5469] __dump_stack+0x21/0x30 [ 213.248277][ T5469] dump_stack_lvl+0x140/0x1c0 [ 213.248292][ T5469] ? __cfi_dump_stack_lvl+0x10/0x10 [ 213.248308][ T5469] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 213.248324][ T5469] dump_stack+0x19/0x20 [ 213.248338][ T5469] should_fail_ex+0x3d7/0x530 [ 213.248353][ T5469] should_fail_alloc_page+0xec/0x110 [ 213.248372][ T5469] __alloc_pages_noprof+0x1c0/0x7e0 [ 213.248386][ T5469] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 213.248401][ T5469] __folio_alloc_noprof+0x14/0x80 [ 213.248415][ T5469] folio_prealloc+0x46/0x220 [ 213.248434][ T5469] do_pte_missing+0x1e80/0x44f0 [ 213.248452][ T5469] ? _raw_spin_unlock+0x45/0x60 [ 213.248475][ T5469] ? pte_marker_clear+0x1b0/0x1b0 [ 213.248494][ T5469] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 213.248515][ T5469] ? walk_pgd_range+0x1b58/0x1c20 [ 213.248529][ T5469] ? __pte_offset_map+0x1b0/0x230 [ 213.248543][ T5469] ? pte_offset_map_rw_nolock+0xba/0x110 [ 213.248558][ T5469] handle_mm_fault+0x11b8/0x1bf0 [ 213.248575][ T5469] ? __kasan_check_write+0x18/0x20 [ 213.248592][ T5469] ? __cfi_handle_mm_fault+0x10/0x10 [ 213.248610][ T5469] ? follow_page_pte+0x4b9/0xbc0 [ 213.248623][ T5469] ? gup_must_unshare+0x1e0/0x1e0 [ 213.248636][ T5469] ? vma_is_secretmem+0x11/0x50 [ 213.248650][ T5469] __get_user_pages+0x1170/0x22b0 [ 213.248672][ T5469] ? populate_vma_page_range+0x220/0x220 [ 213.248690][ T5469] ? down_read+0x7f/0xe0 [ 213.248707][ T5469] ? __cfi_down_read+0x10/0x10 [ 213.248726][ T5469] __mm_populate+0x2f8/0x430 [ 213.248745][ T5469] do_mlock+0x7eb/0xa00 [ 213.248758][ T5469] ? fput+0x1a4/0x240 [ 213.248770][ T5469] ? lru_gen_add_folio+0x860/0x860 [ 213.248783][ T5469] ? ksys_write+0x1f3/0x260 [ 213.248798][ T5469] ? __cfi_ksys_write+0x10/0x10 [ 213.248814][ T5469] ? __kasan_check_read+0x15/0x20 [ 213.248831][ T5469] __x64_sys_mlock+0x64/0x80 [ 213.248845][ T5469] x64_sys_call+0x670/0x2ee0 [ 213.248866][ T5469] do_syscall_64+0x57/0xf0 [ 213.248878][ T5469] ? clear_bhb_loop+0x50/0xa0 [ 213.248891][ T5469] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 213.248910][ T5469] RIP: 0033:0x7fa04f19c799 [ 213.248923][ T5469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.248935][ T5469] RSP: 002b:00007fa0500ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 213.248951][ T5469] RAX: ffffffffffffffda RBX: 00007fa04f415fa0 RCX: 00007fa04f19c799 [ 213.248961][ T5469] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 213.248970][ T5469] RBP: 00007fa0500ef090 R08: 0000000000000000 R09: 0000000000000000 [ 213.248979][ T5469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.248988][ T5469] R13: 00007fa04f416038 R14: 00007fa04f415fa0 R15: 00007ffda5730828 [ 213.248999][ T5469] [ 213.690001][ T5489] netlink: 'syz.3.1817': attribute type 16 has an invalid length. [ 213.698049][ T5489] netlink: 64130 bytes leftover after parsing attributes in process `syz.3.1817'. [ 213.900995][ T5501] FAULT_INJECTION: forcing a failure. [ 213.900995][ T5501] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 213.915267][ T5501] CPU: 0 UID: 0 PID: 5501 Comm: syz.1.1822 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 213.915306][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.915319][ T5501] Call Trace: [ 213.915326][ T5501] [ 213.915335][ T5501] __dump_stack+0x21/0x30 [ 213.915365][ T5501] dump_stack_lvl+0x140/0x1c0 [ 213.915391][ T5501] ? __cfi_dump_stack_lvl+0x10/0x10 [ 213.915418][ T5501] dump_stack+0x19/0x20 [ 213.915441][ T5501] should_fail_ex+0x3d7/0x530 [ 213.915463][ T5501] should_fail_alloc_page+0xec/0x110 [ 213.915492][ T5501] __alloc_pages_noprof+0x1c0/0x7e0 [ 213.915515][ T5501] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 213.915540][ T5501] __folio_alloc_noprof+0x14/0x80 [ 213.915561][ T5501] folio_prealloc+0x46/0x220 [ 213.915591][ T5501] do_pte_missing+0x1e80/0x44f0 [ 213.915621][ T5501] ? _raw_spin_unlock+0x45/0x60 [ 213.915645][ T5501] ? pte_marker_clear+0x1b0/0x1b0 [ 213.915674][ T5501] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 213.915704][ T5501] ? walk_pgd_range+0x1b58/0x1c20 [ 213.915725][ T5501] ? __pte_offset_map+0x1b0/0x230 [ 213.915747][ T5501] ? pte_offset_map_rw_nolock+0xba/0x110 [ 213.915770][ T5501] handle_mm_fault+0x11b8/0x1bf0 [ 213.915798][ T5501] ? __kasan_check_write+0x18/0x20 [ 213.915834][ T5501] ? __cfi_handle_mm_fault+0x10/0x10 [ 213.915861][ T5501] ? follow_page_pte+0x4b9/0xbc0 [ 213.915882][ T5501] ? gup_must_unshare+0x1e0/0x1e0 [ 213.915903][ T5501] ? vma_is_secretmem+0x11/0x50 [ 213.915925][ T5501] __get_user_pages+0x1170/0x22b0 [ 213.915960][ T5501] ? populate_vma_page_range+0x220/0x220 [ 213.915990][ T5501] ? down_read+0x7f/0xe0 [ 213.916015][ T5501] ? __cfi_down_read+0x10/0x10 [ 213.916040][ T5501] __mm_populate+0x2f8/0x430 [ 213.916069][ T5501] do_mlock+0x7eb/0xa00 [ 213.916089][ T5501] ? fput+0x1a4/0x240 [ 213.916105][ T5501] ? lru_gen_add_folio+0x860/0x860 [ 213.916125][ T5501] ? ksys_write+0x1f3/0x260 [ 213.916150][ T5501] ? __cfi_ksys_write+0x10/0x10 [ 213.916174][ T5501] ? __kasan_check_read+0x15/0x20 [ 213.916197][ T5501] __x64_sys_mlock+0x64/0x80 [ 213.916217][ T5501] x64_sys_call+0x670/0x2ee0 [ 213.916246][ T5501] do_syscall_64+0x57/0xf0 [ 213.916265][ T5501] ? clear_bhb_loop+0x50/0xa0 [ 213.916286][ T5501] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 213.916317][ T5501] RIP: 0033:0x7fa04f19c799 [ 213.916338][ T5501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.916356][ T5501] RSP: 002b:00007fa0500ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 213.916379][ T5501] RAX: ffffffffffffffda RBX: 00007fa04f415fa0 RCX: 00007fa04f19c799 [ 213.916394][ T5501] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 213.916408][ T5501] RBP: 00007fa0500ef090 R08: 0000000000000000 R09: 0000000000000000 [ 213.916421][ T5501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.916434][ T5501] R13: 00007fa04f416038 R14: 00007fa04f415fa0 R15: 00007ffda5730828 [ 213.916451][ T5501] [ 214.356469][ T5516] netlink: 'syz.1.1828': attribute type 4 has an invalid length. [ 214.510965][ T5535] FAULT_INJECTION: forcing a failure. [ 214.510965][ T5535] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.524627][ T5535] CPU: 0 UID: 0 PID: 5535 Comm: syz.0.1834 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 214.524653][ T5535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.524661][ T5535] Call Trace: [ 214.524666][ T5535] [ 214.524672][ T5535] __dump_stack+0x21/0x30 [ 214.524694][ T5535] dump_stack_lvl+0x140/0x1c0 [ 214.524710][ T5535] ? __cfi_dump_stack_lvl+0x10/0x10 [ 214.524725][ T5535] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 214.524740][ T5535] dump_stack+0x19/0x20 [ 214.524755][ T5535] should_fail_ex+0x3d7/0x530 [ 214.524776][ T5535] should_fail_alloc_page+0xec/0x110 [ 214.524807][ T5535] __alloc_pages_noprof+0x1c0/0x7e0 [ 214.524830][ T5535] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 214.524850][ T5535] __folio_alloc_noprof+0x14/0x80 [ 214.524862][ T5535] folio_prealloc+0x46/0x220 [ 214.524881][ T5535] do_pte_missing+0x1e80/0x44f0 [ 214.524899][ T5535] ? _raw_spin_unlock+0x45/0x60 [ 214.524913][ T5535] ? pte_marker_clear+0x1b0/0x1b0 [ 214.524934][ T5535] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 214.524957][ T5535] ? walk_pgd_range+0x1b58/0x1c20 [ 214.524974][ T5535] ? __pte_offset_map+0x1b0/0x230 [ 214.524989][ T5535] ? pte_offset_map_rw_nolock+0xba/0x110 [ 214.525004][ T5535] handle_mm_fault+0x11b8/0x1bf0 [ 214.525021][ T5535] ? __kasan_check_write+0x18/0x20 [ 214.525037][ T5535] ? __cfi_handle_mm_fault+0x10/0x10 [ 214.525054][ T5535] ? follow_page_pte+0x4b9/0xbc0 [ 214.525068][ T5535] ? gup_must_unshare+0x1e0/0x1e0 [ 214.525080][ T5535] ? vma_is_secretmem+0x11/0x50 [ 214.525094][ T5535] __get_user_pages+0x1170/0x22b0 [ 214.525115][ T5535] ? populate_vma_page_range+0x220/0x220 [ 214.525134][ T5535] ? down_read+0x7f/0xe0 [ 214.525150][ T5535] ? __cfi_down_read+0x10/0x10 [ 214.525166][ T5535] __mm_populate+0x2f8/0x430 [ 214.525185][ T5535] do_mlock+0x7eb/0xa00 [ 214.525198][ T5535] ? fput+0x1a4/0x240 [ 214.525209][ T5535] ? lru_gen_add_folio+0x860/0x860 [ 214.525223][ T5535] ? ksys_write+0x1f3/0x260 [ 214.525238][ T5535] ? __cfi_ksys_write+0x10/0x10 [ 214.525255][ T5535] ? __kasan_check_read+0x15/0x20 [ 214.525271][ T5535] __x64_sys_mlock+0x64/0x80 [ 214.525284][ T5535] x64_sys_call+0x670/0x2ee0 [ 214.525305][ T5535] do_syscall_64+0x57/0xf0 [ 214.525317][ T5535] ? clear_bhb_loop+0x50/0xa0 [ 214.525330][ T5535] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 214.525365][ T5535] RIP: 0033:0x7fe93e59c799 [ 214.525379][ T5535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.525391][ T5535] RSP: 002b:00007fe93cff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 214.525407][ T5535] RAX: ffffffffffffffda RBX: 00007fe93e815fa0 RCX: 00007fe93e59c799 [ 214.525417][ T5535] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 214.525427][ T5535] RBP: 00007fe93cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 214.525436][ T5535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.525444][ T5535] R13: 00007fe93e816038 R14: 00007fe93e815fa0 R15: 00007ffc14d895f8 [ 214.525455][ T5535] [ 215.437125][ T4413] bridge0: port 3(syz_tun) entered disabled state [ 215.444835][ T4413] syz_tun (unregistering): left allmulticast mode [ 215.451331][ T4413] syz_tun (unregistering): left promiscuous mode [ 215.458864][ T4413] bridge0: port 3(syz_tun) entered disabled state [ 215.490583][ T5567] FAULT_INJECTION: forcing a failure. [ 215.490583][ T5567] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 215.503887][ T5567] CPU: 1 UID: 0 PID: 5567 Comm: syz.1.1845 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 215.503926][ T5567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.503939][ T5567] Call Trace: [ 215.503944][ T5567] [ 215.503951][ T5567] __dump_stack+0x21/0x30 [ 215.503973][ T5567] dump_stack_lvl+0x140/0x1c0 [ 215.503999][ T5567] ? __cfi_dump_stack_lvl+0x10/0x10 [ 215.504015][ T5567] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 215.504030][ T5567] dump_stack+0x19/0x20 [ 215.504045][ T5567] should_fail_ex+0x3d7/0x530 [ 215.504058][ T5567] should_fail_alloc_page+0xec/0x110 [ 215.504080][ T5567] __alloc_pages_noprof+0x1c0/0x7e0 [ 215.504103][ T5567] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 215.504134][ T5567] __folio_alloc_noprof+0x14/0x80 [ 215.504156][ T5567] folio_prealloc+0x46/0x220 [ 215.504185][ T5567] do_pte_missing+0x1e80/0x44f0 [ 215.504213][ T5567] ? _raw_spin_unlock+0x45/0x60 [ 215.504232][ T5567] ? pte_marker_clear+0x1b0/0x1b0 [ 215.504251][ T5567] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 215.504271][ T5567] ? walk_pgd_range+0x1b58/0x1c20 [ 215.504285][ T5567] ? __pte_offset_map+0x1b0/0x230 [ 215.504299][ T5567] ? pte_offset_map_rw_nolock+0xba/0x110 [ 215.504314][ T5567] handle_mm_fault+0x11b8/0x1bf0 [ 215.504332][ T5567] ? __kasan_check_write+0x18/0x20 [ 215.504348][ T5567] ? __cfi_handle_mm_fault+0x10/0x10 [ 215.504366][ T5567] ? follow_page_pte+0x4b9/0xbc0 [ 215.504379][ T5567] ? gup_must_unshare+0x1e0/0x1e0 [ 215.504391][ T5567] ? vma_is_secretmem+0x11/0x50 [ 215.504405][ T5567] __get_user_pages+0x1170/0x22b0 [ 215.504426][ T5567] ? populate_vma_page_range+0x220/0x220 [ 215.504445][ T5567] ? down_read+0x7f/0xe0 [ 215.504460][ T5567] ? __cfi_down_read+0x10/0x10 [ 215.504476][ T5567] __mm_populate+0x2f8/0x430 [ 215.504496][ T5567] do_mlock+0x7eb/0xa00 [ 215.504517][ T5567] ? fput+0x1a4/0x240 [ 215.504529][ T5567] ? lru_gen_add_folio+0x860/0x860 [ 215.504542][ T5567] ? ksys_write+0x1f3/0x260 [ 215.504558][ T5567] ? __cfi_ksys_write+0x10/0x10 [ 215.504573][ T5567] ? __kasan_check_read+0x15/0x20 [ 215.504588][ T5567] __x64_sys_mlock+0x64/0x80 [ 215.504601][ T5567] x64_sys_call+0x670/0x2ee0 [ 215.504618][ T5567] do_syscall_64+0x57/0xf0 [ 215.504630][ T5567] ? clear_bhb_loop+0x50/0xa0 [ 215.504643][ T5567] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 215.504662][ T5567] RIP: 0033:0x7fa04f19c799 [ 215.504675][ T5567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.504688][ T5567] RSP: 002b:00007fa0500ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 215.504704][ T5567] RAX: ffffffffffffffda RBX: 00007fa04f415fa0 RCX: 00007fa04f19c799 [ 215.504715][ T5567] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 215.504724][ T5567] RBP: 00007fa0500ef090 R08: 0000000000000000 R09: 0000000000000000 [ 215.504733][ T5567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.504742][ T5567] R13: 00007fa04f416038 R14: 00007fa04f415fa0 R15: 00007ffda5730828 [ 215.504753][ T5567] [ 215.947019][ T3295] bridge_slave_1: left allmulticast mode [ 215.952733][ T3295] bridge_slave_1: left promiscuous mode [ 215.995964][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.024680][ T3295] bridge_slave_0: left allmulticast mode [ 216.030379][ T3295] bridge_slave_0: left promiscuous mode [ 216.049167][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.224976][ T3295] veth1_macvtap: left promiscuous mode [ 216.231554][ T3295] veth0_vlan: left promiscuous mode [ 217.816849][ T36] kauditd_printk_skb: 167 callbacks suppressed [ 217.816873][ T36] audit: type=1400 audit(2000000012.405:22591): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 218.226178][ T36] audit: type=1400 audit(2000000012.815:22592): avc: denied { read write } for pid=292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 218.318322][ T36] audit: type=1400 audit(2000000012.905:22593): avc: denied { execmem } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 218.339792][ T36] audit: type=1400 audit(2000000012.915:22594): avc: denied { create } for pid=5597 comm="syz.1.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 218.359627][ T5599] FAULT_INJECTION: forcing a failure. [ 218.359627][ T5599] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 218.362410][ T36] audit: type=1400 audit(2000000012.915:22595): avc: denied { execute } for pid=5597 comm="syz.1.1856" name="file0" dev="tmpfs" ino=2536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 218.374629][ T5599] CPU: 0 UID: 0 PID: 5599 Comm: syz.0.1855 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 218.374660][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.374674][ T5599] Call Trace: [ 218.374681][ T5599] [ 218.374689][ T5599] __dump_stack+0x21/0x30 [ 218.374718][ T5599] dump_stack_lvl+0x140/0x1c0 [ 218.374752][ T5599] ? __cfi_dump_stack_lvl+0x10/0x10 [ 218.374777][ T5599] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 218.374800][ T5599] dump_stack+0x19/0x20 [ 218.374823][ T5599] should_fail_ex+0x3d7/0x530 [ 218.374844][ T5599] should_fail_alloc_page+0xec/0x110 [ 218.374872][ T5599] __alloc_pages_noprof+0x1c0/0x7e0 [ 218.374893][ T5599] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 218.374917][ T5599] __folio_alloc_noprof+0x14/0x80 [ 218.374937][ T5599] folio_prealloc+0x46/0x220 [ 218.374965][ T5599] do_pte_missing+0x1e80/0x44f0 [ 218.374992][ T5599] ? _raw_spin_unlock+0x45/0x60 [ 218.375013][ T5599] ? pte_marker_clear+0x1b0/0x1b0 [ 218.375041][ T5599] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 218.375071][ T5599] ? walk_pgd_range+0x1b58/0x1c20 [ 218.375091][ T5599] ? __pte_offset_map+0x1b0/0x230 [ 218.375113][ T5599] ? pte_offset_map_rw_nolock+0xba/0x110 [ 218.375135][ T5599] handle_mm_fault+0x11b8/0x1bf0 [ 218.375161][ T5599] ? __kasan_check_write+0x18/0x20 [ 218.375203][ T5599] ? __cfi_handle_mm_fault+0x10/0x10 [ 218.375229][ T5599] ? follow_page_pte+0x4b9/0xbc0 [ 218.375249][ T5599] ? gup_must_unshare+0x1e0/0x1e0 [ 218.375268][ T5599] ? vma_is_secretmem+0x11/0x50 [ 218.375289][ T5599] __get_user_pages+0x1170/0x22b0 [ 218.375321][ T5599] ? populate_vma_page_range+0x220/0x220 [ 218.375349][ T5599] ? down_read+0x7f/0xe0 [ 218.375372][ T5599] ? __cfi_down_read+0x10/0x10 [ 218.375397][ T5599] __mm_populate+0x2f8/0x430 [ 218.375425][ T5599] do_mlock+0x7eb/0xa00 [ 218.375445][ T5599] ? fput+0x1a4/0x240 [ 218.375462][ T5599] ? lru_gen_add_folio+0x860/0x860 [ 218.375482][ T5599] ? ksys_write+0x1f3/0x260 [ 218.375505][ T5599] ? __cfi_ksys_write+0x10/0x10 [ 218.375528][ T5599] ? __kasan_check_read+0x15/0x20 [ 218.375551][ T5599] __x64_sys_mlock+0x64/0x80 [ 218.375571][ T5599] x64_sys_call+0x670/0x2ee0 [ 218.375596][ T5599] do_syscall_64+0x57/0xf0 [ 218.375614][ T5599] ? clear_bhb_loop+0x50/0xa0 [ 218.375634][ T5599] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 218.375662][ T5599] RIP: 0033:0x7fe93e59c799 [ 218.375681][ T5599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.375699][ T5599] RSP: 002b:00007fe93cff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 218.375730][ T5599] RAX: ffffffffffffffda RBX: 00007fe93e815fa0 RCX: 00007fe93e59c799 [ 218.375746][ T5599] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 218.375760][ T5599] RBP: 00007fe93cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 218.375774][ T5599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 218.375787][ T5599] R13: 00007fe93e816038 R14: 00007fe93e815fa0 R15: 00007ffc14d895f8 [ 218.375804][ T5599] [ 218.707920][ T36] audit: type=1400 audit(2000000012.925:22596): avc: denied { block_suspend } for pid=5597 comm="syz.1.1856" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 218.729993][ T36] audit: type=1400 audit(2000000012.925:22597): avc: denied { read } for pid=5600 comm="syz.3.1857" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 218.752918][ T36] audit: type=1400 audit(2000000012.925:22598): avc: denied { read write } for pid=5596 comm="syz.0.1855" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 218.777190][ T36] audit: type=1400 audit(2000000012.935:22599): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 218.802807][ T36] audit: type=1400 audit(2000000012.945:22600): avc: denied { read } for pid=5596 comm="syz.0.1855" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 220.091972][ T5619] netlink: 'syz.1.1862': attribute type 64 has an invalid length. [ 220.099985][ T5619] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1862'. [ 220.109056][ T5619] gretap0: left promiscuous mode [ 220.114029][ T5619] gretap0: entered allmulticast mode [ 220.120434][ T5619] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 223.525257][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 223.525281][ T36] audit: type=1400 audit(2000000018.014:22666): avc: denied { execmem } for pid=5642 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 223.553336][ T36] audit: type=1400 audit(2000000018.034:22667): avc: denied { read } for pid=5644 comm="syz.1.1871" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 223.587030][ T36] audit: type=1400 audit(2000000018.034:22668): avc: denied { create } for pid=5644 comm="syz.1.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 223.608468][ T36] audit: type=1400 audit(2000000018.034:22669): avc: denied { create } for pid=5644 comm="syz.1.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 223.628736][ T36] audit: type=1400 audit(2000000018.034:22670): avc: denied { read write } for pid=5644 comm="syz.1.1871" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 223.652627][ T36] audit: type=1400 audit(2000000018.053:22671): avc: denied { mounton } for pid=5646 comm="syz.3.1872" path="/449/file0" dev="tmpfs" ino=2427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 223.675661][ T36] audit: type=1400 audit(2000000018.053:22672): avc: denied { mounton } for pid=5646 comm="syz.3.1872" path="/449/file0" dev="tmpfs" ino=2427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 223.698714][ T36] audit: type=1400 audit(2000000018.053:22673): avc: denied { create } for pid=5646 comm="syz.3.1872" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 223.720517][ T36] audit: type=1400 audit(2000000018.063:22674): avc: denied { mounton } for pid=5643 comm="syz.0.1870" path="/438/file0" dev="tmpfs" ino=2375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 223.743326][ T36] audit: type=1400 audit(2000000018.073:22675): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.939134][ T5675] netlink: 'syz.0.1880': attribute type 11 has an invalid length. [ 227.947850][ T5675] netlink: 'syz.0.1880': attribute type 11 has an invalid length. [ 227.956111][ T5675] netlink: 'syz.0.1880': attribute type 11 has an invalid length. [ 227.967601][ T5675] netlink: 'syz.0.1880': attribute type 11 has an invalid length. [ 227.977800][ T5675] netlink: 'syz.0.1880': attribute type 11 has an invalid length. [ 227.986898][ T5675] netlink: 'syz.0.1880': attribute type 11 has an invalid length. [ 227.996066][ T5675] netlink: 'syz.0.1880': attribute type 11 has an invalid length. [ 228.004678][ T5675] netlink: 'syz.0.1880': attribute type 11 has an invalid length. [ 228.013442][ T5675] netlink: 'syz.0.1880': attribute type 11 has an invalid length. [ 228.021564][ T5675] netlink: 'syz.0.1880': attribute type 11 has an invalid length. [ 229.579144][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 229.579164][ T36] audit: type=1400 audit(2000000023.931:22721): avc: denied { execmem } for pid=5680 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 229.619748][ T36] audit: type=1400 audit(2000000023.940:22722): avc: denied { create } for pid=5682 comm="syz.1.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=0 [ 229.640610][ T36] audit: type=1400 audit(2000000023.940:22723): avc: denied { create } for pid=5681 comm="syz.0.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 229.661653][ T36] audit: type=1400 audit(2000000023.940:22724): avc: denied { create } for pid=5681 comm="syz.0.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 229.682890][ T36] audit: type=1400 audit(2000000023.940:22725): avc: denied { create } for pid=5681 comm="syz.0.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 229.704775][ T36] audit: type=1400 audit(2000000023.940:22726): avc: denied { execmem } for pid=5681 comm="syz.0.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 229.724678][ T36] audit: type=1400 audit(2000000023.940:22727): avc: denied { read } for pid=5682 comm="syz.1.1884" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 229.746733][ T36] audit: type=1400 audit(2000000023.940:22728): avc: denied { create } for pid=5682 comm="syz.1.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 229.767840][ T36] audit: type=1400 audit(2000000023.940:22729): avc: denied { create } for pid=5682 comm="syz.1.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 229.789337][ T36] audit: type=1400 audit(2000000023.940:22730): avc: denied { create } for pid=5682 comm="syz.1.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 235.157455][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 235.157474][ T36] audit: type=1400 audit(2000000029.434:22764): avc: denied { execmem } for pid=5712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 235.192881][ T36] audit: type=1400 audit(2000000029.444:22765): avc: denied { read } for pid=5714 comm="syz.3.1895" dev="nsfs" ino=4026532466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 235.236378][ T36] audit: type=1400 audit(2000000029.444:22766): avc: denied { read } for pid=5714 comm="syz.3.1895" dev="nsfs" ino=4026532466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 235.265017][ T36] audit: type=1400 audit(2000000029.444:22767): avc: denied { create } for pid=5714 comm="syz.3.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 235.285778][ T36] audit: type=1400 audit(2000000029.464:22768): avc: denied { read write } for pid=293 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 235.310312][ T36] audit: type=1400 audit(2000000029.464:22769): avc: denied { read } for pid=5715 comm="syz.1.1894" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 235.333895][ T36] audit: type=1400 audit(2000000029.484:22770): avc: denied { read } for pid=5713 comm="syz.0.1893" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 235.357171][ T36] audit: type=1400 audit(2000000029.503:22771): avc: denied { read write } for pid=292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 235.381780][ T36] audit: type=1400 audit(2000000029.553:22772): avc: denied { create } for pid=5715 comm="syz.1.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 235.402118][ T36] audit: type=1400 audit(2000000029.582:22773): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 237.433953][ T3295] bridge_slave_1: left allmulticast mode [ 237.439679][ T3295] bridge_slave_1: left promiscuous mode [ 237.472935][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.482019][ T3295] bridge_slave_0: left allmulticast mode [ 237.503148][ T3295] bridge_slave_0: left promiscuous mode [ 237.508848][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.637038][ T3295] veth1_macvtap: left promiscuous mode [ 237.642614][ T3295] veth0_vlan: left promiscuous mode [ 237.878494][ T3295] ------------[ cut here ]------------ [ 237.883975][ T3295] WARNING: CPU: 0 PID: 3295 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 237.894260][ T3295] Modules linked in: [ 237.898311][ T3295] CPU: 0 UID: 0 PID: 3295 Comm: kworker/u8:49 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 237.910399][ T3295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.920650][ T3295] Workqueue: netns cleanup_net [ 237.925471][ T3295] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 237.931537][ T3295] Code: e8 e1 99 db fc 4b 83 3c 3e 00 75 19 e8 b5 b7 83 fc 49 81 ff f8 07 00 00 74 1b e8 a7 b7 83 fc 49 83 c7 08 eb c9 e8 9c b7 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 237.952144][ T3295] RSP: 0018:ffffc9000108fb90 EFLAGS: 00010293 [ 237.958353][ T3295] RAX: ffffffff8503e7c4 RBX: ffff88812f3958c0 RCX: ffff88811a690000 [ 237.966431][ T3295] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103f380b8 [ 237.974540][ T3295] RBP: ffffc9000108fbb0 R08: ffffffff87d35907 R09: 1ffffffff0fa6b20 [ 237.982637][ T3295] R10: dffffc0000000000 R11: fffffbfff0fa6b21 R12: dffffc0000000000 [ 237.990631][ T3295] R13: dffffc0000000000 R14: ffff888103f38000 R15: 00000000000000b8 [ 237.998824][ T3295] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 238.007870][ T3295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.014815][ T3295] CR2: 000055bb588e31f0 CR3: 000000010c35c000 CR4: 00000000003526b0 [ 238.022856][ T3295] Call Trace: [ 238.026139][ T3295] [ 238.029265][ T3295] cleanup_net+0x6bd/0xc90 [ 238.033802][ T3295] ? __cfi_cleanup_net+0x10/0x10 [ 238.038739][ T3295] ? __schedule+0x1357/0x1ea0 [ 238.043668][ T3295] ? kick_pool+0xb9/0x550 [ 238.048101][ T3295] process_scheduled_works+0x7d4/0x1020 [ 238.053870][ T3295] worker_thread+0xc70/0x10b0 [ 238.058580][ T3295] kthread+0x2c9/0x370 [ 238.062696][ T3295] ? __cfi_worker_thread+0x10/0x10 [ 238.067834][ T3295] ? __cfi_kthread+0x10/0x10 [ 238.072470][ T3295] ret_from_fork+0x64/0xa0 [ 238.076917][ T3295] ? __cfi_kthread+0x10/0x10 [ 238.081576][ T3295] ret_from_fork_asm+0x1a/0x30 [ 238.086381][ T3295] [ 238.089437][ T3295] ---[ end trace 0000000000000000 ]--- [ 238.095026][ T3295] ------------[ cut here ]------------ [ 238.100505][ T3295] WARNING: CPU: 0 PID: 3295 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 238.110806][ T3295] Modules linked in: [ 238.114901][ T3295] CPU: 0 UID: 0 PID: 3295 Comm: kworker/u8:49 Tainted: G W syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 238.128772][ T3295] Tainted: [W]=WARN [ 238.132730][ T3295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 238.143065][ T3295] Workqueue: netns cleanup_net [ 238.147863][ T3295] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 238.154234][ T3295] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 60 b7 83 fc 49 81 ff f8 07 00 00 74 1b e8 52 b7 83 fc 49 83 c7 08 eb c5 e8 47 b7 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 37 b7 83 fc 5b 41 5c 41 5e 41 [ 238.174104][ T3295] RSP: 0018:ffffc9000108fb90 EFLAGS: 00010293 [ 238.180201][ T3295] RAX: ffffffff8503e819 RBX: ffff888103f38800 RCX: ffff88811a690000 [ 238.188668][ T3295] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103f38808 [ 238.196910][ T3295] RBP: ffffc9000108fbb0 R08: ffffffff87d35907 R09: 1ffffffff0fa6b20 [ 238.205171][ T3295] R10: dffffc0000000000 R11: fffffbfff0fa6b21 R12: dffffc0000000000 [ 238.213306][ T3295] R13: dffffc0000000000 R14: ffff888103f38000 R15: 0000000000000008 [ 238.221337][ T3295] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 238.230371][ T3295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.237264][ T3295] CR2: 000055bb588e31f0 CR3: 000000010c35c000 CR4: 00000000003526b0 [ 238.245516][ T3295] Call Trace: [ 238.248905][ T3295] [ 238.252106][ T3295] cleanup_net+0x6bd/0xc90 [ 238.256561][ T3295] ? __cfi_cleanup_net+0x10/0x10 [ 238.262034][ T3295] ? __schedule+0x1357/0x1ea0 [ 238.266834][ T3295] ? kick_pool+0xb9/0x550 [ 238.271170][ T3295] process_scheduled_works+0x7d4/0x1020 [ 238.277093][ T3295] worker_thread+0xc70/0x10b0 [ 238.282053][ T3295] kthread+0x2c9/0x370 [ 238.286219][ T3295] ? __cfi_worker_thread+0x10/0x10 [ 238.291472][ T3295] ? __cfi_kthread+0x10/0x10 [ 238.296224][ T3295] ret_from_fork+0x64/0xa0 [ 238.300750][ T3295] ? __cfi_kthread+0x10/0x10 [ 238.305607][ T3295] ret_from_fork_asm+0x1a/0x30 [ 238.310486][ T3295] [ 238.313550][ T3295] ---[ end trace 0000000000000000 ]--- [ 238.321415][ T3295] ------------[ cut here ]------------ [ 238.326927][ T3295] WARNING: CPU: 1 PID: 3295 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 238.336662][ T3295] Modules linked in: [ 238.340578][ T3295] CPU: 1 UID: 0 PID: 3295 Comm: kworker/u8:49 Tainted: G W syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef [ 238.354442][ T3295] Tainted: [W]=WARN [ 238.358279][ T3295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 238.368678][ T3295] Workqueue: netns cleanup_net [ 238.373689][ T3295] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 238.379337][ T3295] Code: 3c 20 00 74 08 48 89 df e8 8f 63 f6 fc 48 8b 3b e8 27 9e e1 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 c3 b7 00 cc e8 52 81 9e fc <0f> 0b e9 b0 fd ff ff e8 46 81 9e fc 0f 0b e9 18 fe ff ff e8 3a 81 [ 238.399364][ T3295] RSP: 0018:ffffc9000108fb70 EFLAGS: 00010293 [ 238.405696][ T3295] RAX: ffffffff84e91e0e RBX: ffff88812f3958c0 RCX: ffff88811a690000 [ 238.413890][ T3295] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88811a690000 [ 238.422000][ T3295] RBP: ffffc9000108fb98 R08: ffffffff87d35907 R09: 1ffffffff0fa6b20 [ 238.430370][ T3295] R10: dffffc0000000000 R11: fffffbfff0fa6b21 R12: 1ffffffff0fa6870 [ 238.438463][ T3295] R13: dffffc0000000000 R14: ffff88812f3964c0 R15: dffffc0000000000 [ 238.446694][ T3295] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 238.455681][ T3295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.462365][ T3295] CR2: 000055bb588f2af8 CR3: 000000010cb04000 CR4: 00000000003526b0 [ 238.470763][ T3295] Call Trace: [ 238.474098][ T3295] [ 238.477048][ T3295] xfrm_net_exit+0x31/0x80 [ 238.481729][ T3295] cleanup_net+0x6bd/0xc90 [ 238.486380][ T3295] ? __cfi_cleanup_net+0x10/0x10 [ 238.491342][ T3295] ? __schedule+0x1357/0x1ea0 [ 238.496337][ T3295] ? kick_pool+0xb9/0x550 [ 238.500698][ T3295] process_scheduled_works+0x7d4/0x1020 [ 238.506556][ T3295] worker_thread+0xc70/0x10b0 [ 238.511987][ T3295] kthread+0x2c9/0x370 [ 238.516467][ T3295] ? __cfi_worker_thread+0x10/0x10 [ 238.522198][ T3295] ? __cfi_kthread+0x10/0x10 [ 238.527028][ T3295] ret_from_fork+0x64/0xa0 [ 238.531568][ T3295] ? __cfi_kthread+0x10/0x10 [ 238.536599][ T3295] ret_from_fork_asm+0x1a/0x30 [ 238.541697][ T3295] [ 238.545458][ T3295] ---[ end trace 0000000000000000 ]---