last executing test programs: 2m42.724746845s ago: executing program 0 (id=1787): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', @remote}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000fc0)={0xc, 0x5, 0xf, 0x5, 0x6, "c02db8159fdcae50281e45d2767f7c7199e33d"}) r3 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) timer_create(0x9, 0x0, &(0x7f0000bbdffc)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) timer_delete(r4) writev(r3, &(0x7f0000001280)=[{&(0x7f00000001c0)="1df889ffb466277714a2d8cc0aaec2c5a728139ad835eb1db48747febe9c080460", 0x21}], 0x1) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000040)={0xb, "7902be"}, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000008d89b04aa9ed2c2b00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000400"/28], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x8, 0x11, r0, 0xa0da2000) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x5, 0x0) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) r8 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000900)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x18, &(0x7f0000000000), 0x1) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}, 0x1c) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000080)=ANY=[@ANYBLOB]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) ioctl$FICLONE(r9, 0x40049409, r0) 2m40.861067384s ago: executing program 0 (id=1794): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001002cbd", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d3000000000000008001680040001"], 0x3c}}, 0x0) 2m39.575600549s ago: executing program 0 (id=1797): clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f00000000c0)="09c986ca2c4884c25655d459cba43093fe660898ce655973b3ddbd9bebcfbe3f8a9bd8caed2632c3767d2d01b35a7a1038b4df9029b317445dc9b726050da142df20e894bca290137706482734eb94fa48e667a4b5536b4fbe7eed2d38a07916ed31bb594d17c6500822fe2d3ebf65137acb9176823c17323d141dbd8e70dd3225fe905b281847b8e7c39434bf2d1d246bd7c3c134ea8660f3764b2ca6ceb2613a2ae4f18479aad4b336114cc7af1e3183e5131411379c3f963b8443713ba2158b19bfbda5cefc2a64ded5933432dabfa5a071b311397cea935cf56aa0c88b75d7f924de46e6c1453bff56", 0xeb, 0x7fffffffffffffff, &(0x7f00000001c0)={r0, r1+10000000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0x10, 0x3, 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x10200, 0x0) sendto$inet6(r3, &(0x7f0000000080)='L', 0x1, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m39.389344108s ago: executing program 0 (id=1801): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) socket$inet(0x2b, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(r4, 0x0, 0x0, 0x40000000, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000029500000000"], 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000005c0)=@usbdevfs_driver={0x1, 0x2, &(0x7f0000000540)="00ddb16aadab5f3fd9177afa01361ea9c967e83be3f599ffb96a3f36aec1030ac44a884d87fa622ff2b8547f8913fb78ae59cd2793c91763a1d871f0cfaba7572fabbb45fa1447569e5344214e"}) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x2130b322, 0x4, 0x20005, 0xc69}}) 2m38.216591027s ago: executing program 0 (id=1803): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) 2m38.024470078s ago: executing program 0 (id=1805): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sync() r1 = userfaultfd(0x80001) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYBLOB="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", @ANYRESDEC=r1]) 2m21.662630506s ago: executing program 32 (id=1805): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sync() r1 = userfaultfd(0x80001) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYBLOB="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", @ANYRESDEC=r1]) 14.154646347s ago: executing program 5 (id=2189): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}, &(0x7f0000000300)=0x40) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r4, r0) fallocate(r0, 0x10, 0x3, 0x7) 13.677592997s ago: executing program 5 (id=2191): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000380)={0x0, 0xe, 0x2, '#\t'}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3ff00000}}}, &(0x7f0000000180)=0x84) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000080)={0x6, 0x1, 0xfff, 0xa, 0x8, 0xfc, 0x86, "ff03cae9ffed00000400b2400d0000cba1c4ba00", "39e80000460062ff010000ec00"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r4, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet(0x2, 0x1, 0x100) listen(r6, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911ab000056da2e6400005e1703b6ce92e2c30000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40001}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40140921, 0x200000000005) 12.388890599s ago: executing program 1 (id=2193): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc2b81, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x345, 0x0, 0x7}, {0x94a, 0x0, 0x8}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000005c4100a0200010040400", 0x800000, 0x40}) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) 12.225017527s ago: executing program 1 (id=2194): r0 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x104fe, 0x0, 0x8000008, 0x3, 0x0, 0x3, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) syz_emit_vhci(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x4, 0x4002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102384, 0x18ff0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500006ecf327b467ded7f78943f1a4e646507943d74d2800d282b1963f602b77949373137a134de1bd123962342529f3b7dda54a98902c95dcf63d38786e9d859ebdb272d9515c43689b064"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) 9.401236373s ago: executing program 5 (id=2200): listen(0xffffffffffffffff, 0x8) sendmsg$sock(0xffffffffffffffff, 0x0, 0x40) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) read$dsp(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_open_dev$tty1(0xc, 0x4, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = syz_io_uring_setup(0x4f6, &(0x7f0000000200)={0x0, 0x80fd, 0x1000, 0x1, 0x2cf}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x47bc, 0xf5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x6, @local, 0x80000001}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={r8, 0x3b0}, 0x8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r9, 0x0, 0x0) 9.352357301s ago: executing program 4 (id=2201): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) msgsnd(0x0, 0x0, 0x401, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000140)={0xa, 0x800019000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f00000001c0)={0x1f, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfcff, &(0x7f0000000680)="98"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x2a, 0x400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 9.303917395s ago: executing program 1 (id=2202): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9379, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x5}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40100, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000ffffffdae000c1d331caf0862dceb4dc5a7e604d4cd42e593bb472bf92ebb0a018baf94023e3c274d07f463b9ca62518ad7b377510fccddfe0dee5cb00000000"], 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000ac0), 0x40000000000007f, 0x2000, 0x0) 8.2046082s ago: executing program 1 (id=2204): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc2b81, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x345, 0x0, 0x7}, {0x94a, 0x0, 0x8}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000005c4100a0200010040400", 0x800000, 0x40}) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) 8.032813026s ago: executing program 4 (id=2205): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2d, &(0x7f00006dbffc)=0x1, 0x4) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) io_uring_register$IORING_REGISTER_FILES(r4, 0x20, &(0x7f0000000000)=[r4], 0x1) r5 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8001, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4818}, 0xc080) sendmsg$NL80211_CMD_JOIN_MESH(r5, 0x0, 0x4040081) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x34, 0x0, 0x9, 0x614fc9df}, 0x28) recvmmsg(r3, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x2, 0x100, 0x0) socket$alg(0x26, 0x5, 0x0) fsopen(0x0, 0x1) 7.513589303s ago: executing program 1 (id=2206): r0 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x104fe, 0x0, 0x8000008, 0x3, 0x0, 0x3, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) syz_emit_vhci(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r3, 0x4, 0x4002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102384, 0x18ff0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500006ecf327b467ded7f78943f1a4e646507943d74d2800d282b1963f602b77949373137a134de1bd123962342529f3b7dda54a98902c95dcf63d38786e9d859ebdb272d9515c43689b064"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) 4.982824516s ago: executing program 5 (id=2213): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x0, 0xd, 0x4, "13ea57ffffffdfff018000000000000000000000000000088b0500", 0x39565559}) ioctl$TCXONC(r0, 0x540a, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40000000, &(0x7f0000006480)) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x5, 0x0, 0x0) r4 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, 0x0) pivot_root(0x0, &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.667969432s ago: executing program 2 (id=2214): syz_emit_ethernet(0x7e, &(0x7f0000000400)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @rand_addr, {[@rr={0x7, 0x3, 0xfc}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010184}, {@private, 0x4}, {@local}, {@remote}, {@private, 0x9}, {@dev}, {@private}]}]}}}}}}}, 0x0) 4.533313448s ago: executing program 1 (id=2215): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x8, 0x4fe, 0x7df, 0x3, 0x16, "7f0c529d57111a2f"}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, 0x7eacfa71abeb3756}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000940)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) pwritev(r4, &(0x7f00000002c0)=[{0x0}], 0x1, 0x8, 0xc58c) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 4.054660215s ago: executing program 5 (id=2216): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) msgsnd(0x0, 0x0, 0x401, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000140)={0xa, 0x800019000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f00000001c0)={0x1f, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 4.05259685s ago: executing program 2 (id=2217): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc2b81, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x345, 0x0, 0x7}, {0x94a, 0x0, 0x8}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000005c4100a0200010040400", 0x800000, 0x40}) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) 4.050452391s ago: executing program 4 (id=2218): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000340)={0xffffff80, 0x1, "9e2ae6fb200c976a3b82c85b4cf1a4a47b390f9521b1add9abb4c78d079ea7fe", 0xff, 0x5, 0x5b56b5f6, 0xc, 0x200}) 3.956138022s ago: executing program 4 (id=2220): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000500), &(0x7f0000000280)='%pB \x00'}, 0x20) (async) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000300)=0x7) (async) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8001, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r9, 0x3b85, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r10, 0x0, &(0x7f000060c000/0x3000)=nil, 0x3000, 0x1}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r10, 0x0, &(0x7f00005c8000/0x2000)=nil, 0x2000, 0x5}) ioctl$IOMMU_IOAS_COPY(r9, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r10, r10, 0x2, 0xfffffffffffffffa, 0x3fff}) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x18, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x7, {}, [{0x4}]}, 0x18}}, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000cc0)={&(0x7f0000000180), 0xc, &(0x7f0000000c80)={&(0x7f0000000d00)=ANY=[@ANYRES32, @ANYRESDEC=r6, @ANYBLOB="100029bd7000fddbdf251900000020000180c15cae1b12cd5d2b26857558ab08000100bbadf51a6f1e3af5657b9b4abaff869e65acc6ce8ac88bde76efd3", @ANYRESOCT, @ANYBLOB="14000300726f73653000000000018008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="841ab26c3f08bcfa6c906a3d57b31282c61f59cab1c4e853856bc332e931eefe50c2f3639825455263016e7a6105abeaa2a9b7b02dc1577e99", @ANYRESOCT=r8, @ANYRESDEC=r0, @ANYBLOB="080003000200000008000100", @ANYRES8=r11, @ANYBLOB="9ca208005cc9257d2e7f71d5ad", @ANYRES32=0x0, @ANYBLOB="08000300000000000800030002000000", @ANYRES8=r0, @ANYRESOCT=r10], 0xa0}, 0x1, 0x0, 0x0, 0x84}, 0x20000084) (async) getrlimit(0xc, &(0x7f0000000300)) 2.534375604s ago: executing program 2 (id=2221): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @multicast2}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() getrlimit(0x8, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0xffffffffffff8001, 0x3, 0x3e, 0xffffffeb, 0x7c, 0x40, 0x1, 0xe61d, 0x200c, 0x38, 0x1, 0xfffe, 0x2, 0x4}, [{0x3, 0xf97, 0xb, 0x10, 0x0, 0x3, 0xffffffffffffffff, 0xc3}]}, 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 2.431876955s ago: executing program 4 (id=2222): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe74, 0x30, 0x25, 0x500, 0x0, {}, [{0xe60, 0x1, [@m_pedit={0xe5c, 0x1, 0x0, 0x0, {{0xa}, {0xe30, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xc, 0x5, 0x0, 0x1, [{0x4}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0xee}, {}, {}, {0x0, 0x0, 0x0, 0x10001}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {0x0, 0x40000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6c2b}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe74}}, 0x0) 1.937910615s ago: executing program 4 (id=2223): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$kcm(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x2a}], 0x2}, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 1.91476775s ago: executing program 3 (id=2224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x26000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x26, 0x9, 0x10}, {0x8080000, 0x0, 0x935bf724b7effdda, 0x8, 0x9, 0x4, 0x0, 0x0, 0xa, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0x8, 0x0, 0xa, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x81, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c, 0xfe, 0xfc}, {0x30000, 0xb000, 0xd, 0x8, 0x0, 0x0, 0x2, 0x8e, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x7000}, {0x50000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xc, 0xf801, 0x0, [0x0, 0x1000000000000, 0x1]}) (fail_nth: 1) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000100)={0x0, 0x116000, 0x8}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f00000000c0)={0x40000}) 1.732047399s ago: executing program 5 (id=2225): r0 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x104fe, 0x0, 0x8000008, 0x3, 0x0, 0x3, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) syz_emit_vhci(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r3, 0x4, 0x4002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102384, 0x18ff0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500006ecf327b467ded7f78943f1a4e646507943d74d2800d282b1963f602b77949373137a134de1bd123962342529f3b7dda54a98902c95dcf63d38786e9d859ebdb272d9515c43689b064"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) 1.413357193s ago: executing program 2 (id=2226): openat$procfs(0xffffffffffffff9c, &(0x7f0000004400)='/proc/mdstat\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000200)=[@free_buffer], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x28}, @fda={0x66646185, 0x7, 0x0, 0x3a}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0x20, 0x0, 0x6, 0xfffff00c}, {0x16, 0x3, 0x0, 0x9}]}, 0x10) sendmmsg$inet(r6, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="62c8137e", 0x4}], 0x1}}], 0x1, 0x42) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x2b, 0x80801, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.263012239s ago: executing program 3 (id=2227): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x0, 0xd, 0x4, "13ea57ffffffdfff018000000000000000000000000000088b0500", 0x39565559}) ioctl$TCXONC(r0, 0x540a, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40000000, &(0x7f0000006480)) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x5, 0x0, 0x0) r4 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, 0x0) pivot_root(0x0, &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.072520664s ago: executing program 3 (id=2228): syz_emit_ethernet(0x7e, &(0x7f0000000400)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @rand_addr, {[@rr={0x7, 0x3, 0xfc}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010184}, {@private, 0x4}, {@local}, {@remote}, {@private, 0x9}, {@dev}, {@private}]}]}}}}}}}, 0x0) 857.475119ms ago: executing program 3 (id=2229): r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x80243) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') pread64(r1, &(0x7f0000000100)=""/48, 0x3c, 0x100000000004) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r3 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x3, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000000080000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000080)={r9, 0x0, 0x10000, 0x4000}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000560000012abd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x24040840}, 0x44) 479.160161ms ago: executing program 3 (id=2230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000004000/0x2000)=nil}) r2 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000140), &(0x7f0000000200)=0x10) sched_setaffinity(0x0, 0xc67e7be33bfcd098, &(0x7f0000000180)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x10, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd5}, 0xc010) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r8, 0x103, 0x6, &(0x7f00000007c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) writev(r7, &(0x7f00000003c0), 0x100000000000022d) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) 189.120109ms ago: executing program 2 (id=2231): r0 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000300000000c3357ed200000000000000", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8080) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r7, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x800}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)=""/24, 0x18}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000100)=""/32, 0x20}, {&(0x7f00000010c0)=""/133, 0x85}], 0x2}, 0x3}], 0x3, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000fcffffff0000000000000004140002006e65000500190001000000a5c45e4dae8e9d"], 0x34}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000"], 0x50}}, 0x4000850) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) close(0xffffffffffffffff) 58.645424ms ago: executing program 2 (id=2232): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000140)=@chain) add_key$user(&(0x7f00000006c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000440)="3118", 0x2, r1) add_key(0x0, 0x0, 0x0, 0x0, r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000000c0)={0x7, 0x80000, r0}) ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0) fcntl$lock(r3, 0x5, &(0x7f00000001c0)={0x0, 0x4, 0x2, 0x4}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x61) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000584000/0x1000)=nil, 0x400000, 0x3, 0x2}) 0s ago: executing program 3 (id=2233): ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000e40)={{0x12, 0x1, 0x201, 0xef, 0x5a, 0x7e, 0x20, 0x12d1, 0x2f4e, 0x1f5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x7, 0x0, 0x5, [{{0x9, 0x4, 0x33, 0x8, 0x0, 0xff, 0x2, 0x65}}]}}]}}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3]}}}) syz_usb_control_io$hid(r0, &(0x7f0000001900)={0x24, 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="00031c0000001c0301bbc85a79fa0754cd107e5f73c971d7c636d37583c91a375dda"], 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): :3705): avc: denied { name_bind } for pid=13603 comm="syz.3.1822" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 799.770565][ T29] audit: type=1400 audit(1771191285.214:3706): avc: denied { unmount } for pid=9624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 799.868746][ T29] audit: type=1400 audit(1771191285.270:3707): avc: denied { add_name } for pid=13596 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 799.957369][ T29] audit: type=1400 audit(1771191285.270:3708): avc: denied { create } for pid=13596 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 800.244227][ T29] audit: type=1400 audit(1771191285.270:3709): avc: denied { write } for pid=13596 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb5.link" dev="tmpfs" ino=8754 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 800.531940][ T29] audit: type=1400 audit(1771191285.270:3710): avc: denied { append } for pid=13596 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" dev="tmpfs" ino=8754 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 802.655641][ T29] audit: type=1400 audit(1771191285.270:3711): avc: denied { create } for pid=13608 comm="syz.2.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 804.194188][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 804.194199][ T29] audit: type=1400 audit(1771191289.610:3750): avc: denied { read } for pid=13653 comm="syz.3.1828" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 804.269916][ T29] audit: type=1400 audit(1771191289.648:3751): avc: denied { open } for pid=13653 comm="syz.3.1828" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 804.467612][ T29] audit: type=1400 audit(1771191289.685:3752): avc: denied { getattr } for pid=13636 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.523749][ T29] audit: type=1400 audit(1771191289.685:3753): avc: denied { add_name } for pid=13636 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.622887][ T29] audit: type=1400 audit(1771191289.685:3754): avc: denied { create } for pid=13636 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 804.731702][ T29] audit: type=1400 audit(1771191289.685:3755): avc: denied { write } for pid=13636 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb5.ipv4ll" dev="tmpfs" ino=8771 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 804.965572][ T29] audit: type=1400 audit(1771191289.685:3756): avc: denied { append } for pid=13636 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.ipv4ll" dev="tmpfs" ino=8771 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 805.039595][ T29] audit: type=1400 audit(1771191289.713:3757): avc: denied { name_bind } for pid=13653 comm="syz.3.1828" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 805.093613][ T29] audit: type=1400 audit(1771191289.713:3758): avc: denied { node_bind } for pid=13653 comm="syz.3.1828" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 805.157210][ T29] audit: type=1400 audit(1771191289.778:3759): avc: denied { mount } for pid=13653 comm="syz.3.1828" name="/" dev="autofs" ino=44093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 809.779367][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 809.779381][ T29] audit: type=1400 audit(1771191294.839:3799): avc: denied { read write } for pid=13721 comm="syz.2.1840" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 810.724413][ T29] audit: type=1400 audit(1771191294.867:3800): avc: denied { open } for pid=13721 comm="syz.2.1840" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 810.749638][ T29] audit: type=1400 audit(1771191294.867:3801): avc: denied { mounton } for pid=13721 comm="syz.2.1840" path="/345/file0" dev="tmpfs" ino=1843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 810.776135][ T29] audit: type=1400 audit(1771191294.867:3802): avc: denied { mount } for pid=13721 comm="syz.2.1840" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 810.799680][ T29] audit: type=1400 audit(1771191295.223:3803): avc: denied { read write } for pid=13719 comm="syz.4.1839" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 811.580787][ T29] audit: type=1400 audit(1771191295.223:3804): avc: denied { open } for pid=13719 comm="syz.4.1839" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 811.695499][T12352] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 811.697067][ T29] audit: type=1400 audit(1771191295.821:3805): avc: denied { map } for pid=13721 comm="syz.2.1840" path="socket:[44169]" dev="sockfs" ino=44169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 811.727700][T12352] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 811.729833][ T29] audit: type=1400 audit(1771191296.457:3806): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 811.754945][T12352] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 811.785902][T12352] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 811.798967][T12352] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 811.972872][ T29] audit: type=1400 audit(1771191296.513:3807): avc: denied { create } for pid=13731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 812.063510][ T5883] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 812.090730][ T29] audit: type=1400 audit(1771191296.513:3808): avc: denied { read write } for pid=13731 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 812.245234][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 812.266321][ T5883] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 812.279763][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 812.294426][ T5883] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 812.308988][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.317217][ T5883] usb 5-1: Product: syz [ 812.322111][ T5883] usb 5-1: Manufacturer: syz [ 812.327016][ T5883] usb 5-1: SerialNumber: syz [ 812.400992][ T5883] usb 5-1: config 0 descriptor?? [ 812.578600][T13731] chnl_net:caif_netlink_parms(): no params data found [ 813.667953][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 813.686606][ T5883] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input42 [ 813.724886][ T5883] imon:send_packet: packet tx failed (-71) [ 813.763562][ T5883] imon 5-1:0.0: panel buttons/knobs setup failed [ 813.971212][T13731] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.978537][T12352] Bluetooth: hci5: command tx timeout [ 813.997020][T13731] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.026668][T13731] bridge_slave_0: entered allmulticast mode [ 814.038710][T13731] bridge_slave_0: entered promiscuous mode [ 814.070413][T13731] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.084560][T13731] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.105271][ T5883] rc_core: IR keymap rc-imon-pad not found [ 814.111071][ T5883] Registered IR keymap rc-empty [ 814.127243][T13731] bridge_slave_1: entered allmulticast mode [ 814.144049][ T5883] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 814.165591][T13731] bridge_slave_1: entered promiscuous mode [ 814.191088][ T5883] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 814.265320][ T5883] imon:send_packet: packet tx failed (-71) [ 814.342848][T13731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.370269][ T5883] imon 5-1:0.0: remote input dev register failed [ 814.375082][T13731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.651635][T13731] team0: Port device team_slave_0 added [ 814.663202][T13731] team0: Port device team_slave_1 added [ 814.719939][T13731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.727440][T13731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.767972][T13731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.779233][ T5883] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 814.780543][T13731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.793431][T13731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.820372][T13731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.875629][ T5883] imon 5-1:0.0: unable to initialize intf0, err 0 [ 815.134857][ T5883] imon:imon_probe: failed to initialize context! [ 815.149545][ T5883] imon 5-1:0.0: unable to register, err -19 [ 815.232291][ T5883] usb 5-1: USB disconnect, device number 43 [ 815.291374][T13731] hsr_slave_0: entered promiscuous mode [ 815.385103][T13731] hsr_slave_1: entered promiscuous mode [ 815.391592][T13731] debugfs: 'hsr0' already exists in 'hsr' [ 815.397402][T13731] Cannot create hsr debugfs directory [ 815.719634][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 815.720153][ T29] audit: type=1400 audit(1771191300.264:3831): avc: denied { create } for pid=13770 comm="syz.3.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 816.205661][T12352] Bluetooth: hci5: command tx timeout [ 817.872940][T13731] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 817.880749][ T29] audit: type=1400 audit(1771191302.416:3832): avc: denied { read write } for pid=13790 comm="syz.4.1856" name="video9" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 817.926338][T13731] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 817.996720][ T29] audit: type=1400 audit(1771191302.416:3833): avc: denied { open } for pid=13790 comm="syz.4.1856" path="/dev/video9" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 817.996895][T13731] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 818.075562][T13731] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 818.083163][ T29] audit: type=1400 audit(1771191302.434:3834): avc: denied { ioctl } for pid=13790 comm="syz.4.1856" path="/dev/video9" dev="devtmpfs" ino=959 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 818.998542][T12352] Bluetooth: hci5: command tx timeout [ 819.011558][ T29] audit: type=1400 audit(1771191302.444:3835): avc: denied { create } for pid=13790 comm="syz.4.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 819.165782][ T29] audit: type=1400 audit(1771191302.593:3836): avc: denied { create } for pid=13792 comm="syz.1.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 819.185925][ T29] audit: type=1400 audit(1771191302.631:3837): avc: denied { connect } for pid=13792 comm="syz.1.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 819.215921][ T29] audit: type=1400 audit(1771191302.631:3838): avc: denied { write } for pid=13792 comm="syz.1.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 819.656351][T13731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.714299][ T29] audit: type=1400 audit(1771191304.109:3839): avc: denied { setopt } for pid=13815 comm="syz.2.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 819.772360][ T29] audit: type=1400 audit(1771191304.109:3840): avc: denied { create } for pid=13815 comm="syz.2.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 819.896755][T13731] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.915475][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.922553][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.971370][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.978530][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.027977][ T5883] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 820.198916][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 820.206451][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 820.218539][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 820.228226][ T5883] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 820.266503][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 820.312166][ T5883] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 820.335668][ T5883] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 820.364426][T13731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.373029][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.389832][ T5883] usb 2-1: config 0 descriptor?? [ 820.416589][T13814] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 820.675748][T13831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1859'. [ 820.907841][ T9724] usb 2-1: USB disconnect, device number 30 [ 820.917579][T12352] Bluetooth: hci6: Opcode 0x0c03 failed: -19 [ 820.926228][T13837] sg_write: data in/out 8156/38 bytes for SCSI command 0x0-- guessing data in; [ 820.926228][T13837] program syz.4.1863 not setting count and/or reply_len properly [ 820.997000][T13731] veth0_vlan: entered promiscuous mode [ 821.033738][T13731] veth1_vlan: entered promiscuous mode [ 821.089336][T13731] veth0_macvtap: entered promiscuous mode [ 821.122074][T13731] veth1_macvtap: entered promiscuous mode [ 821.147968][T13731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.156785][T12352] Bluetooth: hci5: command tx timeout [ 821.174873][T13731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.208465][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.217321][ T5940] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 821.241324][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 821.241338][ T29] audit: type=1400 audit(1771191305.559:3854): avc: denied { create } for pid=13842 comm="syz.3.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 821.286107][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.299688][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.326388][ T239] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.335642][ T29] audit: type=1400 audit(1771191305.559:3855): avc: denied { getopt } for pid=13842 comm="syz.3.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 821.375928][ T5940] usb 5-1: device descriptor read/64, error -71 [ 821.449357][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.458784][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.477956][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.486695][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.501133][ T29] audit: type=1400 audit(1771191305.802:3856): avc: denied { mounton } for pid=13731 comm="syz-executor" path="/root/syzkaller.27FR3U/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 821.555903][ T29] audit: type=1400 audit(1771191305.802:3857): avc: denied { mount } for pid=13731 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 821.596516][ T29] audit: type=1400 audit(1771191305.802:3858): avc: denied { mounton } for pid=13731 comm="syz-executor" path="/root/syzkaller.27FR3U/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 821.628041][ T29] audit: type=1400 audit(1771191305.802:3859): avc: denied { mount } for pid=13731 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 821.651663][ T5940] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 821.661336][ T29] audit: type=1400 audit(1771191305.802:3860): avc: denied { mounton } for pid=13731 comm="syz-executor" path="/root/syzkaller.27FR3U/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 821.691632][ T29] audit: type=1400 audit(1771191305.802:3861): avc: denied { mounton } for pid=13731 comm="syz-executor" path="/root/syzkaller.27FR3U/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=44644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 821.779910][ T29] audit: type=1400 audit(1771191305.802:3862): avc: denied { unmount } for pid=13731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 821.799836][ T29] audit: type=1400 audit(1771191305.830:3863): avc: denied { mounton } for pid=13731 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 821.823938][ T5940] usb 5-1: device descriptor read/64, error -71 [ 822.020287][T13857] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 822.028712][T13857] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 822.039019][T13857] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 822.087363][ T5940] usb usb5-port1: attempt power cycle [ 822.615070][ T5940] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 822.679441][ T5940] usb 5-1: device descriptor read/8, error -71 [ 822.877544][ T2850] block nbd0: Possible stuck request ffff8880281a0000: control (read@0,1024B). Runtime 360 seconds [ 822.892591][ T2850] block nbd0: Possible stuck request ffff8880281a0200: control (read@1024,1024B). Runtime 360 seconds [ 822.904591][ T2850] block nbd0: Possible stuck request ffff8880281a0400: control (read@2048,1024B). Runtime 360 seconds [ 822.915923][ T2850] block nbd0: Possible stuck request ffff8880281a0600: control (read@3072,1024B). Runtime 360 seconds [ 823.064045][ T5940] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 823.130446][ T5940] usb 5-1: device descriptor read/8, error -71 [ 823.246292][ T5940] usb usb5-port1: unable to enumerate USB device [ 826.489723][T13911] vivid-007: disconnect [ 827.601289][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 827.601307][ T29] audit: type=1400 audit(1771191310.937:3886): avc: denied { write } for pid=13913 comm="syz.4.1883" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 827.725894][T13898] vivid-007: reconnect [ 827.801108][ T29] audit: type=1400 audit(1771191311.601:3887): avc: denied { recv } for pid=5791 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.146 dest=46174 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 827.878570][ T29] audit: type=1400 audit(1771191311.611:3888): avc: denied { create } for pid=13912 comm="syz.2.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 827.960897][ T29] audit: type=1400 audit(1771191311.611:3889): avc: denied { write } for pid=13912 comm="syz.2.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 828.041903][ T29] audit: type=1400 audit(1771191311.611:3890): avc: denied { read } for pid=13912 comm="syz.2.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 828.099281][ T29] audit: type=1400 audit(1771191311.667:3891): avc: denied { ioctl } for pid=13912 comm="syz.2.1882" path="socket:[44717]" dev="sockfs" ino=44717 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 828.195546][ T29] audit: type=1400 audit(1771191311.667:3892): avc: denied { read } for pid=13912 comm="syz.2.1882" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 828.270396][ T29] audit: type=1400 audit(1771191311.667:3893): avc: denied { open } for pid=13912 comm="syz.2.1882" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 828.346763][ T29] audit: type=1400 audit(1771191311.714:3894): avc: denied { read append } for pid=13912 comm="syz.2.1882" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 828.416938][ T29] audit: type=1400 audit(1771191311.714:3895): avc: denied { open } for pid=13912 comm="syz.2.1882" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 828.772814][ T5883] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 828.943926][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 829.771505][ T5944] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 829.915105][ T5883] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 829.926265][ T5883] usb 2-1: config 0 has no interface number 0 [ 829.938150][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 829.943323][ T5883] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 829.959560][ T5883] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 829.970221][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.001050][ T5883] usb 2-1: config 0 descriptor?? [ 830.028548][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 830.051868][ T5944] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 830.061627][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.071348][ T5883] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 830.074844][ T5944] usb 4-1: config 0 descriptor?? [ 830.375690][T13943] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1890'. [ 830.702519][ T5944] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 831.548778][ T5944] usb 2-1: USB disconnect, device number 31 [ 831.888085][T13929] iowarrior 2-1:0.1: Error -19 while submitting URB [ 833.125414][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 833.125431][ T29] audit: type=1400 audit(1771191316.681:3945): avc: denied { egress } for pid=13952 comm="syz.2.1892" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 833.125843][ T29] audit: type=1400 audit(1771191316.681:3946): avc: denied { sendto } for pid=13952 comm="syz.2.1892" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 833.813670][ T29] audit: type=1400 audit(1771191317.317:3947): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 833.813831][ T29] audit: type=1400 audit(1771191317.317:3948): avc: denied { open } for pid=5807 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 833.813997][ T29] audit: type=1400 audit(1771191317.317:3949): avc: denied { ioctl } for pid=5807 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 833.856918][ T29] audit: type=1400 audit(1771191317.354:3950): avc: denied { ioctl } for pid=13950 comm="syz.4.1894" path="/dev/sg0" dev="devtmpfs" ino=815 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 833.857999][T13953] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 833.858029][T13953] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 833.858355][T13953] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 833.858370][ T29] audit: type=1400 audit(1771191317.354:3951): avc: denied { firmware_load } for pid=13950 comm="syz.4.1894" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 833.861359][T13953] syz.4.1894 (13953) used greatest stack depth: 19880 bytes left [ 833.968856][ T29] audit: type=1400 audit(1771191317.448:3952): avc: denied { read } for pid=13964 comm="syz.2.1895" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 833.968905][ T29] audit: type=1400 audit(1771191317.448:3953): avc: denied { open } for pid=13964 comm="syz.2.1895" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 834.016292][T13967] netlink: 'syz.4.1897': attribute type 1 has an invalid length. [ 834.016304][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 834.060801][ T29] audit: type=1400 audit(1771191317.551:3954): avc: denied { perfmon } for pid=13969 comm="syz.4.1898" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 835.206145][ T792] usb 4-1: USB disconnect, device number 69 [ 838.886503][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 838.886528][ T29] audit: type=1400 audit(1771191321.227:3974): avc: denied { create } for pid=13995 comm="syz.4.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 839.669360][ T29] audit: type=1400 audit(1771191321.330:3975): avc: denied { write } for pid=13995 comm="syz.4.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 840.100716][ T29] audit: type=1400 audit(1771191323.088:3976): avc: denied { read write } for pid=13993 comm="syz.2.1904" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 840.131105][ T29] audit: type=1400 audit(1771191323.088:3977): avc: denied { open } for pid=13993 comm="syz.2.1904" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 840.226264][T14016] usb usb8: usbfs: process 14016 (syz.2.1904) did not claim interface 0 before use [ 840.250828][ T29] audit: type=1400 audit(1771191323.294:3978): avc: denied { write } for pid=13993 comm="syz.2.1904" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 841.183520][ T29] audit: type=1400 audit(1771191323.640:3979): avc: denied { write } for pid=14026 comm="syz.3.1910" name="protocols" dev="proc" ino=4026532926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 841.364907][ T29] audit: type=1400 audit(1771191324.248:3980): avc: denied { execute } for pid=13993 comm="syz.2.1904" dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 841.702606][ T29] audit: type=1400 audit(1771191324.248:3981): avc: denied { execute_no_trans } for pid=13993 comm="syz.2.1904" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 842.573413][ T29] audit: type=1400 audit(1771191325.511:3982): avc: denied { read } for pid=14035 comm="syz.5.1913" dev="nsfs" ino=4026532870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 842.710373][ T29] audit: type=1400 audit(1771191325.511:3983): avc: denied { open } for pid=14035 comm="syz.5.1913" path="net:[4026532870]" dev="nsfs" ino=4026532870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 843.186788][T14044] lo speed is unknown, defaulting to 1000 [ 843.192936][T14044] lo speed is unknown, defaulting to 1000 [ 843.209647][T14044] lo speed is unknown, defaulting to 1000 [ 843.234093][T14044] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 843.275651][T14044] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 843.453273][T14044] lo speed is unknown, defaulting to 1000 [ 843.460656][T14044] lo speed is unknown, defaulting to 1000 [ 843.467705][T14044] lo speed is unknown, defaulting to 1000 [ 843.483369][T14044] lo speed is unknown, defaulting to 1000 [ 843.498399][T14044] lo speed is unknown, defaulting to 1000 [ 843.504944][T14044] lo speed is unknown, defaulting to 1000 [ 844.844150][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 844.844164][ T29] audit: type=1400 audit(1771191327.634:3993): avc: denied { open } for pid=14055 comm="syz.5.1918" path="/dev/v4l-subdev5" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 845.086240][T14059] veth0_to_hsr: entered promiscuous mode [ 845.108276][T14059] veth0_to_hsr: entered allmulticast mode [ 845.129436][ T29] audit: type=1400 audit(1771191327.859:3994): avc: denied { create } for pid=14055 comm="syz.5.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 845.149072][ T29] audit: type=1400 audit(1771191327.859:3995): avc: denied { ioctl } for pid=14055 comm="syz.5.1918" path="socket:[46202]" dev="sockfs" ino=46202 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 845.373487][ T29] audit: type=1400 audit(1771191327.999:3996): avc: denied { allowed } for pid=14062 comm="syz.2.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 845.393642][ T29] audit: type=1400 audit(1771191327.999:3997): avc: denied { map } for pid=14062 comm="syz.2.1920" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 845.790813][ T29] audit: type=1400 audit(1771191327.999:3998): avc: denied { read write } for pid=14062 comm="syz.2.1920" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 845.875179][ T29] audit: type=1400 audit(1771191327.999:3999): avc: denied { create } for pid=14062 comm="syz.2.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 846.102435][ T29] audit: type=1400 audit(1771191327.999:4000): avc: denied { bind } for pid=14062 comm="syz.2.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 846.122173][ T29] audit: type=1400 audit(1771191327.999:4001): avc: denied { setopt } for pid=14062 comm="syz.2.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 846.142174][ T29] audit: type=1400 audit(1771191328.111:4002): avc: denied { accept } for pid=14062 comm="syz.2.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 846.198754][ T5944] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 846.456678][ T5944] usb 5-1: Using ep0 maxpacket: 32 [ 846.463576][ T5944] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 846.477678][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.500932][ T5944] usb 5-1: config 0 descriptor?? [ 847.262997][ T5944] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 847.295516][ T5944] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 847.321013][ T5944] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 847.351037][ T5944] usb 5-1: media controller created [ 847.362233][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 848.067144][ T5944] DVB: Unable to find symbol dib7000p_attach() [ 848.090741][ T5944] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 848.646773][ T5944] rc_core: IR keymap rc-dib0700-rc5 not found [ 848.737791][ T5944] Registered IR keymap rc-empty [ 848.760453][ T5944] dvb-usb: could not initialize remote control. [ 849.772884][ T5944] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 849.786861][ T5944] usb 5-1: USB disconnect, device number 48 [ 850.006083][ T5944] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 851.015910][ T5883] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 851.025172][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 851.025186][ T29] audit: type=1400 audit(1771191333.415:4021): avc: denied { recv } for pid=9624 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.146 dest=46174 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 851.093099][ T29] audit: type=1400 audit(1771191333.471:4022): avc: denied { ioctl } for pid=14106 comm="syz.3.1932" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 851.172193][ T29] audit: type=1400 audit(1771191333.480:4023): avc: denied { read } for pid=14104 comm="syz.1.1931" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 851.255143][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 851.269950][ T29] audit: type=1400 audit(1771191333.480:4024): avc: denied { open } for pid=14104 comm="syz.1.1931" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 851.270193][ T5883] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 851.372698][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.383430][ T29] audit: type=1400 audit(1771191333.555:4025): avc: denied { execute } for pid=14104 comm="syz.1.1931" name="file0" dev="tmpfs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 851.404466][ T5883] usb 4-1: config 0 descriptor?? [ 851.482442][ T29] audit: type=1400 audit(1771191333.555:4026): avc: denied { execute_no_trans } for pid=14104 comm="syz.1.1931" path="/391/file0" dev="tmpfs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 851.577569][ T29] audit: type=1400 audit(1771191333.714:4027): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 851.651811][ T29] audit: type=1400 audit(1771191333.724:4028): avc: denied { open } for pid=5807 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 851.702651][ T5883] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 851.736707][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 851.746916][ T29] audit: type=1400 audit(1771191333.724:4029): avc: denied { ioctl } for pid=5807 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 851.768801][ T5883] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 851.811035][ T29] audit: type=1400 audit(1771191333.798:4030): avc: denied { create } for pid=14115 comm="syz.2.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 851.877414][ T5883] usb 4-1: media controller created [ 851.893631][T14122] serio: Serial port ptm0 [ 851.922338][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 852.942971][ T5883] DVB: Unable to find symbol dib7000p_attach() [ 852.977600][ T5883] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 853.642144][ T5883] rc_core: IR keymap rc-dib0700-rc5 not found [ 853.648239][ T5883] Registered IR keymap rc-empty [ 853.734963][ T5883] dvb-usb: could not initialize remote control. [ 853.753360][ T5883] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 853.777098][ T5883] usb 4-1: USB disconnect, device number 70 [ 853.818483][ T5883] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 854.078136][ T5876] hid-generic FFF7:0000:FFFFF9CB.0009: item fetching failed at offset 0/2 [ 854.228934][ T5876] hid-generic FFF7:0000:FFFFF9CB.0009: probe with driver hid-generic failed with error -22 [ 855.943385][ T2850] block nbd0: Possible stuck request ffff8880281a0000: control (read@0,1024B). Runtime 390 seconds [ 855.954166][ T2850] block nbd0: Possible stuck request ffff8880281a0200: control (read@1024,1024B). Runtime 390 seconds [ 855.965161][ T2850] block nbd0: Possible stuck request ffff8880281a0400: control (read@2048,1024B). Runtime 390 seconds [ 856.342495][ T2850] block nbd0: Possible stuck request ffff8880281a0600: control (read@3072,1024B). Runtime 390 seconds [ 856.403701][T14164] audit_log_lost: 58 callbacks suppressed [ 856.403731][T14164] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 856.417271][T14164] audit: out of memory in audit_log_start [ 856.424606][ T29] audit: type=1400 audit(1771191338.447:4089): avc: denied { mount } for pid=14163 comm="syz.1.1945" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 856.494038][ T29] audit: type=1400 audit(1771191338.447:4090): avc: denied { create } for pid=14163 comm="syz.1.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 856.571537][ T29] audit: type=1400 audit(1771191338.447:4091): avc: denied { bind } for pid=14163 comm="syz.1.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 856.773987][ T29] audit: type=1400 audit(1771191338.672:4092): avc: denied { bind } for pid=14168 comm="syz.5.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 856.838428][ T29] audit: type=1400 audit(1771191338.672:4093): avc: denied { accept } for pid=14168 comm="syz.5.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 856.965355][ T29] audit: type=1400 audit(1771191338.681:4094): avc: denied { map } for pid=14168 comm="syz.5.1947" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 857.088486][ T29] audit: type=1400 audit(1771191338.681:4095): avc: denied { read write } for pid=14168 comm="syz.5.1947" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 857.185051][T14180] random: crng reseeded on system resumption [ 857.554385][ T29] audit: type=1400 audit(1771191339.177:4096): avc: denied { write } for pid=14175 comm="syz.1.1949" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 858.043949][ T5944] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 858.308241][T14194] FAULT_INJECTION: forcing a failure. [ 858.308241][T14194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.321357][T14194] CPU: 1 UID: 0 PID: 14194 Comm: syz.2.1954 Tainted: G L syzkaller #0 PREEMPT(full) [ 858.321384][T14194] Tainted: [L]=SOFTLOCKUP [ 858.321389][T14194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 858.321399][T14194] Call Trace: [ 858.321405][T14194] [ 858.321412][T14194] dump_stack_lvl+0x100/0x190 [ 858.321444][T14194] should_fail_ex.cold+0x5/0xa [ 858.321467][T14194] _copy_to_user+0x32/0xd0 [ 858.321489][T14194] simple_read_from_buffer+0xcb/0x170 [ 858.321516][T14194] proc_fail_nth_read+0x1af/0x230 [ 858.321548][T14194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 858.321578][T14194] ? rw_verify_area+0xce/0x6d0 [ 858.321599][T14194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 858.321627][T14194] vfs_read+0x1e4/0xb30 [ 858.321652][T14194] ? irqentry_exit+0x180/0x670 [ 858.321673][T14194] ? __pfx_vfs_read+0x10/0x10 [ 858.321694][T14194] ? irqentry_exit+0x180/0x670 [ 858.321730][T14194] ksys_read+0x12a/0x250 [ 858.321752][T14194] ? __pfx_ksys_read+0x10/0x10 [ 858.321782][T14194] do_syscall_64+0x106/0xf80 [ 858.321803][T14194] ? clear_bhb_loop+0x40/0x90 [ 858.321824][T14194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.321842][T14194] RIP: 0033:0x7effb5d5c84e [ 858.321857][T14194] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 858.321872][T14194] RSP: 002b:00007effb3fd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 858.321888][T14194] RAX: ffffffffffffffda RBX: 00007effb3fd56c0 RCX: 00007effb5d5c84e [ 858.321899][T14194] RDX: 000000000000000f RSI: 00007effb3fd50a0 RDI: 000000000000000c [ 858.321909][T14194] RBP: 00007effb3fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 858.321919][T14194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.321928][T14194] R13: 00007effb6016218 R14: 00007effb6016180 R15: 00007fff3098be48 [ 858.321953][T14194] [ 859.038044][ T5944] usb 5-1: Using ep0 maxpacket: 32 [ 859.055835][ T5944] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 859.080689][ T1851] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 859.091400][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.667452][ T5944] usb 5-1: Product: syz [ 859.672390][ T5944] usb 5-1: Manufacturer: syz [ 859.676979][ T5944] usb 5-1: SerialNumber: syz [ 859.693696][ T5944] usb 5-1: config 0 descriptor?? [ 859.703187][ T5944] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 859.894828][ T5944] dvb-usb: bulk message failed: -22 (4/0) [ 859.982100][ T5944] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 859.993313][ T1851] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.003550][ T1851] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 860.016529][ T5944] dvb-usb: bulk message failed: -22 (5/0) [ 860.023041][ T5944] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 860.039871][ T1851] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 860.049183][ T1851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.073423][ T5944] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 860.084653][ T1851] usb 4-1: Product: syz [ 860.095433][ T1851] usb 4-1: Manufacturer: syz [ 860.104347][ T5944] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 860.406331][ T1851] usb 4-1: SerialNumber: syz [ 860.417185][ T5944] usb 5-1: media controller created [ 860.445443][ T1851] hub 4-1:1.0: bad descriptor, ignoring hub [ 860.455559][ T1851] hub 4-1:1.0: probe with driver hub failed with error -5 [ 860.465286][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 860.495352][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 860.535108][ T5944] usb 5-1: selecting invalid altsetting 3 [ 860.544441][ T5944] ttusb2: set interface to alts=3 failed [ 860.651578][ T5944] DVB: Unable to find symbol tda10086_attach() [ 860.666037][T14188] comedi comedi1: No channels found! [ 860.720506][ T5944] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 860.753152][ T5944] dvb-usb: bulk message failed: -22 (4/0) [ 860.758905][ T5944] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 860.812603][ T5944] dvb-usb: bulk message failed: -22 (5/0) [ 860.819674][ T9724] usb 4-1: USB disconnect, device number 71 [ 860.832014][ T5944] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 860.905984][ T5944] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 861.924685][ T5944] usb 5-1: USB disconnect, device number 49 [ 861.949580][ T5944] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 862.695731][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 862.695747][ T29] audit: type=1400 audit(1771191344.340:4109): avc: denied { read } for pid=14210 comm="syz.3.1960" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 862.791772][ T29] audit: type=1400 audit(1771191344.340:4110): avc: denied { open } for pid=14210 comm="syz.3.1960" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 863.247108][ T29] audit: type=1400 audit(1771191344.368:4111): avc: denied { ioctl } for pid=14210 comm="syz.3.1960" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 863.538661][ T29] audit: type=1400 audit(1771191345.117:4112): avc: denied { recv } for pid=5458 comm="dbus-daemon" saddr=10.128.0.169 src=30006 daddr=10.128.1.146 dest=46174 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 863.624373][ T29] audit: type=1400 audit(1771191345.201:4113): avc: denied { prog_load } for pid=14221 comm="syz.2.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 863.698828][ T29] audit: type=1400 audit(1771191345.201:4114): avc: denied { bpf } for pid=14221 comm="syz.2.1955" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 863.765954][ T29] audit: type=1400 audit(1771191345.201:4115): avc: denied { perfmon } for pid=14221 comm="syz.2.1955" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 863.838077][ T29] audit: type=1400 audit(1771191345.201:4116): avc: denied { prog_run } for pid=14221 comm="syz.2.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 863.894790][ T29] audit: type=1400 audit(1771191345.257:4117): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 864.108111][ T29] audit: type=1400 audit(1771191345.257:4118): avc: denied { open } for pid=5805 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 865.000344][T14240] netlink: 'syz.1.1966': attribute type 1 has an invalid length. [ 865.015732][T14238] random: crng reseeded on system resumption [ 865.056745][T14240] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1966'. [ 865.098276][T14226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.107004][T14226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.805952][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 868.805967][ T29] audit: type=1400 audit(1771191350.046:4163): avc: denied { read write } for pid=14251 comm="syz.4.1962" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 868.949296][T14258] usb usb8: usbfs: process 14258 (syz.4.1962) did not claim interface 0 before use [ 869.357518][ T29] audit: type=1400 audit(1771191350.074:4164): avc: denied { open } for pid=14251 comm="syz.4.1962" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 869.391799][ T29] audit: type=1400 audit(1771191350.177:4165): avc: denied { write } for pid=14251 comm="syz.4.1962" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 869.817796][ T29] audit: type=1400 audit(1771191350.290:4166): avc: denied { map } for pid=14270 comm="syz.1.1974" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 869.904861][T14283] random: crng reseeded on system resumption [ 869.951763][ T29] audit: type=1400 audit(1771191350.327:4167): avc: denied { bind } for pid=14264 comm="syz.3.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 870.192563][ T29] audit: type=1400 audit(1771191350.551:4168): avc: denied { read } for pid=14272 comm="syz.2.1973" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 870.323997][ T29] audit: type=1400 audit(1771191350.551:4169): avc: denied { open } for pid=14272 comm="syz.2.1973" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 871.049746][ T29] audit: type=1400 audit(1771191350.551:4170): avc: denied { ioctl } for pid=14272 comm="syz.2.1973" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 871.094268][ T29] audit: type=1400 audit(1771191350.785:4171): avc: denied { create } for pid=14276 comm="syz.1.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 871.119440][ T29] audit: type=1400 audit(1771191350.785:4172): avc: denied { setopt } for pid=14276 comm="syz.1.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 871.998856][ T5883] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 872.164083][T14304] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1977'. [ 872.401154][ T5883] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 872.411241][ T5883] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 872.521471][ T5883] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 872.530718][ T5892] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 872.581704][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.604237][ T5883] usb 6-1: Product: syz [ 872.617743][ T5883] usb 6-1: Manufacturer: syz [ 872.622351][ T5883] usb 6-1: SerialNumber: syz [ 872.677449][ T5883] rtl8150 6-1:1.0: couldn't find required endpoints [ 872.707277][ T5883] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 873.137774][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'. [ 873.176234][ T5883] usb 6-1: USB disconnect, device number 2 [ 873.183954][ T5892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.203934][ T5892] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 873.508106][ T5892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 873.522852][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.531718][ T5892] usb 5-1: Product: syz [ 873.536040][ T5892] usb 5-1: Manufacturer: syz [ 873.547600][ T5892] usb 5-1: SerialNumber: syz [ 873.667721][ T5892] hub 5-1:1.0: bad descriptor, ignoring hub [ 873.770705][T14316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 873.786705][T14316] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 873.793258][T14316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 873.802024][T14316] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 873.822089][T14316] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 873.829935][ T5892] hub 5-1:1.0: probe with driver hub failed with error -5 [ 873.847038][T14316] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 873.894605][T14306] comedi comedi1: No channels found! [ 873.909571][ T5892] usb 5-1: USB disconnect, device number 50 [ 873.977597][T14316] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 874.282703][ T1851] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 874.453752][ T1851] usb 6-1: Using ep0 maxpacket: 32 [ 874.460670][ T1851] usb 6-1: unable to get BOS descriptor or descriptor too short [ 874.497169][ T1851] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 874.684818][ T1851] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 874.710335][ T1851] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 874.728144][ T1851] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 874.737272][ T1851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.790965][ T1851] usb 6-1: Product: syz [ 874.806093][ T1851] usb 6-1: Manufacturer: syz [ 874.817355][ T1851] usb 6-1: SerialNumber: syz [ 874.830214][T14332] random: crng reseeded on system resumption [ 875.168266][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 875.168296][ T29] audit: type=1400 audit(1771191355.977:4205): avc: denied { mount } for pid=14334 comm="syz.1.1992" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 875.998320][T14341] binder: 14337:14341 ioctl c0306201 200000000640 returned -22 [ 876.407522][T12352] Bluetooth: hci1: command 0x0406 tx timeout [ 876.407532][ T5816] Bluetooth: hci5: command 0x0c1a tx timeout [ 876.407593][T12352] Bluetooth: hci4: command 0x0c1a tx timeout [ 876.413588][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 876.419550][T12352] Bluetooth: hci2: command 0x0406 tx timeout [ 876.484483][ T1851] usb 6-1: 0:2 : does not exist [ 876.743135][ T29] audit: type=1400 audit(1771191355.986:4206): avc: denied { getopt } for pid=14334 comm="syz.1.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 876.791372][ T1851] usb 6-1: USB disconnect, device number 3 [ 876.855332][ T29] audit: type=1400 audit(1771191357.183:4207): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 876.925285][ T7781] udevd[7781]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 876.992835][ T29] audit: type=1400 audit(1771191357.221:4208): avc: denied { create } for pid=14327 comm="syz.4.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 877.049929][ T29] audit: type=1400 audit(1771191357.230:4209): avc: denied { write } for pid=14327 comm="syz.4.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 877.260931][ T1851] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 877.385284][T14352] netlink: 'syz.4.1997': attribute type 1 has an invalid length. [ 877.468863][T14354] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1999'. [ 877.515707][T14352] bond1: entered promiscuous mode [ 877.520863][T14352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 877.553050][ T29] audit: type=1400 audit(1771191358.222:4210): avc: denied { create } for pid=14353 comm="syz.5.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 877.638805][ T29] audit: type=1400 audit(1771191358.222:4211): avc: denied { ioctl } for pid=14353 comm="syz.5.1999" path="socket:[46692]" dev="sockfs" ino=46692 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 877.917650][ T5944] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 878.188939][ T5944] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.228541][T14359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 878.230412][ T5944] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 878.259635][ T29] audit: type=1400 audit(1771191358.278:4212): avc: denied { bind } for pid=14353 comm="syz.5.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 878.305490][T14359] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 878.349952][T14365] usb usb8: usbfs: process 14365 (syz.1.1996) did not claim interface 0 before use [ 878.382593][ T29] audit: type=1400 audit(1771191358.278:4213): avc: denied { write } for pid=14353 comm="syz.5.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 878.445683][T14359] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 878.462744][ T5944] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 878.486745][ T29] audit: type=1400 audit(1771191358.530:4214): avc: denied { mount } for pid=14350 comm="syz.4.1997" name="/" dev="rpc_pipefs" ino=46695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 878.494859][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.562074][T14359] bond1: (slave wireguard0): making interface the new active one [ 878.709218][T10841] Bluetooth: hci5: command 0x0c1a tx timeout [ 879.038162][ T5944] usb 4-1: Product: syz [ 879.042477][ T5944] usb 4-1: Manufacturer: syz [ 879.047276][ T5944] usb 4-1: SerialNumber: syz [ 879.060856][ T5944] hub 4-1:1.0: bad descriptor, ignoring hub [ 879.066898][T14359] wireguard0: entered promiscuous mode [ 879.076969][ T5944] hub 4-1:1.0: probe with driver hub failed with error -5 [ 879.097202][T14359] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 879.479768][T14358] comedi comedi1: No channels found! [ 879.757010][T14379] FAULT_INJECTION: forcing a failure. [ 879.757010][T14379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 879.771010][T14379] CPU: 0 UID: 0 PID: 14379 Comm: syz.2.2003 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.771038][T14379] Tainted: [L]=SOFTLOCKUP [ 879.771044][T14379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 879.771054][T14379] Call Trace: [ 879.771060][T14379] [ 879.771066][T14379] dump_stack_lvl+0x100/0x190 [ 879.771098][T14379] should_fail_ex.cold+0x5/0xa [ 879.771121][T14379] _copy_to_user+0x32/0xd0 [ 879.771141][T14379] environ_read+0x2b6/0x420 [ 879.771172][T14379] ? __pfx_environ_read+0x10/0x10 [ 879.771196][T14379] vfs_readv+0x5d8/0x8d0 [ 879.771225][T14379] ? __pfx_vfs_readv+0x10/0x10 [ 879.771245][T14379] ? __pfx___schedule+0x10/0x10 [ 879.771271][T14379] ? irqentry_exit+0x180/0x670 [ 879.771310][T14379] ? do_preadv+0x1ac/0x270 [ 879.771330][T14379] do_preadv+0x1ac/0x270 [ 879.771352][T14379] ? __pfx_do_preadv+0x10/0x10 [ 879.771380][T14379] do_syscall_64+0x106/0xf80 [ 879.771401][T14379] ? clear_bhb_loop+0x40/0x90 [ 879.771422][T14379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.771440][T14379] RIP: 0033:0x7effb5d9bf79 [ 879.771455][T14379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.771472][T14379] RSP: 002b:00007effb3fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 879.771489][T14379] RAX: ffffffffffffffda RBX: 00007effb6016180 RCX: 00007effb5d9bf79 [ 879.771501][T14379] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000004 [ 879.771511][T14379] RBP: 00007effb3fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 879.771521][T14379] R10: 0000000000c002a0 R11: 0000000000000246 R12: 0000000000000001 [ 879.771532][T14379] R13: 00007effb6016218 R14: 00007effb6016180 R15: 00007fff3098be48 [ 879.771556][T14379] [ 880.682810][ T5892] usb 4-1: USB disconnect, device number 72 [ 880.857939][T14381] usb usb8: usbfs: process 14381 (syz.5.2001) did not claim interface 0 before use [ 880.932522][T10841] Bluetooth: hci5: command 0x0c1a tx timeout [ 881.027227][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 881.027249][ T29] audit: type=1400 audit(1771191361.477:4217): avc: denied { egress } for pid=14307 comm="syz.3.1977" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 881.279802][ T29] audit: type=1400 audit(1771191361.477:4218): avc: denied { sendto } for pid=14307 comm="syz.3.1977" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 881.555031][T14388] random: crng reseeded on system resumption [ 883.044568][T14415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.053322][ T29] audit: type=1400 audit(1771191363.366:4219): avc: denied { write } for pid=14414 comm="syz.2.2014" name="icmp6" dev="proc" ino=4026533455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 883.807199][ T29] audit: type=1400 audit(1771191364.077:4220): avc: denied { append } for pid=14411 comm="syz.3.2013" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 883.856632][T14415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.097680][ T29] audit: type=1400 audit(1771191364.349:4221): avc: denied { read } for pid=14414 comm="syz.2.2014" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 884.645271][ T29] audit: type=1400 audit(1771191364.872:4222): avc: denied { create } for pid=14441 comm="syz.1.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 884.878396][ T29] audit: type=1400 audit(1771191365.088:4223): avc: denied { setopt } for pid=14447 comm="syz.1.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 885.172734][ T29] audit: type=1400 audit(1771191365.349:4224): avc: denied { read } for pid=14447 comm="syz.1.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 885.558433][ T29] audit: type=1400 audit(1771191365.714:4225): avc: denied { setopt } for pid=14457 comm="syz.4.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 885.602633][T14458] 9pnet_fd: Insufficient options for proto=fd [ 885.603514][ T29] audit: type=1400 audit(1771191365.761:4226): avc: denied { mounton } for pid=14457 comm="syz.4.2016" path="/227/file0" dev="tmpfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 885.700691][T14458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2016'. [ 885.713511][T14458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2016'. [ 886.648626][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 886.648659][ T29] audit: type=1400 audit(1771191366.715:4232): avc: denied { write } for pid=14462 comm="syz.2.2028" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 887.335785][ T29] audit: type=1400 audit(1771191367.314:4233): avc: denied { read write } for pid=14476 comm="syz.5.2031" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 887.403688][ T29] audit: type=1400 audit(1771191367.314:4234): avc: denied { open } for pid=14476 comm="syz.5.2031" path="/dev/sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 887.460211][ T29] audit: type=1400 audit(1771191367.332:4235): avc: denied { ioctl } for pid=14476 comm="syz.5.2031" path="/dev/sg0" dev="devtmpfs" ino=815 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 888.397056][ T29] audit: type=1400 audit(1771191368.380:4236): avc: denied { name_bind } for pid=14500 comm="syz.1.2040" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 888.780513][ T2850] block nbd0: Possible stuck request ffff8880281a0000: control (read@0,1024B). Runtime 420 seconds [ 888.792008][ T2850] block nbd0: Possible stuck request ffff8880281a0200: control (read@1024,1024B). Runtime 420 seconds [ 888.807546][ T2850] block nbd0: Possible stuck request ffff8880281a0400: control (read@2048,1024B). Runtime 420 seconds [ 888.818710][ T2850] block nbd0: Possible stuck request ffff8880281a0600: control (read@3072,1024B). Runtime 420 seconds [ 888.950314][T14512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2041'. [ 888.973215][ T29] audit: type=1400 audit(1771191368.904:4237): avc: denied { create } for pid=14494 comm="syz.3.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 889.024787][ T29] audit: type=1400 audit(1771191368.913:4238): avc: denied { setopt } for pid=14494 comm="syz.3.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 889.056033][T14512] syzkaller0: entered promiscuous mode [ 889.063044][T14512] syzkaller0: entered allmulticast mode [ 889.079977][ T29] audit: type=1400 audit(1771191368.988:4239): avc: denied { ioctl } for pid=14511 comm="syz.2.2041" path="socket:[46878]" dev="sockfs" ino=46878 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 889.133358][ T5876] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 889.151702][ T29] audit: type=1400 audit(1771191369.007:4240): avc: denied { write } for pid=14511 comm="syz.2.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 889.379411][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 889.396302][ T5876] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 889.415130][ T5876] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 889.751515][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.787815][ T5876] usb 6-1: Product: syz [ 889.801928][ T5876] usb 6-1: Manufacturer: syz [ 889.814282][ T5876] usb 6-1: SerialNumber: syz [ 889.831263][ T5876] usb 6-1: config 0 descriptor?? [ 889.845485][ T5876] usb 6-1: bad CDC descriptors [ 889.856740][ T5876] usb 6-1: unsupported MDLM descriptors [ 891.144469][ T5876] usb 6-1: USB disconnect, device number 5 [ 891.817958][ T29] audit: type=1400 audit(1771191371.579:4241): avc: denied { create } for pid=14547 comm="syz.5.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 893.240302][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 893.240316][ T29] audit: type=1400 audit(1771191372.879:4243): avc: denied { watch } for pid=14562 comm="syz.2.2049" path="/393/file5" dev="tmpfs" ino=2110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 893.988471][ T29] audit: type=1400 audit(1771191372.879:4244): avc: denied { watch_sb watch_reads } for pid=14562 comm="syz.2.2049" path="/393/file5" dev="tmpfs" ino=2110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 894.022168][ T29] audit: type=1400 audit(1771191372.879:4245): avc: denied { prog_load } for pid=14562 comm="syz.2.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 894.047373][ T29] audit: type=1400 audit(1771191372.879:4246): avc: denied { bpf } for pid=14562 comm="syz.2.2049" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 894.093111][ T29] audit: type=1400 audit(1771191372.879:4247): avc: denied { perfmon } for pid=14562 comm="syz.2.2049" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 894.306233][ T29] audit: type=1400 audit(1771191372.879:4248): avc: denied { prog_run } for pid=14562 comm="syz.2.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 894.372596][ T29] audit: type=1400 audit(1771191372.879:4249): avc: denied { create } for pid=14562 comm="syz.2.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 894.559881][ T29] audit: type=1400 audit(1771191372.879:4250): avc: denied { create } for pid=14558 comm="syz.3.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 894.614254][T14578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.735361][T14578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.735689][ T29] audit: type=1400 audit(1771191372.879:4251): avc: denied { write } for pid=14558 comm="syz.3.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 894.827210][ T29] audit: type=1400 audit(1771191372.879:4252): avc: denied { read } for pid=14558 comm="syz.3.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 894.883003][T10841] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 897.267895][ T5944] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 897.850317][ T5944] usb 6-1: Using ep0 maxpacket: 16 [ 897.894911][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.909245][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.934679][ T5944] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 898.025629][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.045367][ T5944] usb 6-1: config 0 descriptor?? [ 898.608388][ T5944] corsair 0003:1B1C:1B02.000A: unbalanced delimiter at end of report description [ 898.618101][ T5944] corsair 0003:1B1C:1B02.000A: parse failed [ 898.624100][ T5944] corsair 0003:1B1C:1B02.000A: probe with driver corsair failed with error -22 [ 898.726388][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 898.726402][ T29] audit: type=1400 audit(1771191378.033:4322): avc: denied { create } for pid=14614 comm="syz.2.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 898.761656][ T29] audit: type=1400 audit(1771191378.071:4323): avc: denied { setopt } for pid=14614 comm="syz.2.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 898.787929][T14615] sp0: Synchronizing with TNC [ 898.817519][ T29] audit: type=1400 audit(1771191378.108:4324): avc: denied { bind } for pid=14614 comm="syz.2.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 898.888102][ T29] audit: type=1400 audit(1771191378.108:4325): avc: denied { name_bind } for pid=14614 comm="syz.2.2067" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 899.039575][ T5876] usb 6-1: USB disconnect, device number 6 [ 899.310937][ T29] audit: type=1400 audit(1771191378.108:4326): avc: denied { node_bind } for pid=14614 comm="syz.2.2067" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 899.397749][ T29] audit: type=1400 audit(1771191378.108:4327): avc: denied { write } for pid=14614 comm="syz.2.2067" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 899.660080][ T29] audit: type=1400 audit(1771191378.108:4328): avc: denied { connect } for pid=14614 comm="syz.2.2067" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 899.732319][T14620] lo speed is unknown, defaulting to 1000 [ 899.891019][ T29] audit: type=1400 audit(1771191378.108:4329): avc: denied { name_connect } for pid=14614 comm="syz.2.2067" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 899.993636][ T29] audit: type=1400 audit(1771191378.164:4330): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 900.061250][ T29] audit: type=1400 audit(1771191378.174:4331): avc: denied { create } for pid=14616 comm="syz.3.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 901.422152][T14643] usb usb8: usbfs: process 14643 (syz.2.2073) did not claim interface 0 before use [ 902.934633][T14665] loop7: detected capacity change from 0 to 8 [ 903.123361][ T2714] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 903.135016][ T2714] Buffer I/O error on dev loop7, logical block 0, async page read [ 903.144252][T14665] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 903.154047][T14665] Buffer I/O error on dev loop7, logical block 0, async page read [ 903.179590][T14665] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 903.200164][T14665] Buffer I/O error on dev loop7, logical block 0, async page read [ 903.265960][T14665] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 903.278489][T14665] Buffer I/O error on dev loop7, logical block 0, async page read [ 903.295205][T14665] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 903.308178][T14665] Buffer I/O error on dev loop7, logical block 0, async page read [ 903.311541][T14665] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 903.311558][T14665] Buffer I/O error on dev loop7, logical block 0, async page read [ 903.311590][T14665] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 903.311605][T14665] Buffer I/O error on dev loop7, logical block 0, async page read [ 903.311627][T14665] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 903.311641][T14665] Buffer I/O error on dev loop7, logical block 0, async page read [ 903.311652][T14665] ldm_validate_partition_table(): Disk read failed. [ 903.311682][T14665] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 903.311696][T14665] Buffer I/O error on dev loop7, logical block 0, async page read [ 903.311718][T14665] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 903.311731][T14665] Buffer I/O error on dev loop7, logical block 0, async page read [ 903.311771][T14665] Dev loop7: unable to read RDB block 0 [ 903.311839][T14665] loop7: unable to read partition table [ 903.311935][T14665] loop7: partition table beyond EOD, truncated [ 903.311956][T14665] loop_reread_partitions: partition scan of loop7 ( Cj̖P=ý?}X) failed (rc=-5) [ 903.338164][T14673] FAULT_INJECTION: forcing a failure. [ 903.338164][T14673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.338183][T14673] CPU: 1 UID: 0 PID: 14673 Comm: syz.2.2082 Tainted: G L syzkaller #0 PREEMPT(full) [ 903.338200][T14673] Tainted: [L]=SOFTLOCKUP [ 903.338204][T14673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 903.338211][T14673] Call Trace: [ 903.338214][T14673] [ 903.338218][T14673] dump_stack_lvl+0x100/0x190 [ 903.338239][T14673] should_fail_ex.cold+0x5/0xa [ 903.338254][T14673] _copy_from_iter+0x1f4/0x1690 [ 903.338270][T14673] ? __pfx__copy_from_iter+0x10/0x10 [ 903.338284][T14673] ? avc_has_perm_noaudit+0x145/0x3b0 [ 903.338299][T14673] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 903.338313][T14673] skb_copy_datagram_from_iter+0x11f/0x720 [ 903.338333][T14673] ? unix_scm_to_skb+0x241/0x520 [ 903.338351][T14673] unix_stream_sendmsg+0x536/0x1310 [ 903.338372][T14673] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 903.338390][T14673] ? __might_fault+0x20/0x140 [ 903.338408][T14673] ____sys_sendmsg+0xa54/0xc30 [ 903.338425][T14673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 903.338447][T14673] ___sys_sendmsg+0x190/0x1e0 [ 903.338465][T14673] ? __pfx____sys_sendmsg+0x10/0x10 [ 903.338497][T14673] __sys_sendmsg+0x170/0x220 [ 903.338510][T14673] ? __pfx___sys_sendmsg+0x10/0x10 [ 903.338532][T14673] do_syscall_64+0x106/0xf80 [ 903.338545][T14673] ? clear_bhb_loop+0x40/0x90 [ 903.338559][T14673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.338570][T14673] RIP: 0033:0x7effb5d9bf79 [ 903.338579][T14673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.338589][T14673] RSP: 002b:00007effb3fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 903.338600][T14673] RAX: ffffffffffffffda RBX: 00007effb6016180 RCX: 00007effb5d9bf79 [ 903.338607][T14673] RDX: 0000000000000000 RSI: 0000200000000980 RDI: 0000000000000003 [ 903.338613][T14673] RBP: 00007effb3fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 903.338619][T14673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.338626][T14673] R13: 00007effb6016218 R14: 00007effb6016180 R15: 00007fff3098be48 [ 903.338639][T14673] [ 904.422323][T14686] FAULT_INJECTION: forcing a failure. [ 904.422323][T14686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.422356][T14686] CPU: 0 UID: 0 PID: 14686 Comm: syz.4.2087 Tainted: G L syzkaller #0 PREEMPT(full) [ 904.422380][T14686] Tainted: [L]=SOFTLOCKUP [ 904.422386][T14686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 904.422396][T14686] Call Trace: [ 904.422402][T14686] [ 904.422408][T14686] dump_stack_lvl+0x100/0x190 [ 904.422439][T14686] should_fail_ex.cold+0x5/0xa [ 904.422462][T14686] _copy_from_user+0x2e/0xd0 [ 904.422482][T14686] copy_msghdr_from_user+0x9f/0x4f0 [ 904.422509][T14686] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 904.422547][T14686] ___sys_sendmsg+0x106/0x1e0 [ 904.422574][T14686] ? __pfx____sys_sendmsg+0x10/0x10 [ 904.422629][T14686] __sys_sendmsg+0x170/0x220 [ 904.422650][T14686] ? __pfx___sys_sendmsg+0x10/0x10 [ 904.422686][T14686] do_syscall_64+0x106/0xf80 [ 904.422706][T14686] ? clear_bhb_loop+0x40/0x90 [ 904.422727][T14686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.422745][T14686] RIP: 0033:0x7f400319bf79 [ 904.422760][T14686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.422776][T14686] RSP: 002b:00007f4003fc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.422792][T14686] RAX: ffffffffffffffda RBX: 00007f4003415fa0 RCX: 00007f400319bf79 [ 904.422803][T14686] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 904.422813][T14686] RBP: 00007f4003fc0090 R08: 0000000000000000 R09: 0000000000000000 [ 904.422823][T14686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.422833][T14686] R13: 00007f4003416038 R14: 00007f4003415fa0 R15: 00007ffd351f0778 [ 904.422857][T14686] [ 904.702080][ T5892] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 905.059418][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 905.060956][ T5892] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 905.073531][ T5892] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 905.073556][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.073575][ T5892] usb 2-1: Product: syz [ 905.073589][ T5892] usb 2-1: Manufacturer: syz [ 905.073603][ T5892] usb 2-1: SerialNumber: syz [ 905.076037][ T5892] usb 2-1: config 0 descriptor?? [ 905.077618][ T5892] usb 2-1: bad CDC descriptors [ 905.077979][ T5892] usb 2-1: unsupported MDLM descriptors [ 905.378072][T14676] syzkaller0: entered promiscuous mode [ 905.378091][T14676] syzkaller0: entered allmulticast mode [ 905.383869][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 905.383884][ T29] audit: type=1400 audit(1771191384.273:4380): avc: denied { setopt } for pid=14675 comm="syz.1.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 905.384383][ T29] audit: type=1400 audit(1771191384.273:4381): avc: denied { write } for pid=14675 comm="syz.1.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 905.388248][ T5883] usb 2-1: USB disconnect, device number 32 [ 907.768443][ T5944] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 907.952217][ T5944] usb 6-1: Using ep0 maxpacket: 32 [ 907.970454][ T5944] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 907.980615][ T5944] usb 6-1: config 0 has no interface number 0 [ 908.004289][ T5944] usb 6-1: config 0 interface 184 has no altsetting 0 [ 908.041403][ T5944] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 908.054179][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.129135][ T5944] usb 6-1: Product: syz [ 908.133775][ T5944] usb 6-1: Manufacturer: syz [ 908.138511][ T5944] usb 6-1: SerialNumber: syz [ 908.145981][ T5944] usb 6-1: config 0 descriptor?? [ 909.113568][ T29] audit: type=1400 audit(1771191387.762:4382): avc: denied { create } for pid=14715 comm="syz.2.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 909.387805][ T29] audit: type=1400 audit(1771191387.780:4383): avc: denied { read } for pid=14715 comm="syz.2.2095" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 909.512398][ T29] audit: type=1400 audit(1771191387.780:4384): avc: denied { open } for pid=14715 comm="syz.2.2095" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 909.598493][ T29] audit: type=1400 audit(1771191387.780:4385): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.146 dest=46174 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 909.663725][ T29] audit: type=1400 audit(1771191387.902:4386): avc: denied { read } for pid=14715 comm="syz.2.2095" dev="nsfs" ino=4026533092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 909.711696][ T29] audit: type=1400 audit(1771191387.902:4387): avc: denied { open } for pid=14715 comm="syz.2.2095" path="net:[4026533092]" dev="nsfs" ino=4026533092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 909.765007][ T29] audit: type=1400 audit(1771191387.902:4388): avc: denied { create } for pid=14715 comm="syz.2.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 909.801946][ T29] audit: type=1400 audit(1771191387.921:4389): avc: denied { getopt } for pid=14715 comm="syz.2.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 910.077315][T14711] bridge0: entered promiscuous mode [ 910.093941][T14711] macvlan2: entered promiscuous mode [ 910.101949][ T5944] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 910.134935][ T5944] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 910.429690][ T5944] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 910.470857][ T5944] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 910.505754][ T5944] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 910.562345][ T5944] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 910.746010][ T5944] usb 6-1: USB disconnect, device number 7 [ 911.454213][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 911.454230][ T29] audit: type=1400 audit(1771191389.941:4415): avc: denied { create } for pid=14744 comm="syz.5.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 911.669624][ T29] audit: type=1400 audit(1771191389.988:4416): avc: denied { read write } for pid=14746 comm="syz.1.2103" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 911.693385][ T29] audit: type=1400 audit(1771191389.988:4417): avc: denied { open } for pid=14746 comm="syz.1.2103" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 911.718839][ T29] audit: type=1400 audit(1771191389.988:4418): avc: denied { mounton } for pid=14746 comm="syz.1.2103" path="/429/file0" dev="tmpfs" ino=2295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 911.742379][ T29] audit: type=1400 audit(1771191389.997:4419): avc: denied { mount } for pid=14746 comm="syz.1.2103" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 911.914925][T14752] /dev/sg0: Can't lookup blockdev [ 912.220416][ T29] audit: type=1400 audit(1771191389.997:4420): avc: denied { execmem } for pid=14746 comm="syz.1.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 912.277513][ T29] audit: type=1400 audit(1771191390.184:4421): avc: denied { map } for pid=14746 comm="syz.1.2103" path="socket:[48402]" dev="sockfs" ino=48402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 912.480463][ T29] audit: type=1400 audit(1771191390.381:4422): avc: denied { mounton } for pid=14744 comm="syz.5.2102" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 912.568780][ T29] audit: type=1400 audit(1771191390.390:4423): avc: denied { create } for pid=14744 comm="syz.5.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 913.007234][ T29] audit: type=1400 audit(1771191390.399:4424): avc: denied { setopt } for pid=14744 comm="syz.5.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 913.884813][T14769] binder: 14763:14769 ioctl c0306201 200000000640 returned -22 [ 915.986754][ T5944] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 916.216906][ T5944] usb 6-1: config index 0 descriptor too short (expected 539, got 27) [ 916.234885][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 916.324735][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 916.392263][ T5944] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 916.403597][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.434465][ T5944] usb 6-1: Product: syz [ 916.479761][ T5944] usb 6-1: Manufacturer: syz [ 916.496019][ T5944] usb 6-1: SerialNumber: syz [ 916.512742][ T5944] usb 6-1: config 0 descriptor?? [ 916.671250][ T5944] hub 6-1:0.0: bad descriptor, ignoring hub [ 916.713811][ T5944] hub 6-1:0.0: probe with driver hub failed with error -5 [ 916.756663][ T5944] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input47 [ 916.820007][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 916.820023][ T29] audit: type=1400 audit(1771191394.945:4490): avc: denied { read write } for pid=14805 comm="syz.1.2118" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 916.872653][ T5944] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 916.910173][ T29] audit: type=1400 audit(1771191394.945:4491): avc: denied { open } for pid=14805 comm="syz.1.2118" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 916.982382][ T29] audit: type=1400 audit(1771191395.011:4492): avc: denied { read } for pid=5164 comm="acpid" name="mouse1" dev="devtmpfs" ino=3578 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 917.048138][ T29] audit: type=1400 audit(1771191395.011:4493): avc: denied { open } for pid=5164 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3578 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 917.071701][ T9724] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 917.095088][ T29] audit: type=1400 audit(1771191395.011:4494): avc: denied { ioctl } for pid=5164 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3578 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 917.129143][ T29] audit: type=1400 audit(1771191395.076:4495): avc: denied { create } for pid=14795 comm="syz.5.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 917.151908][ T5944] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 917.221429][ T5944] usb 6-1: USB disconnect, device number 8 [ 917.248559][ T29] audit: type=1400 audit(1771191395.076:4496): avc: denied { connect } for pid=14795 comm="syz.5.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 917.270780][ T9724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.292867][ T9724] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 917.317712][ T9724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.337173][ T29] audit: type=1400 audit(1771191395.076:4497): avc: denied { getopt } for pid=14795 comm="syz.5.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 917.366381][ T9724] usb 2-1: config 0 descriptor?? [ 917.382250][ T29] audit: type=1400 audit(1771191395.076:4498): avc: denied { prog_load } for pid=14795 comm="syz.5.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 917.473730][ T29] audit: type=1400 audit(1771191395.076:4499): avc: denied { bpf } for pid=14795 comm="syz.5.2115" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 917.686833][ T9724] usbhid 2-1:0.0: can't add hid device: -71 [ 917.740359][ T9724] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 917.770841][ T9724] usb 2-1: USB disconnect, device number 33 [ 917.845040][T14823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=14823 comm=syz.5.2123 [ 918.722662][T14830] binder: 14825:14830 ioctl c0306201 200000000640 returned -22 [ 918.787941][ T9724] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 918.990833][ T9724] usb 2-1: Using ep0 maxpacket: 32 [ 919.076722][ T9724] usb 2-1: config index 0 descriptor too short (expected 36, got 27) [ 919.097811][ T9724] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 919.169744][ T9724] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 919.215294][ T9724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.272692][ T9724] usb 2-1: config 0 descriptor?? [ 919.314863][ T9724] ldusb 2-1:0.0: Interrupt in endpoint not found [ 919.354091][ T9724] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 920.165106][T14839] kvm: vcpu 0: requested 2688 ns lapic timer period limited to 200000 ns [ 921.002779][ T5944] usb 2-1: USB disconnect, device number 34 [ 921.427191][ T2850] block nbd0: Possible stuck request ffff8880281a0000: control (read@0,1024B). Runtime 450 seconds [ 921.437923][ T2850] block nbd0: Possible stuck request ffff8880281a0200: control (read@1024,1024B). Runtime 450 seconds [ 921.448862][ T2850] block nbd0: Possible stuck request ffff8880281a0400: control (read@2048,1024B). Runtime 450 seconds [ 921.460167][ T2850] block nbd0: Possible stuck request ffff8880281a0600: control (read@3072,1024B). Runtime 450 seconds [ 921.460213][T14860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2133'. [ 922.227103][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 922.227118][ T29] audit: type=1400 audit(1771192168.118:4563): avc: denied { mounton } for pid=14869 comm="syz.1.2135" path="/436" dev="tmpfs" ino=2327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 922.281210][ T29] audit: type=1400 audit(1771192168.150:4564): avc: denied { bind } for pid=14869 comm="syz.1.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 922.324185][ T29] audit: type=1400 audit(1771192168.150:4565): avc: denied { write } for pid=14869 comm="syz.1.2135" path="socket:[49745]" dev="sockfs" ino=49745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 922.768837][ T29] audit: type=1400 audit(1771192168.685:4566): avc: denied { read write } for pid=14875 comm="syz.2.2137" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 922.793759][T14876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 922.873950][ T29] audit: type=1400 audit(1771192168.685:4567): avc: denied { open } for pid=14875 comm="syz.2.2137" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 923.288806][ T29] audit: type=1400 audit(1771192168.685:4568): avc: denied { prog_run } for pid=14875 comm="syz.2.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 923.436322][ T29] audit: type=1400 audit(1771192168.769:4569): avc: denied { append } for pid=14875 comm="syz.2.2137" name="nbd2" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 923.466689][ T29] audit: type=1400 audit(1771192168.769:4570): avc: denied { create } for pid=14875 comm="syz.2.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 924.395773][ T29] audit: type=1400 audit(1771192168.769:4571): avc: denied { write } for pid=14875 comm="syz.2.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 924.517960][ T29] audit: type=1400 audit(1771192168.916:4572): avc: denied { mount } for pid=14878 comm="syz.4.2138" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 924.752515][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 924.758540][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 924.830312][T14901] ceph: No mds server is up or the cluster is laggy [ 925.001579][T14910] random: crng reseeded on system resumption [ 925.659717][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 927.604425][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 927.604441][ T29] audit: type=1400 audit(1771192173.085:4604): avc: denied { execmem } for pid=14929 comm="syz.4.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 927.708949][ T29] audit: type=1400 audit(1771192173.232:4605): avc: denied { map } for pid=14929 comm="syz.4.2152" path="socket:[50068]" dev="sockfs" ino=50068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 927.804482][ T29] audit: type=1400 audit(1771192173.798:4606): avc: denied { unmount } for pid=9624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 928.030137][ T29] audit: type=1400 audit(1771192173.998:4607): avc: denied { prog_load } for pid=14934 comm="syz.1.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 928.079622][T14941] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 928.472745][ T29] audit: type=1400 audit(1771192173.998:4608): avc: denied { bpf } for pid=14934 comm="syz.1.2153" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 928.566888][ T29] audit: type=1400 audit(1771192174.008:4609): avc: denied { read } for pid=14934 comm="syz.1.2153" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 928.737114][T14949] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 928.765912][ T29] audit: type=1400 audit(1771192174.008:4610): avc: denied { open } for pid=14934 comm="syz.1.2153" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 928.794447][T14949] CIFS mount error: No usable UNC path provided in device string! [ 928.794447][T14949] [ 928.805111][T14949] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 928.928420][ T29] audit: type=1400 audit(1771192174.124:4611): avc: denied { read write } for pid=14912 comm="syz.3.2145" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 928.965647][ T29] audit: type=1400 audit(1771192174.124:4612): avc: denied { open } for pid=14912 comm="syz.3.2145" path="/dev/sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 929.013349][ T29] audit: type=1400 audit(1771192174.124:4613): avc: denied { ioctl } for pid=14912 comm="syz.3.2145" path="/dev/sg0" dev="devtmpfs" ino=815 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 932.648203][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 932.648222][ T29] audit: type=1400 audit(1771192178.670:4659): avc: denied { prog_run } for pid=14990 comm="syz.4.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 932.972058][T14999] FAULT_INJECTION: forcing a failure. [ 932.972058][T14999] name failslab, interval 1, probability 0, space 0, times 0 [ 932.984804][T14999] CPU: 1 UID: 0 PID: 14999 Comm: syz.1.2169 Tainted: G L syzkaller #0 PREEMPT(full) [ 932.984835][T14999] Tainted: [L]=SOFTLOCKUP [ 932.984841][T14999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 932.984851][T14999] Call Trace: [ 932.984858][T14999] [ 932.984865][T14999] dump_stack_lvl+0x100/0x190 [ 932.984896][T14999] should_fail_ex.cold+0x5/0xa [ 932.984918][T14999] should_failslab+0xc2/0x120 [ 932.984942][T14999] __kmalloc_cache_noprof+0x7a/0x6f0 [ 932.984959][T14999] ? alloc_bprm+0x86/0x710 [ 932.984983][T14999] alloc_bprm+0x86/0x710 [ 932.985008][T14999] do_execveat_common.isra.0+0x19c/0x580 [ 932.985032][T14999] ? do_getname+0x191/0x390 [ 932.985053][T14999] __x64_sys_execveat+0xdf/0x130 [ 932.985079][T14999] do_syscall_64+0x106/0xf80 [ 932.985099][T14999] ? clear_bhb_loop+0x40/0x90 [ 932.985121][T14999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.985138][T14999] RIP: 0033:0x7fa11599bf79 [ 932.985154][T14999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.985170][T14999] RSP: 002b:00007fa113bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 932.985192][T14999] RAX: ffffffffffffffda RBX: 00007fa115c16180 RCX: 00007fa11599bf79 [ 932.985203][T14999] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 932.985214][T14999] RBP: 00007fa113bf6090 R08: 0000000000001000 R09: 0000000000000000 [ 932.985225][T14999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.985235][T14999] R13: 00007fa115c16218 R14: 00007fa115c16180 R15: 00007fffa5144fc8 [ 932.985259][T14999] [ 933.319244][T15000] usb usb8: usbfs: process 15000 (syz.3.2168) did not claim interface 0 before use [ 933.370327][ T29] audit: type=1400 audit(1771192179.762:4660): avc: denied { write } for pid=14988 comm="syz.3.2168" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 933.775473][ T29] audit: type=1400 audit(1771192180.203:4661): avc: denied { create } for pid=15002 comm="syz.1.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 934.011001][ T29] audit: type=1400 audit(1771192180.486:4662): avc: denied { write } for pid=15006 comm="syz.5.2170" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 934.037088][T15009] random: crng reseeded on system resumption [ 934.356072][ T29] audit: type=1400 audit(1771192180.518:4663): avc: denied { open } for pid=15006 comm="syz.5.2170" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 934.390684][T15010] FAULT_INJECTION: forcing a failure. [ 934.390684][T15010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.514912][T15010] CPU: 0 UID: 0 PID: 15010 Comm: syz.1.2173 Tainted: G L syzkaller #0 PREEMPT(full) [ 934.514941][T15010] Tainted: [L]=SOFTLOCKUP [ 934.514948][T15010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 934.514957][T15010] Call Trace: [ 934.514963][T15010] [ 934.514969][T15010] dump_stack_lvl+0x100/0x190 [ 934.515000][T15010] should_fail_ex.cold+0x5/0xa [ 934.515029][T15010] _copy_from_iter+0x1f4/0x1690 [ 934.515051][T15010] ? __asan_memset+0x23/0x50 [ 934.515072][T15010] ? __pfx__copy_from_iter+0x10/0x10 [ 934.515090][T15010] ? __pfx___alloc_skb+0x10/0x10 [ 934.515118][T15010] netlink_sendmsg+0x808/0xda0 [ 934.515146][T15010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.515165][T15010] ? __might_fault+0x20/0x140 [ 934.515193][T15010] ____sys_sendmsg+0xa54/0xc30 [ 934.515222][T15010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 934.515257][T15010] ___sys_sendmsg+0x190/0x1e0 [ 934.515284][T15010] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.515338][T15010] __sys_sendmsg+0x170/0x220 [ 934.515359][T15010] ? __pfx___sys_sendmsg+0x10/0x10 [ 934.515395][T15010] do_syscall_64+0x106/0xf80 [ 934.515416][T15010] ? clear_bhb_loop+0x40/0x90 [ 934.515438][T15010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.515456][T15010] RIP: 0033:0x7fa11599bf79 [ 934.515471][T15010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.515488][T15010] RSP: 002b:00007fa1167a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 934.515505][T15010] RAX: ffffffffffffffda RBX: 00007fa115c15fa0 RCX: 00007fa11599bf79 [ 934.515517][T15010] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 934.515527][T15010] RBP: 00007fa1167a2090 R08: 0000000000000000 R09: 0000000000000000 [ 934.515537][T15010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.515547][T15010] R13: 00007fa115c16038 R14: 00007fa115c15fa0 R15: 00007fffa5144fc8 [ 934.515572][T15010] [ 935.089689][ T29] audit: type=1400 audit(1771192181.599:4664): avc: denied { write } for pid=15014 comm="syz.5.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 935.375321][ T29] audit: type=1400 audit(1771192181.599:4665): avc: denied { nlmsg_write } for pid=15014 comm="syz.5.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 936.113084][ T29] audit: type=1400 audit(1771192182.702:4666): avc: denied { read append } for pid=15024 comm="syz.3.2178" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 936.238112][ T29] audit: type=1400 audit(1771192182.702:4667): avc: denied { open } for pid=15024 comm="syz.3.2178" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 936.556805][T15029] mmap: syz.5.2180 (15029): VmData 25763840 exceed data ulimit 11. Update limits or use boot option ignore_rlimit_data. [ 936.739030][ T29] audit: type=1400 audit(1771192183.353:4668): avc: denied { write } for pid=15031 comm="syz.1.2181" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 937.007383][ T1851] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 937.204144][ T1851] usb 2-1: config 0 has no interfaces? [ 937.250270][ T1851] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 937.306235][ T1851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 937.369491][ T1851] usb 2-1: SerialNumber: syz [ 937.415499][ T1851] usb 2-1: config 0 descriptor?? [ 937.757016][ T1851] usb 2-1: USB disconnect, device number 35 [ 937.919611][T15057] random: crng reseeded on system resumption [ 938.225579][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 938.225595][ T29] audit: type=1400 audit(1771192184.844:4670): avc: denied { mount } for pid=15060 comm="syz.5.2187" name="/" dev="configfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 938.325353][ T29] audit: type=1400 audit(1771192184.844:4671): avc: denied { search } for pid=15060 comm="syz.5.2187" name="/" dev="configfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 938.642412][ T29] audit: type=1400 audit(1771192184.844:4672): avc: denied { search } for pid=15060 comm="syz.5.2187" name="/" dev="configfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 938.684808][T15077] usb usb8: usbfs: process 15077 (syz.1.2190) did not claim interface 0 before use [ 938.740447][ T29] audit: type=1400 audit(1771192184.844:4673): avc: denied { search } for pid=15060 comm="syz.5.2187" name="/" dev="configfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 938.888263][ T29] audit: type=1400 audit(1771192184.844:4674): avc: denied { search } for pid=15060 comm="syz.5.2187" name="/" dev="configfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 939.027268][ T29] audit: type=1400 audit(1771192185.747:4675): avc: denied { create } for pid=15082 comm="syz.2.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 939.124632][ T29] audit: type=1400 audit(1771192185.747:4676): avc: denied { read } for pid=15082 comm="syz.2.2192" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 939.235261][ T1851] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 939.315651][ T29] audit: type=1400 audit(1771192185.747:4677): avc: denied { open } for pid=15082 comm="syz.2.2192" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 939.435613][ T1851] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 939.444766][ T1851] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 939.463059][ T29] audit: type=1400 audit(1771192185.747:4678): avc: denied { ioctl } for pid=15082 comm="syz.2.2192" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 939.495524][ T1851] usb 6-1: Product: syz [ 939.514827][ T1851] usb 6-1: Manufacturer: syz [ 939.525099][ T1851] usb 6-1: SerialNumber: syz [ 939.541585][ T1851] usb 6-1: config 0 descriptor?? [ 939.568657][ T1851] ch341 6-1:0.0: ch341-uart converter detected [ 940.125687][T15087] random: crng reseeded on system resumption [ 940.528658][ T29] audit: type=1400 audit(1771192187.342:4679): avc: denied { read } for pid=15080 comm="syz.5.2191" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 940.642272][ T5892] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 941.359847][ T1851] ch341-uart ttyUSB0: failed to read break control: -110 [ 941.377624][ T1851] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 941.982293][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 941.997499][T15099] random: crng reseeded on system resumption [ 942.019193][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.073183][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.097185][ T5892] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 942.097546][T15103] FAULT_INJECTION: forcing a failure. [ 942.097546][T15103] name failslab, interval 1, probability 0, space 0, times 0 [ 942.121063][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.162331][ T5892] usb 4-1: config 0 descriptor?? [ 942.170766][ T5892] hub 4-1:0.0: USB hub found [ 942.480289][T15103] CPU: 1 UID: 0 PID: 15103 Comm: syz.4.2198 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.480320][T15103] Tainted: [L]=SOFTLOCKUP [ 942.480326][T15103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 942.480337][T15103] Call Trace: [ 942.480343][T15103] [ 942.480351][T15103] dump_stack_lvl+0x100/0x190 [ 942.480387][T15103] should_fail_ex.cold+0x5/0xa [ 942.480410][T15103] ? tomoyo_realpath_from_path+0xb6/0x690 [ 942.480443][T15103] should_failslab+0xc2/0x120 [ 942.480468][T15103] __kmalloc_noprof+0xe0/0x850 [ 942.480492][T15103] tomoyo_realpath_from_path+0xb6/0x690 [ 942.480521][T15103] tomoyo_path_number_perm+0x23c/0x580 [ 942.480541][T15103] ? tomoyo_path_number_perm+0x22e/0x580 [ 942.480563][T15103] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 942.480605][T15103] ? find_held_lock+0x2b/0x80 [ 942.480625][T15103] ? __fget_files+0x215/0x3d0 [ 942.480646][T15103] ? hook_file_ioctl_common+0x146/0x410 [ 942.480669][T15103] ? __fget_files+0x21f/0x3d0 [ 942.480697][T15103] security_file_ioctl+0xd3/0x230 [ 942.480721][T15103] __x64_sys_ioctl+0xb7/0x210 [ 942.480746][T15103] do_syscall_64+0x106/0xf80 [ 942.480766][T15103] ? clear_bhb_loop+0x40/0x90 [ 942.480789][T15103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.480806][T15103] RIP: 0033:0x7f400319bf79 [ 942.480822][T15103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.480838][T15103] RSP: 002b:00007f4003f7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 942.480856][T15103] RAX: ffffffffffffffda RBX: 00007f4003416090 RCX: 00007f400319bf79 [ 942.480867][T15103] RDX: 0000200000000140 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 942.480878][T15103] RBP: 00007f4003f7a090 R08: 0000000000000000 R09: 0000000000000000 [ 942.480888][T15103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.480898][T15103] R13: 00007f4003416128 R14: 00007f4003416090 R15: 00007ffd351f0778 [ 942.480923][T15103] [ 942.890081][ T5892] hub 4-1:0.0: 1 port detected [ 942.923145][ T9724] usb 6-1: USB disconnect, device number 9 [ 942.935948][ T9724] ch341 6-1:0.0: device disconnected [ 942.940569][T15103] ERROR: Out of memory at tomoyo_realpath_from_path. [ 943.073918][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 943.073934][ T29] audit: type=1400 audit(1771192190.009:4715): avc: denied { read } for pid=15109 comm="syz.4.2201" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 943.120334][ T29] audit: type=1400 audit(1771192190.051:4716): avc: denied { open } for pid=15109 comm="syz.4.2201" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 943.156962][ T29] audit: type=1400 audit(1771192190.062:4717): avc: denied { ioctl } for pid=15109 comm="syz.4.2201" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 943.824055][ T5883] hub 4-1:0.0: activate --> -90 [ 943.852733][ T29] audit: type=1400 audit(1771192190.062:4718): avc: denied { set_context_mgr } for pid=15109 comm="syz.4.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 943.998078][ T29] audit: type=1400 audit(1771192190.125:4719): avc: denied { execmem } for pid=15109 comm="syz.4.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 944.035036][ T29] audit: type=1400 audit(1771192190.776:4720): avc: denied { setopt } for pid=15112 comm="syz.1.2202" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 944.091691][ T29] audit: type=1400 audit(1771192190.776:4721): avc: denied { read write } for pid=15112 comm="syz.1.2202" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 944.146425][ T29] audit: type=1400 audit(1771192190.776:4722): avc: denied { open } for pid=15112 comm="syz.1.2202" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 944.176823][ T29] audit: type=1400 audit(1771192190.797:4723): avc: denied { mounton } for pid=15112 comm="syz.1.2202" path="/453/file0" dev="tmpfs" ino=2423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 944.201385][ T29] audit: type=1400 audit(1771192190.797:4724): avc: denied { mount } for pid=15112 comm="syz.1.2202" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 944.293551][T15093] netlink: 'syz.3.2195': attribute type 4 has an invalid length. [ 944.309961][ T9724] usb 4-1: USB disconnect, device number 73 [ 944.309997][ T5883] usb 4-1-port1: config error [ 944.509413][T15127] random: crng reseeded on system resumption [ 946.103080][T15138] random: crng reseeded on system resumption [ 946.216500][T15141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15141 comm=syz.3.2210 [ 946.241732][T15144] loop7: detected capacity change from 0 to 8 [ 946.277998][T15141] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2210'. [ 946.309149][ T2850] blk_print_req_error: 6 callbacks suppressed [ 946.309172][ T2850] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 946.325123][ T2850] buffer_io_error: 6 callbacks suppressed [ 946.325131][ T2850] Buffer I/O error on dev loop7, logical block 0, async page read [ 946.341785][T15144] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 946.351456][T15144] Buffer I/O error on dev loop7, logical block 0, async page read [ 946.359599][T15144] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 946.369252][T15144] Buffer I/O error on dev loop7, logical block 0, async page read [ 946.377433][T15144] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 946.387092][T15144] Buffer I/O error on dev loop7, logical block 0, async page read [ 946.394937][T15144] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 946.404566][T15144] Buffer I/O error on dev loop7, logical block 0, async page read [ 946.412421][T15144] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 946.422005][T15144] Buffer I/O error on dev loop7, logical block 0, async page read [ 946.430188][T15144] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 946.439908][T15144] Buffer I/O error on dev loop7, logical block 0, async page read [ 946.447875][T15144] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 946.457463][T15144] Buffer I/O error on dev loop7, logical block 0, async page read [ 946.465461][T15144] ldm_validate_partition_table(): Disk read failed. [ 946.472461][T15144] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 946.482043][T15144] Buffer I/O error on dev loop7, logical block 0, async page read [ 946.489883][T15144] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 946.499508][T15144] Buffer I/O error on dev loop7, logical block 0, async page read [ 946.507955][T15144] Dev loop7: unable to read RDB block 0 [ 946.516164][T15144] loop7: unable to read partition table [ 946.522083][T15144] loop7: partition table beyond EOD, truncated [ 946.566824][T15144] loop_reread_partitions: partition scan of loop7 ( Cj̖P=ý?}X) failed (rc=-5) [ 947.849173][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 947.849189][ T29] audit: type=1400 audit(1771192195.017:4755): avc: denied { prog_load } for pid=15149 comm="syz.3.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 948.374978][ T29] audit: type=1400 audit(1771192195.049:4756): avc: denied { bpf } for pid=15149 comm="syz.3.2212" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 948.451830][ T29] audit: type=1400 audit(1771192195.049:4757): avc: denied { perfmon } for pid=15149 comm="syz.3.2212" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 948.508801][ T29] audit: type=1400 audit(1771192195.112:4758): avc: denied { read write } for pid=15158 comm="syz.5.2213" name="video9" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 948.599796][T15174] random: crng reseeded on system resumption [ 948.765821][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'. [ 948.783493][ T29] audit: type=1400 audit(1771192195.122:4759): avc: denied { open } for pid=15158 comm="syz.5.2213" path="/dev/video9" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 948.789395][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'. [ 949.750852][T15175] binder: 15168:15175 ioctl c0306201 200000000640 returned -22 [ 949.815087][ T29] audit: type=1400 audit(1771192195.122:4760): avc: denied { ioctl } for pid=15158 comm="syz.5.2213" path="/dev/video9" dev="devtmpfs" ino=959 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 949.845242][ T29] audit: type=1400 audit(1771192195.122:4761): avc: denied { create } for pid=15158 comm="syz.5.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 949.918436][ T29] audit: type=1400 audit(1771192195.133:4762): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 950.026253][ T29] audit: type=1400 audit(1771192195.133:4763): avc: denied { open } for pid=5807 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 950.058072][ T2850] block nbd0: Possible stuck request ffff8880281a0000: control (read@0,1024B). Runtime 480 seconds [ 950.068782][ T2850] block nbd0: Possible stuck request ffff8880281a0200: control (read@1024,1024B). Runtime 480 seconds [ 950.079880][ T2850] block nbd0: Possible stuck request ffff8880281a0400: control (read@2048,1024B). Runtime 480 seconds [ 950.090943][ T2850] block nbd0: Possible stuck request ffff8880281a0600: control (read@3072,1024B). Runtime 480 seconds [ 950.102817][ T29] audit: type=1400 audit(1771192195.133:4764): avc: denied { ioctl } for pid=5807 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 951.190937][T15205] binder: BINDER_SET_CONTEXT_MGR already set [ 951.214566][T15205] binder: 15199:15205 ioctl 4018620d 200000000100 returned -16 [ 951.800980][T15211] tmpfs: Bad value for 'mpol' [ 952.291490][T15218] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2231'. [ 952.604727][ T31] INFO: task syz.0.1805:13511 blocked for more than 143 seconds. [ 952.679141][ T31] Tainted: G L syzkaller #0 [ 952.703256][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 952.739462][ T31] task:syz.0.1805 state:D stack:25944 pid:13511 tgid:13510 ppid:8519 task_flags:0x400140 flags:0x00080002 [ 952.797787][ T31] Call Trace: [ 952.814232][ T31] [ 952.822960][ T31] __schedule+0xfee/0x60e0 [ 952.838342][ T31] ? __lock_acquire+0x4a5/0x2630 [ 952.862205][ T31] ? __pfx___schedule+0x10/0x10 [ 952.883473][ T31] ? find_held_lock+0x2b/0x80 [ 952.899805][ T31] ? schedule+0x2bf/0x390 [ 952.914628][ T31] schedule+0xdd/0x390 [ 952.958645][ T31] schedule_preempt_disabled+0x13/0x30 [ 953.502660][ T9724] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 953.545657][ T31] __mutex_lock+0xc9a/0x1b90 [ 953.563829][ T31] ? sync_bdevs+0x153/0x480 [ 953.578821][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 953.591573][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 953.605354][ T31] ? iput.part.0+0x1a0/0xf50 [ 953.614796][ T31] ? sync_bdevs+0x153/0x480 [ 953.622645][ T31] sync_bdevs+0x153/0x480 [ 953.638722][ T31] ksys_sync+0xb0/0xf0 [ 953.648410][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 953.702953][ T9724] usb 4-1: Using ep0 maxpacket: 32 [ 953.712378][ T31] ? do_syscall_64+0x95/0xf80 [ 953.725547][ T9724] usb 4-1: unable to get BOS descriptor or descriptor too short [ 953.740716][ T31] __do_sys_sync+0xe/0x20 [ 953.753389][ T9724] usb 4-1: config 14 has an invalid interface number: 51 but max is 0 [ 953.766131][ T31] do_syscall_64+0x106/0xf80 [ 953.785132][ T31] ? clear_bhb_loop+0x40/0x90 [ 953.795212][ T9724] usb 4-1: config 14 has no interface number 0 [ 953.801583][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.813130][ T9724] usb 4-1: config 14 interface 51 has no altsetting 0 [ 953.823277][ T31] RIP: 0033:0x7f554d99bf79 [ 953.842372][ T31] RSP: 002b:00007f554e8e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 953.868752][ T31] RAX: ffffffffffffffda RBX: 00007f554dc15fa0 RCX: 00007f554d99bf79 [ 953.893870][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 953.918764][ T31] RBP: 00007f554dc15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 953.920336][ T9724] usb 4-1: New USB device found, idVendor=12d1, idProduct=2f4e, bcdDevice=1f.5a [ 953.967276][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.987334][ T9724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.010340][ T9724] usb 4-1: Product: syz [ 954.016852][ T31] R13: 00007f554dc16038 R14: 00007f554dc15fa0 R15: 00007fffb21c58e8 [ 954.036276][ T9724] usb 4-1: Manufacturer: syz [ 954.040893][ T9724] usb 4-1: SerialNumber: syz [ 954.045545][ T31] [ 954.073664][ T31] [ 954.073664][ T31] Showing all locks held in the system: [ 954.176945][ T31] 1 lock held by khungtaskd/31: [ 954.181890][ T31] #0: ffffffff8e7e94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 954.205516][ T31] 3 locks held by kworker/u8:6/239: [ 954.211850][ T31] 2 locks held by kworker/u8:7/1092: [ 954.247647][ T31] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 954.279812][ T31] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x60e0 [ 954.296811][ T9724] option 4-1:14.51: GSM modem (1-port) converter detected [ 954.309381][ T31] 2 locks held by getty/5565: [ 954.338946][ T31] #0: ffff8880394830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 954.349726][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 954.361979][ T31] 4 locks held by udevd/7781: [ 954.498034][ T31] #0: ffff888022fd2790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 954.663211][ T31] #1: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 954.675273][ T31] #2: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x60e0 [ 954.687000][ T9724] usb 4-1: USB disconnect, device number 74 [ 954.696469][ T31] #3: ffff88807d3ac8a8 (&ep->wq){....}-{3:3}, at: __wake_up_sync+0x17/0x50 [ 954.714613][ T9724] option 4-1:14.51: device disconnected [ 954.731722][ T31] 6 locks held by kworker/0:0/9724: [ 954.738198][ T31] #0: ffff8880232b6548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 954.770711][ T31] #1: ffffc90004fe7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 954.795005][ T31] #2: ffff88802b458198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 954.805189][ T5883] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 954.814868][ T31] #3: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 954.826699][ T31] #4: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x60e0 [ 954.836370][ T31] #5: ffffffff9b363740 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x135/0x3b0 [ 954.847136][ T31] 1 lock held by udevd/9744: [ 954.851764][ T31] #0: ffff888028100358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 954.864990][ T31] 1 lock held by syz.0.1805/13511: [ 954.870238][ T31] #0: ffff888028100358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 954.881523][ T31] 1 lock held by syz-executor/13731: [ 954.886811][ T31] 2 locks held by syz.3.2230/15214: [ 954.893049][ T31] [ 954.895496][ T31] ============================================= [ 954.895496][ T31] [ 954.921545][ T31] NMI backtrace for cpu 1 [ 954.921565][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 954.921589][ T31] Tainted: [L]=SOFTLOCKUP [ 954.921595][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 954.921605][ T31] Call Trace: [ 954.921611][ T31] [ 954.921618][ T31] dump_stack_lvl+0x100/0x190 [ 954.921650][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 954.921670][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 954.921696][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 954.921724][ T31] sys_info+0x141/0x190 [ 954.921744][ T31] watchdog+0xd25/0x1050 [ 954.921771][ T31] ? __pfx_watchdog+0x10/0x10 [ 954.921793][ T31] ? __kthread_parkme+0x18c/0x230 [ 954.921819][ T31] ? kthread+0x13a/0x450 [ 954.921833][ T31] ? __pfx_watchdog+0x10/0x10 [ 954.921852][ T31] kthread+0x370/0x450 [ 954.921865][ T31] ? __pfx_kthread+0x10/0x10 [ 954.921888][ T31] ret_from_fork+0x754/0xd80 [ 954.921904][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 954.921930][ T31] ? __switch_to+0x7b4/0x1120 [ 954.921950][ T31] ? __pfx_kthread+0x10/0x10 [ 954.921974][ T31] ret_from_fork_asm+0x1a/0x30 [ 954.922000][ T31] [ 954.922006][ T31] Sending NMI from CPU 1 to CPUs 0: [ 955.049593][ C0] NMI backtrace for cpu 0 [ 955.049609][ C0] CPU: 0 UID: 0 PID: 13731 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 955.049629][ C0] Tainted: [L]=SOFTLOCKUP [ 955.049633][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 955.049641][ C0] RIP: 0010:stack_access_ok+0x11/0x1d0 [ 955.049662][ C0] Code: cc cc cc e8 91 40 d6 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 41 55 41 54 49 89 d4 <48> 89 fa 55 48 c1 ea 03 48 89 f5 53 48 89 fb 48 83 ec 08 0f b6 04 [ 955.049676][ C0] RSP: 0018:ffffc90006d87308 EFLAGS: 00000283 [ 955.049688][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff918753a4 [ 955.049697][ C0] RDX: 0000000000000008 RSI: ffffc90006d875a8 RDI: ffffc90006d87390 [ 955.049706][ C0] RBP: ffffc90006d875a8 R08: 0000000000000001 R09: 0000000000000007 [ 955.049714][ C0] R10: 0000000000000200 R11: 0000000000017fe8 R12: 0000000000000008 [ 955.049722][ C0] R13: ffffc90006d87390 R14: ffffc90006d875d8 R15: ffffc90006d873c4 [ 955.049731][ C0] FS: 000055555a3c8500(0000) GS:ffff888124352000(0000) knlGS:0000000000000000 [ 955.049745][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 955.049754][ C0] CR2: 0000001b2fc00ff8 CR3: 00000000661ce000 CR4: 00000000003526f0 [ 955.049763][ C0] Call Trace: [ 955.049768][ C0] [ 955.049774][ C0] unwind_next_frame+0x14f0/0x1ea0 [ 955.049804][ C0] ? save_stack+0x162/0x1e0 [ 955.049822][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 955.049840][ C0] arch_stack_walk+0x94/0xf0 [ 955.049856][ C0] ? __reset_page_owner+0x84/0x190 [ 955.049874][ C0] stack_trace_save+0x8e/0xc0 [ 955.049889][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 955.049905][ C0] ? __lock_acquire+0x4a5/0x2630 [ 955.049924][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 955.049941][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 955.049957][ C0] save_stack+0x162/0x1e0 [ 955.049972][ C0] ? __pfx_save_stack+0x10/0x10 [ 955.049992][ C0] ? page_ext_put+0x3e/0xd0 [ 955.050010][ C0] __reset_page_owner+0x84/0x190 [ 955.050028][ C0] free_unref_folios+0xac6/0x1760 [ 955.050044][ C0] ? mark_held_locks+0x40/0x70 [ 955.050062][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 955.050079][ C0] folios_put_refs+0x53c/0x840 [ 955.050097][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 955.050114][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 955.050135][ C0] shmem_undo_range+0x5e5/0x1570 [ 955.050155][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 955.050184][ C0] ? unwind_get_return_address+0x59/0xa0 [ 955.050199][ C0] ? arch_stack_walk+0xa6/0xf0 [ 955.050222][ C0] ? kasan_save_stack+0x3f/0x50 [ 955.050239][ C0] ? kasan_save_stack+0x30/0x50 [ 955.050254][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 955.050268][ C0] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 955.050288][ C0] ? dentry_free+0xc2/0x170 [ 955.050303][ C0] ? __dentry_kill+0x49a/0x600 [ 955.050316][ C0] ? dput.part.0+0x456/0x570 [ 955.050332][ C0] shmem_evict_inode+0x39e/0xbd0 [ 955.050349][ C0] ? inode_wait_for_writeback+0x171/0x390 [ 955.050367][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 955.050383][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 955.050401][ C0] ? find_held_lock+0x2b/0x80 [ 955.050415][ C0] ? evict+0x37e/0xad0 [ 955.050429][ C0] ? evict+0x37e/0xad0 [ 955.050444][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 955.050460][ C0] evict+0x3c2/0xad0 [ 955.050474][ C0] ? __pfx_evict+0x10/0x10 [ 955.050490][ C0] ? iput.part.0+0x5fd/0xf50 [ 955.050506][ C0] iput.part.0+0x605/0xf50 [ 955.050519][ C0] ? __pfx_inode_just_drop+0x10/0x10 [ 955.050538][ C0] iput+0x35/0x40 [ 955.050551][ C0] filename_unlinkat+0x466/0x730 [ 955.050565][ C0] ? __pfx_filename_unlinkat+0x10/0x10 [ 955.050582][ C0] ? do_getname+0x191/0x390 [ 955.050597][ C0] __x64_sys_unlink+0x46/0x70 [ 955.050609][ C0] do_syscall_64+0x106/0xf80 [ 955.050624][ C0] ? clear_bhb_loop+0x40/0x90 [ 955.050639][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.050652][ C0] RIP: 0033:0x7efce259b067 [ 955.050664][ C0] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 955.050675][ C0] RSP: 002b:00007ffc6100b408 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 955.050688][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efce259b067 [ 955.050696][ C0] RDX: 00007ffc6100b430 RSI: 00007ffc6100b4c0 RDI: 00007ffc6100b4c0 [ 955.050705][ C0] RBP: 00007ffc6100b4c0 R08: 00007ffc6100c4c0 R09: 00000000ffffffff [ 955.050714][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc6100c550 [ 955.050722][ C0] R13: 00007efce2631c3b R14: 00000000000e932e R15: 00007ffc6100c590 [ 955.050737][ C0] [ 955.516058][ T5883] usb 2-1: device descriptor read/64, error -71 [ 955.534755][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 955.541606][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 955.552249][ T31] Tainted: [L]=SOFTLOCKUP [ 955.556542][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 955.566568][ T31] Call Trace: [ 955.569826][ T31] [ 955.572743][ T31] dump_stack_lvl+0x100/0x190 [ 955.577409][ T31] vpanic+0x552/0x970 [ 955.581384][ T31] ? __pfx_vpanic+0x10/0x10 [ 955.585861][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 955.591996][ T31] panic+0xd1/0xe0 [ 955.595693][ T31] ? __pfx_panic+0x10/0x10 [ 955.600083][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 955.606219][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 955.612352][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 955.618482][ T31] ? watchdog.cold+0x198/0x1ca [ 955.623216][ T31] ? watchdog+0xd35/0x1050 [ 955.627608][ T31] watchdog.cold+0x1a9/0x1ca [ 955.632176][ T31] ? __pfx_watchdog+0x10/0x10 [ 955.636827][ T31] ? __kthread_parkme+0x18c/0x230 [ 955.641837][ T31] ? kthread+0x13a/0x450 [ 955.646048][ T31] ? __pfx_watchdog+0x10/0x10 [ 955.650699][ T31] kthread+0x370/0x450 [ 955.654744][ T31] ? __pfx_kthread+0x10/0x10 [ 955.659328][ T31] ret_from_fork+0x754/0xd80 [ 955.663889][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 955.668972][ T31] ? __switch_to+0x7b4/0x1120 [ 955.673636][ T31] ? __pfx_kthread+0x10/0x10 [ 955.678205][ T31] ret_from_fork_asm+0x1a/0x30 [ 955.682958][ T31] [ 955.686232][ T31] Kernel Offset: disabled [ 955.690527][ T31] Rebooting in 86400 seconds..