last executing test programs: 18.974607237s ago: executing program 2 (id=8625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0x74}}, 0x0) 18.751098853s ago: executing program 2 (id=8628): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 18.436674844s ago: executing program 2 (id=8630): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x5, 0x40, 0x24, 0x1740000}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a0500000000000000000001000000f5ff7caf73797a30000000004c000000090a010400000000000000000100000008000a4000000003080004"], 0x94}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd3ee}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r2 = dup(r1) bind$unix(r2, 0x0, 0x0) 15.705491088s ago: executing program 2 (id=8640): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 13.567240984s ago: executing program 2 (id=8647): r0 = syz_open_dev$sndpcmp(&(0x7f0000000540), 0x8, 0x151400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$rds(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800020000000000000000000000000300110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRESDEC=r7, @ANYRESOCT=r6, @ANYBLOB="6f097de4f37657d622665a601a5fabb87ee57c8135a26db7bf522da281780e34262cf2d58946bb3a9e656abf904264222d7f782dc2188eb70a890e1bdf8b4b4f", @ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYRESDEC, @ANYRES16=0x0, @ANYRESHEX=r3, @ANYRES64=r6, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r10 = memfd_create(&(0x7f0000000a80)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\x01\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xe1*\xa2c\x12.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xf7\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x1f\x00\x00\x00\x00\x00\x00\x00]\x81\xf3\xf9\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\xa3\xac9&\xe6\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\x1ag\x00\x8eCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9\x1f\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4X,\v\xa5\xca\v|\xe2L\xac\x80\xc7\x11\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\x01\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\x92\xc3V\x116jY-\x83\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\xba3?Q\x00\x00SDl\xc6\xe0\xc5\xbc\x9c\xe8\x15\xe5kJ\xc2\x8a\x9a7\xff\xd1\r\x96=\x81\xb6\xdb\xf8\x03\x91L\b\xa3\r#\x9cX\xc4\x92\x90[p\xbb]X\rm^}\xa3\xe46(\x9d-\xf8\xf9o\xa9\x13\x00\x00\x00\x00\x00\x00&2\xdfy\xd0\x15\x9d`\x83\xa4\xa6\x14^9]H\xd7/KP\xae\xa8\a.\fHo\xaa\x85@\xae\x8d\xfag\xa5F\xe6\xdf\xc1\x80Sv\x92\x01?\xf6\xad\xe2\xf9A\'\xf49\xb1uo\xc1\x95H\xd6\xdew-;\vR\x15z8\xfe\xcb\xd1]\xe1\xebF\xe8\xe7\x9b\xa81\x8eEp\x99\xd8X\x06\'\xff2\xa8Q\v\x19)\xc35\x03Z0\xfcd5\xb1\x89v?4R,\xd8\x1e\xb3\xfa \x80t\xd8\xc3 \x97A\xef\xc5.\xb1\x02b\xb9\xab\x12@\xa9\x18\x84\xb2\xf6\x16\xb7\xbb\xa4\x89G\b\xc1\n\x04\xbb\a\x14DC#V>\x88\xa09\x8aPU\xf1\xebXn%$\x13\xaa\x80\x86Fb\xc0\\Z\xb3U\x00\xd3\xbb\xbb\xe3\xfe\x9br\xa2\x06\xe63\x1a/(s\xce\xda\x83n-v\x17\xf1D\x8c\xf4x\xc1v\a%\x87\x11\x86\xc92\xb7\x06\xe2\x0e\xb1\xe3KoE#\x88\xdb\xa5\x7fc[\xfd]\r\x87\x94\xf4\x0e47Bo\x8a\xfc\xb9\xcd\xbcK\xc9\x02\x00&\xae*\xa7\xfc\xc6\xf6-T\x1f\xad.\xf0\x00\x00\xf2\xb5\xafq?/\xc0\xec7\xe6>\xa2\x02\xc7x\x98#\xb6\xac\xfd\x86\x91%\x0f\xca><\x02.\xcb3\xfc\ns\xea\xbf&\xae`\x1d\x0f\xd4g\xd7\x81g:u9\xa3\xb2(yK\xcd\xa7\xa1\xc9%\x1b\xee\xd6Ob>\x8c\xde-#W\xfc&-\xd2\xc9\x0eW\xfcV?\x81\x9f+\xdai\xf2\xd1\xb8[\xd0\x95\xa5\x04\xf9~\x93kj\xc3\xe1\xc2\xd8*SZ\xc3\xf9H/\xd7\v\xcb\x99_\x1d\xaan\"\xde\xc2\xc9\xe7>\a]Q\xce\\\xbas\xfcB\xaf\xf5\xb3-\xb95\xb9\f\x1f\xeb\xb3\xaf\xcb\x96\xfe \x81\xc0\xfb\xc7D\xf1)\x1d\xad\xf9V\xd1T\x9d\xb2\xba/\x0e\x17\xf6\xbd3F\x9e<\x1d\xf9\b\xd0\xe3Z\a\n\x14\nzY\xd2/\xe8\xdb\x066am\xad@\xbf\x11h\x9c\xcdQ\xf9\xc7\xd1g\r\x1bb\xc6\xc5\xba!`\xd7\xdcx\x92\'\x7f\xc4\xdf\xaf\x90\x94r\x93\x17\x18\xb8#gS:6\x93s\xcf\vqG', 0x0) fallocate(r10, 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000580)={0x0, 0x7, 0x4eb, 0x10, '\x00', '\x00', '\x00', 0x7fff, 0x8001, 0x9, 0x0, "34f38004c5366bf53bee725be795d41f"}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000080)={r12, 0xffff7fff}, 0x8) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') read$FUSE(r13, &(0x7f000001b000)={0x2020}, 0xfffffebf) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) 12.905462729s ago: executing program 2 (id=8651): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10.662608887s ago: executing program 1 (id=8659): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) ioctl$TCXONC(r0, 0x80045440, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001740)=""/219, 0xdb}], 0x2}, 0x10}], 0x1, 0x82, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18030000008b446c78a33a05000000000000000000001801000011af00000000000000202020fb1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff0077000000a100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095f1187e51f4fdbbbe2822e8bfb056c3f60051f678b29a318ab7a3ae9433e57cfcd1b2d5554277c76bbec1537d68f6321937cd1070"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='sys_exit\x00', r1, 0x0, 0x8}, 0x18) membarrier(0x40, 0x0) membarrier(0x20, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r3 = syz_open_dev$swradio(&(0x7f0000000480), 0x1, 0x2) pread64(r3, &(0x7f00000000c0)=""/97, 0x61, 0x5) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000040)=0x33a3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f0000000300)={0x8, r6}) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x206) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x792b6c6c) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x122) syz_io_uring_setup(0x111, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 9.600850561s ago: executing program 3 (id=8660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x5, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x7, 0x5}, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000200)) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100), 0x800) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5}, 0x38) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x800, 0x0, 0x0, 0x4, "0062ba7d820000001652bdc5fcbdc8dace6b04"}) socket$phonet(0x23, 0x2, 0x1) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aa09aaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e2000b6907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c269b80dc55e72d4ea04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) (async) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) recvmmsg(r5, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) (async) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="100c0608266be7", 0x7, 0xfffffffffffffffc) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r7, &(0x7f0000000080)='3', 0x1, 0x0) 8.646481505s ago: executing program 1 (id=8662): r0 = socket(0x10, 0x80003, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) close_range(r0, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000000000)="2b99bed88b8bcd4241c7bcc099b9b4b8d7634f9f71918dd5055a92b1ac7a141bbd59756b4a34722b", 0x28, 0x20044804, &(0x7f0000000080)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x401}}, 0x80) 8.550355324s ago: executing program 3 (id=8663): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newspdinfo={0x14, 0x24, 0x1, 0x1}, 0x14}}, 0x8004) bind$inet6(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCFLSH(r6, 0x80044704, 0x40000020001100) r7 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x371, 0xc000, 0x2c, 0xa0002f4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.44878325s ago: executing program 1 (id=8665): mincore(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000ba40)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000200)="c0c8fbb8b0", 0x5}, {&(0x7f0000000580)="41cf0a21dbd0a99e275bf1f9087d928a747c4a6f257bc3fbce4c57dc7f3688d35a2ee1dc8de5efd33b24c28e285c8292a29e54712652301874a8c6af7d17d1fe8e358f9c3db503ff0698b548c49164cf8cd4aea8", 0x54}], 0x2, 0x0, 0x0, 0x8080}}, {{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000000680)="f6428f119ce1411a2b44844c650863ece96d456a2255cf9824738c54a4ab101489044c666a3b583f993b7281ada0c87b65f09ec038ebec2d753316205419479049576d24682c0aa2001bac2f04fa60aa29e4df505720491b07fbb14e97cb5a7bee5d9a260c1c19f8d7522e268503d483275dbd6e0a6d8101e3bf65b23d87d4642cf072f181d253f176377bd64c7d54e8aa92017319f11c91fed052b80f1c66600dc0bcb820038a077b1c4f365400848631e96e18", 0xb4}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="e8f0d77137eb5a09c7c660144e9e87c3323fedb4fccc434f9c76068092ba5e1e6b534fbbfafc9c6e0e0f12f8b53a43a17a862796f115dee32b663484809bf3ecf7a867f7707ffc72acc11fe6e85e2b2f821ac9c162911b176ee2fa5406844cffc8c07cc2d96d81d90915d6e8d1aab8a6c7483901d5ef8018821b1cf9691e36ab6584", 0x82}, {&(0x7f0000001800)="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", 0xfb}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="cdacd44786cedae4ed721c2a985608bcd9a0d1ddd951e8aa396760cffdf55e112426443ec3e0307f30bf35ef1533b4a45c8eabdb1d82d5970def559684c7591699c519df3f1c265b0f8f83a8309932295bd1b5c253aa57457260dbed74ac12a37740bdc47d8a81ff1aba1b", 0x6b}, {&(0x7f0000002980)="97ae1ee329c78f1be7b38dc55cfca6ec7738989f83d9e2f017cd3e4073dc8c5eac4759bd8d7562601cf0190ebbe137a3277c274828e288ad854c7fe5c130c362494e3dec35a887a600da208daa029a46c8175ef322ad240117eb9e605002432af66ed0b866bdf0b85f3c9134e5ba4d8f56b5b5b996d98a4ad18bab3fe8b07344155a52aa3399be360a58069c1a10", 0x8e}, {&(0x7f0000002a40)="3b9c463eb4ce10a6a2f2fea3a4f3015bd5ea7932ab652bd092e3a37a04136c1c221ce0044d83d793cb5202b598e694aa1a9f4e92fcea0ab0640cdd2188b512de6cd69e712e980c5c227552dd9ad06eec848e5e7472079d208f8f3cbe153d9d595d00e480f2147cab9ff0daf60dcbb34bd55453149e3e78d762b69d70437c015cbf322fa4cffc33d49fcf67e783fb2a4764575f02ae627ec520f930b74ca27f2e65664882870a87c19c7835dbaa948f6cf2f75ea551af68ae25fa53c3eb36e8493b434c9b5e7b7b65ab3e95ec76b46f598f9ab3e989ef0d1948e663", 0xdb}, {&(0x7f0000002b40)="46f1289fb0e7b2c845bcf08568e8d2255daa38e1b37b3260439ac271e1eb396f1740eddf281349681ae8d466100a0e6895696e328af8c6fd0a462da2c42fadc5b4d3ee5695894469c274f6f337754baa54a010b751f1330dbc6267c54bcbd25b150c22e7fda2212ba4aee9a3c4a36d04525b36cf7833626fb3725cb30337d4a564dab93063a6fa40e1820e01ac66576b465a32fed2c15943fc27e50751a9f40229c570fc9892d77e6ff70721eb8c857631a6b84edd0ac252d1cbe28f24fe6b4b5441e12a713e41ca89dad4b07dd8e8e5d4a989371b0bd63261cd33fc", 0xdc}], 0x9, &(0x7f0000003180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000006200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000006280)=[{&(0x7f0000008340)="969691225c581d73fa66113edb34b9ff53a9779245bbadf33253e006b26fb4b5abcca8c17d50be048fd3af811d85b03c339ed13edccf8a46fb532f3cb70d09bf3f66274ed2a91381a6adff209da442c03d9d25b8ffda3bb7bc9b523179fc28b162835d572a32eee76e8eda3b5072f66c5c3524ac6a4007951ef6ada29f77de2bf7c594c10aaab6f0e2e2ed1cfd1b3d5e5b1b3fcf87579a4ec125fcba05dd0acaac86da8513d72651b71e31805e06be58af8f07fb078c93a8502a23553dc372a8627b3c0726", 0xc5}, {&(0x7f00000041c0)}, {&(0x7f0000008440)="ecf1af4cd68af99bb0dc6c8df390eda7cd363ad150c2a30d5bdb2bad96ce604dc19ba3d5949c2883cd7d1b965edb80a5c31773b905d42780ab2ca8db5caf3f961891f014d2713139e6d3c4bebdca800990526bd87be2f5bc94f795f4c5371bec40a93e151423446f4446663230622ada0ecdf22b9dd962ffb01868603164b0673ffc64adad2f17df77b64501552fa15e8db59efe6ca7d660e04a656c5e988adceea16ac2e7147b26d6943e7fdfa603a5343d9922e0da8a1cbc49aace00d6489913ffd9ec4104c221d7a13e0333a8117cb98359682994995c67574af29436b1b2edb0b5f5e6fb5192f1c8721d658c4f110e8b693f91c74fa334d4fbff27de3cc92e46682481bbb307648f5b9fc294cdac446c9ece5e45c4223368584389d5701e3f4b0c3b81507f9876d1c154fc75583aa4665e0d93dba66500bcf619e309656fe6fd09eba89f623a367b1860bbaa3b9b6b7053eae67ab454af7c10659949e3cb552f32a6e05f1d9ca1941f78c376fc44ffecc8de38d0981d5425d6d261b0b4db817992581d3c96793a60ec4ef6f7fa008042cc294343c03a3ccfd4b9fbbb41df3ac16e9e52161f69a59bf8599fb279908e5d55206eb3bd3da32753430eb25585c2b9edd5567eacc9f88cd4f0c9540685502008982ba82c10f480b4c0aae1a831195ec51aa5c6b9515c429301af2f88e32be9d867586959a8bd23b6598bf3678b618182d59cc6ecfc0e74dc901e1e8cdf69a625941b465075110f454c81a482e9aa5faafc29798594a98a02a604aed12b231c55d7e7082a04ab4ef8130b1aa7d998aa25b7bc23e3a16d8c4f9e690e2dbaada96fb14e23db696149e3ea8da5a1288c1bbd2a75e01565301c0a03f687f0b00290008269846c7978cd41b64723c3bde0a3c25d7b6054669b6fbc34aee15678f3f433982c44bd42a6e23c49fe358d139271579e9a747ca70d008e91837bc4d132a69aea8047d2b4603b90bd91ba9fba39cc736943b22201830a5983a6398d6452b5e48baeb87d5ce161ec05557abc4682b5ceb6c74388a4c73a8109ef4b4035e7b75d32c27c26999cc1aef29a390b778496acbf7cd4902f3dfba295008f999bc8faa362b027e2a945b842dd6767b79fde42926698dd682716501279f492203c6d04c7d391c2d5edecf37d96dcb660bfdbd9123cd2389a1bcc1d6c5d9f5b2cb56502eab77e0cc71776688c777da5d75b0115cef16d012b40f9bde9a57e5a52e5942ae91c6f3a0249cd895f94d866a530fc0ecb82d3e81ce34b39213d2c9f5e68243fb1553821c5542391889f3d13513c75fce0dc378e7ff4bdbf43f7f339d0f984e65c3d194fc82c241d6628da66471a01644c7a499ee4744880b354338dff9fa702aaab3adcd0762759ddba345b150edee50d02c84532b8bdcdafe3fd4f7b3c894ede11f9887dc4739bf37dc5302b7bf65655af48e2e5cc35941b4ea414ca9ad4dab61a7239123456903fb14856145c55b6cff9e05cf0db351aa90c316eec08c0e6dbbe0fc5ee5ca7cb10bc5a9cc4399a321f6d994a14312f7ff52cc665998ca9b3416ba62be0573f8277f85106e68d37e7d7877e6b09d58b52f9aa950984410126a9e938bd773c4f3f096a490044fd453e271395f5ceabd4d02f6343aa91c94c51e5b28afdecc831434d2d58d379f7134af66e791bc233e1732ff1ae6bcdfee6e5ae2eff13f8e13ea0a9d19d95615d154110d21e2eb5f9482f215cafcb1749aa01e7b5feb6175c428936fa78f74bdf43695f250b8e436be6e38d8b9c8bd30803117d3a468588d99bf916ad188a620dade0ed798576308bc5022d76f889025d219140d5f71b964607c651ad0843ce03664744f9cd953a953faf14e5ead5bb67113a427eb25eb9d13c2220fe86edb46fbd8e9da3019869b59628d500079ad1abf0f765e2e9bfe4b0f3de719066d2dc1e225573bd40365b1d53e2187787eaa2af88da4988ae61144e8ece2f61114da96384948d42c7a0e58e8d62b8fdfd693cb1020d11b8d66be2bb9f51660b19a46a6da35f8eb8eb2519b8e59ea1ec888489def9fd01757a4033389b6eeaad9785c6cf14b5d71c302b53f19e2746282cf07bf587ff5e800c21788282a7c3fac354fc13577684ba9e1a99639663c7639ad65f701ef4bf9847d1e367fc6e83cb9eedc74905e3edb5c8c6794698dff10ae6e984e6f30a1e06c84ea354a92b2a08dd40a403c26d0b8a74db90dec7ba1a853b07e3760611f27ed69d0c61ef1c6a4840ffe4994c1e3c0ac4e417779fec051d4d012a3ebe9ca0972c7f5ddd518aa59a313315c80246a6aec4cf8c1a440f2c15a4306cb0f8d870e6f6526ab1ae929361cd9c46f76558d42ae59e3c496837da61cffe566a4a60529d07b5fd8c599e1e129ac1a3d7e4217aab03eb9d123a947e2d71b2301321e4ca34e3cb7d583b5d96f2f36e12c0c5d0847fe08315bf8b951980b61cc7c8f6be9e0fdaa867a230a8918f2970edc034af12f375dbcd4c53b10a07a5541e48653d290eb88ae3cba7e391203613cd72ba146238b40904c5da2c6031366cecae2fb412edc9c0a7b8e642b08e9f4846992804dc3d357d47eb84ca88d9d4f5894f05aa230a408b38d268feb5927c86e726df6537fe0c1a09f2457ca806d31408e7abca59828f4cbeb270b59a1ea7b00fd81fab15250e5c0a22df7f009e243490375a421c9dca5a1693e096bc35597334d3f83cd23d7c31e8a961c2787e3789045831a7d686889e6f796c8835604f846e14f9e7035435716b94b52e9e26ad6c6d94ce4903646be79b91f1ab25e4ff4dd0526894a10a6a3ee9d13a54d41edc951d9a9a0e5833e0f4d2a38dbbf62bce60804b5c840166b0bf36f504e9a68ef96622efcd4667e95f58966c9dbabd23ab0fc1c1a7f3f51434d143c86948d019a5c0f1c670bb89dd78e742a033c4d9f8b7fd3c006306d043181cb245df2c6bdc7e1a3ece988684e95eae00c99247c44b2ed008e1c58965c125daefce3630614f68dbf7051a9efd7ed0f0810661c84847f49b5e0dcb997f21480992569262c080072c9703e23db2de73b1b1b34e0a87dedfc83853a465cc90795a38dd4efa1bf73d3ce93ae4ebbaa9db8893d7c6cc0bb97e1b2250776db29a6ba0160e6671a6836279c22cb0997e30d3934ebd1e5bc8d059c3356fda74f8c733f702e0a01ec1c9156cfdc82bd97a985cd5f09864ceb5a2bb238d83f26e393dd11d3e3bdb671dc52a24cacaabae21081cad4c909323fb40509c3d061148f16ad4fd6bd1011be72ed6db22e3a57228d9e0b12a7f26003ac388b880b797f53b6a618ea6ce354d4590157ec533bf0216abec80bfe3ee71bc944d6cdb727dab7afac52cfa537b9d4e6aa04c196e1fef981d4b08a596b2c7509763364db11a7dd7b188d5b55b32c2f97fb4e04a8dc2de8748e2f0c1799942f15fc94ec5c008be7ae85cbb9c367ed6e35bd368173dfdc8700d1cb12da1db038d987e2462c9a01beac7c3e47bd8546ed3decd8603ce1ad0f041e7295386c400904e337251e1d7c6be8c8ddeb52e3c1ffaed04eafa8fb2f612c222498ae2765d531a3d4a3ff604fd16f7ca447f525adc4dec2bbf7bbe2bc9f5c2dc4097aac410c86c4a9838c3b2af035779884201be324aa9adbe300c5015ac5c526f8e5c7c2600e67ca72e8b77477c9318ca8265d3fb1e1758a6531bc6f0281c5e333234892b7813f195ca21b7c069c66a2276c4cc9400b5fb6f5ca9b9e594da535c98980d38c0fa79620dc0621404cdef8fd10fde82e1f65754fdbe6da35a5099ca76e9200cbab07cf0e1ad949222a0659536a0a6041f707a071d5e478ca8d9965d842f7d4322122cdc4addc7638995e70b8064d13c53f673762a7d689d9abab745eadca09cb6c77a2b94cf679af1394b7a80e5e98581987acb76331f8aa5323e3f920338c4fed9b53c3e9ff57f878b1d5b27d8dd92559157278523e1bfa6f27f5d1c451e6595cb084e0ff22cdd646062f24ffe1c6a932be50dc4e95c31dfd7eac845615d8702a46ce22d0b8148dde05454502f7a3ef016537a6f5964f2dfd9680862e633899dda3ae52a458aff2ef93a9c6f0d9ca6f1a237bb6075d0d9c98574b6b209e7c8d4505238756df1aa5068d7be2d9ab4f56797d59b45b3328aeee47e1a0ef710194569aed80c94b3a90dbbde3f99ab37659dd02e4224a0b0aa3d0e212478241263986cdc56799b09c1876d0590b100ccccadc25e454a69cd6080d59d8da1322c22d4b62cc12844fa3f4f22906da01d9f991b6aa7c4b956aeefe3d4290cf41927dae54ae6408b7ef29a7201eeda7510da1c20d142cd7a3b67658ca33d4afc02dc6b2ad4b6b9f0253fcb866ad7fa3670b4f14463520b1d2ac21d1f4c8ab57914feacb8c79e37ef9caf1bbe6db5a0f682805774078f6772e002930bff2ade37c68dce582e60927074577be9aa1ee85bbdc38076c999b6a4550f7fc10a3ad147331d64133b3b707f1225d330430db6b8713b3271820e8344c6829e07a2d8661baac1b4dce33e0327bcfaaf1d06af017fe2f22f309e1001f3d284dbc66cef117422d7af798e65f864db611970a83197e845b8121894db39ff33809e9cdac99e29bf398dc626246c06ac7dd12d70646e9d80b40d182c0b297f96e8558fe8ed0657c12a594a985b89724de9d08f486960ad9a1d464a5f51049ed20a9a74085f7209f353fc2e4cad8cab429ff1fa73afbdafcd3e2f619e4ae03759c3da863eafc1d7d60c6ab9be8fe7da85c4b4576ac60a9b62997f453392146b0e26554efcac47a32e467e312a44cd06675f891f285a51b71559e260b055e5b65133fe6d69083a2e7a23584c7e18a9a8d13373df23fd89cf649eb190f849ff5adc4404aa1b0b531716f83ed6de653c8ec60f607e5cf7299696e8b2ca2f5eae5c8bafda88860f12e7b26b90096b843a477dd1b2d400095e1e10c9c952b14ac66e35b42a9fe55fe4a0d00e8d626bcc51a6f0ddd1077499f639ddb4a0249cc26a2039376bb6ac8a7266ad9afa77c70417be333ff6106e2886b28e27c82a79db7f2923f827dfb06de284bffdb6b327b5cb9fa894920879991073d6c000bf8d91f8f578a21fc6980050efdbef13e58d607325319812fc16ab50df767028d46083483e8874a7898177ba23c33d7ec92c731d925da898573cd721577d4b665073f7be096ecdeb2c5c735754948083b7166a460af61dba6844633eaae26b67bc9e8a35d36bef52bf69d9769ece1057782e30389b0af7027160bb01d5986e6d456545d71c90591a5fa93b2ff0236441e02bc1ce22b3069884a76e6acfaa33e259a221299057fc92bd0ed250923c75dc058d22c9d89309e56dac9b1855dc03800f71ee1117298ee573e0dab4a1fa929084629fe9261ae8557265ad095458dcca9887c9f8e9420e0562007f9ca98a3ea0578f713f5a8b3c69cf104856283cd2164a8e60b5fe2046306cd118c2cfac638727e4fa98a57349d0902b079ed1a4e9083ff1b7e0090d8628fbea1d03110ad0bac130e9f696275903f0f3e12554400988de1b3012f09df81da1b6afe014ab7a7ab2fe00a300a85fc75fdc1a222493c3e12202f7a19fcdd0a3f818063b15b74d25264b8665ba982046bd867474d9374d568a0a429b46c15f46fe1ea85f301b179f9789324c3f7c197842bafaf2454906c5f13610781f56b174018ce19ce4f3037f60724bcafac3cbdcb6ba98a2b431ed05d54e8d7ca51c98b3017900b32e4e1ad95e74ae7cd726890d416b09714a89ac5dc0e210fc75d6f471db817794bcc0e8e5361dc11175ba", 0x1000}, {&(0x7f0000009440)="6b5e9eac73539152a155e0740fb5dc4e2ef5e82736c9358117df07a5dcf14ea406c851a0844d8723e94e1ad1dcdfff7c1b9e6d4b6b9e60cf44087513490397972471cf9139d2fa339caf13198f4f38b45dd565e552f7bdaf94e6d0ba842f00973bc622b7d5ab390844f6f51ba3c826605f2d09fe14a6a96f82751cd338e0cdb9a468e6b185e02286aa94c4ee2f3fa9c73440973717b51782fe28d5f9ef5ab683d53f00dd7c8267138f483cbb0c6846d5b5114f87c6cdbedb5b7d1a6e3c111ab965ca8c7f505bc01eeba81f35e9168a468f313670c5886634068628869d1f0a14bd7bd54b9cbc603fa44bcb0d3141e9b67c9af995afcb8d8882b133b07c6f79184aeb473ff0a2428857465268724db3f1d8bcf1da2250581e746b2e737ef52389e9464ac42ab7d8a67029f73134c2652e7fbb694b3215d1eac3d37535b93151652a24f3c5283637e8993cf1b8214f669716c01b59cfda2a8aa5dc099e56f81e49fcb4fea2b769414b1049e5f001b49cd2affe96cf1a5cd21d02dc9b696474585167fefeaee71de69a27627e295961dcb8d6a77af08140a2526fa02beb4733309ca95a95d8419f9433b2101872f20cfc6c33b654ab57f63566133349e41bd4c722efd836e24aa7efc0d2fd1de83ee00a32bfa0df44cd75820ca45062b75630d311ba040b6ebe1b137077a1cce9e5e31e28bc1cabf1633c54ea72f18b4727aa83a4b16fdf439b74bdc398fad18a62f17106fae7d03a437003b5d4214115334e036d8a7b7123c82726a6abf0114b0c32f69c899c7599df04154d54ed011ebb4204d037f005f3f88fd5b4fbc0484b2a2b0dd2ddbfe1b3ae0e6c55aaaab1acad0455d2f6b46d8fad602ccbe08651195432464d3ee5db356beceb582b17efc1e24f59a29a009e1b1ca27fbc6b1dae784864f073efd4496a4d47ec2aa39c75c72df1f80029a639b3c37c743f0183b9ba3a80e78e720e3fe8cffe4f281a82ca9ca2f2a33733556d295691fe795c094eedac4134274ff9d64b88f4177235eed055c90c99af9aa6526524effb2ca1683f91f700f70851523b2224d69e11994c9bbc449c67f468bcfa2874cb4fe332aeac97af6d8039b600f7a5105a501941b3680d9c7daad6d186662195038eef5df3572a2cbe95939fc1eb36ac2e5b2c2dd477ae6b1646b3175fe811554043ba981ffa325fa4f9816b3185b5bf851758652f71c5baa34458be24fed156f196c49bfc1224f960f62e8ee88f8fdf057fa0370efacf0e77bb309489aa05ec44935b8123492484477ed85d044cd131ed8c438fe05267aa99c91b98e29a71a1852f86669454971693890ec144ff098ded061a1b0b220fb359cae44271b0f651104a5f71ff73cc513fc55336ca25888529af0156f872b36104939b254ea7bd686e8f3ed4b4182ab7a5c470571596d3a6c6416bcdcc5487c5279da162e72a7dc2b8095021b2bf8dc840089aaabc67521ea93163177c93c86c76906f11ece3414d001a22165e9ca7eea7af6a77b1ca3397180f333fbfaaad5affcf5097ab30aa52bf9fd3cef9be5c92893e03d0c3504b4da92ab6ab246721dde349aaf14b74212a7c49b05236bad3b62baa3e3f8f5f424259a66ae5dc114573fdce80a9000b57b706ac2b91485a0601041444cd09238a090191e748824104668818b6c963f7456006a28703d82c7c93b76ca6da7a9648800ddad9301841029c6c667fc32ed4ad6abab9e6a06d247742faa709ca1da61ce23c69757760c1551baae26053d5e5412a05e51b1f0471ba17527883706eb9f505559832db4a7b451bafa6ee1690c85a501a0543ef86878f08acb60fafa1cffa7c11e023d3ec4f62806c783cf018e6bee31d228e6c65693f09a19de069e7376b3665725011e6b466b487564a10c916ef239344b19c7f51a2ae520820a2d3ce5480f0d1381f69b602f9f97da7c0caebc4169d8d5d6558bb168f5d1cffabe8f1857b7b958a63bb44565160027bc5a6b0f545d048035e3d073d0408906e429536b7851333daff08f6c51c48b82ba3b61b79ca4dbc2a0743b5a1a95f0983e74e19b7ca775e08b7749de620d70f2bcbd84cec3916d275d5423c3a63929af56753beb3b3e95bf0f59a3d33eefd2a3b93742292607597ea98c184459d99834064a0a6162fb64875fc726c1b54e16d10660ae05a7a34dbffc72fe292d9a4be6732169a56475634214e12963ae9d291f8816098200bc671522346b8a0a145bfae0615a16ce7931f7986df18cb449d3dc32e11a5a0dac6a4470429106b0c78f8ad60a79dbcb665fe117df00616ca4bf36b07cd51900d8a41f3eadff67f4201942863271c0a6e4700a4d9f820288d1fcc2eeb8e2a3f85969dabe8ff6332fd01cb7a2c90da470d550488c309ea623dd3582819723f897724e601d3bd65894e5b4b88eef4016823f404674e6f649284f20aface5c7044331427b13f71485412ca164fba2a1b8e46e081b752e788af38311343f573aa75ba5f15ed3850a13f370242f845b6fe2c94f25de06ddac5ebceb54f4ca45ce5061dd13e4c4d28efffd3c088478bfd536168540e0b1708317efe3f24829607c40411003dd58f7389d93490dc5b15277d7b5c743ce9b3e49cd44b83a51383ec56cb72cdae3f7ef799301dbc21ad31e706aaf573f97f917f6f2b1ab2660f3e2801edd7bca8ee9805800ec3805ba30dd6c7cda2eeae14e03a4177ebba3e84414ae6002891d66d0a43382ac92b00351523fa60a4f7e6af919c6517ba544bdb43437ffddb5206a00714ab99b546f4fbfbe7c7c079485d066b8abf5f83cc020b52dab91805b15169bf0a86f4efa1f1b6e2c0e1ecbfc99e8b6c84c899b41546dbf56b20605f8ee3e0f45a258cb8c8a056d82c2a3089ed3a14f52f15bd87ef2ee6ae6030c979501c6523227c6f4bd739379bbd13b07e7cdaf6c1eb0f0fd7e2eb5320d7e98d773acae44e5443951098348cd555ba77ed6cf0336fcca678d65fcc6fd038badef1f45fd5aa372a3a6ecfc309b429038582bb42aab1ea13ee128acd87b7124280ded173c0ae741248d0d81a9926d87f49440cdef7002f406ae15578dc04a5f7d2931340d15b98dbe2bcab694599e2b7ce93480a5d4c230e7cc706ee2e47bac4d527483eebd8a2077290b302ac82e1ff3662d96384910e2b76e4a9b1fcc94d78d44bbb3b48e56109026117f466336fe4275f06552b62e0321313bccfdd450cff66835d74868bd0b7c59b7f8f726ccfb32db66317a6e9dfbd636011f1bac818b5a1546fee0ed25bb86419d2781ddaafc853bd7db86bd488b5006155d207930c0247c4a62e19670a3f22daed32a67e3b652f6df9f21cccd7037bc624dc2aff7fcb75d702592983100bde7b18571126cf644fd04ed5cdaf6f23f8efbe1c67669a302157c10790d2a0eae6af9ad259850b73aad5eddd8ac9e0f21088f45ab0a0eadd904982e16d6b8a0875fabeb18e0481205347cffdf3b6f76d276562beec31f0ae299b41878854e6542c39e9b320164d64ba4820c8d06b47ce2124f7c240d584cfd7f20bc8fc8a121deff63f4dbed3901a1ac3f9cf1b8226d8f4bd9f9b35b11a6f0db83673606f9a0afc3f13f2e501406da45d6a0c0623f1e8721ae75bd3b5eccd8e80bd031fbb957972a9540ceca290d92feab276599892ba3c301cdecaf794c7ce040fe778755a7ca4a2530cb5c874f8c21063329b9e2fa3f43720c927119e9cc4be51dae777f163bb44677ab55629af546211174f5898ce93cea9ff05715698dea0edb4f8ef2bde6ed029f5b725794aae9e31b7c97be2b0c2c99aeef2306e98ebe59fd22bdf0c7502a8bc802f055b61cafd3ab5513a1102dfd5c62e81c6be5f1148a6a5a72be132dbf6296c7216357531e4ddec387368d466b607716b3359ce438bbbe077447d909efa3e91e81954cd14e3d002c92cca7cff446f1c5164ca63ae2e03cb2ab45d0895a026e4351868e80355c393bf837e16d2022e4239a0c51594ec9c55e5a82b6378251c93deb4b5223067e441942de70b5d1c5b50d5391a6524ea25fa5bbba1941b532583123adcbc27d55a3b4958a86e9060713151c1c7da7b1f84eabd6b55f53f74c69336f7c4cc5227d5f8c3c73454c3cc352142ce0bca04c4511fe9ab11fde86646c6d9b53aaa555b58588881a42c40c4a33189c328c00f55cc4b1fd3bb048aaffb416c2d959e06e5d7bc9e02e2883c2685e77fafd0d038cd5763386246f07df82cd755502b0d30601d7354174fda21991291d20c4656ccf2ec6dbfd85e4e83018960f677a703a3316846aa57368d189355ef32d2f6e51796c43e6d53344077bdf5fd20d3851eab7e2bf7822221846ef75e131625c6928344dc4ce8a5d8aa50bbb64f598604805eb4b56dc02d764d8870e75c6862838c153b30e0cca64bd7029d691a23665435281eb9417d81949652bbef5a342ca9e9755e48baaae362a4aea4525632912f6b38e52c8b0daf53c71026cf9a4822c5524d102af4b35940a7fe18d922c3d3a73ab4b73aabb77c664d2e054411bd6e7d09ae6543d1cee3fe49ce94d058f9fdbcead0728767e94f77af3cab7923520bca595c57bfbe338f669ecda4a13a3da95f253349e5a6bcd131d9bf26f73249abe909ad1d14166380f6bdab4a8fcab74c57f4f4feaab6e9a18820171eef7b90640f92e842039425b6cd3936d51485f58e34c1e2514c16787f5513153eec77c4de3396665223d2226454fd7b9863d1294b9bf777613014c0507a3e61572c2282b254480b1a952cb13dbd1547c602d076bc309770e63ef90c96234b1b71b9bb7eedca02632ceae4f6db8a2a36789f25729d14ac3e38f1083e28fa35a7dce78bf6f8a7c358d53a11333812cced2cb9ad4efe45f6ba3152bf229b649dc35968af5cde38cc25dab19567581182a15388564c992aa5de08a08d2976528ea940c52119c0d8370a555c44d23f44b623033eaf1b16d81d81314f838568e42a6b03c5e308487464e98468cf52cdcf193f06ecd1e883563f6506759d9808ad36814e7b188edf0c674ac149c989a4a613d0125f5ba926031578bfffa197083f0a60bbbc9434c55f6c8f39b58578be70d30c411641c8efec63f784c678ea713e76978d2a36de6fa168ea64cfefed1e9efd3feab8239929b6f77974613f83e8cbd5a89cb534a36da2472e3524ac4c41d69a08116ed98f030c75808f236d071860f921958bb54b392f97f11b85d9ad16d34bf05d2c4112fb7805780d42fb3eaa859a3cd5892110d28b5a31ea111e666d72663a2c738b15b01360eade1c2f17fbef633d90adbd82f5839f0326c34b708c1b0033fc97f8b3492b111d36e06af3260755dcf29d87d2e069252dac2603dcc50fe242442589b7b083291b242f204bb81bfd1e8318aa3f668c04a4a9d7438196527ccb52a675164acaddd9d12832180054e2be4935b167737f5f6d377e3231fda70dae01f6f93d94eb92b674e07157a9982ff903745fedb1f99a800c9b29f8e02fe9c12658e18236649666941ab891753eb51c2f654888a9bc9f3a7d0987f6512201aabc21aac3d72e85997b4b9d2ba255ebd8f58932b8c29a72c7a46246d15c15db918567b501e630a6f922304529275534a21d80aef36644841f0d39f439fbbfcd613ea5ffde406afb4070e41eb489b88ed8f4e8f279e0b3778dd5c3130aa12625dcddb5205a97a2c2d8f42f02746bc1c2dd1b888ef15a0c83e7584714a306f2f48195a0eb8617d623567f6b489e4163d23caaf48167ef7ca804cdb996795c3abc50a6da64446a0b6b0d453601bad325fcbc9073c035", 0x1000}], 0x4, &(0x7f0000002d00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0001000000000001000000020000522d5ca4c60efca651c8d87225900b98200cc1da6e2fec117424531e9bf1bb42d5a2cabb98ed1a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x4000080}}, {{&(0x7f000000a600)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f000000a840)=[{&(0x7f000000a680)="e276a3b2194758fe2ef282eeea2c6cdd6c509d37430a84b3608eeb5cb4f9329fc0576df3cb6e65a14d23031c3ea79e92b7152ce7f994d3c19d3d7c8939b5af2481a492a27d42c483a3c8c39549993b0208430fff067b248cc2361f9c0521147c0148d3b577fbb72979853a90f81dd869f7132741472ccd221d94e78b3128b70d", 0x80}, {&(0x7f000000a700)="6e7b59cf", 0x4}, {&(0x7f000000a740)="01ceee7f92ca1e8c817df6026e6f0a94f1280db279f286525b6f9f8092e7a1b0eae6f3dd3c4a340772b88d9b55021fbef4fd89e203c1d306124f97b27480e17a8016e4e8f752274310156d33280b6e0b", 0x50}, {&(0x7f000000a7c0)="bb3d18005ed82d7c34154bb7658c2b6ddee1b3ddb8eb2516748835b2d57eceda55db3e7af4ffef81de73769ee846b2609fad957b54d45a29ff45524ff63113ef7ce828e10765c549537d69b2a23fe331cb1876d1ff", 0x55}], 0x4, 0x0, 0x0, 0x8000}}, {{&(0x7f000000a880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000ba00)=[{&(0x7f000000a900)="a85fcc1a3890640dc8dfdb1bb146be4f931253", 0x13}, {&(0x7f000000a940)="d25aa298796a82c3e275e33358635ac46f14405de34816a4eaed7a9c2a6122f0abf5b5af24faeeb0e88968423736a53cf1ca2a06bf2a049ab410ba90fa5f8ce700df88fb9152e56119e2b777157ac13e179523e6dd7e313fc7605e9736401afa8e7e1660730d014903e803794823926740d19eec4ec902b7bcd01b6be4e09a75124bd8e66db144373edfbc2d1d55116423daeab76f81cb7ce34c56eae0dd91f5ffde847020aa9e63", 0xa8}, {&(0x7f000000aa00)="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", 0x1000}], 0x3, 0x0, 0x0, 0x20000001}}], 0x5, 0x80) socket$inet_sctp(0x2, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f000000eb40)) socket$inet(0x2, 0x2, 0x101) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x8) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x6a, 0x2, 0x0, &(0x7f0000000300)) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff8809430fc7184277c5f56af63a2f8ca4f219f0c31f1a453ff631cfc9cf082ee8cac921420941d4caa9c530d8451a11d9500c297c92648fd11a85b9707c22e453ab8458"], 0x50) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000002c0)=0xe2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000463628abe69545790000000000085c8a3f9ef89be19b6b28b922245fad4f3e005fd6cb2d398d36c691819130bac364b12bbc2487e2f8788990e61053351990ac2822db84d9158107f5021566484bb05ead04867538573c9516747a126481aa49414543b8d9d3bb1fdb89bfe8b6dfae70f4137777c2d48e7617c99a8825a8108fe76dd5cd9c6dbce6b18c438396653d6dbfb5b3aa080e6cd0ec723da3c14342677c6a64e7b9c005f5b018df5fed534422029a2ef659f51b6dc3542f8a33ccbd12b996242753bfbc2433d6324c3f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES8=r1], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(r2, &(0x7f0000000040)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e25, 0x0, @loopback}, 0x1c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 7.662298779s ago: executing program 0 (id=8667): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000022c000/0x3000)=nil) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) listen(r3, 0x7) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000400)=0x6, 0x4) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) memfd_create(0x0, 0x3) socket$tipc(0x1e, 0x5, 0x0) socket(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0x401, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000000)=0x3, 0x4) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x34, 0xdb, 0xce, 0x10, 0x424, 0xcf18, 0x3813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x80, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0xe1, 0x0, 0x0, 0x21, 0xb9, 0x43, 0x3}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 7.576887538s ago: executing program 3 (id=8668): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x6a186bff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x100000001]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x100000, 0x9, 0x80, 0x2, 0x8eef, 0x0, 0x0, 0x20, 0x6}}, 0x50) r4 = dup(r1) ioctl$TCXONC(r4, 0x540a, 0x0) write$6lowpan_control(r4, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$TCXONC(r4, 0x540a, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$sndseq(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r9 = io_uring_setup(0x3f1, &(0x7f0000000140)={0x0, 0x0, 0x3000}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r10, 0xff, 0x7, 0xb) poll(&(0x7f0000000080)=[{r9, 0x200}], 0x1, 0x6) 7.526077107s ago: executing program 4 (id=8669): syz_emit_ethernet(0x27, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000200)=0x1b) ioctl$TIOCGPTPEER(r3, 0x5441, 0xb3d) (fail_nth: 3) 5.726528378s ago: executing program 3 (id=8670): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) capset(0x0, &(0x7f0000000100)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) r2 = syz_io_uring_setup(0x14f, &(0x7f0000000140)={0x0, 0x8206, 0x400, 0x43, 0x26}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 5.162678655s ago: executing program 1 (id=8671): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000080)={@remote, @random="13d9887cfd24", @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x5}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xe, @remote, @multicast2, @broadcast, @multicast2}}}}, 0x0) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x315}, &(0x7f0000000340), &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 5.110035418s ago: executing program 4 (id=8672): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x140) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) poll(&(0x7f0000000340), 0x0, 0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x84c}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x400001, @loopback, 0x9}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xff}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="ab6f868f535bc0378ba31bee42", 0xd}], 0x1}}], 0x2, 0x4008851) 4.018857105s ago: executing program 0 (id=8673): r0 = syz_open_dev$sndpcmp(&(0x7f0000000540), 0x8, 0x151400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$rds(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800020000000000000000000000000300110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRESDEC=r7, @ANYRESOCT=r6, @ANYBLOB="6f097de4f37657d622665a601a5fabb87ee57c8135a26db7bf522da281780e34262cf2d58946bb3a9e656abf904264222d7f782dc2188eb70a890e1bdf8b4b4f", @ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYRESDEC, @ANYRES16=0x0, @ANYRESHEX=r3, @ANYRES64=r6, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r10 = memfd_create(&(0x7f0000000a80)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\x01\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xe1*\xa2c\x12.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xf7\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x1f\x00\x00\x00\x00\x00\x00\x00]\x81\xf3\xf9\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\xa3\xac9&\xe6\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\x1ag\x00\x8eCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9\x1f\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4X,\v\xa5\xca\v|\xe2L\xac\x80\xc7\x11\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\x01\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\x92\xc3V\x116jY-\x83\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\xba3?Q\x00\x00SDl\xc6\xe0\xc5\xbc\x9c\xe8\x15\xe5kJ\xc2\x8a\x9a7\xff\xd1\r\x96=\x81\xb6\xdb\xf8\x03\x91L\b\xa3\r#\x9cX\xc4\x92\x90[p\xbb]X\rm^}\xa3\xe46(\x9d-\xf8\xf9o\xa9\x13\x00\x00\x00\x00\x00\x00&2\xdfy\xd0\x15\x9d`\x83\xa4\xa6\x14^9]H\xd7/KP\xae\xa8\a.\fHo\xaa\x85@\xae\x8d\xfag\xa5F\xe6\xdf\xc1\x80Sv\x92\x01?\xf6\xad\xe2\xf9A\'\xf49\xb1uo\xc1\x95H\xd6\xdew-;\vR\x15z8\xfe\xcb\xd1]\xe1\xebF\xe8\xe7\x9b\xa81\x8eEp\x99\xd8X\x06\'\xff2\xa8Q\v\x19)\xc35\x03Z0\xfcd5\xb1\x89v?4R,\xd8\x1e\xb3\xfa \x80t\xd8\xc3 \x97A\xef\xc5.\xb1\x02b\xb9\xab\x12@\xa9\x18\x84\xb2\xf6\x16\xb7\xbb\xa4\x89G\b\xc1\n\x04\xbb\a\x14DC#V>\x88\xa09\x8aPU\xf1\xebXn%$\x13\xaa\x80\x86Fb\xc0\\Z\xb3U\x00\xd3\xbb\xbb\xe3\xfe\x9br\xa2\x06\xe63\x1a/(s\xce\xda\x83n-v\x17\xf1D\x8c\xf4x\xc1v\a%\x87\x11\x86\xc92\xb7\x06\xe2\x0e\xb1\xe3KoE#\x88\xdb\xa5\x7fc[\xfd]\r\x87\x94\xf4\x0e47Bo\x8a\xfc\xb9\xcd\xbcK\xc9\x02\x00&\xae*\xa7\xfc\xc6\xf6-T\x1f\xad.\xf0\x00\x00\xf2\xb5\xafq?/\xc0\xec7\xe6>\xa2\x02\xc7x\x98#\xb6\xac\xfd\x86\x91%\x0f\xca><\x02.\xcb3\xfc\ns\xea\xbf&\xae`\x1d\x0f\xd4g\xd7\x81g:u9\xa3\xb2(yK\xcd\xa7\xa1\xc9%\x1b\xee\xd6Ob>\x8c\xde-#W\xfc&-\xd2\xc9\x0eW\xfcV?\x81\x9f+\xdai\xf2\xd1\xb8[\xd0\x95\xa5\x04\xf9~\x93kj\xc3\xe1\xc2\xd8*SZ\xc3\xf9H/\xd7\v\xcb\x99_\x1d\xaan\"\xde\xc2\xc9\xe7>\a]Q\xce\\\xbas\xfcB\xaf\xf5\xb3-\xb95\xb9\f\x1f\xeb\xb3\xaf\xcb\x96\xfe \x81\xc0\xfb\xc7D\xf1)\x1d\xad\xf9V\xd1T\x9d\xb2\xba/\x0e\x17\xf6\xbd3F\x9e<\x1d\xf9\b\xd0\xe3Z\a\n\x14\nzY\xd2/\xe8\xdb\x066am\xad@\xbf\x11h\x9c\xcdQ\xf9\xc7\xd1g\r\x1bb\xc6\xc5\xba!`\xd7\xdcx\x92\'\x7f\xc4\xdf\xaf\x90\x94r\x93\x17\x18\xb8#gS:6\x93s\xcf\vqG', 0x0) fallocate(r10, 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000580)={0x0, 0x7, 0x4eb, 0x10, '\x00', '\x00', '\x00', 0x7fff, 0x8001, 0x9, 0x0, "34f38004c5366bf53bee725be795d41f"}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000080)={r12, 0xffff7fff}, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f000001b000)={0x2020}, 0xfffffebf) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000800, &(0x7f00000004c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) 3.904935017s ago: executing program 3 (id=8674): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000017800000000009500"/32], &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r3, 0x3562b000) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@buf={0x87, &(0x7f00000000c0)="7da143819ca7875145fce761c6b13b915e2ebf14818ead6f5ee84eedc008e92998626b8f7f66126fb1a3c0e21aac28a5c7db96086897aa61bc5dd66341c1d706db42c82d2a794c1ed9b3733234f747722bf451ad525bb052722aaa02e5050a9d7abef06dbd90acee70c42ae1cb174e6fa4be617b3fe589a6eaa7695d0689c088054d184618fbbe"}) fadvise64(r0, 0x9, 0x8, 0x4) 3.344669994s ago: executing program 1 (id=8675): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x800) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0xd, &(0x7f0000000000)={0x26, 0x0, 0x4}) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$can_raw(r3, 0x0, 0x4000855) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="bfd278ec02000000f1ffffffffffffff000000004c19a60dc096254c75a226904967433970dc82382b62961c3d0fa838e68e72f9d90056fa13f509", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0xf, &(0x7f000001b700)=ANY=[@ANYBLOB="1800000040000000000000000080000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/crash_elfcorehdr_size', 0x5a9282, 0xa4) sendfile(r5, r5, 0x0, 0x68) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000000329078000000000000000000004e20009c90780100000004000000d57e3b0d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67000000000000000000006f0f9565df74d2653a13d554fee0e7be27c873db314d"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0xc080}, 0x4000080) socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000500)={'gre0\x00'}) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.337204499s ago: executing program 4 (id=8676): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be", 0x97}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x4, 0x1e, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1c8, 0x29, 0x36, {0x5e, 0x35, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x3a8}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e820415008", 0xe98}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.672999472s ago: executing program 4 (id=8677): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newspdinfo={0x14, 0x24, 0x1, 0x1}, 0x14}}, 0x8004) bind$inet6(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCFLSH(r6, 0x80044704, 0x40000020001100) r7 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x371, 0xc000, 0x2c, 0xa0002f4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.478418481s ago: executing program 0 (id=8678): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f00000029c0)}, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) listen(r3, 0x0) close(r3) 1.96621177s ago: executing program 3 (id=8679): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa0800, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x80000}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a5, 0x14}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003a00)) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = syz_usb_connect$hid(0xa, 0x3f, &(0x7f0000001400)={{0x12, 0x1, 0x140, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1c04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x1aa}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd, 0x5, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0xec, 0x14}}]}}}]}}]}}, &(0x7f0000001640)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x300, 0xb, 0x40, 0x2b, 0x10, 0x2}, 0x112, &(0x7f0000001480)={0x5, 0xf, 0x112, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0x8, 0xbb77}, @generic={0xe5, 0x10, 0x2, "5d5fad67512b9e72e40c105d5a1346077b1aeb97d76d8932ef01de3c4fcb9b2c6c840cae422b1e6fa155d94150091abc06fe1840b5949c6f90a1b3eff6ea88509a85ff5356a446c8b3421486b7af7f852cd7b9fe31439b93a89c6f2a97a47a04c7796e42b421d72ebc1d3e20911428e849913cb46212e4c19354b1fa1ac66ec76f8a3025dcd7451563a0a84d3d4397b69ff799aa58c08da23d8cf7f990fdb5ae50a7bfb57524f269f022764a0fba18f5790a630b07b18266e796eff37ba046ee5cd0fb87bb7995589e7439aaf8dcc254735479271b123ff88ed0a34bbec3fed846b6"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x7fffffc, 0xf, 0xa2, [0x0, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x3, 0x2, 0x8}]}, 0x2, [{0x20, &(0x7f00000015c0)=@string={0x20, 0x3, "f7d5c611ff723d720a312871f2eaf9d86c093ca84eb27e38d8c9e14c39f0"}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x41b}}]}) syz_usb_control_io$hid(r7, &(0x7f00000018c0)={0x24, &(0x7f0000001680)={0x0, 0x1, 0xe6, {0xe6, 0xc, "0a2de02764ae2dd7c61465a5e4c183d8dd3512b3f65ff1536cf46e89adab413f9226c6f69a925add21fe502fd9a6d9d8e9ff32f0569411eda24347a94c37d0dd382e4f95e0b577a432d959f51722f2a10031d72d3c1f9ddf55791b6e0b9015285f52451168db060807e09fed60b6e0e07055242e645e489f0d7316682f03fd62e17cd1ad48d4881842e4d140e7ad2ddb3d7391636c74834cde4a1710709d3e61b6d35b6503e2e860406f7827e1dc9687f95fa78d970bc8c595fc4d322d47b2773779d24def75f0ac9083dc43709daa6ffb0b0f1fe050b9d64a5308c25b8f554c40024d41"}}, &(0x7f0000001780)={0x0, 0x3, 0xb9, @string={0xb9, 0x3, "e275c5a8451205ad60e589036754314601d469bd93d580b2f1e2d1f7b52d31921dcf3c6975b93b8217db2252831ece2ca056b6affe7d8ad6f675c84793cf81f520e3657436fbdbc591791d9ae15a0d20368508df592c05b0a3fd6334f228ba8a116dde4ec63c9756a67003b6b7e434c270faea093f0b3b333de6394020e1303406733634795885b2907821e9adf16aa8b02edc30f86c7fd80aff7deef201852c056da666e4b24d09a13146d13a3d783bb92ee0fbffa3a6"}}, &(0x7f0000001840)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "93b0b78b"}]}}, &(0x7f0000001880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xfd, 0x1, {0x22, 0x32a}}}}, &(0x7f0000001a80)={0x2c, &(0x7f0000001900)={0x0, 0x3, 0x15, "1ff92d8fba0bf06f3a87f62e6744c92f8a8fb92929"}, &(0x7f0000001940)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000001980)={0x0, 0x8, 0x1}, &(0x7f00000019c0)={0x20, 0x1, 0x59, "680efbeba4828150ed6f93f18b3ac3a729a5e19d4a47953c63cbd169a412fc1d7f968ecceea508c68aa9592e3a49bc9f39021358ee972b7cc0feefc74900a7f0b985b97bcd8ceca11c84ae5afd6942ffe71a4b842fe0d2d5e4"}, &(0x7f0000001a40)={0x20, 0x3, 0x1, 0x5}}) chdir(&(0x7f0000000400)='./file0\x00') syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="400a06400000d6afa8abcfd5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) 1.946321804s ago: executing program 0 (id=8680): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 1.7172762s ago: executing program 4 (id=8681): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000940), 0x120b, 0x80) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000001b80)={0x0, "db5e6c52e2bfb0406e3cc44f1407be077f3d326198e867761a36cc24da6eaff6", 0x5, 0x400, 0x2, 0x1, 0x4, 0x2, 0x0, 0x101}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}, "17c1b7df60c70000"}}}}}, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 1.64016263s ago: executing program 1 (id=8682): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000100), &(0x7f0000000180)=r0}, 0x20) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x17, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0xb}, [@tail_call, @alu={0x7, 0x1, 0x3, 0xb, 0x5, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0x2, 0x7, 0x5, 0x80, 0x4}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000008ec22fbb972b23f25000000000200"/27], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) r5 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) setpgid(0x0, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r6, 0x58, &(0x7f0000001500)}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x901) mount(0x0, 0x0, 0x0, 0x2000, 0x0) 926.476989ms ago: executing program 0 (id=8683): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x6, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (fail_nth: 3) 859.353176ms ago: executing program 0 (id=8684): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r4}, 0x10) syz_io_uring_setup(0x3676, &(0x7f000000a9c0)={0x0, 0x3468, 0x0, 0x0, 0x10000000}, &(0x7f000000aa40), &(0x7f000000aa80)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x2880, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000080)=""/185, 0xb9}, {&(0x7f0000000140)=""/240, 0xf0}, {&(0x7f0000000240)=""/195, 0xc3}], 0x3, 0x2, 0x5) 0s ago: executing program 4 (id=8685): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x3a1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x1, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x22, 0x3, {[@global=@item_012={0x1, 0x1, 0x3, "d7"}, @global=@item_012={0x0, 0x1, 0x3}]}}, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r8}, 0x20) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r8, r10, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) kernel console output (not intermixed with test programs): de 0x0c1a failed: -4 [ 2116.313902][ T1667] can: request_module (can-proto-3) failed. [ 2116.656551][ T30] audit: type=1400 audit(1761875230.791:2646): avc: denied { setopt } for pid=1674 comm="syz.3.7929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2117.601198][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout [ 2117.680582][ T5818] Bluetooth: hci3: command 0x0405 tx timeout [ 2117.760978][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 2117.761023][ T1378] Bluetooth: hci2: command 0x040f tx timeout [ 2118.308021][ T1378] Bluetooth: hci5: command 0x0405 tx timeout [ 2119.064494][ T1714] netlink: 7 bytes leftover after parsing attributes in process `syz.4.7939'. [ 2119.183732][ T1720] FAULT_INJECTION: forcing a failure. [ 2119.183732][ T1720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2119.197065][ T1720] CPU: 0 UID: 0 PID: 1720 Comm: syz.1.7942 Not tainted syzkaller #0 PREEMPT(full) [ 2119.197094][ T1720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2119.197107][ T1720] Call Trace: [ 2119.197115][ T1720] [ 2119.197123][ T1720] dump_stack_lvl+0x16c/0x1f0 [ 2119.197157][ T1720] should_fail_ex+0x512/0x640 [ 2119.197186][ T1720] _copy_from_user+0x2e/0xd0 [ 2119.197212][ T1720] __sys_bpf+0x248/0x4980 [ 2119.197242][ T1720] ? rcu_is_watching+0x12/0xc0 [ 2119.197271][ T1720] ? __pfx___sys_bpf+0x10/0x10 [ 2119.197302][ T1720] ? __schedule+0x3fc1/0x5de0 [ 2119.197340][ T1720] ? __pfx___schedule+0x10/0x10 [ 2119.197365][ T1720] ? lockdep_hardirqs_on+0x7c/0x110 [ 2119.197420][ T1720] __x64_sys_bpf+0x78/0xc0 [ 2119.197447][ T1720] do_syscall_64+0xcd/0xfa0 [ 2119.197477][ T1720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2119.197498][ T1720] RIP: 0033:0x7f3ef298efc9 [ 2119.197515][ T1720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2119.197534][ T1720] RSP: 002b:00007f3ef3893038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2119.197554][ T1720] RAX: ffffffffffffffda RBX: 00007f3ef2be6090 RCX: 00007f3ef298efc9 [ 2119.197568][ T1720] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 2119.197581][ T1720] RBP: 00007f3ef3893090 R08: 0000000000000000 R09: 0000000000000000 [ 2119.197594][ T1720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2119.197606][ T1720] R13: 00007f3ef2be6128 R14: 00007f3ef2be6090 R15: 00007ffeac315908 [ 2119.197636][ T1720] [ 2122.060585][ T30] audit: type=1400 audit(1761875236.131:2647): avc: denied { write } for pid=1758 comm="syz.3.7956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2122.766855][ T1774] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7959'. [ 2123.074953][ T1784] FAULT_INJECTION: forcing a failure. [ 2123.074953][ T1784] name failslab, interval 1, probability 0, space 0, times 0 [ 2123.087720][ T1784] CPU: 0 UID: 0 PID: 1784 Comm: syz.3.7961 Not tainted syzkaller #0 PREEMPT(full) [ 2123.087747][ T1784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2123.087759][ T1784] Call Trace: [ 2123.087768][ T1784] [ 2123.087774][ T1784] dump_stack_lvl+0x16c/0x1f0 [ 2123.087802][ T1784] should_fail_ex+0x512/0x640 [ 2123.087816][ T1784] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 2123.087835][ T1784] should_failslab+0xc2/0x120 [ 2123.087849][ T1784] kmem_cache_alloc_node_noprof+0x78/0x770 [ 2123.087865][ T1784] ? copy_process+0x4b5/0x76a0 [ 2123.087883][ T1784] ? copy_process+0x4b5/0x76a0 [ 2123.087896][ T1784] copy_process+0x4b5/0x76a0 [ 2123.087912][ T1784] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 2123.087932][ T1784] ? __pfx_copy_process+0x10/0x10 [ 2123.087950][ T1784] ? kernel_clone+0x2b5/0x930 [ 2123.087966][ T1784] kernel_clone+0xfc/0x930 [ 2123.087981][ T1784] ? __pfx_kernel_clone+0x10/0x10 [ 2123.088001][ T1784] ? __pfx___schedule+0x10/0x10 [ 2123.088016][ T1784] ? lockdep_hardirqs_on+0x7c/0x110 [ 2123.088034][ T1784] __do_sys_clone+0xce/0x120 [ 2123.088048][ T1784] ? __pfx___do_sys_clone+0x10/0x10 [ 2123.088072][ T1784] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 2123.088089][ T1784] do_syscall_64+0xcd/0xfa0 [ 2123.088106][ T1784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2123.088117][ T1784] RIP: 0033:0x7fbde698efc9 [ 2123.088128][ T1784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2123.088138][ T1784] RSP: 002b:00007fbde78cffe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2123.088150][ T1784] RAX: ffffffffffffffda RBX: 00007fbde6be6180 RCX: 00007fbde698efc9 [ 2123.088157][ T1784] RDX: 0000000000000000 RSI: 00000000ffffff80 RDI: 000000000c040080 [ 2123.088165][ T1784] RBP: 00007fbde78d0090 R08: 0000000000000000 R09: 0000000000000000 [ 2123.088172][ T1784] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 2123.088178][ T1784] R13: 00007fbde6be6218 R14: 00007fbde6be6180 R15: 00007fff3e4ad858 [ 2123.088194][ T1784] [ 2124.151481][ T1794] /dev/nullb0: Can't open blockdev [ 2124.173633][ T1794] FAULT_INJECTION: forcing a failure. [ 2124.173633][ T1794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2124.186845][ T1794] CPU: 1 UID: 0 PID: 1794 Comm: syz.3.7964 Not tainted syzkaller #0 PREEMPT(full) [ 2124.186874][ T1794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2124.186887][ T1794] Call Trace: [ 2124.186895][ T1794] [ 2124.186904][ T1794] dump_stack_lvl+0x16c/0x1f0 [ 2124.186939][ T1794] should_fail_ex+0x512/0x640 [ 2124.186974][ T1794] _copy_from_user+0x2e/0xd0 [ 2124.187000][ T1794] __sys_bpf+0x248/0x4980 [ 2124.187029][ T1794] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2124.187058][ T1794] ? do_raw_spin_lock+0x12c/0x2b0 [ 2124.187086][ T1794] ? __pfx___sys_bpf+0x10/0x10 [ 2124.187115][ T1794] ? __schedule+0x3fec/0x5de0 [ 2124.187144][ T1794] ? rcu_is_watching+0x12/0xc0 [ 2124.187171][ T1794] ? trace_sched_exit_tp+0xd1/0x120 [ 2124.187196][ T1794] ? __schedule+0x11a3/0x5de0 [ 2124.187264][ T1794] __x64_sys_bpf+0x78/0xc0 [ 2124.187294][ T1794] ? lockdep_hardirqs_on+0x7c/0x110 [ 2124.187323][ T1794] do_syscall_64+0xcd/0xfa0 [ 2124.187354][ T1794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2124.187376][ T1794] RIP: 0033:0x7fbde698efc9 [ 2124.187394][ T1794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2124.187415][ T1794] RSP: 002b:00007fbde78d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2124.187435][ T1794] RAX: ffffffffffffffda RBX: 00007fbde6be6180 RCX: 00007fbde698efc9 [ 2124.187450][ T1794] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 000000000000000a [ 2124.187464][ T1794] RBP: 00007fbde78d1090 R08: 0000000000000000 R09: 0000000000000000 [ 2124.187477][ T1794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2124.187490][ T1794] R13: 00007fbde6be6218 R14: 00007fbde6be6180 R15: 00007fff3e4ad858 [ 2124.187521][ T1794] [ 2125.629913][ T1813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=360 sclass=netlink_route_socket pid=1813 comm=syz.1.7969 [ 2125.877321][ T1813] kernel profiling enabled (shift: 63) [ 2125.891924][ T1813] profiling shift: 63 too large [ 2125.941356][ T1814] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2125.947591][ T1814] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2125.953923][ T1814] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2125.960134][ T1814] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2126.072898][ T1814] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2126.237944][ T1822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7973'. [ 2126.249183][ T1822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7973'. [ 2126.311263][ T1823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7973'. [ 2126.816661][ T1830] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 2126.827962][ T1830] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 2126.844364][ T1830] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2127.912580][ T1852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7977'. [ 2127.922794][ T1852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7977'. [ 2128.000585][ T5818] Bluetooth: hci2: command 0x040f tx timeout [ 2128.065216][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 2128.071687][ T5818] Bluetooth: hci3: command 0x0405 tx timeout [ 2128.077805][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout [ 2128.084308][ T5818] Bluetooth: hci5: command 0x0405 tx timeout [ 2130.336632][ T30] audit: type=1400 audit(1761875244.451:2648): avc: denied { map } for pid=1874 comm="syz.2.7985" path="socket:[150205]" dev="sockfs" ino=150205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2131.681675][ T1889] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 2131.689918][ T1889] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 2131.698469][ T1889] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2133.021935][ T1921] FAULT_INJECTION: forcing a failure. [ 2133.021935][ T1921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2133.056424][ T1921] CPU: 0 UID: 0 PID: 1921 Comm: syz.1.7999 Not tainted syzkaller #0 PREEMPT(full) [ 2133.056456][ T1921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2133.056467][ T1921] Call Trace: [ 2133.056475][ T1921] [ 2133.056483][ T1921] dump_stack_lvl+0x16c/0x1f0 [ 2133.056517][ T1921] should_fail_ex+0x512/0x640 [ 2133.056546][ T1921] _copy_from_user+0x2e/0xd0 [ 2133.056573][ T1921] get_timespec64+0x8b/0x240 [ 2133.056603][ T1921] ? __pfx_get_timespec64+0x10/0x10 [ 2133.056633][ T1921] ? __io_timeout_prep+0x37a/0xa10 [ 2133.056667][ T1921] __io_timeout_prep+0x45f/0xa10 [ 2133.056701][ T1921] io_submit_sqes+0x855/0x2710 [ 2133.056747][ T1921] __do_sys_io_uring_enter+0xd69/0x1630 [ 2133.056782][ T1921] ? __fget_files+0x20e/0x3c0 [ 2133.056803][ T1921] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 2133.056836][ T1921] ? fput+0x9b/0xd0 [ 2133.056861][ T1921] ? ksys_write+0x1ac/0x250 [ 2133.056880][ T1921] ? __pfx_ksys_write+0x10/0x10 [ 2133.056908][ T1921] do_syscall_64+0xcd/0xfa0 [ 2133.056940][ T1921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2133.056961][ T1921] RIP: 0033:0x7f3ef298efc9 [ 2133.056978][ T1921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2133.057002][ T1921] RSP: 002b:00007f3ef38b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2133.057022][ T1921] RAX: ffffffffffffffda RBX: 00007f3ef2be5fa0 RCX: 00007f3ef298efc9 [ 2133.057037][ T1921] RDX: 00000000c1040000 RSI: 0000000000000627 RDI: 0000000000000003 [ 2133.057050][ T1921] RBP: 00007f3ef38b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2133.057062][ T1921] R10: 0000000000000043 R11: 0000000000000246 R12: 0000000000000001 [ 2133.057074][ T1921] R13: 00007f3ef2be6038 R14: 00007f3ef2be5fa0 R15: 00007ffeac315908 [ 2133.057104][ T1921] [ 2133.810863][T31606] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 2133.974267][T31606] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2134.080805][T31606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.098883][T31606] usb 4-1: Product: syz [ 2134.106138][T31606] usb 4-1: Manufacturer: syz [ 2134.267837][T31606] usb 4-1: SerialNumber: syz [ 2134.283396][T31606] usb 4-1: config 0 descriptor?? [ 2134.292115][T31606] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 2134.300259][T31606] pctv452e: pctv452e_power_ctrl: 1 [ 2134.300259][T31606] [ 2134.309866][T31606] usb 4-1: selecting invalid altsetting 3 [ 2134.327682][T31606] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2134.327682][T31606] [ 2134.340745][ T1942] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 2134.348977][ T1942] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 2134.403466][ T1942] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 2134.414835][T31606] dvb-usb: bulk message failed: -22 (5/0) [ 2134.467124][T31606] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2134.501732][T31606] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 2134.520634][ T5884] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2134.778547][ T5884] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2134.787792][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.914799][ T5884] usb 2-1: Product: syz [ 2134.922920][ T5884] usb 2-1: Manufacturer: syz [ 2134.940500][ T5884] usb 2-1: SerialNumber: syz [ 2134.966771][ T1960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8002'. [ 2135.026661][ T1956] wlan0 speed is unknown, defaulting to 1000 [ 2135.299451][ T1963] lo speed is unknown, defaulting to 1000 [ 2135.305513][ T1963] lo speed is unknown, defaulting to 1000 [ 2135.423113][ T1963] lo speed is unknown, defaulting to 1000 [ 2135.444877][ T5884] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2135.470515][ T5884] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2135.472700][ T1963] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2135.788715][ T1963] lo speed is unknown, defaulting to 1000 [ 2135.901590][ T1963] lo speed is unknown, defaulting to 1000 [ 2135.921326][ T1963] lo speed is unknown, defaulting to 1000 [ 2135.930196][ T1963] lo speed is unknown, defaulting to 1000 [ 2135.961571][ T1963] lo speed is unknown, defaulting to 1000 [ 2135.972182][ T1963] lo speed is unknown, defaulting to 1000 [ 2136.007000][ T1963] lo speed is unknown, defaulting to 1000 [ 2136.405191][ T1983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8016'. [ 2137.326242][T27113] usb 4-1: USB disconnect, device number 19 [ 2137.457232][ T30] audit: type=1400 audit(1761875251.591:2649): avc: denied { write } for pid=1997 comm="syz.3.8021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2137.638710][ T30] audit: type=1400 audit(1761875251.771:2650): avc: denied { map } for pid=2001 comm="syz.3.8023" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2137.730431][ T30] audit: type=1400 audit(1761875251.771:2651): avc: denied { execute } for pid=2001 comm="syz.3.8023" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2137.758420][ T2006] tipc: Enabling of bearer rejected, failed to enable media [ 2137.865097][ T5884] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 2137.880384][ T5884] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2137.902551][ T5884] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2137.952165][T27113] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2138.114458][ T5884] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 2138.157988][ T5884] usb 2-1: USB disconnect, device number 20 [ 2138.251106][T27113] usb 4-1: Using ep0 maxpacket: 32 [ 2138.265338][T27113] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2138.276365][T27113] usb 4-1: can't read configurations, error -61 [ 2138.416014][ T2019] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2138.429806][T27113] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2139.058284][T27113] usb 4-1: Using ep0 maxpacket: 32 [ 2139.077180][T27113] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2139.094809][T27113] usb 4-1: can't read configurations, error -61 [ 2139.126140][T27113] usb usb4-port1: attempt power cycle [ 2139.560704][T27113] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2139.640960][T27113] usb 4-1: Using ep0 maxpacket: 32 [ 2139.648063][T27113] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2139.656171][T27113] usb 4-1: can't read configurations, error -61 [ 2139.809489][T27113] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2139.844185][T27113] usb 4-1: Using ep0 maxpacket: 32 [ 2139.851730][T27113] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2139.859896][T27113] usb 4-1: can't read configurations, error -61 [ 2139.867164][T27113] usb usb4-port1: unable to enumerate USB device [ 2141.455131][ T2054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8036'. [ 2141.464886][ T2054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8036'. [ 2141.848032][ T2060] mac80211_hwsim hwsim57 wlan1: entered promiscuous mode [ 2141.855596][ T2060] macsec1: entered promiscuous mode [ 2142.425532][ T2060] mac80211_hwsim hwsim57 wlan1: left promiscuous mode [ 2142.566136][ T2066] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2144.057276][ T2078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8045'. [ 2144.160831][T27113] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2144.382335][T27113] usb 4-1: Using ep0 maxpacket: 8 [ 2147.109569][T27113] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2147.159763][T27113] usb 4-1: too many configurations: 62, using maximum allowed: 8 [ 2147.300535][T27113] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2147.308149][T27113] usb 4-1: can't read configurations, error -71 [ 2148.110086][ T2013] Set syz1 is full, maxelem 65536 reached [ 2149.513377][ T2144] overlay: ./bus is not a directory [ 2149.524480][ T2150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8065'. [ 2149.981729][ T765] libceph: connect (1)[b::]:6789 error -101 [ 2149.990148][ T765] libceph: mon0 (1)[b::]:6789 connect error [ 2149.993757][ T2161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8067'. [ 2150.016957][ T2165] ceph: No mds server is up or the cluster is laggy [ 2152.142746][ T2198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8077'. [ 2152.152000][ T2198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8077'. [ 2153.576587][ T2216] FAULT_INJECTION: forcing a failure. [ 2153.576587][ T2216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2153.604783][ T2216] CPU: 1 UID: 0 PID: 2216 Comm: syz.1.8085 Not tainted syzkaller #0 PREEMPT(full) [ 2153.604812][ T2216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2153.604824][ T2216] Call Trace: [ 2153.604831][ T2216] [ 2153.604839][ T2216] dump_stack_lvl+0x16c/0x1f0 [ 2153.604871][ T2216] should_fail_ex+0x512/0x640 [ 2153.604893][ T2216] _copy_from_user+0x2e/0xd0 [ 2153.604919][ T2216] vhost_dev_ioctl+0x720/0xe20 [ 2153.604946][ T2216] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2153.604975][ T2216] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 2153.605004][ T2216] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2153.605035][ T2216] vhost_vsock_dev_ioctl+0x3a5/0xb30 [ 2153.605062][ T2216] ? hook_file_ioctl_common+0x145/0x410 [ 2153.605087][ T2216] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 2153.605118][ T2216] ? selinux_file_ioctl+0xb4/0x270 [ 2153.605142][ T2216] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 2153.605168][ T2216] __x64_sys_ioctl+0x18e/0x210 [ 2153.605199][ T2216] do_syscall_64+0xcd/0xfa0 [ 2153.605228][ T2216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2153.605247][ T2216] RIP: 0033:0x7f3ef298efc9 [ 2153.605263][ T2216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2153.605281][ T2216] RSP: 002b:00007f3ef38b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2153.605300][ T2216] RAX: ffffffffffffffda RBX: 00007f3ef2be5fa0 RCX: 00007f3ef298efc9 [ 2153.605314][ T2216] RDX: 00002000000005c0 RSI: 000000004008af03 RDI: 0000000000000003 [ 2153.605327][ T2216] RBP: 00007f3ef38b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2153.605339][ T2216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2153.605351][ T2216] R13: 00007f3ef2be6038 R14: 00007f3ef2be5fa0 R15: 00007ffeac315908 [ 2153.605382][ T2216] [ 2156.181991][ T2277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8107'. [ 2156.193000][ T2277] IPVS: Unknown mcast interface: vcan0 [ 2156.338632][ T2287] FAULT_INJECTION: forcing a failure. [ 2156.338632][ T2287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2156.386401][ T2290] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2156.388033][ T2287] CPU: 0 UID: 0 PID: 2287 Comm: syz.3.8108 Not tainted syzkaller #0 PREEMPT(full) [ 2156.388060][ T2287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2156.388073][ T2287] Call Trace: [ 2156.388079][ T2287] [ 2156.388087][ T2287] dump_stack_lvl+0x16c/0x1f0 [ 2156.388119][ T2287] should_fail_ex+0x512/0x640 [ 2156.388147][ T2287] _copy_from_user+0x2e/0xd0 [ 2156.388172][ T2287] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 2156.388198][ T2287] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 2156.388233][ T2287] do_ipv6_setsockopt+0x86e/0x44b0 [ 2156.388260][ T2287] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 2156.388286][ T2287] ? find_held_lock+0x2b/0x80 [ 2156.388311][ T2287] ? avc_has_perm_noaudit+0x117/0x3b0 [ 2156.388342][ T2287] ? avc_has_perm_noaudit+0x149/0x3b0 [ 2156.388371][ T2287] ? avc_has_perm+0x144/0x1f0 [ 2156.388397][ T2287] ? __pfx_avc_has_perm+0x10/0x10 [ 2156.388444][ T2287] ? get_pid_task+0x106/0x250 [ 2156.388463][ T2287] ? proc_fail_nth_write+0x9f/0x220 [ 2156.388491][ T2287] ? sock_has_perm+0x259/0x2f0 [ 2156.388518][ T2287] ? __pfx_sock_has_perm+0x10/0x10 [ 2156.388551][ T2287] ? ipv6_setsockopt+0xcb/0x170 [ 2156.388571][ T2287] ipv6_setsockopt+0xcb/0x170 [ 2156.388595][ T2287] rawv6_setsockopt+0xc2/0x510 [ 2156.388615][ T2287] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 2156.388637][ T2287] ? selinux_socket_setsockopt+0x6a/0x80 [ 2156.388664][ T2287] ? sock_common_setsockopt+0x2e/0xf0 [ 2156.388692][ T2287] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2156.388722][ T2287] do_sock_setsockopt+0xf3/0x1d0 [ 2156.388754][ T2287] __sys_setsockopt+0x1a0/0x230 [ 2156.388782][ T2287] __x64_sys_setsockopt+0xbd/0x160 [ 2156.388804][ T2287] ? do_syscall_64+0x91/0xfa0 [ 2156.388831][ T2287] ? lockdep_hardirqs_on+0x7c/0x110 [ 2156.388858][ T2287] do_syscall_64+0xcd/0xfa0 [ 2156.388887][ T2287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2156.388908][ T2287] RIP: 0033:0x7fbde698efc9 [ 2156.388924][ T2287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2156.388942][ T2287] RSP: 002b:00007fbde78f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2156.388961][ T2287] RAX: ffffffffffffffda RBX: 00007fbde6be6090 RCX: 00007fbde698efc9 [ 2156.388975][ T2287] RDX: 00000000000000d0 RSI: 0000000000000029 RDI: 0000000000000003 [ 2156.388987][ T2287] RBP: 00007fbde78f2090 R08: 0000000000000004 R09: 0000000000000000 [ 2156.388999][ T2287] R10: 0000200000004680 R11: 0000000000000246 R12: 0000000000000001 [ 2156.389011][ T2287] R13: 00007fbde6be6128 R14: 00007fbde6be6090 R15: 00007fff3e4ad858 [ 2156.389040][ T2287] [ 2158.888639][ T2331] overlayfs: failed to get inode (-116) [ 2158.897966][ T2331] overlayfs: failed to get inode (-116) [ 2158.900582][T27113] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2158.910287][ T2331] /dev/nullb0: Can't open blockdev [ 2159.090616][T27113] usb 4-1: Using ep0 maxpacket: 8 [ 2159.110992][T27113] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 2159.155461][T27113] usb 4-1: config 0 has no interface number 0 [ 2159.191953][T27113] usb 4-1: config 0 interface 110 has no altsetting 0 [ 2159.237071][T27113] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 2159.364793][T27113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.373427][T27113] usb 4-1: Product: syz [ 2159.378793][T27113] usb 4-1: Manufacturer: syz [ 2159.383465][T27113] usb 4-1: SerialNumber: syz [ 2159.391929][T27113] usb 4-1: config 0 descriptor?? [ 2159.943039][ T30] audit: type=1400 audit(1761875273.891:2652): avc: denied { remount } for pid=2323 comm="syz.3.8122" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2160.164952][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.171594][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.901225][ T910] usb 4-1: USB disconnect, device number 26 [ 2163.803416][ T2385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8139'. [ 2163.865349][ T2385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8139'. [ 2163.882336][ T2385] netlink: 'syz.3.8139': attribute type 11 has an invalid length. [ 2163.903168][ T2385] netlink: 'syz.3.8139': attribute type 7 has an invalid length. [ 2165.466264][ T2434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8153'. [ 2165.770667][T27113] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2165.968567][T27113] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2165.986739][ T30] audit: type=1400 audit(1761875280.121:2653): avc: denied { read } for pid=2444 comm="syz.4.8156" path="socket:[152240]" dev="sockfs" ino=152240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2165.990509][T27113] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 31279, setting to 1024 [ 2166.127073][T27113] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 2166.170749][T27113] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2166.210225][T27113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.261408][ T2434] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2166.293807][T27113] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2166.585716][ T24] usb 2-1: USB disconnect, device number 21 [ 2166.889885][ T2453] netlink: 341 bytes leftover after parsing attributes in process `syz.1.8153'. [ 2167.750067][ T2469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8162'. [ 2167.759316][ T2469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8162'. [ 2168.463144][ T2479] netlink: 165 bytes leftover after parsing attributes in process `syz.1.8165'. [ 2168.590373][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 2169.684997][ T30] audit: type=1400 audit(1761875283.821:2654): avc: denied { create } for pid=2486 comm="syz.0.8167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 2169.723254][ T2487] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8167'. [ 2170.071905][ T30] audit: type=1400 audit(1761875283.851:2655): avc: denied { sys_admin } for pid=2486 comm="syz.0.8167" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 2170.250651][T31606] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2170.263001][ T2503] 9pnet_fd: Insufficient options for proto=fd [ 2170.935853][T31606] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2170.972505][T31606] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2171.000936][T31606] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2171.090552][T31606] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2171.118038][T31606] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2171.141411][ T2512] FAULT_INJECTION: forcing a failure. [ 2171.141411][ T2512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2171.155874][T31606] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2171.186951][ T2512] CPU: 0 UID: 0 PID: 2512 Comm: syz.3.8173 Not tainted syzkaller #0 PREEMPT(full) [ 2171.186981][ T2512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2171.186993][ T2512] Call Trace: [ 2171.187000][ T2512] [ 2171.187008][ T2512] dump_stack_lvl+0x16c/0x1f0 [ 2171.187042][ T2512] should_fail_ex+0x512/0x640 [ 2171.187072][ T2512] _copy_from_user+0x2e/0xd0 [ 2171.187097][ T2512] get_bitmap+0xdf/0x1a0 [ 2171.187120][ T2512] get_nodes+0x1df/0x210 [ 2171.187141][ T2512] ? __pfx_get_nodes+0x10/0x10 [ 2171.187161][ T2512] ? __fget_files+0x20e/0x3c0 [ 2171.187189][ T2512] kernel_set_mempolicy+0x129/0x1e0 [ 2171.187212][ T2512] ? __pfx_kernel_set_mempolicy+0x10/0x10 [ 2171.187240][ T2512] do_syscall_64+0xcd/0xfa0 [ 2171.187271][ T2512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2171.187291][ T2512] RIP: 0033:0x7fbde698efc9 [ 2171.187308][ T2512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2171.187326][ T2512] RSP: 002b:00007fbde78f2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 2171.187347][ T2512] RAX: ffffffffffffffda RBX: 00007fbde6be6090 RCX: 00007fbde698efc9 [ 2171.187361][ T2512] RDX: 000000000000000c RSI: 0000200000000040 RDI: 0000000000008006 [ 2171.187392][ T2512] RBP: 00007fbde78f2090 R08: 0000000000000000 R09: 0000000000000000 [ 2171.187403][ T2512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2171.187413][ T2512] R13: 00007fbde6be6128 R14: 00007fbde6be6090 R15: 00007fff3e4ad858 [ 2171.187439][ T2512] [ 2171.187890][T31606] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2171.249796][ T2516] overlayfs: failed to clone upperpath [ 2171.254771][T31606] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2171.263368][ T2515] netlink: 288 bytes leftover after parsing attributes in process `syz.2.8174'. [ 2171.267563][T31606] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2171.551245][T31606] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2171.562069][T31606] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2171.571607][T31606] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2171.585861][T31606] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2171.593952][T31606] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2171.613402][T31606] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2171.699800][T31606] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2171.719408][T31606] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2171.728647][T31606] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2171.740128][T31606] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2171.748273][T31606] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2171.757559][T31606] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2171.778586][T31606] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2171.835779][T31606] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2171.839515][ T30] audit: type=1326 audit(1761875285.971:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2533 comm="syz.0.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c86d8efc9 code=0x7ffc0000 [ 2171.870408][T31606] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2171.884934][T31606] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2171.943091][T31606] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2171.962812][T31606] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2171.974403][ T30] audit: type=1326 audit(1761875285.971:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2533 comm="syz.0.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4c86d8efc9 code=0x7ffc0000 [ 2172.023758][T31606] usb 2-1: Product: syz [ 2172.027933][T31606] usb 2-1: Manufacturer: syz [ 2172.053026][T31606] usb 2-1: SerialNumber: syz [ 2172.071728][ T30] audit: type=1326 audit(1761875285.971:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2533 comm="syz.0.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c86d8efc9 code=0x7ffc0000 [ 2172.078609][T31606] usb 2-1: config 0 descriptor?? [ 2172.146008][ T30] audit: type=1326 audit(1761875285.971:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2533 comm="syz.0.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c86d8efc9 code=0x7ffc0000 [ 2172.239890][ T30] audit: type=1326 audit(1761875285.971:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2533 comm="syz.0.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c86d8efc9 code=0x7ffc0000 [ 2172.264421][T31606] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 2172.307395][ T30] audit: type=1326 audit(1761875285.971:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2533 comm="syz.0.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c86d8efc9 code=0x7ffc0000 [ 2172.331859][ T30] audit: type=1326 audit(1761875285.971:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2533 comm="syz.0.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4c86d8efc9 code=0x7ffc0000 [ 2172.376202][ T30] audit: type=1326 audit(1761875285.971:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2533 comm="syz.0.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c86d8efc9 code=0x7ffc0000 [ 2172.415866][ T30] audit: type=1326 audit(1761875285.971:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2533 comm="syz.0.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c86d8efc9 code=0x7ffc0000 [ 2172.455345][T27113] usb 2-1: USB disconnect, device number 22 [ 2172.505969][T27113] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 2172.530104][ T30] audit: type=1326 audit(1761875285.971:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2533 comm="syz.0.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4c86d8efc9 code=0x7ffc0000 [ 2175.742019][ T2574] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 2175.780808][ T2574] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 2175.789279][ T2574] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2177.081805][ T2594] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 2177.110580][ T2594] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 2177.133153][ T2594] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 2177.478737][T31606] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2177.717112][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2177.717129][ T30] audit: type=1400 audit(1761875291.851:2667): avc: denied { setopt } for pid=2616 comm="syz.3.8199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2177.787379][ T2620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8199'. [ 2177.851251][T31606] usb 2-1: Using ep0 maxpacket: 32 [ 2177.872203][T31606] usb 2-1: config 32 has an invalid interface number: 85 but max is 0 [ 2177.889438][T31606] usb 2-1: config 32 has no interface number 0 [ 2177.909883][T31606] usb 2-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2177.940273][T31606] usb 2-1: config 32 interface 85 has no altsetting 0 [ 2177.952695][T31606] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2177.969858][T31606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2178.102105][T31606] usb 2-1: Product: syz [ 2178.106320][T31606] usb 2-1: Manufacturer: syz [ 2178.128132][T31606] usb 2-1: SerialNumber: syz [ 2178.163385][ T2636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8203'. [ 2178.630317][ T2640] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2179.729187][T31606] appletouch 2-1:32.85: Geyser mode initialized. [ 2180.175183][T31606] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.85/input/input68 [ 2180.231188][ C0] appletouch 2-1:32.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 2180.640682][ T30] audit: type=1400 audit(1761875294.611:2668): avc: denied { mount } for pid=2669 comm="syz.0.8210" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 2181.442003][ T910] usb 2-1: USB disconnect, device number 23 [ 2181.553173][ T910] appletouch 2-1:32.85: input: appletouch disconnected [ 2182.443707][ T2706] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2183.475195][ T2716] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2183.481500][ T2716] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2183.487905][ T2716] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2183.495313][ T2716] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2183.502576][ T2716] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2184.706266][ T2755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8228'. [ 2185.090413][ T30] audit: type=1400 audit(1761875299.216:2669): avc: denied { getopt } for pid=2769 comm="syz.4.8233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2185.338039][ T2778] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2185.363122][ T2785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8239'. [ 2185.520549][ T1378] Bluetooth: hci5: command 0x0405 tx timeout [ 2185.520663][ T5818] Bluetooth: hci2: command 0x040f tx timeout [ 2185.526611][ T1378] Bluetooth: hci4: command 0x0c1a tx timeout [ 2185.533583][T29088] Bluetooth: hci3: command 0x0405 tx timeout [ 2185.539074][ T1378] Bluetooth: hci0: command 0x0c1a tx timeout [ 2186.010954][ T2816] dvmrp0: entered allmulticast mode [ 2186.017851][ T2816] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8246'. [ 2186.134154][ T2816] netlink: 31 bytes leftover after parsing attributes in process `syz.0.8246'. [ 2186.484124][ T2816] netlink: 'syz.0.8246': attribute type 5 has an invalid length. [ 2186.565884][ T2816] netlink: 31 bytes leftover after parsing attributes in process `syz.0.8246'. [ 2186.951947][ T2828] input: syz1 as /devices/virtual/input/input69 [ 2187.150647][ T2832] input: syz1 as /devices/virtual/input/input70 [ 2187.186792][ T2845] FAULT_INJECTION: forcing a failure. [ 2187.186792][ T2845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2187.220590][ T2845] CPU: 0 UID: 0 PID: 2845 Comm: syz.3.8252 Not tainted syzkaller #0 PREEMPT(full) [ 2187.220620][ T2845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2187.220632][ T2845] Call Trace: [ 2187.220643][ T2845] [ 2187.220651][ T2845] dump_stack_lvl+0x16c/0x1f0 [ 2187.220686][ T2845] should_fail_ex+0x512/0x640 [ 2187.220715][ T2845] _copy_from_user+0x2e/0xd0 [ 2187.220739][ T2845] move_addr_to_kernel+0x65/0x170 [ 2187.220763][ T2845] __sys_connect+0xb1/0x160 [ 2187.220786][ T2845] ? __pfx___sys_connect+0x10/0x10 [ 2187.220819][ T2845] ? __pfx_ksys_write+0x10/0x10 [ 2187.220846][ T2845] __x64_sys_connect+0x72/0xb0 [ 2187.220868][ T2845] ? lockdep_hardirqs_on+0x7c/0x110 [ 2187.220898][ T2845] do_syscall_64+0xcd/0xfa0 [ 2187.220928][ T2845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2187.220950][ T2845] RIP: 0033:0x7fbde698efc9 [ 2187.220967][ T2845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2187.220987][ T2845] RSP: 002b:00007fbde7913038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2187.221007][ T2845] RAX: ffffffffffffffda RBX: 00007fbde6be5fa0 RCX: 00007fbde698efc9 [ 2187.221020][ T2845] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 2187.221034][ T2845] RBP: 00007fbde7913090 R08: 0000000000000000 R09: 0000000000000000 [ 2187.221047][ T2845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2187.221060][ T2845] R13: 00007fbde6be6038 R14: 00007fbde6be5fa0 R15: 00007fff3e4ad858 [ 2187.221088][ T2845] [ 2187.847372][ T2850] afs: Unknown parameter '' [ 2188.431681][ T2899] FAULT_INJECTION: forcing a failure. [ 2188.431681][ T2899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2188.450060][T27113] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x4 [ 2188.523055][ T2899] CPU: 1 UID: 0 PID: 2899 Comm: syz.1.8257 Not tainted syzkaller #0 PREEMPT(full) [ 2188.523084][ T2899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2188.523098][ T2899] Call Trace: [ 2188.523105][ T2899] [ 2188.523113][ T2899] dump_stack_lvl+0x16c/0x1f0 [ 2188.523149][ T2899] should_fail_ex+0x512/0x640 [ 2188.523176][ T2899] _copy_from_user+0x2e/0xd0 [ 2188.523205][ T2899] uhid_char_write+0x18d/0x10f0 [ 2188.523237][ T2899] ? __pfx_uhid_char_write+0x10/0x10 [ 2188.523264][ T2899] vfs_write+0x2a0/0x11d0 [ 2188.523291][ T2899] ? __pfx_vfs_write+0x10/0x10 [ 2188.523309][ T2899] ? find_held_lock+0x2b/0x80 [ 2188.523333][ T2899] ? __fget_files+0x204/0x3c0 [ 2188.523357][ T2899] ? __fget_files+0x20e/0x3c0 [ 2188.523384][ T2899] ksys_write+0x1f8/0x250 [ 2188.523403][ T2899] ? __pfx_ksys_write+0x10/0x10 [ 2188.523442][ T2899] do_syscall_64+0xcd/0xfa0 [ 2188.523474][ T2899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2188.523496][ T2899] RIP: 0033:0x7f3ef298efc9 [ 2188.523513][ T2899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2188.523532][ T2899] RSP: 002b:00007f3ef38b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2188.523552][ T2899] RAX: ffffffffffffffda RBX: 00007f3ef2be5fa0 RCX: 00007f3ef298efc9 [ 2188.523567][ T2899] RDX: 0000000000000004 RSI: 0000200000000340 RDI: 0000000000000003 [ 2188.523580][ T2899] RBP: 00007f3ef38b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2188.523593][ T2899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2188.523605][ T2899] R13: 00007f3ef2be6038 R14: 00007f3ef2be5fa0 R15: 00007ffeac315908 [ 2188.523633][ T2899] [ 2188.530654][T27113] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x2 [ 2188.965662][ T2904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8259'. [ 2189.016248][T27113] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 2189.052053][T27113] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 2189.059988][T27113] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 2189.100139][ T2920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8264'. [ 2189.177224][T27113] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 2189.202949][T27113] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 2189.290683][T27113] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 2189.298378][T27113] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 2189.318283][T27113] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 2189.343978][T27113] hid-generic 0000:3000000:0000.001D: hidraw0: HID v0.00 Device [sy] on syz0 [ 2189.437011][ T2911] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2189.445361][ T2911] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2189.452573][ T2911] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2189.461132][ T2911] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2189.472909][ T2911] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2189.489665][ T2928] fido_id[2928]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2190.091323][ T2959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8275'. [ 2191.280843][T29088] Bluetooth: hci0: command 0x0c1a tx timeout [ 2191.530684][T29088] Bluetooth: hci5: command 0x0405 tx timeout [ 2191.530712][ T1378] Bluetooth: hci2: command 0x040f tx timeout [ 2191.536819][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 2191.548786][T18678] Bluetooth: hci3: command 0x0405 tx timeout [ 2193.415854][ T3007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8291'. [ 2193.685068][ T3007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8291'. [ 2193.950757][ T30] audit: type=1400 audit(1761875308.096:2670): avc: denied { write } for pid=3014 comm="syz.1.8294" path="socket:[154645]" dev="sockfs" ino=154645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2193.974237][ C1] vkms_vblank_simulate: vblank timer overrun [ 2194.178822][ T30] audit: type=1400 audit(1761875308.296:2671): avc: denied { ioctl } for pid=3017 comm="syz.4.8296" path="socket:[153935]" dev="sockfs" ino=153935 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2194.193173][ T3022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8297'. [ 2194.203656][ C1] vkms_vblank_simulate: vblank timer overrun [ 2195.267113][ T3043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8302'. [ 2195.325389][ T3045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8302'. [ 2195.917474][ T30] audit: type=1400 audit(1761875310.056:2672): avc: denied { append } for pid=3051 comm="syz.1.8304" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2195.940687][ C1] vkms_vblank_simulate: vblank timer overrun [ 2197.218928][ T30] audit: type=1400 audit(1761875311.316:2673): avc: denied { read } for pid=3091 comm="syz.1.8308" path="socket:[154066]" dev="sockfs" ino=154066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2199.346061][ T30] audit: type=1400 audit(1761875313.486:2674): avc: denied { mount } for pid=3106 comm="syz.1.8315" name="/" dev="autofs" ino=154821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2201.464943][ T3123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8317'. [ 2201.474132][ T3123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8317'. [ 2201.798548][ T30] audit: type=1400 audit(1761875315.936:2675): avc: denied { unmount } for pid=27548 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2201.880312][ T30] audit: type=1400 audit(1761875316.016:2676): avc: denied { module_load } for pid=3128 comm="syz.4.8321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2201.893500][ T3137] Invalid ELF header type: 3 != 1 [ 2202.066920][ T3142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8321'. [ 2202.097329][ T3130] 9pnet_fd: Insufficient options for proto=fd [ 2203.717394][ T3173] netlink: 'syz.0.8330': attribute type 1 has an invalid length. [ 2203.819030][ T3186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8330'. [ 2203.950314][ T30] audit: type=1400 audit(1761875318.076:2677): avc: denied { audit_read } for pid=3205 comm="syz.2.8333" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2203.972028][ T3173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2204.014176][ T765] hid_parser_main: 6 callbacks suppressed [ 2204.014195][ T765] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 2204.054804][ T765] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2205.275124][ T3224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8339'. [ 2205.285032][ T30] audit: type=1400 audit(1761875319.426:2678): avc: denied { read } for pid=3217 comm="syz.1.8337" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2205.327797][ T30] audit: type=1400 audit(1761875319.426:2679): avc: denied { open } for pid=3217 comm="syz.1.8337" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2205.363427][ T30] audit: type=1400 audit(1761875319.506:2680): avc: denied { ioctl } for pid=3217 comm="syz.1.8337" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2205.551831][ T3232] FAULT_INJECTION: forcing a failure. [ 2205.551831][ T3232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2205.609699][ T3232] CPU: 1 UID: 0 PID: 3232 Comm: syz.1.8340 Not tainted syzkaller #0 PREEMPT(full) [ 2205.609729][ T3232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2205.609742][ T3232] Call Trace: [ 2205.609749][ T3232] [ 2205.609757][ T3232] dump_stack_lvl+0x16c/0x1f0 [ 2205.609790][ T3232] should_fail_ex+0x512/0x640 [ 2205.609817][ T3232] _copy_from_user+0x2e/0xd0 [ 2205.609834][ T3232] move_addr_to_kernel+0x65/0x170 [ 2205.609847][ T3232] __sys_connect+0xb1/0x160 [ 2205.609860][ T3232] ? __pfx___sys_connect+0x10/0x10 [ 2205.609877][ T3232] ? __pfx_ksys_write+0x10/0x10 [ 2205.609894][ T3232] __x64_sys_connect+0x72/0xb0 [ 2205.609906][ T3232] ? lockdep_hardirqs_on+0x7c/0x110 [ 2205.609922][ T3232] do_syscall_64+0xcd/0xfa0 [ 2205.609939][ T3232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2205.609951][ T3232] RIP: 0033:0x7f3ef298efc9 [ 2205.609963][ T3232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2205.609974][ T3232] RSP: 002b:00007f3ef38b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2205.609985][ T3232] RAX: ffffffffffffffda RBX: 00007f3ef2be5fa0 RCX: 00007f3ef298efc9 [ 2205.609993][ T3232] RDX: 000000000000000c RSI: 0000200000000300 RDI: 0000000000000003 [ 2205.610000][ T3232] RBP: 00007f3ef38b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2205.610006][ T3232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2205.610013][ T3232] R13: 00007f3ef2be6038 R14: 00007f3ef2be5fa0 R15: 00007ffeac315908 [ 2205.610028][ T3232] [ 2206.532178][ T30] audit: type=1400 audit(1761875320.646:2681): avc: denied { create } for pid=3248 comm="syz.1.8346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2206.715143][ T3253] sock: sock_set_timeout: `syz.2.8345' (pid 3253) tries to set negative timeout [ 2206.745331][ T30] audit: type=1400 audit(1761875320.706:2682): avc: denied { write } for pid=3248 comm="syz.1.8346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2206.819179][ T30] audit: type=1400 audit(1761875320.736:2683): avc: denied { bind } for pid=3248 comm="syz.1.8346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2206.890531][ T30] audit: type=1400 audit(1761875320.866:2684): avc: denied { accept } for pid=3249 comm="syz.2.8345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2207.180533][ T910] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2207.344093][ T910] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2207.370629][ T910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.840150][ T910] usb 4-1: Product: syz [ 2207.847421][ T910] usb 4-1: Manufacturer: syz [ 2207.852093][ T910] usb 4-1: SerialNumber: syz [ 2207.880225][ T3273] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 2207.990138][ T30] audit: type=1400 audit(1761875322.126:2685): avc: denied { read } for pid=3278 comm="syz.1.8355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2209.734937][ T3302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8361'. [ 2209.870526][ T765] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2209.915473][ T30] audit: type=1400 audit(1761875324.056:2686): avc: denied { read } for pid=3304 comm="syz.0.8362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2209.968836][ T910] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 2209.976072][ T30] audit: type=1400 audit(1761875324.116:2687): avc: denied { setopt } for pid=3304 comm="syz.0.8362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2209.995676][ T910] cdc_ncm 4-1:1.0: bind() failure [ 2210.014489][ T910] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2210.025320][ T910] cdc_ncm 4-1:1.1: bind() failure [ 2210.043786][ T765] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2210.045852][ T910] usb 4-1: USB disconnect, device number 27 [ 2210.305370][ T765] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x85 has invalid maxpacket 0 [ 2210.788284][ T765] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2210.797655][ T765] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 2210.812312][ T765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2210.822672][ T765] usb 2-1: Product: syz [ 2210.832703][ T765] usb 2-1: Manufacturer: syz [ 2210.838989][ T765] usb 2-1: SerialNumber: syz [ 2210.847515][ T765] usb 2-1: config 0 descriptor?? [ 2210.867447][ T765] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 2210.879113][ T765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 2210.897025][ T765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 2210.915168][ T765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 2210.926400][ T765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 2210.935829][ T765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 2210.944239][ T765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 2210.945901][ T3320] smc: net device bond0 applied user defined pnetid SYZ2 [ 2210.960703][ T765] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2210.969673][ T3320] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8366'. [ 2210.977638][ T765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 2210.990816][ T765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 2210.998446][ T765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 2211.006795][ T765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 2211.016365][ T765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 2211.026901][ T765] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2211.083961][ T765] usb 2-1: USB disconnect, device number 24 [ 2211.090551][ T910] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2211.117743][ T765] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2211.151786][ T3329] overlayfs: failed to clone upperpath [ 2211.161037][ T765] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2211.172193][ T765] keyspan 2-1:0.0: device disconnected [ 2211.238638][ T910] usb 4-1: device descriptor read/64, error -71 [ 2211.308892][ T3320] smc: removing net device bond0 with user defined pnetid SYZ2 [ 2211.319100][ T3320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2211.332370][ T3320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2211.342639][ T3320] bond0 (unregistering): Released all slaves [ 2211.480647][ T910] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2211.718488][ T3334] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 2211.726881][ T3334] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 2211.736115][ T3334] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 2211.880589][ T910] usb 4-1: device descriptor read/64, error -71 [ 2212.010816][ T910] usb usb4-port1: attempt power cycle [ 2212.857848][ T910] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2212.865697][ T3346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2212.881871][ T910] usb 4-1: device descriptor read/8, error -71 [ 2212.901497][ T3346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2212.924369][ T3346] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2212.960413][ T3346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2212.968705][ T3346] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2213.906254][ T3375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8380'. [ 2213.919020][ T30] audit: type=1400 audit(1761875328.056:2688): avc: denied { connect } for pid=3367 comm="syz.2.8380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2214.400599][T29088] Bluetooth: hci0: command 0x0c1a tx timeout [ 2214.520542][ T910] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 2214.961254][T29088] Bluetooth: hci2: command 0x040f tx timeout [ 2214.967438][ T1378] Bluetooth: hci4: command 0x0c1a tx timeout [ 2214.973606][ T5818] Bluetooth: hci3: command 0x0405 tx timeout [ 2215.040668][ T1378] Bluetooth: hci5: command 0x0405 tx timeout [ 2216.318707][ T910] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2216.327412][ T910] usb 4-1: no configurations [ 2216.332475][ T910] usb 4-1: can't read configurations, error -22 [ 2217.041246][ T910] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2217.273280][ T910] usb 4-1: device descriptor read/64, error -71 [ 2217.665778][ T910] usb usb4-port1: attempt power cycle [ 2218.115457][ T910] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2218.186899][ T3421] overlayfs: failed to clone upperpath [ 2218.197193][ T910] usb 4-1: device descriptor read/8, error -71 [ 2218.440721][ T910] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2218.515870][ T910] usb 4-1: device descriptor read/8, error -71 [ 2218.714138][ T910] usb usb4-port1: unable to enumerate USB device [ 2219.071527][ T3447] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 2219.092527][ T3447] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 2219.102048][ T3447] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 2219.387445][ T3444] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2219.415570][ T3444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2219.440290][ T3444] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2219.540997][ T3444] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2219.564738][ T3444] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2220.790476][ T3457] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2222.076440][T29088] Bluetooth: hci3: command 0x0405 tx timeout [ 2222.085901][T18678] Bluetooth: hci2: command 0x040f tx timeout [ 2222.092204][T18678] Bluetooth: hci5: command 0x0405 tx timeout [ 2222.098365][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout [ 2222.104547][ T1378] Bluetooth: hci4: command 0x0c1a tx timeout [ 2222.181886][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.188205][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.493067][ T765] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2222.630624][ T765] usb 4-1: device descriptor read/64, error -71 [ 2223.340603][ T765] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2224.689924][ T765] usb 4-1: device descriptor read/64, error -71 [ 2224.960818][ T765] usb usb4-port1: attempt power cycle [ 2226.314880][ T3511] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 2226.323214][ T3511] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 2226.331822][ T3511] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2226.420820][ T3519] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8413'. [ 2226.429810][ T3519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8413'. [ 2226.438908][ T3519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8413'. [ 2227.800094][ T3529] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8414'. [ 2227.809278][ T3529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8414'. [ 2227.818347][ T3529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8414'. [ 2230.121845][ T3559] FAULT_INJECTION: forcing a failure. [ 2230.121845][ T3559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2230.190661][ T3559] CPU: 0 UID: 0 PID: 3559 Comm: syz.1.8420 Not tainted syzkaller #0 PREEMPT(full) [ 2230.190693][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2230.190706][ T3559] Call Trace: [ 2230.190716][ T3559] [ 2230.190726][ T3559] dump_stack_lvl+0x16c/0x1f0 [ 2230.190761][ T3559] should_fail_ex+0x512/0x640 [ 2230.190790][ T3559] _copy_from_user+0x2e/0xd0 [ 2230.190817][ T3559] copy_msghdr_from_user+0x98/0x160 [ 2230.190846][ T3559] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2230.190876][ T3559] ? __pfx__kstrtoull+0x10/0x10 [ 2230.190909][ T3559] ___sys_sendmsg+0xfe/0x1d0 [ 2230.190937][ T3559] ? __pfx____sys_sendmsg+0x10/0x10 [ 2230.190978][ T3559] ? find_held_lock+0x2b/0x80 [ 2230.191024][ T3559] __sys_sendmmsg+0x200/0x420 [ 2230.191054][ T3559] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2230.191090][ T3559] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2230.191147][ T3559] __x64_sys_sendmmsg+0x9c/0x100 [ 2230.191173][ T3559] ? lockdep_hardirqs_on+0x7c/0x110 [ 2230.191201][ T3559] do_syscall_64+0xcd/0xfa0 [ 2230.191233][ T3559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2230.191255][ T3559] RIP: 0033:0x7f3ef298efc9 [ 2230.191272][ T3559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2230.191291][ T3559] RSP: 002b:00007f3ef3872038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2230.191311][ T3559] RAX: ffffffffffffffda RBX: 00007f3ef2be6180 RCX: 00007f3ef298efc9 [ 2230.191326][ T3559] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000004 [ 2230.191340][ T3559] RBP: 00007f3ef3872090 R08: 0000000000000000 R09: 0000000000000000 [ 2230.191353][ T3559] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001 [ 2230.191367][ T3559] R13: 00007f3ef2be6218 R14: 00007f3ef2be6180 R15: 00007ffeac315908 [ 2230.191397][ T3559] [ 2231.409183][ T3581] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2231.863885][ T3589] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 2231.872210][ T3589] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 2231.881319][ T3589] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 2232.680570][T26166] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2232.835908][ T3606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8435'. [ 2232.844957][ T3606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8435'. [ 2232.855196][T26166] usb 4-1: Using ep0 maxpacket: 16 [ 2233.064579][T26166] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2233.077484][T26166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2233.099814][T26166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2233.121119][T26166] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2233.239402][T26166] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2233.256857][T26166] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2233.272309][T26166] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2233.289898][T26166] usb 4-1: Manufacturer: syz [ 2233.328360][T26166] usb 4-1: config 0 descriptor?? [ 2235.832358][T26166] rc_core: IR keymap rc-hauppauge not found [ 2235.838285][T26166] Registered IR keymap rc-empty [ 2235.863058][T26166] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2235.930842][T26166] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2235.980399][T26166] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2236.014929][T26166] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input71 [ 2236.066599][T26166] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2236.250037][ T3669] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8448'. [ 2236.266753][T26166] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2236.273164][ T3669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8448'. [ 2236.318954][ T3669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8448'. [ 2236.390557][T26166] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2236.412523][T26166] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2236.450700][T26166] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2236.502171][T26166] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2236.565695][T26166] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2236.651003][T26166] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2236.792568][T26166] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2237.702060][T26166] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2237.772445][T26166] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 2237.830693][T26166] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2237.863461][T26166] usb 4-1: USB disconnect, device number 39 [ 2239.774611][ T3711] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 2239.784052][ T30] audit: type=1400 audit(1761875353.916:2689): avc: denied { append } for pid=3707 comm="syz.1.8460" name="video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2239.807400][ T3711] overlayfs: missing 'lowerdir' [ 2239.827781][ T3709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8460'. [ 2241.320736][ T5961] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2241.450590][ T5961] usb 4-1: device descriptor read/64, error -71 [ 2241.734840][ T3740] overlayfs: failed to clone lowerpath [ 2242.210510][ T5961] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2242.350519][ T5961] usb 4-1: device descriptor read/64, error -71 [ 2242.461383][ T5961] usb usb4-port1: attempt power cycle [ 2242.489407][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 2242.661927][ T3748] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8470'. [ 2242.682584][ T3748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8470'. [ 2242.706407][ T3748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8470'. [ 2243.098811][ T5961] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2243.151149][ T5961] usb 4-1: device descriptor read/8, error -71 [ 2243.595918][ T3758] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8471'. [ 2243.605340][ T3758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8471'. [ 2243.614379][ T3758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8471'. [ 2244.209797][ T30] audit: type=1326 audit(1761875358.346:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.2.8475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2244.517904][ T30] audit: type=1326 audit(1761875358.376:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.2.8475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2244.599598][ T30] audit: type=1326 audit(1761875358.376:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.2.8475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2244.728718][ T30] audit: type=1326 audit(1761875358.376:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.2.8475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2244.792980][ T30] audit: type=1326 audit(1761875358.376:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.2.8475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2244.857921][ T30] audit: type=1326 audit(1761875358.386:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.2.8475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2244.945374][ T30] audit: type=1326 audit(1761875358.386:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.2.8475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2245.100822][ T30] audit: type=1326 audit(1761875358.386:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.2.8475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2245.127147][ T30] audit: type=1326 audit(1761875358.386:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.2.8475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2245.185199][ T30] audit: type=1326 audit(1761875358.386:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.2.8475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2245.358984][ T30] audit: type=1326 audit(1761875358.386:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.2.8475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2245.861513][ T30] audit: type=1326 audit(1761875358.386:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.2.8475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2245.885292][ T30] audit: type=1326 audit(1761875358.386:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.2.8475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2245.926119][ T30] audit: type=1326 audit(1761875358.386:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.2.8475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2246.502777][ T3787] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2249.636176][ T3809] binder: Unknown parameter 'fd' [ 2249.979205][ T3820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8488'. [ 2250.271703][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2250.271721][ T30] audit: type=1400 audit(1761875364.406:2711): avc: denied { create } for pid=3823 comm="syz.2.8489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2251.254826][ T3841] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8492'. [ 2251.263895][ T3841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8492'. [ 2251.272923][ T3841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8492'. [ 2251.367962][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8494'. [ 2252.386664][ T3879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8503'. [ 2254.199362][ T3903] netlink: 'syz.3.8512': attribute type 4 has an invalid length. [ 2254.207365][ T3903] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8512'. [ 2254.548525][ T3902] Process accounting resumed [ 2255.347492][ T3925] loop4: detected capacity change from 0 to 2559 [ 2255.479053][ T3833] Buffer I/O error on dev loop4, logical block 0, async page read [ 2255.490899][ T3833] Buffer I/O error on dev loop4, logical block 0, async page read [ 2255.509051][ T3833] Buffer I/O error on dev loop4, logical block 0, async page read [ 2255.549625][ T3833] Buffer I/O error on dev loop4, logical block 0, async page read [ 2255.561848][ T3833] Buffer I/O error on dev loop4, logical block 0, async page read [ 2255.569984][ T3833] Buffer I/O error on dev loop4, logical block 0, async page read [ 2255.579677][ T3833] Buffer I/O error on dev loop4, logical block 0, async page read [ 2255.599483][ T3926] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 2255.610021][ T3833] loop4: unable to read partition table [ 2255.616266][ T3926] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 2255.641041][ T3925] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 2255.738643][ T3925] ldm_validate_partition_table(): Disk read failed. [ 2255.880768][ T3925] Dev loop4: unable to read RDB block 0 [ 2255.917026][ T3925] loop4: unable to read partition table [ 2255.960756][ T3925] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2255.988834][ T5185] ldm_validate_partition_table(): Disk read failed. [ 2255.998167][ T5185] Dev loop4: unable to read RDB block 0 [ 2256.016021][ T5185] loop4: unable to read partition table [ 2256.524207][ T3931] netlink: 'syz.1.8518': attribute type 20 has an invalid length. [ 2259.928471][ T3958] autofs: Bad value for 'fd' [ 2260.180833][ T3983] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8527'. [ 2260.189852][ T3983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8527'. [ 2260.273035][ T3983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8527'. [ 2262.026906][ T4004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8534'. [ 2263.436616][T26982] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2263.459510][T26982] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2263.468833][T26982] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2263.477095][T26982] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2263.484674][T26982] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2263.524044][ T4012] wlan0 speed is unknown, defaulting to 1000 [ 2263.535063][ T4012] lo speed is unknown, defaulting to 1000 [ 2264.043553][ T4012] chnl_net:caif_netlink_parms(): no params data found [ 2264.132833][ T3964] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2264.198057][ T4024] FAULT_INJECTION: forcing a failure. [ 2264.198057][ T4024] name failslab, interval 1, probability 0, space 0, times 0 [ 2264.235679][ T4024] CPU: 0 UID: 0 PID: 4024 Comm: syz.3.8539 Not tainted syzkaller #0 PREEMPT(full) [ 2264.235707][ T4024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2264.235719][ T4024] Call Trace: [ 2264.235727][ T4024] [ 2264.235735][ T4024] dump_stack_lvl+0x16c/0x1f0 [ 2264.235769][ T4024] should_fail_ex+0x512/0x640 [ 2264.235793][ T4024] ? fs_reclaim_acquire+0xae/0x150 [ 2264.235820][ T4024] should_failslab+0xc2/0x120 [ 2264.235850][ T4024] __kmalloc_noprof+0xdd/0x880 [ 2264.235878][ T4024] ? tomoyo_encode2+0x100/0x3e0 [ 2264.235907][ T4024] ? tomoyo_encode2+0x100/0x3e0 [ 2264.235928][ T4024] tomoyo_encode2+0x100/0x3e0 [ 2264.235955][ T4024] tomoyo_encode+0x29/0x50 [ 2264.235976][ T4024] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2264.236009][ T4024] tomoyo_path_number_perm+0x245/0x580 [ 2264.236040][ T4024] ? tomoyo_path_number_perm+0x237/0x580 [ 2264.236074][ T4024] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2264.236104][ T4024] ? find_held_lock+0x2b/0x80 [ 2264.236154][ T4024] ? find_held_lock+0x2b/0x80 [ 2264.236177][ T4024] ? hook_file_ioctl_common+0x145/0x410 [ 2264.236209][ T4024] ? __fget_files+0x20e/0x3c0 [ 2264.236236][ T4024] security_file_ioctl+0x9b/0x240 [ 2264.236260][ T4024] __x64_sys_ioctl+0xb7/0x210 [ 2264.236290][ T4024] do_syscall_64+0xcd/0xfa0 [ 2264.236321][ T4024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2264.236342][ T4024] RIP: 0033:0x7fbde698efc9 [ 2264.236360][ T4024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2264.236379][ T4024] RSP: 002b:00007fbde7913038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2264.236399][ T4024] RAX: ffffffffffffffda RBX: 00007fbde6be5fa0 RCX: 00007fbde698efc9 [ 2264.236413][ T4024] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000004 [ 2264.236425][ T4024] RBP: 00007fbde7913090 R08: 0000000000000000 R09: 0000000000000000 [ 2264.236438][ T4024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2264.236451][ T4024] R13: 00007fbde6be6038 R14: 00007fbde6be5fa0 R15: 00007fff3e4ad858 [ 2264.236481][ T4024] [ 2264.236501][ T4024] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2264.495033][ T3964] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2264.592002][ T4012] bridge0: port 1(bridge_slave_0) entered blocking state [ 2264.610357][ T4012] bridge0: port 1(bridge_slave_0) entered disabled state [ 2264.632637][ T4012] bridge_slave_0: entered allmulticast mode [ 2264.652762][ T4012] bridge_slave_0: entered promiscuous mode [ 2264.764222][ T3964] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2264.872740][ T4012] bridge0: port 2(bridge_slave_1) entered blocking state [ 2264.880093][ T4012] bridge0: port 2(bridge_slave_1) entered disabled state [ 2264.891589][ T4012] bridge_slave_1: entered allmulticast mode [ 2264.898823][ T4012] bridge_slave_1: entered promiscuous mode [ 2264.934172][ T3964] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2265.033473][ T4012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2265.061815][ T4012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2265.100904][T26166] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2265.156799][ T4012] team0: Port device team_slave_0 added [ 2265.175682][ T4012] team0: Port device team_slave_1 added [ 2265.252315][T26166] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 2265.265033][T26166] usb 4-1: config 4 interface 0 has no altsetting 0 [ 2265.276578][T26166] usb 4-1: config 4 interface 0 has no altsetting 0 [ 2265.289393][T26166] usb 4-1: config 4 interface 0 has no altsetting 0 [ 2265.307291][T26166] usb 4-1: config 4 interface 0 has no altsetting 0 [ 2265.321384][ T4012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2265.330278][T26166] usb 4-1: config 4 interface 0 has no altsetting 0 [ 2265.339596][ T4012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2265.368347][ T4012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2265.380282][T26166] usb 4-1: config 4 interface 0 has no altsetting 0 [ 2265.388941][T26166] usb 4-1: config 4 interface 0 has no altsetting 0 [ 2265.396554][ T3964] bridge_slave_1: left allmulticast mode [ 2265.402942][ T3964] bridge_slave_1: left promiscuous mode [ 2265.409167][T26166] usb 4-1: config 4 interface 0 has no altsetting 0 [ 2265.418977][T26166] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 2265.430182][T26166] usb 4-1: New USB device strings: Mfr=87, Product=94, SerialNumber=51 [ 2265.430754][ T3964] bridge0: port 2(bridge_slave_1) entered disabled state [ 2265.448053][ T4049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8545'. [ 2265.463914][ T3964] bridge_slave_0: left allmulticast mode [ 2265.469781][ T3964] bridge_slave_0: left promiscuous mode [ 2265.476410][ T3964] bridge0: port 1(bridge_slave_0) entered disabled state [ 2265.488235][T26166] usb 4-1: Product: syz [ 2265.492760][T26166] usb 4-1: Manufacturer: syz [ 2265.498055][T26166] usb 4-1: SerialNumber: syz [ 2265.525146][ T1378] Bluetooth: hci1: command tx timeout [ 2265.534088][ T2895] Bluetooth: hci3: Frame reassembly failed (-84) [ 2265.541085][ T2895] Bluetooth: hci3: Frame reassembly failed (-84) [ 2265.598142][T26166] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 2265.971046][T26166] usb 4-1: USB disconnect, device number 44 [ 2267.170252][ T4012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2267.191446][ T4012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2267.250576][ T4012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2267.624739][T26982] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 2267.639230][T26982] Bluetooth: hci1: command tx timeout [ 2267.895975][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2268.069958][ T4012] hsr_slave_0: entered promiscuous mode [ 2268.093915][ T4012] hsr_slave_1: entered promiscuous mode [ 2268.151095][ T24] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 2268.159745][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2268.230326][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2268.272651][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2268.272917][ T4012] debugfs: 'hsr0' already exists in 'hsr' [ 2268.305955][ T4012] Cannot create hsr debugfs directory [ 2268.306127][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2268.380544][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2268.440584][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2268.490879][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2268.530232][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2268.582649][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2268.664369][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2268.680689][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2268.710467][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2268.767256][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2268.794187][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2269.201295][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2269.209278][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2269.218341][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2269.238927][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2269.255952][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2269.265465][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2269.289777][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2269.308866][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2269.318313][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2269.343712][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2269.368439][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2269.391480][ T24] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2269.409463][ T24] usb 4-1: Product: syz [ 2269.434189][ T24] usb 4-1: Manufacturer: syz [ 2269.482594][ T4095] trusted_key: encrypted_key: insufficient parameters specified [ 2269.495986][ T4095] trusted_key: encrypted_key: insufficient parameters specified [ 2269.525165][ T24] usb 4-1: SerialNumber: syz [ 2269.538518][ T24] usb 4-1: config 0 descriptor?? [ 2269.572116][ T24] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 2269.688715][ T1378] Bluetooth: hci1: command tx timeout [ 2270.048040][ T3964] hsr_slave_0: left promiscuous mode [ 2270.063356][ T3964] hsr_slave_1: left promiscuous mode [ 2270.073641][ T3964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2270.087699][ T3964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2270.121868][ T3964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2270.160659][ T3964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2270.258457][ T3964] veth1_macvtap: left promiscuous mode [ 2270.264214][ T3964] veth0_macvtap: left promiscuous mode [ 2270.273284][ T3964] veth1_vlan: left promiscuous mode [ 2270.287813][ T3964] veth0_vlan: left promiscuous mode [ 2271.265674][ T765] usb 4-1: USB disconnect, device number 45 [ 2271.294531][ T765] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 2271.355041][ T3964] pim6reg (unregistering): left allmulticast mode [ 2271.770746][ T1378] Bluetooth: hci1: command tx timeout [ 2271.987740][ T4125] gfs2: error -5 reading superblock [ 2271.996174][ T30] audit: type=1400 audit(1761875386.126:2712): avc: denied { create } for pid=4121 comm="syz.3.8558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 2272.606661][ T3964] team0 (unregistering): Port device team_slave_1 removed [ 2272.652077][ T3964] team0 (unregistering): Port device team_slave_0 removed [ 2273.220374][ T24] lo speed is unknown, defaulting to 1000 [ 2273.226227][ T24] infiniband syz0: ib_query_port failed (-19) [ 2274.624451][ T4012] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2275.691337][ T4012] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2275.744197][ T4012] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2275.760582][T26982] Bluetooth: hci1: command 0x0405 tx timeout [ 2276.190634][T26982] Bluetooth: hci0: command 0x0c1a tx timeout [ 2276.509161][ T4133] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2276.525856][ T4133] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2276.532298][ T4167] nfs: Unknown parameter '' [ 2276.543997][ T4012] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2276.563018][ T4133] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2276.580377][ T4133] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2276.604507][ T4133] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2276.637166][ T4133] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2276.679011][ T4133] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2276.762361][ T4178] trusted_key: encrypted_key: master key parameter 'defaultÿ' is invalid [ 2276.902117][ T4012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2276.974140][ T4012] 8021q: adding VLAN 0 to HW filter on device team0 [ 2277.012775][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 2277.020001][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2277.046746][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state [ 2277.053948][ T3964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2277.175242][ T4186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8566'. [ 2277.515068][ T4012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2278.268627][ T4012] veth0_vlan: entered promiscuous mode [ 2278.354768][ T4012] veth1_vlan: entered promiscuous mode [ 2278.470861][ T4012] veth0_macvtap: entered promiscuous mode [ 2278.541955][ T4012] veth1_macvtap: entered promiscuous mode [ 2278.563045][ T1378] Bluetooth: hci4: command 0x0c1a tx timeout [ 2278.633750][ T4012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2278.650874][ T1378] Bluetooth: hci1: command 0x0405 tx timeout [ 2278.653403][T26982] Bluetooth: hci5: command 0x0405 tx timeout [ 2278.657021][ T3469] Bluetooth: hci2: command 0x040f tx timeout [ 2278.763191][ T4012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2278.845919][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.856307][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.865693][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.904067][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2279.077177][T31249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2279.099592][T31249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2279.155744][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2279.187248][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2279.434517][ T4244] syz.4.8535 (4244): /proc/4241/oom_adj is deprecated, please use /proc/4241/oom_score_adj instead. [ 2279.448147][ T30] audit: type=1400 audit(1761875393.576:2713): avc: denied { ioctl } for pid=4241 comm="syz.4.8535" path="socket:[158742]" dev="sockfs" ino=158742 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2279.584941][T26982] Bluetooth: hci5: connection err: -111 [ 2280.285387][ T30] audit: type=1400 audit(1761875394.426:2714): avc: denied { wake_alarm } for pid=4247 comm="syz.1.8574" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2280.772416][T26982] Bluetooth: hci1: command 0x0405 tx timeout [ 2281.610528][T26982] Bluetooth: hci5: command 0x0405 tx timeout [ 2282.456736][T26166] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2282.566276][ T4294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8579'. [ 2282.657462][T26166] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 2282.695840][T26166] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2282.706726][T26166] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2282.738107][T26166] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2282.835619][T26982] Bluetooth: hci1: command 0x0405 tx timeout [ 2282.853752][T26166] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2282.862783][T26166] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2282.874863][T26166] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2282.883968][T26166] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2282.924771][T26166] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2282.938962][T26166] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2282.947256][T26166] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2282.956823][T26166] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2282.968676][T26166] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2282.996400][T26166] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2283.008560][T26166] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2283.019650][T26166] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2283.027731][T26166] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2283.037139][T26166] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2283.080494][T26166] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2283.095829][T26166] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2283.114562][T26166] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2283.130903][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.137457][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.167137][T26166] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2283.183762][T26166] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2283.202927][T26166] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2283.227747][T26166] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2283.247019][T26166] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2283.256505][T26166] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2283.275852][T26166] usb 5-1: Product: syz [ 2283.299898][T26166] usb 5-1: Manufacturer: syz [ 2283.313593][T26166] usb 5-1: SerialNumber: syz [ 2283.350794][T26166] usb 5-1: config 0 descriptor?? [ 2283.368716][T26166] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 2283.549160][ T4306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8587'. [ 2284.318354][ T30] audit: type=1400 audit(1761875398.326:2715): avc: denied { create } for pid=4310 comm="syz.3.8588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2284.373831][ T30] audit: type=1400 audit(1761875398.326:2716): avc: denied { bind } for pid=4310 comm="syz.3.8588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2284.610214][T12972] usb 5-1: USB disconnect, device number 3 [ 2284.678724][T12972] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 2284.804743][ T4332] veth0: entered promiscuous mode [ 2284.820178][ T4331] veth0: left promiscuous mode [ 2285.929180][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2286.425446][ T24] usb 2-1: device descriptor read/64, error -71 [ 2286.977621][ T4354] lo speed is unknown, defaulting to 1000 [ 2286.984510][ T4354] lo speed is unknown, defaulting to 1000 [ 2287.006352][ T4354] lo speed is unknown, defaulting to 1000 [ 2287.017802][ T4354] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2287.046226][ T4354] lo speed is unknown, defaulting to 1000 [ 2287.053825][ T4354] lo speed is unknown, defaulting to 1000 [ 2287.061192][ T4354] lo speed is unknown, defaulting to 1000 [ 2287.069389][ T4354] lo speed is unknown, defaulting to 1000 [ 2287.097785][ T4354] lo speed is unknown, defaulting to 1000 [ 2287.105656][ T4354] lo speed is unknown, defaulting to 1000 [ 2287.160687][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2287.900698][ T30] audit: type=1400 audit(1761875402.046:2717): avc: denied { write } for pid=4359 comm="syz.4.8599" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2287.952340][ T24] usb 2-1: device descriptor read/64, error -71 [ 2287.982095][ T30] audit: type=1400 audit(1761875402.066:2718): avc: denied { open } for pid=4359 comm="syz.4.8599" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2288.129713][ T24] usb usb2-port1: attempt power cycle [ 2288.187934][ T4372] FAULT_INJECTION: forcing a failure. [ 2288.187934][ T4372] name failslab, interval 1, probability 0, space 0, times 0 [ 2288.203484][ T4372] CPU: 1 UID: 0 PID: 4372 Comm: syz.1.8604 Not tainted syzkaller #0 PREEMPT(full) [ 2288.203513][ T4372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2288.203526][ T4372] Call Trace: [ 2288.203533][ T4372] [ 2288.203541][ T4372] dump_stack_lvl+0x16c/0x1f0 [ 2288.203577][ T4372] should_fail_ex+0x512/0x640 [ 2288.203600][ T4372] ? __kmalloc_cache_noprof+0x5f/0x780 [ 2288.203633][ T4372] should_failslab+0xc2/0x120 [ 2288.203658][ T4372] __kmalloc_cache_noprof+0x72/0x780 [ 2288.203686][ T4372] ? alloc_perf_context+0x43/0x140 [ 2288.203712][ T4372] ? alloc_perf_context+0x43/0x140 [ 2288.203731][ T4372] alloc_perf_context+0x43/0x140 [ 2288.203752][ T4372] find_get_context+0xb8/0x5c0 [ 2288.203775][ T4372] ? __pfx_perf_event_alloc+0x10/0x10 [ 2288.203798][ T4372] ? __pfx_find_get_context+0x10/0x10 [ 2288.203831][ T4372] perf_event_create_kernel_counter+0x20b/0x6e0 [ 2288.203865][ T4372] ptrace_register_breakpoint+0x1bb/0x1d0 [ 2288.203898][ T4372] ? __pfx_ptrace_register_breakpoint+0x10/0x10 [ 2288.203948][ T4372] ? find_held_lock+0x2b/0x80 [ 2288.203977][ T4372] ? rcu_is_watching+0x12/0xc0 [ 2288.204005][ T4372] ptrace_write_dr7+0x2b1/0x470 [ 2288.204030][ T4372] ? __pfx_ptrace_write_dr7+0x10/0x10 [ 2288.204047][ T4372] ? __pfx_wait_task_inactive+0x10/0x10 [ 2288.204072][ T4372] ? do_raw_spin_lock+0x12c/0x2b0 [ 2288.204095][ T4372] ? ptrace_check_attach+0x2c5/0x3f0 [ 2288.204120][ T4372] ? mark_held_locks+0x49/0x80 [ 2288.204153][ T4372] arch_ptrace+0x22d/0x650 [ 2288.204176][ T4372] __x64_sys_ptrace+0x17c/0x2a0 [ 2288.204203][ T4372] do_syscall_64+0xcd/0xfa0 [ 2288.204235][ T4372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2288.204256][ T4372] RIP: 0033:0x7f3ef298efc9 [ 2288.204274][ T4372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2288.204294][ T4372] RSP: 002b:00007f3ef38b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 2288.204314][ T4372] RAX: ffffffffffffffda RBX: 00007f3ef2be5fa0 RCX: 00007f3ef298efc9 [ 2288.204328][ T4372] RDX: 0000000000000388 RSI: 00000000000005eb RDI: 0000000000000006 [ 2288.204340][ T4372] RBP: 00007f3ef38b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2288.204352][ T4372] R10: 0000000041d9fda7 R11: 0000000000000246 R12: 0000000000000001 [ 2288.204365][ T4372] R13: 00007f3ef2be6038 R14: 00007f3ef2be5fa0 R15: 00007ffeac315908 [ 2288.204395][ T4372] [ 2288.955054][ T4390] ufs: You didn't specify the type of your ufs filesystem [ 2288.955054][ T4390] [ 2288.955054][ T4390] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 2288.955054][ T4390] [ 2288.955054][ T4390] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 2288.986783][ T4390] ufs: ufstype=old is supported read-only [ 2289.101380][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2289.271321][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 2289.287311][ T24] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 2289.298583][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2289.309323][ T24] usb 2-1: Product: syz [ 2289.322225][ T24] usb 2-1: Manufacturer: syz [ 2289.329513][ T24] usb 2-1: SerialNumber: syz [ 2289.351479][ T24] usb 2-1: config 0 descriptor?? [ 2289.363646][ T24] option 2-1:0.0: GSM modem (1-port) converter detected [ 2290.482090][ T3509] usb 2-1: USB disconnect, device number 27 [ 2290.494828][ T4399] FAULT_INJECTION: forcing a failure. [ 2290.494828][ T4399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2290.508775][ T4399] CPU: 0 UID: 0 PID: 4399 Comm: syz.3.8608 Not tainted syzkaller #0 PREEMPT(full) [ 2290.508802][ T4399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2290.508815][ T4399] Call Trace: [ 2290.508822][ T4399] [ 2290.508827][ T4399] dump_stack_lvl+0x16c/0x1f0 [ 2290.508849][ T4399] should_fail_ex+0x512/0x640 [ 2290.508866][ T4399] _copy_from_user+0x2e/0xd0 [ 2290.508881][ T4399] snd_seq_ioctl+0x1bf/0x430 [ 2290.508898][ T4399] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 2290.508912][ T4399] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2290.508936][ T4399] ? selinux_file_ioctl+0x180/0x270 [ 2290.508947][ T4399] ? selinux_file_ioctl+0xb4/0x270 [ 2290.508960][ T4399] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 2290.508976][ T4399] __x64_sys_ioctl+0x18e/0x210 [ 2290.508993][ T4399] do_syscall_64+0xcd/0xfa0 [ 2290.509011][ T4399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.509023][ T4399] RIP: 0033:0x7fbde698efc9 [ 2290.509041][ T4399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2290.509051][ T4399] RSP: 002b:00007fbde78f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2290.509063][ T4399] RAX: ffffffffffffffda RBX: 00007fbde6be6090 RCX: 00007fbde698efc9 [ 2290.509070][ T4399] RDX: 00002000000001c0 RSI: 0000000040bc5311 RDI: 000000000000000b [ 2290.509077][ T4399] RBP: 00007fbde78f2090 R08: 0000000000000000 R09: 0000000000000000 [ 2290.509084][ T4399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2290.509091][ T4399] R13: 00007fbde6be6128 R14: 00007fbde6be6090 R15: 00007fff3e4ad858 [ 2290.509107][ T4399] [ 2290.932822][ T3509] option 2-1:0.0: device disconnected [ 2291.276763][ T4409] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8610'. [ 2291.780732][T26166] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2291.970819][T26166] usb 2-1: Using ep0 maxpacket: 16 [ 2292.003835][T26166] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2292.090543][T26166] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2292.103271][T26166] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2292.128257][T26166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2292.387789][T26166] usb 2-1: config 0 descriptor?? [ 2293.780808][ T910] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2293.858547][ T4408] netlink: 'syz.1.8611': attribute type 10 has an invalid length. [ 2293.873429][ T4408] vlan1: entered allmulticast mode [ 2293.878739][ T4408] veth0_vlan: entered allmulticast mode [ 2293.915496][ T4428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2293.922188][ T4408] team0: Port device vlan1 added [ 2293.930943][ T910] usb 5-1: device descriptor read/64, error -71 [ 2293.960088][ T4428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2294.033054][ T30] audit: type=1400 audit(1761875408.176:2719): avc: denied { write } for pid=4431 comm="syz.3.8618" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2294.180702][ T910] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2294.450612][ T910] usb 5-1: device descriptor read/64, error -71 [ 2294.564169][ T910] usb usb5-port1: attempt power cycle [ 2294.842605][ T4446] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8621'. [ 2294.942845][ T910] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2294.950840][T26982] Bluetooth: hci4: connection err: -111 [ 2294.974249][ T910] usb 5-1: device descriptor read/8, error -71 [ 2295.107877][T26166] usb 2-1: string descriptor 0 read error: -71 [ 2295.138535][T26166] usbhid 2-1:0.0: can't add hid device: -71 [ 2295.162784][T26166] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2295.215090][T26166] usb 2-1: USB disconnect, device number 28 [ 2295.555941][ T4467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8629'. [ 2295.748116][ T30] audit: type=1400 audit(1761875409.876:2720): avc: denied { setattr } for pid=4461 comm="syz.1.8627" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2296.160486][ T30] audit: type=1326 audit(1761875410.296:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.2.8630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2296.204632][ T4471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8630'. [ 2296.315114][ T30] audit: type=1326 audit(1761875410.326:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.2.8630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2296.349352][ T30] audit: type=1326 audit(1761875410.326:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.2.8630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2296.412134][ T30] audit: type=1326 audit(1761875410.326:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.2.8630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2296.435686][ T30] audit: type=1326 audit(1761875410.326:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.2.8630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2296.459121][ T30] audit: type=1326 audit(1761875410.326:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.2.8630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2296.530492][ T30] audit: type=1326 audit(1761875410.326:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.2.8630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2296.578319][ T30] audit: type=1326 audit(1761875410.326:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.2.8630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff78efc9 code=0x7ffc0000 [ 2296.825633][ T4467] netlink: 'syz.4.8629': attribute type 1 has an invalid length. [ 2296.833477][ T4467] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8629'. [ 2296.933492][ T4471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8630'. [ 2296.951085][ T4484] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8631'. [ 2296.959976][ T4484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8631'. [ 2296.975759][ T4484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8631'. [ 2297.069662][T26982] Bluetooth: hci4: command 0x0c1a tx timeout [ 2297.755300][ T4497] mkiss: ax0: crc mode is auto. [ 2299.997817][ T4523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8644'. [ 2300.110664][T26982] Bluetooth: hci2: connection err: -111 [ 2300.135492][ T4531] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8643'. [ 2300.144962][ T4531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8643'. [ 2300.154219][ T4531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8643'. [ 2300.859651][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 2300.859669][ T30] audit: type=1400 audit(1761875414.996:2772): avc: denied { listen } for pid=4541 comm="syz.4.8649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2300.908142][ T4527] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2300.916485][ T4527] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2300.933434][ T4527] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2300.945484][ T4527] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2300.955454][ T4527] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2300.966619][ T4527] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2301.147133][ T30] audit: type=1804 audit(1761875415.286:2773): pid=4549 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.8650" name="/newroot/525/file0" dev="tmpfs" ino=2774 res=1 errno=0 [ 2301.177450][ T30] audit: type=1400 audit(1761875415.286:2774): avc: denied { ioctl } for pid=4541 comm="syz.4.8649" path="socket:[158712]" dev="sockfs" ino=158712 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2301.312146][ T4553] FAULT_INJECTION: forcing a failure. [ 2301.312146][ T4553] name failslab, interval 1, probability 0, space 0, times 0 [ 2301.325856][ T4553] CPU: 1 UID: 0 PID: 4553 Comm: syz.3.8652 Not tainted syzkaller #0 PREEMPT(full) [ 2301.325882][ T4553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2301.325893][ T4553] Call Trace: [ 2301.325899][ T4553] [ 2301.325907][ T4553] dump_stack_lvl+0x16c/0x1f0 [ 2301.325938][ T4553] should_fail_ex+0x512/0x640 [ 2301.325960][ T4553] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 2301.325991][ T4553] should_failslab+0xc2/0x120 [ 2301.326011][ T4553] kmem_cache_alloc_node_noprof+0x78/0x770 [ 2301.326034][ T4553] ? __lock_acquire+0x622/0x1c90 [ 2301.326057][ T4553] ? __alloc_skb+0x2b2/0x380 [ 2301.326083][ T4553] ? __alloc_skb+0x2b2/0x380 [ 2301.326099][ T4553] __alloc_skb+0x2b2/0x380 [ 2301.326118][ T4553] ? __pfx___alloc_skb+0x10/0x10 [ 2301.326137][ T4553] ? fib_table_lookup+0x75a/0x2300 [ 2301.326170][ T4553] alloc_skb_with_frags+0xe0/0x860 [ 2301.326192][ T4553] ? find_held_lock+0x2b/0x80 [ 2301.326212][ T4553] ? fib_rules_lookup+0x4e8/0x1030 [ 2301.326237][ T4553] sock_alloc_send_pskb+0x7f9/0x980 [ 2301.326256][ T4553] ? fib_rules_lookup+0x4f2/0x1030 [ 2301.326280][ T4553] ? __pfx_fib4_rule_suppress+0x10/0x10 [ 2301.326311][ T4553] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2301.326334][ T4553] ? __lock_acquire+0x622/0x1c90 [ 2301.326369][ T4553] ? __lock_acquire+0x622/0x1c90 [ 2301.326403][ T4553] __ip_append_data+0x2149/0x41a0 [ 2301.326441][ T4553] ? __pfx_ping_getfrag+0x10/0x10 [ 2301.326459][ T4553] ? find_held_lock+0x2b/0x80 [ 2301.326493][ T4553] ? ip_dst_mtu_maybe_forward.constprop.0+0x328/0x750 [ 2301.326522][ T4553] ? ip_dst_mtu_maybe_forward.constprop.0+0x332/0x750 [ 2301.326547][ T4553] ? __pfx___ip_append_data+0x10/0x10 [ 2301.326584][ T4553] ip_append_data+0x10f/0x1a0 [ 2301.326605][ T4553] ? __pfx_ping_getfrag+0x10/0x10 [ 2301.326627][ T4553] ping_v4_sendmsg+0xc67/0x1a40 [ 2301.326655][ T4553] ? avc_has_perm_noaudit+0x70/0x3b0 [ 2301.326682][ T4553] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 2301.326706][ T4553] ? avc_has_perm+0x144/0x1f0 [ 2301.326768][ T4553] ? __import_iovec+0x1dd/0x650 [ 2301.326796][ T4553] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 2301.326821][ T4553] inet_sendmsg+0x11c/0x140 [ 2301.326845][ T4553] ____sys_sendmsg+0x973/0xc70 [ 2301.326877][ T4553] ? copy_msghdr_from_user+0x10a/0x160 [ 2301.326902][ T4553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2301.326936][ T4553] ? __pfx__kstrtoull+0x10/0x10 [ 2301.326970][ T4553] ___sys_sendmsg+0x134/0x1d0 [ 2301.326998][ T4553] ? __pfx____sys_sendmsg+0x10/0x10 [ 2301.327039][ T4553] ? find_held_lock+0x2b/0x80 [ 2301.327083][ T4553] __sys_sendmmsg+0x200/0x420 [ 2301.327112][ T4553] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2301.327148][ T4553] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2301.327190][ T4553] ? fput+0x9b/0xd0 [ 2301.327213][ T4553] ? ksys_write+0x1ac/0x250 [ 2301.327230][ T4553] ? __pfx_ksys_write+0x10/0x10 [ 2301.327252][ T4553] __x64_sys_sendmmsg+0x9c/0x100 [ 2301.327274][ T4553] ? lockdep_hardirqs_on+0x7c/0x110 [ 2301.327303][ T4553] do_syscall_64+0xcd/0xfa0 [ 2301.327334][ T4553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2301.327354][ T4553] RIP: 0033:0x7fbde698efc9 [ 2301.327369][ T4553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2301.327388][ T4553] RSP: 002b:00007fbde7913038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2301.327408][ T4553] RAX: ffffffffffffffda RBX: 00007fbde6be5fa0 RCX: 00007fbde698efc9 [ 2301.327423][ T4553] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 2301.327437][ T4553] RBP: 00007fbde7913090 R08: 0000000000000000 R09: 0000000000000000 [ 2301.327450][ T4553] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000001 [ 2301.327469][ T4553] R13: 00007fbde6be6038 R14: 00007fbde6be5fa0 R15: 00007fff3e4ad858 [ 2301.327501][ T4553] [ 2302.216304][T26982] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2302.233487][T26982] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2302.243732][T26982] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2302.253001][T26982] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2302.310696][T26982] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2302.320756][T26982] Bluetooth: hci0: command 0x0c1a tx timeout [ 2302.533547][ T4555] wlan0 speed is unknown, defaulting to 1000 [ 2302.543121][ T4555] lo speed is unknown, defaulting to 1000 [ 2302.661841][ T4568] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8656'. [ 2302.671095][ T4568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8656'. [ 2302.680374][ T4568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8656'. [ 2302.960559][ T3469] Bluetooth: hci1: command 0x0405 tx timeout [ 2302.966803][ T3469] Bluetooth: hci5: command 0x0405 tx timeout [ 2302.972998][ T3469] Bluetooth: hci2: command 0x040f tx timeout [ 2302.978975][ T3469] Bluetooth: hci4: command 0x0c1a tx timeout [ 2303.146732][ T30] audit: type=1400 audit(1761875417.276:2775): avc: denied { call } for pid=4570 comm="syz.3.8657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2303.222830][ T4568] pim6reg: entered allmulticast mode [ 2303.296542][ T30] audit: type=1400 audit(1761875417.276:2776): avc: denied { transfer } for pid=4570 comm="syz.3.8657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2303.310913][ T4555] chnl_net:caif_netlink_parms(): no params data found [ 2304.480660][ T1378] Bluetooth: hci3: command tx timeout [ 2304.544567][ T4555] bridge0: port 1(bridge_slave_0) entered blocking state [ 2304.556171][ T4555] bridge0: port 1(bridge_slave_0) entered disabled state [ 2304.563830][ T4555] bridge_slave_0: entered allmulticast mode [ 2304.571126][ T4555] bridge_slave_0: entered promiscuous mode [ 2304.584883][ T4555] bridge0: port 2(bridge_slave_1) entered blocking state [ 2304.594391][ T4555] bridge0: port 2(bridge_slave_1) entered disabled state [ 2304.602769][ T4555] bridge_slave_1: entered allmulticast mode [ 2304.627394][ T4555] bridge_slave_1: entered promiscuous mode [ 2304.662762][ T4555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2304.675902][ T4555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2304.717391][ T4555] team0: Port device team_slave_0 added [ 2304.725291][ T4555] team0: Port device team_slave_1 added [ 2304.778610][ T4555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2304.830355][ T4555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2304.857548][ T4555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2304.931483][ T4555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2304.947999][ T4555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2304.974537][ T4555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2305.040783][ T1378] Bluetooth: hci1: command 0x0405 tx timeout [ 2305.065973][ T4555] hsr_slave_0: entered promiscuous mode [ 2305.075578][ T4555] hsr_slave_1: entered promiscuous mode [ 2305.086809][ T4555] debugfs: 'hsr0' already exists in 'hsr' [ 2305.113561][ T4555] Cannot create hsr debugfs directory [ 2305.255196][ T3677] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2305.435532][ T3677] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2306.167812][ T3677] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2306.453256][ T3677] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2306.600582][ T1378] Bluetooth: hci3: command tx timeout [ 2307.382931][ T4626] FAULT_INJECTION: forcing a failure. [ 2307.382931][ T4626] name failslab, interval 1, probability 0, space 0, times 0 [ 2307.475261][ T4626] CPU: 1 UID: 0 PID: 4626 Comm: syz.4.8669 Not tainted syzkaller #0 PREEMPT(full) [ 2307.475280][ T4626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2307.475287][ T4626] Call Trace: [ 2307.475291][ T4626] [ 2307.475297][ T4626] dump_stack_lvl+0x16c/0x1f0 [ 2307.475318][ T4626] should_fail_ex+0x512/0x640 [ 2307.475331][ T4626] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 2307.475350][ T4626] should_failslab+0xc2/0x120 [ 2307.475364][ T4626] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2307.475380][ T4626] ? alloc_empty_file+0x55/0x1e0 [ 2307.475397][ T4626] ? alloc_empty_file+0x55/0x1e0 [ 2307.475410][ T4626] alloc_empty_file+0x55/0x1e0 [ 2307.475424][ T4626] dentry_open+0x46/0xd0 [ 2307.475438][ T4626] ptm_open_peer+0x1bf/0x290 [ 2307.475453][ T4626] ? __pfx_ptm_open_peer+0x10/0x10 [ 2307.475471][ T4626] tty_ioctl+0x1173/0x1680 [ 2307.475488][ T4626] ? __pfx_tty_ioctl+0x10/0x10 [ 2307.475503][ T4626] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2307.475521][ T4626] ? hook_file_ioctl_common+0x145/0x410 [ 2307.475540][ T4626] ? selinux_file_ioctl+0x180/0x270 [ 2307.475551][ T4626] ? selinux_file_ioctl+0xb4/0x270 [ 2307.475564][ T4626] ? __pfx_tty_ioctl+0x10/0x10 [ 2307.475580][ T4626] __x64_sys_ioctl+0x18e/0x210 [ 2307.475596][ T4626] do_syscall_64+0xcd/0xfa0 [ 2307.475614][ T4626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2307.475626][ T4626] RIP: 0033:0x7fc6d358efc9 [ 2307.475635][ T4626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2307.475646][ T4626] RSP: 002b:00007fc6d4486038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2307.475657][ T4626] RAX: ffffffffffffffda RBX: 00007fc6d37e6180 RCX: 00007fc6d358efc9 [ 2307.475664][ T4626] RDX: 0000000000000b3d RSI: 0000000000005441 RDI: 0000000000000007 [ 2307.475672][ T4626] RBP: 00007fc6d4486090 R08: 0000000000000000 R09: 0000000000000000 [ 2307.475678][ T4626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2307.475685][ T4626] R13: 00007fc6d37e6218 R14: 00007fc6d37e6180 R15: 00007ffe1d3f3168 [ 2307.475701][ T4626] [ 2308.041469][ T3677] bridge_slave_1: left allmulticast mode [ 2308.125341][ T3677] bridge_slave_1: left promiscuous mode [ 2308.144295][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 2308.182436][ T3677] bridge_slave_0: left allmulticast mode [ 2308.200699][ T3677] bridge_slave_0: left promiscuous mode [ 2308.208678][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 2308.645185][ T1378] Bluetooth: hci3: command tx timeout [ 2310.092839][ T3677] dvmrp0 (unregistering): left allmulticast mode [ 2310.720868][ T1378] Bluetooth: hci3: command tx timeout [ 2310.805544][ T30] audit: type=1400 audit(1761875424.946:2777): avc: denied { map } for pid=4656 comm="syz.3.8674" path="socket:[160083]" dev="sockfs" ino=160083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2311.246924][ T3677] bond1 (unregistering): (slave bridge1): Releasing active interface [ 2312.162912][ T3677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2312.175358][ T3677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2312.187171][ T3677] bond0 (unregistering): Released all slaves [ 2312.205883][ T3677] bond1 (unregistering): Released all slaves [ 2312.310574][ T765] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2312.419741][ T3677] tipc: Left network mode [ 2312.510532][ T765] usb 4-1: Using ep0 maxpacket: 16 [ 2312.522173][ T765] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2312.530745][ T765] usb 4-1: config 0 has no interface number 0 [ 2312.555930][ T765] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2312.593524][ T765] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2312.617444][ T765] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2312.630664][ T765] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2312.655635][ T765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2312.666259][ T765] usb 4-1: Product: syz [ 2312.677565][ T765] usb 4-1: Manufacturer: syz [ 2312.683875][ T765] usb 4-1: SerialNumber: syz [ 2312.707042][ T765] usb 4-1: config 0 descriptor?? [ 2312.710693][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2312.726630][ T4675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2312.735209][ T4675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2312.806835][ T3677] batman_adv: batadv0: Interface deactivated: wlan0 [ 2312.851573][ T3677] batman_adv: batadv0: Removing interface: wlan0 [ 2312.935167][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 2312.969543][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2312.973856][ T4675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2312.988286][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2313.004176][ T3677] hsr_slave_0: left promiscuous mode [ 2313.023738][ T3677] hsr_slave_1: left promiscuous mode [ 2313.028507][ T4675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2313.037189][ T3677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2313.046328][ T24] usb 2-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 2313.055521][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2313.073539][ T3677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2313.086903][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2313.099352][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2313.132388][ T24] usb 2-1: config 0 descriptor?? [ 2313.151528][ T3677] veth1_macvtap: left promiscuous mode [ 2313.162509][ T3677] veth0_macvtap: left promiscuous mode [ 2313.189792][ T3677] veth1_vlan: left promiscuous mode [ 2313.207192][ T3677] veth0_vlan: left promiscuous mode [ 2314.056202][ T4675] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805c55b000 pfn:0x5c55b [ 2314.068404][ T3677] pim6reg (unregistering): left allmulticast mode [ 2314.075507][ T4675] memcg:ffff88801cef8d00 [ 2314.083289][ T4675] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 2314.107700][ T4697] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2314.118470][ T4675] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 2314.127760][ T4675] raw: ffff88805c55b000 0000000000000000 00000001ffffffff ffff88801cef8d00 [ 2314.143872][ T4697] /dev/nullb0: Can't open blockdev [ 2314.172738][ T4675] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 2314.184568][ T4675] page_owner tracks the page as allocated [ 2314.193873][ T4675] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4675, tgid 4674 (syz.3.8679), ts 2314056166925, free_ts 2313993026244 [ 2314.217568][ T4675] post_alloc_hook+0x1c0/0x230 [ 2314.222781][ T4675] get_page_from_freelist+0x10a3/0x3a30 [ 2314.236312][ T4675] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 2314.248633][ T4675] alloc_pages_mpol+0x1fb/0x550 [ 2314.253682][ T4675] folio_alloc_noprof+0x20/0x2d0 [ 2314.259022][ T4675] filemap_alloc_folio_noprof+0x3a1/0x470 [ 2314.264941][ T4675] page_cache_ra_order+0x56f/0xf20 [ 2314.270543][ T4675] filemap_fault+0x1583/0x29a0 [ 2314.275418][ T4675] __do_fault+0x10d/0x490 [ 2314.289401][ T4675] do_pte_missing+0xf4a/0x3ba0 [ 2314.294647][ T4675] __handle_mm_fault+0x1556/0x2aa0 [ 2314.299934][ T4675] handle_mm_fault+0x589/0xd10 [ 2314.307189][ T4675] do_user_addr_fault+0x7a6/0x1370 [ 2314.314896][ T4675] exc_page_fault+0x64/0xc0 [ 2314.319555][ T4675] asm_exc_page_fault+0x26/0x30 [ 2314.326974][ T4675] page last free pid 15 tgid 15 stack trace: [ 2314.336350][ T4675] __free_frozen_pages+0x7df/0x1160 [ 2314.342647][ T4675] rcu_core+0x79c/0x1530 [ 2314.348139][ T4675] handle_softirqs+0x219/0x8e0 [ 2314.356874][ T4675] run_ksoftirqd+0x3a/0x60 [ 2314.361837][ T4675] smpboot_thread_fn+0x3f7/0xae0 [ 2314.366891][ T4675] kthread+0x3c5/0x780 [ 2314.376069][ T4675] ret_from_fork+0x675/0x7d0 [ 2314.382090][ T4675] ret_from_fork_asm+0x1a/0x30 [ 2314.387349][ T4675] ------------[ cut here ]------------ [ 2314.393315][ T4675] kernel BUG at mm/filemap.c:870! [ 2314.439161][ T4675] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 2314.445623][ T4675] CPU: 1 UID: 0 PID: 4675 Comm: syz.3.8679 Not tainted syzkaller #0 PREEMPT(full) [ 2314.454919][ T4675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2314.464994][ T4675] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 2314.470991][ T4675] Code: 53 c7 ff 48 c7 c6 a0 6e 99 8b 4c 89 ef e8 bd 6b 11 00 90 0f 0b e8 f5 52 c7 ff 48 c7 c6 00 6f 99 8b 4c 89 ef e8 a6 6b 11 00 90 <0f> 0b e8 de 52 c7 ff 90 0f 0b 90 e9 f2 fb ff ff e8 d0 52 c7 ff 48 [ 2314.490586][ T4675] RSP: 0018:ffffc90005147688 EFLAGS: 00010287 [ 2314.496648][ T4675] RAX: 000000000006f3c3 RBX: 0000000000000000 RCX: ffffc90013a91000 [ 2314.504613][ T4675] RDX: 0000000000080000 RSI: ffffffff81f5b8aa RDI: ffff888048e0a904 [ 2314.512573][ T4675] RBP: 0000000000112c00 R08: 0000000000000001 R09: 0000000000000001 [ 2314.520538][ T4675] R10: ffffffff9081f6d7 R11: 0000000000000001 R12: 0000000000000002 [ 2314.528493][ T4675] R13: ffffea00017156c0 R14: 0000000000000000 R15: 1ffff92000a28efb [ 2314.536454][ T4675] FS: 00007fbde79136c0(0000) GS:ffff888124b0a000(0000) knlGS:0000000000000000 [ 2314.545373][ T4675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2314.551942][ T4675] CR2: 0000001b2e7e7ff8 CR3: 000000007dca7000 CR4: 00000000003526f0 [ 2314.559898][ T4675] Call Trace: [ 2314.563157][ T4675] [ 2314.566074][ T4675] ? __pfx___filemap_add_folio+0x10/0x10 [ 2314.571707][ T4675] filemap_add_folio+0x19a/0x610 [ 2314.576637][ T4675] ? __pfx_filemap_add_folio+0x10/0x10 [ 2314.582090][ T4675] ? css_rstat_updated+0x1c2/0x510 [ 2314.587196][ T4675] page_cache_ra_order+0x635/0xf20 [ 2314.592302][ T4675] filemap_fault+0x1583/0x29a0 [ 2314.597051][ T4675] ? __pfx_filemap_fault+0x10/0x10 [ 2314.602148][ T4675] ? __pfx_filemap_map_pages+0x10/0x10 [ 2314.607595][ T4675] __do_fault+0x10d/0x490 [ 2314.611914][ T4675] ? __pfx_filemap_map_pages+0x10/0x10 [ 2314.617360][ T4675] do_pte_missing+0xf4a/0x3ba0 [ 2314.622119][ T4675] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 2314.628040][ T4675] __handle_mm_fault+0x1556/0x2aa0 [ 2314.633164][ T4675] ? mt_find+0x3e2/0xa20 [ 2314.637388][ T4675] ? __pfx___handle_mm_fault+0x10/0x10 [ 2314.642832][ T4675] ? __pfx_mt_find+0x10/0x10 [ 2314.647408][ T4675] ? find_vma+0xbf/0x140 [ 2314.651633][ T4675] ? __pfx_find_vma+0x10/0x10 [ 2314.656291][ T4675] handle_mm_fault+0x589/0xd10 [ 2314.661041][ T4675] ? __pkru_allows_pkey+0x11/0xb0 [ 2314.666047][ T4675] do_user_addr_fault+0x7a6/0x1370 [ 2314.671143][ T4675] ? rcu_is_watching+0x12/0xc0 [ 2314.675895][ T4675] exc_page_fault+0x64/0xc0 [ 2314.680388][ T4675] asm_exc_page_fault+0x26/0x30 [ 2314.685228][ T4675] RIP: 0010:__get_user_nocheck_1+0x6/0x20 [ 2314.690936][ T4675] Code: e9 cf 34 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb 0f ae e8 <0f> b6 10 31 c0 0f 01 ca c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 2314.710524][ T4675] RSP: 0018:ffffc90005147e98 EFLAGS: 00050202 [ 2314.716574][ T4675] RAX: 0000200000006680 RBX: 0000000000000020 RCX: ffffc90013a91000 [ 2314.724529][ T4675] RDX: 0000000000080000 RSI: ffffffff812bd5a6 RDI: ffffc90005147f48 [ 2314.732491][ T4675] RBP: ffff888048e0a480 R08: 0000000000000005 R09: 0000000000000000 [ 2314.740443][ T4675] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000000ca [ 2314.748394][ T4675] R13: ffffc90005147f48 R14: 0000000000000000 R15: 0000000000000000 [ 2314.756354][ T4675] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 2314.762505][ T4675] syscall_user_dispatch+0x78/0x140 [ 2314.767693][ T4675] syscall_trace_enter+0x5e/0x240 [ 2314.772701][ T4675] do_syscall_64+0x3cd/0xfa0 [ 2314.777282][ T4675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2314.783161][ T4675] RIP: 0033:0x7fbde698efc9 [ 2314.787558][ T4675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2314.807149][ T4675] RSP: 002b:00007fbde79130e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2314.815544][ T4675] RAX: ffffffffffffffda RBX: 00007fbde6be5fa8 RCX: 00007fbde698efc9 [ 2314.823497][ T4675] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbde6be5fac [ 2314.831452][ T4675] RBP: 00007fbde6be5fa0 R08: 00007fbde7914000 R09: 0000000000000000 [ 2314.839414][ T4675] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2314.847367][ T4675] R13: 00007fbde6be6038 R14: 00007fff3e4ad770 R15: 00007fff3e4ad858 [ 2314.855328][ T4675] [ 2314.858325][ T4675] Modules linked in: [ 2314.863277][ T4675] ---[ end trace 0000000000000000 ]--- [ 2314.873863][ T4675] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 2314.889318][ T4675] Code: 53 c7 ff 48 c7 c6 a0 6e 99 8b 4c 89 ef e8 bd 6b 11 00 90 0f 0b e8 f5 52 c7 ff 48 c7 c6 00 6f 99 8b 4c 89 ef e8 a6 6b 11 00 90 <0f> 0b e8 de 52 c7 ff 90 0f 0b 90 e9 f2 fb ff ff e8 d0 52 c7 ff 48 [ 2314.909209][ T4675] RSP: 0018:ffffc90005147688 EFLAGS: 00010287 [ 2314.915500][ T4675] RAX: 000000000006f3c3 RBX: 0000000000000000 RCX: ffffc90013a91000 [ 2314.924424][ T4675] RDX: 0000000000080000 RSI: ffffffff81f5b8aa RDI: ffff888048e0a904 [ 2314.932632][ T4675] RBP: 0000000000112c00 R08: 0000000000000001 R09: 0000000000000001 [ 2314.941232][ T4675] R10: ffffffff9081f6d7 R11: 0000000000000001 R12: 0000000000000002 [ 2314.949300][ T4675] R13: ffffea00017156c0 R14: 0000000000000000 R15: 1ffff92000a28efb [ 2314.957481][ T4675] FS: 00007fbde79136c0(0000) GS:ffff888124b0a000(0000) knlGS:0000000000000000 [ 2314.966775][ T4675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2314.973639][ T4675] CR2: 0000001b2e7e7ff8 CR3: 000000007dca7000 CR4: 00000000003526f0 [ 2314.983718][ T4675] Kernel panic - not syncing: Fatal exception [ 2314.994303][ T4675] Kernel Offset: disabled [ 2314.998628][ T4675] Rebooting in 86400 seconds..