last executing test programs: 2m16.434155068s ago: executing program 1 (id=673): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000019300)=ANY=[@ANYBLOB="180000000000000000000000060000009500000000000000cb0c26740c56c5a7a3885f41238b297c983bad786ce0e359da0a8842b1f485a169796a3a0d015cffeabebb85ae3b39173d4841e2490851f57955ddb3e362aa749e"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000100000144000500200106"], 0xf8}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002500000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 2m15.998466427s ago: executing program 1 (id=677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x0, 0x64e, 0xfffffffd, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xc, 0x1, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m15.267592006s ago: executing program 1 (id=680): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x30000) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 2m14.43359965s ago: executing program 1 (id=683): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000016c0)={0x3a, &(0x7f0000000040)=[{0x3e, '\x00', @data=0x400, 0x7ff}, {0x38, '\x00', @buffer={"41ba08a77e085ae6ccbbf8824991a54675055bd54712a957f712832f587c8443", 0x20}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r1, 0xc0186445, &(0x7f0000000000)={0x58, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r1, 0xc0106446, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x81, 0x80, 0x20203843, 0x3, [0x2], [0x810000, 0x2, 0x0, 0x10], [0x2, 0x20, 0x80, 0x46], [0x8ac2]}) r3 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) syz_usb_connect(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b99010203010902"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800004, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x15908091}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2400c085}, 0x20004000) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000020000/0x3000)=nil, 0x800000}) ioctl$LOOP_CLR_FD(r3, 0x4c01) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000380)='!', 0x1}], 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2m10.793990827s ago: executing program 1 (id=690): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000280), 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0245720, &(0x7f0000000040)={0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000014c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r9, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000c8004000b800800020001000000200108801c000780080005000000000008000000000000000800050000000000240007800800050000000000080005000000000008000500000000000800050000000000040007808000078008000600000000000800050000000000080006"], 0x150}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000390400000000fe", @ANYRES32=r10, @ANYBLOB="019800000313000030001280080001007369740024000202000a010102080003000000000000000000000000000000000000fe51f81f3c1350affc81b6f179ee018fdb5755b4119fd5d886dbc4fb73fdd524ae5b1144c7ef4a075a1aba0430c729af72ddcfcd376e05a5537b33431b3950a34663da9c0f7ce82381e348008f68710df0fa0eecadd00c73447bb30a79b130e2933f7621860a6039fb7f6bcb645b589b5b48fff3625e58a407bd045dbe2f52246b43af3ec900d1325c6cbe183cd6af71729705fc1042a41980f46ad765788b0234e7452d847e60d56a238d4c7c6f1c3a2672f64dbd37a7c07bb30a708885e806000000f5b49e"], 0x50}}, 0x0) 2m9.67824268s ago: executing program 1 (id=695): r0 = socket(0xa, 0x3, 0x3a) write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e001f", 0x7) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xc5833c80, 0x7}]}}}}}}}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000280)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000640)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000600)=0x9}) pwritev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000500)}, {&(0x7f0000002840)="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", 0xf00}, {&(0x7f00000002c0)="fb4a738b8fff03179d36d97a7e768c605c5a276efb8604f121d8c3432483ec477b13316313b6ebd165904c8e245bcd4fda069923032292004d8efce529dab99fa5d682b52473829f561f11ac11a428eab9985d916240ec7d21a11926bc5353ea29c9ebd9aed10aa3403a5e35a1116b7b", 0x70}, {&(0x7f0000000880)="b8e4d28ec970bdf146d717bed673a03be982338e021e1058d00776227b342db7671f5a0a2d75e9e5a7fbd4ecc62684a793ab69989c8836473cf7744072ef0bd03758c8c6cb740f2c8abc1b69715c98796adbec917f572e32a4f6977abd032183f498075de23e212c05e37d608df3d5ca7f4b7e08f974d4f12d6c3b6c90c44b9355f52cf1e5a88049a7ab8952d5232e812f6cf20679d54d51950da095fbacb3365e30f62093a40e3c28728a31fb2de8702c2d6995430d6a2b2f3562f772561d470e507a5028ffe0b52422", 0xca}, {&(0x7f0000000780)="5c06f00294cc721081e366131c0fcd179066c58c4951ef284a51dfc59d67e247edf1b4fc93718f3d1d6f3bd71ab442cb6b6ebc9f4bb5", 0x36}, {&(0x7f0000000980)="65b426e7fb8932534948519e6381e5e369fc65a3128f6056c7d77c618f08eae1cd2944eee2ab50617c99c5c7f640757950d3ec8b33b136a5c8a541bcacab7a99019c662a3067ab866343906828fc89ff22fa46ada5e8f982d95f8864918a64e524c6ade8a8cc941b477597003541256b96d62452cee334ec633c5c85bf32cc6a39", 0x81}, {&(0x7f0000000ec0)}, {&(0x7f0000000c40)="8c87ae7dc3a1e41d808b729a7f992fcd10bf446bba2823fa0867f4ebbc9858852027a4c0a9681773961d1e44be4f2b9181e639856ced68ac4a29c8dd327abb9200876aae3fc55bcc6ff8f9a32a00b60448f8b57890578daddcddcad87ee7da5dd0df0f7fe978b92dfd2d2dbea58a81a037131eb4e1d00f7f29636d7dac7bc12420fb69d5e42df30502a17b31b431ddab03dde401f0885b6a53679a53a202cf3caf0c10cdbd6477ff6eec4bd31367da38ad81f4425da68f6f42e5b7a97838921eff094558413b041a69b0b1fff19132c1616d214f35", 0xd5}], 0x8, 0xfffffffd, 0x2000008) syz_open_dev$usbfs(&(0x7f0000000180), 0x202, 0x280) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xc, 0x40, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xab30}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x2, 0xf}, {0x6, 0x24, 0x1a, 0x8, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8d, 0x4, 0xad}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0xc, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x58, 0x77}}}}}}}]}}, 0x0) preadv(r7, &(0x7f0000000cc0)=[{&(0x7f0000000680)=""/193, 0xc1}], 0x1, 0x9, 0x2) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000080)={0x1}) syz_open_dev$MSR(&(0x7f0000000500), 0x7, 0x0) 1m54.164264994s ago: executing program 32 (id=695): r0 = socket(0xa, 0x3, 0x3a) write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e001f", 0x7) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xc5833c80, 0x7}]}}}}}}}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000280)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000640)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000600)=0x9}) pwritev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000500)}, {&(0x7f0000002840)="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", 0xf00}, {&(0x7f00000002c0)="fb4a738b8fff03179d36d97a7e768c605c5a276efb8604f121d8c3432483ec477b13316313b6ebd165904c8e245bcd4fda069923032292004d8efce529dab99fa5d682b52473829f561f11ac11a428eab9985d916240ec7d21a11926bc5353ea29c9ebd9aed10aa3403a5e35a1116b7b", 0x70}, {&(0x7f0000000880)="b8e4d28ec970bdf146d717bed673a03be982338e021e1058d00776227b342db7671f5a0a2d75e9e5a7fbd4ecc62684a793ab69989c8836473cf7744072ef0bd03758c8c6cb740f2c8abc1b69715c98796adbec917f572e32a4f6977abd032183f498075de23e212c05e37d608df3d5ca7f4b7e08f974d4f12d6c3b6c90c44b9355f52cf1e5a88049a7ab8952d5232e812f6cf20679d54d51950da095fbacb3365e30f62093a40e3c28728a31fb2de8702c2d6995430d6a2b2f3562f772561d470e507a5028ffe0b52422", 0xca}, {&(0x7f0000000780)="5c06f00294cc721081e366131c0fcd179066c58c4951ef284a51dfc59d67e247edf1b4fc93718f3d1d6f3bd71ab442cb6b6ebc9f4bb5", 0x36}, {&(0x7f0000000980)="65b426e7fb8932534948519e6381e5e369fc65a3128f6056c7d77c618f08eae1cd2944eee2ab50617c99c5c7f640757950d3ec8b33b136a5c8a541bcacab7a99019c662a3067ab866343906828fc89ff22fa46ada5e8f982d95f8864918a64e524c6ade8a8cc941b477597003541256b96d62452cee334ec633c5c85bf32cc6a39", 0x81}, {&(0x7f0000000ec0)}, {&(0x7f0000000c40)="8c87ae7dc3a1e41d808b729a7f992fcd10bf446bba2823fa0867f4ebbc9858852027a4c0a9681773961d1e44be4f2b9181e639856ced68ac4a29c8dd327abb9200876aae3fc55bcc6ff8f9a32a00b60448f8b57890578daddcddcad87ee7da5dd0df0f7fe978b92dfd2d2dbea58a81a037131eb4e1d00f7f29636d7dac7bc12420fb69d5e42df30502a17b31b431ddab03dde401f0885b6a53679a53a202cf3caf0c10cdbd6477ff6eec4bd31367da38ad81f4425da68f6f42e5b7a97838921eff094558413b041a69b0b1fff19132c1616d214f35", 0xd5}], 0x8, 0xfffffffd, 0x2000008) syz_open_dev$usbfs(&(0x7f0000000180), 0x202, 0x280) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xc, 0x40, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xab30}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x2, 0xf}, {0x6, 0x24, 0x1a, 0x8, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8d, 0x4, 0xad}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0xc, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x58, 0x77}}}}}}}]}}, 0x0) preadv(r7, &(0x7f0000000cc0)=[{&(0x7f0000000680)=""/193, 0xc1}], 0x1, 0x9, 0x2) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000080)={0x1}) syz_open_dev$MSR(&(0x7f0000000500), 0x7, 0x0) 13.329160315s ago: executing program 2 (id=1038): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x81}, 0x3c) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x28040680) timerfd_create(0x7, 0x0) futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) r4 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) socket$packet(0x11, 0x2, 0x300) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000606010200000000000000000300000a050001"], 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0xc0) r7 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x218888, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x9b, "cabbff398a964e9ac7711f3f1718cf2db55c96b4f55906686af17090ea5c461e4d5b5aa70469d5033edfca9f8fb9627fded712761f3e8a3982dfb9fe5631b9600e5b2d0439f1a039b8c8dae9ffb6eaeb38396457d010ccb98069c12831ec7d275e73b933f1071be562806b84cbb84678bfcd76e91bd3f8be2b967112273598d649f0c52f22799a3f41d15ed536746a79c53b748556a5f0aaf9de74"}, &(0x7f0000000140)=0xa3) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000280)={r9, 0x9}, 0x8) 12.830519548s ago: executing program 5 (id=1040): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r2, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000000280)='./file1\x00', 0xc000, 0x0) ioctl$SIOCRSSCAUSE(r6, 0x89e1, &(0x7f0000000280)=0x5) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c80)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "b4c069143122e33e22f7e8b566780204"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) 11.284395292s ago: executing program 2 (id=1042): syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 10.525868275s ago: executing program 2 (id=1045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000140)={0x7, 0x2, 0xb, 0x6, 0x6, 0x300000}) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000400)={0x20, 0x8, 0x1, '`'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000000e80)={0x20, 0x15, 0xa, "79f0999dee4c9fcdb1fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x0, 0xf, 0x20, {0x20, 0x30, "926e724af0133ef12fbb1cb87a01cc8aef1bf5ca226ce1fd17b82e9fca8a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3811}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x3, 0x5, 0x7, 0x0, 0x5, 0x2}}}, &(0x7f0000000800)={0x84, &(0x7f00000002c0)={0x20, 0x13, 0x4, "55eacc5b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000180)={0x0, 0xe, 0x2, "c59f"}, 0x0, 0x0}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00cb0010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="40180000042c04001c0012800b00010062726964676500000c0002800500160003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r8, r7, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 10.111241108s ago: executing program 5 (id=1046): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x2000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8110}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x0, 0x8081) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x0, &(0x7f0000000500)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x2c481) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r5, 0x40189206, 0x0) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) 9.563061287s ago: executing program 0 (id=1048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x106f) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) r5 = syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={r4}) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, &(0x7f0000005280)=[{0x700, 0x0, 0x0, &(0x7f00000006c0), 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) dup(0xffffffffffffffff) 9.554896083s ago: executing program 4 (id=1050): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000016c0)={0x3a, &(0x7f0000000040)=[{0x3e, '\x00', @data=0x400, 0x7ff}, {0x38, '\x00', @buffer={"41ba08a77e085ae6ccbbf8824991a54675055bd54712a957f712832f587c8443", 0x20}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r1, 0xc0186445, &(0x7f0000000000)={0x58, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r1, 0xc0106446, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x81, 0x80, 0x20203843, 0x3, [0x2], [0x810000, 0x2, 0x0, 0x10], [0x2, 0x20, 0x80, 0x46], [0x8ac2]}) r3 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) syz_usb_connect(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b99010203010902"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800004, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x15908091}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2400c085}, 0x20004000) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000020000/0x3000)=nil, 0x800000}) ioctl$LOOP_CLR_FD(r3, 0x4c01) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000380)='!', 0x1}], 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 8.643759219s ago: executing program 0 (id=1051): ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0x3a) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4001, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000180)={0xefe}) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)="005c87b6ce4db0b180f02f21d920aaf96fd7dbb0fe5b523db7980f186bdc4fa83053358de56218bbf37b376d6a682b46469a9105a1589b7da02f48139953768a5f515d39245898b43aace4ddf30dd8298ffb999acd1deeced87b4410508f1e3e13a0f8c2667e2b15e52731cdf91ef27ed17e2c5ca063cb0392d43b8614be63306f929eb7dfe58bd212206e610d66558505b4c08ebfda4f2085f32da54b69eca9c5458daed6eaa88d4cc50aa2956258d11d3c90f18968ba06df0c5c4f862be8cf1f69370d67", 0xc5}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x10, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000010000007b8af8ff00000000b7080000400200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006a000000950000"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8.382878055s ago: executing program 5 (id=1053): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fchdir(r0) syz_clone(0xa0000400, &(0x7f0000000040)="2e83b2e3885138f3289d5aadd8ecec95dccf223882b503b9ebe9966d2c8390b04cf8bea6ad8701fbe1cd9a7326f724dc45c1314c8e0c0060b06c215095c49e58a1a2cad06734230e1cd9476d9be7b0c2e24333572993bcfad4fddf51030b4a0f", 0x60, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="164bfaed332d8b6c77ce6c933c23") (async) r1 = syz_clone(0xa0000400, &(0x7f0000000040)="2e83b2e3885138f3289d5aadd8ecec95dccf223882b503b9ebe9966d2c8390b04cf8bea6ad8701fbe1cd9a7326f724dc45c1314c8e0c0060b06c215095c49e58a1a2cad06734230e1cd9476d9be7b0c2e24333572993bcfad4fddf51030b4a0f", 0x60, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="164bfaed332d8b6c77ce6c933c23") waitid(0x1, r1, &(0x7f0000000180), 0x2, 0x0) (async) waitid(0x1, r1, &(0x7f0000000180), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_macvtap\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)="ab3a58ead724b3b5a24361613304fab5bb4fe1a040", 0x15}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}, @ip_retopts={{0x98, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x16, [@remote]}, @generic={0x44, 0xb, "befa3eb9b36e37bdce"}, @lsrr={0x83, 0x13, 0xab, [@remote, @broadcast, @multicast2, @remote]}, @timestamp_prespec={0x44, 0x1c, 0x88, 0x3, 0xc, [{@remote, 0x8}, {@multicast2, 0x4}, {@local, 0xa}]}, @rr={0x7, 0xf, 0xa5, [@broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @ssrr={0x89, 0x23, 0xf2, [@remote, @remote, @multicast1, @empty, @rand_addr=0x64010100, @multicast2, @empty, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x14, 0x9b, 0x3, 0x5, [{@loopback, 0x6}, {@empty, 0xfff}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0xe8}}], 0x1, 0xc880) (async) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)="ab3a58ead724b3b5a24361613304fab5bb4fe1a040", 0x15}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}, @ip_retopts={{0x98, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x16, [@remote]}, @generic={0x44, 0xb, "befa3eb9b36e37bdce"}, @lsrr={0x83, 0x13, 0xab, [@remote, @broadcast, @multicast2, @remote]}, @timestamp_prespec={0x44, 0x1c, 0x88, 0x3, 0xc, [{@remote, 0x8}, {@multicast2, 0x4}, {@local, 0xa}]}, @rr={0x7, 0xf, 0xa5, [@broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @ssrr={0x89, 0x23, 0xf2, [@remote, @remote, @multicast1, @empty, @rand_addr=0x64010100, @multicast2, @empty, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x14, 0x9b, 0x3, 0x5, [{@loopback, 0x6}, {@empty, 0xfff}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0xe8}}], 0x1, 0xc880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) statx(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x1000, 0x40, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$cgroup_devices(r0, &(0x7f0000001940)='devices.allow\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x2800) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001a40)={0x0, 0x0, 0x0}, &(0x7f0000001a80)=0xc) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001ac0), 0x4400, 0x0) r10 = geteuid() r11 = openat$cgroup_ro(r0, &(0x7f00000020c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000002100)={0xffffffffffffffff}) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$cgroup_int(r0, &(0x7f0000002180)='cpu.weight\x00', 0x2, 0x0) (async) r14 = openat$cgroup_int(r0, &(0x7f0000002180)='cpu.weight\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000021c0)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee00}}, './file0\x00'}) getegid() (async) r16 = getegid() accept$unix(r0, &(0x7f0000002200), &(0x7f0000002280)=0x6e) (async) r17 = accept$unix(r0, &(0x7f0000002200), &(0x7f0000002280)=0x6e) r18 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002680), 0x400800, 0x0) r19 = syz_open_dev$video(&(0x7f00000026c0), 0x4d63, 0x531000) syz_open_dev$loop(&(0x7f0000002700), 0x754, 0x1f90c2) (async) r20 = syz_open_dev$loop(&(0x7f0000002700), 0x754, 0x1f90c2) r21 = syz_open_procfs(r1, &(0x7f0000003d40)='net/raw\x00') r22 = socket$isdn(0x22, 0x3, 0x4) r23 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$unix(r4, &(0x7f0000004700)=[{{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000500)="98506d35e618abf956c6b3f983a42d50e23ab627c7574ae78dea512f1f380172972f81a0b8981878e20b37c387c1b423910ca31cc21b181ff7081157dc28aeeed94419942c86d3cacda2e00f6fc709ba71dbb429e346794ef8a4d690ea260607d3ca4828d1054545", 0x68}, {&(0x7f0000000580)="1c0ab710c286d9f8fbfd295ae74f4ccfc45512382b799652462efc0ba31ae72670258844d2c7583f9f1197c6596ead47e83b64f7777912407159f2c9ba59ebdbdd321b5167efdb79d5f687c7668e82d5311c91149febcb43", 0x58}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="115f93128db27fefd343da67f8bf5390b631f630e49d9488a55b3c2762576d809634a20edb32735d259fdbe796233e63558da1440cd2ddbcad0098b7c3915fcdd0f87cbc16de12c91140c443fa5f78c0d0c746dd09a3a39a446d2feaf1cc3cb50a0166e8b7be405186c882889294c781c13cc7ab9622a5a675712e1af32bc22411f264b4e98c7def6687c65544cad5de1e84e503847ac0479b0dd7d04a2989e4e9349bcfb9597543574ee29260f681cbd6e1e6e590301859961a4d7cc5e5a451ad244ffe77164e7dc6c9881e2e9f5c1f", 0xd0}], 0x4, 0x0, 0x0, 0x40}}, {{&(0x7f0000001740)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000017c0), 0x0, &(0x7f0000001b00)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, r5}}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, r6, r3, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r4, r4, r0, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1, r7, r8}}}, @rights={{0x30, 0x1, 0x1, [r0, r3, r3, r0, 0xffffffffffffffff, r4, r3, r9]}}, @cred={{0x1c, 0x1, 0x2, {r1, r10}}}], 0xe8, 0x4}}, {{&(0x7f0000001c00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001c80)="135bd75d5ae483fc2933ef41eafbc0d1cdf93fe7303fd6e4ca74e7169d65dc136f964f2a0d8aecb268afc66f8c94fc0af1c0cc094490bc360fd4cf1be11f7e0a68901fceaa4b4464b7468822f26e2c1a71fea07ed60b4b69bec296645550fdbede8dda352ea248716ec967a7bd5d0d7850d58636ab09c842f09fa065d4044ca81ec40f996f16c80a6e5e89271c18095e5833d520068233c3b637478a192dc1dc879d93c0876075f290856758dca2f38335daa14588097aabdedb8b34914694e4eab8e6cb206e8299a9c4fa6a9621d40dfb92bd2f13f3ea10e2a3f6bea618376878a5cf325cde8618de473d20aca8e980ef23f7", 0xf3}, {&(0x7f0000001d80)="c9e1ab5851d770aea743f74acc687592a8f293b10f799a00d30a4a623d6abd50654fd30a1ad4d21b131967e847bcac15e42791eec3e58db3b359d9391f6d58ade60bf3579516b2099b752c538b202d99623f88d46370e9437f615b427d15d9c2a8383519fc5f1ffb15d816ae4e2a02731f4abfffa33313", 0x77}, {&(0x7f0000001e00)="c586d5c4a876e160ff2b43271a77b96ebd426a49f46d007f9294f5e050e6dc9bfeff9e610ff3b8419e73af36c48129cf53b4a68b8490b5f5d2b9014e70ddc289d0c9d52aec28bcdfc625b611e76620852f048cebba3a42e75513ccf3ecb1c0fcb75cc6a526aa46ad81c105e0009753680734021b24725494b628b150a2c6f2d36281689e48809e13037a0e0101", 0x8d}, {&(0x7f0000001ec0)="5df1b1a0dd3185dd2701e0f4c8ba55f2fbd9796eaf5a306b861590720e56769d44f2e29c8d4c72cd7ee51a0f66931f47ba8050fa80a0e23a00feb1df511e3c4f8a603bcc625c39ba77c743c9fdae66d86ac47ef43e3c44dfb233b50aceaf3792bd33a0d7fa5dbfd26c245be75ae0cce3d256957f6ad858e9bfa7154098ef38e62314b1", 0x83}, {&(0x7f0000001f80)="28490fc59bd0bb1782ab2f8a4bafdab0a40f5462afd600cff0442b1dcd48ac535870882796a1a5f19c9bcef3337c97cffa73b8691e569f6e9ca017aafe03cd34992aa82dcc736ef5de715bb63b38f4837d3386f678a0f83859dec0c7f535bbefb5b50b0be921f809f5ab9cdd55099e58360acbfeb3ca7d63a27a70f642effebe722e996bd3eba4f4ea025dff363aa957dd64b8b336", 0x95}], 0x5, &(0x7f00000022c0)=[@rights={{0x34, 0x1, 0x1, [r11, r12, r4, r0, r13, r3, 0xffffffffffffffff, r4, r14]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r15}}}, @rights={{0x24, 0x1, 0x1, [r0, r4, r4, r4, r3]}}, @rights={{0x20, 0x1, 0x1, [r0, r3, r0, r4]}}, @rights={{0x18, 0x1, 0x1, [r3, r0]}}, @rights={{0x30, 0x1, 0x1, [r4, r4, r4, r4, 0xffffffffffffffff, r3, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r16}}}, @rights={{0x24, 0x1, 0x1, [r3, r3, r3, r17, r3]}}], 0x130, 0x20020}}, {{&(0x7f0000002400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002480)="80bee74a6ba6321e4668e30c137e22c546881a715f195528fb2d771abc3b904020c456bdfc1d25221ab4c90865e6f3bd666ecc97ee379ca4dc4db753b5ee2134bba6813fff74d7972bab9a2d2b78f89660c121b5b4b41c1593e1768900e88962de", 0x61}, {&(0x7f0000002500)="d3725b0ee466c9ef18e3e56ed8fc402ff7747cafe9b48e1ca26199c1a0485112ee7f27802d05ca27f9b2e56ce196699f9c09df9c880e48a0d961889c3521b4fd1f77d7d0be3ca2f9a35ef1bb10fe6ed39325ff75d9e04a0457727653d79878180075aba7d55982e5ba7bc05ce79f40bda73b94be00a894c70572e224ec9244e0051d4249ee63b1e646661fc3ecaf2f36d5d04222df74f31fc629ef", 0x9b}, {&(0x7f00000025c0)="7cd9181c91a643bafad9ea808557598ab393e648fc3cbc9e9eeed81131ec43aa2b95e2555c4526baa0a6b4280f7be415af581bfb5360cc72912dc1181c64f8c30c0c42d0dc36810e419184366e47c79d0af36f0195cc26a307ef9e", 0x5b}], 0x3, &(0x7f0000002740)=[@rights={{0x34, 0x1, 0x1, [r18, r19, r0, r20, r3, 0xffffffffffffffff, r0, 0xffffffffffffffff, r3]}}], 0x38, 0x40000}}, {{&(0x7f0000002780)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000002800)="9df74a3c32bb06af1413cbea9bcf72c8d47703e74200b8ac732fd4b7774597d0b8eb4e03a6c233fb7b63fcf428b1d5d60feca8b2a55f559483989ed928768b5de258d9f904a5c9cca98fc96006e644d6b9b1c4a446bf3f87f41b62a8b358a67ba4edb62dba98ee05afe8759aa21fdc350aaf1b6ec0666242d96f1dd3f76663f765b557729b7f27ac41d65e7a3578c9921c180b95f69ee808b114ddd7eed37dbded239954ce98ca8f4e820147de80483142bbded5fd160dd49005455287cbb003a7600f", 0xc3}, {&(0x7f0000002900)="cceec11d3d397970de482ae3f5a180b7123bd69882924efdb92c4c3272d981d1e557be69b744c829d6577e52dfc254ace30c634105fde761e2d8f8589db0c3fd443555ffae1ddec24b2665969ba82dedcc051de8a6f1e911a95313d8cf755d95d750248b2f49621f1af0529da5cac302a9d33b390a3788e7b27e6bd7f11a95ca4be8d9639dbb1b7264ee0ec89f3f19c89279fce06599a329c5b8c9d978ed946c5d9a04ce347f3a5a9b60767dd837b311f279b942cebe96dedb7bd4f9882d9fadaa0d6d6f5272303d8d1e970b6a7f8116633c5c9af259ce95453c244ada24b25b97ac15be56aeb325548bff7fa7d0c21660689941f102ddaba7eb39315a7ef2b7d50b924aa783ba51b94b9ede6c4e21eaabe5501e2c93e957c3eeedd8e6d723199c8f2a76eab133be348910b3e0d7e86b9e275a9170a0614ed16509db575f6e661c339c01acbc1a0991b9e62ad1f99ef08ec59f1c1d1017c0233e032331e4e26c8334903bbaf5c161cfc0238bc0dfba6d032e19e92cd8f2b5d245d6620ce5cc39fc4c3c2e40cf9152976a42ba115329a96a4e76806a9049053502e65904d1fb2077a68dc7ca016815f29a30ccc0baee4d19d0c9d885acc5d12a534cc5807efae60c6ddcb537f7706cb5eb677cab2e8cf5422da50b487ae8bb9a6f7770056f244be30dcc25fbf940136bfeeee9ee21e3f1e28cc778660a065aa1f978b6ad6268b11b10500fdc9421b9e0b29b559f1ae555f9ae7baf1e9fe91d481f01f55107ce4997edbcae99610bb3eae007f96edc750c224ea3084dd984b17c21ada907ae70b2faeca95bd94f21aa801321e7b155757b3aad38e2533488cb0c381af645d4b96bdf50e2dd569680f6084d22f9c5b19bf4a75acc13ce09f37a8e1cf2966542b09fc4c198d12df401c90d5197b6246092b0455f8d422c2830732b8fc3df6ad5506edebf4e249d4953942b9b99810232bfc725958f34b9b41212690672ff421e50c69d3e5cf922e8cbdfc27df1f18f4381a3b948a7e7ecbfdf23eb20c2599640f8d7dd1b9142c764ec4daaa93716b01f37b6c5dfee32be9e2306cc35d766d7838d418ce75afcf7a164a2ba187650ee60735a2ad5531fcd7273fd35b4ab24823fc78f62661dcd214edd763bdf2b6b74d31e3285f387af0868f750ef0f2ae21d21370db8370cfab601ffd93c7ca1557acac4d11a942e9b5eb6fac896ba457b66a40c4a87ccf7e0650d854116aa17864567bf64512f6f0f703fee44e5f62608d0e8cb3883d2d0b7c402c727049ecfd36d4dad4fc71f5309728f43d22f162def1592c7aee3e2613afe4731c22d12ba95d808c5df337edc6b34b50976d22fbeca65e49e43fcb6d149297a15e2d28c9133defc8b53f5b72788d2159d9e2499dffdd65c7c7df0f677e8b67e12768d2ddad4acc0ea6326539bfcd21069224f90023ce8ab40ae5d52a6b83327b415a0fc019821c5d0a61256bfe0a8bd728ef606ddf7cee84680c8078a8a173edf28e99c3056520e3409bd077266480a0a77e6b35030da991e013f521983a8487b634fddf8180300121a9980af7304bc5ba0d2b5324eb7e27ce0e16ba30a308070da7a310fe5954cf906f9027c15804f2bcd6118a0688d13b057510edd08717cf2d824ecef95e446f5ed8727da1d9149b34449b148d781ddffa83b707a2d58933ac3e650fede448a0e025b1cc4b46e86123efb4708ff6a9274a42f165b3201b5ab12c3f429847b01d9469dc9c99f531cf5a4fec522f7758f9b50158d89557dd4dfaaefbc4f035e690cc2dd7e38a310e7f13d05500c45aafd2ec9237478394525a494bde812056ea8736544ed875f6d45391d1b12fc43b6718b6ee56f4fe1c8749c350be7f86d3a508c00c86fee774af661ca49acf5c7974ae611254f4939ca3557b4201dca014f1250e4e02d84d721cc4f47982744cf9b91419f01f37da714695e16b8480620ae2b3da6b5348a717da37ea58f255691245ddb5b6c16d09d645dc667ac8c83143bac45364bd9bde67068cde2e84ecf0db61c54ae249422911f9022f0c1ea06c2a146af1a3c6a0cd9e3525cd07e2bcb658351d595cf53fc2ac2f4c829e912cd4d672af7c5d49e26cc72f0fa9109e9fdfa6d47395d186d808ea21b44f942ce988f4423de626f6996fbe5c0a70ec11cab64952517f0a43eb836ea41a91e4fbfe5e54e6fdc6247ffdfadef4e9b77c47cb377e90deb6f1c1537b0da82280caaad46db4041c581250cf822f76612c1ceebe5cfc9b7cd7cf73f57a5f55d6ceff72480a18881ae0c65c14b1c4a3357a745235ab2ad8fc0ae3686e6b8fed6e1ef439abf65956c3854f5c0d3256487f8551d9640d509f5ac06ae40bfa2af5ccc6742c07ca8a059679962df7d18a86ed4ac1afdbc5eae5aad8588645c662feccb1cc0e067d30dc936ed2ed307274d7a31f4a5f338bea51d269085e0753c59542dd7028d1061b17c57ce984b687d79edc12941897b5b61178148d4b2a7974865c81f7df97fe1406234c184f38b12d7555f8dab8ba51a6d44cb1ad3ea96ef8e1f848d5ec0fbf0efa428720c69f327bdfd80a46658bf5077c2140c79a332e1639b615f6ced002f78c3538938e5b58acdd02626d2cca4bc6adb92da0eaf6275f6d610027d1dee4338d679aafa2fe3688ce79a724003692a9fb64bd180defb9142eec815905728c85a20f5059bbde653fe38f4fc0240de75d721da1dc344a29c9a00bc043c15037b2595f575759cb7099811261613388814f3876a8de8ac19474d0022f5cae4fe0c71fe3e8db20d3b7e327e33634304b003644f6837e1ac7b1c90ac90ea3dac14e6e9e3c4dcc51051f2e0d7f9bdfd581f34be8dd7c4e568e8ccda3f546eb5c59eb607a64ecd22929818ff1547b06d4d0635fe95105855a784aaa2fa462077b24e47601c5e0884e0c37942eaef02b829267e41c439f7c50993b51b852669b734a5267a6e88e8ab9f6fa4d15d2c6a4969e76e76b2206cf6b97457a512c969f56a5ce9e0493e0143a5aa47359de4d21f288284694fc61ee9b366ceaa3606ea3226e8b79a7b1992d0608ceae0de668c9144ce12d54690121ad26ec1d626449eaa481b1eb79ca2002abb669902adc28bef21e5cc32f211ecb4cd41ad6605001e3a94d91095a193d04e34c9637ba5a868192496ab9c32ac751499c53a54146d77fd026a466f9da35df8b5d2dfa48801ad807d811edb95e9721d84b2014fac3f3c7d7900c08e26263aa36281913bafeb6f6b72244c11b52bd7327ef9c704ca310891d42013fe34823f2c5dced225d4efec14b070f46587ade4e8f91d1dcd70c2f190c88ad7fb9892d1422e860ca3ddae68f23290073efbb75c9a5236b8099a7caa63c84b28d0ab73a56082cb4bad059f75f59a85ca2dab6311ebd9953867b92a42931b19712891c2d387dcdb23cb2adb6c42f176607aae8792360241ef85413dd379927347d529cfc9f7cf5c3c91fd4c166a4e0585f94976b1af8d305d6f13af3fa9dd651da3ac9d0c1c9835ce9501784121a4bf78c7e17214ae49c50b5243ba38bf41edf1cc92374833faecc37248116fb7db78416749bb67a29b516ce0618c3ec383f9a6b3d10a5e0fd48e4b1376c25374058ef447f9b30ee6bcaace915ea4b6536a7e954b4f42dee46efc2c45382e750d42d88563676c64eca77a5e7fb5be2d98299759d7296472f43aecfdf5c72dbf49affd4965d35c773a2bfb614bf84b642d91e998ad8cc9d9ee326b36cd514beaf769fd49bde103c94ce42d6e46f326162843e2e5e68bb4e8f2af53d72356bce36cb99a5a35618888dd1b91f6a9f29392a0e818f0cf02963332a6a7134db2ab873c6100eafaf596c6826c27024e5b674181c638e5ce374bba5759d466fa54e6cf682b62cf6d69cb86bf8266df049becaa670a5c59f4e07343743b34a6e9b8cf4c7d8e54c2385ca4511aa2bcc3e9b7e6bbb8d3fa2fdd0a4ae52209355419a2ec7b60a8502b99c5bebf2c5082f5501494fde74d162395dbc90143af1f257439c6bddaea151bc7f8c45677aaa85140b3b02c777788472307c46519be861ee781633eaa194773efc19c81f7a63b3baa3403ab394a708b708b0d00dabbbc36103767b6d652defb4dd964fb58e7fa7001ff59ddbf187dfc7e402130261ab6524235e03bc79838476d93709ce20fcc2047e6484cabf79195f3c833cbb7642734d3585a86c530f057ec865f3185695eb1aeca5c0f4f8889d1956e9af6484eb8d507eed05cdc0690659132493793ec923b20259679ea819c8a61303d53639aa63209df072f9cdd6ad6087c73a945b62ab9e7278b49def1d529ec07259c2177de4dc036cd510abd58f37954bcf9725366a567c9e19659c5c6f3d837d1da57611e17f6c855b5a1a6c6dd0408ef784b09bb72692e7285ffc7dce2adfe40f851646e1b9a51236808efb9f091de6e66006b2a678073bf26c2a3c0fb44f920ab5685f24eb16d8777b1c73fb784239af4bc84894d95b4edba2055e7294a8fb84869551340a82f75671f979de063eaa40dd7a0793608006278645ef20f71d10664d6ce0cc1e875a592fba940f668503f6df6b2c5732c1fbc8817afc89de3b5604d64f19f2c02f9b554784dd247b29937e7da76bcfec82e05f8a0bfec77f1451a3be6e6c4b692dc08023284dcd2eceab81a6ef4914f259d71a818b4cd39d89fafa64fedca786c93aec8aadfdbd01f82cda808497a2da828784f1842a3272bc40e145347ba61f94d984ac1bb95335da4bd915dbe4123b2e373bcc0fd00bbbd784b64b37fafa42b387aef13538a143f52505a9a0d2858d2800ddc3b021f96fbdbc3907036bf44096def1fcf13cf5ac003b84cfcd87b4363456b6fc5c7ebd5924e25dda4dca9fe875b72c8a53671af210fe62ff312a754f3595cecdea8dfc0e72850becb5ebf60b76b3f0d92acd1e1d00e53fe0b120ab7f6eb21dedd6b35b18175501a28b2e9d5ab94d693dbf6aa157747b1b9355e61a12c5cd7746cf64a5088d3c95d0191c9ff33a869cc91d806590b61e2fd4ab2070b9cdb28b4fac319cf9a1fb5707e952965a8802337d8080bb9c038d0350fae9e7843c8a2fe5134b0713eba7816f7c11e811b79845555a9a8345975fba101e583da8690c782cc5e45f6649af7212c04f14a02ba120f9a2ad409373122911ade3996cbb78259e0e97d761b65ef72d2785ae98ea0d2189a94f598ebb7d536e4d6db270deb0348e59506a89192de10ad1bf0720cb8fb0c168ca5f0dd82c770e75f4e132cfae0718f81191fad62073794612d41a617c264dc9798719f568f502af6c53fd4769202b153a815daf0baa983fd61bb257d63d2a61c23bad41c6a0d9eb2007e89994ff7e8c31ff4a52f901a0e499f0ad0a1c4f60c0ad7ae3b2ce1a1fe7ac7d2009621cd2a84e8782b12c5b8cb5774ef81426d245d3ab9821fda8cab234309568464093be6a1a6ef6f21853426afdaa172f81c1b4c237c630a76a1538db4bfe7af207224144120997974b1e288c59c15b78f92f906a83032e01db56515bd5416e874622ac46764ada8e7d7727ee456a529797f2c39bcba9cf9e90df8bb4ca6031107efea5b3dbc215df9cc287e9e38d475a535c4047ac9644c4f233bcfee3ea3557f75bb0a1747626829e67af096047a4ba7e9f4c41a955871febda244bdbaffc1b4f3fd66fc2e934d63e6ff87e93acfacc396611581ad6819933db682fe40c40190ec289a91f1b609f9fa0ee948b088dafc61f42d5a7241048b5f842db59d93632c8ea29feccbbfd68bebac00bddb7f3d3fa3b47afb65b9867e10d1", 0x1000}, {&(0x7f0000003900)="6adaa2214a9093ec3bf86ff4b55e0c", 0xf}, {&(0x7f0000003940)="5af8e43290b71d3720dabb93875007fe496d881196740437d4d4a3e556b3f39018ec04fd1b9b2cfb5b72fc948fd139f1df438dbd2077cb51958d34fb3f23fc960cab3b33d02125e5791ce7211d5d9a6dcc78d161ea2df95772ff05b9dacec17c965c449303711697589bcd0e0179bf653c2801234a712dff44705040c039415e688f0fe6de207f948bbb0159292ccf31ce01cade4190b1bd60708f1a9fa6489f94cc8d925c951a4b2299cad6621148bbb00c7bf71c293efbf7a3ebd173714c7cfc9d03b43f81ce39d06ae16e385bdd82bb6df175467920a40cc3f4e65af743aa25906b3a375d6a1565dc", 0xea}, {&(0x7f0000003a40)="fdaff5d0415507221140aa402894ce2c9135e83d75c766b34dc058627d93675f8ba24d3951e1a752855d4cc83be904329221a8c2407993e845b0311876d21eac28b489b1e61688e593c63ec0143d54097f527b5e04a1c777a297a6de41b0780496a7609f4792ddd9bf91466aae4396fbbecf928ae7c4f5dd4d386ff8c58db978c17ee2efba7086b49ceb8a483b2492ab17304ef8362faa537c514ab5a9860d94d721b5c19353774a8bc9676bfe39e6b0ce5649b1fb3b8798de8a9acb582cdcc1a3b7508f7e27", 0xc6}, {&(0x7f0000003b40)="f213184a18690e3787eef07411f6c080768d1f3373d91016c6ccf2b8a71afca2eaf8204a5a7772b3a7846caf320b0b9fea1e61ae08b1a05ab9f79d23f76769cbaacdfb6563ffdd95aa738c3257d6b48b2ad4e7f7aa930ff093c5d5660f58586a56ba537167db17e7669eaf2e7f3b199489e8ab4c689fa1c5f54e3765df66", 0x7e}, {&(0x7f0000003bc0)="3c1cc57690f92b66f42d656112ee9e1a454e92df1463745af49ca9", 0x1b}, {&(0x7f0000003c00)="b39a079b93a0bd91b9810259847a2295f6f7b1212542cbe703bc19ff13f95b6ae2850c439caae36c6c5197cef3b88b21e09747fc44d0b363e408109185f34f211fcee7d7e9a5c531906d2d61fdc623986f704384521f57444a3c22c1825c25b49135fc9ad01206aa831f4eacd4122a3d64154bafe5591ae2cd9cc316f2975b67ee7fbafd6f73331351742e5b019e863a7c3676b321a484a442e47586368d749cbd5c4b8ff0c9a757e9fa4dc42bb553fd8317cd67", 0xb4}], 0x8, &(0x7f0000003d80)=[@rights={{0x2c, 0x1, 0x1, [r0, r3, r21, r0, r4, r3, r22]}}, @rights={{0x28, 0x1, 0x1, [r4, r4, 0xffffffffffffffff, r3, r0, r4]}}], 0x58, 0x10}}, {{&(0x7f0000003e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000045c0)=[{&(0x7f0000003e80)="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", 0xfb}, {&(0x7f0000003f80)="177670fc395e31fe79bc67b3d92f5e6eeb0a13e6afd3b6e9d475456031dbef0c56aacb3a5356e2e438df048abb573063f9a6b48373152369dff8693d392d6dea3b4efc4d8dabfc10a968011d8cc06140c945f3", 0x53}, {&(0x7f0000004000)="4a91f0166f96dadbd7013393d01ed22cdcda03e1e21cf8f944cb6d0bf6f619bf3402c1a87ca65f6feca25687dbe83a23ad19ed94be0ba6a0101e0949ae977863683387d11158834768f494444c9e901e4e18cde772b78823f2f7b6c1770d6a5de65ddd163468e63a4714719913179a5b2a3467ec66d873317e15c91fbf2ba9f98360e6912c94273ad2e5150451953754000c5fb2486dc2eae8890d5ca8bd179ca139f529078cfa3bfd802143426b24939cb693005a1496717b021c357acc6ac9c10919c8968e560154934e8b42084fd0df568d9a297f98c8878e3f", 0xdb}, {&(0x7f0000004100)="aa6f3585834fa3cd473d7061cb36345da5aa4aa7d6631c9886959a504b47f495a925155f20f1eb75298944903bc88e276a983084bdbcbe62d999c9e22ba8f1d8ca51855581e581fd2f967c5a85c51717ec1c3d1a7d5fc864c5b8cb273b2fba9148a138e166578678d253ca9880b3a5878986d95c0d27b43b0f5e3830ddaf5a607b5728d490075a5fb7b7e61a8041899f73796603b7a4de5c5744c11b8c76cb26332f556fd153c41f11a8960293d02af532", 0xb1}, {&(0x7f00000041c0)="d9cfa33078c9afc0ee6a574c21ccc5c2c985056fc4e98fa35698a7b8f7a0688d30f9fbf72429547db06b41da7f65622db5", 0x31}, {&(0x7f0000004200)="943dc667aff66945f5c912ccfc32b95aae1a72d540a1de218225a21e023d00c8d8310c3bdf1336908eb8af0b8f8d3212630023ed9311096c795314d801f7736b9bb6e8b2c6bc432ef4db238e1b87a4c5a588f7309b4eaf3efa208204f9031cf03dc8a51f8cf7e2442fad35be3586703d555ffa750039488b2c10861d12e79c029233a30675387d483d44b2e14967751238349393de73178362d318c9727dbd8e16e7606cc3adce2c8c57322cb673245258fb8253257638a35fa77c28ab344a3ecc44e717a3685e064ae0484204905f6bc0", 0xd1}, {&(0x7f0000004300)="4c4168a2589b124303ea282777e1bd43053a08e86a6fe592a93c3c8d92b7e14665cda61116ddfd46a46462e2326b3ec517c383db35a99aca1a1c576703135390866f22123e782af95d28c6e195810088d991361575823101d14aaac2b3c0bb1a9788d04e2d30f2a435971a2c4e61814530d57d2dff160aa8d85b0b0adc17b905e84089aef8b5e53d57b116fbc6fa1b46bbde57ff0fda770f9e2382b5b8c457e5", 0xa0}, {&(0x7f00000043c0)="8cb46432b90ed853b77bc5c1c5ac3497ed3577b85c802f8022972d83ef4d6ace276d52a4d2d335dd9e9b7dc5ce5c6d9a811b9257d68530e09728e0c98c14b486987e12adb312387053e9d55508183d8e25bf9dc1fa87749910f6976b23475dfaa6a883c2af998a0831be8abb4754f2c8f12931f7206ab8253885b0119af35f9a833f9344759a039bf44578d16187ef6d198b7de0b5ea82c1ba27f387cb3be2eab60a8b186c1ede3b68", 0xa9}, {&(0x7f0000004480)="e660b06455f1f9aa04c801593faa4541eef231de58e2", 0x16}, {&(0x7f00000044c0)="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", 0xfb}], 0xa, &(0x7f0000004680)=[@rights={{0x20, 0x1, 0x1, [r3, r4, r23, r3]}}, @rights={{0x24, 0x1, 0x1, [r3, r3, r0, r3, r3]}}], 0x48, 0x804}}], 0x6, 0x80) ioctl$IOMMU_IOAS_ALLOC(r21, 0x3b81, &(0x7f0000004880)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r21, 0x3b85, &(0x7f00000048c0)={0x28, 0x0, r24, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfd}) ioctl$DRM_IOCTL_GET_CAP(r21, 0xc010640c, &(0x7f0000004900)={0x6}) (async) ioctl$DRM_IOCTL_GET_CAP(r21, 0xc010640c, &(0x7f0000004900)={0x6}) 7.491311782s ago: executing program 5 (id=1054): syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0x2, 0x2, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x2}, 0xffffffffffffffb9) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0xfffffffffffffe3d) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xfffd}, 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, &(0x7f00000000c0)=""/36, &(0x7f0000000140)=0x24) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, 0x0, 0x0) getsockopt$packet_buf(r6, 0x107, 0x6, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.360759491s ago: executing program 3 (id=1055): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 7.328012568s ago: executing program 0 (id=1056): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x7c) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) syz_open_dev$dri(&(0x7f0000000140), 0x100000000009b2, 0x40140) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01072bbd7000ffdbdf25010000000c00060003", @ANYRES64=r5], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x7a, @mcast2, 0x1}}, 0x0, 0x0, 0x222, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f34a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd00"}, 0xd8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) 7.024770746s ago: executing program 3 (id=1057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x0, 0x64e, 0xfffffffd, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xc, 0x1, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0) 6.696617866s ago: executing program 4 (id=1058): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000400) socket$unix(0x1, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) 6.066474511s ago: executing program 5 (id=1059): write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e", 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={0x0}, 0x1, 0x0, 0x0, 0x8844}, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000500)="50981a1f6d047db18cc91ee86ac4cfd7d07f078e2aaaa1eb956d2de729b2ecef010d49211ee022f211a069044ace6611443a36875edd0d27ad50c8c653d1fb2dfac7091bddeb0824db8841f5774babcc0cc9ec4beccbbd91a7ca72d0b60bdb9855239b5bbff1c7215bc682d6020238b79e56d9f50e5fd3c75bdaac15f068e5d41629b13f194340e6f014862516b96eda8a589306e95ad93e9b9a80f8c087555e549fbaee0096262bc0d8a993b2", 0xad}, {&(0x7f0000000600)="7164245da20fccdee39bb8f4f2055dfa97e2710832cd4a27793e79bc409cb5c38a8ad35c9ff44014744d4fab508d57d9fa7e1c831f7e576883c122358fec103da82522517d9243dfe9f77e8f69f4501e6070573756b0538bca622f5b51783625ac3ccea6782360267389f674cbf7e7c1d310bc9fb645bc7f20518e7ba5807ce4e54b1bd58f058215932892ed0a8a831b5441f58f6a2b63a2763923c51ae9b87c58417173a18b24e341ea0f0fc33f2cca12e0abfa556e7f8aceb8ee2a6759372832cb", 0xc2}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f0000000880)="b8e4d28ec970bdf146d717bed673a03be982338e021e1058d00776227b342db7671f5a0a2d75e9e5a7fbd4ecc62684a793ab69989c8836473cf7744072ef0bd03758c8c6cb740f2c8abc1b69715c98796adbec91", 0x54}, {&(0x7f0000000780)="5c06f00294cc721081e366131c0fcd179066c58c4951ef284a51dfc59d67e247edf1b4fc93718f3d1d6f3bd71ab442cb6b6ebc9f4bb562848ec35bfd1a443267ca11db6125b298f33c1fc9ab4fc7e8d290", 0x51}, {&(0x7f0000000980)="65b426e7fb8932534948519e6381e5e369fc65a3128f6056c7d77c618f08eae1cd2944eee2ab50617c99c5c7f640757950d3ec8b33b136a5c8a541bcacab7a99019c662a3067ab866343906828fc89ff22fa46ada5e8f982d95f8864918a64e524c6ade8a8cc941b477597003541256b96d62452cee334ec633c5c85bf32cc6a392ba272cc19f9bd340fe510698d64490ee9abdb8a5be8344574ab87681bc20dc2a2e182248f17c60920ac", 0xab}, {&(0x7f0000000ec0)}, {&(0x7f0000000e00)}, {&(0x7f0000000c40)="8c87ae7dc3a1e41d808b729a7f992fcd10bf446bba2823fa0867f4ebbc9858852027a4c0a9681773961d1e44be4f2b9181e639856ced68ac4a29c8dd327abb9200876aae3fc55bcc6ff8f9a32a00b60448f8b57890578daddcddcad87ee7da5dd0df0f7fe978b92dfd2d2dbea58a81a037131eb4e1d00f7f29636d7dac7bc12420fb69d5e42df30502a17b31b431ddab03dde401f0885b6a53679a53a202cf3caf0c10cdbd6477ff6eec4bd31367da38ad81f4425da68f6f42e5b7a97838921eff094558413b041a69b0b1fff19132c1616d214f35b149534c9cda294cb32127994d0d1cfab82e10bc4c", 0xea}], 0x9, 0xfffffffd, 0x2000008) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5, 0x4}}], 0x18, 0x4008000}, 0x28008841) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.712049067s ago: executing program 4 (id=1060): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) 5.664735248s ago: executing program 2 (id=1061): mq_open(0x0, 0x42, 0x197, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) lsm_get_self_attr(0x68, &(0x7f0000001940)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x7, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mmap$binder(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x1, 0x11, r1, 0x3) r3 = syz_open_dev$video4linux(&(0x7f0000001140), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000000)={0x2, 0x0, 0x300a, 0x0, 0x7, 0x9, 0x0, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0xc}}, './file0\x00'}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e34, 0x4, 0x10, 0xffffffa6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect$uac1(0x0, 0x109, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000840)=[@in6={0xa, 0x4e21, 0x4, @empty, 0xfc}, @in6={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4c}, @in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x3}, @in6={0xa, 0x4e20, 0x90, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x13}], 0x70) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f00000003c0)={0xc}) 5.563047336s ago: executing program 4 (id=1062): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000019300)=ANY=[@ANYBLOB="180000000000000000000000060000009500000000000000cb0c26740c56c5a7a3885f41238b297c983bad786ce0e359da0a8842b1f485a169796a3a0d015cffeabebb85ae3b39173d4841e2490851f57955ddb3e362aa749e78954618770288d3f8cee6766b9689a904c36f5b24145ef1cded6fb463"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000100000144000500200106"], 0xf8}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002500000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 4.937794186s ago: executing program 3 (id=1063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x401, 0x1, 0x0, {{}, {}, {0x14, 0x18, {0x1f, @bearer=@l2={'ib', 0x3a, 'macvlan0\x00'}}}}}, 0x30}}, 0x0) (fail_nth: 7) 4.885584981s ago: executing program 4 (id=1064): sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000740)={r1, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r1, 0xfff7, 0x80}, &(0x7f0000000240)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000010, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004882) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) symlink(0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8b4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x880, 0x2, [@TCA_U32_POLICE={0x858, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x7ffff, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0xffffffff, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0xa, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x3, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x3, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x10, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x7, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x100, 0x80, 0x2, 0x2, 0x1, 0x5, 0x20000101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x3e, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x106, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x60, 0xe}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 4.537360341s ago: executing program 3 (id=1065): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0xee}, {}, {}, {}, {}, {}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x400, 0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6c2b}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170928bd7000ffdbdf25010000000300070002000000000004000300000008000a0000000000060002000100000008001700", @ANYRES32, @ANYBLOB="c1f56fc76f2b7489042581086c08af51d7bebe647ea716abaceb27c90df8c2cb641fb8febc03f82819c5dbf0163cabafd20e3fe11a5714e7f39de9cc8635ccd0d6301428b0f86c52d81ff432932be7af0c95a86c07d1f0de467649a659a31b0239f61f58f8c7568e90608f01536d7965b108ee90113bb1fa6e6f2efbb01688249ffc5d40a68489791b18a4a1011de95376673e0cd638bdd6f1f459a32dad"], 0x3c}, 0x1, 0x620b}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f00000000c0)={r5, 0xc74}) (async, rerun: 32) recvmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f0000000080)=""/24, 0x18}], 0x2, &(0x7f0000000540)=""/127, 0x7f}, 0x80000020) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x70) 3.42378502s ago: executing program 4 (id=1066): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x12, &(0x7f0000000100)=@raw=[@printk={@ld}, @call={0x85, 0x0, 0x0, 0x78}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0x10000, 0xb1, &(0x7f0000000200)=""/177, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x6, 0x0, 0xfffffffd}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0x6, 0x6}, {0x1, 0x2, 0x5, 0x4}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x3a, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc6a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x5f}, @jmp={0x5, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xeffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.303967007s ago: executing program 0 (id=1067): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.161854584s ago: executing program 0 (id=1068): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000300)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) 2.973605793s ago: executing program 5 (id=1069): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000040)=@arm64={0x8, 0x0, 0x6, '\x00', 0x9}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x74000000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) 2.913269562s ago: executing program 3 (id=1070): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000400) socket$unix(0x1, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) 1.556800873s ago: executing program 2 (id=1071): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @loopback, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000001580)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0x18}, 0xc000) 1.389903883s ago: executing program 3 (id=1072): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48}}, 0x0) 919.466623ms ago: executing program 2 (id=1073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x0, 0x64e, 0xfffffffd, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xc, 0x1, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0) 0s ago: executing program 0 (id=1074): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000019300)=ANY=[@ANYBLOB="180000000000000000000000060000009500000000000000cb0c26740c56c5a7a3885f41238b297c983bad786ce0e359da0a8842b1f485a169796a3a0d015cffeabebb85ae3b39173d4841e2490851f57955ddb3e362aa749e78954618770288d3f8cee6766b9689a904c36f5b24145ef1cded6fb463"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000100000144000500200106"], 0xf8}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002500000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) kernel console output (not intermixed with test programs): 2, bcdDevice= 0.00 [ 347.990818][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.998864][ T29] audit: type=1400 audit(1773021780.841:1267): avc: denied { create } for pid=8857 comm="syz.4.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 348.020335][ T5871] usb 1-1: config 0 descriptor?? [ 348.035803][ T29] audit: type=1400 audit(1773021780.841:1268): avc: denied { write } for pid=8857 comm="syz.4.718" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 348.394040][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 348.394057][ T29] audit: type=1400 audit(1773021781.351:1276): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.436788][ T29] audit: type=1400 audit(1773021781.351:1277): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.461837][ T29] audit: type=1400 audit(1773021781.351:1278): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.491605][ T29] audit: type=1400 audit(1773021781.451:1279): avc: denied { write } for pid=8864 comm="syz.2.719" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 348.543134][ T5871] hid-rmi 0003:0461:4E72.0006: unknown main item tag 0x1 [ 348.550300][ T5871] hid-rmi 0003:0461:4E72.0006: item fetching failed at offset 2/11 [ 348.559348][ T5871] hid-rmi 0003:0461:4E72.0006: parse failed [ 348.575475][ T5871] hid-rmi 0003:0461:4E72.0006: probe with driver hid-rmi failed with error -22 [ 348.633685][ T29] audit: type=1400 audit(1773021781.591:1280): avc: denied { create } for pid=8868 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 348.656911][ T29] audit: type=1400 audit(1773021781.621:1281): avc: denied { write } for pid=8868 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 348.678750][ T29] audit: type=1400 audit(1773021781.621:1282): avc: denied { read } for pid=8868 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 348.731779][ T8871] netlink: 'syz.4.720': attribute type 4 has an invalid length. [ 348.762088][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 348.842789][ T29] audit: type=1400 audit(1773021781.691:1283): avc: denied { create } for pid=8867 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 349.062845][ T814] usb 1-1: USB disconnect, device number 38 [ 349.144369][ T29] audit: type=1400 audit(1773021781.711:1284): avc: denied { name_bind } for pid=8867 comm="syz.4.720" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 349.307567][ T29] audit: type=1400 audit(1773021781.711:1285): avc: denied { node_bind } for pid=8867 comm="syz.4.720" saddr=ff02::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 350.544878][ T814] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 350.846171][ T814] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.863389][ T814] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.466286][ T814] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.476432][ T814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.485393][ T814] usb 1-1: Product: 麊젨岵똗ᗴഊ뿡鬬砩䓬㫪ᐤᩆІ襛챾ꂊ쌉ꬣⴎ紤⪐덽雹嶧㎋ꇼ␲㖟혗䬨ﯔ伎ﯛ贈饚Ӭ㭞袺㽃劎鹃䷕㨦〬腒Ἤ㪝障铩廳ﲥ낹е颗畲폷苠䉔冻઴騉 [ 351.507233][ T814] usb 1-1: Manufacturer: 혛쩶冒ㆯ摱槶Ǧₘ睙㟰Ḽ喹谞抂ㆴ䢐殚魒猛䰀뙋泔⍣≶⒩ũ鳬ᨄ鉤輕∶흍Ά [ 351.521149][ T814] usb 1-1: SerialNumber: syz [ 351.873535][ T8897] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 352.264624][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 352.954193][ T5809] block nbd2: Receive control failed (result -32) [ 352.977949][ T8903] block nbd2: shutting down sockets [ 353.304272][ T8911] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 353.974268][ T814] usb 1-1: 0:1 : does not exist [ 354.006317][ T814] usb 1-1: 0:2 : does not exist [ 354.055974][ T814] usb 1-1: unit 5 not found! [ 354.128870][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 354.128888][ T29] audit: type=1400 audit(1773021787.091:1329): avc: denied { block_suspend } for pid=8912 comm="syz.4.731" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 354.275461][ T29] audit: type=1400 audit(1773021787.241:1330): avc: denied { allowed } for pid=8916 comm="syz.0.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 354.295140][ T29] audit: type=1400 audit(1773021787.241:1331): avc: denied { map } for pid=8916 comm="syz.0.733" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 354.717687][ T814] usb 1-1: USB disconnect, device number 39 [ 354.752450][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.760858][ T29] audit: type=1400 audit(1773021787.241:1332): avc: denied { read write } for pid=8916 comm="syz.0.733" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 354.807651][ T29] audit: type=1400 audit(1773021787.331:1333): avc: denied { append } for pid=8912 comm="syz.4.731" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.897591][ T29] audit: type=1400 audit(1773021787.711:1334): avc: denied { write } for pid=8914 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 355.162801][ T8927] netlink: 64 bytes leftover after parsing attributes in process `syz.4.734'. [ 355.253731][ T29] audit: type=1400 audit(1773021788.111:1335): avc: denied { create } for pid=8925 comm="syz.4.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 355.305405][ T29] audit: type=1400 audit(1773021788.121:1336): avc: denied { write } for pid=8925 comm="syz.4.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 355.707907][ T29] audit: type=1400 audit(1773021788.121:1337): avc: denied { nlmsg_write } for pid=8925 comm="syz.4.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 355.744039][ T814] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 355.764382][ T29] audit: type=1400 audit(1773021788.311:1338): avc: denied { map_create } for pid=8925 comm="syz.4.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 356.033360][ T814] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.055676][ T814] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 356.066847][ T814] usb 1-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 356.085359][ T814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.093441][ T814] usb 1-1: Product: syz [ 356.097994][ T814] usb 1-1: Manufacturer: syz [ 356.102589][ T814] usb 1-1: SerialNumber: syz [ 356.127197][ T814] usb 1-1: config 0 descriptor?? [ 356.497566][ T792] usb 1-1: USB disconnect, device number 40 [ 356.786976][ T8949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.739'. [ 357.235630][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.249044][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.257909][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.266897][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.277826][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 357.304577][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.313458][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.321246][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.332158][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.342549][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 357.615192][ T8959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.741'. [ 357.639484][ T8955] lo speed is unknown, defaulting to 1000 [ 357.680074][ T8959] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 358.054910][ T8955] chnl_net:caif_netlink_parms(): no params data found [ 358.280588][ T8955] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.291752][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.299166][ T8955] bridge_slave_0: entered allmulticast mode [ 358.332731][ T8955] bridge_slave_0: entered promiscuous mode [ 358.496248][ T8955] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.522623][ T8978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.745'. [ 358.569675][ T792] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 358.570027][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.597906][ T8955] bridge_slave_1: entered allmulticast mode [ 358.630427][ T8978] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 358.727629][ T8955] bridge_slave_1: entered promiscuous mode [ 358.756689][ T792] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 358.785500][ T8955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.805259][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.807244][ T8955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.831049][ T792] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 358.865174][ T792] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 358.875201][ T792] usb 1-1: Manufacturer: syz [ 358.884119][ T792] usb 1-1: config 0 descriptor?? [ 358.958654][ T8955] team0: Port device team_slave_0 added [ 358.986208][ T792] rc_core: IR keymap rc-hauppauge not found [ 358.992167][ T792] Registered IR keymap rc-empty [ 359.013427][ T792] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 359.042037][ T8984] netlink: 64 bytes leftover after parsing attributes in process `syz.4.747'. [ 359.280040][ T8955] team0: Port device team_slave_1 added [ 359.299671][ T792] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 359.346188][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 359.346203][ T29] audit: type=1400 audit(1773021792.311:1361): avc: denied { read } for pid=5161 comm="acpid" name="event4" dev="devtmpfs" ino=3256 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.350411][ T8955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.395653][ T5805] Bluetooth: hci5: command tx timeout [ 359.407284][ T29] audit: type=1400 audit(1773021792.311:1362): avc: denied { open } for pid=5161 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3256 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.425128][ T8955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.457591][ T29] audit: type=1400 audit(1773021792.311:1363): avc: denied { ioctl } for pid=5161 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3256 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.486374][ T29] audit: type=1400 audit(1773021792.351:1364): avc: denied { setopt } for pid=8987 comm="syz.3.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 359.521847][ T29] audit: type=1400 audit(1773021792.351:1365): avc: denied { ioctl } for pid=8987 comm="syz.3.748" path="socket:[20977]" dev="sockfs" ino=20977 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 359.618161][ T29] audit: type=1400 audit(1773021792.421:1366): avc: denied { write } for pid=8987 comm="syz.3.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 359.638983][ T29] audit: type=1400 audit(1773021792.421:1367): avc: denied { create } for pid=8987 comm="syz.3.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 359.665314][ T29] audit: type=1400 audit(1773021792.421:1368): avc: denied { setopt } for pid=8987 comm="syz.3.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 359.693028][ T29] audit: type=1400 audit(1773021792.661:1369): avc: denied { create } for pid=8973 comm="syz.0.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 359.817728][ T29] audit: type=1400 audit(1773021792.661:1370): avc: denied { connect } for pid=8973 comm="syz.0.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 359.831909][ T5921] usb 1-1: USB disconnect, device number 41 [ 359.864079][ T8955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.977259][ T8955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.989129][ T9003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.999511][ T9003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.002734][ T8955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.038949][ T8955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.282112][ T9007] netlink: 88 bytes leftover after parsing attributes in process `syz.2.751'. [ 360.291288][ T9007] netlink: 100 bytes leftover after parsing attributes in process `syz.2.751'. [ 360.313669][ T9007] netlink: 48 bytes leftover after parsing attributes in process `syz.2.751'. [ 360.610459][ T8955] hsr_slave_0: entered promiscuous mode [ 360.616847][ T8955] hsr_slave_1: entered promiscuous mode [ 360.622962][ T8955] debugfs: 'hsr0' already exists in 'hsr' [ 360.628740][ T8955] Cannot create hsr debugfs directory [ 360.686277][ T8992] ceph: No mds server is up or the cluster is laggy [ 360.712303][ T9009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.732427][ T9009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.896807][ T8955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 360.934076][ T8955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 361.034371][ T8955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 361.046852][ T8955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 361.283671][ T9023] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 361.465298][ T5805] Bluetooth: hci5: command tx timeout [ 361.778420][ T8955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.800540][ T8955] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.879039][ T8955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 361.902561][ T8955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.942653][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.949763][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.985396][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.992485][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.304501][ T8955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.113420][ T8955] veth0_vlan: entered promiscuous mode [ 363.143793][ T8955] veth1_vlan: entered promiscuous mode [ 363.317320][ T8955] veth0_macvtap: entered promiscuous mode [ 363.351494][ T8955] veth1_macvtap: entered promiscuous mode [ 363.383844][ T8955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.438633][ T8955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.545688][ T5805] Bluetooth: hci5: command tx timeout [ 363.828320][ T66] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.055781][ T66] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.085434][ T66] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.137552][ T8902] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.391534][ T7446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.403743][ T9049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.758'. [ 364.416164][ T7446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.439063][ T7446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.439091][ T7446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.447424][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 364.447439][ T29] audit: type=1400 audit(1773021797.411:1374): avc: denied { mounton } for pid=8955 comm="syz-executor" path="/root/syzkaller.xT58bP/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 364.447969][ T29] audit: type=1400 audit(1773021797.411:1375): avc: denied { mount } for pid=8955 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 364.448888][ T29] audit: type=1400 audit(1773021797.411:1376): avc: denied { mounton } for pid=8955 comm="syz-executor" path="/root/syzkaller.xT58bP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 364.449996][ T29] audit: type=1400 audit(1773021797.411:1377): avc: denied { mount } for pid=8955 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 364.451762][ T29] audit: type=1400 audit(1773021797.411:1378): avc: denied { mounton } for pid=8955 comm="syz-executor" path="/root/syzkaller.xT58bP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 364.452543][ T29] audit: type=1400 audit(1773021797.411:1379): avc: denied { mounton } for pid=8955 comm="syz-executor" path="/root/syzkaller.xT58bP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 364.457469][ T29] audit: type=1400 audit(1773021797.421:1380): avc: denied { unmount } for pid=8955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 364.464297][ T29] audit: type=1400 audit(1773021797.421:1381): avc: denied { mounton } for pid=8955 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 364.464344][ T29] audit: type=1400 audit(1773021797.421:1382): avc: denied { mount } for pid=8955 comm="syz-executor" name="/" dev="gadgetfs" ino=7303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 364.464384][ T29] audit: type=1400 audit(1773021797.421:1383): avc: denied { mount } for pid=8955 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 365.066852][ T9055] netlink: 64 bytes leftover after parsing attributes in process `syz.4.759'. [ 365.635446][ T5805] Bluetooth: hci5: command tx timeout [ 366.043712][ T5923] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 366.075002][ T9069] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 366.605381][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 366.627214][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.643024][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 366.662403][ T5923] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 366.662699][ T9071] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 366.672078][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.689858][ T5923] usb 6-1: config 0 descriptor?? [ 366.835066][ T9078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.846257][ T9078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.194821][ T5923] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 367.215228][ T5923] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 367.227971][ T5923] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 367.242560][ T5923] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 367.253306][ T5923] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 367.260142][ T5923] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 367.267834][ T5923] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 367.275236][ T5923] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 367.282052][ T5923] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 367.289622][ T5923] kye 0003:0458:0153.0007: unknown main item tag 0x0 [ 367.335881][ T5923] kye 0003:0458:0153.0007: hidraw0: USB HID v0.0a Device [HID 0458:0153] on usb-dummy_hcd.5-1/input0 [ 369.241871][ T5923] usb 6-1: USB disconnect, device number 2 [ 369.526726][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 369.526767][ T29] audit: type=1400 audit(1773021802.491:1418): avc: denied { ioctl } for pid=9106 comm="syz.2.775" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 369.728730][ T9108] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 370.216078][ T9116] netlink: 'syz.4.777': attribute type 4 has an invalid length. [ 370.223876][ T9116] netlink: 152 bytes leftover after parsing attributes in process `syz.4.777'. [ 370.485151][ T29] audit: type=1400 audit(1773021803.201:1419): avc: denied { bind } for pid=9112 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.516115][ T29] audit: type=1400 audit(1773021803.201:1420): avc: denied { write } for pid=9112 comm="syz.4.777" path="socket:[22849]" dev="sockfs" ino=22849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.657036][ T29] audit: type=1400 audit(1773021803.611:1421): avc: denied { write } for pid=9124 comm="syz.5.781" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 370.683366][ T9125] input: syz0 as /devices/virtual/input/input24 [ 370.877795][ T9131] [U]  [ 370.880730][ T9131] [U] K{ [ 370.883746][ T9131] [U] t 1ŠFfˊ`GJgo/mC [ 370.890678][ T9131] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 370.906208][ T9131] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 370.916631][ T9131] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 370.952276][ T9131] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 370.975829][ T9131] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 370.986920][ T9131] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 370.998439][ T9131] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 371.571109][ T9131] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 371.579600][ T9131] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 371.593137][ T9131] [U] 22Ʃx?0;3u [ 371.597279][ T9131] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 371.622170][ T9131] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 371.631428][ T9131] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 371.639988][ T9131] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 371.646116][ T9131] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 371.658407][ T9131] [U] ec [ 371.661496][ T9131] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 371.823261][ T9131] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 372.536940][ T9133] ceph: No mds server is up or the cluster is laggy [ 372.719621][ T9153] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 372.745471][ T5923] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 372.751729][ T5805] Bluetooth: hci5: command 0x0c1a tx timeout [ 373.043940][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.248828][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.688734][ T5923] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 374.083967][ T29] audit: type=1400 audit(1773021807.041:1422): avc: denied { setopt } for pid=9158 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 374.235002][ T9160] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 374.242454][ T29] audit: type=1400 audit(1773021807.191:1423): avc: denied { mounton } for pid=9158 comm="syz.2.788" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 374.666652][ T29] audit: type=1400 audit(1773021807.631:1424): avc: denied { bind } for pid=9166 comm="syz.5.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 374.865672][ T29] audit: type=1400 audit(1773021807.641:1425): avc: denied { setopt } for pid=9166 comm="syz.5.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 374.927090][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803848f800: rx timeout, send abort [ 374.960837][ T29] audit: type=1400 audit(1773021807.911:1426): avc: denied { read } for pid=5158 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 375.428225][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803848ec00: rx timeout, send abort [ 375.445142][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803848f800: abort rx timeout. Force session deactivation [ 375.873985][ T5923] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 375.936456][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803848ec00: abort rx timeout. Force session deactivation [ 375.955835][ T9159] netlink: 'syz.2.788': attribute type 10 has an invalid length. [ 376.009328][ T9159] team0: Port device dummy0 added [ 376.058077][ T9159] binder: 9158:9159 ioctl c00c6211 0 returned -14 [ 376.085340][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 376.095453][ T29] audit: type=1400 audit(1773021807.911:1427): avc: denied { search } for pid=5158 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.119343][ T29] audit: type=1400 audit(1773021807.911:1428): avc: denied { search } for pid=5158 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.143259][ T5923] usb 6-1: config index 0 descriptor too short (expected 2075, got 27) [ 376.151663][ T5923] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 376.160089][ T5923] usb 6-1: config 0 has no interface number 0 [ 376.166471][ T29] audit: type=1400 audit(1773021807.911:1429): avc: denied { add_name } for pid=5158 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.196310][ T5923] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 376.215144][ T5923] usb 6-1: config 0 interface 200 has no altsetting 0 [ 376.232190][ T29] audit: type=1400 audit(1773021807.911:1430): avc: denied { create } for pid=5158 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 376.260986][ T5923] usb 6-1: New USB device found, idVendor=0b57, idProduct=8556, bcdDevice=6d.39 [ 376.270238][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.285381][ T5923] usb 6-1: Product: syz [ 376.290267][ T29] audit: type=1400 audit(1773021807.921:1431): avc: denied { append open } for pid=5158 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 376.315863][ T814] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 376.323740][ T5923] usb 6-1: Manufacturer: syz [ 376.332491][ T5923] usb 6-1: SerialNumber: syz [ 376.346476][ T29] audit: type=1400 audit(1773021807.921:1432): avc: denied { getattr } for pid=5158 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 376.376366][ T5923] usb 6-1: config 0 descriptor?? [ 376.384128][ T29] audit: type=1400 audit(1773021808.981:1433): avc: denied { read } for pid=9158 comm="syz.2.788" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 376.467885][ T9177] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 376.501343][ T9183] netlink: 40 bytes leftover after parsing attributes in process `syz.3.796'. [ 376.520781][ T814] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 376.530563][ T814] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 376.547365][ T814] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.591671][ T814] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 376.601175][ T814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.601346][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.791'. [ 376.634396][ T814] usb 1-1: Product: syz [ 376.653204][ T814] usb 1-1: Manufacturer: syz [ 376.677539][ T814] usb 1-1: SerialNumber: syz [ 376.697572][ T814] hub 1-1:1.0: bad descriptor, ignoring hub [ 376.704908][ T814] hub 1-1:1.0: probe with driver hub failed with error -5 [ 376.733051][ T5923] usbhid 6-1:0.200: couldn't find an input interrupt endpoint [ 376.751272][ T5923] usb 6-1: USB disconnect, device number 3 [ 376.913150][ T814] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 377.775418][ T814] usb 1-1: USB disconnect, device number 42 [ 377.822703][ T814] usblp1: removed [ 378.066176][ T9195] loop5: detected capacity change from 0 to 7 [ 378.638232][ T9195] Dev loop5: unable to read RDB block 7 [ 378.643848][ T9195] loop5: unable to read partition table [ 378.650689][ T9195] loop5: partition table beyond EOD, truncated [ 378.657144][ T9195] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 378.753109][ T9201] tipc: Enabled bearer , priority 0 [ 378.780917][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 378.858699][ T9207] syzkaller0: entered promiscuous mode [ 378.864193][ T9207] syzkaller0: entered allmulticast mode [ 378.962916][ T9208] tipc: Started in network mode [ 378.975670][ T9208] tipc: Node identity 0216fd48bad3, cluster identity 4711 [ 378.983004][ T9208] tipc: Enabled bearer , priority 0 [ 378.993078][ T9201] tipc: Resetting bearer [ 379.000080][ T9] usb 3-1: config 0 has no interfaces? [ 379.011463][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 379.022743][ T9203] syzkaller0: entered promiscuous mode [ 379.028535][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.347844][ T814] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 379.396650][ T9] usb 3-1: Product: syz [ 379.400827][ T9] usb 3-1: Manufacturer: syz [ 379.409637][ T9203] syzkaller0: entered allmulticast mode [ 379.415320][ T9] usb 3-1: SerialNumber: syz [ 379.427183][ T9] usb 3-1: config 0 descriptor?? [ 379.433600][ T9200] tipc: Resetting bearer [ 379.465782][ T9200] tipc: Disabling bearer [ 379.493069][ T9203] tipc: Resetting bearer [ 379.510664][ T9202] tipc: Resetting bearer [ 379.535214][ T814] usb 6-1: device descriptor read/64, error -71 [ 379.546263][ T9202] tipc: Disabling bearer [ 379.716573][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 379.716601][ T29] audit: type=1326 audit(1773021812.681:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.5.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ab7d9c42b code=0x7ffc0000 [ 379.754299][ T9197] blk_print_req_error: 6 callbacks suppressed [ 379.754328][ T9197] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 379.966159][ T814] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 379.995374][ T9197] buffer_io_error: 5 callbacks suppressed [ 379.995390][ T9197] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 380.080225][ T29] audit: type=1400 audit(1773021812.711:1470): avc: denied { ioctl } for pid=9194 comm="syz.2.800" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23084 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 380.081023][ T9217] lo speed is unknown, defaulting to 1000 [ 380.124386][ T5871] usb 3-1: USB disconnect, device number 25 [ 380.141015][ T814] usb 6-1: device descriptor read/64, error -71 [ 380.169331][ T9217] lo speed is unknown, defaulting to 1000 [ 380.178436][ T29] audit: type=1326 audit(1773021812.941:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.5.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ab7d9c42b code=0x7ffc0000 [ 380.213206][ T9217] lo speed is unknown, defaulting to 1000 [ 380.222445][ T29] audit: type=1326 audit(1773021812.941:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.5.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ab7d9c42b code=0x7ffc0000 [ 380.264738][ T29] audit: type=1326 audit(1773021812.951:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.5.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ab7d9c42b code=0x7ffc0000 [ 380.295643][ T814] usb usb6-port1: attempt power cycle [ 380.310272][ T29] audit: type=1326 audit(1773021813.041:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.5.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ab7d9c42b code=0x7ffc0000 [ 380.351774][ T29] audit: type=1326 audit(1773021813.261:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.5.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ab7d9c42b code=0x7ffc0000 [ 380.662602][ T814] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 380.690216][ T29] audit: type=1326 audit(1773021813.261:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.5.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ab7d9c42b code=0x7ffc0000 [ 380.808786][ T814] usb 6-1: device descriptor read/8, error -71 [ 380.905999][ T29] audit: type=1326 audit(1773021813.261:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.5.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ab7d9c42b code=0x7ffc0000 [ 381.003053][ T9226] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 381.148149][ T29] audit: type=1326 audit(1773021813.341:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.5.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ab7d9c42b code=0x7ffc0000 [ 381.438940][ T814] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 381.658294][ T814] usb 6-1: device descriptor read/8, error -71 [ 381.777523][ T814] usb usb6-port1: unable to enumerate USB device [ 381.850728][ T9217] infiniband syU: set active [ 381.856402][ T814] lo speed is unknown, defaulting to 1000 [ 381.960955][ T9238] FAULT_INJECTION: forcing a failure. [ 381.960955][ T9238] name failslab, interval 1, probability 0, space 0, times 0 [ 381.979362][ T9238] CPU: 1 UID: 0 PID: 9238 Comm: syz.5.814 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.979381][ T9238] Tainted: [L]=SOFTLOCKUP [ 381.979385][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.979391][ T9238] Call Trace: [ 381.979395][ T9238] [ 381.979399][ T9238] dump_stack_lvl+0x100/0x190 [ 381.979420][ T9238] should_fail_ex.cold+0x5/0xa [ 381.979436][ T9238] should_failslab+0xc2/0x120 [ 381.979452][ T9238] __kmalloc_cache_noprof+0x7a/0x6f0 [ 381.979465][ T9238] ? fuse_lookup_name+0x19f/0x760 [ 381.979476][ T9238] ? rcu_is_watching+0x12/0xc0 [ 381.979491][ T9238] fuse_lookup_name+0x19f/0x760 [ 381.979501][ T9238] ? fuse_lock_inode+0xd2/0x110 [ 381.979513][ T9238] ? __pfx_fuse_lookup_name+0x10/0x10 [ 381.979524][ T9238] ? __pfx___mutex_lock+0x10/0x10 [ 381.979548][ T9238] fuse_lookup+0x209/0x550 [ 381.979559][ T9238] ? __pfx_fuse_lookup+0x10/0x10 [ 381.979577][ T9238] ? lockdep_init_map_type+0x5c/0x250 [ 381.979590][ T9238] __lookup_slow+0x251/0x460 [ 381.979605][ T9238] ? __pfx___lookup_slow+0x10/0x10 [ 381.979630][ T9238] lookup_slow+0x50/0x70 [ 381.979644][ T9238] path_lookupat+0x5e8/0xc40 [ 381.979662][ T9238] filename_lookup+0x202/0x590 [ 381.979680][ T9238] ? __pfx_filename_lookup+0x10/0x10 [ 381.979707][ T9238] ? strncpy_from_user+0x19d/0x2d0 [ 381.979726][ T9238] user_path_at+0x3c/0x60 [ 381.979735][ T9238] __x64_sys_mount+0x1fb/0x310 [ 381.979749][ T9238] ? __pfx___x64_sys_mount+0x10/0x10 [ 381.979766][ T9238] do_syscall_64+0x106/0xf80 [ 381.979777][ T9238] ? clear_bhb_loop+0x40/0x90 [ 381.979790][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.979801][ T9238] RIP: 0033:0x7f6ab7d9c799 [ 381.979811][ T9238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.979822][ T9238] RSP: 002b:00007f6ab8bf1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 381.979832][ T9238] RAX: ffffffffffffffda RBX: 00007f6ab8015fa0 RCX: 00007f6ab7d9c799 [ 381.979839][ T9238] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 381.979845][ T9238] RBP: 00007f6ab8bf1090 R08: 0000000000000000 R09: 0000000000000000 [ 381.979851][ T9238] R10: 0000000000010084 R11: 0000000000000246 R12: 0000000000000001 [ 381.979856][ T9238] R13: 00007f6ab8016038 R14: 00007f6ab8015fa0 R15: 00007ffdc76732d8 [ 381.979870][ T9238] [ 382.225181][ T9217] infiniband syU: added lo [ 382.243790][ T9217] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 382.247551][ T9217] infiniband syU: Couldn't open port 1 [ 382.652490][ T9217] RDS/IB: syU: added [ 382.671454][ T9217] smc: adding ib device syU with port count 1 [ 382.679050][ T9217] smc: ib device syU port 1 has no pnetid [ 382.687268][ T5312] lo speed is unknown, defaulting to 1000 [ 382.707666][ T9217] lo speed is unknown, defaulting to 1000 [ 383.402903][ T9249] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 383.819843][ T9217] lo speed is unknown, defaulting to 1000 [ 383.939451][ T9256] netlink: 64 bytes leftover after parsing attributes in process `syz.0.817'. [ 384.364355][ T9217] lo speed is unknown, defaulting to 1000 [ 384.857573][ T9264] loop5: detected capacity change from 0 to 7 [ 384.869344][ T9217] lo speed is unknown, defaulting to 1000 [ 385.082199][ T5820] Dev loop5: unable to read RDB block 7 [ 385.088140][ T5820] loop5: unable to read partition table [ 385.098742][ T5820] loop5: partition table beyond EOD, truncated [ 385.205411][ T5312] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 385.325587][ T9264] Dev loop5: unable to read RDB block 7 [ 385.331202][ T9264] loop5: unable to read partition table [ 385.346902][ T9264] loop5: partition table beyond EOD, truncated [ 385.376339][ T9264] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 385.469642][ T5312] usb 1-1: config 0 has no interfaces? [ 385.489234][ T5312] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 385.570412][ T5312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.597483][ T5312] usb 1-1: Product: syz [ 385.627383][ T5312] usb 1-1: Manufacturer: syz [ 385.635281][ T5312] usb 1-1: SerialNumber: syz [ 385.681916][ T9217] lo speed is unknown, defaulting to 1000 [ 385.705629][ T5312] usb 1-1: config 0 descriptor?? [ 386.182064][ T9261] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 1 [ 386.191798][ T9261] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 386.210957][ T5871] usb 1-1: USB disconnect, device number 43 [ 386.529407][ T9217] lo speed is unknown, defaulting to 1000 [ 386.652335][ T9273] input: syz0 as /devices/virtual/input/input26 [ 386.708346][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 386.708362][ T29] audit: type=1400 audit(1773021819.671:1493): avc: denied { connect } for pid=9272 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 386.759633][ T29] audit: type=1400 audit(1773021819.711:1494): avc: denied { setopt } for pid=9272 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 386.837136][ T9273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.822'. [ 386.846067][ T29] audit: type=1400 audit(1773021819.781:1495): avc: denied { bind } for pid=9272 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 386.885621][ T29] audit: type=1400 audit(1773021819.791:1496): avc: denied { write } for pid=9272 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 387.152307][ T29] audit: type=1326 audit(1773021820.091:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41179c799 code=0x7ffc0000 [ 387.465450][ T814] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 387.567601][ T29] audit: type=1326 audit(1773021820.091:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fd41179c799 code=0x7ffc0000 [ 387.617572][ T9281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.825'. [ 387.654610][ T9281] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 387.684812][ T814] usb 1-1: device descriptor read/64, error -71 [ 387.691962][ T29] audit: type=1326 audit(1773021820.091:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41179c799 code=0x7ffc0000 [ 387.794203][ T29] audit: type=1326 audit(1773021820.091:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd41179c799 code=0x7ffc0000 [ 387.941092][ T29] audit: type=1326 audit(1773021820.091:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41179c799 code=0x7ffc0000 [ 387.964681][ T814] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 387.999273][ T9283] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 388.024317][ T29] audit: type=1326 audit(1773021820.091:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9275 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd41179c799 code=0x7ffc0000 [ 388.105378][ T814] usb 1-1: device descriptor read/64, error -71 [ 388.215853][ T814] usb usb1-port1: attempt power cycle [ 388.958961][ T9298] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 389.055229][ T814] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 389.378498][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 389.856084][ T814] usb 1-1: device descriptor read/8, error -71 [ 390.516063][ T9315] netlink: 'syz.5.823': attribute type 16 has an invalid length. [ 390.627950][ T9315] netlink: 'syz.5.823': attribute type 17 has an invalid length. [ 390.720873][ T9316] loop5: detected capacity change from 0 to 7 [ 391.385585][ T9318] nfs: Unknown parameter 'ac' [ 391.572362][ T9315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.896114][ T5871] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 391.952332][ T9316] Dev loop5: unable to read RDB block 7 [ 391.965164][ T9316] loop5: unable to read partition table [ 391.985275][ T9316] loop5: partition table beyond EOD, truncated [ 391.996111][ T9316] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 392.056639][ T5871] usb 3-1: config 0 has no interfaces? [ 392.062040][ T9324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.837'. [ 392.063807][ T5871] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 392.085233][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.094542][ T5871] usb 3-1: Product: syz [ 392.099019][ T5871] usb 3-1: Manufacturer: syz [ 392.103743][ T5871] usb 3-1: SerialNumber: syz [ 392.111871][ T5871] usb 3-1: config 0 descriptor?? [ 392.432368][ T9328] netlink: 64 bytes leftover after parsing attributes in process `syz.5.838'. [ 392.768100][ T9316] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 1 [ 392.778530][ T9316] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 392.833984][ T5871] usb 3-1: USB disconnect, device number 26 [ 393.061376][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 393.061395][ T29] audit: type=1400 audit(1773021826.021:1540): avc: denied { write } for pid=9331 comm="syz.3.840" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 393.161974][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 393.170079][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 393.281931][ T9342] fuse: root generation should be zero [ 393.504397][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 393.520170][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 394.504596][ T5312] libceph: connect (1)[c::]:6789 error -101 [ 394.510678][ T5312] libceph: mon0 (1)[c::]:6789 connect error [ 394.537336][ T9338] ceph: No mds server is up or the cluster is laggy [ 394.947440][ T9370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.846'. [ 394.983823][ T9370] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 395.096749][ T5921] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 395.201039][ T9371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.848'. [ 395.212360][ T9371] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 395.565329][ T5921] usb 6-1: Using ep0 maxpacket: 32 [ 395.572339][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.583554][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.593355][ T5921] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 395.602586][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.612480][ T5921] usb 6-1: config 0 descriptor?? [ 395.620917][ T5921] hub 6-1:0.0: USB hub found [ 395.775692][ T5871] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 395.830292][ T5921] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 396.081367][ T5871] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 396.095366][ T29] audit: type=1400 audit(1773021829.021:1541): avc: denied { create } for pid=9383 comm="syz.4.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 396.403716][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.413885][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.526435][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.557568][ T29] audit: type=1400 audit(1773021829.021:1542): avc: denied { connect } for pid=9383 comm="syz.4.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 396.580724][ T5871] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 396.594356][ T5871] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 396.602835][ T5871] usb 3-1: Manufacturer: syz [ 396.621489][ T5871] usb 3-1: config 0 descriptor?? [ 396.633812][ T5921] hid_parser_main: 28 callbacks suppressed [ 396.633832][ T5921] hid-generic 0003:046D:C31C.0008: unknown main item tag 0x0 [ 396.719245][ T5921] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 396.755828][ T5871] rc_core: IR keymap rc-hauppauge not found [ 396.762830][ T5871] Registered IR keymap rc-empty [ 396.771326][ T9394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.781900][ T5871] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 396.815732][ T9394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.827584][ T5871] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input27 [ 396.836327][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 397.129623][ T9374] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 397.160688][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.181593][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.267747][ T9388] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 397.340442][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.360006][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.375305][ T10] usb 1-1: Product: 麊젨岵똗ᗴഊ뿡鬬砩䓬㫪ᐤᩆІ襛챾ꂊ쌉ꬣⴎ紤⪐덽雹嶧㎋ꇼ␲㖟혗䬨ﯔ伎ﯛ贈饚Ӭ㭞袺㽃劎鹃䷕㨦〬腒Ἤ㪝障铩廳ﲥ낹е颗畲폷苠䉔冻઴騉 [ 397.405379][ T9388] usb 6-1: device descriptor read/64, error -71 [ 397.444478][ T10] usb 1-1: Manufacturer: 혛쩶冒ㆯ摱槶Ǧₘ睙㟰Ḽ喹谞抂ㆴ䢐殚魒猛䰀뙋泔⍣≶⒩ũ鳬ᨄ鉤輕∶흍Ά [ 397.447610][ T5871] usb 3-1: USB disconnect, device number 27 [ 397.500908][ T10] usb 1-1: SerialNumber: syz [ 397.629487][ T9400] loop5: detected capacity change from 0 to 7 [ 397.645203][ T9388] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 397.684231][ T9405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.710043][ T9405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.785377][ T9388] usb 6-1: device descriptor read/64, error -71 [ 398.026390][ T9388] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 398.055744][ T9388] usb 6-1: device descriptor read/8, error -71 [ 398.128115][ T5820] Dev loop5: unable to read RDB block 7 [ 398.135298][ T5820] loop5: unable to read partition table [ 398.143356][ T5820] loop5: partition table beyond EOD, truncated [ 398.259125][ T9382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.309153][ T9400] Dev loop5: unable to read RDB block 7 [ 398.314833][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 1 [ 398.324858][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 398.335252][ T9388] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 398.345937][ T9400] loop5: unable to read partition table [ 398.352671][ T9400] loop5: partition table beyond EOD, truncated [ 398.361697][ T9400] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 398.374132][ T10] usb 1-1: 0:1 : does not exist [ 398.385123][ T10] usb 1-1: 0:2 : does not exist [ 398.393424][ T10] usb 1-1: unit 5 not found! [ 398.460540][ T10] usb 1-1: USB disconnect, device number 48 [ 398.475982][ T9402] ceph: No mds server is up or the cluster is laggy [ 398.504369][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.551296][ T29] audit: type=1400 audit(1773021831.511:1543): avc: denied { create } for pid=9411 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 398.664685][ T29] audit: type=1400 audit(1773021831.621:1544): avc: denied { mounton } for pid=9416 comm="syz.3.860" path="/176/file0" dev="tmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 398.769451][ T9418] l2tp_ppp: sess 2/0: no socket in recv [ 398.805727][ T29] audit: type=1400 audit(1773021831.721:1545): avc: denied { connect } for pid=9411 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 398.828776][ T29] audit: type=1400 audit(1773021831.731:1546): avc: denied { name_bind } for pid=9411 comm="syz.2.858" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 399.005613][ T9420] erspan0: entered promiscuous mode [ 399.955216][ T29] audit: type=1400 audit(1773021832.871:1547): avc: denied { create } for pid=9442 comm="syz.0.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 400.189107][ T29] audit: type=1400 audit(1773021832.871:1548): avc: denied { ioctl } for pid=9442 comm="syz.0.867" path="socket:[23776]" dev="sockfs" ino=23776 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 401.291040][ T29] audit: type=1400 audit(1773021832.871:1549): avc: denied { bind } for pid=9442 comm="syz.0.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 401.510182][ T29] audit: type=1400 audit(1773021834.471:1550): avc: denied { write } for pid=9455 comm="syz.2.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 401.570949][ T29] audit: type=1400 audit(1773021834.521:1551): avc: denied { ioctl } for pid=9455 comm="syz.2.870" path="socket:[23493]" dev="sockfs" ino=23493 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 401.750902][ T9461] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 401.767597][ T9461] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 401.792165][ T29] audit: type=1400 audit(1773021834.751:1552): avc: denied { watch } for pid=9460 comm="syz.4.872" path="/183" dev="tmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 401.805192][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 401.965248][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 401.970897][ T9463] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.873'. [ 401.972546][ T24] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 401.991797][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 402.003268][ T24] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 402.012480][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.020504][ T24] usb 1-1: Product: 髳蒢ꓫ劀絾졡建㩡靆⽝Ꭶᖳﮯ줬詉溆麺⽴홮㱆䨂᭭ᷬ⬒ﯾꂈ롻ϻ拳㠥랄ಚ顷ﳠ컦寶餶꼬㄀㱢㿧Ꜥ鷦ϣ [ 402.037918][ T24] usb 1-1: Manufacturer: 滷쌨祥꧱库䷬複昑㫃ᖵ鋩忆ꢂ鋔᲼⢥ᘥ䔸剄梯ႛꉺ뙬聭֤㽆雺赋癿鑼軈敋윮ㄺ嬥噄䉦扻솖뀇뒹矜隢䣃䬖疯푲먐굼헺﫻읏乯䃠⑳鏬如䣝⢈爏奎볲㚔㾼Ŏ쒝㑺㴋袼˜ね勚蚣ꜱ⩌豦䌭뒊㚂聞셠照谑橯ꟑ [ 402.068854][ T24] usb 1-1: SerialNumber: syz [ 402.111529][ T9459] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 402.340678][ T24] usb 1-1: selecting invalid altsetting 1 [ 402.386367][ T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 402.417420][ T24] usb 1-1: USB disconnect, device number 49 [ 402.450275][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.689790][ T9469] netlink: 64 bytes leftover after parsing attributes in process `syz.3.874'. [ 403.333243][ T9479] netlink: 64 bytes leftover after parsing attributes in process `syz.0.877'. [ 403.395433][ T9388] usb 6-1: device descriptor read/8, error -110 [ 403.581620][ T5921] usb 6-1: USB disconnect, device number 8 [ 404.075292][ T9486] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 405.676227][ T5921] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 405.690802][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 405.690817][ T29] audit: type=1400 audit(1773021838.651:1557): avc: denied { setopt } for pid=9515 comm="syz.0.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 405.845160][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 405.852651][ T5921] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 405.868171][ T5921] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 405.877851][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.895314][ T5921] usb 6-1: Product: 髳蒢ꓫ劀絾졡建㩡靆⽝Ꭶᖳﮯ줬詉溆麺⽴홮㱆䨂᭭ᷬ⬒ﯾꂈ롻ϻ拳㠥랄ಚ顷ﳠ컦寶餶꼬㄀㱢㿧Ꜥ鷦ϣ [ 405.938167][ T5921] usb 6-1: Manufacturer: 滷쌨祥꧱库䷬複昑㫃ᖵ鋩忆ꢂ鋔᲼⢥ᘥ䔸剄梯ႛꉺ뙬聭֤㽆雺赋癿鑼軈敋윮ㄺ嬥噄䉦扻솖뀇뒹矜隢䣃䬖疯푲먐굼헺﫻읏乯䃠⑳鏬如䣝⢈爏奎볲㚔㾼Ŏ쒝㑺㴋袼˜ね勚蚣ꜱ⩌豦䌭뒊㚂聞셠照谑橯ꟑ [ 406.043852][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 406.053033][ T5921] usb 6-1: SerialNumber: syz [ 406.187511][ T9519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.889'. [ 406.211208][ T9519] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 406.373391][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 406.384217][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.400542][ T5921] usb 6-1: selecting invalid altsetting 1 [ 406.411693][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 406.451039][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 32, changing to 7 [ 406.469745][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 406.483623][ T10] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 406.497063][ T5921] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 406.506309][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.516422][ T10] usb 1-1: Product: syz [ 406.530124][ T5921] usb 6-1: USB disconnect, device number 9 [ 406.536016][ T10] usb 1-1: Manufacturer: syz [ 406.546149][ T10] usb 1-1: SerialNumber: syz [ 406.714553][ T29] audit: type=1400 audit(1773021839.641:1558): avc: denied { load_policy } for pid=9522 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 406.764598][ T9523] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 406.796054][ T9525] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 406.812645][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.886496][ T9523] SELinux: failed to load policy [ 407.038400][ T29] audit: type=1400 audit(1773021839.941:1559): avc: denied { create } for pid=9522 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 407.130385][ T29] audit: type=1400 audit(1773021839.941:1560): avc: denied { getopt } for pid=9522 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 408.193164][ T10] usb 1-1: USB disconnect, device number 50 [ 408.300647][ T6055] udevd[6055]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.588252][ T29] audit: type=1400 audit(1773021841.551:1561): avc: denied { write } for pid=9545 comm="syz.4.896" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 408.630759][ T29] audit: type=1400 audit(1773021841.581:1562): avc: denied { ioctl } for pid=9545 comm="syz.4.896" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 408.720481][ T9548] FAULT_INJECTION: forcing a failure. [ 408.720481][ T9548] name failslab, interval 1, probability 0, space 0, times 0 [ 408.784757][ T9548] CPU: 1 UID: 0 PID: 9548 Comm: syz.4.897 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.784777][ T9548] Tainted: [L]=SOFTLOCKUP [ 408.784781][ T9548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.784787][ T9548] Call Trace: [ 408.784791][ T9548] [ 408.784795][ T9548] dump_stack_lvl+0x100/0x190 [ 408.784816][ T9548] should_fail_ex.cold+0x5/0xa [ 408.784831][ T9548] ? tomoyo_realpath_from_path+0xb6/0x690 [ 408.784844][ T9548] should_failslab+0xc2/0x120 [ 408.784856][ T9548] __kmalloc_noprof+0xe0/0x850 [ 408.784874][ T9548] tomoyo_realpath_from_path+0xb6/0x690 [ 408.784891][ T9548] tomoyo_path_number_perm+0x23c/0x580 [ 408.784902][ T9548] ? tomoyo_path_number_perm+0x22e/0x580 [ 408.784914][ T9548] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 408.784939][ T9548] ? find_held_lock+0x2b/0x80 [ 408.784952][ T9548] ? __fget_files+0x215/0x3d0 [ 408.784967][ T9548] ? hook_file_ioctl_common+0x146/0x410 [ 408.784985][ T9548] ? __fget_files+0x21f/0x3d0 [ 408.785001][ T9548] security_file_ioctl+0xd3/0x230 [ 408.785023][ T9548] __x64_sys_ioctl+0xb7/0x210 [ 408.785050][ T9548] do_syscall_64+0x106/0xf80 [ 408.785065][ T9548] ? clear_bhb_loop+0x40/0x90 [ 408.785084][ T9548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.785100][ T9548] RIP: 0033:0x7f4de419c799 [ 408.785114][ T9548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.785129][ T9548] RSP: 002b:00007f4de23f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.785144][ T9548] RAX: ffffffffffffffda RBX: 00007f4de4415fa0 RCX: 00007f4de419c799 [ 408.785155][ T9548] RDX: 00002000000000c0 RSI: 000000000000127f RDI: 0000000000000004 [ 408.785164][ T9548] RBP: 00007f4de23f6090 R08: 0000000000000000 R09: 0000000000000000 [ 408.785174][ T9548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.785184][ T9548] R13: 00007f4de4416038 R14: 00007f4de4415fa0 R15: 00007fff067a08a8 [ 408.785207][ T9548] [ 409.005476][ T9548] ERROR: Out of memory at tomoyo_realpath_from_path. [ 410.519685][ T9563] netlink: 64 bytes leftover after parsing attributes in process `syz.0.900'. [ 410.834565][ T9567] netlink: 64 bytes leftover after parsing attributes in process `syz.4.901'. [ 411.490843][ T29] audit: type=1400 audit(1773021844.451:1563): avc: denied { bind } for pid=9574 comm="syz.0.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 411.525071][ T29] audit: type=1400 audit(1773021844.481:1564): avc: denied { create } for pid=9574 comm="syz.0.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 411.574616][ T29] audit: type=1400 audit(1773021844.481:1565): avc: denied { ioctl } for pid=9574 comm="syz.0.905" path="socket:[24832]" dev="sockfs" ino=24832 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 411.646978][ T29] audit: type=1400 audit(1773021844.531:1566): avc: denied { search } for pid=9576 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.684754][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 411.732079][ T29] audit: type=1400 audit(1773021844.531:1567): avc: denied { search } for pid=9576 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.861378][ T9573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 411.888860][ T29] audit: type=1400 audit(1773021844.531:1568): avc: denied { search } for pid=9576 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.003485][ T29] audit: type=1400 audit(1773021844.531:1569): avc: denied { search } for pid=9576 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.187725][ T9593] overlayfs: failed to resolve './file1': -2 [ 412.350645][ T29] audit: type=1400 audit(1773021844.571:1570): avc: denied { read open } for pid=9577 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.775360][ T29] audit: type=1400 audit(1773021844.571:1571): avc: denied { getattr } for pid=9577 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.805464][ T29] audit: type=1400 audit(1773021844.571:1572): avc: denied { getattr } for pid=9577 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 413.812880][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 413.845703][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 413.887626][ T10] usb 6-1: can't read configurations, error -71 [ 415.634597][ T9628] loop5: detected capacity change from 0 to 7 [ 417.045748][ T5820] Dev loop5: unable to read RDB block 7 [ 417.076813][ T814] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 417.095223][ T5820] loop5: unable to read partition table [ 418.089913][ T5871] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 418.097744][ T5820] loop5: partition table beyond EOD, truncated [ 418.233235][ T814] usb 1-1: config 0 has no interfaces? [ 418.262375][ T814] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 418.985230][ T814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.998529][ T814] usb 1-1: Product: syz [ 419.002806][ T814] usb 1-1: Manufacturer: syz [ 419.004323][ T5871] usb 6-1: device descriptor read/all, error -71 [ 419.014714][ T814] usb 1-1: SerialNumber: syz [ 419.026452][ T814] usb 1-1: config 0 descriptor?? [ 419.111880][ T9628] Dev loop5: unable to read RDB block 7 [ 419.117645][ T9628] loop5: unable to read partition table [ 419.123338][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 419.123353][ T29] audit: type=1400 audit(1773021852.081:1588): avc: denied { read write } for pid=9654 comm="syz.2.920" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 419.125446][ T9628] loop5: partition table beyond EOD, [ 419.129580][ T29] audit: type=1400 audit(1773021852.081:1589): avc: denied { open } for pid=9654 comm="syz.2.920" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 419.235670][ T9628] truncated [ 419.259064][ T9628] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 419.316401][ T814] usb 1-1: can't set config #0, error -71 [ 419.353488][ T814] usb 1-1: USB disconnect, device number 51 [ 419.735174][ T5871] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 419.885273][ T814] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 420.222874][ T9673] FAULT_INJECTION: forcing a failure. [ 420.222874][ T9673] name failslab, interval 1, probability 0, space 0, times 0 [ 420.239717][ T9673] CPU: 0 UID: 0 PID: 9673 Comm: syz.3.926 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.239748][ T9673] Tainted: [L]=SOFTLOCKUP [ 420.239754][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 420.239764][ T9673] Call Trace: [ 420.239770][ T9673] [ 420.239776][ T9673] dump_stack_lvl+0x100/0x190 [ 420.239809][ T9673] should_fail_ex.cold+0x5/0xa [ 420.239831][ T9673] should_failslab+0xc2/0x120 [ 420.239848][ T9673] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 420.239872][ T9673] ? skb_clone+0x190/0x400 [ 420.239894][ T9673] skb_clone+0x190/0x400 [ 420.239915][ T9673] netlink_deliver_tap+0xaed/0xcc0 [ 420.239941][ T9673] netlink_unicast+0x70c/0x870 [ 420.239967][ T9673] ? __pfx_netlink_unicast+0x10/0x10 [ 420.239985][ T9673] ? __alloc_skb+0x5b7/0x710 [ 420.240000][ T9673] ? genl_rcv_msg+0x4be/0x800 [ 420.240030][ T9673] netlink_ack+0x655/0xb80 [ 420.240059][ T9673] netlink_rcv_skb+0x333/0x420 [ 420.240079][ T9673] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.240104][ T9673] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.240136][ T9673] ? netlink_deliver_tap+0x1ae/0xcc0 [ 420.240160][ T9673] genl_rcv+0x28/0x40 [ 420.240181][ T9673] netlink_unicast+0x5aa/0x870 [ 420.240205][ T9673] ? __pfx_netlink_unicast+0x10/0x10 [ 420.240242][ T9673] netlink_sendmsg+0x8b0/0xda0 [ 420.240269][ T9673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.240289][ T9673] ? __pfx___might_fault+0x10/0x10 [ 420.240323][ T9673] ____sys_sendmsg+0x9e1/0xb70 [ 420.240345][ T9673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.240369][ T9673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.240404][ T9673] ___sys_sendmsg+0x190/0x1e0 [ 420.240431][ T9673] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.240490][ T9673] __sys_sendmsg+0x170/0x220 [ 420.240514][ T9673] ? __pfx___sys_sendmsg+0x10/0x10 [ 420.240550][ T9673] do_syscall_64+0x106/0xf80 [ 420.240568][ T9673] ? clear_bhb_loop+0x40/0x90 [ 420.240591][ T9673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.240609][ T9673] RIP: 0033:0x7fe35279c799 [ 420.240624][ T9673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.240640][ T9673] RSP: 002b:00007fe3509ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.240658][ T9673] RAX: ffffffffffffffda RBX: 00007fe352a15fa0 RCX: 00007fe35279c799 [ 420.240669][ T9673] RDX: 0000000000000054 RSI: 0000200000000580 RDI: 0000000000000003 [ 420.240679][ T9673] RBP: 00007fe3509ee090 R08: 0000000000000000 R09: 0000000000000000 [ 420.240688][ T9673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.240698][ T9673] R13: 00007fe352a16038 R14: 00007fe352a15fa0 R15: 00007ffebb61b868 [ 420.240723][ T9673] [ 420.574480][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 420.606726][ T5871] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 420.614922][ T5871] usb 6-1: config 0 has no interface number 0 [ 420.626982][ T9667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.705504][ T5871] usb 6-1: config 0 interface 184 has no altsetting 0 [ 420.770442][ T5871] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 420.815314][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.823322][ T5871] usb 6-1: Product: syz [ 420.882050][ T5871] usb 6-1: Manufacturer: syz [ 420.987438][ T29] audit: type=1400 audit(1773021853.931:1590): avc: denied { open } for pid=9680 comm="syz.3.928" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 421.011474][ T5871] usb 6-1: SerialNumber: syz [ 421.030874][ T5871] usb 6-1: config 0 descriptor?? [ 421.250083][ T9690] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 421.719665][ T814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 422.193230][ T29] audit: type=1400 audit(1773021855.151:1591): avc: denied { cmd } for pid=9661 comm="syz.5.922" path="socket:[24147]" dev="sockfs" ino=24147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 422.216113][ T814] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 422.223688][ T814] usb 1-1: can't read configurations, error -71 [ 422.235303][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 422.258740][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 422.291493][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 422.315128][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 422.324900][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 422.335295][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 422.344869][ T5871] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 422.854898][ T9711] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 422.878344][ T29] audit: type=1400 audit(1773021855.811:1592): avc: denied { mac_admin } for pid=9709 comm="syz.2.929" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 423.025174][ T9] IPVS: starting estimator thread 0... [ 423.136527][ T9715] IPVS: using max 46 ests per chain, 110400 per kthread [ 423.246988][ T9719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.930'. [ 423.276352][ T9719] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 423.410232][ T10] usb 6-1: USB disconnect, device number 13 [ 423.604271][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 423.615351][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 423.785149][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 423.833852][ T9736] tipc: Enabled bearer , priority 0 [ 423.874757][ T9736] syzkaller0: entered promiscuous mode [ 423.883184][ T9736] syzkaller0: entered allmulticast mode [ 423.896944][ T792] libceph: connect (1)[c::]:6789 error -101 [ 423.902949][ T792] libceph: mon0 (1)[c::]:6789 connect error [ 423.935227][ T10] usb 6-1: device descriptor read/64, error -71 [ 423.942899][ T9736] tipc: Resetting bearer [ 423.969613][ T9734] tipc: Resetting bearer [ 424.021260][ T9734] tipc: Disabling bearer [ 424.195977][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 424.383074][ T9727] ceph: No mds server is up or the cluster is laggy [ 424.852741][ T10] usb 6-1: device descriptor read/64, error -71 [ 424.965677][ T10] usb usb6-port1: attempt power cycle [ 425.068561][ T5871] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 425.352858][ T5871] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 425.368638][ T5871] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 425.382221][ T5871] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 425.392721][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.395236][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 425.599756][ T9755] wireguard0: entered promiscuous mode [ 425.605753][ T9755] wireguard0: entered allmulticast mode [ 426.306006][ T10] usb 6-1: device descriptor read/8, error -71 [ 426.363150][ T29] audit: type=1400 audit(1773021859.321:1593): avc: denied { write } for pid=9757 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 426.382901][ T29] audit: type=1400 audit(1773021859.331:1594): avc: denied { create } for pid=9758 comm="syz.0.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 426.402825][ T29] audit: type=1400 audit(1773021859.331:1595): avc: denied { connect } for pid=9758 comm="syz.0.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 426.545185][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 426.562609][ T29] audit: type=1400 audit(1773021859.511:1596): avc: denied { read write } for pid=9743 comm="syz.2.936" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 426.665019][ T9765] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 426.677924][ T29] audit: type=1400 audit(1773021859.511:1597): avc: denied { open } for pid=9743 comm="syz.2.936" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 427.017028][ T5871] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 427.183989][ T5871] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input31 [ 427.211471][ T9771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.596730][ T5805] block nbd0: Receive control failed (result -32) [ 427.655915][ T9771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.693235][ T5871] input: failed to attach handler kbd to device input31, error: -5 [ 427.746611][ T9771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'. [ 427.810400][ T10] usb 6-1: device not accepting address 17, error -71 [ 427.856809][ T5871] usb 3-1: USB disconnect, device number 28 [ 428.065298][ T10] usb usb6-port1: unable to enumerate USB device [ 428.405200][ T5871] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 428.589304][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 428.755056][ T5871] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 428.774779][ T5871] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 428.815348][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.829787][ T5871] usb 3-1: Product: 髳蒢ꓫ劀絾졡建㩡靆⽝Ꭶᖳﮯ줬詉溆麺⽴홮㱆䨂᭭ᷬ⬒ﯾꂈ롻ϻ拳㠥랄ಚ顷ﳠ컦寶餶꼬㄀㱢㿧Ꜥ鷦ϣ [ 428.850208][ T9794] FAULT_INJECTION: forcing a failure. [ 428.850208][ T9794] name failslab, interval 1, probability 0, space 0, times 0 [ 428.866599][ T5871] usb 3-1: Manufacturer: 滷쌨祥꧱库䷬複昑㫃ᖵ鋩忆ꢂ鋔᲼⢥ᘥ䔸剄梯ႛꉺ뙬聭֤㽆雺赋癿鑼軈敋윮ㄺ嬥噄䉦扻솖뀇뒹矜隢䣃䬖疯푲먐굼헺﫻읏乯䃠⑳鏬如䣝⢈爏奎볲㚔㾼Ŏ쒝㑺㴋袼˜ね勚蚣ꜱ⩌豦䌭뒊㚂聞셠照谑橯ꟑ [ 428.909715][ T5871] usb 3-1: SerialNumber: syz [ 428.914663][ T9794] CPU: 0 UID: 0 PID: 9794 Comm: syz.4.951 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.914690][ T9794] Tainted: [L]=SOFTLOCKUP [ 428.914696][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 428.914706][ T9794] Call Trace: [ 428.914712][ T9794] [ 428.914719][ T9794] dump_stack_lvl+0x100/0x190 [ 428.914757][ T9794] should_fail_ex.cold+0x5/0xa [ 428.914781][ T9794] ? tomoyo_realpath_from_path+0xb6/0x690 [ 428.914804][ T9794] should_failslab+0xc2/0x120 [ 428.914821][ T9794] __kmalloc_noprof+0xe0/0x850 [ 428.914851][ T9794] tomoyo_realpath_from_path+0xb6/0x690 [ 428.914880][ T9794] tomoyo_path_number_perm+0x23c/0x580 [ 428.914898][ T9794] ? tomoyo_path_number_perm+0x22e/0x580 [ 428.914919][ T9794] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 428.914965][ T9794] ? find_held_lock+0x2b/0x80 [ 428.914987][ T9794] ? __fget_files+0x215/0x3d0 [ 428.915004][ T9794] ? hook_file_ioctl_common+0x146/0x410 [ 428.915035][ T9794] ? __fget_files+0x21f/0x3d0 [ 428.915058][ T9794] security_file_ioctl+0xd3/0x230 [ 428.915082][ T9794] __x64_sys_ioctl+0xb7/0x210 [ 428.915106][ T9794] do_syscall_64+0x106/0xf80 [ 428.915124][ T9794] ? clear_bhb_loop+0x40/0x90 [ 428.915144][ T9794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.915160][ T9794] RIP: 0033:0x7f4de419c799 [ 428.915174][ T9794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.915188][ T9794] RSP: 002b:00007f4de23f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.915205][ T9794] RAX: ffffffffffffffda RBX: 00007f4de4415fa0 RCX: 00007f4de419c799 [ 428.915215][ T9794] RDX: 0000000000000000 RSI: 0000000000004b49 RDI: 0000000000000003 [ 428.915224][ T9794] RBP: 00007f4de23f6090 R08: 0000000000000000 R09: 0000000000000000 [ 428.915233][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.915242][ T9794] R13: 00007f4de4416038 R14: 00007f4de4415fa0 R15: 00007fff067a08a8 [ 428.915266][ T9794] [ 429.119078][ T9794] ERROR: Out of memory at tomoyo_realpath_from_path. [ 429.700592][ T9801] vivid-001: disconnect [ 429.731243][ T29] audit: type=1400 audit(1773021862.661:1598): avc: denied { module_load } for pid=9797 comm="syz.5.953" path="/sys/power/pm_wakeup_irq" dev="sysfs" ino=1415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 429.765796][ T29] audit: type=1400 audit(1773021862.661:1599): avc: denied { read } for pid=9797 comm="syz.5.953" dev="sockfs" ino=24398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 429.816956][ T5871] usb 3-1: selecting invalid altsetting 1 [ 429.817235][ T9797] vivid-001: reconnect [ 430.367614][ T5871] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 430.486528][ T9808] netlink: 44 bytes leftover after parsing attributes in process `syz.3.956'. [ 430.624144][ T5871] usb 3-1: USB disconnect, device number 29 [ 430.723798][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.610627][ T9823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.958'. [ 432.785455][ T9840] netlink: 'syz.2.962': attribute type 21 has an invalid length. [ 433.874999][ T9840] netlink: 132 bytes leftover after parsing attributes in process `syz.2.962'. [ 433.949987][ T9846] gfs2: path_lookup on c::;NL;o$: returned error -2 [ 434.000375][ T29] audit: type=1400 audit(1773021866.961:1600): avc: denied { read write } for pid=9847 comm="syz.2.965" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 434.024233][ T29] audit: type=1400 audit(1773021866.961:1601): avc: denied { open } for pid=9847 comm="syz.2.965" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 434.058189][ T9848] netlink: 'syz.2.965': attribute type 4 has an invalid length. [ 434.067941][ T29] audit: type=1400 audit(1773021867.001:1602): avc: denied { ioctl } for pid=9847 comm="syz.2.965" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 434.188860][ T9846] netlink: 64 bytes leftover after parsing attributes in process `syz.0.964'. [ 435.044104][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.050424][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.065110][ T29] audit: type=1400 audit(1773021868.001:1603): avc: denied { mount } for pid=9849 comm="syz.2.966" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 435.227869][ T29] audit: type=1400 audit(1773021868.191:1604): avc: denied { mount } for pid=9856 comm="syz.0.968" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 435.585243][ T10] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 435.718883][ T29] audit: type=1400 audit(1773021868.191:1605): avc: denied { unlink } for pid=9862 comm="syz.4.967" name="#1" dev="tmpfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 435.741410][ T10] usb 6-1: device descriptor read/64, error -71 [ 435.750185][ T29] audit: type=1400 audit(1773021868.191:1606): avc: denied { mount } for pid=9862 comm="syz.4.967" name="/" dev="overlay" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 435.773058][ T29] audit: type=1400 audit(1773021868.191:1607): avc: denied { watch } for pid=9862 comm="syz.4.967" path="/204/bus/file1" dev="overlay" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 435.817085][ T29] audit: type=1326 audit(1773021868.271:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9855 comm="syz.5.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab7d9c799 code=0x7ffc0000 [ 435.925748][ T9868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.970'. [ 435.946558][ T9868] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 435.969737][ T29] audit: type=1326 audit(1773021868.271:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9855 comm="syz.5.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f6ab7d9c799 code=0x7ffc0000 [ 436.025343][ T10] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 436.281393][ T9873] netlink: 'syz.4.969': attribute type 12 has an invalid length. [ 436.289366][ T9873] netlink: 'syz.4.969': attribute type 29 has an invalid length. [ 436.297465][ T9873] netlink: 148 bytes leftover after parsing attributes in process `syz.4.969'. [ 436.306983][ T9873] netlink: 59 bytes leftover after parsing attributes in process `syz.4.969'. [ 436.338875][ T10] usb 6-1: device descriptor read/64, error -71 [ 436.455729][ T10] usb usb6-port1: attempt power cycle [ 436.805185][ T10] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 436.823377][ T9879] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 438.205615][ T24] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 438.395475][ T24] usb 1-1: device descriptor read/64, error -71 [ 438.412487][ T10] usb 6-1: device not accepting address 20, error -71 [ 438.945919][ T24] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 439.035400][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 439.035415][ T29] audit: type=1326 audit(1773021872.001:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9880 comm="syz.0.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd41179c42b code=0x7ffc0000 [ 439.118255][ T24] usb 1-1: device descriptor read/64, error -71 [ 439.170699][ T9894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.976'. [ 440.062185][ T24] usb usb1-port1: attempt power cycle [ 440.198089][ T29] audit: type=1400 audit(1773021873.161:1680): avc: denied { ioctl } for pid=9897 comm="syz.2.977" path="mnt:[4026532943]" dev="nsfs" ino=4026532943 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 440.695706][ T29] audit: type=1400 audit(1773021873.661:1681): avc: denied { setopt } for pid=9911 comm="syz.4.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 440.696553][ T9918] netlink: 112 bytes leftover after parsing attributes in process `syz.4.983'. [ 440.731919][ T9918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.983'. [ 441.134986][ T9929] netem: incorrect ge model size [ 441.140383][ T9929] netem: change failed [ 441.542577][ T29] audit: type=1326 audit(1773021874.241:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9926 comm="syz.2.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e499c799 code=0x7ffc0000 [ 441.578108][ T9934] netlink: 32 bytes leftover after parsing attributes in process `syz.3.989'. [ 441.589926][ T29] audit: type=1326 audit(1773021874.241:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9926 comm="syz.2.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f01e499c799 code=0x7ffc0000 [ 441.615800][ T29] audit: type=1326 audit(1773021874.241:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9926 comm="syz.2.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e499c799 code=0x7ffc0000 [ 441.695211][ T29] audit: type=1326 audit(1773021874.241:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9926 comm="syz.2.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f01e499c799 code=0x7ffc0000 [ 441.720410][ T29] audit: type=1326 audit(1773021874.241:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9926 comm="syz.2.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e499c799 code=0x7ffc0000 [ 441.744076][ T29] audit: type=1326 audit(1773021874.241:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9926 comm="syz.2.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01e499c799 code=0x7ffc0000 [ 441.772845][ T29] audit: type=1326 audit(1773021874.241:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9926 comm="syz.2.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01e499c799 code=0x7ffc0000 [ 441.805245][ T792] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 441.812939][ T24] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 441.965232][ T24] usb 3-1: device descriptor read/64, error -71 [ 441.976709][ T792] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 442.205189][ T24] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 442.772338][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.787653][ T792] usb 6-1: config 0 descriptor?? [ 442.799220][ T792] cp210x 6-1:0.0: cp210x converter detected [ 442.905282][ T24] usb 3-1: device descriptor read/64, error -71 [ 442.980531][ T9949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.994'. [ 443.029072][ T24] usb usb3-port1: attempt power cycle [ 443.268560][ T9954] No control pipe specified [ 443.506963][ T24] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 443.536320][ T24] usb 3-1: device descriptor read/8, error -71 [ 443.678311][ T9950] ceph: No mds server is up or the cluster is laggy [ 443.737897][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.747908][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.175620][ T24] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 444.230865][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 444.230883][ T29] audit: type=1400 audit(1773021877.191:1731): avc: denied { setattr } for pid=9962 comm="syz.2.999" name="NETLINK" dev="sockfs" ino=26686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 444.485948][ T24] usb 3-1: device not accepting address 33, error -71 [ 444.495577][ T792] usb 6-1: cp210x converter now attached to ttyUSB0 [ 444.640622][ T24] usb usb3-port1: unable to enumerate USB device [ 445.280191][ T792] usb 6-1: USB disconnect, device number 22 [ 445.338419][ T9967] netlink: 'syz.0.998': attribute type 5 has an invalid length. [ 445.350916][ T9967] ip6erspan0: entered promiscuous mode [ 445.368455][ T792] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 445.378142][ T792] cp210x 6-1:0.0: device disconnected [ 445.404820][ T9967] netlink: 'syz.0.998': attribute type 2 has an invalid length. [ 445.412715][ T9967] netlink: 'syz.0.998': attribute type 1 has an invalid length. [ 447.298496][ T9989] gfs2: not a GFS2 filesystem [ 447.345757][ T29] audit: type=1400 audit(1773021880.261:1732): avc: denied { read } for pid=9983 comm="syz.0.1004" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 447.409382][ T29] audit: type=1400 audit(1773021880.261:1733): avc: denied { open } for pid=9983 comm="syz.0.1004" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 447.461277][ T9990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=9990 comm=syz.2.1006 [ 447.745424][ T792] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 447.800376][T10001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.810578][T10001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.847793][ T29] audit: type=1326 audit(1773021880.741:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de419c799 code=0x7ffc0000 [ 448.085265][ T792] usb 6-1: Using ep0 maxpacket: 8 [ 448.099432][ T792] usb 6-1: unable to get BOS descriptor or descriptor too short [ 448.115153][ T29] audit: type=1326 audit(1773021880.741:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f4de419c799 code=0x7ffc0000 [ 448.148899][ T792] usb 6-1: config 4 interface 0 has no altsetting 0 [ 448.168060][ T792] usb 6-1: string descriptor 0 read error: -22 [ 448.181820][ T792] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 448.197408][ T29] audit: type=1326 audit(1773021880.751:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de419c799 code=0x7ffc0000 [ 448.223190][ T792] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 448.239882][ T29] audit: type=1326 audit(1773021880.751:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4de419c799 code=0x7ffc0000 [ 448.268021][ T792] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 448.283734][ T29] audit: type=1326 audit(1773021880.751:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de419c799 code=0x7ffc0000 [ 448.303577][ T792] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 448.313052][ T29] audit: type=1326 audit(1773021880.751:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4de419c799 code=0x7ffc0000 [ 448.338632][ T792] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 448.341022][ T29] audit: type=1326 audit(1773021880.751:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de419c799 code=0x7ffc0000 [ 448.358984][ T792] usb 6-1: media controller created [ 448.408248][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 448.529706][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1008'. [ 448.541246][T10009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1008'. [ 449.597334][ T792] zl10353_read_register: readreg error (reg=127, ret==0) [ 449.681123][T10019] FAULT_INJECTION: forcing a failure. [ 449.681123][T10019] name failslab, interval 1, probability 0, space 0, times 0 [ 449.694552][T10019] CPU: 1 UID: 0 PID: 10019 Comm: syz.5.1014 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.694581][T10019] Tainted: [L]=SOFTLOCKUP [ 449.694587][T10019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.694597][T10019] Call Trace: [ 449.694603][T10019] [ 449.694609][T10019] dump_stack_lvl+0x100/0x190 [ 449.694642][T10019] should_fail_ex.cold+0x5/0xa [ 449.694665][T10019] ? tomoyo_realpath_from_path+0xb6/0x690 [ 449.694687][T10019] should_failslab+0xc2/0x120 [ 449.694704][T10019] __kmalloc_noprof+0xe0/0x850 [ 449.694732][T10019] tomoyo_realpath_from_path+0xb6/0x690 [ 449.694760][T10019] tomoyo_path_number_perm+0x23c/0x580 [ 449.694778][T10019] ? tomoyo_path_number_perm+0x22e/0x580 [ 449.694798][T10019] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 449.694844][T10019] ? find_held_lock+0x2b/0x80 [ 449.694866][T10019] ? __fget_files+0x215/0x3d0 [ 449.694883][T10019] ? hook_file_ioctl_common+0x146/0x410 [ 449.694914][T10019] ? __fget_files+0x21f/0x3d0 [ 449.694936][T10019] security_file_ioctl+0xd3/0x230 [ 449.694958][T10019] __x64_sys_ioctl+0xb7/0x210 [ 449.694988][T10019] do_syscall_64+0x106/0xf80 [ 449.695007][T10019] ? clear_bhb_loop+0x40/0x90 [ 449.695029][T10019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.695046][T10019] RIP: 0033:0x7f6ab7d9c799 [ 449.695062][T10019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.695078][T10019] RSP: 002b:00007f6ab8bf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.695094][T10019] RAX: ffffffffffffffda RBX: 00007f6ab8015fa0 RCX: 00007f6ab7d9c799 [ 449.695106][T10019] RDX: 0200000000000000 RSI: 000000008008b705 RDI: 0000000000000003 [ 449.695117][T10019] RBP: 00007f6ab8bf1090 R08: 0000000000000000 R09: 0000000000000000 [ 449.695127][T10019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.695137][T10019] R13: 00007f6ab8016038 R14: 00007f6ab8015fa0 R15: 00007ffdc76732d8 [ 449.695162][T10019] [ 449.914266][T10019] ERROR: Out of memory at tomoyo_realpath_from_path. [ 450.092417][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 450.092459][ T29] audit: type=1400 audit(1773021883.051:1756): avc: denied { connect } for pid=10020 comm="syz.2.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 452.689645][T10050] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 453.325262][ T29] audit: type=1400 audit(1773021886.281:1757): avc: denied { read } for pid=10055 comm="syz.3.1026" path="socket:[26254]" dev="sockfs" ino=26254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 453.377248][T10059] Bluetooth: MGMT ver 1.23 [ 453.381822][T10059] FAULT_INJECTION: forcing a failure. [ 453.381822][T10059] name failslab, interval 1, probability 0, space 0, times 0 [ 453.396896][T10059] CPU: 1 UID: 0 PID: 10059 Comm: syz.3.1026 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.396923][T10059] Tainted: [L]=SOFTLOCKUP [ 453.396930][T10059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.396940][T10059] Call Trace: [ 453.396946][T10059] [ 453.396952][T10059] dump_stack_lvl+0x100/0x190 [ 453.396987][T10059] should_fail_ex.cold+0x5/0xa [ 453.397011][T10059] should_failslab+0xc2/0x120 [ 453.397029][T10059] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 453.397063][T10059] ? __alloc_skb+0x140/0x710 [ 453.397085][T10059] __alloc_skb+0x140/0x710 [ 453.397100][T10059] ? __alloc_skb+0x5b7/0x710 [ 453.397116][T10059] ? __pfx___alloc_skb+0x10/0x10 [ 453.397132][T10059] ? __asan_memset+0x23/0x50 [ 453.397154][T10059] ? __alloc_skb+0x4e9/0x710 [ 453.397168][T10059] ? __alloc_skb+0x5b7/0x710 [ 453.397188][T10059] create_monitor_ctrl_event+0x3b/0x450 [ 453.397221][T10059] mgmt_cmd_status+0x29e/0x530 [ 453.397250][T10059] read_local_oob_data+0x20d/0x390 [ 453.397268][T10059] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 453.397287][T10059] hci_sock_sendmsg+0x154e/0x2620 [ 453.397310][T10059] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 453.397335][T10059] sock_write_iter+0x524/0x5a0 [ 453.397358][T10059] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 453.397374][T10059] ? __pfx_sock_write_iter+0x10/0x10 [ 453.397407][T10059] ? bpf_lsm_file_permission+0x9/0x10 [ 453.397433][T10059] ? security_file_permission+0x76/0x210 [ 453.397458][T10059] ? rw_verify_area+0xce/0x6d0 [ 453.397485][T10059] vfs_write+0x6ac/0x1070 [ 453.397513][T10059] ? __pfx_sock_write_iter+0x10/0x10 [ 453.397538][T10059] ? __pfx_vfs_write+0x10/0x10 [ 453.397562][T10059] ? find_held_lock+0x2b/0x80 [ 453.397602][T10059] ksys_write+0x1f8/0x250 [ 453.397627][T10059] ? __pfx_ksys_write+0x10/0x10 [ 453.397661][T10059] do_syscall_64+0x106/0xf80 [ 453.397679][T10059] ? clear_bhb_loop+0x40/0x90 [ 453.397701][T10059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.397719][T10059] RIP: 0033:0x7fe35279c799 [ 453.397734][T10059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.397750][T10059] RSP: 002b:00007fe3509cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 453.397767][T10059] RAX: ffffffffffffffda RBX: 00007fe352a16090 RCX: 00007fe35279c799 [ 453.397777][T10059] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 0000000000000006 [ 453.397788][T10059] RBP: 00007fe3509cd090 R08: 0000000000000000 R09: 0000000000000000 [ 453.397797][T10059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.397807][T10059] R13: 00007fe352a16128 R14: 00007fe352a16090 R15: 00007ffebb61b868 [ 453.397834][T10059] [ 453.762326][T10061] loop5: detected capacity change from 0 to 7 [ 453.834809][T10065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.844925][T10065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.181941][ T11] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.191962][ T11] Buffer I/O error on dev loop5, logical block 0, async page read [ 454.201258][T10070] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.205160][ T5923] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 454.230239][T10061] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.247794][T10061] Buffer I/O error on dev loop5, logical block 0, async page read [ 454.256060][T10061] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.266415][T10061] Buffer I/O error on dev loop5, logical block 0, async page read [ 454.298155][T10061] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.335194][ T42] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 454.351088][T10061] Buffer I/O error on dev loop5, logical block 0, async page read [ 454.385253][T10061] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.405252][T10061] Buffer I/O error on dev loop5, logical block 0, async page read [ 454.413527][T10061] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.430660][T10061] Buffer I/O error on dev loop5, logical block 0, async page read [ 454.445618][T10061] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.455627][T10061] Buffer I/O error on dev loop5, logical block 0, async page read [ 454.463643][T10061] ldm_validate_partition_table(): Disk read failed. [ 454.501537][ T42] usb 3-1: config 0 has no interfaces? [ 454.605275][T10061] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.615113][T10061] Buffer I/O error on dev loop5, logical block 0, async page read [ 454.624773][T10061] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.634665][T10061] Buffer I/O error on dev loop5, logical block 0, async page read [ 454.643308][T10061] Buffer I/O error on dev loop5, logical block 0, async page read [ 454.651396][ T42] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 454.664558][T10061] Dev loop5: unable to read RDB block 0 [ 454.670618][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.685157][T10061] loop5: unable to read partition table [ 454.704899][ T42] usb 3-1: Product: syz [ 454.710393][T10061] loop5: partition table beyond EOD, truncated [ 454.719652][ T42] usb 3-1: Manufacturer: syz [ 454.724474][ T42] usb 3-1: SerialNumber: syz [ 454.734006][T10061] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 454.893200][ T42] usb 3-1: config 0 descriptor?? [ 455.289831][ T5923] usb 1-1: unable to get BOS descriptor or descriptor too short [ 455.298441][ T5923] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 455.307178][ T5923] usb 1-1: can't read configurations, error -71 [ 455.629613][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.639708][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.965608][ T29] audit: type=1326 audit(1773021888.571:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab7d9c799 code=0x7ffc0000 [ 456.020547][ T29] audit: type=1326 audit(1773021888.571:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f6ab7d9c799 code=0x7ffc0000 [ 456.053671][ T29] audit: type=1326 audit(1773021888.571:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab7d9c799 code=0x7ffc0000 [ 456.176897][ T29] audit: type=1326 audit(1773021888.571:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6ab7d9c799 code=0x7ffc0000 [ 456.211760][ T29] audit: type=1326 audit(1773021888.571:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab7d9c799 code=0x7ffc0000 [ 456.237916][ T29] audit: type=1326 audit(1773021888.571:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ab7d9c799 code=0x7ffc0000 [ 456.263779][ T29] audit: type=1326 audit(1773021888.581:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab7d9c799 code=0x7ffc0000 [ 456.291349][ T29] audit: type=1326 audit(1773021888.581:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6ab7d9c799 code=0x7ffc0000 [ 456.326049][ T29] audit: type=1326 audit(1773021888.581:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab7d9c799 code=0x7ffc0000 [ 456.455495][ T29] audit: type=1326 audit(1773021888.581:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f6ab7d9c799 code=0x7ffc0000 [ 457.472314][ T792] usb 3-1: USB disconnect, device number 34 [ 457.561081][T10084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.574166][T10084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.004929][T10107] loop5: detected capacity change from 0 to 7 [ 458.295308][ T792] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 458.332026][T10110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1038'. [ 458.352315][T10110] 9p: Bad value for 'rfdno' [ 458.359330][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 458.411070][T10111] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1038'. [ 458.447728][ T5820] Dev loop5: unable to read RDB block 7 [ 458.483856][ T5820] loop5: unable to read partition table [ 458.493105][ T5820] loop5: partition table beyond EOD, truncated [ 458.616424][ T792] usb 1-1: config 0 has no interfaces? [ 458.623771][ T792] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 458.642541][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.651001][ T792] usb 1-1: Product: syz [ 458.655442][ T792] usb 1-1: Manufacturer: syz [ 458.660087][ T792] usb 1-1: SerialNumber: syz [ 458.677513][ T792] usb 1-1: config 0 descriptor?? [ 458.731181][T10107] Dev loop5: unable to read RDB block 7 [ 458.736907][T10107] loop5: unable to read partition table [ 458.744720][T10107] loop5: partition table beyond EOD, truncated [ 458.759987][T10107] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 459.424389][T10107] blk_print_req_error: 6 callbacks suppressed [ 459.424402][T10107] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 1 [ 459.440617][T10107] buffer_io_error: 5 callbacks suppressed [ 459.440628][T10107] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 459.481172][ T5871] usb 1-1: USB disconnect, device number 59 [ 459.724140][T10120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1041'. [ 460.649047][T10123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.704639][T10123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.379638][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 461.379678][ T29] audit: type=1400 audit(1773021894.341:1817): avc: denied { allowed } for pid=10128 comm="syz.2.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 461.624070][ T29] audit: type=1400 audit(1773021894.581:1818): avc: denied { create } for pid=10135 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 461.659667][ T29] audit: type=1400 audit(1773021894.581:1819): avc: denied { connect } for pid=10135 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 461.752401][T10142] loop5: detected capacity change from 0 to 7 [ 461.816262][T10143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.872348][T10143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.917506][ T29] audit: type=1400 audit(1773021894.581:1820): avc: denied { ioctl } for pid=10135 comm="syz.3.1047" path="socket:[27162]" dev="sockfs" ino=27162 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 462.051663][ T792] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 462.402412][T10142] Dev loop5: unable to read RDB block 7 [ 462.408093][T10142] loop5: unable to read partition table [ 462.410220][T10147] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 462.413887][T10142] loop5: partition table beyond EOD, truncated [ 462.430411][T10142] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 462.444650][T10147] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 462.455016][ T29] audit: type=1400 audit(1773021894.581:1821): avc: denied { write } for pid=10135 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 462.615777][ T792] usb 3-1: unable to get BOS descriptor or descriptor too short [ 462.637432][ T792] usb 3-1: not running at top speed; connect to a high speed hub [ 462.647391][ T29] audit: type=1400 audit(1773021894.671:1822): avc: denied { append } for pid=10133 comm="syz.5.1046" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 462.674834][ T792] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.685728][ T792] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.702535][ T29] audit: type=1400 audit(1773021894.671:1823): avc: denied { open } for pid=10133 comm="syz.5.1046" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 462.731739][ T792] usb 3-1: string descriptor 0 read error: -22 [ 462.738125][ T792] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.747537][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.824470][ T29] audit: type=1400 audit(1773021894.671:1824): avc: denied { read } for pid=10133 comm="syz.5.1046" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 462.888381][ T792] usb 3-1: 0:2 : does not exist [ 462.973327][ T29] audit: type=1400 audit(1773021894.671:1825): avc: denied { open } for pid=10133 comm="syz.5.1046" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 463.039751][ T29] audit: type=1400 audit(1773021894.671:1826): avc: denied { ioctl } for pid=10133 comm="syz.5.1046" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 464.464319][ T792] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 464.537129][ T792] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 464.538247][T10172] tipc: Started in network mode [ 464.562346][ T792] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 464.572014][T10172] tipc: Node identity fed5f1bae828, cluster identity 4711 [ 464.596330][T10172] tipc: Enabled bearer , priority 0 [ 464.657961][ T792] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 465.167815][ T42] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 465.270483][T10177] syzkaller0: entered promiscuous mode [ 465.382378][T10177] syzkaller0: entered allmulticast mode [ 465.418298][ T42] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 465.495655][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.525315][ T792] usb 3-1: USB disconnect, device number 35 [ 465.574369][ T42] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 465.624224][ T42] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 465.648454][ T42] usb 1-1: Manufacturer: syz [ 465.670638][ T42] usb 1-1: config 0 descriptor?? [ 465.686270][T10171] tipc: Resetting bearer [ 465.798414][T10171] tipc: Disabling bearer [ 465.815290][ T42] rc_core: IR keymap rc-hauppauge not found [ 465.919330][T10195] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1062'. [ 466.033486][ T42] Registered IR keymap rc-empty [ 466.039931][ T42] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 466.164729][ T42] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input32 [ 466.216045][ T5923] tipc: Node number set to 385741242 [ 466.232838][T10168] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 466.275144][ T9993] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 466.667416][ T5921] usb 1-1: USB disconnect, device number 60 [ 467.844348][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 467.844367][ T29] audit: type=1400 audit(1773021899.741:1872): avc: denied { getopt } for pid=10198 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 468.007820][T10205] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1065'. [ 468.349910][ T9993] usb 3-1: unable to get BOS descriptor or descriptor too short [ 468.368468][ T9993] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 468.378320][ T9993] usb 3-1: can't read configurations, error -71 [ 469.095468][ T42] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 469.756181][ T29] audit: type=1400 audit(1773021902.711:1873): avc: denied { create } for pid=10224 comm="syz.2.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 469.878909][ T42] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 469.907267][T10227] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1069'. [ 469.931826][T10227] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 470.945739][T10232] tipc: Started in network mode [ 470.964069][T10232] tipc: Node identity 9ec6f20d98d4, cluster identity 4711 [ 471.006070][T10232] tipc: Enabled bearer , priority 0 [ 471.050323][T10233] syzkaller0: entered promiscuous mode [ 471.104791][T10233] syzkaller0: entered allmulticast mode [ 471.286146][ T29] audit: type=1400 audit(1773021902.721:1874): avc: denied { write } for pid=10224 comm="syz.2.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 471.545448][ T30] INFO: task kworker/0:3:5878 blocked for more than 143 seconds. [ 471.694399][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.702527][ T30] Tainted: G L syzkaller #0 [ 471.709124][ T42] usb 1-1: Product: syz [ 471.715120][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.724940][ T42] usb 1-1: Manufacturer: syz [ 471.729672][ T42] usb 1-1: SerialNumber: syz [ 471.734285][ T30] task:kworker/0:3 state:D stack:23208 pid:5878 tgid:5878 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 471.747780][ T30] Workqueue: usb_hub_wq hub_event [ 471.752880][ T30] Call Trace: [ 471.757035][ T42] usb 1-1: config 0 descriptor?? [ 471.762193][ T30] [ 471.765379][ T42] usb 1-1: can't set config #0, error -71 [ 471.772513][ T30] __schedule+0xfee/0x6120 [ 471.777384][ T42] usb 1-1: USB disconnect, device number 61 [ 471.783330][ T30] ? __lock_acquire+0x4a5/0x2630 [ 471.788368][ T30] ? device_initial_probe+0xaf/0xd0 [ 471.794450][ T30] ? __pfx___schedule+0x10/0x10 [ 471.800860][ T30] ? find_held_lock+0x2b/0x80 [ 471.805664][ T30] ? schedule+0x2bf/0x390 [ 471.810022][ T30] schedule+0xdd/0x390 [ 471.814091][ T30] schedule_timeout+0x1b2/0x280 [ 471.819141][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 471.824554][ T30] ? mark_held_locks+0x40/0x70 [ 471.829421][ T30] __wait_for_common+0x2e7/0x4c0 [ 471.834410][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 471.840112][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 471.845651][ T30] ? __pfx_device_del+0x10/0x10 [ 471.850534][ T30] ? kobject_put+0xb9/0x640 [ 471.855040][ T30] i2c_del_adapter+0x62d/0x820 [ 471.859934][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 471.865238][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 471.870591][ T30] ? dvb_usbv2_exit.isra.0+0x3e1/0xb40 [ 471.878388][ T30] ? kfree+0x1f6/0x6b0 [ 471.884952][ T30] ? media_device_unregister+0x446/0x610 [ 471.892863][ T30] dvb_usbv2_exit.isra.0+0x47f/0xb40 [ 471.900521][ T30] dvb_usbv2_probe+0x669/0x970 [ 471.905420][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 471.917001][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 471.932349][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 471.942289][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 471.958299][ T30] ? __pm_runtime_set_status+0x13c/0x970 [ 471.968046][ T30] usb_probe_interface+0x303/0x8f0 [ 471.979032][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 471.994835][ T30] really_probe+0x241/0xa60 [ 472.007884][ T30] __driver_probe_device+0x1de/0x400 [ 472.018838][ T30] driver_probe_device+0x4c/0x1b0 [ 472.029789][ T30] __device_attach_driver+0x1df/0x340 [ 472.040895][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 472.056525][ T30] bus_for_each_drv+0x159/0x1e0 [ 472.068280][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 472.079487][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 472.091787][T10236] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1074'. [ 472.145216][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 472.160389][ T30] __device_attach+0x1e4/0x4d0 [ 472.171334][ T30] ? __pfx___device_attach+0x10/0x10 [ 472.183122][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 472.195321][ T30] device_initial_probe+0xaf/0xd0 [ 472.206864][ T30] bus_probe_device+0x64/0x160 [ 472.219070][ T30] device_add+0x11d9/0x1950 [ 472.229102][ T30] ? __pfx_device_add+0x10/0x10 [ 472.239446][ T30] usb_set_configuration+0xd97/0x1c60 [ 472.250300][ T30] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 472.265165][ T30] usb_generic_driver_probe+0xa1/0xe0 [ 472.277272][ T30] usb_probe_device+0xef/0x400 [ 472.287657][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 472.300959][ T30] really_probe+0x241/0xa60 [ 472.311190][ T30] __driver_probe_device+0x1de/0x400 [ 472.323923][ T30] ? usb_driver_applicable+0x1c7/0x220 [ 472.335025][ T30] driver_probe_device+0x4c/0x1b0 [ 472.346289][ T30] __device_attach_driver+0x1df/0x340 [ 472.359394][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 472.373031][ T30] bus_for_each_drv+0x159/0x1e0 [ 472.385959][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 472.401297][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 472.412027][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 472.427567][ T30] __device_attach+0x1e4/0x4d0 [ 472.440740][ T30] ? __pfx___device_attach+0x10/0x10 [ 472.455161][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 472.467032][ T30] device_initial_probe+0xaf/0xd0 [ 472.477734][ T30] bus_probe_device+0x64/0x160 [ 472.491330][ T30] device_add+0x11d9/0x1950 [ 472.502378][ T30] ? __pfx_device_add+0x10/0x10 [ 472.512878][ T30] ? add_device_randomness+0xb7/0xf0 [ 472.525007][ T30] usb_new_device.cold+0x685/0x115c [ 472.536055][ T30] ? do_raw_spin_lock+0x128/0x260 [ 472.546532][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 472.558079][ T30] ? mark_held_locks+0x40/0x70 [ 472.568294][ T30] hub_event+0x314d/0x4af0 [ 472.578250][ T30] ? __pfx_hub_event+0x10/0x10 [ 472.588590][ T30] ? debug_object_deactivate+0x2e4/0x3b0 [ 472.601712][ T30] ? sched_core_enqueue+0x100/0xc00 [ 472.614170][ T30] ? rcu_is_watching+0x12/0xc0 [ 472.624422][ T30] process_one_work+0x9d7/0x1920 [ 472.636090][ T30] ? __pfx_process_one_work+0x10/0x10 [ 472.645911][ T30] ? __pfx_hub_event+0x10/0x10 [ 472.661212][ T30] worker_thread+0x5da/0xe40 [ 472.671167][ T30] ? kthread+0x13a/0x450 [ 472.680939][ T30] ? __pfx_worker_thread+0x10/0x10 [ 472.691666][ T30] kthread+0x370/0x450 [ 472.700288][ T30] ? __pfx_kthread+0x10/0x10 [ 472.708215][ T30] ret_from_fork+0x754/0xd80 [ 472.715884][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 472.725993][ T30] ? __switch_to+0x7b4/0x1120 [ 472.737311][ T30] ? __pfx_kthread+0x10/0x10 [ 472.754495][ T30] ret_from_fork_asm+0x1a/0x30 [ 472.769423][ T30] [ 472.776961][ T30] [ 472.776961][ T30] Showing all locks held in the system: [ 472.795282][ T30] 1 lock held by khungtaskd/30: [ 472.801427][ T30] #0: ffffffff8e7e75e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 472.833415][ T30] 2 locks held by getty/5565: [ 472.850501][ T30] #0: ffff8880391510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 472.873746][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 472.890774][ T30] 4 locks held by udevd/5797: [ 472.901308][ T30] #0: ffff888036d662f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 472.917452][ T30] #1: ffff88802b3e6488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 472.932569][ T30] #2: ffff888072758698 (kn->active#26){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 472.947812][ T30] #3: ffff8880751b5198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 472.964022][ T30] 5 locks held by kworker/0:3/5878: [ 472.971693][ T30] #0: ffff8880222ed948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 472.993439][ T30] #1: ffffc900046afd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 473.014972][ T30] #2: ffff88802accf198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 473.024016][ T30] #3: ffff8880751b5198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 473.033475][ T30] #4: ffff88805904c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 473.045117][ T30] 3 locks held by kworker/0:5/5923: [ 473.050319][ T30] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 473.071036][ T30] #1: ffffc900047ffd08 ((work_completion)(&tn->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 473.092856][ T30] #2: ffffffff906107e8 (rtnl_mutex){+.+.}-{4:4}, at: tipc_net_finalize_work+0x13/0x90 [ 473.102684][ T30] 3 locks held by kworker/u8:11/7446: [ 473.115173][ T30] #0: ffff88813fe9c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 473.128658][ T30] #1: ffffc90004d5fd08 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 473.145728][ T30] #2: ffffffff8e7f31f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 473.165155][ T30] 1 lock held by syz.1.695/8783: [ 473.170192][ T30] #0: ffff88802accf198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 473.183792][ T30] 1 lock held by syz.5.1053/10159: [ 473.192306][ T30] 3 locks held by kworker/1:5/10176: [ 473.204010][ T30] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 473.224732][ T30] #1: ffffc900030d7d08 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 473.236733][ T30] #2: ffffffff906107e8 (rtnl_mutex){+.+.}-{4:4}, at: bpf_prog_dev_bound_destroy+0x23/0x330 [ 473.247181][ T30] 2 locks held by syz.2.1073/10231: [ 473.252430][ T30] #0: ffffffff906107e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 473.261829][ T30] #1: ffffffff8e7f31f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 473.272231][ T30] 1 lock held by syz.0.1074/10236: [ 473.277591][ T30] #0: ffffffff906107e8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 473.288338][T10231] tipc: Resetting bearer [ 473.294252][ T30] [ 473.297471][ T30] ============================================= [ 473.297471][ T30] [ 473.306795][ T30] NMI backtrace for cpu 0 [ 473.306812][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 473.306835][ T30] Tainted: [L]=SOFTLOCKUP [ 473.306841][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.306850][ T30] Call Trace: [ 473.306856][ T30] [ 473.306861][ T30] dump_stack_lvl+0x100/0x190 [ 473.306892][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 473.306911][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 473.306938][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 473.306972][ T30] sys_info+0x141/0x190 [ 473.306993][ T30] watchdog+0xd25/0x1050 [ 473.307025][ T30] ? __pfx_watchdog+0x10/0x10 [ 473.307049][ T30] ? __kthread_parkme+0x18c/0x230 [ 473.307076][ T30] ? kthread+0x13a/0x450 [ 473.307091][ T30] ? __pfx_watchdog+0x10/0x10 [ 473.307113][ T30] kthread+0x370/0x450 [ 473.307127][ T30] ? __pfx_kthread+0x10/0x10 [ 473.307145][ T30] ret_from_fork+0x754/0xd80 [ 473.307163][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 473.307183][ T30] ? __switch_to+0x7b4/0x1120 [ 473.307204][ T30] ? __pfx_kthread+0x10/0x10 [ 473.307222][ T30] ret_from_fork_asm+0x1a/0x30 [ 473.307255][ T30] [ 473.307261][ T30] Sending NMI from CPU 0 to CPUs 1: [ 473.433776][ C1] NMI backtrace for cpu 1 [ 473.433794][ C1] CPU: 1 UID: 0 PID: 10159 Comm: syz.5.1053 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.433815][ C1] Tainted: [L]=SOFTLOCKUP [ 473.433820][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.433828][ C1] RIP: 0010:lock_is_held_type+0xde/0x140 [ 473.433849][ C1] Code: 0f 94 c0 0f b6 c0 48 c7 c7 23 ec e4 8d 89 44 24 04 e8 26 16 00 00 ba ff ff ff ff 65 0f c1 15 91 48 7e 08 83 fa 01 8b 44 24 04 <75> 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 [ 473.433862][ C1] RSP: 0018:ffffc90003046c28 EFLAGS: 00000046 [ 473.433874][ C1] RAX: 0000000000000000 RBX: ffffffff8e7e7520 RCX: 0000000000000001 [ 473.433883][ C1] RDX: 0000000000000001 RSI: ffffffff8de4ec23 RDI: ffffffff8c1afaa0 [ 473.433892][ C1] RBP: ffff888028fca4c0 R08: 0000000000000001 R09: 0000000000000000 [ 473.433900][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 473.433908][ C1] R13: 0000000000000046 R14: ffff888028fcb068 R15: 0000000000000002 [ 473.433917][ C1] FS: 0000000000000000(0000) GS:ffff888124447000(0000) knlGS:0000000000000000 [ 473.433931][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.433939][ C1] CR2: 00007fff68c53fc0 CR3: 000000007ab00000 CR4: 00000000003526f0 [ 473.433948][ C1] Call Trace: [ 473.433953][ C1] [ 473.433960][ C1] rcu_read_lock_sched_held+0x40/0x70 [ 473.433980][ C1] psi_task_switch+0x847/0xb10 [ 473.434000][ C1] __schedule+0x2c11/0x6120 [ 473.434020][ C1] ? __pfx___schedule+0x10/0x10 [ 473.434034][ C1] ? rcu_is_watching+0x12/0xc0 [ 473.434050][ C1] preempt_schedule_irq+0x50/0x90 [ 473.434064][ C1] irqentry_exit+0x17b/0x670 [ 473.434079][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 473.434094][ C1] RIP: 0010:unwind_next_frame+0x55/0x1ea0 [ 473.434112][ C1] Code: c0 74 08 3c 03 0f 8e 15 0c 00 00 41 8b 5d 00 31 ed 85 db 75 15 48 83 c4 38 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc <48> b8 00 00 00 00 00 fc ff df 49 8d 6d 48 48 89 ea 48 c1 ea 03 80 [ 473.434124][ C1] RSP: 0018:ffffc90003046f40 EFLAGS: 00000202 [ 473.434134][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc90003046f04 [ 473.434143][ C1] RDX: 1ffff92000608df6 RSI: ffffffff8291b5c2 RDI: ffffc90003046fb0 [ 473.434151][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000007 [ 473.434159][ C1] R10: 0000000000000200 R11: 0000000000014fd1 R12: ffffffff81f34810 [ 473.434168][ C1] R13: ffffc90003046fb0 R14: 0000000000000000 R15: ffff888028fca4c0 [ 473.434178][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 473.434198][ C1] ? evict+0x3c2/0xad0 [ 473.434216][ C1] ? shmem_evict_inode+0x39e/0xbd0 [ 473.434236][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 473.434253][ C1] arch_stack_walk+0x94/0xf0 [ 473.434270][ C1] ? evict+0x3c2/0xad0 [ 473.434287][ C1] stack_trace_save+0x8e/0xc0 [ 473.434303][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 473.434320][ C1] ? __lock_acquire+0x4a5/0x2630 [ 473.434339][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 473.434352][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 473.434367][ C1] save_stack+0x162/0x1e0 [ 473.434385][ C1] ? __pfx_save_stack+0x10/0x10 [ 473.434402][ C1] ? free_unref_folios+0xaea/0x1790 [ 473.434419][ C1] ? folios_put_refs+0x53c/0x840 [ 473.434437][ C1] ? shmem_undo_range+0x5e5/0x1570 [ 473.434459][ C1] ? shmem_evict_inode+0x39e/0xbd0 [ 473.434476][ C1] ? evict+0x3c2/0xad0 [ 473.434494][ C1] ? page_ext_put+0x3e/0xd0 [ 473.434514][ C1] __reset_page_owner+0x84/0x190 [ 473.434534][ C1] free_unref_folios+0xaea/0x1790 [ 473.434552][ C1] ? in_gate_area_no_mm+0x10/0x70 [ 473.434573][ C1] folios_put_refs+0x53c/0x840 [ 473.434592][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 473.434612][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 473.434635][ C1] shmem_undo_range+0x5e5/0x1570 [ 473.434656][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 473.434696][ C1] shmem_evict_inode+0x39e/0xbd0 [ 473.434715][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 473.434735][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 473.434753][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 473.434774][ C1] ? find_held_lock+0x2b/0x80 [ 473.434789][ C1] ? evict+0x37e/0xad0 [ 473.434804][ C1] ? evict+0x37e/0xad0 [ 473.434820][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 473.434839][ C1] evict+0x3c2/0xad0 [ 473.434854][ C1] ? find_held_lock+0x2b/0x80 [ 473.434870][ C1] ? __pfx_evict+0x10/0x10 [ 473.434887][ C1] ? iput.part.0+0x5fd/0xf50 [ 473.434906][ C1] iput.part.0+0x605/0xf50 [ 473.434921][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 473.434935][ C1] iput+0x35/0x40 [ 473.434951][ C1] dentry_unlink_inode+0x2a1/0x490 [ 473.434968][ C1] __dentry_kill+0x1d0/0x600 [ 473.434985][ C1] finish_dput+0x76/0x480 [ 473.435002][ C1] dput.part.0+0x456/0x570 [ 473.435020][ C1] dput+0x1f/0x30 [ 473.435035][ C1] __fput+0x519/0xb40 [ 473.435053][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.435066][ C1] task_work_run+0x150/0x240 [ 473.435079][ C1] ? __pfx_task_work_run+0x10/0x10 [ 473.435094][ C1] do_exit+0x8b8/0x2b60 [ 473.435111][ C1] ? irqentry_exit+0x180/0x670 [ 473.435124][ C1] ? __pfx_do_exit+0x10/0x10 [ 473.435140][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 473.435155][ C1] do_group_exit+0xd5/0x2a0 [ 473.435173][ C1] get_signal+0x1ec7/0x21e0 [ 473.435191][ C1] ? __pfx_get_signal+0x10/0x10 [ 473.435208][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 473.435224][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 473.435242][ C1] ? do_user_addr_fault+0x8d6/0x12f0 [ 473.435257][ C1] irqentry_exit+0x1f8/0x670 [ 473.435271][ C1] asm_exc_page_fault+0x26/0x30 [ 473.435282][ C1] RIP: 0033:0x0 [ 473.435290][ C1] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 473.435295][ C1] RSP: 002b:00002000000000a8 EFLAGS: 00010217 [ 473.435304][ C1] RAX: 0000000000000000 RBX: 00007f6ab8016090 RCX: 00007f6ab7d9c799 [ 473.435311][ C1] RDX: 00002000000000c0 RSI: 00002000000000a0 RDI: 00000000a0000400 [ 473.435319][ C1] RBP: 00007f6ab7e32bd9 R08: 0000200000000140 R09: 0000200000000140 [ 473.435326][ C1] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 473.435334][ C1] R13: 00007f6ab8016128 R14: 00007f6ab8016090 R15: 00007ffdc76732d8 [ 473.435347][ C1] [ 473.440558][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 473.440575][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 473.440596][ T30] Tainted: [L]=SOFTLOCKUP [ 473.440603][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.440611][ T30] Call Trace: [ 473.440617][ T30] [ 473.440624][ T30] dump_stack_lvl+0x100/0x190 [ 473.440652][ T30] vpanic+0x552/0x970 [ 473.440668][ T30] ? __pfx_vpanic+0x10/0x10 [ 473.440685][ T30] ? rcu_is_watching+0x12/0xc0 [ 473.440708][ T30] panic+0xd1/0xe0 [ 473.440723][ T30] ? __pfx_panic+0x10/0x10 [ 473.440741][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 473.440764][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 473.440785][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 473.440806][ T30] ? watchdog.cold+0x198/0x1ca [ 473.440822][ T30] ? watchdog+0xd35/0x1050 [ 473.440844][ T30] watchdog.cold+0x1a9/0x1ca [ 473.440868][ T30] ? __pfx_watchdog+0x10/0x10 [ 473.440889][ T30] ? __kthread_parkme+0x18c/0x230 [ 473.440912][ T30] ? kthread+0x13a/0x450 [ 473.440926][ T30] ? __pfx_watchdog+0x10/0x10 [ 473.440949][ T30] kthread+0x370/0x450 [ 473.440963][ T30] ? __pfx_kthread+0x10/0x10 [ 473.440980][ T30] ret_from_fork+0x754/0xd80 [ 473.440997][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 473.441014][ T30] ? __switch_to+0x7b4/0x1120 [ 473.441033][ T30] ? __pfx_kthread+0x10/0x10 [ 473.441049][ T30] ret_from_fork_asm+0x1a/0x30 [ 473.441077][ T30] [ 474.190130][ T30] Kernel Offset: disabled [ 474.194439][ T30] Rebooting in 86400 seconds..