last executing test programs: 12.125036769s ago: executing program 3 (id=693): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pread64(r2, &(0x7f00000001c0)=""/55, 0x37, 0x80000000000) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x400000000000247, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004600)=""/102400, 0x19000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) creat(0x0, 0x350) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x301, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) close(r1) syz_emit_ethernet(0xfffffdf5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) 9.940908098s ago: executing program 2 (id=701): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x7ff, 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 9.196861749s ago: executing program 3 (id=703): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000a37e8633882a5a1d270f62b0cc639ca731811253bc655aa869ed4530c47bee39048e0e3fcb674a1fe47a3ab228d206ae0dc20d655cc7fcaaae97", @ANYRES16=r2, @ANYBLOB="000226bd7000fddbdf253d00000008000300", @ANYRES32=r3, @ANYBLOB="08005d000100000008005d000100000008005d0000000000"], 0x34}, 0x1, 0x0, 0x0, 0xc4}, 0x20000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0xfd, 0x2) r4 = socket(0x2, 0x80805, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x3, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0xfffffffe) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) ioprio_get$uid(0x3, 0x0) r6 = syz_io_uring_setup(0x1830, &(0x7f00000003c0)={0x0, 0x8d59, 0x10, 0x4, 0x219}, &(0x7f0000000180)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r6, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r9, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r9, 0xda90) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x8) sendto$inet_nvme_of_msg(r10, &(0x7f00000001c0)={@data_h2c={{0x6, 0x2, 0x18, 0x3}, 0x1, 0x8, 0x7ff, 0x7, "103fcafa"}, @val=0x0}, 0x88, 0x0, 0x0, 0x0) 8.617952308s ago: executing program 0 (id=704): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, &(0x7f0000001080)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r3, 0x5452, 0x0) shutdown(r3, 0x1) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000005c0)={0x1, 0x0, [{0xc000, 0x12, &(0x7f00000002c0)=""/18}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 8.314673854s ago: executing program 2 (id=706): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4e, 0x212130, 0xfffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200, 0x0, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000100)) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000100)={0xf97cff8c, 0x8}, 0xa) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r5, @ANYBLOB="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"], 0xd8}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 6.644959714s ago: executing program 2 (id=709): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000240)={r8, 0x7fc, 0x2, r8}) ioctl$KVM_SET_IRQCHIP(r7, 0xae64, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0xfffffffd, 0x20000000334e8b}) recvfrom$unix(r1, &(0x7f0000000440)=""/217, 0xd9, 0x2000, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000240)={0x18, r9}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB], 0x3c}}, 0x20048000) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001380)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fsopen(&(0x7f0000000040)='ceph\x00', 0x1) 6.590203416s ago: executing program 4 (id=710): sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = epoll_create1(0x80000) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000900)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\'u\xa4\x00_\xaf8\xdf-J?V=\xf3\xb4\xac\x179\x9f\x04\x100\x9f\xd4\xd6\x8d\xde\xc2Z\x17H\v\xeb_ug\xb1\x90_}\x9f\xa05D\xa8\xce#h`\x1c\x98\xa8\x0e\x86\xda&i)R1\xb7\xf5\n\x87\xd9z6\xc4\x9c1\xf3E-{1V\xe4\x99[\xe1\x85\x83??e\xae\x8a\xb2\xf8\x14z\xd3T/9\x00g\xba\x13x0}\xf6\xeb\xaeT\xa9\xe18\x06\xd8GwS\xc7\x85u\xc4\xa1\x9e\xf1\xc0\x8b\xd1\x14j\x88\x99\xfe\xeb\x83\x13]\r\xb7\xbf\x9cSL\xe3i\xc3\xfe\r\xf7%\x92,\xef\xf2\xc1\xb5\xb0\x16\x17W\xbc\x14\xc3\x05\xcdnY\x9a2\xa8U\x13\x869\xc5\xb6\xa3\x00\x86\xb9\xb0\x91\x83\x8an\xc5\x9a\xaeML\x91\xa0r\v\xbd\x8d\xf4\xa6\xc7E\xf8\x8bC0s\x99jO\x9dc\xefa\x85\x9a\xb1\x90\x01-\xb0L\x82\xe9\x03\xc2\xae', 0x3) ftruncate(r3, 0xffff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x80010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000580)=""/162) fcntl$addseals(r2, 0x409, 0x7) userfaultfd(0x801) close(0x3) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8040) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffd, 0x19, 0x5, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000080)="6c09e8a3dc9fb24f3b545ce74037226e5df6d62501fccb3e41", 0x0, 0x4, 0x4, 0x3, 0x0}) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0xfffffffff0000000, 0x2000}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r7 = dup(r6) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x16000001a}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x2000}) 6.532760738s ago: executing program 0 (id=711): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000500)={'pcmmio\x00', [0x4f28, 0x0, 0x80010000, 0x4, 0x6, 0x5, 0x4, 0x7, 0x54c6cfee, 0xfd, 0xe3d, 0x775, 0x1, 0xffffffff, 0x6, 0x101, 0x0, 0x7f, 0x2f, 0x40000003, 0x3, 0x1, 0x0, 0x20001e58, 0x400004, 0xe64, 0x3, 0x8, 0x3, 0x0, 0xfffffff8]}) 6.528873633s ago: executing program 1 (id=712): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000600000023000000fdffffff", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x400}, 0x8000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='affs\x00', 0xc0800, &(0x7f0000000240)='/dev/cpu/#/msr\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0, @ANYBLOB="2c00051464e50f3a445c89c463ec77136187a61df8d908696812d0ea550c1c7564ff72da960ad1d6bb56d7d2d4912f36ce75557a4d06"]) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f00000001c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x20, 0x1e, 0x301, 0x20000002, 0x0, {0x1}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000300)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r8, r9, 0x0, 0x1f5, 0x0, 0xfffffffd, {0x6, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x8005, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000004c0), 0xfc0ebb730264e873, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000002c0)={0x4, 0xe, 0x1}) 6.131004498s ago: executing program 0 (id=713): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x1, 0x81}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xfffffff9, 0x1005}, {}, {}, @raw8={"13e661fefa8c7d0d9a4be91e"}}, {0x0, 0x3f, 0x0, 0x0, @tick, {0x10}, {}, @time}, {0x0, 0x3, 0x0, 0x0, @time, {0x0, 0x1f}, {}, @control={0x0, 0x8000, 0x4ee8}}], 0x70) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000018c0)) (fail_nth: 4) 5.678008088s ago: executing program 0 (id=714): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, 0x0, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000001080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @local, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "7e581ba68817"}}}}}}}, 0x0) (fail_nth: 4) 4.992756651s ago: executing program 0 (id=715): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl(r1, 0x8916, &(0x7f0000000180)="eedb2fc9e3333a") r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x4082, 0x3) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) mount$afs(&(0x7f0000000380)=ANY=[], &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000240), 0x800040, &(0x7f0000000300)=ANY=[@ANYBLOB='flock=write,flock=local,flock=strict,flock=strict,flock=strict,dyn']) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(r3, 0x0, &(0x7f0000000140)={0x800007, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r4 = syz_open_dev$dri(&(0x7f0000000a40), 0x0, 0x88400) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000fc0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) waitid(0x2, 0x0, &(0x7f0000000080), 0x1, &(0x7f0000000200)) r8 = fsmount(r7, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$USBDEVFS_RESETEP(r8, 0x80045503, &(0x7f00000002c0)={0x3}) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000000300)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x0, 0x59565955, 0xb, 0x3c0, 0x0, @discrete={0x7, 0x3}}) 4.990603961s ago: executing program 4 (id=716): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000600000023000000fdffffff", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x2, 0x1, 0x1, 0x4, 0x3, 0x40}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400}, 0x8000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='affs\x00', 0xc0800, &(0x7f0000000240)='/dev/cpu/#/msr\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f00000001c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x20, 0x1e, 0x301, 0x20000002, 0x0, {0x1}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000300)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r8, r9, 0x0, 0x1f5, 0x0, 0xfffffffd, {0x6, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x8005, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000002c0)={0x4, 0xe, 0x1}) 4.133928522s ago: executing program 2 (id=717): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r1, &(0x7f0000000140)="41000200", 0x178) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000140)=@md0, &(0x7f0000000400)='./cgroup\x00', &(0x7f0000000380)='pstore\x00', 0x9, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r4 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x6a, 0x5, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44094) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'vxcan1\x00'}) sendmmsg$inet6(r4, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000001c0)="d4b17f6b0f814cb3c8f8e7e53533a31d729eaf84c5587543556ce2d09c61892c12f252b15c23da5507b4eb7f648f290c09299e477a1be48c757c5bbea7eb0ce7e1", 0x41}, {&(0x7f0000000240)="ad7fee5022faa8e813aeea7101308bab4b53d35905813a5a0542cf8ab14dc8088f42008e2893d778a80592c47844f6a8694dd36a5d14e7a35c2bf7f044a8e857b756a4a1268a1c352f4b82dcf491c3d473eb645305cb267fc2f7ff2f2253b6b066c12d6690f437c7d0b584767fbe5baaad940a5639e45458b551b1a029b8aa1aeddb6a0887c0341e40c0ed9ab18e93be217e0382e440a09353f01f4d0f5778a65807292c3e7dc9fc33c9d70e6ee63949522ebba5af3d9cce3eb0f4b9675d33c302ddf8564cf97bce9532b43c07b5057a390523c98f1e673a0ef8dbf18954e7826a005cf75587b9dc3d35f75c02d18a9d25fb2659f7d3a5b7", 0xf8}, {&(0x7f0000000340)="145f4fd15c2515bb48191015e527c8d6f28cc6428042a884f588cdbeab50be1c432985d77594f68d80b24ec869b3703600f98e3f81c38e2c431edb9570", 0x3d}, {&(0x7f0000000440)="908567a585dc7e785702faaf85336366bd3efd51af13ac6c85816f90670ded9b5e9da18ff4e3a6647464746547517e2702ed1223df390a734308cce7b2429902da0ed7490a301628759fb2c53f80e75673757ea178a64dd77facb3fd0cff832709d4d3c9ae49574cce440143d87dd58b170ef7fff11ec2cdadd415439e2a39dd6fb73ed3764704751586a3b7240524fa4a08e892e1326aa3bca39d912d98ebbc3fc1bbc88d02a6cfb37794a63bf88f8166c3b0b4afe6b01cb37cfedd63de279bea3878598d39b8ab2626b9445f4544b5a26c505e5b9d136ce00589c7428be609aaa3", 0xe2}, {&(0x7f0000000540)="028e5c4dee6fb3f3def4db8fe2d80a9dce0a3ae3ed941e64ca3d9c48f24c409ba49ee433f80a5afaffcbb4ecba23af20a0c10aedd45db95671404b478c28f5fe2e01fd8f7f2a58a415f85e9c8f294cda48b7", 0x52}], 0x5, &(0x7f0000000640)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r5}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x22, 0x2, 0x0, 0x67, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="8005cf7d05ad6bc5a866b34c295ea20bdd1453aeb05c2d12e8800b515aaff9dbfc6d75b7c52302b3037fbd9d722a7cd7bcd2ee86856ecd5579ea0c0529b3f41827fa2c18dc91be3b560db60fdd5a3146fa102cb5360ad071c1acbcf55e5a63c387820f39fe1cffa01460", 0x6a}, {&(0x7f00000007c0)="b9d980585d744022105fa9866b582557eb6b56aac2ebbae565e3ca5b759d2a028f6ba6705b99c1999e197de96696caf7dc079dc280fe3de0143b8b80d5365b0924fde943e01f4732d70ecfa837a7b3f7855c3dd6a862323c8822669ee1d1d637b1b7bd0783dbc12102", 0x69}, {&(0x7f00000003c0)="df414d7cb8766c50e7389a65e3e2c5895c30d05a8280390c8985d23616986c0ee9053bd0706e9b30f61af3e0fdbd298d8be3fd210fc6", 0x36}, {&(0x7f0000000840)="84f67ff3c08ea5e171268f322a8abe20ae5589be33761c189633c7fa61be1a7d54cc2b3aa2a42baacc951d1edd79e4bb56168f5a419603c24158d46db538f0a4cfb730eb89be2d75cf84bcb17074e4244a0925ed48a3e808b0320ae4fe1ae78da609830704918246cbdb520d576baef048307fe3cb2737891128d9cf7f1292a2516d21a91698794126b9dd7e8d480a4f8335abd116720b221e42f01e954bfd07c5b3df4c6499e71de8a33c0fadc52bcfc629f1d6e44022abc60300e6f41031b49d3ec11e602d036dec0bb92546d622d1c077", 0xd2}], 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="38000000000000002900000004000000620300000000000001020000c910fc02000000000000000000000000000104010700010000000000800000000000000029000000370000003b0c000000000000050200d70730000000000a0209009a00000000000000fcffffffffffffff01000000000000000b000000000000000300000000000000c9102001000000000000000000000000000105020004c20400000001c910fc0200000000000000000000000000000000000088000000000000002900000039000000870e020700000000fc020000000000000000000000000001fc020000000000000000000000000001fe8000000000000000000000000000bbfe8000000000000000000000000000bbfc010000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000bb1400000000000000290000000b000000fffffffb000000002800000000000000290000003600000011010000000000000502fee20401bac204fffffffd0000001400000000000000290000200b0000008000000000000000300000000000000029000000370000003302000000000000c910fe8000000000000000000000000000aa000000000000140000000000000029000000340000000200000000000000d21c6f82a4a4e9bba2a197ee9b25cbb732bc9259162390380dc1a5750188128452648c9202c1ab86661c85275fbb182419afc5fba82892e8c513f0e287278e7170a2772b01b3d6c5ebd4ab7a941fd5b51945fe1490365edf01001497c338d2625653105befb26f4d0f5945769a398a8d4065582c43ffb3a6610236c62c03c317bcc03048c9cf94b30629e0e33c07539b1eb4ee528074b69b91fb6f6f8b07378c5db999c91c49bb27220642c3da77"], 0x1e0}}], 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) (async) write(r1, &(0x7f0000000140)="41000200", 0x178) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mount(&(0x7f0000000140)=@md0, &(0x7f0000000400)='./cgroup\x00', &(0x7f0000000380)='pstore\x00', 0x9, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) socket(0x1d, 0x2, 0x6) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x6a, 0x5, 0x0, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44094) (async) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'vxcan1\x00'}) (async) sendmmsg$inet6(r4, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000001c0)="d4b17f6b0f814cb3c8f8e7e53533a31d729eaf84c5587543556ce2d09c61892c12f252b15c23da5507b4eb7f648f290c09299e477a1be48c757c5bbea7eb0ce7e1", 0x41}, {&(0x7f0000000240)="ad7fee5022faa8e813aeea7101308bab4b53d35905813a5a0542cf8ab14dc8088f42008e2893d778a80592c47844f6a8694dd36a5d14e7a35c2bf7f044a8e857b756a4a1268a1c352f4b82dcf491c3d473eb645305cb267fc2f7ff2f2253b6b066c12d6690f437c7d0b584767fbe5baaad940a5639e45458b551b1a029b8aa1aeddb6a0887c0341e40c0ed9ab18e93be217e0382e440a09353f01f4d0f5778a65807292c3e7dc9fc33c9d70e6ee63949522ebba5af3d9cce3eb0f4b9675d33c302ddf8564cf97bce9532b43c07b5057a390523c98f1e673a0ef8dbf18954e7826a005cf75587b9dc3d35f75c02d18a9d25fb2659f7d3a5b7", 0xf8}, {&(0x7f0000000340)="145f4fd15c2515bb48191015e527c8d6f28cc6428042a884f588cdbeab50be1c432985d77594f68d80b24ec869b3703600f98e3f81c38e2c431edb9570", 0x3d}, {&(0x7f0000000440)="908567a585dc7e785702faaf85336366bd3efd51af13ac6c85816f90670ded9b5e9da18ff4e3a6647464746547517e2702ed1223df390a734308cce7b2429902da0ed7490a301628759fb2c53f80e75673757ea178a64dd77facb3fd0cff832709d4d3c9ae49574cce440143d87dd58b170ef7fff11ec2cdadd415439e2a39dd6fb73ed3764704751586a3b7240524fa4a08e892e1326aa3bca39d912d98ebbc3fc1bbc88d02a6cfb37794a63bf88f8166c3b0b4afe6b01cb37cfedd63de279bea3878598d39b8ab2626b9445f4544b5a26c505e5b9d136ce00589c7428be609aaa3", 0xe2}, {&(0x7f0000000540)="028e5c4dee6fb3f3def4db8fe2d80a9dce0a3ae3ed941e64ca3d9c48f24c409ba49ee433f80a5afaffcbb4ecba23af20a0c10aedd45db95671404b478c28f5fe2e01fd8f7f2a58a415f85e9c8f294cda48b7", 0x52}], 0x5, &(0x7f0000000640)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r5}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x22, 0x2, 0x0, 0x67, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="8005cf7d05ad6bc5a866b34c295ea20bdd1453aeb05c2d12e8800b515aaff9dbfc6d75b7c52302b3037fbd9d722a7cd7bcd2ee86856ecd5579ea0c0529b3f41827fa2c18dc91be3b560db60fdd5a3146fa102cb5360ad071c1acbcf55e5a63c387820f39fe1cffa01460", 0x6a}, {&(0x7f00000007c0)="b9d980585d744022105fa9866b582557eb6b56aac2ebbae565e3ca5b759d2a028f6ba6705b99c1999e197de96696caf7dc079dc280fe3de0143b8b80d5365b0924fde943e01f4732d70ecfa837a7b3f7855c3dd6a862323c8822669ee1d1d637b1b7bd0783dbc12102", 0x69}, {&(0x7f00000003c0)="df414d7cb8766c50e7389a65e3e2c5895c30d05a8280390c8985d23616986c0ee9053bd0706e9b30f61af3e0fdbd298d8be3fd210fc6", 0x36}, {&(0x7f0000000840)="84f67ff3c08ea5e171268f322a8abe20ae5589be33761c189633c7fa61be1a7d54cc2b3aa2a42baacc951d1edd79e4bb56168f5a419603c24158d46db538f0a4cfb730eb89be2d75cf84bcb17074e4244a0925ed48a3e808b0320ae4fe1ae78da609830704918246cbdb520d576baef048307fe3cb2737891128d9cf7f1292a2516d21a91698794126b9dd7e8d480a4f8335abd116720b221e42f01e954bfd07c5b3df4c6499e71de8a33c0fadc52bcfc629f1d6e44022abc60300e6f41031b49d3ec11e602d036dec0bb92546d622d1c077", 0xd2}], 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1e0}}], 0x2, 0x0) (async) 3.863214731s ago: executing program 1 (id=718): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r0, 0x0, 0x53, 0x2f) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x9, 0x5, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0) getdents64(r6, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000100)={0xc}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r7) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000280)=""/120) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80320000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027000000060002001100000008000b00736970000800080009000000060004"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000b40)={r9, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x0, 0xa, 0xb, 0x5, r9}, &(0x7f00000000c0)=0x10) 3.835212227s ago: executing program 3 (id=719): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0xa, @pix={0x7, 0x8, 0x32315241, 0x9, 0x6, 0xa990, 0xe, 0x726, 0x0, 0x0, 0x0, 0x5}}) 3.38699518s ago: executing program 4 (id=720): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_smc(0x2b, 0x1, 0x0) accept(r3, &(0x7f0000000000)=@nl, &(0x7f0000000080)=0x80) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r4, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df75e3ffe46630d4a1741b1554dd5a55e66eaecea76d5d174c21eea8e02493ac4beba5ab57d22b47f9e9db8fb29de336d8af9753fcd0c84e77c8802ffa8bc448d6c1ab4894bf4", 0x79, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x92040, 0x0) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xa, 0x1, 0x5, 0x10208, r0, 0x7, '\x00', r7, r8, 0x0, 0x2, 0x0, 0xb, @void, @value, @value=r9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) accept(r3, &(0x7f0000000000)=@nl, &(0x7f0000000080)=0x80) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) (async) sendto$packet(r4, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df75e3ffe46630d4a1741b1554dd5a55e66eaecea76d5d174c21eea8e02493ac4beba5ab57d22b47f9e9db8fb29de336d8af9753fcd0c84e77c8802ffa8bc448d6c1ab4894bf4", 0x79, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x92040, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xa, 0x1, 0x5, 0x10208, r0, 0x7, '\x00', r7, r8, 0x0, 0x2, 0x0, 0xb, @void, @value, @value=r9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 3.062795971s ago: executing program 3 (id=721): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000009157526a2afd06999d33", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000080002000100000008000100000000000400088004000c80"], 0x2c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x20000004) ioctl$KVM_CAP_STEAL_TIME(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010027bd7000fcdbdf257700000008000300", @ANYRES32=r5, @ANYBLOB="27c524607ca6c6"], 0x1c}, 0x1, 0x0, 0x0, 0x24000105}, 0x40c0) 3.062333501s ago: executing program 2 (id=722): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)="98"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x15) 2.692275921s ago: executing program 1 (id=723): getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x1, '/'}, &(0x7f0000000180)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xa, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7de", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB='\b\x00'], 0x18c0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={r0, 0x99, 0xb, 0x6, 0xf, 0x5b92, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @loopback}}, 0x81, 0xb57, 0xc, 0x4b, 0x9}}, 0x0) socket$kcm(0x10, 0x2, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd600000001090224"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x140, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xf9}}}}}]}}]}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 2.577471269s ago: executing program 4 (id=724): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYRES32=0x41424344, @ANYBLOB], 0x0) listen(0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x88c, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xfff7ffdf, 0x173}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xe7d, 0x3ff, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400)) 2.422661613s ago: executing program 0 (id=725): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000db9d1b08d112e2fa8b70010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x83c05518, &(0x7f0000000400)=0x1) 1.815965676s ago: executing program 2 (id=726): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = socket(0x9, 0x80000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'vlan1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x46, 0x8, 0x4, 0x81, 0x7, "f0b46e", 0x800}}) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x19) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000032c0)=[{{&(0x7f0000000180)=@tipc=@id, 0x80, &(0x7f0000001940), 0x0, &(0x7f0000001a00)=""/136, 0x88}, 0xa}, {{&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001ac0)=""/87, 0x57}, {&(0x7f0000001b40)=""/68, 0x44}, {&(0x7f0000003600)=""/4109, 0x100d}, {&(0x7f0000001d80)=""/153, 0x99}, {&(0x7f0000001e40)=""/187, 0xbb}, {&(0x7f0000004640)=""/4096, 0x1000}], 0x6}, 0x610}, {{&(0x7f0000002c00)=@alg, 0x80, &(0x7f00000031c0)=[{&(0x7f0000001bc0)=""/165, 0xa5}, {&(0x7f0000002d40)=""/142, 0x8e}, {&(0x7f0000001d00)=""/69, 0x45}, {&(0x7f0000002e80)=""/175, 0xaf}, {&(0x7f0000002f40)=""/188, 0xbc}, {&(0x7f0000003000)=""/71, 0x47}, {&(0x7f0000003080)=""/20, 0x14}, {&(0x7f00000030c0)=""/225, 0xe1}], 0x8, &(0x7f0000003240)=""/94, 0x5e}, 0x4b}], 0x3, 0x162, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000140)=0xfffffff7) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, &(0x7f0000000100)='barrier') r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x24000058) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) getpeername(r6, 0x0, &(0x7f00000035c0)) syz_usb_connect(0x6, 0x2d, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYBLOB="75c835a74cfc42b2cc40bbd6d8064b2f2acff89425ec51849e54dd4d59a89cb72ddf5f66785d9caba1a6735a568d0f8786696cbba6c21832addfe064381eb4db0e6d553d535fb331cacf9590c4234b9c87153deaa0b3ded6e083f92d51cd78aab75aff3ce05cb574bc821fdf574e54f321bdbe8fa1c4e994b5dd8bd16274567f515e83ac512fe1c4dff1c4a439d8a761a374d7114c7325ab471b0dcb6905968d2626ef205af73ab1e86cdcbe5b7fb5bde3c5602e60fdb28873dea7c735d9717f827993dd83c8b94a08ddb46513219f3855943b69934224c2a2c30da4437a", @ANYRESDEC=r5], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1.80550312s ago: executing program 3 (id=727): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x3}}]}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1, @ANYRESOCT=r1], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00`\x00'/21, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300)=0x2, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) connect$netlink(r8, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000020000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000002000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8ee2, 0x800, 0x1, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 1.634438491s ago: executing program 4 (id=728): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x9c, 0x64, 0xf31, 0xfffffffb, 0x25dfdc03, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x0, 0xffff}, {0x1, 0x1b}}, [@TCA_RATE={0x6, 0x5, {0x81, 0xb}}, @filter_kind_options=@f_fw={{0x7}, {0x48, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x3, 0x1}}, @TCA_FW_INDEV={0x14, 0x3, 'macvtap0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'caif0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'batadv0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x2564}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.031997026s ago: executing program 1 (id=729): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0xc, 0x2, @vifc_lcl_addr=@rand_addr=0x64010100, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_FLUSH(r0, 0x60, 0xd4, &(0x7f0000000040)=0x8, 0x4) 1.027536694s ago: executing program 4 (id=730): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, &(0x7f0000000440)) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x29, 0x1f, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x10, 0x8020, 0x0, 0x4, {{0x16, 0x4, 0x3, 0x0, 0x58, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x4, 0xe6, 0x1, 0x1}, @rr={0x7, 0x17, 0xb7, [@local, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @end, @timestamp={0x44, 0x24, 0x42, 0x0, 0x5, [0x8, 0x4, 0xcb5, 0x7fff, 0x1, 0x2, 0x1, 0x4]}, @noop]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, 0x0, 0x639fe759bb2d0663, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) (async) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x7, 0x4, "b175c3"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d69aacfd18"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x58}}, 0x80) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 901.368108ms ago: executing program 3 (id=731): io_uring_setup(0x6dde, &(0x7f00000002c0)={0x0, 0xd612, 0x8001, 0x0, 0x28e}) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0xfffffffffffe}}}, 0x28) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)="3a298f640629f1e2", 0x8}], 0x2, 0xe, 0x0) io_uring_setup(0x34a7, &(0x7f0000000080)={0x0, 0x909d, 0x800, 0x500001, 0x4e}) socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80800) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) (fail_nth: 4) 606.767168ms ago: executing program 1 (id=732): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000700)={0x6, 0x0, @pic={0x2, 0xc, 0x80, 0x80, 0x5, 0xff, 0x8, 0x4, 0x81, 0x7f, 0x0, 0x40, 0xf, 0x5, 0x3, 0x8}}) (fail_nth: 2) 0s ago: executing program 1 (id=733): r0 = inotify_init() setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000004c0)="604b2dbf8f0a471e0ef788f1d982990fdfc59da3cb63314866f5409e0c6e8ad8ac1514c014f9ecac4f5ad845601433e9cfa9de7e0ae05d8cb894f6bd0d9c46331e1a9fe2dfdd213307e6213923aa8ed8dc0bfddd9fc7f021e7265ad350325334ccec775dfcedbf193b6ed5edc6285975b00ad38f3bbed1e85c3aa5", 0x7b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) socket(0xa, 0x3, 0xff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)=r4}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7, 0xa00, 0x6, 0x800000000000000}}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x6, 0x2}}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3c, 0x0, 0x0, 0x3505, 0xa, 0xa}]}]}, 0xa0}}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x20007, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): { write } for pid=7486 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 201.505924][ T30] audit: type=1400 audit(1772183430.145:1043): avc: denied { map_create } for pid=7486 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 201.640032][ T30] audit: type=1400 audit(1772183430.528:1044): avc: denied { read } for pid=7482 comm="syz.4.397" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 201.729753][ T5803] audit: audit_backlog=65 > audit_backlog_limit=64 [ 201.855498][ T5804] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 202.090749][ T5804] usb 1-1: Using ep0 maxpacket: 16 [ 202.272194][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.405'. [ 202.281159][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.405'. [ 202.293895][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.405'. [ 202.310430][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.405'. [ 202.319523][ T5804] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 202.329997][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.351381][ T7511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.405'. [ 202.362343][ T5804] usb 1-1: Product: syz [ 202.366504][ T5804] usb 1-1: Manufacturer: syz [ 202.389884][ T5804] usb 1-1: SerialNumber: syz [ 202.759623][ T5804] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 202.905423][ T5804] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 202.935455][ T5804] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 203.010840][ T5804] usb 1-1: media controller created [ 203.049451][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.552349][ T5804] zl10353_read_register: readreg error (reg=127, ret==-32) [ 203.684733][ T5804] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 203.725835][ T7523] FAULT_INJECTION: forcing a failure. [ 203.725835][ T7523] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 203.742788][ T5804] usb 1-1: USB disconnect, device number 31 [ 203.772228][ T7523] CPU: 0 UID: 0 PID: 7523 Comm: syz.4.401 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.772257][ T7523] Tainted: [L]=SOFTLOCKUP [ 203.772263][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.772273][ T7523] Call Trace: [ 203.772279][ T7523] [ 203.772285][ T7523] dump_stack_lvl+0x100/0x190 [ 203.772317][ T7523] should_fail_ex.cold+0x5/0xa [ 203.772335][ T7523] ? prepare_alloc_pages+0x16d/0x5f0 [ 203.772355][ T7523] should_fail_alloc_page+0xeb/0x140 [ 203.772385][ T7523] prepare_alloc_pages+0x1f0/0x5f0 [ 203.772406][ T7523] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 203.772433][ T7523] ? process_measurement+0x1f4/0x2350 [ 203.772458][ T7523] ? find_held_lock+0x2b/0x80 [ 203.772479][ T7523] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 203.772505][ T7523] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 203.772527][ T7523] ? __lock_acquire+0x4a5/0x2630 [ 203.772559][ T7523] ? __lock_acquire+0x4a5/0x2630 [ 203.772594][ T7523] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.772621][ T7523] ? policy_nodemask+0xed/0x4f0 [ 203.772650][ T7523] alloc_pages_mpol+0x1fb/0x550 [ 203.772683][ T7523] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 203.772717][ T7523] alloc_pages_noprof+0x131/0x390 [ 203.772744][ T7523] __pud_alloc+0x3b/0x760 [ 203.772762][ T7523] __handle_mm_fault+0x134c/0x2b60 [ 203.772787][ T7523] ? mt_find+0x45e/0x8e0 [ 203.772808][ T7523] ? __pfx___handle_mm_fault+0x10/0x10 [ 203.772826][ T7523] ? __pfx_mt_find+0x10/0x10 [ 203.772852][ T7523] ? find_vma+0xbf/0x140 [ 203.772872][ T7523] ? __pfx_find_vma+0x10/0x10 [ 203.772894][ T7523] handle_mm_fault+0x36d/0xa20 [ 203.772914][ T7523] do_user_addr_fault+0x74c/0x12f0 [ 203.772936][ T7523] exc_page_fault+0x6f/0xd0 [ 203.772950][ T7523] asm_exc_page_fault+0x26/0x30 [ 203.772964][ T7523] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 203.772983][ T7523] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 203.772996][ T7523] RSP: 0018:ffffc9000475fd78 EFLAGS: 00050206 [ 203.773008][ T7523] RAX: 0000000000000001 RBX: 0000200000000000 RCX: 000000000000001c [ 203.773017][ T7523] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9000475fdf0 [ 203.773026][ T7523] RBP: 000000000000001c R08: 0000000000000001 R09: fffff520008ebfc1 [ 203.773034][ T7523] R10: ffffc9000475fe0b R11: 0000000000000000 R12: 0000000000000000 [ 203.773042][ T7523] R13: ffffc9000475fdf0 R14: 000000000000001c R15: 0000000000000000 [ 203.773061][ T7523] _copy_from_user+0x98/0xd0 [ 203.773081][ T7523] move_addr_to_kernel+0x65/0x170 [ 203.773100][ T7523] __sys_connect+0xb5/0x170 [ 203.773120][ T7523] ? __pfx___sys_connect+0x10/0x10 [ 203.773138][ T7523] ? __fget_files+0x21f/0x3d0 [ 203.773159][ T7523] ? __pfx_ksys_write+0x10/0x10 [ 203.773183][ T7523] __x64_sys_connect+0x72/0xb0 [ 203.773201][ T7523] ? lockdep_hardirqs_on+0x78/0x100 [ 203.773215][ T7523] do_syscall_64+0x106/0xf80 [ 203.773228][ T7523] ? clear_bhb_loop+0x40/0x90 [ 203.773245][ T7523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.773258][ T7523] RIP: 0033:0x7f063779c799 [ 203.773270][ T7523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.773282][ T7523] RSP: 002b:00007f0638693028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 203.773294][ T7523] RAX: ffffffffffffffda RBX: 00007f0637a15fa0 RCX: 00007f063779c799 [ 203.773303][ T7523] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 203.773311][ T7523] RBP: 00007f0638693090 R08: 0000000000000000 R09: 0000000000000000 [ 203.773319][ T7523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.773327][ T7523] R13: 00007f0637a16038 R14: 00007f0637a15fa0 R15: 00007fffb4560fb8 [ 203.773346][ T7523] [ 204.582496][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 205.072613][ T5804] Process accounting resumed [ 206.235129][ T30] kauditd_printk_skb: 173 callbacks suppressed [ 206.235145][ T30] audit: type=1400 audit(1772183436.431:1216): avc: denied { create } for pid=7531 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.565141][ T30] audit: type=1400 audit(1772183436.552:1217): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.686654][ T7545] set match dimension is over the limit! [ 206.751692][ T30] audit: type=1400 audit(1772183436.552:1218): avc: denied { read write open } for pid=5809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.807457][ T7538] Cannot find set identified by id 0 to match [ 206.888442][ T30] audit: type=1400 audit(1772183436.552:1219): avc: denied { ioctl } for pid=5809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.056826][ T30] audit: type=1400 audit(1772183436.683:1220): avc: denied { write } for pid=7531 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.222074][ T30] audit: type=1400 audit(1772183436.683:1221): avc: denied { read } for pid=7531 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.339710][ T30] audit: type=1400 audit(1772183436.683:1222): avc: denied { read } for pid=7531 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.907448][ T30] audit: type=1400 audit(1772183436.767:1223): avc: denied { create } for pid=7539 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.927937][ T30] audit: type=1400 audit(1772183436.767:1224): avc: denied { write } for pid=7539 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.998672][ T30] audit: type=1400 audit(1772183436.767:1225): avc: denied { read } for pid=7539 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 208.602325][ T7556] netlink: 400 bytes leftover after parsing attributes in process `syz.4.415'. [ 208.932607][ T5804] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 209.120459][ T5804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.206163][ T5804] usb 5-1: config 0 has no interfaces? [ 209.239080][ T5804] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 209.273481][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.361737][ T5804] usb 5-1: config 0 descriptor?? [ 209.766468][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 209.857436][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.926878][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.948418][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 210.269322][ T24] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 210.299189][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.303836][ T24] usb 1-1: config 0 descriptor?? [ 210.613776][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 210.646911][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.688586][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 210.718042][ T24] usb 1-1: media controller created [ 210.811659][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.198770][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.418'. [ 211.436632][ T24] az6027: usb out operation failed. (-71) [ 211.465910][ T24] az6027: usb out operation failed. (-71) [ 211.530009][ T24] stb0899_attach: Driver disabled by Kconfig [ 211.583849][ T24] az6027: no front-end attached [ 211.583849][ T24] [ 211.616496][ T5873] usb 5-1: USB disconnect, device number 19 [ 211.659527][ T24] az6027: usb out operation failed. (-71) [ 211.671824][ T7576] netlink: 'syz.2.420': attribute type 10 has an invalid length. [ 211.749177][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 211.757249][ T7576] macvlan0: entered allmulticast mode [ 211.784814][ T7576] veth1_vlan: entered allmulticast mode [ 211.801246][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 211.801259][ T30] audit: type=1400 audit(1772183441.641:1413): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.802675][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 211.862700][ T30] audit: type=1400 audit(1772183441.697:1414): avc: denied { read write open } for pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.877139][ T7576] team0: Port device macvlan0 added [ 211.965106][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 212.000844][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 212.015290][ T30] audit: type=1400 audit(1772183441.697:1415): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.088542][ T24] usb 1-1: USB disconnect, device number 32 [ 212.321491][ T30] audit: type=1400 audit(1772183441.809:1416): avc: denied { read } for pid=5162 comm="acpid" name="event4" dev="devtmpfs" ino=3197 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 212.798109][ T30] audit: type=1400 audit(1772183441.819:1417): avc: denied { read open } for pid=5162 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3197 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 212.822139][ T30] audit: type=1400 audit(1772183441.819:1418): avc: denied { ioctl } for pid=5162 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3197 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 212.891095][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 212.913016][ T30] audit: type=1400 audit(1772183441.819:1419): avc: denied { ioctl } for pid=5162 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3197 ioctlcmd=0x4521 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 213.026429][ T30] audit: type=1400 audit(1772183441.931:1420): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.399544][ T7586] CUSE: info not properly terminated [ 213.510766][ T30] audit: type=1400 audit(1772183441.931:1422): avc: denied { read } for pid=5162 comm="acpid" name="event4" dev="devtmpfs" ino=3197 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 213.620121][ T30] audit: type=1400 audit(1772183441.931:1421): avc: denied { read write open } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.732746][ T7589] No control pipe specified [ 213.903345][ T7590] No control pipe specified [ 214.434804][ T7596] set match dimension is over the limit! [ 215.560762][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 216.208532][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.232865][ T24] usb 5-1: config 0 has no interfaces? [ 216.247164][ T24] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 216.280325][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.337285][ T24] usb 5-1: config 0 descriptor?? [ 216.512224][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 216.758298][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 217.101455][ T29] usb 5-1: USB disconnect, device number 20 [ 217.132070][ T24] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 217.172289][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.187154][ T30] kauditd_printk_skb: 460 callbacks suppressed [ 217.187168][ T30] audit: type=1400 audit(1772183446.683:1847): avc: denied { create } for pid=7612 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 217.241193][ T24] usb 4-1: config 0 descriptor?? [ 217.356782][ T30] audit: type=1400 audit(1772183446.720:1848): avc: denied { ioctl } for pid=7609 comm="syz.3.428" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.452979][ T30] audit: type=1400 audit(1772183446.748:1849): avc: denied { ioctl } for pid=7609 comm="syz.3.428" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.623786][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.431'. [ 217.741409][ T30] audit: type=1400 audit(1772183446.748:1850): avc: denied { ioctl } for pid=7609 comm="syz.3.428" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.856686][ T30] audit: type=1400 audit(1772183446.748:1851): avc: denied { ioctl } for pid=7609 comm="syz.3.428" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.922527][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 218.001537][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 218.031806][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 218.051708][ T24] usb 4-1: media controller created [ 218.073018][ T30] audit: type=1400 audit(1772183446.758:1852): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.155050][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.161912][ T30] audit: type=1400 audit(1772183446.758:1853): avc: denied { read write open } for pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.271175][ T30] audit: type=1400 audit(1772183446.758:1854): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.767711][ T30] audit: type=1400 audit(1772183446.832:1855): avc: denied { read write } for pid=5803 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.843261][ T7624] CUSE: info not properly terminated [ 218.929155][ T7624] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.659072][ T7631] FAULT_INJECTION: forcing a failure. [ 219.659072][ T7631] name failslab, interval 1, probability 0, space 0, times 0 [ 219.720507][ T24] az6027: usb out operation failed. (-71) [ 219.751510][ T24] az6027: usb out operation failed. (-71) [ 219.770923][ T24] stb0899_attach: Driver disabled by Kconfig [ 219.784893][ T7631] CPU: 1 UID: 0 PID: 7631 Comm: syz.2.435 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.784919][ T7631] Tainted: [L]=SOFTLOCKUP [ 219.784924][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.784933][ T7631] Call Trace: [ 219.784938][ T7631] [ 219.784943][ T7631] dump_stack_lvl+0x100/0x190 [ 219.784965][ T7631] should_fail_ex.cold+0x5/0xa [ 219.784979][ T7631] should_failslab+0xc2/0x120 [ 219.784998][ T7631] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 219.785013][ T7631] ? __d_alloc+0x34/0xa80 [ 219.785029][ T7631] __d_alloc+0x34/0xa80 [ 219.785043][ T7631] d_alloc_parallel+0x111/0x14e0 [ 219.785063][ T7631] ? find_held_lock+0x2b/0x80 [ 219.785078][ T7631] ? __d_lookup+0x25c/0x4a0 [ 219.785093][ T7631] ? __pfx_d_alloc_parallel+0x10/0x10 [ 219.785112][ T7631] ? __d_lookup+0x266/0x4a0 [ 219.785131][ T7631] lookup_open.isra.0+0x57c/0x11b0 [ 219.785150][ T7631] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 219.785169][ T7631] ? __pfx___might_resched+0x10/0x10 [ 219.785181][ T7631] ? mnt_get_write_access+0x52/0x2f0 [ 219.785199][ T7631] ? __pfx_down_write+0x10/0x10 [ 219.785211][ T7631] ? mnt_get_write_access+0x1e9/0x2f0 [ 219.785229][ T7631] path_openat+0x2291/0x31a0 [ 219.785242][ T7631] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 219.785256][ T7631] ? __pfx_path_openat+0x10/0x10 [ 219.785274][ T7631] do_file_open+0x20e/0x430 [ 219.785286][ T7631] ? __pfx_do_file_open+0x10/0x10 [ 219.785307][ T7631] ? _raw_spin_unlock+0x28/0x50 [ 219.785323][ T7631] ? alloc_fd+0x476/0x790 [ 219.785338][ T7631] do_sys_openat2+0x10d/0x1e0 [ 219.785352][ T7631] ? __pfx_do_sys_openat2+0x10/0x10 [ 219.785366][ T7631] ? __fget_files+0x21f/0x3d0 [ 219.785379][ T7631] __x64_sys_open+0xfe/0x1d0 [ 219.785392][ T7631] ? __pfx___x64_sys_open+0x10/0x10 [ 219.785404][ T7631] ? ksys_write+0x1ac/0x250 [ 219.785425][ T7631] do_syscall_64+0x106/0xf80 [ 219.785435][ T7631] ? clear_bhb_loop+0x40/0x90 [ 219.785449][ T7631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.785460][ T7631] RIP: 0033:0x7f6a8739c799 [ 219.785470][ T7631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.785480][ T7631] RSP: 002b:00007f6a8824a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 219.785491][ T7631] RAX: ffffffffffffffda RBX: 00007f6a87616180 RCX: 00007f6a8739c799 [ 219.785498][ T7631] RDX: 1df2a23c5997fa5f RSI: 0000000000080242 RDI: 0000200000000580 [ 219.785510][ T7631] RBP: 00007f6a8824a090 R08: 0000000000000000 R09: 0000000000000000 [ 219.785516][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.785522][ T7631] R13: 00007f6a87616218 R14: 00007f6a87616180 R15: 00007ffefdcf2e58 [ 219.785537][ T7631] [ 220.072087][ T24] az6027: no front-end attached [ 220.072087][ T24] [ 220.130453][ T24] az6027: usb out operation failed. (-71) [ 220.136209][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 220.144808][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 220.166125][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 220.173485][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 220.183137][ T24] usb 4-1: USB disconnect, device number 20 [ 220.573321][ T7633] CUSE: info not properly terminated [ 220.789593][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 220.813505][ T7635] netlink: 400 bytes leftover after parsing attributes in process `syz.1.437'. [ 220.901865][ T7635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.938736][ T7635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.158409][ T7644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.314323][ T7644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.339728][ T7646] No control pipe specified [ 222.329845][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 222.597928][ T30] kauditd_printk_skb: 210 callbacks suppressed [ 222.597946][ T30] audit: type=1400 audit(1772183451.668:2031): avc: denied { execmem } for pid=7655 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 222.669571][ T30] audit: type=1400 audit(1772183451.771:2032): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.714150][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 222.794091][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 222.812282][ T30] audit: type=1400 audit(1772183451.771:2033): avc: denied { read write open } for pid=5809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 223.139568][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.183268][ T30] audit: type=1400 audit(1772183451.771:2034): avc: denied { ioctl } for pid=5809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 223.193859][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 223.298508][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 223.310140][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 223.319382][ T24] usb 1-1: Product: syz [ 223.323647][ T24] usb 1-1: Manufacturer: syz [ 223.328313][ T30] audit: type=1400 audit(1772183451.827:2035): avc: denied { ioctl } for pid=7648 comm="syz.0.442" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.419280][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 223.435925][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 223.435946][ T30] audit: type=1400 audit(1772183451.827:2036): avc: denied { ioctl } for pid=7648 comm="syz.0.442" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.463469][ T24] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 223.741811][ T30] audit: type=1400 audit(1772183451.827:2037): avc: denied { ioctl } for pid=7648 comm="syz.0.442" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.247080][ T5813] audit: audit_backlog=66 > audit_backlog_limit=64 [ 224.254576][ T7650] audit: audit_backlog=66 > audit_backlog_limit=64 [ 224.782729][ T30] audit: type=1400 audit(1772183451.827:2038): avc: denied { ioctl } for pid=7648 comm="syz.0.442" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.847947][ T29] usb 1-1: USB disconnect, device number 33 [ 225.273626][ T7674] CUSE: info not properly terminated [ 226.021603][ T7676] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 226.123582][ T7676] team0: Port device batadv1 added [ 227.413901][ T7709] Cannot find set identified by id 0 to match [ 228.077766][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 228.085614][ T30] audit: type=1400 audit(1772183456.860:2288): avc: denied { read write } for pid=5803 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.207739][ T30] audit: type=1400 audit(1772183456.860:2289): avc: denied { read write open } for pid=5803 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.247438][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'. [ 228.400171][ T30] audit: type=1400 audit(1772183456.860:2290): avc: denied { ioctl } for pid=5803 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.464337][ T30] audit: type=1400 audit(1772183456.897:2291): avc: denied { create } for pid=7712 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.496778][ T30] audit: type=1400 audit(1772183457.150:2292): avc: denied { create } for pid=7712 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.574282][ T30] audit: type=1400 audit(1772183457.253:2293): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.636059][ T30] audit: type=1400 audit(1772183457.253:2294): avc: denied { read write open } for pid=5809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.710053][ T30] audit: type=1400 audit(1772183457.281:2295): avc: denied { create } for pid=7716 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 228.854258][ T30] audit: type=1400 audit(1772183457.290:2296): avc: denied { allowed } for pid=7712 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 228.892225][ T30] audit: type=1400 audit(1772183457.290:2297): avc: denied { execmem } for pid=7712 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 229.204121][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.463'. [ 229.413211][ T7732] 9p: Bad value for 'rfdno' [ 229.422058][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 229.506400][ T7733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.464'. [ 230.046529][ T792] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 230.231108][ T792] usb 4-1: Using ep0 maxpacket: 32 [ 230.248181][ T792] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 230.283034][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.357199][ T792] usb 4-1: config 0 descriptor?? [ 230.607693][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 230.663119][ T792] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 230.702175][ T792] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 230.744932][ T792] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 230.787694][ T792] usb 4-1: media controller created [ 230.832033][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.282894][ T792] az6027: usb out operation failed. (-71) [ 231.323853][ T792] az6027: usb out operation failed. (-71) [ 231.339715][ T792] stb0899_attach: Driver disabled by Kconfig [ 231.364417][ T792] az6027: no front-end attached [ 231.364417][ T792] [ 231.404025][ T792] az6027: usb out operation failed. (-71) [ 231.467411][ T792] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 231.512431][ T792] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 231.584882][ T792] dvb-usb: schedule remote query interval to 400 msecs. [ 231.606239][ T792] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 231.641138][ T792] usb 4-1: USB disconnect, device number 21 [ 231.755327][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 231.913826][ T792] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 234.108989][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 234.109006][ T30] audit: type=1400 audit(1772183461.621:2487): avc: denied { perfmon } for pid=7770 comm="syz.2.473" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 234.278852][ T30] audit: type=1400 audit(1772183461.621:2488): avc: denied { perfmon } for pid=7770 comm="syz.2.473" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 234.386246][ T30] audit: type=1400 audit(1772183461.621:2489): avc: denied { perfmon } for pid=7770 comm="syz.2.473" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 234.491827][ T30] audit: type=1400 audit(1772183461.630:2490): avc: denied { bpf } for pid=7770 comm="syz.2.473" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 234.599903][ T30] audit: type=1400 audit(1772183461.640:2491): avc: denied { bpf } for pid=7770 comm="syz.2.473" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 234.669919][ T30] audit: type=1400 audit(1772183461.640:2492): avc: denied { prog_run } for pid=7770 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 234.868390][ T30] audit: type=1400 audit(1772183462.575:2493): avc: denied { read write } for pid=5803 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.973653][ T7788] fuse: Bad value for 'fd' [ 235.071779][ T30] audit: type=1400 audit(1772183462.575:2494): avc: denied { read write open } for pid=5803 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.228212][ T30] audit: type=1400 audit(1772183462.575:2495): avc: denied { ioctl } for pid=5803 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.264413][ T30] audit: type=1400 audit(1772183462.584:2496): avc: denied { read write } for pid=7768 comm="syz.0.474" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 235.891902][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.480'. [ 236.402702][ T5873] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 236.890928][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'. [ 237.242241][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.259029][ T5873] usb 3-1: config 0 has no interfaces? [ 237.274629][ T5873] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 237.283765][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.320202][ T5873] usb 3-1: config 0 descriptor?? [ 237.346001][ T7807] CUSE: info not properly terminated [ 237.750105][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.763648][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.925195][ T7828] IPVS: Error connecting to the multicast addr [ 239.190362][ T10] usb 3-1: USB disconnect, device number 12 [ 239.229950][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 239.578228][ T30] kauditd_printk_skb: 224 callbacks suppressed [ 239.578245][ T30] audit: type=1400 audit(1772183467.617:2721): avc: denied { allowed } for pid=7830 comm="syz.1.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 239.639781][ T7832] FAULT_INJECTION: forcing a failure. [ 239.639781][ T7832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.653199][ T7832] CPU: 0 UID: 0 PID: 7832 Comm: syz.1.489 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.653218][ T7832] Tainted: [L]=SOFTLOCKUP [ 239.653222][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.653228][ T7832] Call Trace: [ 239.653232][ T7832] [ 239.653236][ T7832] dump_stack_lvl+0x100/0x190 [ 239.653258][ T7832] should_fail_ex.cold+0x5/0xa [ 239.653272][ T7832] _copy_from_user+0x2e/0xd0 [ 239.653288][ T7832] memdup_user+0x6b/0xe0 [ 239.653305][ T7832] strndup_user+0x78/0xe0 [ 239.653321][ T7832] __x64_sys_mount+0x17f/0x310 [ 239.653342][ T7832] ? __pfx___x64_sys_mount+0x10/0x10 [ 239.653360][ T7832] do_syscall_64+0x106/0xf80 [ 239.653377][ T7832] ? clear_bhb_loop+0x40/0x90 [ 239.653390][ T7832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.653402][ T7832] RIP: 0033:0x7f314359c799 [ 239.653412][ T7832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.653423][ T7832] RSP: 002b:00007f314438b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 239.653434][ T7832] RAX: ffffffffffffffda RBX: 00007f3143815fa0 RCX: 00007f314359c799 [ 239.653440][ T7832] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000200000000140 [ 239.653447][ T7832] RBP: 00007f314438b090 R08: 0000000000000000 R09: 0000000000000000 [ 239.653453][ T7832] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 239.653460][ T7832] R13: 00007f3143816038 R14: 00007f3143815fa0 R15: 00007ffe7e98b188 [ 239.653473][ T7832] [ 239.907428][ T7835] affs: No valid root block on device nullb0 [ 240.228613][ T30] audit: type=1400 audit(1772183467.636:2722): avc: denied { read } for pid=7830 comm="syz.1.489" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 240.265132][ T30] audit: type=1400 audit(1772183467.636:2723): avc: denied { read open } for pid=7830 comm="syz.1.489" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 240.321010][ T30] audit: type=1400 audit(1772183467.645:2724): avc: denied { allowed } for pid=7831 comm="syz.4.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 240.348173][ T7837] Illegal XDP return value 3653173367 on prog (id 24) dev N/A, expect packet loss! [ 240.379616][ T30] audit: type=1400 audit(1772183467.645:2725): avc: denied { read } for pid=7831 comm="syz.4.490" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 240.485479][ T30] audit: type=1400 audit(1772183467.654:2726): avc: denied { read open } for pid=7831 comm="syz.4.490" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 240.625041][ T30] audit: type=1400 audit(1772183467.926:2727): avc: denied { mounton } for pid=7831 comm="syz.4.490" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 240.718121][ T30] audit: type=1400 audit(1772183468.159:2728): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.811382][ T30] audit: type=1400 audit(1772183468.159:2729): avc: denied { read write open } for pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 241.031774][ T30] audit: type=1400 audit(1772183468.159:2730): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 241.134175][ T7854] siw: device registration error -23 [ 241.235369][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.244323][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.253644][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 241.437532][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.450287][ T10] usb 4-1: config 0 has no interfaces? [ 241.587248][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 241.608122][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.624432][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 241.652827][ T10] usb 4-1: config 0 descriptor?? [ 242.027343][ T7860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.037778][ T7860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.274584][ T29] usb 4-1: USB disconnect, device number 22 [ 242.790410][ T7867] CUSE: info not properly terminated [ 244.736714][ T7881] Cannot find set identified by id 0 to match [ 245.009798][ T30] kauditd_printk_skb: 186 callbacks suppressed [ 245.009810][ T30] audit: type=1400 audit(1772183472.706:2917): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.096703][ T30] audit: type=1400 audit(1772183472.706:2918): avc: denied { read write open } for pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.237863][ T30] audit: type=1400 audit(1772183472.706:2919): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.292950][ T7884] FAULT_INJECTION: forcing a failure. [ 245.292950][ T7884] name failslab, interval 1, probability 0, space 0, times 0 [ 245.338412][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 245.409021][ T7884] CPU: 0 UID: 0 PID: 7884 Comm: syz.4.506 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.409051][ T7884] Tainted: [L]=SOFTLOCKUP [ 245.409057][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.409066][ T7884] Call Trace: [ 245.409072][ T7884] [ 245.409079][ T7884] dump_stack_lvl+0x100/0x190 [ 245.409112][ T7884] should_fail_ex.cold+0x5/0xa [ 245.409135][ T7884] ? sk_prot_alloc+0x10b/0x2a0 [ 245.409154][ T7884] should_failslab+0xc2/0x120 [ 245.409181][ T7884] __kmalloc_noprof+0xe0/0x850 [ 245.409207][ T7884] sk_prot_alloc+0x10b/0x2a0 [ 245.409229][ T7884] sk_alloc+0x36/0xe80 [ 245.409255][ T7884] bpf_prog_test_run_skb+0x4cd/0x3230 [ 245.409281][ T7884] ? find_held_lock+0x2b/0x80 [ 245.409308][ T7884] ? __fget_files+0x215/0x3d0 [ 245.409331][ T7884] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 245.409353][ T7884] ? fput+0x79/0x100 [ 245.409374][ T7884] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 245.409393][ T7884] __sys_bpf+0x1725/0x4b90 [ 245.409415][ T7884] ? __pfx___sys_bpf+0x10/0x10 [ 245.409430][ T7884] ? proc_fail_nth_write+0x9f/0x220 [ 245.409452][ T7884] ? find_held_lock+0x2b/0x80 [ 245.409478][ T7884] ? find_held_lock+0x2b/0x80 [ 245.409498][ T7884] ? ksys_write+0x190/0x250 [ 245.409529][ T7884] ? __mutex_unlock_slowpath+0x15c/0x790 [ 245.409548][ T7884] ? __fget_files+0x215/0x3d0 [ 245.409577][ T7884] ? fput+0x79/0x100 [ 245.409594][ T7884] ? ksys_write+0x1ac/0x250 [ 245.409617][ T7884] ? __pfx_ksys_write+0x10/0x10 [ 245.409645][ T7884] __x64_sys_bpf+0x7b/0xc0 [ 245.409663][ T7884] ? lockdep_hardirqs_on+0x78/0x100 [ 245.409681][ T7884] do_syscall_64+0x106/0xf80 [ 245.409697][ T7884] ? clear_bhb_loop+0x40/0x90 [ 245.409719][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.409737][ T7884] RIP: 0033:0x7f063779c799 [ 245.409752][ T7884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.409768][ T7884] RSP: 002b:00007f0638693028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.409785][ T7884] RAX: ffffffffffffffda RBX: 00007f0637a15fa0 RCX: 00007f063779c799 [ 245.409796][ T7884] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 245.409806][ T7884] RBP: 00007f0638693090 R08: 0000000000000000 R09: 0000000000000000 [ 245.409819][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.409829][ T7884] R13: 00007f0637a16038 R14: 00007f0637a15fa0 R15: 00007fffb4560fb8 [ 245.409853][ T7884] [ 245.457411][ T30] audit: type=1400 audit(1772183472.771:2920): avc: denied { allowed } for pid=7874 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 245.534147][ T7892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.505'. [ 245.860208][ T7888] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 245.927831][ T30] audit: type=1400 audit(1772183472.771:2921): avc: denied { create } for pid=7874 comm="syz.3.502" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 246.097935][ T30] audit: type=1400 audit(1772183472.780:2922): avc: denied { map } for pid=7874 comm="syz.3.502" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 246.250514][ T30] audit: type=1400 audit(1772183472.780:2923): avc: denied { read write } for pid=7874 comm="syz.3.502" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 246.281200][ T7894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.360653][ T30] audit: type=1400 audit(1772183472.855:2924): avc: denied { create } for pid=7874 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 246.375986][ T7894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.449027][ T7896] audit: audit_backlog=65 > audit_backlog_limit=64 [ 246.455541][ T7896] audit: audit_lost=31 audit_rate_limit=0 audit_backlog_limit=64 [ 246.743626][ T7902] netlink: 'syz.0.510': attribute type 3 has an invalid length. [ 246.839091][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'. [ 246.848156][ T5873] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 246.858110][ T7904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.885613][ T7904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.051608][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.097174][ T5873] usb 3-1: config 0 has no interfaces? [ 247.108857][ T5873] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 247.141464][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.173061][ T792] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 247.192531][ T5873] usb 3-1: config 0 descriptor?? [ 247.356610][ T792] usb 4-1: Using ep0 maxpacket: 32 [ 247.383537][ T792] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 247.399823][ T792] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 247.420066][ T792] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 247.445455][ T792] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 247.462087][ T792] usb 4-1: config 0 interface 0 has no altsetting 0 [ 247.555949][ T7912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.577227][ T792] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 247.622145][ T7912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.639000][ T792] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 247.786667][ T792] usb 4-1: Product: syz [ 247.786688][ T792] usb 4-1: Manufacturer: syz [ 247.786702][ T792] usb 4-1: SerialNumber: syz [ 247.821686][ T792] usb 4-1: config 0 descriptor?? [ 247.852833][ T792] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 247.878147][ T792] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 247.941351][ T7918] siw: device registration error -23 [ 248.057009][ T7911] netlink: 'syz.1.514': attribute type 3 has an invalid length. [ 248.243254][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.258448][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.575151][ T792] usb 3-1: USB disconnect, device number 13 [ 248.811864][ T978] usb 4-1: USB disconnect, device number 23 [ 248.832643][ T978] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 248.876651][ T7920] netlink: 'syz.0.516': attribute type 3 has an invalid length. [ 249.257742][ T7925] No control pipe specified [ 249.633442][ T7931] netlink: 'syz.0.519': attribute type 2 has an invalid length. [ 249.652287][ T7931] netlink: 224 bytes leftover after parsing attributes in process `syz.0.519'. [ 250.368896][ T30] kauditd_printk_skb: 353 callbacks suppressed [ 250.368911][ T30] audit: type=1400 audit(1772183477.710:3274): avc: denied { read write } for pid=5803 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.464895][ T30] audit: type=1400 audit(1772183477.729:3275): avc: denied { read write open } for pid=5803 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.560447][ T30] audit: type=1400 audit(1772183477.729:3276): avc: denied { ioctl } for pid=5803 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.675224][ T30] audit: type=1400 audit(1772183477.860:3277): avc: denied { read write } for pid=7938 comm="syz.3.521" name="video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 250.754770][ T30] audit: type=1400 audit(1772183477.869:3278): avc: denied { read write open } for pid=7938 comm="syz.3.521" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 250.780061][ T30] audit: type=1400 audit(1772183477.934:3279): avc: denied { create } for pid=7941 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 250.925264][ T792] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 251.067604][ T30] audit: type=1400 audit(1772183477.944:3280): avc: denied { create } for pid=7941 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 251.156428][ T30] audit: type=1400 audit(1772183477.944:3281): avc: denied { read write } for pid=7941 comm="syz.2.523" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.214078][ T792] usb 3-1: Using ep0 maxpacket: 8 [ 251.235830][ T792] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 251.253029][ T30] audit: type=1400 audit(1772183477.962:3282): avc: denied { read write } for pid=7940 comm="syz.0.522" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 251.267364][ T792] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.323390][ T7956] audit: audit_lost=33 audit_rate_limit=0 audit_backlog_limit=64 [ 251.363441][ T792] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.428270][ T792] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.485914][ T792] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.708286][ T7955] netlink: 68 bytes leftover after parsing attributes in process `syz.3.521'. [ 252.554004][ T7969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.578200][ T792] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.587296][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.656670][ T7969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.917242][ T792] usb 3-1: GET_CAPABILITIES returned 0 [ 252.922754][ T792] usbtmc 3-1:16.0: can't read capabilities [ 253.256793][ T7942] syzkaller0: entered promiscuous mode [ 253.307675][ T7942] syzkaller0: entered allmulticast mode [ 253.417359][ T10] usb 3-1: USB disconnect, device number 14 [ 255.729488][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 255.729503][ T30] audit: type=1400 audit(1772183482.733:3433): avc: denied { read write } for pid=5803 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 255.816190][ T7977] CUSE: info not properly terminated [ 255.864356][ T30] audit: type=1400 audit(1772183482.770:3434): avc: denied { read write open } for pid=5803 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 255.944397][ T30] audit: type=1400 audit(1772183482.770:3435): avc: denied { ioctl } for pid=5803 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 256.073680][ T30] audit: type=1400 audit(1772183482.827:3436): avc: denied { connect } for pid=7975 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.145480][ T7995] No control pipe specified [ 256.241419][ T30] audit: type=1400 audit(1772183482.845:3437): avc: denied { read write } for pid=7975 comm="syz.1.530" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 256.272628][ T7996] siw: device registration error -23 [ 256.341815][ T30] audit: type=1400 audit(1772183482.845:3438): avc: denied { read write open } for pid=7975 comm="syz.1.530" path="/dev/sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 256.366920][ T5873] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 256.389201][ T30] audit: type=1400 audit(1772183482.845:3439): avc: denied { ioctl } for pid=7975 comm="syz.1.530" path="/dev/sg0" dev="devtmpfs" ino=759 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 256.508046][ T30] audit: type=1400 audit(1772183482.883:3440): avc: denied { prog_load } for pid=7975 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 256.585431][ T30] audit: type=1400 audit(1772183482.883:3441): avc: denied { bpf } for pid=7975 comm="syz.1.530" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 256.609525][ T5873] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 256.653481][ T30] audit: type=1400 audit(1772183482.911:3442): avc: denied { create } for pid=7975 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 256.698399][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.777747][ T5873] usb 4-1: config 0 descriptor?? [ 256.805019][ T5873] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 257.239266][ T5873] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 257.660860][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 257.680075][ T7988] netlink: 56 bytes leftover after parsing attributes in process `syz.3.533'. [ 257.845431][ T5873] gspca_cpia1: usb_control_msg 02, error -71 [ 257.856763][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 257.873245][ T5873] gspca_cpia1: usb_control_msg 05, error -71 [ 258.083687][ T8007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.539'. [ 258.303008][ T5873] cpia1 4-1:0.0: unexpected systemstate: 00 [ 258.337431][ T5873] usb 4-1: USB disconnect, device number 24 [ 258.344481][ T10] usb 3-1: config 3 has an invalid interface number: 8 but max is 0 [ 258.369922][ T10] usb 3-1: config 3 has no interface number 0 [ 258.378133][ T10] usb 3-1: config 3 interface 8 has no altsetting 0 [ 258.384755][ T10] usb 3-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=59.30 [ 258.399595][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.620381][ T10] usb 3-1: string descriptor 0 read error: -71 [ 259.660207][ T10] gspca_main: etoms-2.14.0 probing 102c:6251 [ 259.764290][ T10] usb 3-1: USB disconnect, device number 15 [ 260.525985][ T5873] Process accounting resumed [ 261.190930][ T8029] netlink: 'syz.0.534': attribute type 12 has an invalid length. [ 261.198719][ T8029] netlink: 'syz.0.534': attribute type 29 has an invalid length. [ 261.206658][ T8029] netlink: 148 bytes leftover after parsing attributes in process `syz.0.534'. [ 261.215665][ T8029] netlink: 'syz.0.534': attribute type 2 has an invalid length. [ 261.223352][ T8029] netlink: 23 bytes leftover after parsing attributes in process `syz.0.534'. [ 261.297375][ T30] kauditd_printk_skb: 190 callbacks suppressed [ 261.297391][ T30] audit: type=1400 audit(1772183487.812:3631): avc: denied { create } for pid=8021 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 261.366883][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.436609][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.521299][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.616310][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.644783][ T30] audit: type=1400 audit(1772183487.822:3632): avc: denied { ioctl } for pid=8021 comm="syz.0.534" path="socket:[19398]" dev="sockfs" ino=19398 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 261.718374][ T30] audit: type=1400 audit(1772183487.915:3633): avc: denied { read } for pid=8021 comm="syz.0.534" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 261.743460][ T8034] 9p: Bad value for 'rfdno' [ 261.893871][ T30] audit: type=1400 audit(1772183487.915:3634): avc: denied { read open } for pid=8021 comm="syz.0.534" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 261.979614][ T30] audit: type=1400 audit(1772183487.943:3635): avc: denied { ioctl } for pid=8021 comm="syz.0.534" path="/dev/video7" dev="devtmpfs" ino=951 ioctlcmd=0x5647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 262.087238][ T30] audit: type=1400 audit(1772183488.130:3636): avc: denied { read write } for pid=8028 comm="syz.1.546" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.156656][ T30] audit: type=1400 audit(1772183488.130:3637): avc: denied { read write open } for pid=8028 comm="syz.1.546" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.158599][ T8031] openvswitch: netlink: IP tunnel dst address not specified [ 262.208528][ T8038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 262.249673][ T8038] audit: audit_lost=35 audit_rate_limit=0 audit_backlog_limit=64 [ 262.283418][ T5802] audit: audit_backlog=65 > audit_backlog_limit=64 [ 262.849717][ T8048] No control pipe specified [ 263.224242][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'. [ 264.910030][ T978] Process accounting resumed [ 265.255631][ T8084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.556'. [ 266.669592][ T30] kauditd_printk_skb: 388 callbacks suppressed [ 266.669602][ T30] audit: type=1400 audit(1772183492.957:4023): avc: denied { search } for pid=8037 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.766757][ T30] audit: type=1400 audit(1772183492.994:4024): avc: denied { search } for pid=8037 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.067015][ T30] audit: type=1400 audit(1772183492.994:4025): avc: denied { search } for pid=8037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.205447][ T30] audit: type=1400 audit(1772183492.994:4026): avc: denied { search } for pid=8037 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.360940][ T30] audit: type=1400 audit(1772183492.994:4027): avc: denied { search } for pid=8037 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.462476][ T30] audit: type=1400 audit(1772183493.004:4028): avc: denied { search } for pid=8037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.503455][ T5813] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.515898][ T8098] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.526870][ T8098] audit: audit_lost=37 audit_rate_limit=0 audit_backlog_limit=64 [ 267.538737][ T5813] audit: audit_lost=38 audit_rate_limit=0 audit_backlog_limit=64 [ 268.764148][ T8114] No control pipe specified [ 270.553113][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 270.617679][ T792] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 270.837076][ T792] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.870557][ T792] usb 1-1: config 0 has no interfaces? [ 270.884911][ T8152] netlink: 68 bytes leftover after parsing attributes in process `syz.1.573'. [ 270.893881][ T792] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 270.916348][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.970889][ T792] usb 1-1: config 0 descriptor?? [ 271.351587][ T8162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.364752][ T8162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.606200][ T10] usb 1-1: USB disconnect, device number 34 [ 271.656213][ T8163] fuse: Bad value for 'fd' [ 271.789128][ T8165] fuseblk: Bad value for 'fd' [ 271.966979][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 272.192139][ T30] kauditd_printk_skb: 570 callbacks suppressed [ 272.192152][ T30] audit: type=1400 audit(1772183498.130:4591): avc: denied { search } for pid=8170 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.327547][ T30] audit: type=1400 audit(1772183498.176:4592): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.446132][ T30] audit: type=1400 audit(1772183498.176:4594): avc: denied { read } for pid=8170 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 272.510434][ T30] audit: type=1400 audit(1772183498.176:4595): avc: denied { read open } for pid=8170 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 272.643648][ T30] audit: type=1400 audit(1772183498.176:4596): avc: denied { search } for pid=8170 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.661485][ T8175] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 272.775871][ T978] Process accounting resumed [ 272.893701][ T30] audit: type=1400 audit(1772183498.176:4597): avc: denied { search } for pid=8170 comm="cmp" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.127851][ T8166] [U]  [ 273.154704][ T30] audit: type=1400 audit(1772183498.176:4598): avc: denied { search } for pid=8170 comm="cmp" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.279356][ T30] audit: type=1400 audit(1772183498.176:4599): avc: denied { read } for pid=8170 comm="cmp" name="resolv.conf.lapb0.ipv4ll" dev="tmpfs" ino=4976 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 273.425426][ T8185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.438019][ T8184] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.756730][ T8188] netlink: 'syz.4.579': attribute type 3 has an invalid length. [ 273.956982][ T8179] netlink: 124 bytes leftover after parsing attributes in process `syz.2.578'. [ 275.096751][ T8179] comedi comedi2: reset error (fatal) [ 276.606901][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.645917][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.892770][ T5915] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 277.101961][ T5915] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 277.121042][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.150496][ T5915] usb 1-1: config 0 has no interface number 0 [ 277.166607][ T5915] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 277.200345][ T5915] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 277.224176][ T5915] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 277.265917][ T5915] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 277.277772][ T792] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 277.320398][ T5915] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 277.350027][ T5915] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 277.391348][ T5915] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 277.401615][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.422406][ T5915] usb 1-1: Product: syz [ 277.438204][ T5915] usb 1-1: Manufacturer: syz [ 277.473353][ T5915] usb 1-1: SerialNumber: syz [ 277.507280][ T5915] usb 1-1: config 0 descriptor?? [ 277.522446][ T8202] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 277.550514][ T792] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 277.556912][ T30] kauditd_printk_skb: 431 callbacks suppressed [ 277.556924][ T30] audit: type=1400 audit(1772183503.153:4954): avc: denied { ioctl } for pid=8203 comm="syz.4.586" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.587619][ T792] usb 5-1: config 0 has no interface number 0 [ 277.608105][ T5915] microtek usb (rev 0.4.3): will this work? Command EP is not usually 12 [ 277.631180][ T792] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 277.641122][ T5915] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 277.673166][ T792] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 277.673182][ T5915] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 277.686837][ T30] audit: type=1400 audit(1772183503.181:4955): avc: denied { ioctl } for pid=8201 comm="syz.0.583" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.725612][ T5915] scsi host1: microtekX6 [ 277.756559][ T792] usb 5-1: config 0 interface 113 has no altsetting 0 [ 277.771917][ T13] microtek usb (rev 0.4.3): error -90 submitting URB [ 277.813880][ T13] microtek usb (rev 0.4.3): error -90 submitting URB [ 277.818513][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.845410][ T2773] microtek usb (rev 0.4.3): error -90 submitting URB [ 277.846696][ T792] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 277.865668][ T30] audit: type=1400 audit(1772183503.181:4956): avc: denied { ioctl } for pid=8201 comm="syz.0.583" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.892335][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.900171][ T2773] microtek usb (rev 0.4.3): error -90 submitting URB [ 277.925471][ T30] audit: type=1400 audit(1772183503.190:4957): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.932188][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.949815][ T30] audit: type=1400 audit(1772183503.190:4958): avc: denied { read write open } for pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.978741][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.052658][ T30] audit: type=1400 audit(1772183503.190:4959): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.105342][ T8219] netlink: 'syz.2.585': attribute type 10 has an invalid length. [ 278.138914][ T8216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.151112][ T792] usb 5-1: Product: syz [ 278.168866][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.170578][ T8216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.186337][ T792] usb 5-1: Manufacturer: syz [ 278.194317][ T792] usb 5-1: SerialNumber: syz [ 278.229114][ T30] audit: type=1400 audit(1772183503.359:4960): avc: denied { read write } for pid=5803 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.262214][ T792] usb 5-1: config 0 descriptor?? [ 278.302478][ T792] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 278.326413][ T10] usb 1-1: USB disconnect, device number 35 [ 278.328426][ T8219] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 278.379981][ T30] audit: type=1400 audit(1772183503.359:4961): avc: denied { read write open } for pid=5803 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.449474][ T30] audit: type=1400 audit(1772183503.359:4962): avc: denied { ioctl } for pid=5803 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.591138][ T30] audit: type=1400 audit(1772183503.368:4963): avc: denied { ioctl } for pid=8203 comm="syz.4.586" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.622058][ T8224] input: syz1 as /devices/virtual/input/input19 [ 278.635084][ T978] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 278.875092][ T5873] usb 5-1: USB disconnect, device number 21 [ 278.899047][ T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.931883][ T978] usb 4-1: config 0 has no interfaces? [ 279.065115][ T978] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 279.152791][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.290727][ T8230] fuse: Bad value for 'fd' [ 279.302736][ T8230] fuseblk: Bad value for 'fd' [ 279.356027][ T978] usb 4-1: config 0 descriptor?? [ 279.704428][ T29] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 279.819890][ T8235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.829910][ T8235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.180567][ T10] usb 4-1: USB disconnect, device number 25 [ 280.266171][ T29] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 280.311839][ T29] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 280.339663][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 280.365081][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 280.399531][ T978] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 280.456744][ T29] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 280.484685][ T29] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 280.512044][ T29] usb 1-1: Product: syz [ 280.523863][ T29] usb 1-1: Manufacturer: syz [ 280.548811][ T29] cdc_wdm 1-1:1.0: skipping garbage [ 280.560967][ T29] cdc_wdm 1-1:1.0: skipping garbage [ 280.567016][ T29] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 280.585337][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 280.682343][ T978] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 280.708536][ T978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.822795][ T978] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.835722][ T5915] usb 1-1: USB disconnect, device number 36 [ 280.862334][ T978] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 280.871413][ T29] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 280.889926][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.910526][ T978] usb 5-1: Product: syz [ 280.917330][ T978] usb 5-1: Manufacturer: syz [ 280.921926][ T978] usb 5-1: SerialNumber: syz [ 281.045255][ T29] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 281.061663][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 281.091387][ T29] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.133417][ T29] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 281.172492][ T29] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 281.182068][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 281.200171][ T29] usb 3-1: Product: syz [ 281.204390][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 281.211824][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 281.222465][ T978] usb 5-1: 0:2 : does not exist [ 281.242156][ T978] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 281.251186][ T29] usb 3-1: Manufacturer: syz [ 281.294265][ T29] cdc_wdm 3-1:1.0: skipping garbage [ 281.312367][ T29] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 281.375360][ T978] usb 5-1: USB disconnect, device number 22 [ 281.569975][ T6715] udevd[6715]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.685265][ T978] usb 3-1: USB disconnect, device number 16 [ 281.803484][ T8245] netlink: 45 bytes leftover after parsing attributes in process `syz.0.594'. [ 282.543711][ T8250] CUSE: info not properly terminated [ 283.014320][ T30] kauditd_printk_skb: 420 callbacks suppressed [ 283.014330][ T30] audit: type=1400 audit(1772183508.251:5336): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.068640][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.600'. [ 283.077596][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.600'. [ 283.095366][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.600'. [ 283.101994][ T30] audit: type=1400 audit(1772183508.279:5337): avc: denied { prog_load } for pid=8257 comm="syz.1.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 283.104276][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.600'. [ 283.210126][ T8261] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 283.242121][ T30] audit: type=1400 audit(1772183508.279:5338): avc: denied { bpf } for pid=8257 comm="syz.1.600" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 283.264909][ T30] audit: type=1400 audit(1772183508.288:5339): avc: denied { prog_load } for pid=8257 comm="syz.1.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 283.287175][ T30] audit: type=1400 audit(1772183508.288:5340): avc: denied { perfmon } for pid=8257 comm="syz.1.600" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 283.291926][ T8264] fuse: Bad value for 'fd' [ 283.308618][ T30] audit: type=1400 audit(1772183508.288:5341): avc: denied { perfmon } for pid=8257 comm="syz.1.600" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 283.425435][ T30] audit: type=1400 audit(1772183508.288:5342): avc: denied { perfmon } for pid=8257 comm="syz.1.600" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 283.452438][ T30] audit: type=1400 audit(1772183508.288:5343): avc: denied { perfmon } for pid=8257 comm="syz.1.600" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 283.475895][ T30] audit: type=1400 audit(1772183508.288:5344): avc: denied { read write open } for pid=5809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.641780][ T30] audit: type=1400 audit(1772183508.288:5345): avc: denied { bpf } for pid=8257 comm="syz.1.600" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 283.753610][ T8258] netlink: 'syz.2.599': attribute type 3 has an invalid length. [ 284.343921][ T8286] FAULT_INJECTION: forcing a failure. [ 284.343921][ T8286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.357198][ T8286] CPU: 0 UID: 0 PID: 8286 Comm: syz.4.606 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.357222][ T8286] Tainted: [L]=SOFTLOCKUP [ 284.357228][ T8286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.357236][ T8286] Call Trace: [ 284.357240][ T8286] [ 284.357245][ T8286] dump_stack_lvl+0x100/0x190 [ 284.357266][ T8286] should_fail_ex.cold+0x5/0xa [ 284.357281][ T8286] _copy_to_user+0x32/0xd0 [ 284.357297][ T8286] simple_read_from_buffer+0xcb/0x170 [ 284.357316][ T8286] proc_fail_nth_read+0x1af/0x230 [ 284.357332][ T8286] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.357348][ T8286] ? rw_verify_area+0xce/0x6d0 [ 284.357362][ T8286] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.357377][ T8286] vfs_read+0x1e4/0xb30 [ 284.357394][ T8286] ? __pfx_vfs_read+0x10/0x10 [ 284.357414][ T8286] ? __fget_files+0x21f/0x3d0 [ 284.357429][ T8286] ksys_read+0x12a/0x250 [ 284.357445][ T8286] ? __pfx_ksys_read+0x10/0x10 [ 284.357465][ T8286] do_syscall_64+0x106/0xf80 [ 284.357476][ T8286] ? clear_bhb_loop+0x40/0x90 [ 284.357490][ T8286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.357501][ T8286] RIP: 0033:0x7f063775cfce [ 284.357511][ T8286] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 284.357521][ T8286] RSP: 002b:00007f0638650fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 284.357533][ T8286] RAX: ffffffffffffffda RBX: 00007f06386516c0 RCX: 00007f063775cfce [ 284.357540][ T8286] RDX: 000000000000000f RSI: 00007f06386510a0 RDI: 000000000000000c [ 284.357546][ T8286] RBP: 00007f0638651090 R08: 0000000000000000 R09: 0000000000000000 [ 284.357552][ T8286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.357559][ T8286] R13: 00007f0637a16218 R14: 00007f0637a16180 R15: 00007fffb4560fb8 [ 284.357573][ T8286] [ 284.911417][ T8281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.945462][ T8281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.012773][ T8292] IPv6: addrconf: prefix option has invalid lifetime [ 285.089410][ T8294] syzkaller1: entered promiscuous mode [ 285.112066][ T8294] syzkaller1: entered allmulticast mode [ 285.413317][ T792] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 285.541771][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 285.617119][ T792] usb 1-1: Using ep0 maxpacket: 16 [ 285.654922][ T792] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.666260][ T5873] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 285.707065][ T792] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 285.732266][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.756987][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.777007][ T792] usb 1-1: Product: syz [ 285.781222][ T792] usb 1-1: Manufacturer: syz [ 285.787523][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 285.801093][ T792] usb 1-1: SerialNumber: syz [ 285.814421][ T792] usb 1-1: config 0 descriptor?? [ 285.819966][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.830292][ T5873] usb 3-1: device descriptor read/64, error -71 [ 285.840926][ T792] kobil_sct 1-1:0.0: required endpoints missing [ 285.860527][ T10] usb 5-1: config 0 descriptor?? [ 286.087171][ T5873] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 286.095216][ T8294] comedi comedi3: comedi_config --init_data is deprecated [ 286.173349][ T792] usb 1-1: USB disconnect, device number 37 [ 286.206568][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 286.223347][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 286.259243][ T10] usb 5-1: USB disconnect, device number 23 [ 286.309750][ T5873] usb 3-1: device descriptor read/64, error -71 [ 286.441495][ T5873] usb usb3-port1: attempt power cycle [ 286.792306][ T10] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 286.813698][ T5873] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 286.848552][ T5873] usb 3-1: device descriptor read/8, error -71 [ 286.992946][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 287.024724][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 287.044742][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.066582][ T10] usb 5-1: config 0 descriptor?? [ 287.090029][ T10] hub 5-1:0.0: USB hub found [ 287.123831][ T5873] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 287.170321][ T5873] usb 3-1: device descriptor read/8, error -71 [ 287.299942][ T5873] usb usb3-port1: unable to enumerate USB device [ 287.338763][ T10] hub 5-1:0.0: 1 port detected [ 287.376423][ T8319] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=868389948 (111153913344 ns) > initial count (109407939840 ns). Using initial count to start timer. [ 287.394521][ T5915] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 287.578331][ T5915] usb 1-1: config 2 has an invalid interface number: 255 but max is 0 [ 287.598074][ T5915] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 287.615439][ T5915] usb 1-1: config 2 has no interface number 0 [ 287.658534][ T5915] usb 1-1: too many endpoints for config 2 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 287.674424][ T5915] usb 1-1: config 2 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 287.730954][ T5915] usb 1-1: config 2 interface 255 has no altsetting 0 [ 287.762409][ T5915] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 287.794477][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.805901][ T5915] usb 1-1: Product: syz [ 287.810163][ T5915] usb 1-1: Manufacturer: syz [ 287.814747][ T5915] usb 1-1: SerialNumber: syz [ 287.914992][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'. [ 288.194398][ T8326] FAULT_INJECTION: forcing a failure. [ 288.194398][ T8326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.258543][ T8326] CPU: 1 UID: 0 PID: 8326 Comm: syz.3.619 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.258573][ T8326] Tainted: [L]=SOFTLOCKUP [ 288.258579][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 288.258588][ T8326] Call Trace: [ 288.258594][ T8326] [ 288.258600][ T8326] dump_stack_lvl+0x100/0x190 [ 288.258626][ T8326] should_fail_ex.cold+0x5/0xa [ 288.258641][ T8326] _copy_to_user+0x32/0xd0 [ 288.258660][ T8326] simple_read_from_buffer+0xcb/0x170 [ 288.258687][ T8326] proc_fail_nth_read+0x1af/0x230 [ 288.258716][ T8326] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 288.258737][ T8326] ? rw_verify_area+0xce/0x6d0 [ 288.258757][ T8326] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 288.258771][ T8326] vfs_read+0x1e4/0xb30 [ 288.258789][ T8326] ? __pfx_vfs_read+0x10/0x10 [ 288.258805][ T8326] ? __fget_files+0x215/0x3d0 [ 288.258819][ T8326] ? __fget_files+0x21f/0x3d0 [ 288.258842][ T8326] ksys_read+0x12a/0x250 [ 288.258864][ T8326] ? __pfx_ksys_read+0x10/0x10 [ 288.258893][ T8326] do_syscall_64+0x106/0xf80 [ 288.258907][ T8326] ? clear_bhb_loop+0x40/0x90 [ 288.258921][ T8326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.258932][ T8326] RIP: 0033:0x7ff37835cfce [ 288.258945][ T8326] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 288.258956][ T8326] RSP: 002b:00007ff379240fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.258970][ T8326] RAX: ffffffffffffffda RBX: 00007ff3792416c0 RCX: 00007ff37835cfce [ 288.258980][ T8326] RDX: 000000000000000f RSI: 00007ff3792410a0 RDI: 0000000000000007 [ 288.258994][ T8326] RBP: 00007ff379241090 R08: 0000000000000000 R09: 0000000000000000 [ 288.259004][ T8326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.259017][ T8326] R13: 00007ff378616038 R14: 00007ff378615fa0 R15: 00007ffe1d0cef78 [ 288.259044][ T8326] [ 288.510930][ T30] kauditd_printk_skb: 396 callbacks suppressed [ 288.510947][ T30] audit: type=1400 audit(1772183513.395:5742): avc: denied { read write } for pid=8316 comm="syz.0.616" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.514456][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.517350][ T30] audit: type=1400 audit(1772183513.395:5743): avc: denied { read write open } for pid=8316 comm="syz.0.616" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.540906][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.749995][ T30] audit: type=1400 audit(1772183513.395:5744): avc: denied { ioctl } for pid=8316 comm="syz.0.616" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.844523][ T30] audit: type=1400 audit(1772183513.405:5745): avc: denied { ioctl } for pid=8316 comm="syz.0.616" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.886508][ T30] audit: type=1400 audit(1772183513.480:5746): avc: denied { ioctl } for pid=8295 comm="syz.4.609" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.243457][ T30] audit: type=1400 audit(1772183513.489:5747): avc: denied { read write } for pid=5803 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.593368][ T30] audit: type=1400 audit(1772183513.545:5748): avc: denied { read write open } for pid=5803 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.692834][ T30] audit: type=1400 audit(1772183513.573:5749): avc: denied { ioctl } for pid=5803 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.768553][ T30] audit: type=1400 audit(1772183513.872:5750): avc: denied { create } for pid=8328 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 289.892715][ T30] audit: type=1400 audit(1772183513.882:5751): avc: denied { bind } for pid=8328 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 289.956494][ T5915] usb 5-1: USB disconnect, device number 24 [ 290.316583][ T5804] usb 1-1: USB disconnect, device number 38 [ 291.813216][ T8345] fuse: Bad value for 'fd' [ 292.045296][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'. [ 292.686792][ T8361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.628'. [ 292.757082][ T8336] netlink: 'syz.3.621': attribute type 3 has an invalid length. [ 292.955928][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'. [ 293.893442][ T8374] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 293.912473][ T30] kauditd_printk_skb: 177 callbacks suppressed [ 293.912489][ T30] audit: type=1400 audit(1772183518.428:5929): avc: denied { ioctl } for pid=8373 comm="syz.2.632" path="/dev/comedi3" dev="devtmpfs" ino=1279 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.029840][ T30] audit: type=1400 audit(1772183518.493:5930): avc: denied { read write } for pid=5803 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.121349][ T30] audit: type=1400 audit(1772183518.493:5931): avc: denied { read write open } for pid=5803 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.462100][ T30] audit: type=1400 audit(1772183518.493:5932): avc: denied { ioctl } for pid=5803 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.557680][ T30] audit: type=1400 audit(1772183518.587:5933): avc: denied { read write } for pid=8375 comm="syz.3.634" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.598771][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 294.628190][ T30] audit: type=1400 audit(1772183518.587:5934): avc: denied { read write open } for pid=8375 comm="syz.3.634" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.673761][ T30] audit: type=1400 audit(1772183518.587:5935): avc: denied { ioctl } for pid=8375 comm="syz.3.634" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.723585][ T30] audit: type=1400 audit(1772183518.587:5936): avc: denied { ioctl } for pid=8375 comm="syz.3.634" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.788946][ T30] audit: type=1400 audit(1772183518.615:5937): avc: denied { ioctl } for pid=8375 comm="syz.3.634" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.824637][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.835509][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 294.886884][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.902070][ T30] audit: type=1400 audit(1772183518.615:5938): avc: denied { ioctl } for pid=8375 comm="syz.3.634" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.941488][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.964639][ T10] usb 4-1: config 0 descriptor?? [ 295.235243][ T8376] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.634'. [ 295.277408][ T5915] usb 4-1: USB disconnect, device number 26 [ 295.667413][ T8397] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 297.422233][ T8412] : entered promiscuous mode [ 297.801037][ T8423] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 298.158843][ T5915] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 298.480400][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.498550][ T5915] usb 3-1: config 0 has no interfaces? [ 298.529820][ T5915] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 298.764831][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.861555][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'. [ 298.911173][ T5915] usb 3-1: config 0 descriptor?? [ 299.312246][ T30] kauditd_printk_skb: 274 callbacks suppressed [ 299.312262][ T30] audit: type=1400 audit(1772183523.498:6213): avc: denied { read } for pid=8424 comm="syz.2.647" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 299.364253][ T30] audit: type=1400 audit(1772183523.526:6214): avc: denied { read open } for pid=8424 comm="syz.2.647" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 299.442044][ T8450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.497376][ T30] audit: type=1400 audit(1772183523.601:6215): avc: denied { read write } for pid=8424 comm="syz.2.647" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 299.522719][ T8450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.688699][ T30] audit: type=1400 audit(1772183523.601:6216): avc: denied { read write open } for pid=8424 comm="syz.2.647" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 299.888845][ T30] audit: type=1400 audit(1772183523.610:6217): avc: denied { ioctl } for pid=8424 comm="syz.2.647" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 299.952492][ T30] audit: type=1400 audit(1772183523.610:6218): avc: denied { ioctl } for pid=8424 comm="syz.2.647" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.025266][ T8455] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 300.025300][ T8455] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 300.133414][ T30] audit: type=1400 audit(1772183523.722:6219): avc: denied { create } for pid=8448 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 300.433008][ T30] audit: type=1400 audit(1772183523.722:6220): avc: denied { write } for pid=8448 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 300.482736][ T30] audit: type=1400 audit(1772183523.722:6221): avc: denied { read write } for pid=8448 comm="syz.1.652" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 300.565307][ T8461] siw: device registration error -23 [ 300.631319][ T30] audit: type=1400 audit(1772183523.722:6222): avc: denied { read write open } for pid=8448 comm="syz.1.652" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 300.842263][ T5804] usb 3-1: USB disconnect, device number 21 [ 301.687952][ T8470] FAULT_INJECTION: forcing a failure. [ 301.687952][ T8470] name failslab, interval 1, probability 0, space 0, times 0 [ 301.716450][ T8470] CPU: 1 UID: 0 PID: 8470 Comm: syz.0.655 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.716479][ T8470] Tainted: [L]=SOFTLOCKUP [ 301.716485][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.716495][ T8470] Call Trace: [ 301.716501][ T8470] [ 301.716507][ T8470] dump_stack_lvl+0x100/0x190 [ 301.716539][ T8470] should_fail_ex.cold+0x5/0xa [ 301.716561][ T8470] should_failslab+0xc2/0x120 [ 301.716587][ T8470] __kvmalloc_node_noprof+0xfa/0xa00 [ 301.716611][ T8470] ? xt_alloc_table_info+0x44/0xa0 [ 301.716646][ T8470] xt_alloc_table_info+0x44/0xa0 [ 301.716667][ T8470] do_ipt_set_ctl+0x504/0xb90 [ 301.716688][ T8470] ? nf_sockopt_find.isra.0+0x222/0x290 [ 301.716714][ T8470] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 301.716737][ T8470] ? sockopt_release_sock+0x57/0x70 [ 301.716753][ T8470] ? __local_bh_enable_ip+0x9e/0x120 [ 301.716774][ T8470] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.716805][ T8470] ? nf_sockopt_find.isra.0+0x222/0x290 [ 301.716830][ T8470] nf_setsockopt+0x8d/0xf0 [ 301.716853][ T8470] ip_setsockopt+0xcb/0xf0 [ 301.716877][ T8470] tcp_setsockopt+0xa7/0x100 [ 301.716901][ T8470] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 301.716923][ T8470] do_sock_setsockopt+0xf3/0x1d0 [ 301.716946][ T8470] __sys_setsockopt+0x195/0x220 [ 301.716976][ T8470] __x64_sys_setsockopt+0xbd/0x160 [ 301.717000][ T8470] ? do_syscall_64+0x95/0xf80 [ 301.717016][ T8470] ? lockdep_hardirqs_on+0x78/0x100 [ 301.717033][ T8470] do_syscall_64+0x106/0xf80 [ 301.717049][ T8470] ? clear_bhb_loop+0x40/0x90 [ 301.717071][ T8470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.717088][ T8470] RIP: 0033:0x7f1ab159c799 [ 301.717103][ T8470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.717118][ T8470] RSP: 002b:00007f1ab24b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 301.717135][ T8470] RAX: ffffffffffffffda RBX: 00007f1ab1815fa0 RCX: 00007f1ab159c799 [ 301.717145][ T8470] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 301.717155][ T8470] RBP: 00007f1ab24b2090 R08: 0000000000000440 R09: 0000000000000000 [ 301.717165][ T8470] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 301.717174][ T8470] R13: 00007f1ab1816038 R14: 00007f1ab1815fa0 R15: 00007ffcb4a07a18 [ 301.717199][ T8470] [ 301.989857][ T8469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 301.999184][ T8469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 302.012174][ T8469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 302.021048][ T8469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 302.101980][ T8472] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 302.817046][ T8487] set match dimension is over the limit! [ 302.921365][ T8490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.931612][ T8490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.339145][ T5804] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 303.558541][ T5804] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 303.558570][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.558587][ T5804] usb 3-1: Product: syz [ 303.558604][ T5804] usb 3-1: Manufacturer: syz [ 303.558619][ T5804] usb 3-1: SerialNumber: syz [ 303.581387][ T5804] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 303.650489][ T8496] set match dimension is over the limit! [ 304.006598][ T5804] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 304.438735][ T8504] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=8504 comm=syz.1.664 [ 305.371784][ T5804] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 305.380299][ T30] kauditd_printk_skb: 295 callbacks suppressed [ 305.380314][ T30] audit: type=1400 audit(1772183529.176:6518): avc: denied { create } for pid=8497 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 305.544245][ T10] usb 3-1: USB disconnect, device number 22 [ 306.199378][ T5804] ath9k_htc: Failed to initialize the device [ 306.258519][ T30] audit: type=1400 audit(1772183529.961:6519): avc: denied { read } for pid=8497 comm="syz.4.663" dev="nsfs" ino=4026533361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 306.259739][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 306.283950][ T30] audit: type=1400 audit(1772183529.961:6520): avc: denied { read open } for pid=8497 comm="syz.4.663" path="net:[4026533361]" dev="nsfs" ino=4026533361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 306.535337][ T30] audit: type=1400 audit(1772183529.961:6521): avc: denied { create } for pid=8497 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.751746][ T30] audit: type=1400 audit(1772183529.961:6522): avc: denied { write } for pid=8497 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.848368][ T30] audit: type=1400 audit(1772183529.961:6523): avc: denied { read } for pid=8497 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.922041][ T30] audit: type=1400 audit(1772183529.971:6524): avc: denied { read } for pid=8497 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.974847][ T30] audit: type=1400 audit(1772183529.971:6525): avc: denied { write } for pid=8497 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 307.153381][ T978] Process accounting resumed [ 307.242022][ T30] audit: type=1400 audit(1772183529.971:6526): avc: denied { map_create } for pid=8497 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 307.288211][ T30] audit: type=1400 audit(1772183529.971:6527): avc: denied { perfmon } for pid=8497 comm="syz.4.663" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 307.413120][ T8521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.668'. [ 308.271427][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 308.917234][ T8543] Cannot find set identified by id 0 to match [ 309.337105][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 310.090823][ T8557] mmap: syz.1.678 (8557) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 310.589481][ T8557] binder: 8554:8557 ioctl 400c620e 0 returned -14 [ 310.750699][ T30] kauditd_printk_skb: 185 callbacks suppressed [ 310.750711][ T30] audit: type=1400 audit(1772183534.199:6713): avc: denied { ioctl } for pid=8559 comm="syz.3.679" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.814094][ T5804] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 310.824222][ T30] audit: type=1400 audit(1772183534.264:6714): avc: denied { ioctl } for pid=8559 comm="syz.3.679" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.853797][ T30] audit: type=1400 audit(1772183534.264:6715): avc: denied { ioctl } for pid=8559 comm="syz.3.679" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.879516][ T30] audit: type=1400 audit(1772183534.264:6716): avc: denied { ioctl } for pid=8559 comm="syz.3.679" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.911879][ T8563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.681'. [ 311.006714][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 311.043458][ T5804] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 311.045779][ T30] audit: type=1400 audit(1772183534.358:6717): avc: denied { ioctl } for pid=8559 comm="syz.3.679" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.263111][ T5804] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 311.287918][ T30] audit: type=1400 audit(1772183534.367:6718): avc: denied { read write } for pid=5803 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.312813][ T5804] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 311.448962][ T8570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.682'. [ 311.459042][ T8570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.682'. [ 311.466210][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 311.491635][ T5804] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 311.565697][ T5804] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.579087][ T5804] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 311.588351][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.590941][ T30] audit: type=1400 audit(1772183534.367:6719): avc: denied { read write open } for pid=5803 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.604220][ T5804] usb 4-1: config 0 descriptor?? [ 311.818283][ T30] audit: type=1400 audit(1772183534.367:6720): avc: denied { ioctl } for pid=5803 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.915983][ T30] audit: type=1400 audit(1772183534.414:6721): avc: denied { map } for pid=8554 comm="syz.1.678" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 311.950834][ T30] audit: type=1400 audit(1772183534.423:6722): avc: denied { map_create } for pid=8562 comm="syz.4.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 312.007018][ T5804] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 312.211494][ T5804] usb 4-1: USB disconnect, device number 27 [ 312.267319][ T5804] usblp0: removed [ 312.717763][ T5804] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 312.923731][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 312.962634][ T5804] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 312.979840][ T5804] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 313.013160][ T5804] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 313.037200][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.061410][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 313.087654][ T5804] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 313.100845][ T8587] veth0_macvtap: left promiscuous mode [ 313.108429][ T5804] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 313.142655][ T5804] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 313.161122][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.177766][ T5804] usb 4-1: config 0 descriptor?? [ 313.359053][ T8593] openvswitch: netlink: Message has 12 unknown bytes. [ 313.610190][ T5804] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 313.884223][ T978] usb 4-1: USB disconnect, device number 28 [ 313.910188][ T978] usblp0: removed [ 314.771534][ T8611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.692'. [ 315.925424][ T8632] CUSE: info not properly terminated [ 316.029195][ T8621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 316.114942][ T30] kauditd_printk_skb: 301 callbacks suppressed [ 316.114960][ T30] audit: type=1400 audit(1772183539.184:7024): avc: denied { ioctl } for pid=8616 comm="syz.1.695" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 316.255634][ T30] audit: type=1400 audit(1772183539.184:7025): avc: denied { write } for pid=8616 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 316.364869][ T30] audit: type=1400 audit(1772183539.259:7026): avc: denied { map_create } for pid=8624 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 316.460384][ T30] audit: type=1400 audit(1772183539.259:7027): avc: denied { bpf } for pid=8624 comm="syz.0.697" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 316.490644][ T30] audit: type=1400 audit(1772183539.259:7028): avc: denied { map_create } for pid=8624 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 316.602913][ T8630] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 316.683218][ T30] audit: type=1400 audit(1772183539.259:7029): avc: denied { map_read map_write } for pid=8624 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 316.746757][ T30] audit: type=1400 audit(1772183539.287:7030): avc: denied { perfmon } for pid=8624 comm="syz.0.697" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 316.865688][ T30] audit: type=1400 audit(1772183539.287:7031): avc: denied { prog_load } for pid=8624 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 316.949299][ T8626] audit: audit_backlog=65 > audit_backlog_limit=64 [ 316.966842][ T8613] audit: audit_backlog=65 > audit_backlog_limit=64 [ 317.036943][ T8622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.693'. [ 318.779735][ T8658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.705'. [ 318.801387][ T8656] Cannot find set identified by id 0 to match [ 319.415796][ T8668] SELinux: truncated policydb string identifier [ 319.422638][ T8668] SELinux: failed to load policy [ 320.717886][ T8683] fuse: Unknown parameter 'group_i00000000000000000000' [ 321.123990][ T8692] FAULT_INJECTION: forcing a failure. [ 321.123990][ T8692] name failslab, interval 1, probability 0, space 0, times 0 [ 321.136924][ T8692] CPU: 0 UID: 0 PID: 8692 Comm: syz.0.714 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.136954][ T8692] Tainted: [L]=SOFTLOCKUP [ 321.136960][ T8692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.136970][ T8692] Call Trace: [ 321.136976][ T8692] [ 321.136983][ T8692] dump_stack_lvl+0x100/0x190 [ 321.137017][ T8692] should_fail_ex.cold+0x5/0xa [ 321.137040][ T8692] should_failslab+0xc2/0x120 [ 321.137068][ T8692] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 321.137090][ T8692] ? dst_alloc+0x99/0x1a0 [ 321.137119][ T8692] ? __pfx_ip6_dst_gc+0x10/0x10 [ 321.137146][ T8692] dst_alloc+0x99/0x1a0 [ 321.137173][ T8692] ip6_pol_route+0x948/0x1230 [ 321.137198][ T8692] ? __pfx_ip6_pol_route+0x10/0x10 [ 321.137231][ T8692] ? __local_bh_enable_ip+0x9e/0x120 [ 321.137257][ T8692] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 321.137278][ T8692] fib6_rule_lookup+0x52f/0x720 [ 321.137302][ T8692] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 321.137324][ T8692] ? nf_nat_ipv6_fn+0xff/0x2d0 [ 321.137349][ T8692] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 321.137379][ T8692] ? ip6table_mangle_hook+0xcb/0x770 [ 321.137406][ T8692] ip6_route_input+0x662/0xc50 [ 321.137433][ T8692] ? __pfx_ip6_route_input+0x10/0x10 [ 321.137454][ T8692] ? lock_acquire+0x1cf/0x380 [ 321.137497][ T8692] ? udp_v6_early_demux+0x521/0xfb0 [ 321.137530][ T8692] ip6_rcv_finish_core.isra.0+0x1a9/0x5a0 [ 321.137557][ T8692] ipv6_rcv+0x1e8/0x610 [ 321.137581][ T8692] ? __pfx_ipv6_rcv+0x10/0x10 [ 321.137602][ T8692] __netif_receive_skb_one_core+0x12d/0x1e0 [ 321.137627][ T8692] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 321.137654][ T8692] ? lock_acquire+0x1cf/0x380 [ 321.137683][ T8692] ? __build_skb_around+0x278/0x390 [ 321.137710][ T8692] __netif_receive_skb+0x1f/0x120 [ 321.137741][ T8692] netif_receive_skb+0x139/0x820 [ 321.137765][ T8692] ? __pfx_netif_receive_skb+0x10/0x10 [ 321.137799][ T8692] tun_rx_batched.isra.0+0x3f6/0x750 [ 321.137823][ T8692] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 321.137849][ T8692] ? tun_get_user+0x1c7e/0x3e10 [ 321.137876][ T8692] tun_get_user+0x1e2e/0x3e10 [ 321.137908][ T8692] ? __pfx_tun_get_user+0x10/0x10 [ 321.137932][ T8692] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 321.137967][ T8692] ? find_held_lock+0x2b/0x80 [ 321.137988][ T8692] ? tun_get+0x191/0x370 [ 321.138005][ T8692] ? tun_get+0x191/0x370 [ 321.138031][ T8692] tun_chr_write_iter+0xdc/0x200 [ 321.138055][ T8692] vfs_write+0x6ac/0x1070 [ 321.138082][ T8692] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 321.138105][ T8692] ? __pfx_vfs_write+0x10/0x10 [ 321.138128][ T8692] ? find_held_lock+0x2b/0x80 [ 321.138167][ T8692] ksys_write+0x12a/0x250 [ 321.138191][ T8692] ? __pfx_ksys_write+0x10/0x10 [ 321.138225][ T8692] do_syscall_64+0x106/0xf80 [ 321.138242][ T8692] ? clear_bhb_loop+0x40/0x90 [ 321.138264][ T8692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.138282][ T8692] RIP: 0033:0x7f1ab155cfce [ 321.138298][ T8692] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 321.138314][ T8692] RSP: 002b:00007f1ab24b1fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 321.138332][ T8692] RAX: ffffffffffffffda RBX: 00007f1ab24b26c0 RCX: 00007f1ab155cfce [ 321.138343][ T8692] RDX: 0000000000000050 RSI: 0000200000001080 RDI: 00000000000000c8 [ 321.138353][ T8692] RBP: 00007f1ab24b2090 R08: 0000000000000000 R09: 0000000000000000 [ 321.138363][ T8692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.138372][ T8692] R13: 00007f1ab1816038 R14: 00007f1ab1815fa0 R15: 00007ffcb4a07a18 [ 321.138397][ T8692] [ 321.622374][ T30] kauditd_printk_skb: 269 callbacks suppressed [ 321.622391][ T30] audit: type=1400 audit(1772183544.357:7297): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 321.708607][ T8683] netlink: 'syz.1.712': attribute type 3 has an invalid length. [ 321.806375][ T30] audit: type=1400 audit(1772183544.357:7298): avc: denied { read write open } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 321.896798][ T8696] afs: Bad value for 'source' [ 321.953970][ T30] audit: type=1400 audit(1772183544.357:7299): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.229871][ T30] audit: type=1400 audit(1772183544.423:7300): avc: denied { create } for pid=8676 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 322.489345][ T30] audit: type=1400 audit(1772183544.441:7301): avc: denied { read write } for pid=5802 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.617307][ T30] audit: type=1400 audit(1772183544.441:7302): avc: denied { read write open } for pid=5802 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.778700][ T30] audit: type=1400 audit(1772183544.441:7303): avc: denied { ioctl } for pid=5802 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.929622][ T30] audit: type=1400 audit(1772183544.451:7304): avc: denied { write } for pid=8676 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 323.037451][ T30] audit: type=1400 audit(1772183544.488:7305): avc: denied { ioctl } for pid=8676 comm="syz.1.712" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 323.154974][ T30] audit: type=1400 audit(1772183544.488:7306): avc: denied { ioctl } for pid=8676 comm="syz.1.712" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 323.324355][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'. [ 324.018739][ T8725] binder: 8721:8725 ioctl c0306201 0 returned -14 [ 324.074216][ T8727] netlink: 400 bytes leftover after parsing attributes in process `syz.1.723'. [ 324.150553][ T8729] binder: 8721:8729 ioctl c0306201 0 returned -14 [ 324.186126][ T8727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.219871][ T8727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.256375][ T8730] binder: 8721:8730 ioctl c0306201 0 returned -14 [ 324.356343][ T8731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.366883][ T8731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.132160][ T8741] 9p: Bad value for 'rfdno' [ 325.185009][ T8742] hfsplus: unable to find HFS+ superblock [ 325.497372][ T8740] af_packet: tpacket_rcv: packet too big, clamped from 126 to 4294967286. macoff=82 [ 325.631256][ T792] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 325.806614][ T792] usb 1-1: Using ep0 maxpacket: 8 [ 325.857845][ T8747] pimreg: entered allmulticast mode [ 325.868938][ T792] usb 1-1: config 0 has no interfaces? [ 325.937893][ T792] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 325.976784][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.015037][ T792] usb 1-1: Product: syz [ 326.026063][ T792] usb 1-1: Manufacturer: syz [ 326.046209][ T792] usb 1-1: SerialNumber: syz [ 326.098298][ T792] usb 1-1: config 0 descriptor?? [ 326.208237][ T8754] FAULT_INJECTION: forcing a failure. [ 326.208237][ T8754] name failslab, interval 1, probability 0, space 0, times 0 [ 326.220883][ T8754] CPU: 1 UID: 0 PID: 8754 Comm: syz.1.732 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.220900][ T8754] Tainted: [L]=SOFTLOCKUP [ 326.220904][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 326.220910][ T8754] Call Trace: [ 326.220914][ T8754] [ 326.220918][ T8754] dump_stack_lvl+0x100/0x190 [ 326.220941][ T8754] should_fail_ex.cold+0x5/0xa [ 326.220955][ T8754] ? tomoyo_encode2+0xfb/0x3c0 [ 326.220968][ T8754] should_failslab+0xc2/0x120 [ 326.220985][ T8754] __kmalloc_noprof+0xe0/0x850 [ 326.221003][ T8754] tomoyo_encode2+0xfb/0x3c0 [ 326.221018][ T8754] tomoyo_encode+0x29/0x50 [ 326.221030][ T8754] tomoyo_realpath_from_path+0x18c/0x690 [ 326.221047][ T8754] tomoyo_path_number_perm+0x23c/0x580 [ 326.221064][ T8754] ? tomoyo_path_number_perm+0x22e/0x580 [ 326.221088][ T8754] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 326.221124][ T8754] ? find_held_lock+0x2b/0x80 [ 326.221138][ T8754] ? __fget_files+0x215/0x3d0 [ 326.221152][ T8754] ? hook_file_ioctl_common+0x146/0x410 [ 326.221180][ T8754] ? __fget_files+0x21f/0x3d0 [ 326.221200][ T8754] security_file_ioctl+0xd3/0x230 [ 326.221213][ T8754] __x64_sys_ioctl+0xb7/0x210 [ 326.221230][ T8754] do_syscall_64+0x106/0xf80 [ 326.221241][ T8754] ? clear_bhb_loop+0x40/0x90 [ 326.221255][ T8754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.221266][ T8754] RIP: 0033:0x7f314359c799 [ 326.221276][ T8754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.221286][ T8754] RSP: 002b:00007f314438b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.221297][ T8754] RAX: ffffffffffffffda RBX: 00007f3143815fa0 RCX: 00007f314359c799 [ 326.221304][ T8754] RDX: 0000200000000700 RSI: 00000000c048aec8 RDI: 0000000000000005 [ 326.221310][ T8754] RBP: 00007f314438b090 R08: 0000000000000000 R09: 0000000000000000 [ 326.221316][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.221322][ T8754] R13: 00007f3143816038 R14: 00007f3143815fa0 R15: 00007ffe7e98b188 [ 326.221337][ T8754] [ 326.221349][ T8754] ERROR: Out of memory at tomoyo_realpath_from_path. [ 326.478032][ T792] usb 1-1: USB disconnect, device number 39 [ 326.805330][ T8758] [ 326.807677][ T8758] ====================================================== [ 326.814679][ T8758] WARNING: possible circular locking dependency detected [ 326.821681][ T8758] syzkaller #0 Tainted: G L [ 326.827642][ T8758] ------------------------------------------------------ [ 326.834644][ T8758] syz.3.731/8758 is trying to acquire lock: [ 326.840522][ T8758] ffffffff8e972d48 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xedc/0x1c50 [ 326.850088][ T8758] [ 326.850088][ T8758] but task is already holding lock: [ 326.857426][ T8758] ffff8880273f3990 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 326.868618][ T8758] [ 326.868618][ T8758] which lock already depends on the new lock. [ 326.868618][ T8758] [ 326.878987][ T8758] [ 326.878987][ T8758] the existing dependency chain (in reverse order) is: [ 326.887967][ T8758] [ 326.887967][ T8758] -> #2 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 326.896533][ T8758] blk_alloc_queue+0x610/0x790 [ 326.901794][ T8758] blk_mq_alloc_queue+0x174/0x290 [ 326.907309][ T8758] __blk_mq_alloc_disk+0x29/0x120 [ 326.912825][ T8758] loop_add+0x498/0xb60 [ 326.917477][ T8758] loop_init+0x1d3/0x200 [ 326.922219][ T8758] do_one_initcall+0x11d/0x760 [ 326.927484][ T8758] kernel_init_freeable+0x6e5/0x7a0 [ 326.933182][ T8758] kernel_init+0x1f/0x1e0 [ 326.938027][ T8758] ret_from_fork+0x754/0xd80 [ 326.943113][ T8758] ret_from_fork_asm+0x1a/0x30 [ 326.948375][ T8758] [ 326.948375][ T8758] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 326.955561][ T8758] fs_reclaim_acquire+0xc4/0x100 [ 326.960998][ T8758] prepare_alloc_pages+0x166/0x5f0 [ 326.966606][ T8758] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 326.973003][ T8758] __alloc_pages_noprof+0xb/0x1b0 [ 326.978542][ T8758] pcpu_populate_chunk+0x118/0x990 [ 326.984154][ T8758] pcpu_alloc_noprof+0x833/0x1c50 [ 326.989679][ T8758] xt_percpu_counter_alloc+0x13e/0x1b0 [ 326.995639][ T8758] find_check_entry.isra.0+0xbf/0x990 [ 327.001512][ T8758] translate_table+0xbcd/0x1630 [ 327.006862][ T8758] ipt_register_table+0x106/0x420 [ 327.012387][ T8758] iptable_raw_table_init+0x63/0x90 [ 327.018090][ T8758] xt_find_table_lock+0x2df/0x520 [ 327.023620][ T8758] xt_request_find_table_lock+0x28/0xf0 [ 327.029668][ T8758] get_info+0x1a7/0x790 [ 327.034324][ T8758] do_ipt_get_ctl+0x168/0xa80 [ 327.039503][ T8758] nf_getsockopt+0x7c/0xe0 [ 327.044425][ T8758] ip_getsockopt+0x192/0x1e0 [ 327.049520][ T8758] tcp_getsockopt+0xa1/0x110 [ 327.055047][ T8758] do_sock_getsockopt+0x259/0x3d0 [ 327.060572][ T8758] __sys_getsockopt+0x148/0x260 [ 327.065927][ T8758] __x64_sys_getsockopt+0xbd/0x160 [ 327.071543][ T8758] do_syscall_64+0x106/0xf80 [ 327.076631][ T8758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.083025][ T8758] [ 327.083025][ T8758] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 327.090730][ T8758] __lock_acquire+0x14b8/0x2630 [ 327.096085][ T8758] lock_acquire+0x1cf/0x380 [ 327.101106][ T8758] __mutex_lock+0x1a2/0x1b90 [ 327.106195][ T8758] pcpu_alloc_noprof+0xedc/0x1c50 [ 327.111724][ T8758] __percpu_counter_init_many+0x42/0x3b0 [ 327.117856][ T8758] blkg_rwstat_init+0x2c/0xd0 [ 327.123028][ T8758] throtl_pd_alloc+0xf1/0xa50 [ 327.128200][ T8758] blkcg_activate_policy+0x7bb/0xe60 [ 327.134017][ T8758] blk_throtl_init+0x39a/0x5b0 [ 327.139276][ T8758] tg_set_conf.isra.0+0x3c3/0x4b0 [ 327.144799][ T8758] cgroup_file_write+0x1e9/0x790 [ 327.150241][ T8758] kernfs_fop_write_iter+0x3e0/0x5f0 [ 327.156027][ T8758] vfs_write+0x6ac/0x1070 [ 327.160859][ T8758] ksys_write+0x12a/0x250 [ 327.165692][ T8758] do_syscall_64+0x106/0xf80 [ 327.170777][ T8758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.177166][ T8758] [ 327.177166][ T8758] other info that might help us debug this: [ 327.177166][ T8758] [ 327.187366][ T8758] Chain exists of: [ 327.187366][ T8758] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#17 [ 327.187366][ T8758] [ 327.200987][ T8758] Possible unsafe locking scenario: [ 327.200987][ T8758] [ 327.208409][ T8758] CPU0 CPU1 [ 327.213749][ T8758] ---- ---- [ 327.219089][ T8758] lock(&q->q_usage_counter(io)#17); [ 327.224442][ T8758] lock(fs_reclaim); [ 327.230916][ T8758] lock(&q->q_usage_counter(io)#17); [ 327.238786][ T8758] lock(pcpu_alloc_mutex); [ 327.243263][ T8758] [ 327.243263][ T8758] *** DEADLOCK *** [ 327.243263][ T8758] [ 327.251379][ T8758] 7 locks held by syz.3.731/8758: [ 327.256373][ T8758] #0: ffff88807cda6d38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 327.265399][ T8758] #1: ffff888054eb2420 (sb_writers#11){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 327.274434][ T8758] #2: ffff8880338a3088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 327.284151][ T8758] #3: ffff88805a9985a8 (kn->active#69){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 327.294130][ T8758] #4: ffff8880273f3b98 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x2a7/0x410 [ 327.304202][ T8758] #5: ffff8880273f3990 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 327.315839][ T8758] #6: ffff8880273f39c8 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 327.327472][ T8758] [ 327.327472][ T8758] stack backtrace: [ 327.333337][ T8758] CPU: 1 UID: 0 PID: 8758 Comm: syz.3.731 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.333357][ T8758] Tainted: [L]=SOFTLOCKUP [ 327.333361][ T8758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.333370][ T8758] Call Trace: [ 327.333382][ T8758] [ 327.333388][ T8758] dump_stack_lvl+0x100/0x190 [ 327.333409][ T8758] print_circular_bug.cold+0x178/0x1c7 [ 327.333435][ T8758] check_noncircular+0x146/0x160 [ 327.333458][ T8758] __lock_acquire+0x14b8/0x2630 [ 327.333481][ T8758] lock_acquire+0x1cf/0x380 [ 327.333501][ T8758] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 327.333520][ T8758] ? __pfx___might_resched+0x10/0x10 [ 327.333536][ T8758] __mutex_lock+0x1a2/0x1b90 [ 327.333551][ T8758] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 327.333567][ T8758] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 327.333588][ T8758] ? stack_depot_save_flags+0x479/0x9d0 [ 327.333609][ T8758] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 327.333627][ T8758] ? __pfx___mutex_lock+0x10/0x10 [ 327.333640][ T8758] ? __kasan_kmalloc+0xaa/0xb0 [ 327.333657][ T8758] ? throtl_pd_alloc+0xcf/0xa50 [ 327.333670][ T8758] ? blkcg_activate_policy+0x7bb/0xe60 [ 327.333690][ T8758] ? blk_throtl_init+0x39a/0x5b0 [ 327.333702][ T8758] ? tg_set_conf.isra.0+0x3c3/0x4b0 [ 327.333717][ T8758] ? cgroup_file_write+0x1e9/0x790 [ 327.333737][ T8758] ? kernfs_fop_write_iter+0x3e0/0x5f0 [ 327.333751][ T8758] ? do_syscall_64+0x106/0xf80 [ 327.333763][ T8758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.333780][ T8758] ? pcpu_alloc_noprof+0xedc/0x1c50 [ 327.333797][ T8758] pcpu_alloc_noprof+0xedc/0x1c50 [ 327.333818][ T8758] __percpu_counter_init_many+0x42/0x3b0 [ 327.333837][ T8758] blkg_rwstat_init+0x2c/0xd0 [ 327.333850][ T8758] throtl_pd_alloc+0xf1/0xa50 [ 327.333862][ T8758] ? __pfx_throtl_pd_alloc+0x10/0x10 [ 327.333874][ T8758] blkcg_activate_policy+0x7bb/0xe60 [ 327.333898][ T8758] blk_throtl_init+0x39a/0x5b0 [ 327.333912][ T8758] tg_set_conf.isra.0+0x3c3/0x4b0 [ 327.333928][ T8758] ? __pfx_tg_set_conf.isra.0+0x10/0x10 [ 327.333945][ T8758] ? kernfs_root+0xf8/0x2a0 [ 327.333965][ T8758] cgroup_file_write+0x1e9/0x790 [ 327.333985][ T8758] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 327.334001][ T8758] ? __pfx_cgroup_file_write+0x10/0x10 [ 327.334023][ T8758] kernfs_fop_write_iter+0x3e0/0x5f0 [ 327.334037][ T8758] ? __pfx_cgroup_file_write+0x10/0x10 [ 327.334059][ T8758] vfs_write+0x6ac/0x1070 [ 327.334077][ T8758] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 327.334093][ T8758] ? __pfx_vfs_write+0x10/0x10 [ 327.334116][ T8758] ksys_write+0x12a/0x250 [ 327.334134][ T8758] ? __pfx_ksys_write+0x10/0x10 [ 327.334155][ T8758] do_syscall_64+0x106/0xf80 [ 327.334168][ T8758] ? clear_bhb_loop+0x40/0x90 [ 327.334183][ T8758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.334196][ T8758] RIP: 0033:0x7ff37839c799 [ 327.334208][ T8758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.334221][ T8758] RSP: 002b:00007ff379220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 327.334234][ T8758] RAX: ffffffffffffffda RBX: 00007ff378616090 RCX: 00007ff37839c799 [ 327.334243][ T8758] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000009 [ 327.334251][ T8758] RBP: 00007ff379220090 R08: 0000000000000000 R09: 0000000000000000 [ 327.334259][ T8758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.334267][ T8758] R13: 00007ff378616128 R14: 00007ff378616090 R15: 00007ffe1d0cef78 [ 327.334280][ T8758] [ 327.709104][ T30] kauditd_printk_skb: 317 callbacks suppressed [ 327.709118][ T30] audit: type=1400 audit(1772183550.063:7612): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 327.830177][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.919249][ T30] audit: type=1400 audit(1772183550.063:7613): avc: denied { read write open } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 328.081682][ T30] audit: type=1400 audit(1772183550.063:7614): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 328.539640][ T30] audit: type=1400 audit(1772183550.213:7615): avc: denied { read write } for pid=5802 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 328.646016][ T30] audit: type=1400 audit(1772183550.213:7616): avc: denied { read write open } for pid=5802 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 328.702901][ T30] audit: type=1400 audit(1772183550.213:7617): avc: denied { ioctl } for pid=5802 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 328.744895][ T30] audit: type=1400 audit(1772183550.241:7618): avc: denied { prog_load } for pid=8760 comm="syz.1.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 328.804196][ T30] audit: type=1400 audit(1772183550.241:7619): avc: denied { bpf } for pid=8760 comm="syz.1.733" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 328.861391][ T30] audit: type=1400 audit(1772183550.241:7620): avc: denied { perfmon } for pid=8760 comm="syz.1.733" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 328.910757][ T30] audit: type=1400 audit(1772183550.241:7621): avc: denied { module_request } for pid=8755 comm="syz.3.731" kmod="crypto-gcm(anubis)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1