last executing test programs: 15.816964893s ago: executing program 1 (id=476): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x1000000) 15.638762738s ago: executing program 1 (id=477): ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000280)={{0xdddd1000, 0x9000, 0xb, 0x2, 0xf7, 0x4, 0x8, 0x4, 0xa, 0x1, 0x1, 0x5}, {0x8000000, 0xa000, 0xa, 0xf, 0x6, 0x81, 0x0, 0x80, 0xb, 0x6, 0x10, 0x2}, {0x1, 0x100000, 0x4, 0x2, 0x47, 0x5, 0xb, 0xf, 0x5, 0x4, 0x25, 0x8}, {0xe000, 0x9000, 0xb, 0x58, 0x0, 0x9, 0x6, 0x6, 0x9, 0xf7, 0x3, 0x10}, {0x50000, 0x4, 0x0, 0xc2, 0x3, 0xfa, 0x4, 0x6, 0xf, 0x0, 0x0, 0x2b}, {0x7000, 0x3332f000, 0xd, 0x3, 0x0, 0x2, 0x7, 0x5, 0x9, 0x5, 0x5, 0xda}, {0xa000, 0x58000, 0xc, 0x5, 0x8, 0x9, 0x7, 0xf, 0x2, 0x0, 0x4, 0x3}, {0x200000, 0x25000, 0xf, 0x1, 0x80, 0x4, 0x4, 0x57, 0x5, 0x8, 0x5, 0xd}, {}, {0xf000, 0x101}, 0x40000001, 0x0, 0x3000, 0x400041, 0x0, 0x0, 0xb000, 0x0, [0x9, 0x6, 0x6, 0xee38]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0xc, 0x43, 0x558}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0", 0x8a}, {0x0}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3bba896dc1a01fcc30adb201f2ee3a5c8676d6b812ec2342bd0723b7db488a027513df1870c31ffba527c5dfb132cb48cbc2e0f", 0x6a}, {0x0}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c", 0x18}], 0x4}}], 0x2, 0x810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20004040) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = syz_open_dev$vcsa(&(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000600)={0x1}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 14.569486468s ago: executing program 1 (id=481): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) unshare(0x22020600) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003a00290200000000000000000a"], 0x18}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x3) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 7.109467422s ago: executing program 4 (id=507): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x1002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) socket(0x10, 0x3, 0x0) userfaultfd(0x80800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 6.200854921s ago: executing program 2 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtaction={0xed0, 0x30, 0xb, 0x0, 0x0, {}, [{0xebc, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe70, 0x1c, 0x0, 0x0, {{0xa}, {0xe44, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1, [{0x597, 0x0, 0x1, 0x1c, 0x3fc, 0x1}]}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x8}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x100001, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x100005, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x404, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x380, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0x7, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x8, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xed0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020034cc04000000080000001100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) iopl(0x3) r3 = syz_open_dev$audion(0x0, 0x589, 0x100) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x3c) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000340)=0xfffffffffffff697, 0x6}], 0x1, 0x0, 0x0, 0x1) openat$comedi(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="40980700080211000000ffffffffffffd0291dc581e9980002008d0001002d1a02000a0500000000000000f10009001a000000010002000000027206030303030303dd46d11954aea0b8bc708b033f4cfe1b613b6f2e8748ba5b3d7450bf3e514ff28cadff31894d33a26f0c4ff9fec31121a263d0981db612f6db6a8529f7b06279a61ada61ce54e3a9c5dd0a3c8295fec149cec496f33abac8f752c7df0aca"], 0x96) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) 6.105614532s ago: executing program 4 (id=509): modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x4441, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000160500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 4.873261447s ago: executing program 1 (id=511): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x3, 0x8, 0x3, 0xfffffffffffffff7, 0x4, r0}) setrlimit(0x9, &(0x7f0000000380)) io_setup(0x2004, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r5, 0x540b, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) 4.749563612s ago: executing program 2 (id=512): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220500"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="201805000000a3a36e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.580796756s ago: executing program 1 (id=514): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES8], 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0xc001) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, &(0x7f0000000740), 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xfffb) semctl$SETALL(0x0, 0x0, 0x9, 0x0) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x101, 0x3) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) close_range(r4, 0xffffffffffffffff, 0x0) 3.553160442s ago: executing program 4 (id=515): syz_io_uring_complete(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x348cf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000bc0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) umount2(&(0x7f0000000000)='./file0\x00', 0x1) 3.397386905s ago: executing program 0 (id=516): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000ec0), r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRESDEC=r0, @ANYRES16=r1, @ANYBLOB="46e5d733c01b82f1f4fed14bf7ec9cdd2ef37ef1a50df3f30563f619475aac479b150a6347482ff03320c33173c5ebef9157b42d814617fbf5c6ae27e19f524c6c24a3963760baea61998adb0f4c1d1ce29dcebb237509f144283377296e2a252918918d4e00a713981e1af915f742a86bba6dfe6757f33ab063cbb03b4b508aba36f1dc5fd4f8330d4533bbe3a4b393ec54edcee90ac81f6763ec53cd2c"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000e40)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000e80)='./bus\x00', &(0x7f0000000000), 0x4, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}, {@verity_require}]}) write$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1, @read_auth_payload_to={{0xc7b, 0x2}, {0xc8}}}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000008af4d3f7e1093d1eea00ff"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x0, 0x2, 0x8) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) 3.220882717s ago: executing program 3 (id=517): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x181000, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, 0x0, 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) 3.13351712s ago: executing program 1 (id=518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}}, 0x44040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, 0x0) acct(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 2.989033344s ago: executing program 3 (id=519): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8f9, 0x9f94, &(0x7f00000007c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x1000000}]}, 0x10) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) rt_sigpending(0x0, 0x0) ioctl$TCSETS(r2, 0x89f2, &(0x7f00000000c0)={0x7, 0x2, 0x0, 0x7f, 0x8b, "5dee00000059400000000000000100"}) 2.709635753s ago: executing program 3 (id=520): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a310000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0xdd5d1edde8f904fb) r6 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r6, 0x0) pread64(r6, &(0x7f00000000c0)=""/209, 0xd1, 0x578c) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockname$packet(r7, 0x0, &(0x7f0000014580)) 2.10146367s ago: executing program 0 (id=521): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x22080) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/4) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x49}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000100)={{0x3, 0x0, 0x80, {0xeeee0000, 0xf000, 0x1}}, "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", "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"}) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000002180), 0x88002, 0x0) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) ppoll(&(0x7f0000002200)=[{0xffffffffffffffff, 0x82}, {r3, 0x4008}, {r2, 0x4050}, {r4, 0x2}, {r1, 0x8}, {r2, 0xd}], 0x6, &(0x7f0000002240)={0x77359400}, &(0x7f0000002280)={[0x6]}, 0x8) 1.979363306s ago: executing program 2 (id=522): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x13}}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x7d}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.803947579s ago: executing program 2 (id=523): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtaction={0xed0, 0x30, 0xb, 0x0, 0x0, {}, [{0xebc, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe70, 0x1c, 0x0, 0x0, {{0xa}, {0xe44, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1, [{0x597, 0x0, 0x1, 0x1c, 0x3fc, 0x1}]}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x8}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x100001, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x100005, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x404, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x380, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0x7, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x8, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xed0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020034cc04000000080000001100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) iopl(0x3) r3 = syz_open_dev$audion(0x0, 0x589, 0x100) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x3c) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000340)=0xfffffffffffff697, 0x6}], 0x1, 0x0, 0x0, 0x1) openat$comedi(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="40980700080211000000ffffffffffffd0291dc581e9980002008d0001002d1a02000a0500000000000000f10009001a000000010002000000027206030303030303dd46d11954aea0b8bc708b033f4cfe1b613b6f2e8748ba5b3d7450bf3e514ff28cadff31894d33a26f0c4ff9fec31121a263d0981db612f6db6a8529f7b06279a61ada61ce54e3a9c5dd0a3c8295fec149cec496f33abac8f752c7df0aca"], 0x96) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) 1.687536153s ago: executing program 3 (id=524): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x3, 0x8, 0x3, 0xfffffffffffffff7, 0x4, r0}) setrlimit(0x9, &(0x7f0000000380)) io_setup(0x2004, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r5, 0x540b, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) 1.683254637s ago: executing program 4 (id=525): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040080) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x10, 0x7f, 0x20000a2e, 0x0, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) (fail_nth: 3) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x9}, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) migrate_pages(0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) writev(r3, 0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r4, 0x40285107) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 621.143363ms ago: executing program 4 (id=526): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0100005b2e7d71a0b9c19ae1f76388e14782540ddb7fae48b4e3eb70d5fa6a5ec0f645223c47bd74d8efc6c3724670aad68703fc80302d69f0da41d5778b24e27fdbb8505c849c2eaf95a8257f9601bb1f792ff41f23e20fec5da81975d66646ebbc3022960aaeadaf09a1067c4189eb5c52b808b669d3ffc413dca97bfc90bebb911d4932d270e9974b043e0862abee3aa7dd8a7bef04e3c26f8b58d2d8dcd08b90dabb8bd02c4cc11f1ba638a62443b9057365a31d9e0cbcbe4221986d5fd7da1885174e3a4ad5b18b4501142e52b82b40209ffbc27f3e", @ANYRES16=r5, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200003, 0x40200003, 0x0, 0x6, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) 602.406363ms ago: executing program 0 (id=527): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x80) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x168, 0x9, 0x168, 0xb, 0x268, 0x250, 0x250, 0x268, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x120, 0x168, 0x0, {0x0, 0x28e}, [@common=@hbh={{0x48}, {0x80c, 0x3, 0xaac5260750e57b83, [0xc, 0x5, 0xe27, 0x9, 0x3, 0x3a3, 0xffff, 0xcd3, 0x6, 0x1, 0x8, 0xd0, 0x0, 0x800, 0x0, 0x3]}}, @common=@inet=@ipcomp={{0x30}, {[0x0, 0x4d2]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) close(r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070000000000fedb492f02000200000008000300ac1414aa"], 0x28}}, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x18003) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 430.657844ms ago: executing program 0 (id=528): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f0000000000), &(0x7f00000000c0)) 375.568805ms ago: executing program 3 (id=529): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x181000, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, 0x0, 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) 220.805787ms ago: executing program 0 (id=530): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000703000/0x2000)=nil, 0x2000, 0xb635773f06ebbee4, 0x1010, 0xffffffffffffffff, 0xbca16000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000300)=""/232, 0xe8}, {&(0x7f0000004780)=""/172, 0xac}, {&(0x7f00000016c0)=""/4083, 0xff3}, {&(0x7f00000004c0)=""/45, 0x2d}, {&(0x7f0000000500)=""/139, 0x8b}, {&(0x7f00000005c0)=""/30, 0x1e}], 0x6, &(0x7f0000002740)=""/153, 0x99}, 0x1}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000002800)=""/79, 0x4f}, {&(0x7f0000002880)=""/224, 0xe0}, {&(0x7f0000002980)=""/166, 0xa6}, {&(0x7f0000002a40)=""/249, 0xf9}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/226, 0xe2}, {&(0x7f0000003c40)=""/155, 0x9b}, {&(0x7f0000000640)=""/1, 0x1}], 0x8, &(0x7f0000003d80)=""/221, 0xdd}, 0x7}, {{&(0x7f0000003e80)=@can, 0x80, &(0x7f0000004100)=[{&(0x7f0000003f00)=""/141, 0x8d}, {&(0x7f0000003fc0)=""/132, 0x84}, {&(0x7f0000004080)=""/97, 0x61}], 0x3, &(0x7f0000004140)=""/213, 0xd5}, 0x10000005}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000004240)=""/35, 0x23}, {&(0x7f0000004280)=""/235, 0xeb}, {&(0x7f0000004380)=""/51, 0x33}, {&(0x7f00000043c0)=""/129, 0x81}, {&(0x7f0000004480)=""/20, 0x14}, {&(0x7f00000044c0)=""/42, 0x2a}], 0x6, &(0x7f0000004580)=""/201, 0xc9}, 0x24000}], 0x4, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r4, 0xdffaa000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r5, &(0x7f0000000280)=[{&(0x7f0000004980)=""/4089, 0xff9}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/10, 0x63}], 0x3) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c) 178.055502ms ago: executing program 2 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x100010, r1, 0x9a4c3000) (async) r2 = socket$inet6(0xa, 0x5, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e21, 0x100000, @mcast2, 0x5}, 0xd695) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8000000000000001}, {0x0, 0x4, 0x37, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x5}, {{@in=@private=0xa010100, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x1}}, 0xe8) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1c, 0x16, &(0x7f0000000240)=ANY=[@ANYRES8], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0xa}, 0x94) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="02060200020000000200000000"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) (async) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="100000000614010025bd7000fcdbdf25e451f8862cbbb0d3dc96ba3b2bc4620aacce848ea8489dff304e287eda8ffa4d0f8fdac4e6707834fa05aef41f3a90a9c96bf6650e23eeb894737e9ef55d2e088723d551b74245b909996d745ef447e027366c326e7f09a0be1704ac18ddd333054cef07cfabb377f0a7ddc14089ea6014fa2deac7650287d59ef35a3bab9bfe460aa8bc71229c4b595feec3dee042a3eee0bcddaa60bc8f6f748d1043b759452b5ad44b72de105cc5ad0675253a2431a741e15fdd6d0212f7039a649767f623d5746287a1408e5fa163"], 0x10}, 0x1, 0x0, 0x0, 0x2000a050}, 0x20040804) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 148.352374ms ago: executing program 4 (id=532): rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x4441, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000160500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1, 0x3) 132.475102ms ago: executing program 3 (id=533): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220500"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="201805000000a3a36e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 41.513989ms ago: executing program 0 (id=534): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) (async) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0x8, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) (async) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) (async) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46"], 0x64) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x78, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x59, 0x6, "d9904b097fe13096bfb761c2e0dfa46dbf433756ee62a1056bb6095b37871c96033afbc4779037da584d1d92afeca49d359738bf3a5ecb0c95251f6ba070234307427fa1748b7c6b3a277a55b703ddddb941da7644"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x40044) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 2 (id=535): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a0101000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7000000fdffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000000000001d4002000000000065040000000000000f030000000000001d440000000000007a0a00fe000000000f00000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64360f56e24e6d2105bd901128c7e0ec82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f1b3fa4526650ea6cef13d000000225d85ae49cee383f936ad657b303ab841dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c1070bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c22ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fd03000000022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000004000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99705cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0706a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922923806ca84d69ea370db27a5ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c829aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f4441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbf34c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d9436220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd9000000000000f05fe239d3d6dafc367f12689b6700000000bd4990d9dc174a69aadffdea5445fd3c13350af85d308caee689736c06417b52541eb5871d820b850dcb00877bbe2ed19d911564f11adeb52ec3047cfdcac8a8bab6ee365941cf792155f589226758e9c8bec8289b3012ca74bfe210e0315b384ce982e16f93f3e0b1385cfaab63bd36b141dfbc7f96ee549b8b52c311e5c657943f2a5d177f03e10b3595ed13458472a2eab1ea987a0668e52fff5c716fb5950852186649ce7362b45225f050c1c37327b6833025cc1dff2d57df674be03bab30901188386d248370"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0xdd5d1edde8f904fb) r6 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r6, 0x0) pread64(r6, &(0x7f00000000c0)=""/209, 0xd1, 0x578c) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockname$packet(r7, 0x0, &(0x7f0000014580)) kernel console output (not intermixed with test programs): 1][ T6965] bpf_test_init.isra.0+0x88/0x130 [ 142.621247][ T6965] bpf_prog_test_run_xdp+0x66c/0x1660 [ 142.621264][ T6965] ? __fget_files+0x204/0x3c0 [ 142.621287][ T6965] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 142.621311][ T6965] ? __might_fault+0x50/0x190 [ 142.621332][ T6965] ? fput+0x70/0xf0 [ 142.621353][ T6965] ? __bpf_prog_get+0x97/0x2a0 [ 142.621365][ T6965] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 142.621380][ T6965] __sys_bpf+0x1035/0x4980 [ 142.621398][ T6965] ? __pfx___sys_bpf+0x10/0x10 [ 142.621413][ T6965] ? find_held_lock+0x2b/0x80 [ 142.621432][ T6965] ? find_held_lock+0x2b/0x80 [ 142.621451][ T6965] ? __mutex_unlock_slowpath+0x161/0x790 [ 142.621476][ T6965] ? fput+0x70/0xf0 [ 142.621498][ T6965] ? ksys_write+0x1ac/0x250 [ 142.621511][ T6965] ? __pfx_ksys_write+0x10/0x10 [ 142.621526][ T6965] __x64_sys_bpf+0x78/0xc0 [ 142.621542][ T6965] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.621558][ T6965] do_syscall_64+0xcd/0xf80 [ 142.621575][ T6965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.621588][ T6965] RIP: 0033:0x7fbced98f749 [ 142.621597][ T6965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.621608][ T6965] RSP: 002b:00007fbcebbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.621618][ T6965] RAX: ffffffffffffffda RBX: 00007fbcedbe5fa0 RCX: 00007fbced98f749 [ 142.621626][ T6965] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 142.621632][ T6965] RBP: 00007fbcebbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.621639][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.621644][ T6965] R13: 00007fbcedbe6038 R14: 00007fbcedbe5fa0 R15: 00007ffd79f4f578 [ 142.621658][ T6965] [ 142.674347][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 142.788958][ T6091] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 142.907492][ T6538] usb 3-1: USB disconnect, device number 9 [ 142.922262][ T6091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.958215][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 142.960891][ T6091] usb 5-1: Product: syz [ 142.992508][ T6091] usb 5-1: Manufacturer: syz [ 142.994495][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 142.997373][ T6091] usb 5-1: SerialNumber: syz [ 143.019126][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 143.032041][ T6091] usb 5-1: config 0 descriptor?? [ 143.165010][ T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 143.175659][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.183712][ T9] usb 2-1: Product: syz [ 143.199740][ T9] usb 2-1: Manufacturer: syz [ 143.216669][ T9] usb 2-1: SerialNumber: syz [ 143.260870][ T9] usb 2-1: config 0 descriptor?? [ 143.717363][ T6961] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 143.766745][ T6961] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 143.935574][ T9] usb 2-1: ucan: probing device on interface #0 [ 143.968547][ T6091] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 144.044063][ T6981] audit_log_lost: 2 callbacks suppressed [ 144.044080][ T6981] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 144.094709][ T6981] audit: out of memory in audit_log_start [ 144.227997][ T30] audit: type=1400 audit(1765124219.487:573): avc: denied { read write } for pid=6985 comm="syz.2.252" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 144.263094][ T30] audit: type=1400 audit(1765124219.487:574): avc: denied { open } for pid=6985 comm="syz.2.252" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 144.293881][ T9] usb 2-1: ucan: device reported invalid device info [ 144.319796][ T9] usb 2-1: ucan: probe failed; try to update the device firmware [ 144.338147][ T30] audit: type=1400 audit(1765124219.517:575): avc: denied { ioctl } for pid=6985 comm="syz.2.252" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 144.559232][ T30] audit: type=1400 audit(1765124219.517:576): avc: denied { create } for pid=6988 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.601805][ T30] audit: type=1400 audit(1765124219.727:577): avc: denied { write } for pid=6988 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.035983][ T30] audit: type=1400 audit(1765124220.297:578): avc: denied { create } for pid=6958 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.037314][ T6959] netlink: 56 bytes leftover after parsing attributes in process `syz.4.241'. [ 145.137615][ T30] audit: type=1400 audit(1765124220.297:579): avc: denied { write } for pid=6958 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.179183][ T30] audit: type=1400 audit(1765124220.297:580): avc: denied { nlmsg_write } for pid=6958 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.268417][ T6091] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 145.284843][ T6091] usb 5-1: USB disconnect, device number 15 [ 145.414236][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 145.584399][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 145.592081][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 145.594962][ T6091] usb 2-1: USB disconnect, device number 7 [ 145.608824][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.630367][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.653349][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.682867][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.708943][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.723074][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.774265][ T6538] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 145.954124][ T9] usb 4-1: usb_control_msg returned -32 [ 145.996736][ T9] usbtmc 4-1:16.0: can't read capabilities [ 146.641877][ T6538] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 146.659268][ T6538] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 146.683871][ T6538] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 146.704274][ T6538] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.592184][ T6538] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 147.603095][ T6538] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.628246][ T7012] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 147.637319][ T7024] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 147.700469][ T6538] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.710150][ T6538] usb 1-1: invalid MIDI out EP 0 [ 147.716901][ T7031] loop2: detected capacity change from 0 to 7 [ 147.772301][ T7031] Dev loop2: unable to read RDB block 7 [ 147.789565][ T6538] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 147.803912][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.819593][ T7031] loop2: unable to read partition table [ 147.869645][ T7031] loop2: partition table beyond EOD, truncated [ 147.885332][ T7031] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 147.922583][ T9] usb 4-1: USB disconnect, device number 11 [ 147.950658][ T6538] usb 1-1: USB disconnect, device number 13 [ 148.178471][ T7045] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 148.257819][ T5886] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 148.764242][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 148.781168][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.806157][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.825403][ T5886] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 148.871620][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.891128][ T5886] usb 5-1: config 0 descriptor?? [ 150.704914][ T7076] syzkaller0: entered promiscuous mode [ 150.710475][ T7076] syzkaller0: entered allmulticast mode [ 150.871439][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 150.871459][ T30] audit: type=1400 audit(1765124226.117:602): avc: denied { read write } for pid=7063 comm="syz.2.272" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 150.913652][ T30] audit: type=1400 audit(1765124226.117:603): avc: denied { open } for pid=7063 comm="syz.2.272" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 150.942251][ T30] audit: type=1400 audit(1765124226.197:604): avc: denied { ioctl } for pid=7063 comm="syz.2.272" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x4b35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.576203][ T5886] usbhid 5-1:0.0: can't add hid device: -71 [ 151.582221][ T5886] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 151.590236][ T7083] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 151.612561][ T30] audit: type=1400 audit(1765124226.287:605): avc: denied { ioctl } for pid=7068 comm="syz.0.274" path="socket:[15513]" dev="sockfs" ino=15513 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.640316][ T30] audit: type=1400 audit(1765124226.587:606): avc: denied { setopt } for pid=7068 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.661398][ T30] audit: type=1400 audit(1765124226.857:607): avc: denied { block_suspend } for pid=7070 comm="syz.1.273" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 151.707855][ T5886] usb 5-1: USB disconnect, device number 16 [ 151.795296][ T30] audit: type=1400 audit(1765124227.057:608): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 152.134930][ T89] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 152.304258][ T89] usb 4-1: Using ep0 maxpacket: 16 [ 152.313556][ T89] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.325234][ T89] usb 4-1: config 0 interface 0 has no altsetting 0 [ 152.331886][ T89] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 152.341196][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.437178][ T5886] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 152.863407][ T89] usb 4-1: config 0 descriptor?? [ 152.894249][ T5886] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 152.894273][ T6538] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 152.907562][ T5886] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 152.936731][ T5886] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 152.948248][ T30] audit: type=1400 audit(1765124228.207:609): avc: denied { sys_module } for pid=7097 comm="syz.0.281" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 152.976998][ T5886] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.024266][ T5886] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 153.033335][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.211675][ T7095] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 153.225830][ T6538] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 153.246798][ T6538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.260107][ T5886] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 153.271689][ T5886] usb 2-1: invalid MIDI out EP 0 [ 153.277543][ T6538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.323356][ T6538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.352102][ T6538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.365577][ T6538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.382164][ T5886] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 153.386420][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.410909][ T6538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.471072][ T89] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 153.486305][ T6538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.503530][ T6538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.537274][ T30] audit: type=1400 audit(1765124228.797:610): avc: denied { write } for pid=7107 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 153.556483][ T6538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.572790][ T9] usb 2-1: USB disconnect, device number 8 [ 153.603154][ T6538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.630610][ T6538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.646346][ T6538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.661717][ T6538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.685275][ T6538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.696889][ T6538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.717041][ T6538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.739051][ T6538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.750968][ T6538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.780566][ T6538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.796626][ T6538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.859439][ T30] audit: type=1400 audit(1765124229.117:611): avc: denied { create } for pid=7110 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 153.894592][ T6538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.942048][ T5980] usb 4-1: USB disconnect, device number 12 [ 153.958669][ T6538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.973114][ T6538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 154.016151][ T6538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 154.295780][ T6538] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 154.314205][ T6538] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 154.338816][ T6538] usb 5-1: Product: syz [ 154.355144][ T6538] usb 5-1: Manufacturer: syz [ 154.380210][ T6538] usb 5-1: SerialNumber: syz [ 154.395711][ T6538] usb 5-1: config 0 descriptor?? [ 154.559187][ T6538] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 154.874734][ T6538] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 154.984628][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 155.052071][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 155.057367][ T5886] usb 5-1: USB disconnect, device number 17 [ 155.166806][ T5886] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 155.176492][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 155.217001][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 155.778148][ T9] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 155.787434][ T9] usb 4-1: Product: syz [ 155.791623][ T9] usb 4-1: Manufacturer: syz [ 155.796700][ T9] usb 4-1: SerialNumber: syz [ 155.803512][ T9] usb 4-1: config 0 descriptor?? [ 155.817474][ T6538] usb 2-1: not running at top speed; connect to a high speed hub [ 155.830648][ T6538] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 155.854269][ T6538] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 155.867362][ T6538] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 155.877424][ T6538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.890898][ T6538] usb 2-1: Product: syz [ 155.898123][ T6538] usb 2-1: Manufacturer: syz [ 155.902831][ T6538] usb 2-1: SerialNumber: syz [ 155.915703][ T7116] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.926206][ T7116] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.940142][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 155.940157][ T30] audit: type=1400 audit(1765124231.197:618): avc: denied { ioctl } for pid=7128 comm="syz.2.289" path="socket:[14530]" dev="sockfs" ino=14530 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.027256][ T5886] usb 4-1: USB disconnect, device number 13 [ 156.078353][ T7133] xt_hashlimit: size too large, truncated to 1048576 [ 156.421856][ T30] audit: type=1400 audit(1765124231.327:619): avc: denied { read } for pid=7132 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.521831][ T6538] usbhid 2-1:1.0: can't add hid device: -71 [ 156.528323][ T6538] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 156.543659][ T30] audit: type=1400 audit(1765124231.677:620): avc: denied { ioctl } for pid=7115 comm="syz.1.285" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 156.547211][ T6538] usb 2-1: USB disconnect, device number 9 [ 156.905567][ T7051] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 157.123131][ T30] audit: type=1400 audit(1765124232.377:621): avc: denied { read write } for pid=7148 comm="syz.4.296" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.160912][ T30] audit: type=1400 audit(1765124232.377:622): avc: denied { open } for pid=7148 comm="syz.4.296" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.195893][ T7051] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 157.211474][ T7051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.225374][ T30] audit: type=1400 audit(1765124232.377:623): avc: denied { ioctl } for pid=7148 comm="syz.4.296" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.264987][ T7051] usb 3-1: Product: syz [ 157.279320][ T7051] usb 3-1: Manufacturer: syz [ 157.302407][ T7051] usb 3-1: SerialNumber: syz [ 157.317926][ T7051] usb 3-1: config 0 descriptor?? [ 157.323923][ T30] audit: type=1400 audit(1765124232.467:624): avc: denied { allowed } for pid=7148 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 157.335389][ T7152] netlink: 80 bytes leftover after parsing attributes in process `syz.4.296'. [ 157.364946][ T30] audit: type=1400 audit(1765124232.467:625): avc: denied { create } for pid=7148 comm="syz.4.296" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 157.433197][ T30] audit: type=1400 audit(1765124232.467:626): avc: denied { map } for pid=7148 comm="syz.4.296" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 157.562970][ T7051] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 157.651647][ T6538] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 157.669539][ T30] audit: type=1400 audit(1765124232.467:627): avc: denied { read write } for pid=7148 comm="syz.4.296" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 157.806829][ T7162] o2cb: This node has not been configured. [ 157.812788][ T7162] o2cb: Cluster check failed. Fix errors before retrying. [ 157.820023][ T7162] (syz.0.297,7162,0):user_dlm_register:674 ERROR: status = -22 [ 157.827618][ T7162] (syz.0.297,7162,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 157.851997][ T6538] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 157.892538][ T6538] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 157.919499][ T6538] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 157.956333][ T6538] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.969557][ T6538] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.978858][ T6538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.007156][ T7147] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 158.031243][ T6538] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.051811][ T6538] usb 4-1: invalid MIDI out EP 0 [ 158.140825][ T6538] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 158.141301][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.239240][ T1204] usb 4-1: USB disconnect, device number 14 [ 158.444699][ T7167] ======================================================= [ 158.444699][ T7167] WARNING: The mand mount option has been deprecated and [ 158.444699][ T7167] and is ignored by this kernel. Remove the mand [ 158.444699][ T7167] option from the mount to silence this warning. [ 158.444699][ T7167] ======================================================= [ 158.923589][ T7179] xt_hashlimit: size too large, truncated to 1048576 [ 158.995346][ T7183] FAULT_INJECTION: forcing a failure. [ 158.995346][ T7183] name failslab, interval 1, probability 0, space 0, times 0 [ 159.012268][ T7184] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.016468][ T7183] CPU: 0 UID: 0 PID: 7183 Comm: syz.3.305 Not tainted syzkaller #0 PREEMPT(full) [ 159.016492][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.016502][ T7183] Call Trace: [ 159.016507][ T7183] [ 159.016513][ T7183] dump_stack_lvl+0x16c/0x1f0 [ 159.016543][ T7183] should_fail_ex+0x512/0x640 [ 159.016560][ T7183] ? fs_reclaim_acquire+0xae/0x150 [ 159.016587][ T7183] should_failslab+0xc2/0x120 [ 159.016608][ T7183] __kmalloc_noprof+0xeb/0x910 [ 159.016637][ T7183] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 159.016658][ T7183] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 159.016673][ T7183] tomoyo_realpath_from_path+0xc2/0x6e0 [ 159.016691][ T7183] ? tomoyo_profile+0x47/0x60 [ 159.016710][ T7183] tomoyo_path_number_perm+0x245/0x580 [ 159.016732][ T7183] ? tomoyo_path_number_perm+0x237/0x580 [ 159.016756][ T7183] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 159.016779][ T7183] ? find_held_lock+0x2b/0x80 [ 159.016822][ T7183] ? find_held_lock+0x2b/0x80 [ 159.016845][ T7183] ? hook_file_ioctl_common+0x144/0x410 [ 159.016868][ T7183] ? __fget_files+0x20e/0x3c0 [ 159.016894][ T7183] security_file_ioctl+0x9b/0x240 [ 159.016921][ T7183] __x64_sys_ioctl+0xb7/0x210 [ 159.016941][ T7183] do_syscall_64+0xcd/0xf80 [ 159.016965][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.016981][ T7183] RIP: 0033:0x7f5b0538f749 [ 159.016995][ T7183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.017010][ T7183] RSP: 002b:00007f5b062cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.017026][ T7183] RAX: ffffffffffffffda RBX: 00007f5b055e6090 RCX: 00007f5b0538f749 [ 159.017036][ T7183] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 159.017045][ T7183] RBP: 00007f5b062cc090 R08: 0000000000000000 R09: 0000000000000000 [ 159.017055][ T7183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.017064][ T7183] R13: 00007f5b055e6128 R14: 00007f5b055e6090 R15: 00007ffff652f4c8 [ 159.017086][ T7183] [ 159.017109][ T7183] ERROR: Out of memory at tomoyo_realpath_from_path. [ 159.258916][ T9] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 159.267111][ T7184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.306'. [ 159.279160][ T7051] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 159.294402][ T7184] 8021q: VLANs not supported on gre0 [ 159.327409][ T7051] usb 3-1: USB disconnect, device number 10 [ 159.442163][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 159.453229][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 159.469227][ T7187] netlink: 830 bytes leftover after parsing attributes in process `syz.1.307'. [ 159.484678][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 159.524047][ T9] usb 1-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 159.535672][ T7187] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 159.536325][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.554212][ T9] usb 1-1: Product: syz [ 159.559957][ T9] usb 1-1: Manufacturer: syz [ 159.565983][ T9] usb 1-1: SerialNumber: syz [ 159.574116][ T7174] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 159.583196][ T7174] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 159.705039][ T5886] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 159.794238][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.826564][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 159.832580][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 159.849544][ T6538] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 159.851626][ T9] usb 1-1: USB disconnect, device number 14 [ 159.863189][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 159.880201][ T5886] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 159.897108][ T5886] usb 5-1: config 0 has no interface number 0 [ 159.904779][ T7196] FAULT_INJECTION: forcing a failure. [ 159.904779][ T7196] name failslab, interval 1, probability 0, space 0, times 0 [ 159.907361][ T5886] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 159.924286][ T7196] CPU: 1 UID: 0 PID: 7196 Comm: syz.2.310 Not tainted syzkaller #0 PREEMPT(full) [ 159.924311][ T7196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.924320][ T7196] Call Trace: [ 159.924327][ T7196] [ 159.924334][ T7196] dump_stack_lvl+0x16c/0x1f0 [ 159.924370][ T7196] should_fail_ex+0x512/0x640 [ 159.924388][ T7196] ? __kmalloc_cache_noprof+0x5f/0x800 [ 159.924416][ T7196] should_failslab+0xc2/0x120 [ 159.924437][ T7196] __kmalloc_cache_noprof+0x80/0x800 [ 159.924460][ T7196] ? rcu_is_watching+0x12/0xc0 [ 159.924476][ T7196] ? vhost_task_create+0xe5/0x370 [ 159.924498][ T7196] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 159.924526][ T7196] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 159.924548][ T7196] ? vhost_task_create+0xe5/0x370 [ 159.924572][ T7196] vhost_task_create+0xe5/0x370 [ 159.924593][ T7196] ? __pfx_vhost_task_create+0x10/0x10 [ 159.924620][ T7196] ? __pfx_vhost_task_fn+0x10/0x10 [ 159.924643][ T7196] ? __pfx___mutex_lock+0x10/0x10 [ 159.924674][ T7196] kvm_mmu_post_init_vm+0x1b7/0x380 [ 159.924696][ T7196] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 159.924716][ T7196] ? kvm_vcpu_ioctl+0x14f8/0x16d0 [ 159.924744][ T7196] kvm_vcpu_ioctl+0x76d/0x16d0 [ 159.924770][ T7196] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 159.924794][ T7196] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 159.924814][ T7196] ? do_vfs_ioctl+0x128/0x14f0 [ 159.924833][ T7196] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 159.924850][ T7196] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 159.924883][ T7196] ? hook_file_ioctl_common+0x144/0x410 [ 159.924907][ T7196] ? selinux_file_ioctl+0x180/0x270 [ 159.924929][ T7196] ? selinux_file_ioctl+0xb4/0x270 [ 159.924954][ T7196] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 159.924979][ T7196] __x64_sys_ioctl+0x18e/0x210 [ 159.924998][ T7196] do_syscall_64+0xcd/0xf80 [ 159.925022][ T7196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.925038][ T7196] RIP: 0033:0x7fa3ed38f749 [ 159.925052][ T7196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.925068][ T7196] RSP: 002b:00007fa3ee14f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.925083][ T7196] RAX: ffffffffffffffda RBX: 00007fa3ed5e5fa0 RCX: 00007fa3ed38f749 [ 159.925094][ T7196] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 159.925103][ T7196] RBP: 00007fa3ee14f090 R08: 0000000000000000 R09: 0000000000000000 [ 159.925112][ T7196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.925121][ T7196] R13: 00007fa3ed5e6038 R14: 00007fa3ed5e5fa0 R15: 00007ffefe64e508 [ 159.925143][ T7196] [ 159.964195][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 159.978284][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.009382][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.013757][ T5886] usb 5-1: Product: syz [ 160.023236][ T24] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 160.028537][ T5886] usb 5-1: Manufacturer: syz [ 160.044457][ T6538] usb 4-1: config 0 has no interfaces? [ 160.049431][ T5886] usb 5-1: SerialNumber: syz [ 160.054237][ T6538] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 160.108438][ T5886] usb 5-1: config 0 descriptor?? [ 160.148130][ T24] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 160.188737][ T5886] smsc95xx v2.0.0 [ 160.209445][ T6538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.237532][ T7198] FAULT_INJECTION: forcing a failure. [ 160.237532][ T7198] name failslab, interval 1, probability 0, space 0, times 0 [ 160.238680][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.249366][ T7198] CPU: 0 UID: 0 PID: 7198 Comm: syz.2.311 Not tainted syzkaller #0 PREEMPT(full) [ 160.249386][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.249396][ T7198] Call Trace: [ 160.249401][ T7198] [ 160.249407][ T7198] dump_stack_lvl+0x16c/0x1f0 [ 160.249436][ T7198] should_fail_ex+0x512/0x640 [ 160.249454][ T7198] ? __kmalloc_cache_noprof+0x5f/0x800 [ 160.249481][ T7198] should_failslab+0xc2/0x120 [ 160.249501][ T7198] __kmalloc_cache_noprof+0x80/0x800 [ 160.249524][ T7198] ? __tcf_qdisc_find.part.0+0x38c/0xb20 [ 160.249548][ T7198] ? tcf_chain_create+0x98/0x370 [ 160.249570][ T7198] ? tcf_chain_create+0x98/0x370 [ 160.249587][ T7198] tcf_chain_create+0x98/0x370 [ 160.249608][ T7198] __tcf_chain_get+0x153/0x1b0 [ 160.249636][ T7198] tc_new_tfilter+0x6ed/0x2340 [ 160.249668][ T7198] ? avc_has_perm_noaudit+0x117/0x3b0 [ 160.249689][ T7198] ? __pfx_tc_new_tfilter+0x10/0x10 [ 160.249720][ T7198] ? __lock_acquire+0x436/0x2890 [ 160.249750][ T7198] ? find_held_lock+0x2b/0x80 [ 160.249773][ T7198] ? __pfx_tc_new_tfilter+0x10/0x10 [ 160.249794][ T7198] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 160.249816][ T7198] ? __pfx_tc_new_tfilter+0x10/0x10 [ 160.249839][ T7198] rtnetlink_rcv_msg+0x95e/0xe90 [ 160.249863][ T7198] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.249890][ T7198] ? ref_tracker_free+0x37c/0x830 [ 160.249911][ T7198] netlink_rcv_skb+0x158/0x420 [ 160.249934][ T7198] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.249957][ T7198] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.249987][ T7198] ? netlink_deliver_tap+0x1ae/0xd30 [ 160.250012][ T7198] netlink_unicast+0x5aa/0x870 [ 160.250038][ T7198] ? __pfx_netlink_unicast+0x10/0x10 [ 160.250069][ T7198] netlink_sendmsg+0x8c8/0xdd0 [ 160.250095][ T7198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.250126][ T7198] ____sys_sendmsg+0xa5d/0xc30 [ 160.250151][ T7198] ? copy_msghdr_from_user+0x10a/0x160 [ 160.250170][ T7198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.250203][ T7198] ___sys_sendmsg+0x134/0x1d0 [ 160.250224][ T7198] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.250270][ T7198] __sys_sendmsg+0x16d/0x220 [ 160.250290][ T7198] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.250323][ T7198] do_syscall_64+0xcd/0xf80 [ 160.250348][ T7198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.250364][ T7198] RIP: 0033:0x7fa3ed38f749 [ 160.250377][ T7198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.250392][ T7198] RSP: 002b:00007fa3ee14f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.250408][ T7198] RAX: ffffffffffffffda RBX: 00007fa3ed5e5fa0 RCX: 00007fa3ed38f749 [ 160.250418][ T7198] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 160.250428][ T7198] RBP: 00007fa3ee14f090 R08: 0000000000000000 R09: 0000000000000000 [ 160.250437][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.250446][ T7198] R13: 00007fa3ed5e6038 R14: 00007fa3ed5e5fa0 R15: 00007ffefe64e508 [ 160.250468][ T7198] [ 160.250647][ T5886] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 160.254971][ T24] usb 2-1: Product: syz [ 160.266864][ T5886] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 160.275585][ T24] usb 2-1: Manufacturer: syz [ 160.618678][ T6538] usb 4-1: config 0 descriptor?? [ 160.624343][ T24] usb 2-1: SerialNumber: syz [ 160.787917][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.312'. [ 160.835416][ T6538] usb 4-1: USB disconnect, device number 15 [ 160.849827][ T24] usb 2-1: Limiting number of CPorts to U8_MAX [ 160.856456][ T24] usb 2-1: Not enough endpoints found in device, aborting! [ 161.074710][ T24] usb 2-1: USB disconnect, device number 10 [ 161.099552][ T7209] o2cb: This node has not been configured. [ 161.105549][ T7209] o2cb: Cluster check failed. Fix errors before retrying. [ 161.112658][ T7209] (syz.2.313,7209,0):user_dlm_register:674 ERROR: status = -22 [ 161.120234][ T7209] (syz.2.313,7209,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 161.397551][ T5886] usb 5-1: USB disconnect, device number 18 [ 161.554460][ T7211] kAFS: unable to lookup cell 'Þ({^ú@' [ 161.746195][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 161.746244][ T30] audit: type=1400 audit(1765124236.997:686): avc: denied { create } for pid=7212 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.464276][ T30] audit: type=1400 audit(1765124236.997:687): avc: denied { bind } for pid=7212 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.547058][ T30] audit: type=1400 audit(1765124236.997:688): avc: denied { listen } for pid=7212 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.567614][ T30] audit: type=1400 audit(1765124236.997:689): avc: denied { connect } for pid=7212 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.638467][ T7225] xt_hashlimit: size too large, truncated to 1048576 [ 162.854353][ T5886] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 163.019814][ T5886] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 163.030802][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 163.093554][ T5886] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 163.175663][ T5886] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 163.221407][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.275504][ T5886] usb 4-1: Product: syz [ 163.313149][ T5886] usb 4-1: Manufacturer: syz [ 163.347933][ T5886] usb 4-1: SerialNumber: syz [ 163.422570][ T5886] usb 4-1: config 0 descriptor?? [ 163.490606][ T7222] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 163.531090][ T7222] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 163.666136][ T5886] usb 4-1: ucan: probing device on interface #0 [ 163.794378][ T30] audit: type=1400 audit(1765124239.047:690): avc: denied { connect } for pid=7235 comm="syz.4.321" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.847137][ T30] audit: type=1400 audit(1765124239.077:691): avc: denied { write } for pid=7235 comm="syz.4.321" path="socket:[16168]" dev="sockfs" ino=16168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.977573][ T30] audit: type=1400 audit(1765124239.177:692): avc: denied { read write } for pid=7239 comm="syz.1.323" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 164.005561][ T30] audit: type=1400 audit(1765124239.177:693): avc: denied { open } for pid=7239 comm="syz.1.323" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 164.084339][ T6538] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 164.121616][ T30] audit: type=1400 audit(1765124239.177:694): avc: denied { mounton } for pid=7239 comm="syz.1.323" path="/66/file0" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.127104][ T7248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.316150][ T5886] usb 4-1: ucan: device reported invalid device info [ 164.322876][ T5886] usb 4-1: ucan: probe failed; try to update the device firmware [ 164.383208][ T30] audit: type=1400 audit(1765124239.187:695): avc: denied { mount } for pid=7239 comm="syz.1.323" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 164.471153][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.494364][ T6538] usb 3-1: Using ep0 maxpacket: 16 [ 164.502792][ T6538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.513996][ T6538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.544387][ T6538] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 164.554220][ T6538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.612218][ T6538] usb 3-1: config 0 descriptor?? [ 165.082633][ T6538] corsair 0003:1B1C:1B02.000E: unknown main item tag 0x0 [ 165.097673][ T6538] corsair 0003:1B1C:1B02.000E: unknown main item tag 0x0 [ 165.105714][ T6538] corsair 0003:1B1C:1B02.000E: unknown main item tag 0x0 [ 165.113273][ T6538] corsair 0003:1B1C:1B02.000E: unknown main item tag 0x0 [ 165.129303][ T6538] corsair 0003:1B1C:1B02.000E: unknown main item tag 0x0 [ 165.485960][ T6538] corsair 0003:1B1C:1B02.000E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 165.518790][ T6538] corsair 0003:1B1C:1B02.000E: Read invalid backlight brightness: 3e. [ 165.821798][ T5886] usb 4-1: USB disconnect, device number 16 [ 165.853723][ T6538] usb 3-1: USB disconnect, device number 11 [ 166.221905][ T7266] xt_hashlimit: size too large, truncated to 1048576 [ 166.489098][ T7278] loop2: detected capacity change from 0 to 7 [ 166.502971][ T6096] Dev loop2: unable to read RDB block 7 [ 166.511921][ T6096] loop2: unable to read partition table [ 166.520790][ T6096] loop2: partition table beyond EOD, truncated [ 166.529711][ T7278] Dev loop2: unable to read RDB block 7 [ 166.539040][ T7278] loop2: unable to read partition table [ 166.547131][ T7278] loop2: partition table beyond EOD, truncated [ 166.554472][ T7278] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 166.896617][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 166.896630][ T30] audit: type=1400 audit(1765124242.137:707): avc: denied { read } for pid=7281 comm="syz.2.333" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 166.946165][ T30] audit: type=1400 audit(1765124242.137:708): avc: denied { open } for pid=7281 comm="syz.2.333" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 167.616717][ T30] audit: type=1400 audit(1765124242.877:709): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 167.762967][ T7288] loop2: detected capacity change from 0 to 7 [ 167.782932][ T7288] Dev loop2: unable to read RDB block 7 [ 167.837541][ T7288] loop2: unable to read partition table [ 168.382760][ T7288] loop2: partition table beyond EOD, truncated [ 168.506274][ T7288] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 168.734646][ T30] audit: type=1400 audit(1765124243.987:710): avc: denied { ioctl } for pid=7291 comm="syz.3.335" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 169.048940][ T30] audit: type=1400 audit(1765124244.307:711): avc: denied { prog_load } for pid=7301 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 169.176546][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 169.204566][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 169.646249][ T30] audit: type=1400 audit(1765124244.307:712): avc: denied { bpf } for pid=7301 comm="syz.0.339" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 169.679827][ T30] audit: type=1400 audit(1765124244.307:713): avc: denied { execmem } for pid=7301 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 169.759704][ T30] audit: type=1400 audit(1765124244.427:714): avc: denied { create } for pid=7303 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.830131][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 169.850563][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.059671][ T9] usb 5-1: config 0 descriptor?? [ 170.084862][ T24] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 170.086854][ T30] audit: type=1400 audit(1765124244.447:715): avc: denied { read write } for pid=5817 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.577817][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 170.696727][ T30] audit: type=1400 audit(1765124244.447:716): avc: denied { open } for pid=5817 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.948304][ T24] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 170.966297][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 171.094436][ T9] gspca_sn9c2028: read1 error -110 [ 171.133580][ T9] gspca_sn9c2028: read1 error -32 [ 171.254586][ T9] gspca_sn9c2028: read1 error -32 [ 171.261906][ T9] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -32 [ 171.304475][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 171.396863][ T24] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.442328][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 171.462914][ T7332] xt_hashlimit: size too large, truncated to 1048576 [ 171.483727][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.503156][ T7307] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.534256][ T89] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 171.586246][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 171.674421][ T24] usb 3-1: invalid MIDI out EP 0 [ 171.972195][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.018933][ T24] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 172.060497][ T24] usb 3-1: USB disconnect, device number 12 [ 172.092542][ T7338] netlink: 830 bytes leftover after parsing attributes in process `syz.1.347'. [ 172.161780][ T7338] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 172.267331][ T1204] usb 5-1: USB disconnect, device number 19 [ 172.433518][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 172.441279][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 172.441294][ T30] audit: type=1400 audit(1765124247.697:768): avc: denied { prog_run } for pid=7340 comm="syz.4.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 172.582348][ T30] audit: type=1400 audit(1765124247.827:769): avc: denied { create } for pid=7340 comm="syz.4.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 172.774400][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 173.002327][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 173.027885][ T24] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 173.105244][ T30] audit: type=1400 audit(1765124248.107:770): avc: denied { write } for pid=7340 comm="syz.4.348" name="ptype" dev="proc" ino=4026533153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 173.274887][ T24] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 173.328507][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.373445][ T24] usb 2-1: Product: syz [ 173.397758][ T30] audit: type=1400 audit(1765124248.167:771): avc: denied { read write } for pid=7340 comm="syz.4.348" name="radio7" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 173.433007][ T24] usb 2-1: Manufacturer: syz [ 173.466454][ T24] usb 2-1: SerialNumber: syz [ 173.469057][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'. [ 173.518120][ T30] audit: type=1400 audit(1765124248.177:772): avc: denied { open } for pid=7340 comm="syz.4.348" path="/dev/radio7" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 173.561712][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.352'. [ 173.683770][ T30] audit: type=1400 audit(1765124248.937:773): avc: denied { create } for pid=7353 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 173.713691][ T24] usb 2-1: Limiting number of CPorts to U8_MAX [ 173.726658][ T24] usb 2-1: Not enough endpoints found in device, aborting! [ 173.787052][ T30] audit: type=1400 audit(1765124249.047:774): avc: denied { create } for pid=7355 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.027703][ T30] audit: type=1400 audit(1765124249.047:775): avc: denied { read write } for pid=7355 comm="syz.0.354" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 174.027733][ T30] audit: type=1400 audit(1765124249.047:776): avc: denied { open } for pid=7355 comm="syz.0.354" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 174.065749][ T6091] usb 2-1: USB disconnect, device number 11 [ 174.193631][ T24] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 174.404851][ T30] audit: type=1400 audit(1765124249.537:777): avc: denied { map } for pid=7356 comm="syz.2.355" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 174.516114][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 174.524854][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 174.537177][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 174.550339][ T24] usb 1-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 174.559450][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.567910][ T24] usb 1-1: Product: syz [ 174.572137][ T24] usb 1-1: Manufacturer: syz [ 174.576774][ T24] usb 1-1: SerialNumber: syz [ 174.583614][ T7361] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 174.590991][ T7361] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 174.773704][ T7369] loop2: detected capacity change from 0 to 7 [ 174.789809][ T7369] Dev loop2: unable to read RDB block 7 [ 174.795729][ T7369] loop2: unable to read partition table [ 174.801640][ T7369] loop2: partition table beyond EOD, truncated [ 174.820143][ T24] usbhid 1-1:1.0: can't add hid device: -71 [ 174.836430][ T24] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 174.847148][ T7369] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.857394][ T24] usb 1-1: USB disconnect, device number 15 [ 174.875899][ T5187] Dev loop2: unable to read RDB block 7 [ 174.884398][ T5187] loop2: unable to read partition table [ 174.890233][ T5187] loop2: partition table beyond EOD, truncated [ 175.206201][ T7377] FAULT_INJECTION: forcing a failure. [ 175.206201][ T7377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.219499][ T7377] CPU: 1 UID: 0 PID: 7377 Comm: syz.4.359 Not tainted syzkaller #0 PREEMPT(full) [ 175.219529][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.219539][ T7377] Call Trace: [ 175.219546][ T7377] [ 175.219553][ T7377] dump_stack_lvl+0x16c/0x1f0 [ 175.219583][ T7377] should_fail_ex+0x512/0x640 [ 175.219608][ T7377] _copy_to_iter+0x463/0x1710 [ 175.219633][ T7377] ? __pfx__copy_to_iter+0x10/0x10 [ 175.219650][ T7377] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 175.219676][ T7377] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 175.219712][ T7377] seq_read_iter+0xd02/0x12d0 [ 175.219748][ T7377] seq_read+0x3a3/0x570 [ 175.219770][ T7377] ? __pfx_seq_read+0x10/0x10 [ 175.219794][ T7377] ? copy_iovec_from_user+0x1c/0x170 [ 175.219814][ T7377] ? import_ubuf+0x1b6/0x220 [ 175.219838][ T7377] ? avc_policy_seqno+0x9/0x20 [ 175.219863][ T7377] ? __pfx_seq_read+0x10/0x10 [ 175.219886][ T7377] proc_reg_read+0x240/0x330 [ 175.219911][ T7377] ? __pfx_proc_reg_read+0x10/0x10 [ 175.219932][ T7377] vfs_readv+0x5c1/0x8b0 [ 175.219958][ T7377] ? __pfx_vfs_readv+0x10/0x10 [ 175.219997][ T7377] ? __fget_files+0x20e/0x3c0 [ 175.220028][ T7377] ? do_preadv+0x1a6/0x270 [ 175.220047][ T7377] do_preadv+0x1a6/0x270 [ 175.220067][ T7377] ? __pfx_do_preadv+0x10/0x10 [ 175.220085][ T7377] ? rcu_is_watching+0x12/0xc0 [ 175.220109][ T7377] do_syscall_64+0xcd/0xf80 [ 175.220137][ T7377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.220156][ T7377] RIP: 0033:0x7fd77358f749 [ 175.220171][ T7377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.220188][ T7377] RSP: 002b:00007fd774421038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 175.220207][ T7377] RAX: ffffffffffffffda RBX: 00007fd7737e6180 RCX: 00007fd77358f749 [ 175.220219][ T7377] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 000000000000000a [ 175.220230][ T7377] RBP: 00007fd774421090 R08: 0000000000000088 R09: 0000000000000000 [ 175.220241][ T7377] R10: 0000000000000035 R11: 0000000000000246 R12: 0000000000000001 [ 175.220252][ T7377] R13: 00007fd7737e6218 R14: 00007fd7737e6180 R15: 00007ffefc6a2348 [ 175.220277][ T7377] [ 176.648931][ T7391] netlink: 830 bytes leftover after parsing attributes in process `syz.4.363'. [ 176.791172][ T7391] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 177.104015][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 177.147691][ T1204] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 177.208111][ T7405] Invalid ELF header magic: != ELF [ 177.314241][ T1204] usb 5-1: Using ep0 maxpacket: 32 [ 177.325402][ T1204] usb 5-1: unable to get BOS descriptor or descriptor too short [ 177.374041][ T1204] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 177.402238][ T1204] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 177.414567][ T1204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.429397][ T1204] usb 5-1: Product: syz [ 177.435854][ T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 177.445602][ T1204] usb 5-1: Manufacturer: syz [ 177.454610][ T1204] usb 5-1: SerialNumber: syz [ 177.828559][ T1204] usb 5-1: Limiting number of CPorts to U8_MAX [ 177.840910][ T1204] usb 5-1: Not enough endpoints found in device, aborting! [ 177.849993][ T7414] netlink: 830 bytes leftover after parsing attributes in process `syz.0.369'. [ 178.086614][ T7414] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 178.118223][ T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 178.137225][ T1204] usb 5-1: USB disconnect, device number 20 [ 178.147230][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 178.184509][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 178.199943][ T9] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.212888][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 178.224950][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.254577][ T7401] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 178.273771][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.354850][ T5886] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 178.374622][ T9] usb 2-1: invalid MIDI out EP 0 [ 178.376025][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 178.376038][ T30] audit: type=1400 audit(1765124253.607:794): avc: denied { read write } for pid=7416 comm="syz.3.370" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 178.429117][ T30] audit: type=1400 audit(1765124253.607:795): avc: denied { open } for pid=7416 comm="syz.3.370" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 178.674576][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 178.685481][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 178.695682][ T5886] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 178.728195][ T5886] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 178.729996][ T30] audit: type=1400 audit(1765124253.987:796): avc: denied { ioctl } for pid=7419 comm="syz.3.371" path="socket:[16630]" dev="sockfs" ino=16630 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.738128][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.773769][ T5886] usb 1-1: Product: syz [ 178.779547][ T5886] usb 1-1: Manufacturer: syz [ 178.784226][ T5886] usb 1-1: SerialNumber: syz [ 178.879948][ T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 178.897930][ T9] usb 2-1: USB disconnect, device number 12 [ 179.010647][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.057270][ T7427] FAULT_INJECTION: forcing a failure. [ 179.057270][ T7427] name failslab, interval 1, probability 0, space 0, times 0 [ 179.070020][ T7427] CPU: 1 UID: 0 PID: 7427 Comm: syz.2.372 Not tainted syzkaller #0 PREEMPT(full) [ 179.070045][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.070054][ T7427] Call Trace: [ 179.070060][ T7427] [ 179.070067][ T7427] dump_stack_lvl+0x16c/0x1f0 [ 179.070097][ T7427] should_fail_ex+0x512/0x640 [ 179.070116][ T7427] ? fs_reclaim_acquire+0xae/0x150 [ 179.070143][ T7427] should_failslab+0xc2/0x120 [ 179.070166][ T7427] __kmalloc_noprof+0xeb/0x910 [ 179.070192][ T7427] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 179.070216][ T7427] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 179.070232][ T7427] tomoyo_realpath_from_path+0xc2/0x6e0 [ 179.070258][ T7427] ? tomoyo_profile+0x47/0x60 [ 179.070281][ T7427] tomoyo_path_number_perm+0x245/0x580 [ 179.070305][ T7427] ? tomoyo_path_number_perm+0x237/0x580 [ 179.070332][ T7427] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 179.070359][ T7427] ? find_held_lock+0x2b/0x80 [ 179.070408][ T7427] ? find_held_lock+0x2b/0x80 [ 179.070434][ T7427] ? hook_file_ioctl_common+0x144/0x410 [ 179.070459][ T7427] ? __fget_files+0x20e/0x3c0 [ 179.070489][ T7427] security_file_ioctl+0x9b/0x240 [ 179.070518][ T7427] __x64_sys_ioctl+0xb7/0x210 [ 179.070541][ T7427] do_syscall_64+0xcd/0xf80 [ 179.070570][ T7427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.070588][ T7427] RIP: 0033:0x7fa3ed38f749 [ 179.070603][ T7427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.070620][ T7427] RSP: 002b:00007fa3eb5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.070639][ T7427] RAX: ffffffffffffffda RBX: 00007fa3ed5e6090 RCX: 00007fa3ed38f749 [ 179.070651][ T7427] RDX: 00002000000000c0 RSI: 0000000000003b70 RDI: 0000000000000007 [ 179.070661][ T7427] RBP: 00007fa3eb5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 179.070671][ T7427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.070682][ T7427] R13: 00007fa3ed5e6128 R14: 00007fa3ed5e6090 R15: 00007ffefe64e508 [ 179.070707][ T7427] [ 179.070714][ T7427] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.139060][ T5886] usb 1-1: Limiting number of CPorts to U8_MAX [ 179.291737][ T5886] usb 1-1: Not enough endpoints found in device, aborting! [ 179.292401][ T30] audit: type=1400 audit(1765124254.547:797): avc: denied { write } for pid=7430 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.352666][ T7051] usb 1-1: USB disconnect, device number 16 [ 179.493006][ T30] audit: type=1400 audit(1765124254.747:798): avc: denied { connect } for pid=7430 comm="syz.4.373" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.513855][ T30] audit: type=1400 audit(1765124254.777:799): avc: denied { write } for pid=7430 comm="syz.4.373" path="socket:[16684]" dev="sockfs" ino=16684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.538915][ T30] audit: type=1400 audit(1765124254.797:800): avc: denied { read write } for pid=7430 comm="syz.4.373" dev="sockfs" ino=16677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.746956][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.377'. [ 180.804193][ T7420] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 180.836691][ T7447] FAULT_INJECTION: forcing a failure. [ 180.836691][ T7447] name failslab, interval 1, probability 0, space 0, times 0 [ 180.849348][ T7447] CPU: 1 UID: 0 PID: 7447 Comm: syz.4.376 Not tainted syzkaller #0 PREEMPT(full) [ 180.849372][ T7447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.849382][ T7447] Call Trace: [ 180.849389][ T7447] [ 180.849396][ T7447] dump_stack_lvl+0x16c/0x1f0 [ 180.849426][ T7447] should_fail_ex+0x512/0x640 [ 180.849446][ T7447] ? fs_reclaim_acquire+0xae/0x150 [ 180.849477][ T7447] should_failslab+0xc2/0x120 [ 180.849502][ T7447] __kmalloc_noprof+0xeb/0x910 [ 180.849527][ T7447] ? bpf_trace_run4+0x2c4/0x5e0 [ 180.849549][ T7447] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 180.849571][ T7447] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 180.849584][ T7447] tomoyo_realpath_from_path+0xc2/0x6e0 [ 180.849600][ T7447] ? tomoyo_profile+0x47/0x60 [ 180.849618][ T7447] tomoyo_path_number_perm+0x245/0x580 [ 180.849638][ T7447] ? tomoyo_path_number_perm+0x237/0x580 [ 180.849659][ T7447] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 180.849700][ T7447] ? find_held_lock+0x2b/0x80 [ 180.849722][ T7447] ? hook_file_ioctl_common+0x144/0x410 [ 180.849743][ T7447] ? __fget_files+0x20e/0x3c0 [ 180.849766][ T7447] security_file_ioctl+0x9b/0x240 [ 180.849790][ T7447] __x64_sys_ioctl+0xb7/0x210 [ 180.849808][ T7447] do_syscall_64+0xcd/0xf80 [ 180.849831][ T7447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.849846][ T7447] RIP: 0033:0x7fd77358f749 [ 180.849858][ T7447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.849872][ T7447] RSP: 002b:00007fd774421038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.849886][ T7447] RAX: ffffffffffffffda RBX: 00007fd7737e6180 RCX: 00007fd77358f749 [ 180.849896][ T7447] RDX: 0000000000000000 RSI: 0000000000005016 RDI: 0000000000000009 [ 180.849905][ T7447] RBP: 00007fd774421090 R08: 0000000000000000 R09: 0000000000000000 [ 180.849913][ T7447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.849922][ T7447] R13: 00007fd7737e6218 R14: 00007fd7737e6180 R15: 00007ffefc6a2348 [ 180.849942][ T7447] [ 180.849965][ T7447] ERROR: Out of memory at tomoyo_realpath_from_path. [ 181.313908][ T24] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 181.510228][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.634405][ T5886] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 181.674202][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.676283][ T30] audit: type=1400 audit(1765124256.937:801): avc: denied { read write } for pid=7461 comm="syz.3.382" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 181.692070][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.720796][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.883920][ T30] audit: type=1400 audit(1765124256.977:802): avc: denied { open } for pid=7461 comm="syz.3.382" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 181.927976][ T30] audit: type=1400 audit(1765124256.987:803): avc: denied { mount } for pid=7456 comm="syz.2.381" name="/" dev="ocfs2_dlmfs" ino=15343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 181.949531][ T24] usb 2-1: usb_control_msg returned -32 [ 181.958286][ T24] usbtmc 2-1:16.0: can't read capabilities [ 182.364249][ T5886] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.375290][ T5886] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 182.385310][ T5886] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 182.395312][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.406407][ T7455] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 182.417128][ T5886] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.836639][ T7468] ntfs3(loop1): try to read out of volume at offset 0x0 [ 182.880649][ T5886] usb 5-1: USB disconnect, device number 21 [ 183.019355][ T7475] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 183.102070][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'. [ 183.925260][ T24] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 183.942082][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 183.942097][ T30] audit: type=1400 audit(1765124259.197:809): avc: denied { mounton } for pid=7481 comm="syz.3.386" path="/76/file0" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 183.986842][ T30] audit: type=1400 audit(1765124259.247:810): avc: denied { mount } for pid=7481 comm="syz.3.386" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 184.087115][ T24] usb 5-1: Invalid ep0 maxpacket: 64 [ 184.224215][ T24] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 184.394755][ T24] usb 5-1: Invalid ep0 maxpacket: 64 [ 184.420827][ T24] usb usb5-port1: attempt power cycle [ 184.514240][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 185.415845][ T30] audit: type=1400 audit(1765124260.677:811): avc: denied { ioctl } for pid=7493 comm="syz.4.389" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 185.504210][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 185.646163][ T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.664231][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 185.827896][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 185.855778][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.876745][ T9] usb 3-1: config 0 descriptor?? [ 186.384995][ T9] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 186.536049][ T30] audit: type=1400 audit(1765124261.797:812): avc: denied { bind } for pid=7488 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.586289][ T30] audit: type=1400 audit(1765124261.837:813): avc: denied { write } for pid=7488 comm="syz.2.387" path="socket:[16771]" dev="sockfs" ino=16771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.733999][ T7466] netlink: 666 bytes leftover after parsing attributes in process `syz.1.378'. [ 186.756907][ T7494] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 186.802809][ T5980] usb 2-1: USB disconnect, device number 13 [ 186.838814][ T30] audit: type=1400 audit(1765124262.097:814): avc: denied { create } for pid=7488 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 186.872504][ T6091] usb 3-1: USB disconnect, device number 13 [ 187.063710][ T7503] netlink: 'syz.1.390': attribute type 9 has an invalid length. [ 187.071812][ T7503] netlink: 'syz.1.390': attribute type 7 has an invalid length. [ 187.079525][ T7503] netlink: 'syz.1.390': attribute type 8 has an invalid length. [ 187.113429][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 187.123838][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 187.133222][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 187.154221][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 187.163377][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 187.176636][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 187.187711][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 187.201830][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 187.505615][ T30] audit: type=1400 audit(1765124262.717:815): avc: denied { relabelfrom } for pid=7504 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 187.605060][ T30] audit: type=1400 audit(1765124262.717:816): avc: denied { relabelto } for pid=7504 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 187.651670][ T30] audit: type=1400 audit(1765124262.897:817): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 188.803453][ T30] audit: type=1400 audit(1765124263.937:818): avc: denied { shutdown } for pid=7527 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 188.828587][ T7530] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 188.856293][ T7530] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 188.957159][ T30] audit: type=1400 audit(1765124263.937:819): avc: denied { getopt } for pid=7527 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.738093][ T30] audit: type=1400 audit(1765124264.997:820): avc: denied { create } for pid=7540 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.219859][ T30] audit: type=1400 audit(1765124265.117:821): avc: denied { mounton } for pid=7537 comm="syz.2.399" path="/75/file0" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 190.254389][ T30] audit: type=1400 audit(1765124265.217:822): avc: denied { bind } for pid=7540 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.275769][ T30] audit: type=1400 audit(1765124265.237:823): avc: denied { listen } for pid=7540 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.295730][ T30] audit: type=1400 audit(1765124265.237:824): avc: denied { connect } for pid=7540 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.320306][ T30] audit: type=1400 audit(1765124265.537:825): avc: denied { map } for pid=7540 comm="syz.4.400" path="socket:[16837]" dev="sockfs" ino=16837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.457744][ T30] audit: type=1400 audit(1765124265.537:826): avc: denied { accept } for pid=7540 comm="syz.4.400" path="socket:[16837]" dev="sockfs" ino=16837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.729536][ T5137] Bluetooth: hci2: command 0x0406 tx timeout [ 190.731442][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 190.735765][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 190.735794][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 190.925966][ T7051] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 191.204289][ T7051] usb 5-1: Using ep0 maxpacket: 16 [ 191.216702][ T7051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.250592][ T7051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.302752][ T7051] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 191.322459][ T7051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.332882][ T7051] usb 5-1: config 0 descriptor?? [ 192.055729][ T7051] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0 [ 192.075674][ T7051] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0 [ 192.082888][ T7051] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0 [ 192.091232][ T7051] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0 [ 192.098713][ T7051] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0 [ 192.132854][ T7051] corsair 0003:1B1C:1B02.0010: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 192.271559][ T7051] corsair 0003:1B1C:1B02.0010: Read invalid backlight brightness: 3e. [ 192.334235][ T5886] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 192.424313][ T7051] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 192.478387][ T9] usb 5-1: USB disconnect, device number 25 [ 192.538917][ T5886] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 192.559779][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.579016][ T5886] usb 4-1: config 0 descriptor?? [ 192.595386][ T5886] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 192.616481][ T7051] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 192.625679][ T7051] usb 2-1: config 0 has no interface number 0 [ 192.631945][ T7051] usb 2-1: config 0 interface 41 has no altsetting 0 [ 192.664456][ T7051] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 192.692772][ T7051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.702448][ T7051] usb 2-1: Product: syz [ 192.706831][ T7051] usb 2-1: Manufacturer: syz [ 192.711520][ T7051] usb 2-1: SerialNumber: syz [ 192.733871][ T7051] usb 2-1: config 0 descriptor?? [ 193.264439][ T5886] gspca_sn9c2028: read1 error -110 [ 193.300772][ T5886] gspca_sn9c2028: read1 error -32 [ 193.315464][ T7568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.324039][ T7568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.582012][ T5886] gspca_sn9c2028: read1 error -32 [ 193.589740][ T5886] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 193.598256][ T7051] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 193.631087][ T7051] usb 2-1: USB disconnect, device number 14 [ 193.649565][ T30] audit: type=1400 audit(1765124268.907:827): avc: denied { append } for pid=7574 comm="syz.4.407" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.775312][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.781652][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.624256][ T7051] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 195.706835][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 195.804232][ T7051] usb 2-1: Using ep0 maxpacket: 32 [ 195.810781][ T7051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.822308][ T7051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.832533][ T7051] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 195.841949][ T7051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.854641][ T7051] usb 2-1: config 0 descriptor?? [ 195.877606][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 195.888353][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 195.909322][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 195.922060][ T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 195.932175][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.940391][ T9] usb 1-1: Product: syz [ 195.944723][ T9] usb 1-1: Manufacturer: syz [ 195.949382][ T9] usb 1-1: SerialNumber: syz [ 195.962716][ T9] usb 1-1: config 0 descriptor?? [ 195.969106][ T7592] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 195.979099][ T7592] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 195.988895][ T9] usb 1-1: ucan: probing device on interface #0 [ 196.030731][ T1204] usb 4-1: USB disconnect, device number 18 [ 196.167177][ T30] audit: type=1400 audit(1765124271.427:828): avc: denied { setcurrent } for pid=7597 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 196.312138][ T30] audit: type=1400 audit(1765124271.567:829): avc: denied { create } for pid=7588 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 196.379613][ T30] audit: type=1400 audit(1765124271.637:830): avc: denied { setopt } for pid=7588 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 196.482078][ T9] usb 1-1: ucan: device reported invalid tx-fifo size [ 196.502161][ T9] usb 1-1: ucan: probe failed; try to update the device firmware [ 196.673316][ T7610] netlink: 'syz.3.417': attribute type 10 has an invalid length. [ 196.721132][ T7610] team0: Device veth1_macvtap failed to register rx_handler [ 196.925628][ T7600] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 196.969710][ T7603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.990595][ T7603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.019730][ T7600] kvm: pic: level sensitive irq not supported [ 197.020629][ T7600] kvm: pic: non byte read [ 197.044335][ T30] audit: type=1400 audit(1765124272.307:831): avc: denied { bind } for pid=7588 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 197.056348][ T7600] kvm: pic: level sensitive irq not supported [ 197.074294][ T7600] kvm: pic: non byte read [ 197.101574][ T30] audit: type=1400 audit(1765124272.307:832): avc: denied { getopt } for pid=7588 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.133718][ T7600] kvm: pic: level sensitive irq not supported [ 197.133781][ T7600] kvm: pic: non byte read [ 197.152458][ T7600] kvm: pic: level sensitive irq not supported [ 197.152528][ T7600] kvm: pic: non byte read [ 197.163515][ T7600] kvm: pic: level sensitive irq not supported [ 197.163571][ T7600] kvm: pic: non byte read [ 197.174513][ T7600] kvm: pic: level sensitive irq not supported [ 197.174557][ T7600] kvm: pic: non byte read [ 197.337339][ T7618] loop6: detected capacity change from 0 to 524288000 [ 197.344323][ T30] audit: type=1400 audit(1765124272.577:833): avc: denied { read } for pid=7615 comm="syz.3.418" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 197.372178][ T7051] usbhid 2-1:0.0: can't add hid device: -71 [ 197.380566][ T7051] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 197.408937][ T7051] usb 2-1: USB disconnect, device number 15 [ 197.416507][ T30] audit: type=1400 audit(1765124272.577:834): avc: denied { open } for pid=7615 comm="syz.3.418" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 197.446221][ T30] audit: type=1400 audit(1765124272.577:835): avc: denied { ioctl } for pid=7615 comm="syz.3.418" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 197.472217][ T30] audit: type=1400 audit(1765124272.587:836): avc: denied { read write } for pid=7615 comm="syz.3.418" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 197.533041][ T30] audit: type=1400 audit(1765124272.587:837): avc: denied { open } for pid=7615 comm="syz.3.418" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 197.737593][ T7626] netlink: 'syz.4.420': attribute type 4 has an invalid length. [ 197.760842][ T7626] netlink: 'syz.4.420': attribute type 4 has an invalid length. [ 197.778562][ T7621] __nla_validate_parse: 147 callbacks suppressed [ 197.778579][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 197.813206][ T7621] ip6gretap0: entered promiscuous mode [ 197.832214][ T7621] macvtap1: entered promiscuous mode [ 197.842824][ T7621] macvtap1: entered allmulticast mode [ 197.855310][ T7621] ip6gretap0: entered allmulticast mode [ 197.872899][ T7627] ip6gretap0: left allmulticast mode [ 197.885625][ T7627] ip6gretap0: left promiscuous mode [ 198.447052][ T7051] usb 1-1: USB disconnect, device number 17 [ 198.478027][ T7641] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 198.628143][ T5886] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 198.786324][ T5886] usb 3-1: not running at top speed; connect to a high speed hub [ 198.795546][ T5886] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 199.351578][ T5886] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 199.384400][ T7051] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 199.395403][ T5886] usb 3-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 199.474782][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.482818][ T5886] usb 3-1: Product: syz [ 199.502835][ T5886] usb 3-1: Manufacturer: syz [ 199.543950][ T5886] usb 3-1: SerialNumber: syz [ 199.556577][ T7051] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 199.582363][ T7660] netlink: 830 bytes leftover after parsing attributes in process `syz.0.430'. [ 199.592706][ T7051] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.603169][ T7637] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.616120][ T7637] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.634016][ T7051] usb 4-1: config 0 descriptor?? [ 199.641454][ T7660] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 199.656809][ T7051] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 199.754211][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 199.856848][ T5886] usbhid 3-1:1.0: can't add hid device: -71 [ 199.862821][ T5886] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 199.875733][ T5886] usb 3-1: USB disconnect, device number 14 [ 199.907482][ T5980] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 199.934426][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 199.939920][ T5930] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 199.949133][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.971660][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.981888][ T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 199.992556][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.008256][ T24] usb 5-1: config 0 descriptor?? [ 200.084199][ T5980] usb 1-1: Using ep0 maxpacket: 32 [ 200.091142][ T5980] usb 1-1: unable to get BOS descriptor or descriptor too short [ 200.100658][ T5980] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 200.114206][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 200.122580][ T5980] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 200.138219][ T5930] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 200.146492][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.156142][ T5930] usb 2-1: config 0 has no interface number 0 [ 200.166400][ T5980] usb 1-1: Product: syz [ 200.176570][ T7051] gspca_sn9c2028: read1 error -110 [ 200.182350][ T5980] usb 1-1: Manufacturer: syz [ 200.182490][ T7051] gspca_sn9c2028: read1 error -32 [ 200.192393][ T5980] usb 1-1: SerialNumber: syz [ 200.197642][ T5930] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 200.198058][ T7051] gspca_sn9c2028: read1 error -32 [ 200.207735][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.219960][ T7051] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 200.239921][ T5930] usb 2-1: Product: syz [ 200.249824][ T5930] usb 2-1: Manufacturer: syz [ 200.257483][ T5930] usb 2-1: SerialNumber: syz [ 200.269934][ T5930] usb 2-1: config 0 descriptor?? [ 200.281610][ T5930] smsc95xx v2.0.0 [ 200.289119][ T5930] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 200.307937][ T5930] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 200.435634][ T24] corsair 0003:1B1C:1B02.0011: unknown main item tag 0x0 [ 200.445284][ T24] corsair 0003:1B1C:1B02.0011: unknown main item tag 0x0 [ 200.452438][ T5980] usb 1-1: Limiting number of CPorts to U8_MAX [ 200.460042][ T24] corsair 0003:1B1C:1B02.0011: unknown main item tag 0x0 [ 200.467690][ T5980] usb 1-1: Not enough endpoints found in device, aborting! [ 200.477238][ T24] corsair 0003:1B1C:1B02.0011: unknown main item tag 0x0 [ 200.495979][ T24] corsair 0003:1B1C:1B02.0011: unknown main item tag 0x0 [ 200.514496][ T24] corsair 0003:1B1C:1B02.0011: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 200.633489][ T24] corsair 0003:1B1C:1B02.0011: Failed to get K90 initial state (error -71). [ 200.655552][ T5886] usb 1-1: USB disconnect, device number 18 [ 200.670571][ T24] usb 5-1: USB disconnect, device number 26 [ 200.694450][ T7051] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 200.854435][ T7051] usb 3-1: Using ep0 maxpacket: 16 [ 200.862474][ T7051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.874279][ T7051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.884561][ T7051] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 200.893748][ T7051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.904621][ T7051] usb 3-1: config 0 descriptor?? [ 201.052091][ T24] usb 2-1: USB disconnect, device number 16 [ 201.236033][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 201.236051][ T30] audit: type=1400 audit(1765124276.497:846): avc: denied { create } for pid=7669 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 201.286707][ T30] audit: type=1400 audit(1765124276.547:847): avc: denied { ioctl } for pid=7669 comm="syz.0.434" path="socket:[17231]" dev="sockfs" ino=17231 ioctlcmd=0x1252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 201.318943][ T7051] corsair 0003:1B1C:1B02.0012: unknown main item tag 0x0 [ 201.331681][ T7051] corsair 0003:1B1C:1B02.0012: unknown main item tag 0x0 [ 201.341571][ T7051] corsair 0003:1B1C:1B02.0012: unknown main item tag 0x0 [ 201.348895][ T7051] corsair 0003:1B1C:1B02.0012: unknown main item tag 0x0 [ 201.356326][ T7051] corsair 0003:1B1C:1B02.0012: unknown main item tag 0x0 [ 201.366959][ T7051] corsair 0003:1B1C:1B02.0012: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 201.434346][ T24] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 201.518760][ T7051] corsair 0003:1B1C:1B02.0012: Read invalid backlight brightness: 3e. [ 201.530933][ T5930] usb 4-1: USB disconnect, device number 19 [ 201.584453][ T6538] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 201.602977][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 201.620418][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 201.640375][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 201.653378][ T24] usb 5-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 201.662731][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.671264][ T24] usb 5-1: Product: syz [ 201.675659][ T24] usb 5-1: Manufacturer: syz [ 201.680685][ T24] usb 5-1: SerialNumber: syz [ 201.687689][ T7668] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 201.695122][ T7668] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 201.733063][ T7051] usb 3-1: USB disconnect, device number 15 [ 201.835586][ T6538] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 201.845743][ T6538] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 201.857368][ T6538] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 201.870271][ T6538] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 201.879629][ T6538] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.887874][ T6538] usb 1-1: Product: syz [ 201.892315][ T6538] usb 1-1: Manufacturer: syz [ 201.897625][ T30] audit: type=1400 audit(1765124277.157:848): avc: denied { add_name } for pid=7678 comm="syz.1.437" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.898001][ T7682] o2cb: This node has not been configured. [ 201.918543][ T30] audit: type=1400 audit(1765124277.157:849): avc: denied { create } for pid=7678 comm="syz.1.437" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 201.924064][ T7682] o2cb: Cluster check failed. Fix errors before retrying. [ 201.951255][ T7682] (syz.1.437,7682,1):user_dlm_register:674 ERROR: status = -22 [ 201.957632][ T30] audit: type=1400 audit(1765124277.157:850): avc: denied { associate } for pid=7678 comm="syz.1.437" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 201.959646][ T6538] usb 1-1: SerialNumber: syz [ 201.985123][ T7682] (syz.1.437,7682,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 202.001530][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 202.007957][ T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 202.016404][ T6538] usb 1-1: config 0 descriptor?? [ 202.021984][ T7674] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 202.024777][ T24] usb 5-1: USB disconnect, device number 27 [ 202.035353][ T7674] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 202.043707][ T6538] usb 1-1: ucan: probing device on interface #0 [ 202.054233][ T5930] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 202.224239][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 202.231027][ T5930] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.242897][ T5930] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.249576][ T5930] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 202.263301][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.273805][ T5930] usb 4-1: config 0 descriptor?? [ 202.554044][ T6538] usb 1-1: ucan: device reported invalid tx-fifo size [ 202.567560][ T6538] usb 1-1: ucan: probe failed; try to update the device firmware [ 202.623059][ T30] audit: type=1400 audit(1765124277.877:851): avc: denied { read write } for pid=7688 comm="syz.2.439" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 202.647759][ T30] audit: type=1400 audit(1765124277.877:852): avc: denied { open } for pid=7688 comm="syz.2.439" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 202.675757][ T30] audit: type=1400 audit(1765124277.877:853): avc: denied { ioctl } for pid=7688 comm="syz.2.439" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 202.702293][ T30] audit: type=1400 audit(1765124277.877:854): avc: denied { set_context_mgr } for pid=7688 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 202.804422][ T5930] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 203.582012][ T7051] usb 4-1: USB disconnect, device number 20 [ 203.635637][ T30] audit: type=1400 audit(1765124278.897:855): avc: denied { bind } for pid=7688 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 204.679912][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 204.691183][ T6538] usb 1-1: USB disconnect, device number 19 [ 204.714307][ T5980] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 204.920142][ T5980] usb 2-1: not running at top speed; connect to a high speed hub [ 204.933984][ T5980] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 204.948487][ T5980] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 204.982817][ T5980] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 204.993318][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.029899][ T5980] usb 2-1: Product: syz [ 205.053111][ T5980] usb 2-1: Manufacturer: syz [ 205.078468][ T5980] usb 2-1: SerialNumber: syz [ 205.145678][ T7700] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.164281][ T7700] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.449580][ T5980] usbhid 2-1:1.0: can't add hid device: -71 [ 205.469727][ T5980] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 205.539085][ T5980] usb 2-1: USB disconnect, device number 17 [ 205.856044][ T6538] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 205.993510][ T7723] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 206.014653][ T5980] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 206.047036][ T6538] usb 4-1: Using ep0 maxpacket: 16 [ 206.061049][ T6538] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 206.086605][ T6538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.107998][ T6538] usb 4-1: Product: syz [ 206.112234][ T6538] usb 4-1: Manufacturer: syz [ 206.126443][ T6538] usb 4-1: SerialNumber: syz [ 206.145391][ T6538] usb 4-1: config 0 descriptor?? [ 206.192336][ T5980] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 206.205980][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.224461][ T5980] usb 3-1: config 0 descriptor?? [ 206.236444][ T5980] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 206.254246][ T5929] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 206.264305][ T7051] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 206.363144][ T6538] usb 4-1: can't set first interface for hiFace device. [ 206.374740][ T6538] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 206.397617][ T6538] usb 4-1: USB disconnect, device number 21 [ 206.414304][ T7051] usb 5-1: Using ep0 maxpacket: 32 [ 206.421281][ T5929] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 206.446272][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 206.462207][ T7051] usb 5-1: unable to get BOS descriptor or descriptor too short [ 206.487139][ T5929] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 206.498895][ T7051] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 206.528668][ T7051] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 206.542364][ T5929] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 206.563580][ T7051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.577288][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.587547][ T7051] usb 5-1: Product: syz [ 206.591720][ T7051] usb 5-1: Manufacturer: syz [ 206.602043][ T5929] usb 2-1: Product: syz [ 206.612376][ T5929] usb 2-1: Manufacturer: syz [ 206.622170][ T7051] usb 5-1: SerialNumber: syz [ 206.628629][ T5929] usb 2-1: SerialNumber: syz [ 206.653134][ T5929] usb 2-1: config 0 descriptor?? [ 206.668689][ T7725] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 206.676889][ T7725] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 206.691113][ T5929] usb 2-1: ucan: probing device on interface #0 [ 206.754468][ T5980] gspca_sn9c2028: read1 error -110 [ 206.762976][ T5980] gspca_sn9c2028: read1 error -32 [ 206.769577][ T5980] gspca_sn9c2028: read1 error -32 [ 206.777906][ T5980] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -32 [ 206.843196][ T7051] usb 5-1: Limiting number of CPorts to U8_MAX [ 206.858947][ T7051] usb 5-1: Not enough endpoints found in device, aborting! [ 206.914213][ T6538] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 207.096739][ T6538] usb 4-1: Using ep0 maxpacket: 16 [ 207.109670][ T6538] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 207.119395][ T6538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.119435][ T5929] usb 2-1: ucan: device reported invalid tx-fifo size [ 207.134497][ T6538] usb 4-1: Product: syz [ 207.138656][ T6538] usb 4-1: Manufacturer: syz [ 207.159190][ T5929] usb 2-1: ucan: probe failed; try to update the device firmware [ 207.161218][ T6538] usb 4-1: SerialNumber: syz [ 207.198300][ T6538] usb 4-1: config 0 descriptor?? [ 207.415713][ T6538] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 207.470132][ T7722] netlink: 830 bytes leftover after parsing attributes in process `syz.4.445'. [ 207.480804][ T5929] usb 5-1: USB disconnect, device number 28 [ 207.735885][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 207.735905][ T30] audit: type=1400 audit(1765124282.927:857): avc: denied { create } for pid=7716 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.782007][ T30] audit: type=1400 audit(1765124282.927:858): avc: denied { connect } for pid=7716 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.802029][ T30] audit: type=1400 audit(1765124282.927:859): avc: denied { write } for pid=7716 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.831372][ T7734] o2cb: This node has not been configured. [ 207.837241][ T7734] o2cb: Cluster check failed. Fix errors before retrying. [ 207.844466][ T7734] (syz.0.451,7734,1):user_dlm_register:674 ERROR: status = -22 [ 207.852033][ T7734] (syz.0.451,7734,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 208.120537][ T30] audit: type=1400 audit(1765124283.377:860): avc: denied { mounton } for pid=7735 comm="syz.4.452" path="/proc/279/task" dev="proc" ino=18125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 208.598471][ T7051] usb 3-1: USB disconnect, device number 16 [ 209.109113][ T7687] usb 4-1: USB disconnect, device number 22 [ 209.157687][ T5929] usb 2-1: USB disconnect, device number 18 [ 209.782440][ T30] audit: type=1400 audit(1765124285.037:861): avc: denied { bind } for pid=7754 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 209.824564][ T7758] netlink: 128 bytes leftover after parsing attributes in process `syz.2.459'. [ 210.094208][ T7687] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 210.203084][ T30] audit: type=1400 audit(1765124285.457:862): avc: denied { append } for pid=7763 comm="syz.3.461" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.404872][ T7687] usb 5-1: Using ep0 maxpacket: 16 [ 210.434062][ T7687] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.454757][ T7687] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.461658][ T7687] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 210.471048][ T7687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.544824][ T30] audit: type=1400 audit(1765124285.507:863): avc: denied { ioctl } for pid=7763 comm="syz.3.461" path="/dev/vbi5" dev="devtmpfs" ino=979 ioctlcmd=0x562f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 210.553141][ T7687] usb 5-1: config 0 descriptor?? [ 210.974230][ T30] audit: type=1400 audit(1765124285.517:864): avc: denied { mount } for pid=7763 comm="syz.3.461" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 210.996850][ T30] audit: type=1400 audit(1765124285.527:865): avc: denied { unlink } for pid=7763 comm="syz.3.461" name="#3" dev="tmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 211.023903][ T7687] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 211.034295][ T30] audit: type=1400 audit(1765124285.527:866): avc: denied { mount } for pid=7763 comm="syz.3.461" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 211.300879][ T7782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.466'. [ 211.476561][ T7687] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 211.501474][ T89] usb 5-1: USB disconnect, device number 29 [ 211.650192][ T7687] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 212.462806][ T7687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.491940][ T7687] usb 3-1: config 0 descriptor?? [ 212.525183][ T7687] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 213.332425][ T7687] gspca_sn9c2028: read1 error -110 [ 213.337986][ T7687] gspca_sn9c2028: read1 error -32 [ 213.343333][ T7687] gspca_sn9c2028: read1 error -32 [ 213.366823][ T7687] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -32 [ 213.510889][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 213.510905][ T30] audit: type=1400 audit(1765124288.767:893): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 213.626005][ T30] audit: type=1400 audit(1765124288.857:894): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 213.769315][ T30] audit: type=1400 audit(1765124289.017:895): avc: denied { write } for pid=7789 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 214.008351][ T30] audit: type=1400 audit(1765124289.077:896): avc: denied { create } for pid=7789 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 214.028550][ T30] audit: type=1400 audit(1765124289.077:897): avc: denied { setopt } for pid=7789 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 214.049735][ T30] audit: type=1400 audit(1765124289.077:898): avc: denied { accept } for pid=7789 comm="syz.1.469" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 214.142555][ T7810] netlink: 'syz.3.474': attribute type 4 has an invalid length. [ 214.150300][ T7810] netlink: 17 bytes leftover after parsing attributes in process `syz.3.474'. [ 214.473177][ T30] audit: type=1400 audit(1765124289.377:899): avc: denied { create } for pid=7806 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.512689][ T30] audit: type=1400 audit(1765124289.397:900): avc: denied { getopt } for pid=7806 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.323155][ T7687] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 215.344342][ T7687] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 215.428724][ T30] audit: type=1400 audit(1765124290.527:901): avc: denied { map } for pid=7812 comm="syz.4.475" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 215.474367][ T30] audit: type=1400 audit(1765124290.527:902): avc: denied { execute } for pid=7812 comm="syz.4.475" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 215.726525][ T5886] usb 3-1: USB disconnect, device number 17 [ 215.757855][ T7824] fuse: Unknown parameter 'ˆ' [ 215.834909][ T7828] syz.2.479 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 217.201642][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 217.314362][ T89] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 217.498272][ T89] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 217.580868][ T89] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 217.688464][ T89] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 217.783963][ T89] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.814542][ T89] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 217.839760][ T89] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.333229][ T7834] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 218.354916][ T89] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.362260][ T89] usb 5-1: invalid MIDI out EP 0 [ 218.697606][ T89] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 218.730931][ T89] usb 5-1: USB disconnect, device number 30 [ 219.126130][ T7873] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 219.221183][ T7878] xt_hashlimit: size too large, truncated to 1048576 [ 219.404281][ T89] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 219.474748][ T7654] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 219.575651][ T89] usb 1-1: Using ep0 maxpacket: 32 [ 219.583272][ T89] usb 1-1: unable to get BOS descriptor or descriptor too short [ 219.604371][ T89] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 219.629028][ T7654] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 219.638232][ T7654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.644861][ T89] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 219.657932][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.664562][ T7654] usb 3-1: config 0 descriptor?? [ 219.682374][ T89] usb 1-1: Product: syz [ 219.688605][ T7654] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 219.704624][ T89] usb 1-1: Manufacturer: syz [ 219.722177][ T89] usb 1-1: SerialNumber: syz [ 219.961014][ T89] usb 1-1: Limiting number of CPorts to U8_MAX [ 219.974699][ T89] usb 1-1: Not enough endpoints found in device, aborting! [ 220.206573][ T7654] gspca_sn9c2028: read1 error -110 [ 220.212190][ T7654] gspca_sn9c2028: read1 error -32 [ 220.217569][ T7654] gspca_sn9c2028: read1 error -32 [ 220.222621][ T7654] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -32 [ 220.422746][ T7871] netlink: 830 bytes leftover after parsing attributes in process `syz.0.490'. [ 220.438945][ T7654] usb 1-1: USB disconnect, device number 20 [ 220.581351][ T7884] mkiss: ax0: crc mode is auto. [ 220.588318][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 220.588329][ T30] audit: type=1400 audit(1765124295.837:970): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 220.635251][ T30] audit: type=1400 audit(1765124295.877:971): avc: denied { search } for pid=5482 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.668181][ T30] audit: type=1400 audit(1765124295.877:972): avc: denied { search } for pid=5482 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.690274][ T30] audit: type=1400 audit(1765124295.877:973): avc: denied { search } for pid=5482 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.713250][ T30] audit: type=1400 audit(1765124295.877:974): avc: denied { read } for pid=5482 comm="dhcpcd" name="n101" dev="tmpfs" ino=4549 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 220.740870][ T30] audit: type=1400 audit(1765124295.877:975): avc: denied { open } for pid=5482 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=4549 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 220.765772][ T89] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 220.775201][ T30] audit: type=1400 audit(1765124295.877:976): avc: denied { getattr } for pid=5482 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=4549 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 220.878591][ T7889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.936595][ T7889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.944181][ T89] usb 5-1: Using ep0 maxpacket: 16 [ 220.993024][ T89] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.008374][ T89] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.027319][ T89] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 221.084246][ T89] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.148042][ T89] usb 5-1: config 0 descriptor?? [ 221.630323][ T89] usbhid 5-1:0.0: can't add hid device: -71 [ 221.659405][ T89] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 221.752955][ T89] usb 5-1: USB disconnect, device number 31 [ 222.206199][ T89] usb 3-1: USB disconnect, device number 18 [ 222.277995][ T30] audit: type=1400 audit(1765124297.537:977): avc: denied { map } for pid=7901 comm="syz.0.499" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 222.377382][ T7687] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 222.514255][ T7911] FAULT_INJECTION: forcing a failure. [ 222.514255][ T7911] name failslab, interval 1, probability 0, space 0, times 0 [ 222.526941][ T30] audit: type=1400 audit(1765124297.767:978): avc: denied { read } for pid=7904 comm="syz.0.503" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 222.549785][ T7911] CPU: 1 UID: 0 PID: 7911 Comm: syz.0.503 Not tainted syzkaller #0 PREEMPT(full) [ 222.549807][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.549816][ T7911] Call Trace: [ 222.549822][ T7911] [ 222.549828][ T7911] dump_stack_lvl+0x16c/0x1f0 [ 222.549858][ T7911] should_fail_ex+0x512/0x640 [ 222.549877][ T7911] ? kmem_cache_alloc_noprof+0x62/0x770 [ 222.549898][ T7911] should_failslab+0xc2/0x120 [ 222.549928][ T7911] kmem_cache_alloc_noprof+0x83/0x770 [ 222.549946][ T7911] ? sk_prot_alloc+0x60/0x2a0 [ 222.549977][ T7911] ? sk_prot_alloc+0x60/0x2a0 [ 222.550001][ T7911] ? find_held_lock+0x2b/0x80 [ 222.550027][ T7911] sk_prot_alloc+0x60/0x2a0 [ 222.550055][ T7911] sk_alloc+0x36/0xe30 [ 222.550076][ T7911] inet_create+0x3a1/0x1040 [ 222.550099][ T7911] ? inet_create+0x93/0x1040 [ 222.550123][ T7911] __sock_create+0x339/0x8a0 [ 222.550155][ T7911] __sys_socket+0x14d/0x260 [ 222.550170][ T7911] ? fput+0x70/0xf0 [ 222.550196][ T7911] ? __pfx___sys_socket+0x10/0x10 [ 222.550211][ T7911] ? ksys_write+0x1ac/0x250 [ 222.550232][ T7911] ? __pfx_ksys_write+0x10/0x10 [ 222.550259][ T7911] __x64_sys_socket+0x72/0xb0 [ 222.550275][ T7911] ? lockdep_hardirqs_on+0x7c/0x110 [ 222.550302][ T7911] do_syscall_64+0xcd/0xf80 [ 222.550331][ T7911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.550349][ T7911] RIP: 0033:0x7fbced98f749 [ 222.550364][ T7911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.550382][ T7911] RSP: 002b:00007fbcebbb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 222.550400][ T7911] RAX: ffffffffffffffda RBX: 00007fbcedbe6180 RCX: 00007fbced98f749 [ 222.550412][ T7911] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000002 [ 222.550423][ T7911] RBP: 00007fbcebbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 222.550434][ T7911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.550445][ T7911] R13: 00007fbcedbe6218 R14: 00007fbcedbe6180 R15: 00007ffd79f4f578 [ 222.550469][ T7911] [ 222.550698][ T30] audit: type=1400 audit(1765124297.767:979): avc: denied { open } for pid=7904 comm="syz.0.503" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 222.614306][ T7913] netlink: 'syz.4.501': attribute type 21 has an invalid length. [ 222.805359][ T7908] xt_hashlimit: size too large, truncated to 1048576 [ 222.832418][ T7687] usb 4-1: not running at top speed; connect to a high speed hub [ 222.902277][ T7687] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 222.927625][ T7687] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 222.977939][ T7687] usb 4-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 222.987110][ T7687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.995526][ T7687] usb 4-1: Product: syz [ 223.008556][ T7687] usb 4-1: Manufacturer: syz [ 223.015537][ T7687] usb 4-1: SerialNumber: syz [ 223.035743][ T7898] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.054823][ T7898] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.421524][ T7687] usbhid 4-1:1.0: can't add hid device: -71 [ 224.015755][ T7687] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 224.047919][ T7687] usb 4-1: USB disconnect, device number 23 [ 224.490091][ T7933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.533737][ T7933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.754214][ T5886] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 226.924612][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 226.935945][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.956645][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.998766][ T5886] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 227.024185][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.045305][ T5886] usb 3-1: config 0 descriptor?? [ 227.458972][ T5886] usbhid 3-1:0.0: can't add hid device: -71 [ 227.480813][ T5886] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 227.512362][ T5886] usb 3-1: USB disconnect, device number 19 [ 227.556967][ T30] audit: type=1400 audit(1765124302.817:980): avc: denied { setopt } for pid=7971 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.749931][ T30] audit: type=1400 audit(1765124303.007:981): avc: denied { read open } for pid=7975 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.813360][ T30] audit: type=1400 audit(1765124303.037:982): avc: denied { getattr } for pid=7975 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.044785][ T7981] netlink: 40 bytes leftover after parsing attributes in process `syz.3.520'. [ 228.545769][ T7989] batman_adv: batadv0: Adding interface: gretap1 [ 228.552122][ T7989] batman_adv: batadv0: Interface activated: gretap1 [ 228.929784][ T7993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.039773][ T7993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.162596][ T8001] FAULT_INJECTION: forcing a failure. [ 229.162596][ T8001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.175940][ T8001] CPU: 0 UID: 0 PID: 8001 Comm: syz.4.525 Not tainted syzkaller #0 PREEMPT(full) [ 229.175964][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.175973][ T8001] Call Trace: [ 229.175978][ T8001] [ 229.175984][ T8001] dump_stack_lvl+0x16c/0x1f0 [ 229.176013][ T8001] should_fail_ex+0x512/0x640 [ 229.176035][ T8001] _copy_from_user+0x2e/0xd0 [ 229.176054][ T8001] get_user_ifreq+0xf1/0x250 [ 229.176078][ T8001] sock_do_ioctl+0x16b/0x280 [ 229.176102][ T8001] ? __pfx_sock_do_ioctl+0x10/0x10 [ 229.176124][ T8001] ? io_schedule_timeout+0xf0/0x150 [ 229.176156][ T8001] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 229.176174][ T8001] ? irqentry_exit+0xe1/0x8c0 [ 229.176199][ T8001] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 229.176231][ T8001] sock_ioctl+0x227/0x6b0 [ 229.176247][ T8001] ? __pfx_sock_ioctl+0x10/0x10 [ 229.176267][ T8001] ? selinux_file_ioctl+0x180/0x270 [ 229.176292][ T8001] ? selinux_file_ioctl+0xb4/0x270 [ 229.176319][ T8001] ? __pfx_sock_ioctl+0x10/0x10 [ 229.176337][ T8001] __x64_sys_ioctl+0x18e/0x210 [ 229.176357][ T8001] do_syscall_64+0xcd/0xf80 [ 229.176384][ T8001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.176401][ T8001] RIP: 0033:0x7fd77358f749 [ 229.176414][ T8001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.176430][ T8001] RSP: 002b:00007fd774442038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.176447][ T8001] RAX: ffffffffffffffda RBX: 00007fd7737e6090 RCX: 00007fd77358f749 [ 229.176457][ T8001] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000006 [ 229.176468][ T8001] RBP: 00007fd774442090 R08: 0000000000000000 R09: 0000000000000000 [ 229.176478][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.176488][ T8001] R13: 00007fd7737e6128 R14: 00007fd7737e6090 R15: 00007ffefc6a2348 [ 229.176509][ T8001] [ 229.550316][ T30] audit: type=1400 audit(1765124304.717:983): avc: denied { create } for pid=7997 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 229.783206][ T30] audit: type=1400 audit(1765124305.037:984): avc: denied { add_name } for pid=7974 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.870841][ T30] audit: type=1400 audit(1765124305.067:985): avc: denied { create } for pid=7974 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 229.915062][ T8009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.527'. [ 229.954018][ T30] audit: type=1400 audit(1765124305.067:986): avc: denied { write } for pid=7974 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=4633 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 230.083712][ T30] audit: type=1400 audit(1765124305.067:987): avc: denied { append } for pid=7974 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=4633 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 230.134220][ T30] audit: type=1400 audit(1765124305.327:988): avc: denied { remove_name } for pid=8010 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=4633 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.162812][ T30] audit: type=1400 audit(1765124305.327:989): avc: denied { unlink } for pid=8010 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=4633 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 335.538216][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 335.545195][ C0] rcu: 1-...!: (1 GPs behind) idle=ab44/1/0x4000000000000000 softirq=28408/28409 fqs=0 [ 335.555546][ C0] rcu: (detected by 0, t=10502 jiffies, g=24221, q=384 ncpus=2) [ 335.563353][ C0] Sending NMI from CPU 0 to CPUs 1: [ 335.563380][ C1] NMI backtrace for cpu 1 [ 335.563392][ C1] CPU: 1 UID: 0 PID: 8039 Comm: sed Not tainted syzkaller #0 PREEMPT(full) [ 335.563408][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.563417][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70 [ 335.563439][ C1] Code: 82 48 16 00 00 83 f8 02 75 20 48 8b 8a 50 16 00 00 8b 92 4c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 c5 3e bb 09 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 335.563453][ C1] RSP: 0018:ffffc90000a08e00 EFLAGS: 00000046 [ 335.563465][ C1] RAX: 0000000000010001 RBX: ffff888025aa1300 RCX: ffffffff81aac267 [ 335.563475][ C1] RDX: ffff888026b824c0 RSI: ffffffff81aac275 RDI: 0000000000000005 [ 335.563484][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 000000000000001f [ 335.563492][ C1] R10: 0000000000000001 R11: ffff888026b82ff0 R12: 0000000000000000 [ 335.563501][ C1] R13: 0000000000000000 R14: ffff8880b8528440 R15: 0000000000000000 [ 335.563510][ C1] FS: 0000000000000000(0000) GS:ffff888124a09000(0000) knlGS:0000000000000000 [ 335.563525][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.563535][ C1] CR2: 00007ffdf38acf30 CR3: 0000000047146000 CR4: 00000000003526f0 [ 335.563544][ C1] Call Trace: [ 335.563549][ C1] [ 335.563554][ C1] __remove_hrtimer+0xf5/0x290 [ 335.563577][ C1] __hrtimer_run_queues+0x55f/0xc40 [ 335.563600][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 335.563619][ C1] ? read_tsc+0x9/0x20 [ 335.563642][ C1] hrtimer_interrupt+0x397/0x8e0 [ 335.563659][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 335.563677][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 335.563698][ C1] [ 335.563702][ C1] [ 335.563707][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 335.563722][ C1] RIP: 0010:lock_release+0x183/0x2d0 [ 335.563738][ C1] Code: 0f c1 05 58 c3 17 12 83 f8 01 0f 85 03 01 00 00 9c 58 f6 c4 02 0f 85 ee 00 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 ed 7b 17 12 0f 85 32 01 00 00 48 83 c4 18 5b 41 5c 41 [ 335.563752][ C1] RSP: 0018:ffffc90003c0f9f0 EFLAGS: 00000206 [ 335.563763][ C1] RAX: 837df38e0e4d6600 RBX: ffffffff8e3c9620 RCX: ffffc90003c0f9fc [ 335.563772][ C1] RDX: 0000000000000000 RSI: ffffffff8da9be65 RDI: ffffffff8bf23a80 [ 335.563781][ C1] RBP: 0000000000004002 R08: 0000000000000001 R09: 0000000000000000 [ 335.563790][ C1] R10: 0000000000000001 R11: 0000000000000005 R12: ffffffff845dd1b7 [ 335.563799][ C1] R13: 0000000000000206 R14: ffff888026b824c0 R15: 0000000000000001 [ 335.563810][ C1] ? avc_has_perm_noaudit+0x117/0x3b0 [ 335.563832][ C1] avc_has_perm_noaudit+0x11c/0x3b0 [ 335.563850][ C1] avc_has_perm+0xbe/0x1f0 [ 335.563866][ C1] ? __pfx_avc_has_perm+0x10/0x10 [ 335.563882][ C1] ? find_held_lock+0x2b/0x80 [ 335.563903][ C1] ? avc_has_perm_noaudit+0x117/0x3b0 [ 335.563920][ C1] inode_has_perm+0x166/0x1d0 [ 335.563937][ C1] file_has_perm+0x2e2/0x350 [ 335.563954][ C1] ? __pfx_file_has_perm+0x10/0x10 [ 335.563974][ C1] file_map_prot_check+0x24e/0x360 [ 335.563992][ C1] selinux_mmap_file+0x143/0x1b0 [ 335.564009][ C1] ? __pfx_selinux_mmap_file+0x10/0x10 [ 335.564030][ C1] security_mmap_file+0x82a/0x990 [ 335.564044][ C1] vm_mmap_pgoff+0xec/0x470 [ 335.564061][ C1] ? find_held_lock+0x2b/0x80 [ 335.564079][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 335.564102][ C1] ? __fget_files+0x20e/0x3c0 [ 335.564122][ C1] ksys_mmap_pgoff+0x32c/0x5c0 [ 335.564139][ C1] ? __pfx_ksys_read+0x10/0x10 [ 335.564156][ C1] __x64_sys_mmap+0x125/0x190 [ 335.564172][ C1] do_syscall_64+0xcd/0xf80 [ 335.564192][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.564206][ C1] RIP: 0033:0x7f2847292242 [ 335.564217][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 335.564230][ C1] RSP: 002b:00007ffdf38ac5d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 335.564242][ C1] RAX: ffffffffffffffda RBX: 00007f28471b4000 RCX: 00007f2847292242 [ 335.564251][ C1] RDX: 0000000000000005 RSI: 0000000000086000 RDI: 00007f28471b4000 [ 335.564260][ C1] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000010000 [ 335.564268][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffdf38ac628 [ 335.564277][ C1] R13: 00007f28472660c0 R14: 00007ffdf38ac9e0 R15: 00000fffbe7158be [ 335.564292][ C1] [ 335.564375][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g24221 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 336.006261][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 336.016221][ C0] rcu: RCU grace-period kthread stack dump: [ 336.022093][ C0] task:rcu_preempt state:R running task stack:28408 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 336.035583][ C0] Call Trace: [ 336.038854][ C0] [ 336.041779][ C0] ? __schedule+0x10b9/0x6150 [ 336.046460][ C0] __schedule+0x1139/0x6150 [ 336.050967][ C0] ? __lock_acquire+0x436/0x2890 [ 336.055908][ C0] ? __mod_timer+0x8f2/0xd30 [ 336.060504][ C0] ? __pfx___schedule+0x10/0x10 [ 336.065353][ C0] ? find_held_lock+0x2b/0x80 [ 336.070031][ C0] ? schedule+0x2d7/0x3a0 [ 336.074364][ C0] schedule+0xe7/0x3a0 [ 336.078440][ C0] schedule_timeout+0x123/0x290 [ 336.083289][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 336.088657][ C0] ? __pfx_process_timeout+0x10/0x10 [ 336.093937][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 336.099744][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 336.105202][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 336.109969][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 336.115252][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 336.120455][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 336.125388][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 336.130246][ C0] rcu_gp_kthread+0x26d/0x380 [ 336.134921][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 336.140131][ C0] ? rcu_is_watching+0x12/0xc0 [ 336.144886][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 336.150103][ C0] ? __kthread_parkme+0x19e/0x250 [ 336.155122][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 336.160319][ C0] kthread+0x3c5/0x780 [ 336.164390][ C0] ? __pfx_kthread+0x10/0x10 [ 336.168978][ C0] ? rcu_is_watching+0x12/0xc0 [ 336.173749][ C0] ? __pfx_kthread+0x10/0x10 [ 336.178338][ C0] ret_from_fork+0x983/0xb10 [ 336.182930][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 336.188045][ C0] ? __switch_to+0x7af/0x10d0 [ 336.192718][ C0] ? __pfx_kthread+0x10/0x10 [ 336.197308][ C0] ret_from_fork_asm+0x1a/0x30 [ 336.202088][ C0] [ 336.205095][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 336.211406][ C0] CPU: 0 UID: 0 PID: 8035 Comm: syz.4.532 Not tainted syzkaller #0 PREEMPT(full) [ 336.220594][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.230645][ C0] RIP: 0010:smp_call_function_many_cond+0xdf6/0x15e0 [ 336.237319][ C0] Code: 80 55 0c 00 85 ed 74 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 b5 5a 0c 00 f3 90 41 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 b6 [ 336.256924][ C0] RSP: 0018:ffffc900050a7720 EFLAGS: 00000202 [ 336.262985][ C0] RAX: 0000000000000002 RBX: ffff8880b8540cc0 RCX: ffffffff81b289e1 [ 336.270951][ C0] RDX: ffff888028674980 RSI: 0000000000000000 RDI: 0000000000000005 [ 336.278914][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 336.286881][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 336.294847][ C0] R13: ffffed10170a8199 R14: 0000000000000001 R15: 0000000000000001 [ 336.302811][ C0] FS: 00007fd7744636c0(0000) GS:ffff888124909000(0000) knlGS:0000000000000000 [ 336.311738][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.318314][ C0] CR2: 000000110c2a2e8c CR3: 0000000048cd9000 CR4: 00000000003526f0 [ 336.326288][ C0] Call Trace: [ 336.329559][ C0] [ 336.332483][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 336.337689][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 336.344017][ C0] ? ldt_dup_context+0x1a2/0x300 [ 336.348958][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 336.354154][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 336.359264][ C0] flush_tlb_mm_range+0x2f0/0x12c0 [ 336.364371][ C0] ? find_held_lock+0x2b/0x80 [ 336.369050][ C0] ? dup_mmap+0xcea/0x20e0 [ 336.373468][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 336.379008][ C0] ? up_write+0x282/0x4e0 [ 336.383346][ C0] dup_mmap+0xd04/0x20e0 [ 336.387597][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 336.392289][ C0] copy_process+0x3b9f/0x7430 [ 336.396972][ C0] ? __pfx___futex_wait+0x10/0x10 [ 336.401989][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 336.407806][ C0] ? __pfx_copy_process+0x10/0x10 [ 336.412833][ C0] ? find_held_lock+0x2b/0x80 [ 336.417512][ C0] ? futex_private_hash_put+0x160/0x1b0 [ 336.423061][ C0] kernel_clone+0xfc/0x910 [ 336.427469][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 336.432496][ C0] __do_sys_clone+0xce/0x120 [ 336.437077][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 336.442264][ C0] ? count_memcg_events+0x122/0x290 [ 336.447469][ C0] ? __pfx___do_sys_rseq+0x10/0x10 [ 336.452592][ C0] do_syscall_64+0xcd/0xf80 [ 336.457101][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.462986][ C0] RIP: 0033:0x7fd77358f749 [ 336.467393][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.486995][ C0] RSP: 002b:00007fd774462fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 336.495406][ C0] RAX: ffffffffffffffda RBX: 00007fd7737e5fa0 RCX: 00007fd77358f749 [ 336.503370][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.511336][ C0] RBP: 00007fd773613f91 R08: 0000000000000000 R09: 0000000000000000 [ 336.519304][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.527266][ C0] R13: 00007fd7737e6038 R14: 00007fd7737e5fa0 R15: 00007ffefc6a2348 [ 336.535243][ C0]