last executing test programs: 12.386293241s ago: executing program 0 (id=2132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f0000000000000019d3000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) socket(0x21, 0x3, 0xdf8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000001880)=[{{&(0x7f0000000380)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000400)=""/75, 0x4b}], 0x1}, 0x4}, {{&(0x7f0000000480)=@pppol2tp, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001900)=""/84, 0x54}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000600)=""/4087, 0xff7}, {&(0x7f0000001600)=""/111, 0x6f}, {&(0x7f0000001680)=""/248, 0xf8}, {&(0x7f0000001980)=""/142, 0x8e}, {&(0x7f0000000500)=""/100, 0x64}, {&(0x7f00000002c0)=""/55, 0x37}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/4, 0x4}], 0xa, &(0x7f0000001800)=""/83, 0x53}, 0x9}], 0x2, 0x40010021, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x24, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x0, 0xd3}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) prctl$PR_SET_SECUREBITS(0x1c, 0x20) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) 11.177526386s ago: executing program 0 (id=2136): stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0xee00) socket(0x18, 0x800, 0x7e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001900010000000000fbdbff251d010900500012802a028080080027000e0000003d004180e7227ae5c252f37c41df2a84b5cdecbc7e272fbe572d6a76e2253ab30bd45f00466ac17605d18985dffc132cff49dc226eda6ce3c24e45f03a698e04"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff9587896b0d580f501aaae98c90a47ff034040a931e1d63bfa9073b9afe36d25a42acb9ea81a67c473b908a2fcb0000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_end\x00', r4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000005c0)) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket(0x2b, 0x800, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 11.001519859s ago: executing program 2 (id=2139): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89b, 0xc000, 0x7, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x80, 0x1, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.587546877s ago: executing program 2 (id=2140): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000001c0)={&(0x7f0000000000)=[{0x1, 0x8000, 0x0, 0x0}, {0x1, 0xda01, 0x0, 0x0}], 0x2}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x5f, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x8, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r4}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) userfaultfd(0x80001) sched_getattr(0x0, &(0x7f0000000280)={0x38}, 0x38, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.227816244s ago: executing program 0 (id=2147): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x7, 0x0, '\x00', {0x1000, 0xad4, 0x8, 0x8, 0x0, r1, 0x5000, '\x00', 0x1, 0x7, 0xfffffffc, 0x3, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0xc}, {0x8, 0xad}, 0x4, 0x8001, 0x4, 0x3}}}}) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}]}, 0x1c}}, 0x0) r4 = getegid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{&(0x7f0000000000)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="0b89b2c1318d431ae79ab7c18c587d9a2fcbdbb3564a85e0fd85a6cb7435a2478f6ef7e37573a3224c6086a70a82b536c1faceb8e32f4b91a8d6294b84ac9c8af051cadca128257b3acb2dc398b4374097dc57c2c3d77a6119698ce325", 0x5d}], 0x1, &(0x7f0000000740)=[@rights={{0x24, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}], 0xd0, 0x1}}, {{&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000940)="d1037e0f68bc1bd29f28e0b5bfbbda80ffb2b9e8e098c2d392c81bf3b0f61a954ab4b3f4caa8d8b21d6f7832891b9e67c963deb3c340dd9f2483f4b61a6a63024524306f8b398bcd2c31aea3b73121f3191c9ceadcadecafffda63f1ee9ef6fe8b883cc2b01ae3abd0465bbdd7c3a652525d0983f26bad539cc74321ef3391e5ee408645dc419727484919462033e8b58b38e0e433337389f2604c926a6081", 0x9f}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="a5600000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0xc0}}], 0x2, 0x4810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ecryptfs\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x23, 0x4, 0x7) connect$inet(r9, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route_sched(r8, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x16c, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x158, 0x1, [@m_gact={0x154, 0x20, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7fffffff, 0x5, 0x7, 0x4, 0xf2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x211b, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0xea0, 0x10, 0x7, 0x3, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x101, 0x45d, 0xfffffffffffffff6, 0x40, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1510, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x7, 0x24e0}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xaa9, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xb42, 0x5, 0xffffffff, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffff9, 0x0, 0x1, 0xfffffffd, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x172, 0x20000000}}]}, {0x71, 0x6, "887b38210eba15b0e5c38d8cecb31a00000000963c6f27255f67fa90e66c17a876cda7b04ce79753e15b3ab2713a19e4ce3bdb4a0695d7e58b867cedbc431eade04c8ccc135272f973cb413fdc30b546ce10905a0063309f2201b6be9d323bd9977345f6e1d8b82629f36d9f8d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) syz_usb_connect(0x2, 0x48, &(0x7f0000000140)=ANY=[@ANYBLOB="120100034c0bae10e908b3bdff7c0102030109023600010801a00109040b0100020982c0052406000105240004000d240f0109000000630e090003062412"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 7.49574957s ago: executing program 3 (id=2149): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x363801, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)=ANY=[@ANYBLOB="13000000190037d028bd7000fedbdf251d01020015000400030000e004000000c0bc6bbcf086168b04000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8045}, 0x40000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs(r2, &(0x7f00000001c0)='smaps\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x1, 0x0, 0x2, 'syz0\x00', 0x1}, 0x6, 0x100, 0x5, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r3 = gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r4, &(0x7f0000000080)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r8, 0xaea2, 0x3) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000006c0)="baa100b06eeef20fc22c00660f5468e20fc71d6766c7442400249f00006766c74424020e0000006766c744240600000000670f011c24671ba53e9a000066b80500000066b938c19a780f01c1dbc2b88a008ec82e670f06", 0x57}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0xc000680) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') syz_clone(0xb41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) 7.237354702s ago: executing program 3 (id=2150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xf567, 0x100, 0x0, 0x34d}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 6.305118227s ago: executing program 3 (id=2151): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0xfffffffffffffde2}, 0x1, 0x0, 0x0, 0x240048d1}, 0x40000) 6.259045579s ago: executing program 2 (id=2153): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402002c68e01000000010902120001000000000904"], 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x4b, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001600)={'syztnl1\x00', &(0x7f0000001540)={'gre0\x00', 0x0, 0x1, 0x1, 0x7, 0x1c9a, {{0x24, 0x4, 0x1, 0x8, 0x90, 0x66, 0x0, 0x56, 0x29, 0x0, @rand_addr=0x2, @multicast2, {[@lsrr={0x83, 0xf, 0x8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}, @cipso={0x86, 0x19, 0x0, [{0x1, 0xe, "e66b37fb7f4d854c4898a0cf"}, {0x1, 0x5, "ebab96"}]}, @lsrr={0x83, 0x27, 0xe3, [@remote, @local, @dev={0xac, 0x14, 0x14, 0x42}, @private=0xa010102, @local, @loopback, @rand_addr=0x64010101, @broadcast, @local]}, @cipso={0x86, 0x19, 0x0, [{0x6, 0xf, "99b5e1257eafb92b3998346671"}, {0x1, 0x4, ']B'}]}, @ssrr={0x89, 0x3, 0x45}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xb6, 0x3, 0x3, [{@broadcast, 0x6}]}]}}}}}) sendmmsg$sock(r1, &(0x7f0000002a80)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000540)="63fca8f2949eef374ab47579f5cda6c78b5c4d3f71be338ed2960f007ba8d057e283c534f5a2e638ae139c95a80700e0da2c35fd6a590a764bc88c26a1b1e4043a4b32c18cebf7936e155824aea6b129827dc85f5b58d149f996c91289770f3a59a6a4d2526800de714ea463bf3cc1b2debc4b34e42e66c8025b4916cd99312f5f776e79319f966b8232eea95f80db21af65b8ccb9c0ba9e7040fdc3cc876421ac961fceaa4de9a59c773ee99665db01ede9b89b665bb50bf3458ecbb1fbebb1d9693789a8edb85c534d0bde4668627bd61cd4037547b5908299fb09f7523dc86b7d279ab1a873496fcda46c18a2ca2c9f21f684ce477e07674a818e7b53d03e72865ee1e93ac7d5de504f74e22d6f6ab2c1afd71812fbc0ac7900a99cef1eff8c42c3bf619deeffe2af084a600cf90e837f1925bb71a583a8ea0d4b69f26636944bb7ed905b32d03dfe28ec5d238ad4b58efbee9dc64c11d2dc4050141844c0fe5ad86cd0fe0a83d9808ccc2670c15a08f6f212fb21917bbd51a9a96653115aaabbc59a8439e22f14b5bd15ad7ae026f8edea3f7b40d5d0067a9b7d71dd8cec0a815fbbdae9e66a4b289554e4af85b20f899beee0e775a2a116414f30af68d404cbeec6299fdc1af01d329516e36eccc3d712805fd288373815cfbe92412f751df115c1430f3d250816e67540b26c7578441d171ae122f055e7b62f9660d53974fe27a3860e7de17eff64c6ac5431947145f736bad380399f5d407023b8ba4a578af706d0c5c9e7bffd6afdd4f3b5f718cd39635806cd486d90ae51561c77b0cc56d2a5d031fb2327ce6b334883d671221ee6bb7b0cd09e62576a4c77381eedd15d808f8d8cfe96c64855361dbbe0cf1c4c9a492b038cdd1ae8810875f6c7a3decd2ae7b4e259408e5ae651b16634ec86e0b82ff48eb02df7a1dc5ec6917f1a722baf772b72d444e65f9f492323070f69d3e0bb14ab32e000153a1fccf4e9df58b35bee56e0c5e7f04679008cf16246915000d3f59068de753934ff2f4812cd433151431ff63e0b6a27bf2e3f6d63dedbd6bece82fdadad6606d9b3fca4d4190b9813c7640486bf6893d14d947261c3232c998dfe3c1971260dcb16c197060afea8ce9f247330d486aa3c87d8863490672c8d6c4e85554c81ba06615011bb20743f67eb0ccc503d1612fcc7f4214916d1c2daa1ed4f38636da85ce78619c149f880ffd0f543e2aeeeb1cb4c79e7a3d0ae813499a2884dab10c6f1f2253cba6c12df0cfbe719036f8c2232e2146f054b22f8f2e6585a66022a9ca54f43179dc8373ece498b265fed2c208d3a81506634a86d1a4d3e7783a62026afb36268e3066a4140b1ba1e2f0b618ce1608f8d4ef2d64bc6560fe85b823999f0df539d4b0c0256ea850dd7c07d94324ee17a0f6e0bbb2e71cc83f4c7448505a4300ccc596e5f3b9198b76967f9d5fc5bbe628256e3a2a787f3afdaa728d5a9e301fcfc46658f11f2c32ddb56098f59a3e2fa2f64c9e210282e72acaa69e95569cec807fb51827cedd17c8baa5e6367304614bd863465915682cc2fbca525cd419227ca5bbd15f86561af6b30b763d26f083bb8ad328eefb7baa4767c810c2f21ef043332fb5ba588045e6b6f0ca87ac4c5e6da33d2394b436402b56270ff3b7489fe8b1fd1a1f59dc317547e8dd096cfedd21a89c0e71efa49555cc4c144976d0573a03d389129fca7da3c0e4aef765dcc6f42380052048b6bb546fc49f4e394575757312dbf00337b396928eadd1feba2468789d2edbb85de14bd05b71e71901573f929e0376aa69c3f5839ada3244fc85314dbc34140f7a543e949680e101b27b24c61af97fd95ded374c2976f4faa6ff25f43d8b58fe5e85396b9cb43c358d22a0dfda8fb33534824b0b81590a984a83c2ce6d727404a6fcf2a3811643d1a2cebe9d692cd7859ba8753ef2438f61ad605888d7ee9af85649dc9dd57c52ee930a042c2acda5d8edb2dd54a022b48b6f97539c49927e812d68ab4b8f1c7aedb14d7a2fba712a1374f3052f27882fc0268aa48a2f0937c978b1250b8ec352c7d560794648141e6eeef8c370ab37210e3e6ed1671ecb9c6c29f2f28e71e10e068820929af4adf5e007285b8b6896b27c5a9c65ca25325b2e68bd69f6b5386826f2fb9e450c011bb04110573ab31d8acab1265d92dd24e51b7e414c3ff59d453d8b130371a450581f1b1c473f4abf4f071abb4013e37fa5e54a4c62ff7fb315f2ffe0c3e6c452ea014f2bf13134efe91a4d2e29819b8d76c00d73debf53d1a35d99074969a4512b9d801d837230e0dbffb7dae42cd7839546c08952e7cc5ce1bf817d34ced1c90dc72b23ff3d26cb06810e360040ba5bc038b0188d83e345895177f01718a461515ba8f6134121b58f7f5f0d25dd660396824047fecf71745c48f2a320605b7e8f9dd46f642081bbea434b90eb5c6f370f8a0936509b917e29400e81a1f11cc9142cb210a9f358f98d5a64e5d3cfce89623c30227e728b5c4e0b0c435e52e4449c375fee0542d3be95670424a43a537de0b055a6dc934f0c845b21eb3a312bffb4af99221220deecf312047f469376d4a90eda7f8c0bce98e8947c902e62efe382dd98e0def1ad41b1d01768696105900b47e28afc5cb32bf8ea617cb0b7950227e093f2f769899626afd2da55059dc86095f1ceb229f321f28e7aec910f16476ce32407d57c5ec15788beb761724a3ac75c4c649f9bf1630083b3bf15ead07d90f4bb0b240edcedddc3e53abe748b286608489b99a4577587324e0d9a8efa3d99323ab586e11300e609b94b2c084ef676e5e7b10d499cd49a8d5d5fbd161a150ffd4ce68b00be45f998e7521deb939b5a41855d5c390fc3e74e97df058e40e8acd73f3541a60abb2c7495b0cd7d5c2c0e04e874f9840636867ac77d6aec4e61ecdfa9292787da700ac2c9f35248fcb86bde928ba08411dce38b42971a3b316cc4a03725fae4a281053320d26a53954b01fb9af2e7843a1578a4cbb5bd657211405c5849c5bf7a4de6ba10cf1f9dec7a2da621d032ecf6dec3b1c2e64bf955f5e78ba248fe0ce942391d39caf0847ecc3cb72f96f7552f74c44769729e25c5244c16884da5c48bda7d4da1dd40a168473d9e6889ba77e0803b76db3ea462d5a6b5e625dc0dda9533754f1d223a62128f8459cb8d9d534e04c06776fe0a0dd14ccd9219e6fe3414a365a8c36da07761da5dc005ca6a6e4637a77188fe6ac24cf4e6f337a8ae8dee9f43365bcdac7b91e77afd2f2e04b31a67041f17c61118fbebc9e2745ca57b4ff089d20ba2c9da135dfbf61609b4b8f603b009546bf47f1210e51dff4c7ef98daf2758612656e8c493a8f4c2b5988640e08c11767f354e98317261e9a045bb42cf7c8cd97fe000e362c195f334dd04bc0ea908a54af03b9d9129b6d8340101c9e9e0c8310979b2ce0f04b1fb2e54bc95c1e6b5bd682de06801a9c5a80e98a4a6d144ebbfd2e3a3b5d06c3e9174aa68e084c4eeca6294d5b39027c1915fe3441e17301e412034423b364ca7b4d806010c87b1e02bbe2140b98f72a851a0f9fc14958d7f2ee860444898a91a06a982ef9715272957d94870e4f2cf08cb39d9375c240b8cbc4762f5eab2fd3f9ec15d060375c19143f65ca6b92b19a5a2a61f17b3f060bd5a43ce601f62d1a1937196425fda7dd721c8b8e3ff234b48dc910a630eff9c976b7257880a7c526a7b4b758ecd74fdcf2776a497d1717ad82a045ba3316d6511c243fc917aa6366ae6d3345be1d93a33fa446c3e62d0427abf1abcb774b6d1630bf793fcf3f97fcc4278c822eebd65335f4b44bb2f82af3bd7e612f73d9b05079817bbc32b69fd34c88f82c2ba1f8610916d3855c5062cc478673414a6d73ee5bdda00715fd14659a1c44cea12d1c8f3049d199a3812c1fee0a2d4ef4335a4fbbb2c32a01ce646924f58f62960d8dcf6e1bd1e356884af2167bc7e0eca0462d906987ab0c82281379285a1b9c7979ad6bb50ba48ac9099130b9cabe23978b4eeb37e686f363d84d5334ff95d2c7467e7ab64419fbcdd04fb8891a5aae5c5833144c2302abe4cf35113370f50aaa6612585d634947ce16f8a1319d9641e10ab499cd3f2468f4c6e99f62ec7660a457c7cd7e36cf88d3498bab78c4e744c6bab45e6c41e8f8c6ec6587473c3b2bb34c025def076b60dd9076f18c17255c21605d659b634094ec87761e1706c53d7c9ac8b86cd6653f4addbe6e51e3ad58226ac6f80816e2bc8869c2ff9556be0235fdfe420be159e1289881e9db2d606c403a9fa0c7e4fe7993cc4bd2d355f6aa129fb5253d90c9aa1b6bbee90d80dad0ab5b48cc9d560c405d4b340a602155e839ef32d4b9b7e2e40ffe4229785c9cfc0f7a5ebf6ef92e57ee9485dfb01ada879fb68d09ce4cf11fea8e5e6762d4c1de2a9e396c01ba89a3855e71b950b813cb00ceeeb0a8d43151d8d55be8aec7e5b74a6231d7cf8cc1f476a10fe5b602fdcd9efa1ff4fe97aab7198f2114015468b666af2d6b0a6537c6b5ed63c2c5ddeae5eca42dd0eafa80da2d7a7a2f97ee6d2a257cc2b9826787122604372ba9e403fdabfe52d5d0e5e057ab990a1764d13adb13cdb7ecf836ed10a3b08b2ba196a1caecc6a96a3eccfd10c0b015b4ab60ce0a6f4c2dbebc4ab09878245da9765d5b4c43947094541297f7a3868aca3302c9d05b631837a1f9c3804aefb846e239ab7cc80c655ea023b25da32a92ba7da26cc25c274a1074c1cde0f974995f6d46fdc9199eaaa791079db0840e838f0cff0e0ee2ef713fccf84ec08454b254f7c56bce6cfa0d543de41111ee7874ec8031a4b4122e5e583853e0b37aeb4e8343c9635f31f8cee7e273168bfe08d2c9af75259459ece656da858b0e9067e2551396262ffde42ae4b02360059704a6ecdd1f8b463d20b879f3eca664a9628bae9f8df8179037d5201dccae56281ea569c83f26e40860971f15f54dd41e95396d03db31de33db9b3622c8bec1592e5b04f088db6884a02416ab27c4c3fd25375cf1e78b815772a91cc527aa8e29ef16e9c09cb97daca1f90bf894a7837f1aa5a1d0f840466b231c850d06390e5d085d092a8f92cde68f046e7583df3bc7652927113ca4a1c05a6a55f2cda2f5797a5e748ccdb33e04b83e728c9081307dcfe056e503aa21ad9715afd096a3692c423ec0d4d195162ab4c7abab4a246f5d2282d50ed61adda44402180f1b38efb2bc14c6e0dfc672d98fb83de011cb052083e783e38afdc54be7f5b4a3cca4769deece442ad57451ce36512b9f39c7e66308bef7a4f0eb8c152cd1614e253d7f39054b3a758544437ac20ea4acdec124f838045c6bc50dc5df275596b7bfac66633fa93ac26c91978e6147a59c5a8e73aebcf021e1da6dc70cb2710f112c02f23e7754cf4a5e11b0fe1a2b2c844c3ad192611abfcdc499657cff77caf0d8ec531d893209720bd35414221015bbfb17dcbee934ff9fcc5a7f948ff9433a72939febdd1ad588e04614edee1826a0a3661a19d624d4d2e81af7d2744d9385238724b707991359afd30585c5ceb6a89416ee59e48921fa7f4d5e228f1368ce5da7c899f0dd00777a997605ef5577d9dcfb31644c1b820ddda9df1184374a457dc24f13a313f382f298dfb4bd27c2adf18d29ca5043c60a95a3e04cdc8b8f0fb04bb55ed8f53f2849a5fdba748409b52ed9b76a88898e03d9e4753b48a9f118c26ac02dca02b3d2915a67b1c57e2f1b42ce3ccd4594bdd0e99b8f7cb845f8c9fc5f2578", 0x1000}, {&(0x7f00000002c0)="406c21abe7c52c65fbb891ac55ca25f45d4375a2e8d33a49f832a363ef38cbe3fff3a8a1c6131f8cbf3ead0ae857f736e4a4e90730af5932dd79bd700a1aed24877b34de20b8a6a46bfe3690c523390bbc13629d86970bdd4e4b318f0930bfe4718c65c698cc8045282ca7073e5da96a0c9af53e28a14adcbde1a274f7b7edb4b18c4d33ed27fd89ebad996f2ec318ef3c1c1c5ad16f4547447bd275acc3c1a850c01cad9850f6c3dac6ae3f1ff3faf8f72c134676ca6cf758505bb96b091018979fabcd95138736d93420a9d8", 0xcd}], 0x2, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}], 0xd8}}, {{&(0x7f0000001640)=@xdp={0x2c, 0x7, r5, 0x37}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000016c0)="7a84669da766c803746b4d464bc5191aa97256de4f62a33d05b930ad6f1ff2ec9165c1d5c87c3b20a12a07bdf6c3706219463f2e0f50c8de70ad33f1fbbcc1ceeb0cfcbc07ee8051abb8f5e59c56afcb1f681c88a74cc05ee71fb8ba6c937f9545c87b4b503e08b5ea2b9a6a8bd636321012a8865355b33120b6a254c7e4311c3aa01c0ab5091ff63150baa22c0ba88f6929", 0x92}, {&(0x7f0000001780)="14ee9d085b3a56223ef72de4366b8ca9dc97e519ebf55a3367032df02b7cb1a41d41", 0x22}, {&(0x7f00000017c0)="9b7edf79e14396cb459a37521d63c542ad39001891b60552cf274ffffdeb1c25d6d06dc3776e43558dcc87fb34ff03bc9bce873729b5261e2249268cb9bdae6c7137f1e7cac6f06421a3a49dd2c11d1cb6bd99eb74711cbe99b483e6361faac213c7684785d286d50fe19ee2a8dea8cb871592a1b0d5afc09c0e2287a8345779e32e3781fba72dcae643c9", 0x8b}, {&(0x7f0000001880)="ced5a4acd82276196a870091f2b0fb3ad974d49fbbe8c354dc69faad4249c2fdd64f960eb0f9ff6c0171c3b71a4f344bf67bbd62225c4327a7182d9c0bbc237891d76865e3f26c4de12cc40b975e13", 0x4f}, {&(0x7f0000001900)="6051144a202854fa9a290c98f4dda66994f05cfb13b58e4261221a2ae7a3c6ddd260922fe750b23d73155174a071a553753064cb24772fe19cde2ec8bcd551e82891b5e87b7b1c4c0bd67bf7c93084286b57e6f932b622e14bb8d71fe032ce606617241cb9266ec0d4036ea53c73e9e704a69e6208e949c9f42400ebb57c1e5f59f488a1b1a74d4a15a1855bbce42c0e387ded7bd16e5541447276f218ce65ef1ce409271ff6164be31284b9ebd2e802d6a60adfe5ec498105164b3ee8091206e48c3c81b5f19dd025a8f8bbb46fa526ba2064d4026cc732484a10e586c8b607fd062da2e691d2c2478b335670d576fe38b32592be5c6d", 0xf7}, {&(0x7f0000001a00)="edd39b9425c5c96322a5c15859dee8cbfa18afbfcacedcfca7c3153f9170834175cdf7dbfc5f240084db90587e0a8eb26022dfd1ce61475d36c961f7635bc3c76a05a5c02847a73c1495e75f174bec51e74ebeed260c8b549c5e78e5a5de3c2dea6a95d28bbe7f8e96dd2717ed8e6df4946e04fa1ec3bb997f274aa951ea717921b04046fe8466e4207fa69fb58f642b761e4f7bbecc995a0d1958b6f91c7265a18347d90a02dea54065e914c3e30ecb6dabf21c8b01bda41c32dc451439950a9f3d76993e593ac78dd4a6d6516b24aab31eff0525c8c47e78b0f3d2b03785a88e2edb5e32b8ee2367e9a78841d614e62db8c32f933d1d8fa8dd7795516fd16a12dc8ac74f592c6f352139ec27542a10c5df23696aca71a18699bf2bdf596fdb7cf55289339f6d97e46b17f1a98c1ec58a38cace2a936dd4f9844892ca41c1a901946ed64d8cc36aba7af0091090f8ce848e7e379891ad8b2f81e2c88cdc5683affa6097e4875d9f9fbd86cce0400849c6df473b3c1fafdb89a993b55a4fb0871f7b11cbd7f0234ec86677fde6c500c3edc122e59973b5caaf44f7d580516d92f432f4a063e75d4e428895740204f3ee5d6bb3cc02755ac59e731c0cf60e9be5ea4edec07df119e2c0d5584b06e93d03afdbb05f814300d82a96bdefa0458f2495699a1e657fbc4c1f2958401cc5d80a044b13076c6a35db9e3958fcca85498bd94587291eaf2227b6c7d38ee135815523feae73ca25ff364f1a0d836d2d6a754eade835704f56ae233c8a5cfb040168963065f7b0eebfd26ce7d7de24f2d62eaa110080d527999b77df161b5512cdf4ff7169e5d4853fe8fc79d75eef57cce5a21f23a4fc62f4cf31f0da3ca674a8519c5fba2a65c0840562b4fd183d63827e16bdba439b612034b71a0211bfe90110aafe4de02c1f4e5a172a5eda58aa8c6bc992824a2c41b0ca6097a40f206ca254e0b2201aadee3cfaacba6d3b533f32de58f23d3e8b8103f0a2c58a099a63032f53ee48fc83398b98090a7faa3678625fb4ef21afe3e8282058d035727f04710542e4e459eafed9c96677df525d8f2b7a8d4c251d0a4a107641884d1ce0d851b736cb62122adc543f5a930de8c8763f20939998edcd05ed8d0af5f15eee91d81e934eb30efd34cdcf5f170e3a9480ad8f97728e98af9e1127bc137019b539d804e76d4194bef3b64178ef75678a267ce0d08a39b93e00f474093665ffb31a6891c5c5898e6e6e047b69f01bb995164f2446eee8edcad358697079a6a6a45b280db7e18be5d609361ab900accc53809202a419d59a6cef8a08d508336e6b517811f947c91bdbd9cde04b426030ec77f0524f414a04a20b8ddbb733874e7b5b88f9bd9f2e7a5e3a5d8d9a367be5584aeb22ab64b920eda78754fe8107666f363b4f20d7d5bb2298b3d76550a5b6c4ec97653836854840484c1c52fcebe257507d89e541182793640fafe95d94432b7bbd3b05148cdf0443be1414b3de13d1057aeffc44f91a31cdde1724c8e591a37eb66d872e6c188eba81edf8b7572b006c8bb2dbaa79fa03e57ab06014103a9ffec4b2496e975f44e11a6d094c7d579d0c7c9fde7ffe03de3e37438f17b9d22d1d8fb63fadfafadec51d27b7f44d17be977fe654ace699db89a5c5504858cb987a8ad31fb862610d70a4adfacf1b02de207592740efea920acd88781ad6722c637361a311decc67dd0a9ffd0257f07a594c88cb2096cafc52610f08fb44bc4b1feda9fb677e3c9db7f6f15a79c483bce5a5a9621f945e6403b029e7e5c5c6010fca105e1a32101fdd262136e0a5fc62367417718585133367c43f9d7c0373e21892ed67b2280a4a99755b27574672ea72eab112a4e11101890dcc71f935d148b33642edf1df3dc0259ed36e85a3b64951483f8526c8757166784e864d809b4ba2ce619ff00c88345135bbb38ae30f113f0b5fb7eac81c23c98207400163546cddc2d1039766ccb09cccc42398075a864053c2305f2bcf82eab947c3ec52fe1986c271658e3449637edb062d9c1610d04717f7141604c2054c4b21d9c7037a5285b00451daec83daa1521e1bde7ac1a3c2ec8fbdfbaac5a35814c12f0ecdf151df4b80f7b9af736831e8f8169365bef20da0b9181415cb9d21199291653699bbb615dffb0f694b1d6ca44d8a7b1cbc7b2890d9b4cabbefddbcbb2ae56cf3b4c3e13b990b9625df33ec458fa2c5f0eb39aaa82eb75aa9ddedf0724efe9f159c07893515776e46ffeb8a0e4da4927facd4ac7828505b4d91675b53053878d10ff502c7abb2fd8b4c89f6284d7e450bb600538b5cc5a18275ce855c34419ccf15b6cd02cbb0f0a8c8605faad3427de2a064c47cc295532919d98e7e3f10b1e1219261a73c452710a4ab3b0988d3396f02f4e231f02c1d1dd477bb19d1076eafb010cc823c9e0d8c091026e31bb6a1ac7d4b2a5fbdec41bb2a77ce258b0f877b9d938cce508a9dab48a1f53a803063d049eac9dda0dbc6233d2bf29e4e0cac201f46aaaae2b4ae3a26a2a77bf93f8325548bc31f3d10eafa0b45dae52c6850ed491fee9a33eb939723bce85ca83d4d5d6e0e006a06b9a2512221a4fb4e8af7823c0b2754939635973785d4e1dcb8c322c271ad32a7350bbcab03abb3e6237a5880ac9eccc642927b6d7e8d8c99f5de754346692a49214810beb45e35b5c971c8fdcea330e31efdabcd1f43d0839b881fa998a17e2560a211ba417e2c2ccc885f2b53ab176ab47480f93f6861ecc4b4683a82ea913c530d9c920b23898fd663d4bab5c353c1e038955235bd66dd5bfa7db0ef1c2c3a275619afc2922e331d29f6094b1dfb6345531e6bb73492492316e1f1edf74f0eafa66d2e336b4cfe7c9351f9c0bd4b332f000f86bbf6f8bbda12cd00665e91cef8b9604f62edc955b0330d87ea3bc761180d6ec4bc97e8f0fae322811c0c7e483f96593a8bc1a98ba70b3ebf4d499161c06915b9541aad01e1e0a68449abe07ca7ac013468af777331ff5cee88877d3da6ae56ca07b7f93e514036d3a93d6871910e72592a29b861f6e9833924820235df571744aaf9ddd88bba5d029876d1e84db8cb99bd8182df22a1241732cdc6f583a7920d345fbbc0bf3c2523d7dbd367c60215e854927daa55a5c46d4d4a865429ee5a26983370f7c4e219d50e4120197362ae63e791f1b87a2b10348df1d7dd3ac01e8a0f7d7570a10fca6acdb7e080b67e7cf7fa2573a30b1448745385238425c04b18693cf42037eb9656dc02ad77404ce48731c5d8002a89d2ddccf89b2fcc74c2806655f98ff76ca058a249e9b3b2d327d692d222f8886680c60dea5cf8e5daef0b3fb651e9ef874529791afa7d27e3a641abf258a9be020fed2ef48e951ae1d2a3dbe4a8b7065753d8a197c49e2890b9aca4ecd4619f4e8946b23371541528222f4176d1f5bf545791399e88cbd8307948f9964858d00df66829fd0a682dd4f0517e9f5e4b924573a5c475750c01305295b8e835ef4b17bcd1b2a49215fa316f8475d13c7378cae90ad66793b7ac4aad1e74cdf93a799ddfe8784f343f072f2fcda7b8158d4089d4a8e60c17487f5c7a6ff82b9a3208f03b2e05d52294f53767ac606c123857634ecb6ef4b18691c252564be2bcca840ca65c1a3fd49dafe5af2a44a8a3240aa83ac1e9f932b285e6148522848916b9fd75fb669dad2f16d13edf1b252b561f6a686ebd5ce8fcaf530912668ca4de7d417105d6c44e298d376a5248a4ae32cc7b12664bc0b3875e8b214581a53a68ea13df4e147908ec9b876576349dedcf44b1cf9543308ba0ea6e62bdf0faf278f0ee0394eadb005934fde9dd6396a82a49868230140a69b2142f196900e612904aef240c3d31b31baa580a6a4db226972f71eb660f2b2633247c9a99be3e43236d0bf41d8cd89d730eb39f4818529674f4d690785f4a3771f7c2b8ed4f3a87483e64a10776acf1aae01159bebfb3fc596e2e241309d94ce8a70b2fcc4ede0667de2bd08c15f558eb64fbf8ea99bcea81ac9dd1b49d3a4948005e4986bc36511d4f1adcb8b3c1d66d829460240298052a16845833b3471e53ad83c939048ec8266a67eecbe3d0d11eccfa6b724f5aacecca13a85d08744b9e7671ceac2810b4d8bc9f48ef5ee6f08ffc110b879b8b3521c59a6c7187fe3ccbbfb36df85867966635c577dd7fa039618bc969926452d4e20036078cbfd548383cdb4f95cfbc40563c4973b134929f74a3e6c2e54da9ad28e79ec7d5a401dfdbac63f4bf572213c5e5b8c8ad99807f3b5b569bec108033f287b49d3dbc15a475a3780c88ee50ab7682eb3eba6569b25556e824377cad76198db21a658cebb8f2db42b71296f59337612b0fd6b7abff472a169fa59d7b518f32c736a6e3a9acf526120a7da882f7541f8c7659f3c1795067301bf14ed1c3a1a713b3b2b4db0a45c9fd04684f9cca0e2a51a26e18d5ec139b153029a516b72f99a9235db0a56772e11f40a7550c2520e9606fc28cdd01eb74159c1354db34cf70e76132d88199866610a62e1c1491ef2f3b95c31f352d539cfe92792d73bdb5d09e24352a689cd8b484dbd02f19214233714bee50fe0ec56fa73d884a7def0cc14eafbf81e829ee0fc52c449a7802973cc6dcdc5eacee6b6311da394d34e16877a54e1bde15215999be049cd7030924e09b597808bc6ed9639d55601f867af4fd152b42b4df2bc6747051252d9f3dc108b1be47a73007534ae5bd04c4cd9cc2b95c811f01dddf13b3b4a04de3d0aebe8b26d4c38f712cabb8b55a12c04f07ec2abff4d5942b437123201d6b2bc61a0216482b3a6fa675fa6723abc41c3bf6383c4e64bc4765be932ecad17f07ab8e955b7a2539431990dc6eda09da643f9dd1cebb150d0cc6250239cdac4849b5e883da4da014f4aeff2c2ad634a8b6114eb863777f491a2d88cad7563796f7f5aa281dcf6a18160b8769c32ff72b2acbf5fb65dbce54529c9c85373e5365990f469bac1a2dfe968278160f0b4cc7cfcfa9d831993864ca8b78ae2ec11a2290e3ab272dff82cdbc0786ad23035068efabf5096af828095d50e4abb4a333251c5feca73e60d65fe55443cfbd47559ececab8255fc0975249770ba3b73f950426d883727b71fa2a9f71092a7a5f90b0ce17d33673286480e923f6d023b54e38637bb58ad7596a5a3f5680aa6947679a08a1ef97c420bdb82618a9513d1e3642b9bf7357633c251c5836ace8a9be606efa592ab15c821118e2e01eb6ee7947a26d6b93ad5e451518de76269c3255ceeb2a1d579fa79e0064fffef4b9192f4e8435801f790a15d5982f064123d0177fdcbdbf2543c1311d2abd7d7e687913d75c375fecef5bc59e4b316488109ad341a840ddcec7830d4d06803008ee36a53958ec61aec903c76c4799e7df059cb13a37a65e998bc55224ad3658d04b320ed37f8210fe287ab6d679076c165452f23b8da30b6cadf5de2068480f425384d99be016d151f4ec3c9ce60f37d27ec59178e24918310b27c99dc84fb0daa2e87eec67c3c73cb3c1cca06d4d480d5a7d89255dceee60b2aff29c2f395b1cf51aba6c85294662e859726854e82d7be446ea12fb1056723ca3f44b26fa275a509d4a0c444f9907b5e82155909a1f9bc77c488c17f16557be5d431ab94421e749cc4fb0eab1342f6de7d2c8701b75e95bdcc4e35ac02bc85bc76ec21cfded997feea19687783c4470bdf67a60344e49ed4272ee3b9bc521bbaa70d29b115676b1de472b9b6e39619915232231a57f5c23b", 0x1000}], 0x6}}], 0x2, 0x80c4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x12d7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000f80)={0x29, 0x6, 0x0, {0x4, 0x1}}, 0x29) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sync() 6.101239882s ago: executing program 3 (id=2154): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='5\x00\x00\x00\a'], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a00)={'ip6gre0\x00', 0x0}) sendto$inet(r2, &(0x7f0000000200)="6dea7fedf98229663f307cfbbfbac5294603f2f012dbc1010fae34e015776206f7eeba84a6dbaf9f31b64b715db64d79b78b0a858d3d5de8ec035a1857e27d2d0cb5d3d2bcf806779c16c6d2f76feb042f4f39868d21a95f575eae50fa7406471b78346cf8f19cd419504ce575b33529ded75663130bd6bde4a6c19407691ff891a2971a08283d59799230c6d507c3565058b1965815a2c9d627f25d3d2b7b8cf189b3d4f8068d0de9647f158ddcab3e091955cd5e8b0d9289c92f73b3267647c39f3081510d3138cb2c0da291c0", 0xce, 0x10008090, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) close(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r3, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) syz_emit_ethernet(0x11c3, &(0x7f0000001880)={@broadcast, @broadcast, @val={@void, {0x8100, 0x4, 0x1}}, {@mpls_uc={0x8847, {[{0x8}, {0x80000}, {0xe8}, {0xc}, {0x2}], @ipv6=@tipc_packet={0x7, 0x6, "4720b8", 0x1175, 0x6, 0x0, @mcast1, @mcast1, {[@srh={0x0, 0x2, 0x4, 0x1, 0x4, 0x38, 0xe, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @routing={0x3a, 0x6, 0x0, 0x4, 0x0, [@mcast2, @private0, @local]}, @fragment={0x2b, 0x0, 0x7, 0x0, 0x0, 0x0, 0x64}, @srh={0x2f, 0x6, 0x4, 0x3, 0x8, 0x30, 0xb5, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xc}, @empty]}, @srh={0x6c, 0x6, 0x4, 0x3, 0x1, 0x40, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @empty]}, @dstopts={0x3c, 0x208, '\x00', [@generic={0x97, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x30, {0x3, 0xa, 0xf7, 0xe, [0x1, 0x1000, 0x9, 0xffffffffffffffff, 0x80000001]}}]}, @routing={0x2, 0x4, 0x1, 0x0, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x21, 0x2, 0x4, 0x1, 0xf0, 0x8, 0xe68, [@private1]}], @payload_conn={{{0x1d, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x1, 0x0, 0x1, 0x5, 0x5, 0x0, 0xef, 0x3, 0x2, 0x4e21, 0x4e21}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, &(0x7f0000000300)={0x1, 0x3, [0x154, 0x3f7, 0x3b3, 0xe91]}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x8, 0x2) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 6.022853745s ago: executing program 0 (id=2156): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000060000102f17020500000000000109022400010000001209040000020300000009210000ff01220500090581030000090000"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040700c8bf00000006409040000010300030009210400000122070009058103000400000400"/54], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="40060d0000000d0f000300dde72c75eb69fca34fde6fb2bf"], 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000050000fcffffff80000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000008d67997994f013e900007b8af8ff00000000bfa20000000000000702"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000008000008500000075000000183400000cf400000000000000000000950000000000011766a6b3ac32db2122783bc100009936491369b87f31"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x44}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x5}, 0x8) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) chmod(&(0x7f0000000240)='./file0\x00', 0x1) 5.967615181s ago: executing program 1 (id=2157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x200008d}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 4.693429585s ago: executing program 4 (id=2159): r0 = fsopen(0x0, 0x0) gettid() syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x6, {0x6, 0x22, "3d910bb0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000200)) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000040)={0x1, "5309d5c3a22e848d1dab157419990e9944478193cc8691a85f815dd71f369215", 0x1, 0x2, 0x3, 0x400000, 0x8000000, 0x2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0xc}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) r4 = getpid() process_vm_readv(r4, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 4.652332583s ago: executing program 1 (id=2160): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x363801, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)=ANY=[@ANYBLOB="13000000190037d028bd7000fedbdf251d01020015000400030000e004000000c0bc6bbcf086168b04000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8045}, 0x40000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs(r2, &(0x7f00000001c0)='smaps\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x1, 0x0, 0x2, 'syz0\x00', 0x1}, 0x6, 0x100, 0x5, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r3 = gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r4, &(0x7f0000000080)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r8, 0xaea2, 0x3) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000006c0)="baa100b06eeef20fc22c00660f5468e20fc71d6766c7442400249f00006766c74424020e0000006766c744240600000000670f011c24671ba53e9a000066b80500000066b938c19a780f01c1dbc2b88a008ec82e670f06", 0x57}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0xc000680) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') syz_clone(0xb41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) 3.768074249s ago: executing program 1 (id=2161): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f00000005c0)={0x9, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b073172090890e0878f0e1ac6e7049b3371959b6e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6b922f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa0b9d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c71568f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897f3411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2de8a50ddefeb12c46342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f02f4cded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000680)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x7f) 3.648452089s ago: executing program 3 (id=2162): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x0, 0x1, 0x0, 0x0, 0x8a}, 0x9c) setsockopt(r0, 0xff, 0x1, 0x0, 0x57) syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc7, 0x1, 0x3, 0x20a}, &(0x7f0000000100), &(0x7f00000000c0)) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010010000000000000764b67a16a123eef68f88af9430104400a0000006dfa3c39630400"], 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)) connect$can_bcm(r2, &(0x7f0000000000), 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000009, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000100)={0x1, 0xff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 3.60642467s ago: executing program 1 (id=2163): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) r5 = socket$l2tp6(0xa, 0x2, 0x73) close_range(0xffffffffffffffff, r5, 0x2) open_by_handle_at(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="0400ff434e00000038ffe500"], 0x2000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r6 = socket$rxrpc(0x21, 0x2, 0xa) listen(r6, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) socket(0x23, 0x3, 0xff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x80000001, 0x80000) gettid() 3.381392252s ago: executing program 4 (id=2164): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='5\x00\x00\x00\a'], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00012abd7000ffdbdf250a0000000c00990004000000"], 0xac}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a00)={'ip6gre0\x00', 0x0}) sendto$inet(r2, &(0x7f0000000200)="6dea7fedf98229663f307cfbbfbac5294603f2f012dbc1010fae34e015776206f7eeba84a6dbaf9f31b64b715db64d79b78b0a858d3d5de8ec035a1857e27d2d0cb5d3d2bcf806779c16c6d2f76feb042f4f39868d21a95f575eae50fa7406471b78346cf8f19cd419504ce575b33529ded75663130bd6bde4a6c19407691ff891a2971a08283d59799230c6d507c3565058b1965815a2c9d627f25d3d2b7b8cf189b3d4f8068d0de9647f158ddcab3e091955cd5e8b0d9289c92f73b3267647c39f3081510d3138cb2c0da291c0", 0xce, 0x10008090, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) close(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r3, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) syz_emit_ethernet(0x11c3, &(0x7f0000001880)={@broadcast, @broadcast, @val={@void, {0x8100, 0x4, 0x1}}, {@mpls_uc={0x8847, {[{0x8}, {0x80000}, {0xe8}, {0xc}, {0x2}], @ipv6=@tipc_packet={0x7, 0x6, "4720b8", 0x1175, 0x6, 0x0, @mcast1, @mcast1, {[@srh={0x0, 0x2, 0x4, 0x1, 0x4, 0x38, 0xe, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @routing={0x3a, 0x6, 0x0, 0x4, 0x0, [@mcast2, @private0, @local]}, @fragment={0x2b, 0x0, 0x7, 0x0, 0x0, 0x0, 0x64}, @srh={0x2f, 0x6, 0x4, 0x3, 0x8, 0x30, 0xb5, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xc}, @empty]}, @srh={0x6c, 0x6, 0x4, 0x3, 0x1, 0x40, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @empty]}, @dstopts={0x3c, 0x208, '\x00', [@generic={0x97, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x30, {0x3, 0xa, 0xf7, 0xe, [0x1, 0x1000, 0x9, 0xffffffffffffffff, 0x80000001]}}]}, @routing={0x2, 0x4, 0x1, 0x0, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x21, 0x2, 0x4, 0x1, 0xf0, 0x8, 0xe68, [@private1]}], @payload_conn={{{0x1d, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x1, 0x0, 0x1, 0x5, 0x5, 0x0, 0xef, 0x3, 0x2, 0x4e21, 0x4e21}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, &(0x7f0000000300)={0x1, 0x3, [0x154, 0x3f7, 0x3b3, 0xe91]}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x8, 0x2) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 2.921193667s ago: executing program 0 (id=2165): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100), 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xcc0}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) 2.888239714s ago: executing program 2 (id=2166): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000001f00)=""/4093, 0xffd) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.254247629s ago: executing program 4 (id=2167): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x3, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x3bd4, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x64, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4050}, 0x4040) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000080)) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c200000e00000000000008004506e598e46400040089907864010102e0000001"], 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000080)={r7, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, [0x4, 0x3, 0x6, 0x63ce, 0x5, 0x7, 0x6, 0x7, 0x9, 0x134, 0x4, 0x0, 0x3, 0x6, 0x5]}, &(0x7f0000000180)=0x100) 1.993334258s ago: executing program 1 (id=2168): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) socket$alg(0x26, 0x5, 0x0) r1 = eventfd(0x5) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r6}, 0x18) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) r7 = syz_clone(0x20042400, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0) ptrace(0x4206, r7) ptrace(0x8, r7) ptrace(0x4207, r7) r8 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000014c0)="c61f6b65c4e662a0a5c3fe7b614b98ed0825ea99c9156ccb4d0a1273144cba4fcd32b18eba1b1169c3104425d267253d9dde3a884292a6593cc151240885d2b02bd4d9f55671d28245417fbfcef33121972f43f96f5b55cafc9500e97ad170dc3605dae4c1085431f46655c964f28105dca1a82eb05565b34de6285e58c794b2f2d6ee4504bf1b18ba27dd8661c0c9841358ac22b222c8342b8502470925b9e5fc5b12003fe4f8cda1f659972be91ab4646737138d910c04a79d8fd5a0339898101c665d6eeba87d25", 0xc9}], 0x1}, 0x20000000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94) recvmsg$can_j1939(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/201, 0xc9}], 0x1}, 0x100) 1.992814694s ago: executing program 0 (id=2169): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x10, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2902, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10000, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x7, 0x6, 0x9, 0x8, 0x7, 0x5, 0x49, 0x3fc, 0x80000000, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x7ff, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x20, 0x5, 0x6, 0x4, 0x3, 0x200000000000009, 0x4000000000888f, 0x1, 0x8, 0x46, 0x8, 0x3, 0xa3de, 0x20000000006, 0xa, 0x1007, 0x3ff, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0xffffffffffffffff, 0x8, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x8, 0x0, 0xffffffffffffff7e, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x468, 0xf6, 0x4, 0x6, 0x200, 0x7, 0x80000001, 0x2, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0x8, 0x2, 0x4, 0xfffffffffffffffa, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0x1, 0x0, 0xfffffffffffffffe, 0xa692, 0xcc, 0x8, 0x3000003]}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f00000002c0)=ANY=[]) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000200)={@remote}, &(0x7f0000000240)=0x14) 1.931316761s ago: executing program 4 (id=2170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x130c17, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000380)=0x1, 0x4) close(r1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$RTC_WIE_OFF(r1, 0x7010) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fremovexattr(r2, &(0x7f0000000480)=ANY=[]) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.907982241s ago: executing program 2 (id=2171): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000001f00)=""/4093, 0xffd) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 875.812501ms ago: executing program 1 (id=2172): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x363801, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)=ANY=[@ANYBLOB="13000000190037d028bd7000fedbdf251d01020015000400030000e004000000c0bc6bbcf086168b04000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8045}, 0x40000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs(r2, &(0x7f00000001c0)='smaps\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x1, 0x0, 0x2, 'syz0\x00', 0x1}, 0x6, 0x100, 0x5, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r3 = gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r4, &(0x7f0000000080)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r8, 0xaea2, 0x3) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000006c0)="baa100b06eeef20fc22c00660f5468e20fc71d6766c7442400249f00006766c74424020e0000006766c744240600000000670f011c24671ba53e9a000066b80500000066b938c19a780f01c1dbc2b88a008ec82e670f06", 0x57}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0xc000680) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') syz_clone(0xb41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) 725.731463ms ago: executing program 4 (id=2173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x1, 0x7, 0x101, 0xffa6, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x40084) 642.349368ms ago: executing program 4 (id=2174): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYRES32], 0x40}}, 0x0) readv(r3, &(0x7f0000001bc0)=[{&(0x7f0000000800)=""/106, 0x6a}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200c200630b000000000000305f3e15a75284"], 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000140)=0x1) connect$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 591.323999ms ago: executing program 3 (id=2175): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000}], 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x6e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x3}}, 0x48) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {'\x00\a\x00'}, 0x0, 0x40000000, 0x8}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0xf, "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", 0x4, 0x2, 0x6, 0x0, 0x62, 0x9, 0x12}, r4}}, 0x128) r5 = dup(r2) write$UHID_INPUT(r5, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x190) syz_emit_ethernet(0x46, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000a40), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x60800, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) 0s ago: executing program 2 (id=2176): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) (fail_nth: 5) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000200)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000001340)=@file={0x1, './cgroup\x00'}, 0x6e) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) readv(0xffffffffffffffff, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f0000000000), &(0x7f00000001c0)=r0}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./cgroup\x00', 0x0, 0x10}, 0x18) kernel console output (not intermixed with test programs): 306.423619][T10563] R13: 00007fc8183e6038 R14: 00007fc8183e5fa0 R15: 00007ffeeb005ab8 [ 306.423632][T10563] [ 307.213528][T10576] FAULT_INJECTION: forcing a failure. [ 307.213528][T10576] name failslab, interval 1, probability 0, space 0, times 0 [ 307.226243][T10576] CPU: 0 UID: 0 PID: 10576 Comm: syz.2.1429 Not tainted syzkaller #0 PREEMPT(full) [ 307.226263][T10576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.226272][T10576] Call Trace: [ 307.226278][T10576] [ 307.226284][T10576] dump_stack_lvl+0x16c/0x1f0 [ 307.226311][T10576] should_fail_ex+0x512/0x640 [ 307.226332][T10576] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 307.226352][T10576] should_failslab+0xc2/0x120 [ 307.226370][T10576] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 307.226387][T10576] ? lockdep_init_map_type+0x5c/0x280 [ 307.226403][T10576] ? ceph_msg_new2+0x3e/0x4f0 [ 307.226423][T10576] ceph_msg_new2+0x3e/0x4f0 [ 307.226447][T10576] ceph_monc_init+0x588/0xc80 [ 307.226478][T10576] ceph_create_client+0x25b/0x370 [ 307.226504][T10576] ceph_get_tree+0x1ac/0x1ec0 [ 307.226527][T10576] ? security_capable+0x7e/0x260 [ 307.226549][T10576] vfs_get_tree+0x8b/0x340 [ 307.226573][T10576] vfs_cmd_create+0xd7/0x2a0 [ 307.226597][T10576] __do_sys_fsconfig+0x7b8/0xbe0 [ 307.226620][T10576] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 307.226654][T10576] do_syscall_64+0xcd/0x4e0 [ 307.226675][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.226691][T10576] RIP: 0033:0x7f952358eec9 [ 307.226706][T10576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.226722][T10576] RSP: 002b:00007f9524503038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 307.226738][T10576] RAX: ffffffffffffffda RBX: 00007f95237e5fa0 RCX: 00007f952358eec9 [ 307.226749][T10576] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 307.226759][T10576] RBP: 00007f9524503090 R08: 0000000000000000 R09: 0000000000000000 [ 307.226768][T10576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.226778][T10576] R13: 00007f95237e6038 R14: 00007f95237e5fa0 R15: 00007ffc4b956298 [ 307.226802][T10576] [ 307.684832][ T30] kauditd_printk_skb: 3646 callbacks suppressed [ 307.684847][ T30] audit: type=1400 audit(2000000135.641:276688): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 307.810652][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 307.827342][ T5518] audit: audit_lost=19319 audit_rate_limit=0 audit_backlog_limit=64 [ 307.831741][ T30] audit: type=1400 audit(2000000135.641:276689): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 307.857683][T10580] audit: audit_backlog=65 > audit_backlog_limit=64 [ 307.864267][T10580] audit: audit_lost=19320 audit_rate_limit=0 audit_backlog_limit=64 [ 307.872262][T10580] audit: backlog limit exceeded [ 307.898745][T10586] audit: audit_backlog=65 > audit_backlog_limit=64 [ 307.914539][T10586] audit: audit_lost=19321 audit_rate_limit=0 audit_backlog_limit=64 [ 307.928260][T10586] audit: backlog limit exceeded [ 308.862320][T10604] netlink: 'syz.3.1437': attribute type 21 has an invalid length. [ 308.878615][T10604] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1437'. [ 309.033764][T10604] netlink: 'syz.3.1437': attribute type 5 has an invalid length. [ 309.041677][T10604] netlink: 'syz.3.1437': attribute type 6 has an invalid length. [ 309.058997][T10604] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1437'. [ 309.882014][T10628] FAULT_INJECTION: forcing a failure. [ 309.882014][T10628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.931545][T10628] CPU: 1 UID: 0 PID: 10628 Comm: syz.4.1445 Not tainted syzkaller #0 PREEMPT(full) [ 309.931567][T10628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 309.931574][T10628] Call Trace: [ 309.931578][T10628] [ 309.931583][T10628] dump_stack_lvl+0x16c/0x1f0 [ 309.931605][T10628] should_fail_ex+0x512/0x640 [ 309.931622][T10628] _copy_from_user+0x2e/0xd0 [ 309.931638][T10628] __sys_bpf+0x21d/0x4de0 [ 309.931654][T10628] ? __pfx___sys_bpf+0x10/0x10 [ 309.931667][T10628] ? ksys_write+0x190/0x250 [ 309.931681][T10628] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 309.931703][T10628] ? fput+0x9b/0xd0 [ 309.931716][T10628] ? ksys_write+0x1ac/0x250 [ 309.931726][T10628] ? __pfx_ksys_write+0x10/0x10 [ 309.931739][T10628] __x64_sys_bpf+0x78/0xc0 [ 309.931753][T10628] ? lockdep_hardirqs_on+0x7c/0x110 [ 309.931766][T10628] do_syscall_64+0xcd/0x4e0 [ 309.931781][T10628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.931791][T10628] RIP: 0033:0x7fc81818eec9 [ 309.931799][T10628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.931809][T10628] RSP: 002b:00007fc81908c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.931820][T10628] RAX: ffffffffffffffda RBX: 00007fc8183e5fa0 RCX: 00007fc81818eec9 [ 309.931826][T10628] RDX: 0000000000000094 RSI: 00002000000008c0 RDI: 0000000000000005 [ 309.931832][T10628] RBP: 00007fc81908c090 R08: 0000000000000000 R09: 0000000000000000 [ 309.931837][T10628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.931843][T10628] R13: 00007fc8183e6038 R14: 00007fc8183e5fa0 R15: 00007ffeeb005ab8 [ 309.931856][T10628] [ 310.531985][T10646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10646 comm=syz.4.1450 [ 312.152698][T10691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1466'. [ 312.692654][ T30] kauditd_printk_skb: 4950 callbacks suppressed [ 312.692670][ T30] audit: type=1400 audit(312.646:281576): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 312.853589][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 312.862011][ T30] audit: type=1400 audit(312.646:281577): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 312.893713][T10699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1469'. [ 312.916001][T10699] audit: audit_backlog=65 > audit_backlog_limit=64 [ 312.939626][ T5518] audit: audit_lost=19343 audit_rate_limit=0 audit_backlog_limit=64 [ 312.949478][T10690] audit: audit_backlog=65 > audit_backlog_limit=64 [ 312.959640][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 312.971228][T10699] audit: audit_lost=19344 audit_rate_limit=0 audit_backlog_limit=64 [ 312.979750][T10699] audit: backlog limit exceeded [ 313.025651][T10690] audit: audit_lost=19345 audit_rate_limit=0 audit_backlog_limit=64 [ 313.197683][T10704] netdevsim netdevsim1 ªªªªª»: renamed from netdevsim0 (while UP) [ 314.628449][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 314.638211][T10757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1485'. [ 316.626966][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1496'. [ 316.639540][T10786] netlink: 'syz.2.1496': attribute type 1 has an invalid length. [ 316.689197][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.696174][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.030473][T10798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10798 comm=syz.3.1500 [ 317.703903][ T30] kauditd_printk_skb: 10810 callbacks suppressed [ 317.703914][ T30] audit: type=1400 audit(317.666:291955): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 317.755980][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 317.768867][ T30] audit: type=1400 audit(317.666:291956): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 317.796062][ T5518] audit: audit_lost=19490 audit_rate_limit=0 audit_backlog_limit=64 [ 317.817122][ T5518] audit: backlog limit exceeded [ 317.822449][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 317.830480][ T5518] audit: audit_lost=19491 audit_rate_limit=0 audit_backlog_limit=64 [ 317.830796][ T30] audit: type=1400 audit(317.666:291957): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 317.860947][ T30] audit: type=1400 audit(317.696:291958): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 317.868798][ T5518] audit: backlog limit exceeded [ 318.397243][T10837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1511'. [ 318.407929][T10837] netlink: 'syz.0.1511': attribute type 1 has an invalid length. [ 318.581816][T10837] 8021q: adding VLAN 0 to HW filter on device bond3 [ 318.626988][T10845] FAULT_INJECTION: forcing a failure. [ 318.626988][T10845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.640620][T10845] CPU: 1 UID: 0 PID: 10845 Comm: syz.2.1516 Not tainted syzkaller #0 PREEMPT(full) [ 318.640635][T10845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 318.640641][T10845] Call Trace: [ 318.640645][T10845] [ 318.640649][T10845] dump_stack_lvl+0x16c/0x1f0 [ 318.640666][T10845] should_fail_ex+0x512/0x640 [ 318.640682][T10845] _copy_from_user+0x2e/0xd0 [ 318.640698][T10845] kstrtouint_from_user+0xd6/0x1d0 [ 318.640710][T10845] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 318.640720][T10845] ? __lock_acquire+0xb97/0x1ce0 [ 318.640744][T10845] proc_fail_nth_write+0x83/0x220 [ 318.640756][T10845] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 318.640772][T10845] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 318.640784][T10845] vfs_write+0x29d/0x11d0 [ 318.640796][T10845] ? __pfx___mutex_lock+0x10/0x10 [ 318.640812][T10845] ? __pfx_vfs_write+0x10/0x10 [ 318.640826][T10845] ? __fget_files+0x20e/0x3c0 [ 318.640841][T10845] ksys_write+0x12a/0x250 [ 318.640852][T10845] ? __pfx_ksys_write+0x10/0x10 [ 318.640866][T10845] do_syscall_64+0xcd/0x4e0 [ 318.640881][T10845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.640891][T10845] RIP: 0033:0x7f952358d97f [ 318.640900][T10845] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 318.640910][T10845] RSP: 002b:00007f95244e2030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 318.640920][T10845] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f952358d97f [ 318.640926][T10845] RDX: 0000000000000001 RSI: 00007f95244e20a0 RDI: 0000000000000005 [ 318.640932][T10845] RBP: 00007f95244e2090 R08: 0000000000000000 R09: 0000000000000000 [ 318.640938][T10845] R10: 000000000000017e R11: 0000000000000293 R12: 0000000000000001 [ 318.640943][T10845] R13: 00007f95237e6128 R14: 00007f95237e6090 R15: 00007ffc4b956298 [ 318.640956][T10845] [ 319.264717][T10851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1518'. [ 319.276817][T10851] netlink: 'syz.3.1518': attribute type 1 has an invalid length. [ 319.327274][T10854] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1519'. [ 319.808275][T10860] FAULT_INJECTION: forcing a failure. [ 319.808275][T10860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.859285][T10860] CPU: 0 UID: 0 PID: 10860 Comm: syz.0.1522 Not tainted syzkaller #0 PREEMPT(full) [ 319.859300][T10860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.859306][T10860] Call Trace: [ 319.859310][T10860] [ 319.859314][T10860] dump_stack_lvl+0x16c/0x1f0 [ 319.859333][T10860] should_fail_ex+0x512/0x640 [ 319.859348][T10860] _copy_to_user+0x32/0xd0 [ 319.859365][T10860] simple_read_from_buffer+0xcb/0x170 [ 319.859377][T10860] proc_fail_nth_read+0x197/0x240 [ 319.859390][T10860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.859403][T10860] ? rw_verify_area+0xcf/0x6c0 [ 319.859419][T10860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.859430][T10860] vfs_read+0x1e4/0xcf0 [ 319.859442][T10860] ? __pfx___mutex_lock+0x10/0x10 [ 319.859457][T10860] ? __pfx_vfs_read+0x10/0x10 [ 319.859471][T10860] ? __fget_files+0x20e/0x3c0 [ 319.859488][T10860] ksys_read+0x12a/0x250 [ 319.859498][T10860] ? __pfx_ksys_read+0x10/0x10 [ 319.859508][T10860] ? fput+0x9b/0xd0 [ 319.859524][T10860] do_syscall_64+0xcd/0x4e0 [ 319.859538][T10860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.859549][T10860] RIP: 0033:0x7f33bcb8d8dc [ 319.859558][T10860] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 319.859568][T10860] RSP: 002b:00007f33bdae6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.859578][T10860] RAX: ffffffffffffffda RBX: 00007f33bcde5fa0 RCX: 00007f33bcb8d8dc [ 319.859584][T10860] RDX: 000000000000000f RSI: 00007f33bdae60a0 RDI: 0000000000000008 [ 319.859590][T10860] RBP: 00007f33bdae6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.859596][T10860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.859601][T10860] R13: 00007f33bcde6038 R14: 00007f33bcde5fa0 R15: 00007fff80e97bb8 [ 319.859614][T10860] [ 320.545213][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 320.585399][T10872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1530'. [ 320.606863][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 321.191851][T10886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1531'. [ 321.204474][T10886] netlink: 'syz.1.1531': attribute type 1 has an invalid length. [ 321.269411][T10886] 8021q: adding VLAN 0 to HW filter on device bond9 [ 321.991720][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1535'. [ 322.002843][T10907] netlink: 'syz.4.1535': attribute type 1 has an invalid length. [ 322.119408][T10907] 8021q: adding VLAN 0 to HW filter on device bond10 [ 322.716526][ T30] kauditd_printk_skb: 9051 callbacks suppressed [ 322.716541][ T30] audit: type=1400 audit(322.676:298409): avc: denied { read } for pid=10919 comm="syz.1.1538" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 322.746529][T10922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1537'. [ 322.896991][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 322.897154][T10923] audit: audit_backlog=65 > audit_backlog_limit=64 [ 322.921255][ T5518] audit: audit_lost=20359 audit_rate_limit=0 audit_backlog_limit=64 [ 322.930601][ T5847] audit: audit_backlog=65 > audit_backlog_limit=64 [ 322.940635][T10923] audit: audit_lost=20360 audit_rate_limit=0 audit_backlog_limit=64 [ 322.948816][ T5847] audit: audit_lost=20361 audit_rate_limit=0 audit_backlog_limit=64 [ 322.948831][ T5847] audit: backlog limit exceeded [ 322.950023][ T5518] audit: backlog limit exceeded [ 322.999206][ T5851] audit: audit_backlog=65 > audit_backlog_limit=64 [ 323.372009][T10931] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=10931 comm=syz.2.1541 [ 323.579906][T10939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1542'. [ 323.592439][T10939] netlink: 'syz.4.1542': attribute type 1 has an invalid length. [ 323.840250][T10940] netlink: 'syz.1.1544': attribute type 5 has an invalid length. [ 323.857581][T10940] ip6erspan0: entered promiscuous mode [ 324.392243][T10955] ptrace attach of "./syz-executor exec"[10957] was attempted by "./syz-executor exec"[10955] [ 325.011915][T10974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10974 comm=syz.3.1556 [ 326.107310][T11013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11013 comm=syz.1.1570 [ 327.306831][T11036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11036 comm=syz.1.1577 [ 327.488129][T11042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1580'. [ 327.780060][ T30] kauditd_printk_skb: 5875 callbacks suppressed [ 327.780078][ T30] audit: type=1400 audit(327.583:304270): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 327.904504][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 327.930668][ T5518] audit: audit_lost=20367 audit_rate_limit=0 audit_backlog_limit=64 [ 327.955768][ T30] audit: type=1400 audit(327.733:304271): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 327.997234][ T30] audit: type=1400 audit(327.733:304272): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 328.017975][ T30] audit: type=1400 audit(327.733:304273): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 328.028055][ T5518] audit: backlog limit exceeded [ 328.038657][ T30] audit: type=1400 audit(327.733:304274): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 328.149448][ T30] audit: type=1400 audit(327.733:304275): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 328.170842][ T30] audit: type=1400 audit(327.733:304276): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 328.594923][T11067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11067 comm=syz.0.1586 [ 330.004430][T11087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1592'. [ 330.015415][T11087] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 330.307481][T11087] 8021q: adding VLAN 0 to HW filter on device bond7 [ 331.544296][T11112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1602'. [ 332.572998][T11133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1609'. [ 332.582264][T11133] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1609'. [ 332.784993][ T30] kauditd_printk_skb: 6407 callbacks suppressed [ 332.785009][ T30] audit: type=1400 audit(332.740:310246): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 332.794394][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 332.818976][ T5518] audit: audit_lost=20514 audit_rate_limit=0 audit_backlog_limit=64 [ 332.827097][ T30] audit: type=1400 audit(332.750:310247): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 332.827586][ T5518] audit: backlog limit exceeded [ 332.847829][ T30] audit: type=1400 audit(332.750:310248): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 332.876596][ T30] audit: type=1400 audit(332.750:310249): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 332.899560][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 332.906256][T11141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 332.910535][ T5518] audit: audit_lost=20515 audit_rate_limit=0 audit_backlog_limit=64 [ 333.086278][T11145] FAULT_INJECTION: forcing a failure. [ 333.086278][T11145] name failslab, interval 1, probability 0, space 0, times 0 [ 333.099413][T11145] CPU: 0 UID: 0 PID: 11145 Comm: syz.3.1613 Not tainted syzkaller #0 PREEMPT(full) [ 333.099435][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 333.099444][T11145] Call Trace: [ 333.099450][T11145] [ 333.099457][T11145] dump_stack_lvl+0x16c/0x1f0 [ 333.099482][T11145] should_fail_ex+0x512/0x640 [ 333.099506][T11145] should_failslab+0xc2/0x120 [ 333.099527][T11145] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 333.099546][T11145] ? skb_clone+0x190/0x3f0 [ 333.099570][T11145] skb_clone+0x190/0x3f0 [ 333.099592][T11145] netlink_deliver_tap+0xabd/0xd30 [ 333.099620][T11145] netlink_unicast+0x71f/0x870 [ 333.099646][T11145] ? __pfx_netlink_unicast+0x10/0x10 [ 333.099667][T11145] ? __pfx_tc_new_tfilter+0x10/0x10 [ 333.099700][T11145] netlink_ack+0x696/0xb80 [ 333.099729][T11145] netlink_rcv_skb+0x332/0x420 [ 333.099750][T11145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.099776][T11145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.099807][T11145] ? netlink_deliver_tap+0x1ae/0xd30 [ 333.099833][T11145] netlink_unicast+0x5aa/0x870 [ 333.099859][T11145] ? __pfx_netlink_unicast+0x10/0x10 [ 333.099882][T11145] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 333.099913][T11145] netlink_sendmsg+0x8d1/0xdd0 [ 333.099939][T11145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.099971][T11145] ____sys_sendmsg+0xa98/0xc70 [ 333.099997][T11145] ? copy_msghdr_from_user+0x10a/0x160 [ 333.100018][T11145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.100056][T11145] ? __pfx__kstrtoull+0x10/0x10 [ 333.100080][T11145] ___sys_sendmsg+0x134/0x1d0 [ 333.100104][T11145] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.100138][T11145] ? find_held_lock+0x2b/0x80 [ 333.100175][T11145] __sys_sendmmsg+0x200/0x420 [ 333.100200][T11145] ? __pfx___sys_sendmmsg+0x10/0x10 [ 333.100229][T11145] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 333.100264][T11145] ? fput+0x9b/0xd0 [ 333.100286][T11145] ? ksys_write+0x1ac/0x250 [ 333.100303][T11145] ? __pfx_ksys_write+0x10/0x10 [ 333.100326][T11145] __x64_sys_sendmmsg+0x9c/0x100 [ 333.100346][T11145] ? lockdep_hardirqs_on+0x7c/0x110 [ 333.100368][T11145] do_syscall_64+0xcd/0x4e0 [ 333.100392][T11145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.100409][T11145] RIP: 0033:0x7fb17b18eec9 [ 333.100423][T11145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.100440][T11145] RSP: 002b:00007fb17c0c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 333.100456][T11145] RAX: ffffffffffffffda RBX: 00007fb17b3e5fa0 RCX: 00007fb17b18eec9 [ 333.100467][T11145] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 333.100477][T11145] RBP: 00007fb17c0c0090 R08: 0000000000000000 R09: 0000000000000000 [ 333.100487][T11145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 333.100496][T11145] R13: 00007fb17b3e6038 R14: 00007fb17b3e5fa0 R15: 00007ffd6a55ae08 [ 333.100519][T11145] [ 335.208980][T11185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1627'. [ 335.237696][T11185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11185 comm=syz.2.1627 [ 335.798017][T11201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1631'. [ 336.685803][T11211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1632'. [ 337.792944][ T30] kauditd_printk_skb: 16873 callbacks suppressed [ 337.792959][ T30] audit: type=1400 audit(337.748:327111): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 337.823000][ T30] audit: type=1400 audit(337.758:327112): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 337.831855][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 337.844838][ T30] audit: type=1400 audit(337.758:327113): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 337.890940][ T5847] audit: audit_backlog=65 > audit_backlog_limit=64 [ 337.900010][ T5847] audit: audit_lost=20520 audit_rate_limit=0 audit_backlog_limit=64 [ 337.917624][T11237] audit: audit_backlog=65 > audit_backlog_limit=64 [ 337.931374][ T5847] audit: backlog limit exceeded [ 337.938910][T11237] audit: audit_lost=20521 audit_rate_limit=0 audit_backlog_limit=64 [ 337.943492][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.828331][T11261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.835763][T11261] IPv6: NLM_F_CREATE should be set when creating new route [ 338.843073][T11261] IPv6: NLM_F_CREATE should be set when creating new route [ 338.850268][T11261] IPv6: NLM_F_CREATE should be set when creating new route [ 339.443496][T11280] netlink: 'syz.3.1657': attribute type 1 has an invalid length. [ 339.522844][T11280] 8021q: adding VLAN 0 to HW filter on device bond6 [ 341.735916][T11314] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1667'. [ 342.811566][ T30] kauditd_printk_skb: 8834 callbacks suppressed [ 342.811580][ T30] audit: type=1400 audit(342.709:335894): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 342.856936][ T30] audit: type=1400 audit(342.769:335896): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 342.878799][ T30] audit: type=1400 audit(342.769:335897): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 342.900012][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 342.903064][T11327] audit: audit_backlog=65 > audit_backlog_limit=64 [ 342.914412][T11327] audit: audit_lost=20540 audit_rate_limit=0 audit_backlog_limit=64 [ 342.932308][ T30] audit: type=1400 audit(342.769:335898): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 342.951987][T11329] audit: audit_backlog=65 > audit_backlog_limit=64 [ 342.959678][T11327] audit: backlog limit exceeded [ 342.961483][ T5851] audit: audit_backlog=65 > audit_backlog_limit=64 [ 343.066576][T11333] netlink: 'syz.1.1671': attribute type 1 has an invalid length. [ 343.276986][T11333] 8021q: adding VLAN 0 to HW filter on device bond10 [ 343.903829][T11347] FAULT_INJECTION: forcing a failure. [ 343.903829][T11347] name failslab, interval 1, probability 0, space 0, times 0 [ 343.903893][T11347] CPU: 1 UID: 0 PID: 11347 Comm: syz.1.1676 Not tainted syzkaller #0 PREEMPT(full) [ 343.903914][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 343.903924][T11347] Call Trace: [ 343.903930][T11347] [ 343.903937][T11347] dump_stack_lvl+0x16c/0x1f0 [ 343.903969][T11347] should_fail_ex+0x512/0x640 [ 343.903996][T11347] should_failslab+0xc2/0x120 [ 343.904016][T11347] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 343.904036][T11347] ? skb_clone+0x190/0x3f0 [ 343.904061][T11347] skb_clone+0x190/0x3f0 [ 343.904083][T11347] netlink_deliver_tap+0xabd/0xd30 [ 343.904112][T11347] netlink_unicast+0x64c/0x870 [ 343.904138][T11347] ? __pfx_netlink_unicast+0x10/0x10 [ 343.904161][T11347] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 343.904192][T11347] netlink_sendmsg+0x8d1/0xdd0 [ 343.904218][T11347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.904244][T11347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.904271][T11347] ____sys_sendmsg+0xa98/0xc70 [ 343.904298][T11347] ? copy_msghdr_from_user+0x10a/0x160 [ 343.904319][T11347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.904357][T11347] ___sys_sendmsg+0x134/0x1d0 [ 343.904380][T11347] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.904434][T11347] __sys_sendmsg+0x16d/0x220 [ 343.904456][T11347] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.904495][T11347] do_syscall_64+0xcd/0x4e0 [ 343.904520][T11347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.904538][T11347] RIP: 0033:0x7ff44098eec9 [ 343.904552][T11347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.904569][T11347] RSP: 002b:00007ff441810038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.904589][T11347] RAX: ffffffffffffffda RBX: 00007ff440be5fa0 RCX: 00007ff44098eec9 [ 343.904600][T11347] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 343.904610][T11347] RBP: 00007ff441810090 R08: 0000000000000000 R09: 0000000000000000 [ 343.904620][T11347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.904630][T11347] R13: 00007ff440be6038 R14: 00007ff440be5fa0 R15: 00007fff12283ae8 [ 343.904653][T11347] [ 344.040976][T11349] batman_adv: batadv0: Adding interface: gretap1 [ 344.041004][T11349] batman_adv: batadv0: Interface activated: gretap1 [ 344.291717][T11364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1680'. [ 345.581620][T11387] sch_tbf: burst 0 is lower than device lo mtu (117440530) ! [ 345.823729][T11391] netlink: 'syz.2.1687': attribute type 1 has an invalid length. [ 347.370937][T11412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1694'. [ 347.386452][T11412] netlink: 'syz.0.1694': attribute type 1 has an invalid length. [ 347.473651][T11412] 8021q: adding VLAN 0 to HW filter on device bond4 [ 347.818920][ T30] kauditd_printk_skb: 9738 callbacks suppressed [ 347.818938][ T30] audit: type=1400 audit(347.779:344896): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 347.858368][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 347.868255][ T5518] audit: audit_lost=20789 audit_rate_limit=0 audit_backlog_limit=64 [ 347.876435][ T5518] audit: backlog limit exceeded [ 347.892948][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 347.899611][ T5518] audit: audit_lost=20790 audit_rate_limit=0 audit_backlog_limit=64 [ 347.909670][ T30] audit: type=1400 audit(347.779:344897): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 347.959991][ T30] audit: type=1400 audit(347.779:344898): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 347.967289][ T5518] audit: backlog limit exceeded [ 347.987747][ T30] audit: type=1400 audit(347.779:344899): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 348.618275][T11433] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 348.619944][ T3585] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 348.769041][T11436] netlink: 'syz.1.1701': attribute type 1 has an invalid length. [ 350.252970][T11463] netlink: 'syz.3.1711': attribute type 1 has an invalid length. [ 350.350333][T11463] 8021q: adding VLAN 0 to HW filter on device bond7 [ 350.357511][T11472] netlink: 'syz.4.1713': attribute type 10 has an invalid length. [ 351.518430][T11485] netlink: 'syz.3.1718': attribute type 1 has an invalid length. [ 352.522884][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 352.935104][ T30] kauditd_printk_skb: 27962 callbacks suppressed [ 352.935118][ T30] audit: type=1400 audit(352.899:354151): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 353.030268][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 353.042790][ T30] audit: type=1400 audit(352.899:354152): avc: denied { read write } for pid=5849 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 353.066688][ T5518] audit: audit_lost=27028 audit_rate_limit=0 audit_backlog_limit=64 [ 353.082697][ T5518] audit: backlog limit exceeded [ 353.100013][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 353.112565][ T5518] audit: audit_lost=27029 audit_rate_limit=0 audit_backlog_limit=64 [ 353.114507][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 353.133702][ T30] audit: type=1400 audit(352.929:354153): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 353.162782][ T5518] audit: backlog limit exceeded [ 353.497008][T11536] netlink: 'syz.0.1733': attribute type 1 has an invalid length. [ 353.693712][T11536] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 353.720979][T11536] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 353.808854][T11543] gretap2: entered promiscuous mode [ 353.844771][T11543] bond5: (slave gretap2): making interface the new active one [ 353.855972][T11543] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 354.202605][ T5860] Bluetooth: hci4: command 0x0419 tx timeout [ 354.266546][T11554] team0: entered promiscuous mode [ 354.278265][T11554] team_slave_0: entered promiscuous mode [ 354.287049][T11554] team_slave_1: entered promiscuous mode [ 354.293202][T11554] team0: entered allmulticast mode [ 354.298320][T11554] team_slave_0: entered allmulticast mode [ 354.304364][T11554] team_slave_1: entered allmulticast mode [ 354.356086][T11554] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.365991][T11554] batman_adv: batadv0: Interface activated: team0 [ 354.385751][T11554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.511967][T11560] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up [ 355.040071][T11580] netlink: 'syz.0.1745': attribute type 1 has an invalid length. [ 355.358240][T11580] 8021q: adding VLAN 0 to HW filter on device bond6 [ 356.240330][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1746'. [ 356.274995][T11597] macvlan2: entered promiscuous mode [ 356.370888][T11600] netlink: 'syz.1.1747': attribute type 15 has an invalid length. [ 356.392254][T11600] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1747'. [ 358.293711][ T30] kauditd_printk_skb: 9307 callbacks suppressed [ 358.293726][ T30] audit: type=1400 audit(358.259:359896): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 358.336727][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 358.348258][T11627] audit: audit_backlog=65 > audit_backlog_limit=64 [ 358.355631][ T5847] audit: audit_backlog=65 > audit_backlog_limit=64 [ 358.359263][ T5518] audit: audit_lost=28219 audit_rate_limit=0 audit_backlog_limit=64 [ 358.372459][ T5848] audit: audit_backlog=65 > audit_backlog_limit=64 [ 358.382659][ T5847] audit: audit_lost=28220 audit_rate_limit=0 audit_backlog_limit=64 [ 358.383077][ T5848] audit: audit_lost=28221 audit_rate_limit=0 audit_backlog_limit=64 [ 358.398654][ T5847] audit: backlog limit exceeded [ 358.406260][ T30] audit: type=1400 audit(358.259:359897): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 358.720727][T11640] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 358.793738][T11640] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 358.813815][T11640] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 358.827180][T11640] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 358.900542][T11640] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 358.939724][T11640] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 359.012017][T11640] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 359.050212][T11640] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 359.124459][T11640] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 359.182654][T11640] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 360.842623][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 363.305076][ T30] kauditd_printk_skb: 8978 callbacks suppressed [ 363.305092][ T30] audit: type=1400 audit(363.259:366775): avc: denied { read } for pid=11755 comm="syz.0.1806" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 363.580760][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 363.616111][ T5518] audit: audit_lost=28922 audit_rate_limit=0 audit_backlog_limit=64 [ 363.638278][ T5846] audit: audit_backlog=65 > audit_backlog_limit=64 [ 363.642530][ T5518] audit: backlog limit exceeded [ 363.649761][ T30] audit: type=1400 audit(363.269:366776): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 363.657358][ T5846] audit: audit_lost=28923 audit_rate_limit=0 audit_backlog_limit=64 [ 363.671060][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 363.708338][ T5847] audit: audit_backlog=65 > audit_backlog_limit=64 [ 363.717131][ T5518] audit: audit_lost=28924 audit_rate_limit=0 audit_backlog_limit=64 [ 366.512549][T11812] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1824'. [ 366.529087][T11812] netlink: 'syz.0.1824': attribute type 4 has an invalid length. [ 366.681953][T11813] trusted_key: encrypted_key: key user:syz not found [ 368.326518][ T30] kauditd_printk_skb: 8173 callbacks suppressed [ 368.326534][ T30] audit: type=1400 audit(368.279:373749): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 368.488505][T11859] audit: audit_lost=29325 audit_rate_limit=0 audit_backlog_limit=64 [ 368.492457][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 368.496978][T11859] audit: out of memory in audit_log_start [ 368.519128][ T30] audit: type=1400 audit(368.279:373750): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 368.535881][ T5518] audit: audit_lost=29326 audit_rate_limit=0 audit_backlog_limit=64 [ 368.570238][ T5518] audit: backlog limit exceeded [ 368.604686][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 368.692594][ T30] audit: type=1400 audit(368.279:373751): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 368.722535][ T5518] audit: audit_lost=29327 audit_rate_limit=0 audit_backlog_limit=64 [ 369.144261][T11872] netlink: 'syz.2.1844': attribute type 12 has an invalid length. [ 369.176082][T11870] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[11870] [ 369.884333][T11886] FAULT_INJECTION: forcing a failure. [ 369.884333][T11886] name failslab, interval 1, probability 0, space 0, times 0 [ 369.964189][T11886] CPU: 1 UID: 0 PID: 11886 Comm: syz.2.1851 Not tainted syzkaller #0 PREEMPT(full) [ 369.964213][T11886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 369.964221][T11886] Call Trace: [ 369.964227][T11886] [ 369.964234][T11886] dump_stack_lvl+0x16c/0x1f0 [ 369.964262][T11886] should_fail_ex+0x512/0x640 [ 369.964284][T11886] ? fs_reclaim_acquire+0xae/0x150 [ 369.964308][T11886] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 369.964333][T11886] should_failslab+0xc2/0x120 [ 369.964354][T11886] __kmalloc_noprof+0xd2/0x510 [ 369.964379][T11886] tomoyo_realpath_from_path+0xc2/0x6e0 [ 369.964406][T11886] ? tomoyo_profile+0x47/0x60 [ 369.964426][T11886] tomoyo_path_number_perm+0x245/0x580 [ 369.964446][T11886] ? tomoyo_path_number_perm+0x237/0x580 [ 369.964469][T11886] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 369.964493][T11886] ? find_held_lock+0x2b/0x80 [ 369.964537][T11886] ? find_held_lock+0x2b/0x80 [ 369.964564][T11886] ? hook_file_ioctl_common+0x145/0x410 [ 369.964587][T11886] ? __fget_files+0x20e/0x3c0 [ 369.964611][T11886] security_file_ioctl+0x9b/0x240 [ 369.964637][T11886] __x64_sys_ioctl+0xb7/0x210 [ 369.964665][T11886] do_syscall_64+0xcd/0x4e0 [ 369.964690][T11886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.964707][T11886] RIP: 0033:0x7f952358eec9 [ 369.964720][T11886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.964736][T11886] RSP: 002b:00007f9524503038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.964753][T11886] RAX: ffffffffffffffda RBX: 00007f95237e5fa0 RCX: 00007f952358eec9 [ 369.964763][T11886] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 369.964773][T11886] RBP: 00007f9524503090 R08: 0000000000000000 R09: 0000000000000000 [ 369.964783][T11886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.964793][T11886] R13: 00007f95237e6038 R14: 00007f95237e5fa0 R15: 00007ffc4b956298 [ 369.964816][T11886] [ 369.966361][T11886] ERROR: Out of memory at tomoyo_realpath_from_path. [ 370.452349][T11896] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 370.549498][T11900] netlink: 'syz.1.1855': attribute type 1 has an invalid length. [ 370.580198][T11900] 8021q: adding VLAN 0 to HW filter on device bond11 [ 370.647219][T11900] veth3: entered promiscuous mode [ 370.664030][T11900] bond11: (slave veth3): Enslaving as an active interface with a down link [ 370.680893][T11905] bond11: entered allmulticast mode [ 371.081375][T11915] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1860'. [ 373.259799][T11972] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1879'. [ 373.364941][ T30] kauditd_printk_skb: 7425 callbacks suppressed [ 373.364951][ T30] audit: type=1400 audit(373.299:380330): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 373.406896][ T30] audit: type=1400 audit(373.369:380331): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 373.437126][ T30] audit: type=1400 audit(373.369:380332): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 373.470729][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 373.480830][ T5518] audit: audit_lost=29610 audit_rate_limit=0 audit_backlog_limit=64 [ 373.491520][ T30] audit: type=1400 audit(373.369:380333): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 373.521112][ T5518] audit: backlog limit exceeded [ 373.526474][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 373.534824][ T5518] audit: audit_lost=29611 audit_rate_limit=0 audit_backlog_limit=64 [ 373.543334][ T30] audit: type=1400 audit(373.369:380334): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 373.618808][T11975] netlink: 'syz.0.1880': attribute type 10 has an invalid length. [ 373.672198][T11975] veth1_macvtap: left promiscuous mode [ 374.227722][T11989] FAULT_INJECTION: forcing a failure. [ 374.227722][T11989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.276140][T11989] CPU: 0 UID: 0 PID: 11989 Comm: syz.3.1886 Not tainted syzkaller #0 PREEMPT(full) [ 374.276163][T11989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 374.276174][T11989] Call Trace: [ 374.276180][T11989] [ 374.276188][T11989] dump_stack_lvl+0x16c/0x1f0 [ 374.276215][T11989] should_fail_ex+0x512/0x640 [ 374.276240][T11989] _copy_from_iter+0x29f/0x1720 [ 374.276268][T11989] ? _copy_from_iter+0x15d/0x1720 [ 374.276292][T11989] ? __pfx__copy_from_iter+0x10/0x10 [ 374.276318][T11989] ? __pfx__copy_from_iter+0x10/0x10 [ 374.276349][T11989] copy_page_from_iter+0xde/0x180 [ 374.276377][T11989] skb_copy_datagram_from_iter+0x2a0/0x740 [ 374.276405][T11989] tun_get_user+0x1859/0x3cd0 [ 374.276443][T11989] ? __pfx_tun_get_user+0x10/0x10 [ 374.276470][T11989] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 374.276500][T11989] ? find_held_lock+0x2b/0x80 [ 374.276522][T11989] ? tun_get+0x191/0x370 [ 374.276551][T11989] tun_chr_write_iter+0xdc/0x210 [ 374.276579][T11989] vfs_write+0x7d0/0x11d0 [ 374.276598][T11989] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 374.276627][T11989] ? __pfx_vfs_write+0x10/0x10 [ 374.276642][T11989] ? find_held_lock+0x2b/0x80 [ 374.276678][T11989] ksys_write+0x12a/0x250 [ 374.276696][T11989] ? __pfx_ksys_write+0x10/0x10 [ 374.276721][T11989] do_syscall_64+0xcd/0x4e0 [ 374.276751][T11989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.276768][T11989] RIP: 0033:0x7fb17b18d97f [ 374.276784][T11989] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 374.276800][T11989] RSP: 002b:00007fb17c0c0000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 374.276818][T11989] RAX: ffffffffffffffda RBX: 00007fb17b3e5fa0 RCX: 00007fb17b18d97f [ 374.276829][T11989] RDX: 000000000000fdef RSI: 0000200000000400 RDI: 00000000000000c8 [ 374.276839][T11989] RBP: 00007fb17c0c0090 R08: 0000000000000000 R09: 0000000000000000 [ 374.276849][T11989] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000002 [ 374.276859][T11989] R13: 00007fb17b3e6038 R14: 00007fb17b3e5fa0 R15: 00007ffd6a55ae08 [ 374.276882][T11989] [ 376.986565][T12046] netlink: 'syz.1.1904': attribute type 10 has an invalid length. [ 377.030799][T12046] team0: Device hsr_slave_0 failed to register rx_handler [ 377.189320][T12048] IPv6: NLM_F_CREATE should be specified when creating new route [ 377.482668][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 378.129789][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.136209][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.416501][ T30] kauditd_printk_skb: 6933 callbacks suppressed [ 378.416517][ T30] audit: type=1400 audit(378.369:386811): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 378.507050][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 378.523052][ T5518] audit: audit_lost=29764 audit_rate_limit=0 audit_backlog_limit=64 [ 378.547727][ T5518] audit: backlog limit exceeded [ 378.551428][ T5849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 378.561360][ T5851] audit: audit_backlog=65 > audit_backlog_limit=64 [ 378.570145][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 378.572595][ T30] audit: type=1400 audit(378.379:386812): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 378.601539][ T5851] audit: audit_lost=29765 audit_rate_limit=0 audit_backlog_limit=64 [ 378.610844][ T5849] audit: audit_lost=29766 audit_rate_limit=0 audit_backlog_limit=64 [ 380.614364][T12108] netlink: 'syz.2.1924': attribute type 10 has an invalid length. [ 380.684668][T12108] team0: Device hsr_slave_0 failed to register rx_handler [ 383.004060][T12149] netlink: 'syz.3.1936': attribute type 1 has an invalid length. [ 383.455903][ T30] kauditd_printk_skb: 11554 callbacks suppressed [ 383.455917][ T30] audit: type=1400 audit(383.419:395978): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 383.642955][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 383.662967][ T5518] audit: audit_lost=30563 audit_rate_limit=0 audit_backlog_limit=64 [ 383.681201][ T5518] audit: backlog limit exceeded [ 383.681199][ T30] audit: type=1400 audit(383.419:395979): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 383.681235][ T30] audit: type=1400 audit(383.419:395980): avc: denied { read } for pid=5518 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 383.707362][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 383.746822][T12156] audit: audit_backlog=65 > audit_backlog_limit=64 [ 383.765797][T12156] audit: audit_lost=30564 audit_rate_limit=0 audit_backlog_limit=64 [ 383.788019][T12156] audit: backlog limit exceeded [ 384.517857][T12174] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 385.442645][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 385.604217][ T24] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 385.617966][ T24] usb 5-1: config 1 has no interface number 0 [ 385.629520][ T24] usb 5-1: config 1 interface 105 altsetting 2 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 385.645730][ T24] usb 5-1: config 1 interface 105 has no altsetting 0 [ 385.746692][ T24] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 385.775864][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.793553][ T24] usb 5-1: Product: syz [ 385.797842][ T24] usb 5-1: Manufacturer: syz [ 385.841981][ T24] usb 5-1: SerialNumber: syz [ 385.923381][T12207] evm: overlay not supported [ 386.687351][ T24] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 386.808728][ T24] aqc111 5-1:1.105: probe with driver aqc111 failed with error -61 [ 386.960309][ T24] kernel write not supported for file [eventfd] (pid: 24 comm: kworker/1:0) [ 387.109505][T12227] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 387.124673][T12227] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 387.140953][T12227] netlink: 'syz.2.1963': attribute type 1 has an invalid length. [ 387.176329][T12227] 8021q: adding VLAN 0 to HW filter on device bond8 [ 387.202254][T12227] 8021q: adding VLAN 0 to HW filter on device bond8 [ 387.212906][T12227] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 387.238139][T12227] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 387.269274][T12232] gretap1: entered promiscuous mode [ 387.280654][T12232] bond8: (slave gretap1): making interface the new active one [ 387.308393][T12232] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 387.352925][T12227] macvlan3: entered promiscuous mode [ 387.358283][T12227] macvlan3: entered allmulticast mode [ 387.489693][T12227] bond8: entered promiscuous mode [ 387.496275][T12227] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 387.518510][T12227] bond8: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 387.602108][T12243] FAULT_INJECTION: forcing a failure. [ 387.602108][T12243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.615339][T12243] CPU: 0 UID: 0 PID: 12243 Comm: syz.0.1965 Not tainted syzkaller #0 PREEMPT(full) [ 387.615362][T12243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.615373][T12243] Call Trace: [ 387.615378][T12243] [ 387.615386][T12243] dump_stack_lvl+0x16c/0x1f0 [ 387.615413][T12243] should_fail_ex+0x512/0x640 [ 387.615439][T12243] _copy_to_user+0x32/0xd0 [ 387.615465][T12243] do_pagemap_scan+0xb81/0xcf0 [ 387.615492][T12243] ? __pfx_do_pagemap_scan+0x10/0x10 [ 387.615513][T12243] ? do_vfs_ioctl+0x128/0x14f0 [ 387.615543][T12243] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 387.615584][T12243] ? selinux_file_ioctl+0x180/0x270 [ 387.615607][T12243] ? selinux_file_ioctl+0xb4/0x270 [ 387.615633][T12243] do_pagemap_cmd+0x58/0x80 [ 387.615652][T12243] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 387.615673][T12243] __x64_sys_ioctl+0x18b/0x210 [ 387.615700][T12243] do_syscall_64+0xcd/0x4e0 [ 387.615725][T12243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.615743][T12243] RIP: 0033:0x7f33bcb8eec9 [ 387.615757][T12243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.615772][T12243] RSP: 002b:00007f33bdaa4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.615789][T12243] RAX: ffffffffffffffda RBX: 00007f33bcde6180 RCX: 00007f33bcb8eec9 [ 387.615800][T12243] RDX: 0000200000000140 RSI: 00000000c0606610 RDI: 0000000000000009 [ 387.615811][T12243] RBP: 00007f33bdaa4090 R08: 0000000000000000 R09: 0000000000000000 [ 387.615821][T12243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.615831][T12243] R13: 00007f33bcde6218 R14: 00007f33bcde6180 R15: 00007fff80e97bb8 [ 387.615855][T12243] [ 387.984345][T12227] bond8: left promiscuous mode [ 388.001691][T12223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.129380][ T24] usb 5-1: USB disconnect, device number 4 [ 388.492653][ T30] kauditd_printk_skb: 1821 callbacks suppressed [ 388.492672][ T30] audit: type=1400 audit(388.379:397134): avc: denied { write } for pid=12247 comm="syz.0.1966" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 389.025441][ T30] audit: type=1400 audit(388.379:397135): avc: denied { open } for pid=12247 comm="syz.0.1966" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 389.048934][ T30] audit: type=1400 audit(388.619:397136): avc: denied { write } for pid=12248 comm="syz.4.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 389.120122][ T30] audit: type=1400 audit(389.079:397137): avc: denied { sqpoll } for pid=12247 comm="syz.0.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 389.281143][ T30] audit: type=1400 audit(389.209:397138): avc: denied { create } for pid=12247 comm="syz.0.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 389.300756][T12250] futex_wake_op: syz.0.1966 tries to shift op by -1; fix this program [ 389.602428][ T30] audit: type=1400 audit(389.209:397139): avc: denied { write } for pid=12247 comm="syz.0.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 389.658035][ T30] audit: type=1400 audit(389.229:397140): avc: denied { ioctl } for pid=12247 comm="syz.0.1966" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29822 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 390.158187][T12272] lo speed is unknown, defaulting to 1000 [ 390.164698][T12272] lo speed is unknown, defaulting to 1000 [ 390.176115][T12272] lo speed is unknown, defaulting to 1000 [ 390.240616][T12272] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 390.391177][T12272] lo speed is unknown, defaulting to 1000 [ 390.407076][T12272] lo speed is unknown, defaulting to 1000 [ 390.422067][T12272] lo speed is unknown, defaulting to 1000 [ 390.436855][T12272] lo speed is unknown, defaulting to 1000 [ 390.451970][T12272] lo speed is unknown, defaulting to 1000 [ 390.455754][ T30] audit: type=1400 audit(390.099:397141): avc: denied { create } for pid=12268 comm="syz.0.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 390.551679][ T30] audit: type=1400 audit(390.109:397142): avc: denied { setopt } for pid=12268 comm="syz.0.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 390.623300][ T30] audit: type=1400 audit(390.119:397143): avc: denied { create } for pid=12268 comm="syz.0.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 390.792635][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 391.022829][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 391.070543][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 391.088187][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.108998][ T24] usb 3-1: Product: syz [ 391.120592][ T24] usb 3-1: Manufacturer: syz [ 391.134647][ T24] usb 3-1: SerialNumber: syz [ 391.162197][ T24] usb 3-1: config 0 descriptor?? [ 391.184176][T12289] bridge3: entered allmulticast mode [ 391.245415][ T5927] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 391.414081][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 391.431990][ T5927] usb 2-1: too many configurations: 96, using maximum allowed: 8 [ 391.493367][ T5927] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 391.504668][ T5927] usb 2-1: can't read configurations, error -61 [ 391.835376][ T5927] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 392.435981][ T24] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 392.512621][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 392.528994][ T5927] usb 2-1: too many configurations: 96, using maximum allowed: 8 [ 392.575000][ T5927] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 392.583716][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 392.611293][ T5927] usb 2-1: can't read configurations, error -61 [ 392.641600][ T5927] usb usb2-port1: attempt power cycle [ 393.042701][ T5927] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 393.066621][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 393.072438][ T5927] usb 2-1: too many configurations: 96, using maximum allowed: 8 [ 393.081775][ T5927] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 393.091136][ T5927] usb 2-1: can't read configurations, error -61 [ 393.232573][ T5927] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 393.253058][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 393.293621][ T5927] usb 2-1: too many configurations: 96, using maximum allowed: 8 [ 393.303796][ T5927] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 393.314639][ T5927] usb 2-1: can't read configurations, error -61 [ 393.341532][ T5927] usb usb2-port1: unable to enumerate USB device [ 393.685492][T12316] batadv0: entered promiscuous mode [ 393.690765][T12316] batadv0: entered allmulticast mode [ 393.697542][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 393.697556][ T30] audit: type=1400 audit(393.589:397166): avc: denied { append } for pid=12312 comm="syz.3.1983" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 393.700589][T12316] vxcan0: entered promiscuous mode [ 393.733201][ T30] audit: type=1400 audit(393.609:397167): avc: denied { create } for pid=12312 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 393.773394][T12316] vxcan0: entered allmulticast mode [ 393.779809][ T30] audit: type=1400 audit(393.619:397168): avc: denied { bind } for pid=12312 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 393.807227][T12316] vxcan1: entered promiscuous mode [ 393.848586][T12316] vxcan1: entered allmulticast mode [ 393.876813][ T30] audit: type=1400 audit(393.619:397169): avc: denied { write } for pid=12312 comm="syz.3.1983" path="socket:[29365]" dev="sockfs" ino=29365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 393.914565][T12316] veth0: entered promiscuous mode [ 393.926406][ T5927] usb 3-1: USB disconnect, device number 3 [ 393.978915][ T30] audit: type=1400 audit(393.939:397170): avc: denied { read write } for pid=12318 comm="syz.4.1985" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 394.098055][T12316] veth0: entered allmulticast mode [ 394.103442][ T30] audit: type=1400 audit(393.939:397171): avc: denied { open } for pid=12318 comm="syz.4.1985" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 394.126970][ T30] audit: type=1400 audit(393.939:397172): avc: denied { ioctl } for pid=12318 comm="syz.4.1985" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 394.582152][T12316] veth1: entered promiscuous mode [ 394.609433][T12316] veth1: entered allmulticast mode [ 394.630108][T12316] wg0: entered promiscuous mode [ 394.637267][T12316] wg0: entered allmulticast mode [ 394.647250][T12316] wg1: entered promiscuous mode [ 394.652265][T12316] wg1: entered allmulticast mode [ 394.661122][T12316] wg2: entered promiscuous mode [ 394.669782][T12316] wg2: entered allmulticast mode [ 394.678671][T12316] veth0_to_bridge: entered promiscuous mode [ 394.900526][ T5927] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 394.917030][T12316] veth0_to_bridge: entered allmulticast mode [ 394.937347][T12316] veth1_to_bridge: entered promiscuous mode [ 394.961108][T12316] veth1_to_bridge: entered allmulticast mode [ 394.971254][T12316] veth0_to_bond: entered promiscuous mode [ 394.977274][T12316] veth0_to_bond: entered allmulticast mode [ 394.984406][T12316] veth1_to_bond: entered promiscuous mode [ 394.990117][T12316] veth1_to_bond: entered allmulticast mode [ 394.996928][T12316] veth0_to_team: entered promiscuous mode [ 395.003058][T12316] veth0_to_team: entered allmulticast mode [ 395.074121][T12316] veth1_to_team: entered promiscuous mode [ 395.085770][ T30] audit: type=1400 audit(395.049:397173): avc: denied { read write } for pid=12329 comm="syz.0.1990" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 395.109230][ T5856] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 395.129842][T12316] veth1_to_team: entered allmulticast mode [ 395.130518][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.148208][T12316] veth0_to_batadv: entered promiscuous mode [ 395.154473][ T30] audit: type=1400 audit(395.049:397174): avc: denied { open } for pid=12329 comm="syz.0.1990" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 395.158500][T12331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1990'. [ 395.181930][ T30] audit: type=1400 audit(395.119:397175): avc: denied { ioctl } for pid=12329 comm="syz.0.1990" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 395.215166][T12332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1989'. [ 395.215320][T12316] veth0_to_batadv: entered allmulticast mode [ 395.225276][T12332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1989'. [ 395.225313][T12332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1989'. [ 395.250171][ T5927] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 395.259575][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.268106][T12316] batadv_slave_0: entered promiscuous mode [ 395.278641][ T5927] usb 3-1: Product: syz [ 395.284256][T12316] batadv_slave_0: entered allmulticast mode [ 395.291582][ T5927] usb 3-1: Manufacturer: syz [ 395.298116][ T5927] usb 3-1: SerialNumber: syz [ 395.300852][T12316] veth1_to_batadv: entered promiscuous mode [ 395.311960][ T5927] usb 3-1: config 0 descriptor?? [ 395.318761][ T5927] ati_remote 3-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 395.332698][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 395.382588][ T5856] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 395.392827][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.424148][T12316] veth1_to_batadv: entered allmulticast mode [ 395.430509][T12316] batadv_slave_1: entered promiscuous mode [ 395.436575][ T5856] usb 2-1: Product: syz [ 395.440711][ T5856] usb 2-1: Manufacturer: syz [ 395.448739][ T5856] usb 2-1: SerialNumber: syz [ 395.454728][T12316] batadv_slave_1: entered allmulticast mode [ 395.548782][ T5927] usb 3-1: USB disconnect, device number 4 [ 395.584170][T12316] xfrm0: entered promiscuous mode [ 395.594299][T12316] xfrm0: entered allmulticast mode [ 395.609205][T12316] veth0_to_hsr: entered promiscuous mode [ 395.619385][T12316] veth0_to_hsr: entered allmulticast mode [ 395.629090][T12316] veth1_to_hsr: entered promiscuous mode [ 395.635734][T12316] veth1_to_hsr: entered allmulticast mode [ 395.641884][T12316] hsr_slave_1: entered promiscuous mode [ 395.649549][T12316] hsr_slave_1: entered allmulticast mode [ 395.658434][T12316] veth1_virt_wifi: entered promiscuous mode [ 395.664677][T12316] veth1_virt_wifi: entered allmulticast mode [ 395.695994][T12316] veth0_virt_wifi: entered promiscuous mode [ 395.716536][T12316] veth0_virt_wifi: entered allmulticast mode [ 395.724686][T12316] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 395.745139][T12316] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 395.762812][T12316] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 395.787620][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.794783][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.850057][T12341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.050393][ T5856] mxuport 2-1:254.0: Direct firmware load for moxa/moxa-1450.fw failed with error -2 [ 396.079521][ T5856] mxuport 2-1:254.0: Falling back to sysfs fallback for: moxa/moxa-1450.fw [ 396.106596][T12345] sch_tbf: burst 19872 is lower than device lo mtu (117440530) ! [ 396.183415][T12345] FAULT_INJECTION: forcing a failure. [ 396.183415][T12345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.196551][T12345] CPU: 0 UID: 0 PID: 12345 Comm: syz.3.1993 Not tainted syzkaller #0 PREEMPT(full) [ 396.196572][T12345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 396.196582][T12345] Call Trace: [ 396.196587][T12345] [ 396.196594][T12345] dump_stack_lvl+0x16c/0x1f0 [ 396.196615][T12345] should_fail_ex+0x512/0x640 [ 396.196630][T12345] _copy_from_user+0x2e/0xd0 [ 396.196646][T12345] copy_msghdr_from_user+0x98/0x160 [ 396.196660][T12345] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 396.196679][T12345] ___sys_sendmsg+0xfe/0x1d0 [ 396.196692][T12345] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.196720][T12345] __sys_sendmsg+0x16d/0x220 [ 396.196732][T12345] ? __pfx___sys_sendmsg+0x10/0x10 [ 396.196753][T12345] do_syscall_64+0xcd/0x4e0 [ 396.196768][T12345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.196779][T12345] RIP: 0033:0x7fb17b18eec9 [ 396.196787][T12345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.196797][T12345] RSP: 002b:00007fb17c09f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.196807][T12345] RAX: ffffffffffffffda RBX: 00007fb17b3e6090 RCX: 00007fb17b18eec9 [ 396.196814][T12345] RDX: 0000000000000000 RSI: 00002000000015c0 RDI: 0000000000000004 [ 396.196819][T12345] RBP: 00007fb17c09f090 R08: 0000000000000000 R09: 0000000000000000 [ 396.196825][T12345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.196831][T12345] R13: 00007fb17b3e6128 R14: 00007fb17b3e6090 R15: 00007ffd6a55ae08 [ 396.196843][T12345] [ 397.292525][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 397.352682][ T5927] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 397.452624][ T24] usb 3-1: device descriptor read/64, error -71 [ 397.703221][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 397.832521][ T5988] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 397.850097][ T24] usb 3-1: device descriptor read/64, error -71 [ 397.861539][T12365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1999'. [ 397.963363][ T24] usb usb3-port1: attempt power cycle [ 398.012551][ T5988] usb 5-1: Using ep0 maxpacket: 16 [ 398.022777][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.042516][ T5988] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 398.080167][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.091009][ T5988] usb 5-1: config 0 descriptor?? [ 398.412590][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 398.443282][ T24] usb 3-1: device descriptor read/8, error -71 [ 398.577432][ T5988] mcp2200 0003:04D8:00DF.0002: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.4-1/input0 [ 398.725195][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 398.753156][ T24] usb 3-1: device descriptor read/8, error -71 [ 398.862988][ T24] usb usb3-port1: unable to enumerate USB device [ 399.272838][ T24] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 399.504539][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 399.531010][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 399.711104][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 14585, setting to 1023 [ 399.741973][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 399.841234][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2003'. [ 400.283272][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.292869][ T24] usb 4-1: Product: syz [ 400.297056][ T24] usb 4-1: Manufacturer: syz [ 400.302351][ T24] usb 4-1: SerialNumber: syz [ 400.309493][ T24] usb 4-1: config 0 descriptor?? [ 400.376323][T12395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2005'. [ 400.513167][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 400.513183][ T30] audit: type=1400 audit(400.479:397187): avc: denied { read write } for pid=12396 comm="syz.2.2006" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 400.577757][ T30] audit: type=1400 audit(400.479:397188): avc: denied { open } for pid=12396 comm="syz.2.2006" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 400.687629][T12380] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 400.694173][T12380] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 400.717892][ T30] audit: type=1400 audit(400.669:397189): avc: denied { shutdown } for pid=12399 comm="syz.1.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 400.877504][T12407] lo: left promiscuous mode [ 400.882109][T12407] lo: left allmulticast mode [ 400.889918][T12407] tunl0: left promiscuous mode [ 400.894807][T12407] tunl0: left allmulticast mode [ 400.902138][T12407] gre0: left promiscuous mode [ 400.906909][T12407] gre0: left allmulticast mode [ 400.914785][T12407] gretap0: left promiscuous mode [ 400.919767][T12407] gretap0: left allmulticast mode [ 400.926917][T12407] erspan0: left promiscuous mode [ 400.931895][T12407] erspan0: left allmulticast mode [ 400.946313][T12407] ip_vti0: left promiscuous mode [ 400.951321][T12407] ip_vti0: left allmulticast mode [ 400.959097][T12407] ip6_vti0: left promiscuous mode [ 400.964216][T12407] ip6_vti0: left allmulticast mode [ 400.972043][T12407] sit0: left promiscuous mode [ 401.011435][T12407] sit0: left allmulticast mode [ 401.019246][T12407] ip6tnl0: left promiscuous mode [ 401.024287][T12407] ip6tnl0: left allmulticast mode [ 401.031842][T12407] ip6gre0: left promiscuous mode [ 401.036913][T12407] ip6gre0: left allmulticast mode [ 401.042926][T12407] syz_tun: left promiscuous mode [ 401.047901][T12407] syz_tun: left allmulticast mode [ 401.053447][T12407] ip6gretap0: left promiscuous mode [ 401.058670][T12407] ip6gretap0: left allmulticast mode [ 401.064398][T12407] bridge0: left allmulticast mode [ 401.069898][ T30] audit: type=1400 audit(401.009:397190): avc: denied { watch } for pid=12396 comm="syz.2.2006" path="/408/file0" dev="tmpfs" ino=2158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 401.069934][T12407] vcan0: left promiscuous mode [ 401.093770][T12380] vhci_hcd vhci_hcd.0: Device attached [ 401.097392][T12407] vcan0: left allmulticast mode [ 401.108005][T12407] bond0: left promiscuous mode [ 401.113069][T12407] bond_slave_0: left promiscuous mode [ 401.118528][T12407] bond_slave_1: left promiscuous mode [ 401.123977][T12407] bond0: left allmulticast mode [ 401.128833][T12407] bond_slave_0: left allmulticast mode [ 401.134293][T12407] bond_slave_1: left allmulticast mode [ 401.140219][T12407] team0: left promiscuous mode [ 401.144996][T12407] team_slave_0: left promiscuous mode [ 401.150427][T12407] team_slave_1: left promiscuous mode [ 401.155900][T12407] team0: left allmulticast mode [ 401.160745][T12407] team_slave_0: left allmulticast mode [ 401.166232][T12407] team_slave_1: left allmulticast mode [ 401.172093][T12407] dummy0: left promiscuous mode [ 401.176942][T12407] dummy0: left allmulticast mode [ 401.182151][T12407] nlmon0: left promiscuous mode [ 401.187028][T12407] nlmon0: left allmulticast mode [ 401.206782][ T30] audit: type=1400 audit(401.009:397191): avc: denied { watch_sb } for pid=12396 comm="syz.2.2006" path="/408/file0" dev="tmpfs" ino=2158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 401.230396][T12407] caif0: left promiscuous mode [ 401.235457][T12407] caif0: left allmulticast mode [ 401.240323][T12407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.332714][ T5988] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 401.485907][T12398] vhci_hcd: connection reset by peer [ 401.494567][ T24] usb 4-1: USB disconnect, device number 6 [ 401.551619][ T3585] vhci_hcd: stop threads [ 401.567132][ T3585] vhci_hcd: release socket [ 401.584350][ T3585] vhci_hcd: disconnect device [ 401.591589][T12413] pimreg3: entered allmulticast mode [ 401.607716][ T5955] usb 5-1: USB disconnect, device number 5 [ 401.984480][T12421] lo: entered promiscuous mode [ 401.989262][T12421] lo: entered allmulticast mode [ 401.995001][T12421] tunl0: entered promiscuous mode [ 402.000033][T12421] tunl0: entered allmulticast mode [ 402.005705][T12421] gre0: entered promiscuous mode [ 402.010658][T12421] gre0: entered allmulticast mode [ 402.016211][T12421] gretap0: entered promiscuous mode [ 402.021400][T12421] gretap0: entered allmulticast mode [ 402.027307][T12421] erspan0: entered promiscuous mode [ 402.033264][T12421] erspan0: entered allmulticast mode [ 402.039001][T12421] ip_vti0: entered promiscuous mode [ 402.044292][T12421] ip_vti0: entered allmulticast mode [ 402.050152][T12421] ip6_vti0: entered promiscuous mode [ 402.055460][T12421] ip6_vti0: entered allmulticast mode [ 402.061321][T12421] sit0: entered promiscuous mode [ 402.066287][T12421] sit0: entered allmulticast mode [ 402.071755][T12421] ip6tnl0: entered promiscuous mode [ 402.081717][T12421] ip6tnl0: entered allmulticast mode [ 402.087517][T12421] ip6gre0: entered promiscuous mode [ 402.092757][T12421] ip6gre0: entered allmulticast mode [ 402.098484][T12421] syz_tun: entered promiscuous mode [ 402.103707][T12421] syz_tun: entered allmulticast mode [ 402.109453][T12421] ip6gretap0: entered promiscuous mode [ 402.114940][T12421] ip6gretap0: entered allmulticast mode [ 402.120876][T12421] bridge0: entered promiscuous mode [ 402.126082][T12421] bridge0: entered allmulticast mode [ 402.131817][T12421] vcan0: entered promiscuous mode [ 402.136848][T12421] vcan0: entered allmulticast mode [ 402.142433][T12421] bond0: entered promiscuous mode [ 402.147513][T12421] bond_slave_0: entered promiscuous mode [ 402.153223][T12421] bond_slave_1: entered promiscuous mode [ 402.158913][T12421] batadv0: entered promiscuous mode [ 402.164167][T12421] bond0: entered allmulticast mode [ 402.169247][T12421] bond_slave_0: entered allmulticast mode [ 402.174946][T12421] bond_slave_1: entered allmulticast mode [ 402.180633][T12421] batadv0: entered allmulticast mode [ 402.186338][T12421] team0: entered promiscuous mode [ 402.191338][T12421] team_slave_0: entered promiscuous mode [ 402.197052][T12421] team_slave_1: entered promiscuous mode [ 402.202756][T12421] team0: entered allmulticast mode [ 402.207836][T12421] team_slave_0: entered allmulticast mode [ 402.213552][T12421] team_slave_1: entered allmulticast mode [ 402.219963][T12421] dummy0: entered promiscuous mode [ 402.225082][T12421] dummy0: entered allmulticast mode [ 402.230556][T12421] nlmon0: entered promiscuous mode [ 402.235653][T12421] nlmon0: entered allmulticast mode [ 402.241264][ T5939] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 402.265461][T12421] caif0: entered promiscuous mode [ 402.270499][T12421] caif0: entered allmulticast mode [ 402.275654][T12421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.332049][ T5955] lo speed is unknown, defaulting to 1000 [ 402.422704][ T30] audit: type=1400 audit(402.379:397192): avc: denied { bind } for pid=12423 comm="syz.0.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 402.443146][ T5939] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 402.450712][ T5939] usb 3-1: can't read configurations, error -61 [ 402.525829][ T30] audit: type=1400 audit(402.379:397193): avc: denied { name_bind } for pid=12423 comm="syz.0.2011" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 402.552521][ T30] audit: type=1400 audit(402.379:397194): avc: denied { node_bind } for pid=12423 comm="syz.0.2011" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 402.684310][ T30] audit: type=1400 audit(402.649:397195): avc: denied { create } for pid=12431 comm="syz.1.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 402.704969][ T5939] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 402.714511][T12426] all (unregistering): Released all slaves [ 402.795256][T12436] netlink: 'syz.1.2013': attribute type 3 has an invalid length. [ 402.803088][T12436] netlink: 'syz.1.2013': attribute type 3 has an invalid length. [ 402.979525][ T5939] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 402.996055][ T5939] usb 3-1: can't read configurations, error -61 [ 403.018075][ T5939] usb usb3-port1: attempt power cycle [ 403.052624][ T5927] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 403.250875][T12440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2010'. [ 403.352375][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 403.389176][ T5927] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 403.409045][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.471630][ T5939] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 403.497543][ T5927] pvrusb2: Hardware description: Terratec Grabster AV400 [ 403.535191][ T5927] pvrusb2: ********** [ 403.539192][ T5927] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 403.559116][ T5939] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 403.574577][ T5939] usb 3-1: can't read configurations, error -61 [ 403.612349][ T5927] pvrusb2: Important functionality might not be entirely working. [ 403.630310][ T30] audit: type=1400 audit(403.589:397196): avc: denied { create } for pid=12446 comm="syz.4.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 403.650583][ T5927] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 403.667680][ T5927] pvrusb2: ********** [ 403.697154][ T2335] pvrusb2: Invalid write control endpoint [ 403.724863][ T5939] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 403.946161][T12451] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2017'. [ 403.956664][T12451] netlink: 'syz.4.2017': attribute type 1 has an invalid length. [ 403.987056][ T5939] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 403.995471][ T5939] usb 3-1: can't read configurations, error -61 [ 404.001898][ T5939] usb usb3-port1: unable to enumerate USB device [ 404.021560][ T2335] pvrusb2: Invalid write control endpoint [ 404.030683][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 404.050575][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 404.104832][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 404.210277][ T2335] pvrusb2: Device being rendered inoperable [ 404.268845][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 404.382396][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 404.465194][T12459] netlink: 'syz.1.2018': attribute type 2 has an invalid length. [ 404.473517][T12459] netlink: 'syz.1.2018': attribute type 1 has an invalid length. [ 404.482146][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'. [ 404.814139][ T2335] pvrusb2: Attached sub-driver cx25840 [ 404.852662][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 404.878739][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 404.952096][T12461] overlayfs: missing 'workdir' [ 405.238987][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2020'. [ 405.586759][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 405.586771][ T30] audit: type=1400 audit(405.219:397199): avc: denied { connect } for pid=12463 comm="syz.2.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 406.022518][ T30] audit: type=1400 audit(405.299:397200): avc: denied { read write } for pid=12463 comm="syz.2.2020" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 406.330005][ T30] audit: type=1400 audit(405.299:397201): avc: denied { open } for pid=12463 comm="syz.2.2020" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 406.393037][ T30] audit: type=1400 audit(405.309:397202): avc: denied { ioctl } for pid=12463 comm="syz.2.2020" path="/dev/video1" dev="devtmpfs" ino=931 ioctlcmd=0x5613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 406.511567][ T30] audit: type=1400 audit(406.339:397203): avc: denied { name_bind } for pid=12471 comm="syz.2.2022" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 406.552822][ T5988] vhci_hcd: vhci_device speed not set [ 407.212776][ T5927] usb 4-1: USB disconnect, device number 7 [ 407.562842][T12481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.714326][ T30] audit: type=1400 audit(407.659:397204): avc: denied { connect } for pid=12484 comm="syz.4.2025" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 407.838370][ T30] audit: type=1400 audit(407.659:397205): avc: denied { write } for pid=12484 comm="syz.4.2025" laddr=fe80::2cec:e1ff:fe8b:972c lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 407.913417][ T30] audit: type=1400 audit(407.819:397206): avc: denied { read } for pid=12488 comm="syz.3.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 408.052515][ T30] audit: type=1400 audit(407.859:397207): avc: denied { append } for pid=12486 comm="syz.1.2026" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 408.970361][ T30] audit: type=1400 audit(408.859:397208): avc: denied { watch } for pid=12500 comm="syz.4.2029" path="/412" dev="tmpfs" ino=2183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 409.392394][T12504] libceph: resolve '4' (ret=-3): failed [ 409.546353][T12506] tipc: Enabling of bearer rejected, failed to enable media [ 409.646023][ T5927] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 409.861689][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2032'. [ 410.122652][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 410.283801][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 410.296257][ T5927] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 410.319687][ T5927] usb 3-1: config 0 has no interface number 0 [ 410.341761][ T5927] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 410.364172][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.421918][ T5927] usb 3-1: Product: syz [ 410.435461][ T5927] usb 3-1: Manufacturer: syz [ 410.456454][ T5927] usb 3-1: SerialNumber: syz [ 410.583221][ T5927] usb 3-1: config 0 descriptor?? [ 410.620341][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 410.620354][ T30] audit: type=1400 audit(410.579:397214): avc: denied { create } for pid=12522 comm="syz.1.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 410.668961][ T30] audit: type=1400 audit(410.579:397215): avc: denied { read write } for pid=12522 comm="syz.1.2034" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 410.702168][T12521] block device autoloading is deprecated and will be removed. [ 410.738576][ T30] audit: type=1400 audit(410.579:397216): avc: denied { open } for pid=12522 comm="syz.1.2034" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 410.802687][ T30] audit: type=1400 audit(410.759:397217): avc: denied { write } for pid=12503 comm="syz.2.2030" path="socket:[30332]" dev="sockfs" ino=30332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 410.825941][ T5927] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 410.994491][ T5927] usb 3-1: USB disconnect, device number 13 [ 411.125531][T12489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.657143][T12544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.692491][ T30] audit: type=1400 audit(411.609:397218): avc: denied { create } for pid=12542 comm="syz.4.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 412.008046][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2039'. [ 412.264896][T12556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2042'. [ 412.302623][ T5927] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 412.368766][ T30] audit: type=1400 audit(412.329:397219): avc: denied { ioctl } for pid=12557 comm="syz.2.2043" path="socket:[30398]" dev="sockfs" ino=30398 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 412.427878][ T30] audit: type=1400 audit(412.329:397220): avc: denied { bind } for pid=12557 comm="syz.2.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 412.564052][ T5927] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 412.572074][ T5927] usb 5-1: config 0 has no interface number 0 [ 412.587681][ T5927] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 412.602677][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.610713][ T5927] usb 5-1: Product: syz [ 412.616947][ T5927] usb 5-1: Manufacturer: syz [ 412.621564][ T5927] usb 5-1: SerialNumber: syz [ 412.987387][ T30] audit: type=1400 audit(412.649:397221): avc: denied { getopt } for pid=12561 comm="syz.0.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 413.021408][ T5927] usb 5-1: config 0 descriptor?? [ 413.048767][T12566] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 413.074324][T12566] block device autoloading is deprecated and will be removed. [ 413.090600][ T30] audit: type=1400 audit(413.049:397222): avc: denied { bind } for pid=12567 comm="syz.3.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 413.113216][ T30] audit: type=1400 audit(413.049:397223): avc: denied { ioctl } for pid=12567 comm="syz.3.2046" path="socket:[30415]" dev="sockfs" ino=30415 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 413.332325][ T5927] usb 5-1: f81604_read: reg: 105 failed: -EPIPE [ 413.342604][ T5927] f81604 5-1:0.4: Setting termination of CH#0 failed: -EPIPE [ 413.342635][ T5927] f81604 5-1:0.4: probe with driver f81604 failed with error -32 [ 413.368218][ T5927] usb 5-1: USB disconnect, device number 6 [ 413.920170][T12578] kvm: user requested TSC rate below hardware speed [ 413.952798][T12578] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1839467258 (3678934516 ns) > initial count (3516277304 ns). Using initial count to start timer. [ 414.089547][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 414.098453][T12580] bridge_slave_1: left allmulticast mode [ 414.104126][T12580] bridge_slave_1: left promiscuous mode [ 414.109753][T12580] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.123309][T12580] bridge_slave_0: left allmulticast mode [ 414.128963][T12580] bridge_slave_0: left promiscuous mode [ 414.134771][T12580] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.240061][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'. [ 415.805027][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 415.805038][ T30] audit: type=1400 audit(415.769:397227): avc: denied { create } for pid=12606 comm="syz.4.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 416.542804][ T5927] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 416.554491][T12386] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 416.687812][ T30] audit: type=1400 audit(416.649:397228): avc: denied { setopt } for pid=12615 comm="syz.1.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 416.751154][ T30] audit: type=1400 audit(416.649:397229): avc: denied { bind } for pid=12615 comm="syz.1.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 416.780672][T12386] usb 5-1: Using ep0 maxpacket: 32 [ 416.785912][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 416.794562][T12386] usb 5-1: config index 0 descriptor too short (expected 1060, got 36) [ 416.803131][ T5927] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 416.812164][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.823711][T12386] usb 5-1: config 0 has an invalid interface number: 54 but max is 0 [ 416.842898][ T30] audit: type=1400 audit(416.649:397230): avc: denied { read } for pid=12615 comm="syz.1.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 416.862183][T12386] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.902108][T12386] usb 5-1: config 0 has no interface number 0 [ 416.908721][ T5927] pvrusb2: Hardware description: Terratec Grabster AV400 [ 416.918651][ T30] audit: type=1400 audit(416.699:397231): avc: denied { write } for pid=12615 comm="syz.1.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 416.924666][T12386] usb 5-1: config 0 interface 54 has no altsetting 0 [ 416.944931][ T5927] pvrusb2: ********** [ 416.948914][ T5927] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 416.979558][ T5927] pvrusb2: Important functionality might not be entirely working. [ 416.990411][T12386] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 417.002840][T12618] Can't find a SQUASHFS superblock on nullb0 [ 417.011700][T12386] usb 5-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 417.021981][ T5927] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 417.039635][T12386] usb 5-1: Product: syz [ 417.048136][T12386] usb 5-1: Manufacturer: syz [ 417.056918][ T5927] pvrusb2: ********** [ 417.062476][T12386] usb 5-1: SerialNumber: syz [ 417.104576][T12386] usb 5-1: config 0 descriptor?? [ 417.113949][ T2335] pvrusb2: Invalid write control endpoint [ 417.152766][ T30] audit: type=1400 audit(416.959:397232): avc: denied { mounton } for pid=12615 comm="syz.1.2060" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 417.238658][ T2335] pvrusb2: Invalid write control endpoint [ 417.265126][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 417.277656][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 417.285352][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 417.298437][ T2335] pvrusb2: Device being rendered inoperable [ 417.304604][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 417.312750][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 417.331977][ T2335] pvrusb2: Attached sub-driver cx25840 [ 417.337558][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 417.341840][T12386] ums_eneub6250 5-1:0.54: USB Mass Storage device detected [ 417.362091][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 417.444995][T12386] usb 5-1: USB disconnect, device number 7 [ 417.865868][T12630] comedi comedi0: fl512: I/O port conflict (0x3,16) [ 418.052535][ T5988] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 418.171963][ T30] audit: type=1400 audit(418.129:397233): avc: denied { connect } for pid=12633 comm="syz.0.2062" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 418.196453][ T30] audit: type=1400 audit(418.139:397234): avc: denied { name_connect } for pid=12633 comm="syz.0.2062" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 418.218569][ T5955] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 418.243796][ T5988] usb 4-1: config 0 has no interfaces? [ 418.249311][ T5988] usb 4-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 418.258443][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.269446][ T5988] usb 4-1: config 0 descriptor?? [ 418.464141][ T5955] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 418.476195][ T5955] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 418.485308][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.622843][ T30] audit: type=1400 audit(418.509:397235): avc: denied { ioctl } for pid=12637 comm="syz.0.2066" path="/415/file0" dev="tmpfs" ino=2204 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 418.948008][ T5955] usb 5-1: Product: syz [ 418.952194][ T5955] usb 5-1: Manufacturer: syz [ 418.980934][ T5955] usb 5-1: SerialNumber: syz [ 419.139006][ T5988] usb 3-1: USB disconnect, device number 14 [ 419.193174][ T5955] usb 5-1: selecting invalid altsetting 1 [ 419.205620][ T5955] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 419.205709][ T5955] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 419.226601][T12628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.237671][T12628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.256178][ T5955] usb 5-1: USB disconnect, device number 8 [ 419.297508][ T5939] usb 4-1: USB disconnect, device number 8 [ 419.408255][T12652] netlink: 'syz.2.2069': attribute type 3 has an invalid length. [ 419.420951][ T30] audit: type=1400 audit(419.379:397236): avc: denied { set_context_mgr } for pid=12651 comm="syz.2.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 420.410108][T12668] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2070'. [ 420.425067][T12668] netlink: 'syz.3.2070': attribute type 1 has an invalid length. [ 420.699527][T12675] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 420.717868][T12675] cramfs: wrong magic [ 421.062522][T12386] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 421.122222][T12681] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2076'. [ 422.183042][T12386] usb 3-1: Using ep0 maxpacket: 8 [ 422.201520][T12386] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 422.211911][T12386] usb 3-1: config 1 interface 0 has no altsetting 0 [ 422.223501][T12386] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 422.232567][T12386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.240516][T12386] usb 3-1: Product: syz [ 423.194683][T12386] usb 3-1: Manufacturer: syz [ 423.199276][T12386] usb 3-1: SerialNumber: syz [ 424.425258][T12692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2079'. [ 425.030298][T12386] usb 3-1: can't set config #1, error -71 [ 425.134945][T12386] usb 3-1: USB disconnect, device number 15 [ 425.431758][T12693] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2077'. [ 425.471759][T12693] netlink: 'syz.4.2077': attribute type 1 has an invalid length. [ 425.664531][T12699] netlink: 'syz.3.2080': attribute type 1 has an invalid length. [ 425.770246][T12699] 8021q: adding VLAN 0 to HW filter on device bond8 [ 425.875506][T12710] ISOFS: Unable to identify CD-ROM format. [ 426.018477][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 426.018496][ T30] audit: type=1400 audit(425.909:397242): avc: denied { connect } for pid=12704 comm="syz.2.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 426.150878][ T30] audit: type=1400 audit(425.919:397243): avc: denied { read } for pid=12704 comm="syz.2.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 426.920695][T12727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2089'. [ 426.952519][T12386] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 427.031752][T12729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2090'. [ 427.207229][T12386] usb 5-1: Using ep0 maxpacket: 16 [ 427.237986][T12386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.330354][ T30] audit: type=1326 audit(427.219:397244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.1.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44098eec9 code=0x7ffc0000 [ 427.337361][T12386] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 427.378338][T12386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.393803][T12386] usb 5-1: config 0 descriptor?? [ 427.410829][ T30] audit: type=1326 audit(427.219:397245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.1.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44098eec9 code=0x7ffc0000 [ 427.517364][T12742] loop6: detected capacity change from 0 to 63 [ 427.549930][ T30] audit: type=1326 audit(427.219:397246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.1.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff44098eec9 code=0x7ffc0000 [ 427.603706][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 427.617676][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 427.626313][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 427.640343][ T30] audit: type=1326 audit(427.219:397247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.1.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44098eec9 code=0x7ffc0000 [ 427.641446][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 427.782848][ T30] audit: type=1326 audit(427.219:397248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.1.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44098eec9 code=0x7ffc0000 [ 427.812912][ T30] audit: type=1326 audit(427.219:397249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.1.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff44098eec9 code=0x7ffc0000 [ 427.839207][ T30] audit: type=1326 audit(427.219:397250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.1.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44098eec9 code=0x7ffc0000 [ 427.964299][T12386] mcp2200 0003:04D8:00DF.0003: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.4-1/input0 [ 428.212765][ T30] audit: type=1326 audit(427.219:397251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.1.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44098eec9 code=0x7ffc0000 [ 428.360585][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 428.851043][T12760] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2099'. [ 429.960733][T12771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2102'. [ 430.716812][ T1572] usb 5-1: USB disconnect, device number 9 [ 430.845903][T12781] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 430.906861][T12781] netlink: 560 bytes leftover after parsing attributes in process `syz.2.2104'. [ 431.560464][T12795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.770154][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 431.770171][ T30] audit: type=1400 audit(431.709:397272): avc: denied { mount } for pid=12790 comm="syz.3.2108" name="/" dev="autofs" ino=32165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 432.596425][T12806] binder: BINDER_SET_CONTEXT_MGR already set [ 432.608262][T12806] binder: 12805:12806 ioctl 4018620d 200000000040 returned -16 [ 432.640240][T12807] binder: 12805:12807 ioctl c0306201 200000000080 returned -22 [ 432.729452][ T30] audit: type=1400 audit(432.689:397273): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 432.804220][ T30] audit: type=1400 audit(432.769:397274): avc: denied { ioctl } for pid=12813 comm="syz.2.2112" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 432.880030][ T30] audit: type=1400 audit(432.769:397275): avc: denied { setopt } for pid=12812 comm="syz.3.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 432.912975][ T1572] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 433.144952][ T1572] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 433.177001][ T1572] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 433.202644][ T5927] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 433.220024][ T1572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.375112][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 433.397568][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.427105][ T5927] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 433.456792][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.479775][ T5927] usb 4-1: config 0 descriptor?? [ 433.589681][ T30] audit: type=1400 audit(433.549:397276): avc: denied { create } for pid=12831 comm="syz.2.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 433.611986][ T30] audit: type=1400 audit(433.549:397277): avc: denied { connect } for pid=12831 comm="syz.2.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 433.642113][ T30] audit: type=1400 audit(433.599:397278): avc: denied { write } for pid=12831 comm="syz.2.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 433.645994][T12834] FAULT_INJECTION: forcing a failure. [ 433.645994][T12834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.677545][T12834] CPU: 0 UID: 0 PID: 12834 Comm: syz.2.2118 Not tainted syzkaller #0 PREEMPT(full) [ 433.677571][T12834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 433.677582][T12834] Call Trace: [ 433.677589][T12834] [ 433.677595][T12834] dump_stack_lvl+0x16c/0x1f0 [ 433.677622][T12834] should_fail_ex+0x512/0x640 [ 433.677647][T12834] _copy_from_user+0x2e/0xd0 [ 433.677672][T12834] copy_mount_options+0x76/0x190 [ 433.677699][T12834] __x64_sys_mount+0x1ac/0x310 [ 433.677722][T12834] ? __pfx___x64_sys_mount+0x10/0x10 [ 433.677752][T12834] do_syscall_64+0xcd/0x4e0 [ 433.677782][T12834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.677798][T12834] RIP: 0033:0x7f952358eec9 [ 433.677813][T12834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.677829][T12834] RSP: 002b:00007f95244c8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 433.677845][T12834] RAX: ffffffffffffffda RBX: 00007f95237e6090 RCX: 00007f952358eec9 [ 433.677856][T12834] RDX: 00002000000003c0 RSI: 0000200000000500 RDI: 0000000000000000 [ 433.677866][T12834] RBP: 00007f95244c8090 R08: 0000200000000280 R09: 0000000000000000 [ 433.677876][T12834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.677885][T12834] R13: 00007f95237e6128 R14: 00007f95237e6090 R15: 00007ffc4b956298 [ 433.677908][T12834] [ 433.903539][T12834] 9p: Unknown Cache mode or invalid value l [ 433.946252][T12838] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 434.037228][ T5927] mcp2200 0003:04D8:00DF.0004: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0 [ 434.082649][ T1572] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 434.184328][ T30] audit: type=1400 audit(434.149:397279): avc: denied { create } for pid=12839 comm="syz.0.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 434.203900][ T30] audit: type=1400 audit(434.159:397280): avc: denied { bind } for pid=12839 comm="syz.0.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 434.263917][ T1572] usb 3-1: Using ep0 maxpacket: 32 [ 434.286530][ T1572] usb 3-1: config index 0 descriptor too short (expected 61476, got 36) [ 434.320373][ T1572] usb 3-1: config 224 has an invalid interface number: 61 but max is -1 [ 434.349555][ T1572] usb 3-1: config 224 has an invalid descriptor of length 0, skipping remainder of the config [ 434.392641][ T1572] usb 3-1: config 224 has 1 interface, different from the descriptor's value: 0 [ 434.401864][ T1572] usb 3-1: config 224 has no interface number 0 [ 434.412288][ T1572] usb 3-1: config 224 interface 61 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.435617][ T1572] usb 3-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice=1e.fa [ 434.447489][ T1572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.465753][ T1572] usb 3-1: Product: syz [ 434.475439][ T1572] usb 3-1: Manufacturer: syz [ 434.485752][ T1572] usb 3-1: SerialNumber: syz [ 434.714126][ T1572] usb 3-1: USB disconnect, device number 16 [ 434.720490][ T30] audit: type=1400 audit(434.669:397281): avc: denied { write } for pid=12831 comm="syz.2.2118" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 434.750899][T12851] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2122'. [ 434.762645][T12851] netlink: 'syz.1.2122': attribute type 1 has an invalid length. [ 434.806806][T12851] 8021q: adding VLAN 0 to HW filter on device bond12 [ 436.368283][ T5939] usb 5-1: USB disconnect, device number 10 [ 436.481092][T12869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2125'. [ 436.549352][ T5939] usb 4-1: USB disconnect, device number 9 [ 436.659161][T12869] bridge_slave_1: left allmulticast mode [ 436.666423][T12869] bridge_slave_1: left promiscuous mode [ 436.686661][T12869] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.772674][T12879] netlink: 'syz.0.2127': attribute type 1 has an invalid length. [ 436.818584][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 436.818818][ T30] audit: type=1400 audit(436.769:397284): avc: denied { read write } for pid=12876 comm="syz.1.2128" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 436.822708][ T30] audit: type=1400 audit(436.779:397285): avc: denied { open } for pid=12876 comm="syz.1.2128" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 437.003290][T12879] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 437.639033][ T30] audit: type=1400 audit(437.599:397286): avc: denied { read } for pid=12886 comm="syz.3.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 437.671808][T12887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2129'. [ 437.808532][ T30] audit: type=1400 audit(437.769:397287): avc: denied { ioctl } for pid=12876 comm="syz.1.2128" path="socket:[31616]" dev="sockfs" ino=31616 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 437.991230][ T30] audit: type=1400 audit(437.949:397288): avc: denied { setopt } for pid=12886 comm="syz.3.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 438.234934][T12881] Driver unsupported XDP return value 0 on prog (id 90) dev N/A, expect packet loss! [ 439.067829][ T30] audit: type=1400 audit(439.029:397289): avc: denied { bind } for pid=12917 comm="syz.1.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 439.069353][T12920] netlink: 'syz.3.2138': attribute type 6 has an invalid length. [ 439.107249][T12920] netlink: 'syz.3.2138': attribute type 1 has an invalid length. [ 439.118065][T12920] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2138'. [ 439.399137][T12928] netlink: 'syz.2.2139': attribute type 2 has an invalid length. [ 439.581280][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.892552][ T5939] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 440.102754][ T5939] usb 4-1: Using ep0 maxpacket: 8 [ 440.112105][ T5939] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 440.129845][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.142506][ T5955] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 440.151308][T12939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2141'. [ 440.197812][ T5939] pvrusb2: Hardware description: Terratec Grabster AV400 [ 440.221304][T12939] netlink: 'syz.1.2141': attribute type 1 has an invalid length. [ 440.248528][ T5939] pvrusb2: ********** [ 440.252606][ T5939] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 440.307688][ T5939] pvrusb2: Important functionality might not be entirely working. [ 440.320763][ T5939] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 440.333592][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 440.342001][T12939] 8021q: adding VLAN 0 to HW filter on device bond13 [ 440.349498][ T5955] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 440.392598][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.407543][ T30] audit: type=1400 audit(440.369:397290): avc: denied { bind } for pid=12942 comm="syz.4.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.410262][ T5939] pvrusb2: ********** [ 440.434836][ T30] audit: type=1400 audit(440.369:397291): avc: denied { write } for pid=12942 comm="syz.4.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.453426][ T5955] pvrusb2: Hardware description: Terratec Grabster AV400 [ 440.467356][ T5955] pvrusb2: ********** [ 440.471963][ T5955] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 440.492909][ T2335] pvrusb2: Invalid write control endpoint [ 440.536403][ T5955] pvrusb2: Important functionality might not be entirely working. [ 440.565944][ T5955] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 440.592019][ T2335] pvrusb2: Invalid write control endpoint [ 440.598920][ T5955] pvrusb2: ********** [ 440.604804][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 440.615758][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 440.624849][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 440.672636][ T2335] pvrusb2: Device being rendered inoperable [ 440.788828][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 440.796161][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 440.807004][ T2335] pvrusb2: Attached sub-driver cx25840 [ 440.887594][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 440.919458][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 440.929560][ T2335] pvrusb2: Invalid write control endpoint [ 441.244000][T12962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2145'. [ 441.819666][ T30] audit: type=1400 audit(441.779:397292): avc: denied { read write } for pid=12946 comm="syz.1.2146" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 442.357774][ T2335] pvrusb2: Invalid write control endpoint [ 442.385888][ T30] audit: type=1400 audit(442.339:397293): avc: denied { open } for pid=12946 comm="syz.1.2146" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 442.409282][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 442.409296][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 442.409303][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 442.409311][ T2335] pvrusb2: Device being rendered inoperable [ 442.409346][ T2335] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 442.409401][ T2335] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 442.464012][ T2335] pvrusb2: Attached sub-driver cx25840 [ 442.544253][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 442.578738][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 442.622890][ T5955] usb 4-1: USB disconnect, device number 10 [ 442.730754][T12972] kvm: user requested TSC rate below hardware speed [ 443.920132][ T24] usb 3-1: USB disconnect, device number 17 [ 444.302681][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 444.341674][ T30] audit: type=1400 audit(444.289:397294): avc: denied { ioctl } for pid=12990 comm="syz.4.2155" path="socket:[32480]" dev="sockfs" ino=32480 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 444.366153][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.763973][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 444.789806][T13002] trusted_key: syz.1.2157 sent an empty control message without MSG_MORE. [ 444.882681][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 444.923516][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.222783][ T24] usb 3-1: config 0 descriptor?? [ 445.240350][ T24] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 445.276235][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 445.374405][ T24] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 445.550110][ T24] usb 3-1: media controller created [ 445.617218][ T30] audit: type=1400 audit(445.579:397295): avc: denied { write } for pid=12988 comm="syz.3.2154" path="socket:[32488]" dev="sockfs" ino=32488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 445.711531][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.855268][ T24] usb 3-1: selecting invalid altsetting 1 [ 445.972508][ T24] set interface failed [ 445.974121][ T24] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 446.039367][ T24] error writing reg: 0xff, val: 0x00 [ 446.120676][ T30] audit: type=1400 audit(445.759:397296): avc: denied { read append } for pid=13010 comm="syz.4.2159" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 446.137660][ T24] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 446.236941][ T30] audit: type=1400 audit(445.759:397297): avc: denied { open } for pid=13010 comm="syz.4.2159" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 446.264193][ T30] audit: type=1400 audit(445.759:397298): avc: denied { map } for pid=13010 comm="syz.4.2159" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 446.289393][ T30] audit: type=1400 audit(445.769:397299): avc: denied { write execute } for pid=13010 comm="syz.4.2159" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 446.466181][ T1572] usb 3-1: USB disconnect, device number 18 [ 446.661664][ T30] audit: type=1400 audit(446.619:397300): avc: denied { listen } for pid=13022 comm="syz.1.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 446.802647][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 447.122930][T13031] Bluetooth: MGMT ver 1.23 [ 447.129004][ T24] usb 4-1: device descriptor read/64, error -71 [ 447.691458][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 447.822528][ T24] usb 4-1: device descriptor read/64, error -71 [ 447.901607][T13038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2166'. [ 447.932840][ T24] usb usb4-port1: attempt power cycle [ 447.938392][T13040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2167'. [ 447.947782][T13037] netlink: 'syz.2.2166': attribute type 1 has an invalid length. [ 447.967969][T13040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2167'. [ 447.982493][T13037] 8021q: adding VLAN 0 to HW filter on device bond9 [ 448.288559][T13049] 9pnet_virtio: no channels available for device @ [ 448.292808][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 448.333885][ T24] usb 4-1: device descriptor read/8, error -71 [ 448.691477][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 448.714469][ T1572] libceph: connect (1)[c::]:6789 error -101 [ 448.714554][ T24] usb 4-1: device descriptor read/8, error -71 [ 448.743248][ T1572] libceph: mon0 (1)[c::]:6789 connect error [ 448.795651][ T5955] libceph: connect (1)[b::]:6789 error -101 [ 448.812201][ T5955] libceph: mon0 (1)[b::]:6789 connect error [ 448.843832][ T24] usb usb4-port1: unable to enumerate USB device [ 448.916603][T13061] ceph: No mds server is up or the cluster is laggy [ 449.021977][T13065] ceph: No mds server is up or the cluster is laggy [ 449.031997][ T5955] libceph: connect (1)[b::]:6789 error -101 [ 449.172824][ T1572] libceph: connect (1)[c::]:6789 error -101 [ 449.185789][ T5955] libceph: mon0 (1)[b::]:6789 connect error [ 449.214259][ T1572] libceph: mon0 (1)[c::]:6789 connect error [ 449.376987][T13055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2171'. [ 449.446296][T13055] netlink: 'syz.2.2171': attribute type 1 has an invalid length. [ 449.458215][T13070] kvm: user requested TSC rate below hardware speed [ 449.511139][T13055] 8021q: adding VLAN 0 to HW filter on device bond10 [ 449.653059][ T30] audit: type=1400 audit(449.609:397301): avc: denied { kexec_image_load } for pid=13075 comm="syz.3.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 449.956923][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2174'. [ 450.225796][T13086] FAULT_INJECTION: forcing a failure. [ 450.225796][T13086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.226787][T13086] [ 450.226792][T13086] ====================================================== [ 450.226796][T13086] WARNING: possible circular locking dependency detected [ 450.226800][T13086] syzkaller #0 Not tainted [ 450.226806][T13086] ------------------------------------------------------ [ 450.226809][T13086] syz.2.2176/13086 is trying to acquire lock: [ 450.226814][T13086] ffffffff8e4cecc0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 450.226843][T13086] [ 450.226843][T13086] but task is already holding lock: [ 450.226846][T13086] ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 450.226869][T13086] [ 450.226869][T13086] which lock already depends on the new lock. [ 450.226869][T13086] [ 450.226872][T13086] [ 450.226872][T13086] the existing dependency chain (in reverse order) is: [ 450.226875][T13086] [ 450.226875][T13086] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 450.226887][T13086] _raw_spin_lock_nested+0x31/0x40 [ 450.226899][T13086] raw_spin_rq_lock_nested+0x29/0x130 [ 450.226910][T13086] task_rq_lock+0xcf/0x490 [ 450.226920][T13086] cgroup_move_task+0x81/0x2a0 [ 450.226933][T13086] css_set_move_task+0x288/0x5f0 [ 450.226942][T13086] cgroup_post_fork+0x201/0x9e0 [ 450.226953][T13086] copy_process+0x5cfa/0x7690 [ 450.226966][T13086] kernel_clone+0xfc/0x930 [ 450.226978][T13086] user_mode_thread+0xc7/0x110 [ 450.226991][T13086] rest_init+0x23/0x2b0 [ 450.226998][T13086] start_kernel+0x3ee/0x4d0 [ 450.227009][T13086] x86_64_start_reservations+0x18/0x30 [ 450.227021][T13086] x86_64_start_kernel+0x130/0x190 [ 450.227032][T13086] common_startup_64+0x13e/0x148 [ 450.227042][T13086] [ 450.227042][T13086] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 450.227054][T13086] _raw_spin_lock_irqsave+0x3a/0x60 [ 450.227064][T13086] try_to_wake_up+0xb7/0x1870 [ 450.227075][T13086] __wake_up_common+0x132/0x1f0 [ 450.227089][T13086] __wake_up+0x31/0x60 [ 450.227101][T13086] tty_port_default_wakeup+0x2a/0x40 [ 450.227115][T13086] serial8250_tx_chars+0x68e/0x860 [ 450.227128][T13086] serial8250_handle_irq+0x761/0xcb0 [ 450.227141][T13086] serial8250_default_handle_irq+0x9a/0x250 [ 450.227155][T13086] serial8250_interrupt+0xf5/0x1b0 [ 450.227170][T13086] __handle_irq_event_percpu+0x229/0x7d0 [ 450.227182][T13086] handle_irq_event+0xab/0x1e0 [ 450.227193][T13086] handle_edge_irq+0x3ca/0x9e0 [ 450.227203][T13086] __common_interrupt+0xcd/0x2f0 [ 450.227217][T13086] common_interrupt+0xba/0xe0 [ 450.227225][T13086] asm_common_interrupt+0x26/0x40 [ 450.227235][T13086] pv_native_safe_halt+0xf/0x20 [ 450.227246][T13086] default_idle+0x13/0x20 [ 450.227258][T13086] default_idle_call+0x6d/0xb0 [ 450.227272][T13086] do_idle+0x391/0x510 [ 450.227283][T13086] cpu_startup_entry+0x4f/0x60 [ 450.227294][T13086] start_secondary+0x21d/0x2b0 [ 450.227308][T13086] common_startup_64+0x13e/0x148 [ 450.227317][T13086] [ 450.227317][T13086] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 450.227329][T13086] _raw_spin_lock_irqsave+0x3a/0x60 [ 450.227339][T13086] __wake_up+0x1c/0x60 [ 450.227350][T13086] tty_port_default_wakeup+0x2a/0x40 [ 450.227362][T13086] serial8250_tx_chars+0x68e/0x860 [ 450.227375][T13086] serial8250_handle_irq+0x761/0xcb0 [ 450.227388][T13086] serial8250_default_handle_irq+0x9a/0x250 [ 450.227402][T13086] serial8250_interrupt+0xf5/0x1b0 [ 450.227416][T13086] __handle_irq_event_percpu+0x229/0x7d0 [ 450.227427][T13086] handle_irq_event+0xab/0x1e0 [ 450.227438][T13086] handle_edge_irq+0x3ca/0x9e0 [ 450.227448][T13086] __common_interrupt+0xcd/0x2f0 [ 450.227460][T13086] common_interrupt+0xba/0xe0 [ 450.227468][T13086] asm_common_interrupt+0x26/0x40 [ 450.227476][T13086] pv_native_safe_halt+0xf/0x20 [ 450.227487][T13086] default_idle+0x13/0x20 [ 450.227500][T13086] default_idle_call+0x6d/0xb0 [ 450.227515][T13086] do_idle+0x391/0x510 [ 450.227525][T13086] cpu_startup_entry+0x4f/0x60 [ 450.227536][T13086] start_secondary+0x21d/0x2b0 [ 450.227550][T13086] common_startup_64+0x13e/0x148 [ 450.227559][T13086] [ 450.227559][T13086] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 450.227571][T13086] _raw_spin_lock_irqsave+0x3a/0x60 [ 450.227581][T13086] serial8250_console_write+0x181/0x1890 [ 450.227595][T13086] console_flush_all+0x801/0xc60 [ 450.227606][T13086] console_unlock+0xd8/0x210 [ 450.227616][T13086] vprintk_emit+0x418/0x6d0 [ 450.227627][T13086] _printk+0xc7/0x100 [ 450.227634][T13086] register_console+0xc2d/0x11b0 [ 450.227645][T13086] univ8250_console_init+0x5f/0x90 [ 450.227658][T13086] console_init+0x14f/0x680 [ 450.227669][T13086] start_kernel+0x29f/0x4d0 [ 450.227679][T13086] x86_64_start_reservations+0x18/0x30 [ 450.227691][T13086] x86_64_start_kernel+0x130/0x190 [ 450.227702][T13086] common_startup_64+0x13e/0x148 [ 450.227711][T13086] [ 450.227711][T13086] -> #0 (console_owner){-.-.}-{0:0}: [ 450.227723][T13086] __lock_acquire+0x12a6/0x1ce0 [ 450.227737][T13086] lock_acquire+0x179/0x350 [ 450.227744][T13086] console_lock_spinning_enable+0xb0/0xd0 [ 450.227760][T13086] console_flush_all+0x7aa/0xc60 [ 450.227770][T13086] console_unlock+0xd8/0x210 [ 450.227780][T13086] vprintk_emit+0x418/0x6d0 [ 450.227791][T13086] _printk+0xc7/0x100 [ 450.227798][T13086] should_fail_ex+0x4e7/0x640 [ 450.227810][T13086] strncpy_from_user+0x3b/0x2e0 [ 450.227820][T13086] strncpy_from_user_nofault+0x7f/0x180 [ 450.227832][T13086] bpf_bprintf_prepare+0xe90/0x13f0 [ 450.227847][T13086] bpf_trace_printk+0xda/0x190 [ 450.227855][T13086] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 450.227863][T13086] bpf_trace_run2+0x236/0x590 [ 450.227871][T13086] __bpf_trace_contention_begin+0xc9/0x110 [ 450.227886][T13086] trace_contention_begin.constprop.0+0xde/0x160 [ 450.227897][T13086] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 450.227909][T13086] do_raw_spin_lock+0x20e/0x2b0 [ 450.227918][T13086] raw_spin_rq_lock_nested+0x7e/0x130 [ 450.227929][T13086] __schedule+0x307/0x5de0 [ 450.227939][T13086] preempt_schedule_irq+0x51/0x90 [ 450.227950][T13086] irqentry_exit+0x36/0x90 [ 450.227961][T13086] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 450.227970][T13086] fs_context_for_mount+0x0/0x30 [ 450.227982][T13086] __x64_sys_fsopen+0xeb/0x240 [ 450.227994][T13086] do_syscall_64+0xcd/0x4e0 [ 450.228006][T13086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.228015][T13086] [ 450.228015][T13086] other info that might help us debug this: [ 450.228015][T13086] [ 450.228018][T13086] Chain exists of: [ 450.228018][T13086] console_owner --> &p->pi_lock --> &rq->__lock [ 450.228018][T13086] [ 450.228031][T13086] Possible unsafe locking scenario: [ 450.228031][T13086] [ 450.228034][T13086] CPU0 CPU1 [ 450.228036][T13086] ---- ---- [ 450.228039][T13086] lock(&rq->__lock); [ 450.228044][T13086] lock(&p->pi_lock); [ 450.228051][T13086] lock(&rq->__lock); [ 450.228057][T13086] lock(console_owner); [ 450.228062][T13086] [ 450.228062][T13086] *** DEADLOCK *** [ 450.228062][T13086] [ 450.228064][T13086] 4 locks held by syz.2.2176/13086: [ 450.228070][T13086] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 450.228093][T13086] #1: ffffffff8e5c16a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590 [ 450.228114][T13086] #2: ffffffff8e5af100 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 450.228137][T13086] #3: ffffffff8e5af170 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 450.228161][T13086] [ 450.228161][T13086] stack backtrace: [ 450.228165][T13086] CPU: 1 UID: 0 PID: 13086 Comm: syz.2.2176 Not tainted syzkaller #0 PREEMPT(full) [ 450.228177][T13086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 450.228183][T13086] Call Trace: [ 450.228186][T13086] [ 450.228190][T13086] dump_stack_lvl+0x116/0x1f0 [ 450.228205][T13086] print_circular_bug+0x275/0x350 [ 450.228226][T13086] check_noncircular+0x14c/0x170 [ 450.228249][T13086] __lock_acquire+0x12a6/0x1ce0 [ 450.228268][T13086] lock_acquire+0x179/0x350 [ 450.228276][T13086] ? console_lock_spinning_enable+0x9f/0xd0 [ 450.228289][T13086] ? console_lock_spinning_enable+0x88/0xd0 [ 450.228301][T13086] console_lock_spinning_enable+0xb0/0xd0 [ 450.228313][T13086] ? console_lock_spinning_enable+0x9f/0xd0 [ 450.228324][T13086] console_flush_all+0x7aa/0xc60 [ 450.228337][T13086] ? __pfx_console_flush_all+0x10/0x10 [ 450.228350][T13086] ? is_printk_cpu_sync_owner+0x32/0x40 [ 450.228364][T13086] console_unlock+0xd8/0x210 [ 450.228375][T13086] ? __pfx_console_unlock+0x10/0x10 [ 450.228387][T13086] ? do_raw_spin_unlock+0x140/0x230 [ 450.228398][T13086] ? _printk+0xc7/0x100 [ 450.228406][T13086] ? __down_trylock_console_sem+0xb0/0x140 [ 450.228416][T13086] vprintk_emit+0x418/0x6d0 [ 450.228428][T13086] ? __pfx_vprintk_emit+0x10/0x10 [ 450.228440][T13086] ? __pfx_bpf_trace_run2+0x10/0x10 [ 450.228452][T13086] _printk+0xc7/0x100 [ 450.228460][T13086] ? __pfx__printk+0x10/0x10 [ 450.228469][T13086] ? __pfx____ratelimit+0x10/0x10 [ 450.228482][T13086] should_fail_ex+0x4e7/0x640 [ 450.228494][T13086] strncpy_from_user+0x3b/0x2e0 [ 450.228506][T13086] strncpy_from_user_nofault+0x7f/0x180 [ 450.228518][T13086] bpf_bprintf_prepare+0xe90/0x13f0 [ 450.228535][T13086] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 450.228549][T13086] ? finish_task_switch.isra.0+0x221/0xc10 [ 450.228562][T13086] ? rcu_is_watching+0x12/0xc0 [ 450.228576][T13086] ? bpf_trace_run2+0x3e1/0x590 [ 450.228586][T13086] bpf_trace_printk+0xda/0x190 [ 450.228595][T13086] ? __pfx_bpf_trace_printk+0x10/0x10 [ 450.228605][T13086] ? bpf_trace_run2+0x3e1/0x590 [ 450.228617][T13086] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 450.228624][T13086] bpf_trace_run2+0x236/0x590 [ 450.228634][T13086] ? __pfx_bpf_trace_run2+0x10/0x10 [ 450.228645][T13086] ? __lock_acquire+0x62e/0x1ce0 [ 450.228661][T13086] __bpf_trace_contention_begin+0xc9/0x110 [ 450.228677][T13086] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 450.228694][T13086] ? find_held_lock+0x2b/0x80 [ 450.228706][T13086] trace_contention_begin.constprop.0+0xde/0x160 [ 450.228717][T13086] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 450.228731][T13086] ? __lock_acquire+0xb97/0x1ce0 [ 450.228746][T13086] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 450.228766][T13086] do_raw_spin_lock+0x20e/0x2b0 [ 450.228777][T13086] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 450.228787][T13086] ? rcu_qs+0x2b/0xe0 [ 450.228798][T13086] ? rcu_note_context_switch+0x192/0x1e00 [ 450.228811][T13086] raw_spin_rq_lock_nested+0x7e/0x130 [ 450.228823][T13086] ? preempt_schedule_irq+0x51/0x90 [ 450.228834][T13086] __schedule+0x307/0x5de0 [ 450.228845][T13086] ? __x64_sys_fsopen+0xd3/0x240 [ 450.228858][T13086] ? do_syscall_64+0xcd/0x4e0 [ 450.228870][T13086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.228883][T13086] ? __pfx___schedule+0x10/0x10 [ 450.228897][T13086] preempt_schedule_irq+0x51/0x90 [ 450.228908][T13086] irqentry_exit+0x36/0x90 [ 450.228920][T13086] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 450.228930][T13086] RIP: 0010:fs_context_for_mount+0x0/0x30 [ 450.228943][T13086] Code: db ff e9 1d fa ff ff e8 3e 78 db ff e9 40 fa ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 89 f5 53 48 89 fb e8 30 11 75 ff 89 ea 48 89 df 45 [ 450.228953][T13086] RSP: 0018:ffffc9000c7c7ef8 EFLAGS: 00000246 [ 450.228960][T13086] RAX: 0000000000000000 RBX: ffff88805958b1c0 RCX: ffffffff81c380af [ 450.228967][T13086] RDX: ffff88803487a440 RSI: 0000000000000000 RDI: ffffffff8e8fe000 [ 450.228973][T13086] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 450.228978][T13086] R10: ffffffff90ab7697 R11: 0000000000000000 R12: ffffffff8e8fe000 [ 450.228984][T13086] R13: 00002000000000c0 R14: 0000000000000000 R15: 0000000000000000 [ 450.228992][T13086] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 450.229005][T13086] __x64_sys_fsopen+0xeb/0x240 [ 450.229019][T13086] do_syscall_64+0xcd/0x4e0 [ 450.229032][T13086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.229042][T13086] RIP: 0033:0x7f952358eec9 [ 450.229049][T13086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.229059][T13086] RSP: 002b:00007f9524503038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 450.229067][T13086] RAX: ffffffffffffffda RBX: 00007f95237e5fa0 RCX: 00007f952358eec9 [ 450.229074][T13086] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000000c0 [ 450.229079][T13086] RBP: 00007f9524503090 R08: 0000000000000000 R09: 0000000000000000 [ 450.229085][T13086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.229091][T13086] R13: 00007f95237e6038 R14: 00007f95237e5fa0 R15: 00007ffc4b956298 [ 450.229100][T13086] [ 451.491040][T13086] CPU: 1 UID: 0 PID: 13086 Comm: syz.2.2176 Not tainted syzkaller #0 PREEMPT(full) [ 451.491059][T13086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 451.491067][T13086] Call Trace: [ 451.491074][T13086] [ 451.491080][T13086] dump_stack_lvl+0x116/0x1f0 [ 451.491102][T13086] should_fail_ex+0x512/0x640 [ 451.491121][T13086] strncpy_from_user+0x3b/0x2e0 [ 451.491136][T13086] strncpy_from_user_nofault+0x7f/0x180 [ 451.491153][T13086] bpf_bprintf_prepare+0xe90/0x13f0 [ 451.491175][T13086] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 451.491194][T13086] ? finish_task_switch.isra.0+0x221/0xc10 [ 451.491212][T13086] ? rcu_is_watching+0x12/0xc0 [ 451.491230][T13086] ? bpf_trace_run2+0x3e1/0x590 [ 451.491244][T13086] bpf_trace_printk+0xda/0x190 [ 451.491257][T13086] ? __pfx_bpf_trace_printk+0x10/0x10 [ 451.491270][T13086] ? bpf_trace_run2+0x3e1/0x590 [ 451.491285][T13086] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 451.491296][T13086] bpf_trace_run2+0x236/0x590 [ 451.491309][T13086] ? __pfx_bpf_trace_run2+0x10/0x10 [ 451.491324][T13086] ? __lock_acquire+0x62e/0x1ce0 [ 451.491344][T13086] __bpf_trace_contention_begin+0xc9/0x110 [ 451.491364][T13086] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 451.491386][T13086] ? find_held_lock+0x2b/0x80 [ 451.491402][T13086] trace_contention_begin.constprop.0+0xde/0x160 [ 451.491417][T13086] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 451.491436][T13086] ? __lock_acquire+0xb97/0x1ce0 [ 451.491454][T13086] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 451.491494][T13086] do_raw_spin_lock+0x20e/0x2b0 [ 451.491508][T13086] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 451.491521][T13086] ? rcu_qs+0x2b/0xe0 [ 451.491535][T13086] ? rcu_note_context_switch+0x192/0x1e00 [ 451.491552][T13086] raw_spin_rq_lock_nested+0x7e/0x130 [ 451.491567][T13086] ? preempt_schedule_irq+0x51/0x90 [ 451.491582][T13086] __schedule+0x307/0x5de0 [ 451.491596][T13086] ? __x64_sys_fsopen+0xd3/0x240 [ 451.491613][T13086] ? do_syscall_64+0xcd/0x4e0 [ 451.491629][T13086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.491647][T13086] ? __pfx___schedule+0x10/0x10 [ 451.491665][T13086] preempt_schedule_irq+0x51/0x90 [ 451.491680][T13086] irqentry_exit+0x36/0x90 [ 451.491695][T13086] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 451.491709][T13086] RIP: 0010:fs_context_for_mount+0x0/0x30 [ 451.491727][T13086] Code: db ff e9 1d fa ff ff e8 3e 78 db ff e9 40 fa ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 89 f5 53 48 89 fb e8 30 11 75 ff 89 ea 48 89 df 45 [ 451.491739][T13086] RSP: 0018:ffffc9000c7c7ef8 EFLAGS: 00000246 [ 451.491751][T13086] RAX: 0000000000000000 RBX: ffff88805958b1c0 RCX: ffffffff81c380af [ 451.491759][T13086] RDX: ffff88803487a440 RSI: 0000000000000000 RDI: ffffffff8e8fe000 [ 451.491767][T13086] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 451.491774][T13086] R10: ffffffff90ab7697 R11: 0000000000000000 R12: ffffffff8e8fe000 [ 451.491783][T13086] R13: 00002000000000c0 R14: 0000000000000000 R15: 0000000000000000 [ 451.491793][T13086] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 451.491810][T13086] __x64_sys_fsopen+0xeb/0x240 [ 451.491828][T13086] do_syscall_64+0xcd/0x4e0 [ 451.491844][T13086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.491858][T13086] RIP: 0033:0x7f952358eec9 [ 451.491874][T13086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.491885][T13086] RSP: 002b:00007f9524503038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 451.491896][T13086] RAX: ffffffffffffffda RBX: 00007f95237e5fa0 RCX: 00007f952358eec9 [ 451.491904][T13086] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000000c0 [ 451.491912][T13086] RBP: 00007f9524503090 R08: 0000000000000000 R09: 0000000000000000 [ 451.491920][T13086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.491927][T13086] R13: 00007f95237e6038 R14: 00007f95237e5fa0 R15: 00007ffc4b956298 [ 451.491939][T13086] [ 460.045738][ T5856] mxuport 2-1:254.0: Firmware moxa/moxa-1450.fw not found [ 460.053008][ T5856] mxuport 2-1:254.0: Using device firmware version v64.3c.37 [ 460.060450][ T5856] mxuport 2-1:254.0: required endpoints missing [ 460.068355][ T5856] usb 2-1: USB disconnect, device number 14