last executing test programs: 2m25.640724365s ago: executing program 1 (id=1006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b4050000000000007110870000000000a6000400000000009500000004000000e43de4fbf0ba01ca0c758a65369a36f060837490a429835468fac65e0443bb873b66567f551a60f6b19ffd82f45d098f87ab1b3458de1908ec319901e5b1c0b201362c42ac016762b357a4e7f8d858cb1083b02cdc83cb228f5016aed881e41f68f8317860bc002354ae8d26a1859253ea607dce6e004f7ad36323f15ee45e819e1fa7629a4dafc721ce6cdd5514e9fcdde608e21310be96d67c126d97b3cb1080a9f182490713ca05cac74b8a"], 0x0, 0x5}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa0000000000000000020013"], 0x70}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) 2m25.5361626s ago: executing program 1 (id=1007): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/150, 0x96}, {&(0x7f0000001440)=""/4102, 0x1006}, {&(0x7f0000000040)=""/127, 0x7f}], 0x3) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)='_', 0x1) 2m23.877439758s ago: executing program 1 (id=1009): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004041}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe8800000000000000000000000001016401010000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffffac1414aa000004d53c00000002000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r3 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 2m23.020888734s ago: executing program 1 (id=1012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) (fail_nth: 3) 2m21.636167152s ago: executing program 1 (id=1018): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 'dh\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000240)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000002000)=[{{&(0x7f00000003c0)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003240)=""/4096, 0x1000}], 0x1}, 0xcd}, {{&(0x7f0000001480)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f0000001500)=""/139, 0x8b}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/221, 0xdd}, {&(0x7f00000016c0)=""/236, 0xec}], 0x4, &(0x7f00000017c0)=""/138, 0x8a}, 0x7ff}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001880)=""/131, 0x83}], 0x1, &(0x7f0000001980)=""/244, 0xf4}, 0x55bd}, {{&(0x7f0000001a80)=@rc, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001b00)=""/172, 0xac}, {&(0x7f0000001bc0)}, {&(0x7f0000001c00)=""/166, 0xa6}, {&(0x7f0000001cc0)=""/236, 0xec}], 0x4, &(0x7f0000001e00)=""/94, 0x5e}, 0x3}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e80)}, {&(0x7f0000001ec0)=""/245, 0xf5}], 0x2}, 0x7fff}], 0x5, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) syz_usb_connect(0xf400, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) (async) syz_usb_connect(0xf400, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0xffffffffffffffff, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x1000000000002) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000e0c0)=""/102400, 0x19000) (async) read$msr(r3, &(0x7f000000e0c0)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={r5, 0x41}, &(0x7f0000000140)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) 2m20.553782123s ago: executing program 1 (id=1023): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x105241) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab03, r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2m5.340596264s ago: executing program 32 (id=1023): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x105241) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab03, r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 13.406153578s ago: executing program 5 (id=1509): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) (fail_nth: 1) 12.392508558s ago: executing program 5 (id=1513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}, {&(0x7f00000009c0)="b1435c7b947125b263d85ac30cb7ffc7855292ba72d726851d9fb18d574c4aa8f894cd3602a01f09ba677fa14acb586e07ab13b1a014c9160756617d178a5dbfa122490cc0851b6ca0d5f91e82648608568b1043da588a3c75fd27ebceb994e892e07da952d99bbbcdb5a33c63aa05d3abba5970a9aae7448e356ebfc0bd7944ea9aa53d274367cf71ca1a4f72530e9a11629da0ff33b4d667dff62d", 0x9c}, {&(0x7f0000000ac0)="2bd4c5812005a616b58a605767f6c99ac4038e8661a4ad1fef7ff53a605c0111af3f354bf44a1f38659151648684b12a85fc9859f6aa0eaeb459db0e24616333a4aa01dff64593257b06606b14fed386bd9123ed5a907e565a716479a7409252d80ab3631cea08c6f9b1337a17037dd32aac54e9127f49c321b183592fc9720d9da8eca7c4dc8177b1f9d83e8e68e81f38eead6e4405c11e92aabd8e634bdd88baab2b0c9c15c5047d8fc82c6cdeb8f2f4cf2196602b3e5f256b6a57f5f90a71090b", 0xc2}], 0x4}, 0x4) 9.476509105s ago: executing program 3 (id=1528): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x168, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x8, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x138, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x6}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_POLICE={0x18, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}]}, @TCA_BASIC_ACT={0x110, 0x3, [@m_simple={0x50, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x9ff, 0x5, 0x747, 0xb}}]}, {0xc, 0x6, "aa72702d77e3f4fd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xbc, 0xf, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}]}, {0x34, 0x6, "e55fa15b0676e00a9b9ea4fb92d15179da93faa8199989a09e79fed8b6b4af86c4d3dd924c74ca0b95768e2b5fc10c07"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x48010, &(0x7f0000000900)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x89d}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}, {@blksize}, {@default_permissions}], [{@flag='mand'}, {@audit}, {@dont_hash}, {@flag='ro'}, {@audit}]}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x1, 0x0, 0x0, 0x4, {0xa, 0x1, 0xd70, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4000000}}}, 0x32) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) 6.442574206s ago: executing program 4 (id=1537): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de2145", 0x26}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd92", 0x76}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a", 0x9c}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c822", 0x8a}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c576a12a3e669d3688abb7db23544f78bd0580b8545dde37241ced32a9e92a4295af773a12336be81140", 0x7b}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd8", 0x7a}], 0x4}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.441323772s ago: executing program 4 (id=1538): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) write$proc_mixer(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="4449474954414c310a424153532027434420436170747572652053776974e3682720303030303030040000003030303030303030"], 0x6d) dup3(r1, r0, 0x0) 6.370891348s ago: executing program 2 (id=1539): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00004e1000/0x2000)=nil, 0x2000, 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) mmap$snddsp(&(0x7f00005f0000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x1b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) eventfd2(0x8, 0x80800) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r8, 0xffffffffffffffff}) r10 = epoll_create1(0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x8000001, 0xa, 0x0, 0x5, 0x100, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000001c0)) dup3(r8, r7, 0x0) 6.34075343s ago: executing program 4 (id=1540): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000000)=0xffffffff, 0x4) (async) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x90000) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x48) (async) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) (async) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="7effffff0040295eefd600000000000050008b32391c3378450000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r5 = gettid() (async) r6 = gettid() tkill(r5, 0x12) (async) tkill(r5, 0x1) (async) tkill(r6, 0x14) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) (async) syz_io_uring_setup(0x1de3, &(0x7f0000000000)={0x0, 0xc9b4, 0x0, 0x2, 0x40004334}, &(0x7f0000000140), &(0x7f0000000240)) 6.227938463s ago: executing program 5 (id=1541): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b63, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x308, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x308}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 6.225348103s ago: executing program 0 (id=1542): syz_emit_ethernet(0x1b9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ptrace$peek(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0x7, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0x7fffffff, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x88, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) (fail_nth: 1) 6.157089177s ago: executing program 2 (id=1543): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x7}, 0x20000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$BLKGETZONESZ(r4, 0x80041284, &(0x7f0000000180)=0x3) ioctl$COMEDI_INSNLIST(r8, 0x8010640b, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0xe000003, 0x0, 0x0, 0x1, 0x3}]}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000783af7d9f9001000010400"/25, @ANYRES32=0x0, @ANYBLOB="00000000035000001c0012800b00010067656e65766500000c00028008000100020000001400030067656e65766531000000000000000000"], 0x50}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000500000000000000800000001811", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r10 = eventfd(0xf3) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000000c0)={r10, 0x3b, 0x2}) pread64(r4, &(0x7f0000000240)=""/164, 0x131, 0x131) 6.156653162s ago: executing program 4 (id=1544): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x44, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xc}]}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendto$inet(r1, &(0x7f00000004c0)="c339d289ba66f0ef968d222b42c2fd6c51f38411a51cfdfc6a15f70371ee4c43455d7d031162ec6cc2691bd574448935e462db21e2f81f16910e948e4fc3102c2953fbb2f81c4c2d9d06f06b9fceb398af4ee51e299557baa8d9c34eaa99e48bb81d7a178b70b893894924c78799ba9555d4afea57d5de84226259f968e66ce7f8a10d264441702ef2", 0x89, 0x4000001, &(0x7f00000002c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$kcm(0x29, 0x5, 0x0) accept4(r6, 0x0, 0x0, 0x80000) syz_io_uring_setup(0x4cbf, &(0x7f0000000380)={0x0, 0x64bb, 0x1000, 0x1, 0x4}, &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) socket$rds(0x15, 0x5, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff6, 0x1) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) 6.133319537s ago: executing program 3 (id=1545): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x10, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$tipc(0x1e, 0x5, 0x0) io_setup(0x5, &(0x7f0000000180)=0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0xffffffff, "421ae3753785251500e9e29b00", 0xffffffffffffffff}) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) bind$tipc(r3, &(0x7f0000000340)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e1f, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @local}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004051}, 0x4008000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x1400001000001, 0x2) 5.354657308s ago: executing program 0 (id=1546): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000000c0)={0x4c, r0, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x25, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_b, @initial, {0x9, 0x40}}, @addba_resp={0x3, 0x1, {0xe1, 0x44, {0x1, 0x0, 0x7, 0x1}, 0x3}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c010}, 0x8800) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 5.309093787s ago: executing program 2 (id=1547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) r1 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1f, 0x100005, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) r3 = fcntl$dupfd(r2, 0x406, r1) write$cgroup_pid(r3, &(0x7f0000000240), 0xfdef) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES32=r2, @ANYBLOB="2c46a76df17b35cfa33d", @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006180)={0x2020}, 0x2020) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f0000000080)={0x10, 0x204}) socket$inet_udp(0x2, 0x2, 0x0) r6 = memfd_create(&(0x7f0000000180)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x7f\x00~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x10200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) pwrite64(r6, &(0x7f00000008c0)='/', 0x1, 0x0) lseek(r6, 0x0, 0x4) sendfile(r6, r6, &(0x7f00000001c0), 0x7fa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001100), 0x61c0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde08004500005c0000000000019078ac1e0001ac0314aa05079078e00000e04000000000000000000400007f00000100000000442cfd0300000000000000006401010100000000ac14140000000000ac1414bb00000000e0000002000000005e8358133514c915803e996c1fa5b66fbc0ab5d617a87eed7f6e372bc073182fcfc5d695062d65dcabda0ee676de602b415d7e124ab55acbb166341728f8d1562463c854b4617f096a53a6278e2af3e1bd5cd556eab0b51cdbfbafde54ecfe25033121d7d96fe8a24fe57a0aa89e5170a159d6c8befe98ac2cb85a00"/241], 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$unix(0x1, 0x1, 0x0) 4.966247663s ago: executing program 0 (id=1548): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000d980708b5192100c7980000000109021b00012000ac00090400000107000009090585", @ANYRES8], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r1, 0xd, 0x5, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x1) acct(&(0x7f0000000040)='./file0\x00') r2 = getpid() prlimit64(r2, 0x0, &(0x7f0000000340)={0x847, 0x7}, &(0x7f0000000480)) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r8], 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x0, 0x20000, 0x2, 0x6dd, 0x10, 0x10200, 0x10, 0x3, 0x20, 0xffffffff, 0x20, 0x80, 0x0, 0x0, 0x0}) r9 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, 0x0, 0x0, 0x8000e5, 0x0, 0x0, 0x14, 0xe4}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) 4.953777576s ago: executing program 2 (id=1549): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de2145", 0x26}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd92", 0x76}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a", 0x9c}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c822", 0x8a}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c576a12a3e669d3688abb7db23544f78bd0580b8545dde37241ced32a9e92a4295af773a12336be81140", 0x7b}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd8", 0x7a}], 0x4}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.931669197s ago: executing program 4 (id=1550): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) write$proc_mixer(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="4449474954414c310a424153532027434420436170747572652053776974e3682720303030303030040000003030303030303030"], 0x6d) dup3(r1, r0, 0x0) 4.510857736s ago: executing program 4 (id=1551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}, {0x0}, {&(0x7f00000009c0)="b1435c7b947125b263d85ac30cb7ffc7855292ba72d726851d9fb18d574c4aa8f894cd3602a01f09ba677fa14acb586e07ab13b1a014c9160756617d178a5dbfa122490cc0851b6ca0d5f91e82648608568b1043da588a3c75fd27ebceb994e892e07da952d99bbbcdb5a33c63aa05d3abba5970a9aae7448e356ebfc0bd7944ea9aa53d274367cf71ca1a4f72530e9a11629da0ff33b4d667dff62d", 0x9c}, {&(0x7f0000000ac0)="2bd4c5812005a616b58a605767f6c99ac4038e8661a4ad1fef7ff53a605c0111af3f354bf44a1f38659151648684b12a85fc9859f6aa0eaeb459db0e24616333a4aa01dff64593257b06606b14fed386bd9123ed5a907e565a716479a7409252d80ab3631cea08c6f9b1337a17037dd32aac54e9127f49c321b183592fc9720d9da8eca7c4dc8177b1f9d83e8e68e81f38eead6e4405c11e92aabd8e634bdd88baab2b0c9c15c5047d8fc82c6cdeb8f2f4cf2196602b3e5f256b6a57f5f90a71090b", 0xc2}], 0x5}, 0x4) 4.433602165s ago: executing program 2 (id=1552): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') fsopen(0x0, 0x406) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x131}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x58, 0x6000, @fd_index=0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) (fail_nth: 1) 4.185210369s ago: executing program 3 (id=1553): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') fsopen(0x0, 0x406) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001440)=""/102374, 0x18fe6) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x131}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x58, 0x6000, @fd_index=0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) 3.548801078s ago: executing program 3 (id=1554): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000b00)={[0x9]}, 0x8, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000b40)=[0x8, 0xb3], 0x2) r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r3, 0x0, 0x1, 0x4}}, 0x20) syz_usb_connect(0x4, 0x8c2, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000ac0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x10, 0xfb, 0xef, 0xff, 0xff}, 0x9b, &(0x7f00000009c0)={0x5, 0xf, 0x9b, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2a, 0x7, 0x81, 0x9, 0x8}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x8, 0xf00, 0x4, [0xc000, 0xff003f, 0x0, 0xc0]}, @generic={0x44, 0x10, 0x4, "0e8178d560455eb970cbf53374e783b0cd3a0f7b441f8f6f7567ba096956dce1b43d3af0f9e2fe2e4f9bd5c58c2c62b5b719d1cb7deef0e6a349f5eac28ffaf77b"}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "ff954facacac77d1a3df191ea9eb4d1a"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "e59dfc512ce84f24534037caa9d6b3ea"}]}, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x40f}}]}) 3.548420632s ago: executing program 2 (id=1555): bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000900)=ANY=[@ANYBLOB="1d0000000400000002000000000000000102", @ANYRES32, @ANYBLOB="0000000000000000000000920000000000000000987a4292f0c18a9312b0552b303a007698998e70a1711bb63b687d971e8bcd331a45e512a7187503ce19edc7ba2c8d328bee9c94547b38af3c9701fe20a3548b9f85700aa9d8320c8efb0947dc64215e4bcf972904f2293f2e086b35745b665c81143d12adf3855680b6531fe59d72c357023694651d7ea44bd60ad77c97ba05124199ca71177769eaf79efd98740fd5abd80fd213240b805b3fc9975dcc5591", @ANYRES32, @ANYBLOB="0100000005"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000308000540000000001c0008800c00014000000000000001ff0c000240000000000000ae6014000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000600)=@gcm_256={{0x304}, "ed649d8448419757", "b6350d4c214f323d45da5d661422e41f69fe1ff928fe123f5c26fa5d841b634f", "a2487b83", "15f11f930b93194a"}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0xa002a014}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 2.416076614s ago: executing program 5 (id=1556): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000580)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b63, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000004c0)="93432224dd859ec9b7dbd6e3aac445879d4e04c8597d3202736a105f536f9169073c64682f53656b88e7f79f40e24da9c7e3e615ed03e0bdbf2695808e6a4c964065d8eae13a2a635f9b7238feaba0e1d15f2b6814d82e56cda484676e2f6922dafe9a8a559f7c7e522a94abc3cdc10910ed3f4f50cf9e6ee6a2aea26606f7d562ad0f881859b35c19f534acb188", 0x8e}, {&(0x7f00000002c0)="d238577f92411fbb7e1b375e170c6776baea17aa460c46faff7e7e19852bbb784647f77b5449421bf7043d6fd555de986c9c8b65b14b15277af57e5b3a31055d53432fcff254d9e9b8b3f33c09421efd88b0403d067083e759ce58fc5bb9", 0x5e}, {0x0}, {&(0x7f0000000900)="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", 0xfde}, {&(0x7f0000001b00)="fbaa5ccdf7e888b102b5dbc3e588f400066fc19c24cd43a481d8bd7dd15943edfe8ef6138c0656d6bda9ecd4544600c117970e65f2313c26a23e10ce210f605cde6574a61421b0a7ff52175f62c72bd820440ecca59fc79c839b2b08885a9d953e2514d671affd1f8aa8eaec65e5a5b17130664dc53ff9114032cc8e243bda7eceed1440192dc93e182068249765abbfedebbfaa9b08a9f81ca0c058b997bf08faed20af6de55d7eaa08523a0c628e72fff7e652b80dcd777dadf0418e7aae215e094ec382bd4842e51ef55d00"/217, 0xd9}], 0x6, &(0x7f0000000740)}}, {{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000001900)="cd33209c198d76b55750f96c7234ca1352b89a33810ab3d974acb17d26ec90308f779428ab91b6176e1be3734b31d482bb4fc05ae61b6c02efa012ff301cf134c9d775a31eaebc8f0a5a2e205e208e334a159766128057986aafbb50901759cf57b668349c7767ae4a7cafeadda948b64a31e79956ed671de88f6f41ef03b3b704aa23f67598461826de50cae22d9e89c6789117cfbebbe3c1f343f1970912295115c25b8781a12ffb8e77da9d3bbe5ddaf06d589fec6ea717", 0xb9}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYRESHEX, @ANYBLOB="e21a9e20a985caa183e2c65c1bc1a1956e8a767cd82d69b8b16b1b6a3ff39dc7b35421de78897f2d3db9b9be69931fdb7a6e9ae8a6944134de81da5584514f5cdecaa76140e867cdf7cfe62687e3449ad829843b7dab94458d267b14ad92462517fbdd5b0b65557503ca9ab54ca0fbcea41baef422396b477e2b5cbde931a9699885319b31341b4d66c6c7071387322367bec954ad0a665ebd390b7c09ef0de933ef0466c82ef58d7c0ebc326542ce1a8b1d87146a74abef66e1ff96fbc0e53e1e8c353ea234b29dc7b73f511c767c667aa577cbb276d8d3f2a3c8a29252a869", @ANYRES32, @ANYRESOCT=r3], 0x20}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)="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", 0x1000}, {&(0x7f00000005c0)}], 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00010000000200007100"/19, @ANYRES32=0x0, @ANYBLOB="000000001000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC], 0x70, 0x404}}], 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x308, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x308}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 2.321473926s ago: executing program 3 (id=1557): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x7}, 0x20000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$BLKGETZONESZ(r4, 0x80041284, &(0x7f0000000180)=0x3) ioctl$COMEDI_INSNLIST(r8, 0x8010640b, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0xe000003, 0x0, 0x0, 0x1, 0x3}]}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000783af7d9f9001000010400"/25, @ANYRES32=0x0, @ANYBLOB="00000000035000001c0012800b00010067656e65766500000c00028008000100020000001400030067656e65766531000000000000000000"], 0x50}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000500000000000000800000001811", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r10 = eventfd(0xf3) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000000c0)={r10, 0x3b, 0x2}) pread64(r4, &(0x7f0000000240)=""/164, 0x131, 0x131) 1.987133044s ago: executing program 0 (id=1558): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000000c0)={0x4c, r0, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x25, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_b, @initial, {0x9, 0x40}}, @addba_resp={0x3, 0x1, {0xe1, 0x44, {0x1, 0x0, 0x7, 0x1}, 0x3}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c010}, 0x8800) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc1"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 1.928802176s ago: executing program 0 (id=1559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x561140, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x1, 0x0, 0x1000000, 0x0, 0x0, 0x5}) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x1, 0x0, 0x1000000, 0x0, 0x0, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x10000) (async) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x10000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x800000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, 0x0, 0x10) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaaaa86dd60cb653e00293afffe800000000000000000000000000007fe8000000000000000000000000000aa890090780000000000000000000000000000000000000001fc0100"/94], 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES32=r0], 0x1c}}, 0x804) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="e09ce86ee539b400438ac1ba698bdb0a91c661b94f1f2eb6f37ad85da2d317df1aa0e2e4830b64fd2738300af845929b9380ef9b453e37855e937c29450a567f668bda5ce43fe77d7d67e178d59ee622084fa35a918a2932d83a5c813b964be8d2777687f6a9000000aa4ac1baea241a09", @ANYRES64=r0], 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="e09ce86ee539b400438ac1ba698bdb0a91c661b94f1f2eb6f37ad85da2d317df1aa0e2e4830b64fd2738300af845929b9380ef9b453e37855e937c29450a567f668bda5ce43fe77d7d67e178d59ee622084fa35a918a2932d83a5c813b964be8d2777687f6a9000000aa4ac1baea241a09", @ANYRES64=r0], 0x0) 1.645529459s ago: executing program 3 (id=1560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x78477000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.108918303s ago: executing program 0 (id=1561): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x168, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x8, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x138, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x6}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_POLICE={0x18, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}]}, @TCA_BASIC_ACT={0x110, 0x3, [@m_simple={0x50, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x9ff, 0x5, 0x747, 0xb}}]}, {0xc, 0x6, "aa72702d77e3f4fd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xbc, 0xf, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}]}, {0x34, 0x6, "e55fa15b0676e00a9b9ea4fb92d15179da93faa8199989a09e79fed8b6b4af86c4d3dd924c74ca0b95768e2b5fc10c07"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x48010, &(0x7f0000000900)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x89d}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}, {@blksize}, {@default_permissions}], [{@flag='mand'}, {@audit}, {@dont_hash}, {@flag='ro'}, {@audit}]}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x4, {0xa, 0x1, 0xd70, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4000000}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) 149.462938ms ago: executing program 5 (id=1562): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de2145", 0x26}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd92", 0x76}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a", 0x9c}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c822", 0x8a}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c576a12a3e669d3688abb7db23544f78bd0580b8545dde37241ced32a9e92a4295af773a12336be81140", 0x7b}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd8", 0x7a}], 0x4}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 5 (id=1563): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {0xfff3}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) read$char_usb(r0, &(0x7f00000000c0)=""/30, 0x1e) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x3f00000000000000) kernel console output (not intermixed with test programs): transmit queue 0 timed out 5010 ms [ 480.334411][ C1] lec:lec_tx_timeout: lec0 [ 480.763403][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 480.763422][ T30] audit: type=1400 audit(1770349102.488:584): avc: denied { write } for pid=10436 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 480.882926][ T5877] usb 5-1: USB disconnect, device number 22 [ 481.088806][ T30] audit: type=1400 audit(1770349103.318:585): avc: denied { getopt } for pid=10447 comm="syz.5.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 481.144025][ T30] audit: type=1400 audit(1770349103.318:586): avc: denied { ioctl } for pid=10447 comm="syz.5.1220" path="socket:[31552]" dev="sockfs" ino=31552 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 481.444569][T10459] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 481.593117][ T5877] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 481.850354][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.893133][T10460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1215'. [ 481.933971][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.066913][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.082410][ T5877] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.092198][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.101615][ T5877] usb 1-1: config 0 descriptor?? [ 482.531499][ T5877] plantronics 0003:047F:FFFF.001C: item 0 4 0 8 parsing failed [ 482.586373][ T5877] plantronics 0003:047F:FFFF.001C: parse failed [ 482.599308][ T5877] plantronics 0003:047F:FFFF.001C: probe with driver plantronics failed with error -22 [ 482.737675][ T5946] usb 1-1: USB disconnect, device number 22 [ 483.403731][T10484] FAULT_INJECTION: forcing a failure. [ 483.403731][T10484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.524667][T10484] CPU: 0 UID: 0 PID: 10484 Comm: syz.2.1233 Not tainted syzkaller #0 PREEMPT(full) [ 483.524685][T10484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 483.524692][T10484] Call Trace: [ 483.524696][T10484] [ 483.524701][T10484] dump_stack_lvl+0x100/0x190 [ 483.524722][T10484] should_fail_ex.cold+0x5/0xa [ 483.524734][T10484] _copy_from_user+0x2e/0xd0 [ 483.524750][T10484] __sys_bpf+0x243/0x5050 [ 483.524765][T10484] ? __pfx___sys_bpf+0x10/0x10 [ 483.524776][T10484] ? proc_fail_nth_write+0x9f/0x220 [ 483.524791][T10484] ? find_held_lock+0x2b/0x80 [ 483.524810][T10484] ? find_held_lock+0x2b/0x80 [ 483.524823][T10484] ? ksys_write+0x190/0x250 [ 483.524839][T10484] ? __mutex_unlock_slowpath+0x15c/0x790 [ 483.524861][T10484] ? fput+0x79/0x100 [ 483.524875][T10484] ? ksys_write+0x1ac/0x250 [ 483.524886][T10484] ? __pfx_ksys_write+0x10/0x10 [ 483.524900][T10484] __x64_sys_bpf+0x7b/0xc0 [ 483.524913][T10484] ? lockdep_hardirqs_on+0x78/0x100 [ 483.524925][T10484] do_syscall_64+0xc9/0xf80 [ 483.524938][T10484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.524949][T10484] RIP: 0033:0x7fed7439aeb9 [ 483.524959][T10484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.524970][T10484] RSP: 002b:00007fed725f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 483.524981][T10484] RAX: ffffffffffffffda RBX: 00007fed74615fa0 RCX: 00007fed7439aeb9 [ 483.524988][T10484] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 483.524995][T10484] RBP: 00007fed725f6090 R08: 0000000000000000 R09: 0000000000000000 [ 483.525001][T10484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.525007][T10484] R13: 00007fed74616038 R14: 00007fed74615fa0 R15: 00007ffe37ebbf68 [ 483.525023][T10484] [ 483.774794][T10486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1234'. [ 484.341896][ T30] audit: type=1326 audit(1770349106.699:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.0.1235" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa03d79aeb9 code=0x0 [ 484.897818][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 484.974681][ T30] audit: type=1400 audit(1770349107.392:588): avc: denied { connect } for pid=10476 comm="syz.3.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 485.073920][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 485.095229][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 485.107592][ T5946] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 485.125330][ T30] audit: type=1400 audit(1770349107.423:589): avc: denied { ioctl } for pid=10476 comm="syz.3.1231" path="socket:[32740]" dev="sockfs" ino=32740 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 485.160994][ T10] usb 3-1: config 1 has an invalid interface number: 138 but max is 0 [ 485.186456][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.207434][ T10] usb 3-1: config 1 has no interface number 0 [ 485.231527][ T10] usb 3-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.260240][ T5946] usb 5-1: Using ep0 maxpacket: 8 [ 485.266073][ T5946] usb 5-1: too many configurations: 102, using maximum allowed: 8 [ 485.303612][ T10] usb 3-1: config 1 interface 138 has no altsetting 0 [ 485.316913][ T5947] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 485.389075][ T10] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 485.398549][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.408909][ T10] usb 3-1: Product: syz [ 485.414139][ T10] usb 3-1: Manufacturer: syz [ 485.419060][ T10] usb 3-1: SerialNumber: syz [ 485.497267][ T5946] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 485.547381][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.561891][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 485.616688][ T5946] usb 5-1: Product: syz [ 485.636572][ T5946] usb 5-1: Manufacturer: syz [ 485.649054][ T5947] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.671484][ T5946] usb 5-1: SerialNumber: syz [ 485.682836][ T5947] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 485.714956][ T5946] usb 5-1: config 0 descriptor?? [ 485.885213][ T5946] gspca_main: 047d:5003 too many config [ 485.891077][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 485.902808][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 485.917886][T10506] syzkaller0: entered promiscuous mode [ 485.923371][T10506] syzkaller0: entered allmulticast mode [ 485.964416][ T5947] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.997284][ T5947] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 486.106280][ T10] usb 3-1: USB disconnect, device number 24 [ 486.125269][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.158121][ T5947] usb 4-1: Product: syz [ 486.167121][ T5947] usb 4-1: Manufacturer: syz [ 486.183948][ T5947] usb 4-1: SerialNumber: syz [ 486.217512][ T5947] usb 4-1: config 0 descriptor?? [ 486.249197][ T5947] usb 4-1: can't set config #0, error -71 [ 486.311339][ T5947] usb 4-1: USB disconnect, device number 24 [ 486.353090][ T7786] udevd[7786]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.439308][ T5890] usb 5-1: USB disconnect, device number 23 [ 486.574623][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 486.711443][ T30] audit: type=1400 audit(2000000000.283:590): avc: denied { create } for pid=10522 comm="syz.0.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 486.745875][ T10] usb 6-1: device descriptor read/64, error -71 [ 486.775957][ T30] audit: type=1400 audit(2000000000.283:591): avc: denied { bind } for pid=10522 comm="syz.0.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 487.100499][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 487.122216][ T30] audit: type=1400 audit(2000000000.283:592): avc: denied { name_bind } for pid=10522 comm="syz.0.1246" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 487.146290][ T30] audit: type=1400 audit(2000000000.283:593): avc: denied { node_bind } for pid=10522 comm="syz.0.1246" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 487.170455][T10526] input input15: cannot allocate more than FF_MAX_EFFECTS effects [ 487.206731][ T30] audit: type=1400 audit(2000000000.514:594): avc: denied { setopt } for pid=10525 comm="syz.3.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 487.241017][ T10] usb 6-1: device descriptor read/64, error -71 [ 487.360288][ T10] usb usb6-port1: attempt power cycle [ 487.372202][ T30] audit: type=1400 audit(2000000000.976:595): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 487.813019][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 487.857862][ T10] usb 6-1: device descriptor read/8, error -71 [ 487.912205][T10542] FAULT_INJECTION: forcing a failure. [ 487.912205][T10542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.944969][T10542] CPU: 1 UID: 0 PID: 10542 Comm: syz.4.1251 Not tainted syzkaller #0 PREEMPT(full) [ 487.944999][T10542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 487.945011][T10542] Call Trace: [ 487.945017][T10542] [ 487.945025][T10542] dump_stack_lvl+0x100/0x190 [ 487.945056][T10542] should_fail_ex.cold+0x5/0xa [ 487.945079][T10542] _copy_from_user+0x2e/0xd0 [ 487.945107][T10542] copy_msghdr_from_user+0x9f/0x4f0 [ 487.945129][T10542] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 487.945164][T10542] ___sys_sendmsg+0x106/0x1e0 [ 487.945187][T10542] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.945221][T10542] ? find_held_lock+0x2b/0x80 [ 487.945266][T10542] __sys_sendmsg+0x170/0x220 [ 487.945293][T10542] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.945336][T10542] do_syscall_64+0xc9/0xf80 [ 487.945365][T10542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.945385][T10542] RIP: 0033:0x7f80b7f9aeb9 [ 487.945402][T10542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.945421][T10542] RSP: 002b:00007f80b8f1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.945441][T10542] RAX: ffffffffffffffda RBX: 00007f80b8215fa0 RCX: 00007f80b7f9aeb9 [ 487.945455][T10542] RDX: 0000000020004000 RSI: 0000200000000140 RDI: 0000000000000004 [ 487.945468][T10542] RBP: 00007f80b8f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 487.945480][T10542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.945493][T10542] R13: 00007f80b8216038 R14: 00007f80b8215fa0 R15: 00007fff0e610788 [ 487.945522][T10542] [ 488.167132][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 488.218775][ T10] usb 6-1: device descriptor read/8, error -71 [ 488.428605][ T10] usb usb6-port1: unable to enumerate USB device [ 488.560356][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'. [ 489.000470][T10566] FAULT_INJECTION: forcing a failure. [ 489.000470][T10566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.111201][T10566] CPU: 1 UID: 0 PID: 10566 Comm: syz.2.1255 Not tainted syzkaller #0 PREEMPT(full) [ 489.111228][T10566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 489.111245][T10566] Call Trace: [ 489.111252][T10566] [ 489.111260][T10566] dump_stack_lvl+0x100/0x190 [ 489.111288][T10566] should_fail_ex.cold+0x5/0xa [ 489.111301][T10566] _copy_from_iter+0x1f4/0x1690 [ 489.111317][T10566] ? __lock_acquire+0x4a5/0x2630 [ 489.111329][T10566] ? __lock_acquire+0x4a5/0x2630 [ 489.111340][T10566] ? __pfx__copy_from_iter+0x10/0x10 [ 489.111361][T10566] copy_page_from_iter+0xde/0x180 [ 489.111378][T10566] tun_build_skb.constprop.0+0x2ea/0x15d0 [ 489.111400][T10566] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 489.111425][T10566] ? _kstrtoull+0x13c/0x1f0 [ 489.111436][T10566] ? __pfx__kstrtoull+0x10/0x10 [ 489.111447][T10566] tun_get_user+0x16d0/0x3e10 [ 489.111469][T10566] ? __pfx_tun_get_user+0x10/0x10 [ 489.111484][T10566] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 489.111507][T10566] ? find_held_lock+0x2b/0x80 [ 489.111521][T10566] ? tun_get+0x191/0x370 [ 489.111534][T10566] ? tun_get+0x191/0x370 [ 489.111551][T10566] tun_chr_write_iter+0xdc/0x200 [ 489.111567][T10566] vfs_write+0x6ac/0x1070 [ 489.111580][T10566] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 489.111596][T10566] ? __pfx_vfs_write+0x10/0x10 [ 489.111607][T10566] ? find_held_lock+0x2b/0x80 [ 489.111630][T10566] ksys_write+0x12a/0x250 [ 489.111642][T10566] ? __pfx_ksys_write+0x10/0x10 [ 489.111658][T10566] do_syscall_64+0xc9/0xf80 [ 489.111672][T10566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.111683][T10566] RIP: 0033:0x7fed7435b78e [ 489.111693][T10566] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 489.111704][T10566] RSP: 002b:00007fed725f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 489.111715][T10566] RAX: ffffffffffffffda RBX: 00007fed725f66c0 RCX: 00007fed7435b78e [ 489.111723][T10566] RDX: 000000000000004e RSI: 0000200000000880 RDI: 00000000000000c8 [ 489.111730][T10566] RBP: 00007fed725f6090 R08: 0000000000000000 R09: 0000000000000000 [ 489.111736][T10566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.111743][T10566] R13: 00007fed74616038 R14: 00007fed74615fa0 R15: 00007ffe37ebbf68 [ 489.111758][T10566] [ 489.769658][ T30] audit: type=1400 audit(2000000003.474:596): avc: denied { mount } for pid=10574 comm="syz.2.1257" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 489.872276][ T5130] Bluetooth: hci5: link tx timeout [ 489.877697][ T5130] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 489.933509][ T30] audit: type=1400 audit(2000000003.663:597): avc: denied { bind } for pid=10583 comm="syz.5.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 489.963647][ T30] audit: type=1400 audit(2000000003.695:598): avc: denied { listen } for pid=10583 comm="syz.5.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 490.011852][ T30] audit: type=1400 audit(2000000003.695:599): avc: denied { accept } for pid=10583 comm="syz.5.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 490.051257][ T5130] Bluetooth: hci5: link tx timeout [ 490.056404][ T5130] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 490.081301][ T5130] Bluetooth: hci5: link tx timeout [ 490.086413][ T5130] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 490.118258][ T5130] Bluetooth: hci5: link tx timeout [ 490.123397][ T5130] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 490.131656][ T5130] Bluetooth: hci5: link tx timeout [ 490.136766][ T5130] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 490.208840][T10592] all: renamed from bridge_slave_0 (while UP) [ 490.230105][T10554] Process accounting resumed [ 490.247959][ T5130] Bluetooth: hci5: link tx timeout [ 490.253171][ T5130] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 490.612737][T10580] Process accounting resumed [ 491.176522][ T6876] block nbd5: Possible stuck request ffff888027020000: control (read@0,1024B). Runtime 240 seconds [ 491.187354][ T6876] block nbd5: Possible stuck request ffff888027020200: control (read@1024,1024B). Runtime 240 seconds [ 491.198971][ T6876] block nbd5: Possible stuck request ffff888027020400: control (read@2048,1024B). Runtime 240 seconds [ 491.210510][ T6876] block nbd5: Possible stuck request ffff888027020600: control (read@3072,1024B). Runtime 240 seconds [ 491.229919][ T5130] Bluetooth: hci5: link tx timeout [ 491.235707][ T5130] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 491.385063][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 491.538343][T10618] FAULT_INJECTION: forcing a failure. [ 491.538343][T10618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.564321][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 491.588320][T10618] CPU: 1 UID: 0 PID: 10618 Comm: syz.5.1268 Not tainted syzkaller #0 PREEMPT(full) [ 491.588348][T10618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 491.588359][T10618] Call Trace: [ 491.588366][T10618] [ 491.588374][T10618] dump_stack_lvl+0x100/0x190 [ 491.588404][T10618] should_fail_ex.cold+0x5/0xa [ 491.588427][T10618] _copy_from_user+0x2e/0xd0 [ 491.588454][T10618] copy_msghdr_from_user+0x9f/0x4f0 [ 491.588473][T10618] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 491.588504][T10618] ___sys_sendmsg+0x106/0x1e0 [ 491.588524][T10618] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.588559][T10618] ? find_held_lock+0x2b/0x80 [ 491.588600][T10618] __sys_sendmsg+0x170/0x220 [ 491.588624][T10618] ? __pfx___sys_sendmsg+0x10/0x10 [ 491.588665][T10618] do_syscall_64+0xc9/0xf80 [ 491.588688][T10618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.588708][T10618] RIP: 0033:0x7fb653d9aeb9 [ 491.588724][T10618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.588743][T10618] RSP: 002b:00007fb654b82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.588763][T10618] RAX: ffffffffffffffda RBX: 00007fb654015fa0 RCX: 00007fb653d9aeb9 [ 491.588776][T10618] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 491.588788][T10618] RBP: 00007fb654b82090 R08: 0000000000000000 R09: 0000000000000000 [ 491.588801][T10618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.588812][T10618] R13: 00007fb654016038 R14: 00007fb654015fa0 R15: 00007ffc620c28b8 [ 491.588841][T10618] [ 491.656710][ T5130] Bluetooth: hci5: link tx timeout [ 491.718549][T10620] FAULT_INJECTION: forcing a failure. [ 491.718549][T10620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.720493][ T5946] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 491.738681][T10620] CPU: 1 UID: 0 PID: 10620 Comm: syz.3.1270 Not tainted syzkaller #0 PREEMPT(full) [ 491.738709][T10620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 491.738721][T10620] Call Trace: [ 491.738727][T10620] [ 491.738735][T10620] dump_stack_lvl+0x100/0x190 [ 491.738765][T10620] should_fail_ex.cold+0x5/0xa [ 491.738787][T10620] _copy_from_user+0x2e/0xd0 [ 491.738813][T10620] copy_msghdr_from_user+0x9f/0x4f0 [ 491.738836][T10620] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 491.738863][T10620] ? __lock_acquire+0x4a5/0x2630 [ 491.738887][T10620] ___sys_recvmsg+0xdd/0x1a0 [ 491.738908][T10620] ? __pfx____sys_recvmsg+0x10/0x10 [ 491.738952][T10620] do_recvmmsg+0x301/0x760 [ 491.738976][T10620] ? __pfx_do_recvmmsg+0x10/0x10 [ 491.738994][T10620] ? ksys_write+0x190/0x250 [ 491.739015][T10620] ? ksys_write+0x190/0x250 [ 491.739040][T10620] ? __mutex_unlock_slowpath+0x15c/0x790 [ 491.739078][T10620] ? __fget_files+0x21f/0x3d0 [ 491.739109][T10620] __x64_sys_recvmmsg+0x22a/0x280 [ 491.739137][T10620] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 491.739171][T10620] do_syscall_64+0xc9/0xf80 [ 491.739195][T10620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.739214][T10620] RIP: 0033:0x7f0d1659aeb9 [ 491.739231][T10620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.739249][T10620] RSP: 002b:00007f0d17372028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 491.739268][T10620] RAX: ffffffffffffffda RBX: 00007f0d16815fa0 RCX: 00007f0d1659aeb9 [ 491.739280][T10620] RDX: 040000000000026c RSI: 00002000000005c0 RDI: 0000000000000004 [ 491.739293][T10620] RBP: 00007f0d17372090 R08: 0000000000000000 R09: 0000000000000000 [ 491.739304][T10620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.739315][T10620] R13: 00007f0d16816038 R14: 00007f0d16815fa0 R15: 00007ffc985f87f8 [ 491.739343][T10620] [ 491.794362][ T5130] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 491.806186][ T10] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 491.862633][ T5130] Bluetooth: hci5: command 0x0406 tx timeout [ 492.028572][T10628] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1272'. [ 492.191347][ T10] usb 5-1: config 0 has no interface number 0 [ 492.200400][ T10] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1201, bcdDevice=55.67 [ 492.209573][ T5946] usb 1-1: Using ep0 maxpacket: 8 [ 492.224514][ T5946] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 492.242537][ T5947] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 492.257056][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.265336][ T25] block nbd3: Possible stuck request ffff888026b88000: control (read@0,1024B). Runtime 270 seconds [ 492.265392][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.276511][ T25] block nbd3: Possible stuck request ffff888026b88200: control (read@1024,1024B). Runtime 270 seconds [ 492.284437][ T10] usb 5-1: Product: syz [ 492.414209][ T5946] usb 1-1: Product: syz [ 492.433007][ T10] usb 5-1: Manufacturer: syz [ 492.441337][ T5946] usb 1-1: Manufacturer: syz [ 492.464774][ T10] usb 5-1: SerialNumber: syz [ 492.476449][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.491706][ T5946] usb 1-1: SerialNumber: syz [ 492.533382][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.593192][ T10] usb 5-1: config 0 descriptor?? [ 492.604252][ T5946] usb 1-1: config 0 descriptor?? [ 492.698979][ T5947] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 492.712158][ T5946] option 1-1:0.0: GSM modem (1-port) converter detected [ 492.720826][ T25] block nbd3: Possible stuck request ffff888026b88400: control (read@2048,1024B). Runtime 270 seconds [ 492.731924][ T25] block nbd3: Possible stuck request ffff888026b88600: control (read@3072,1024B). Runtime 270 seconds [ 492.743376][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.795936][ T5947] usb 3-1: config 0 descriptor?? [ 492.848782][T10637] syzkaller0: entered promiscuous mode [ 492.855410][T10637] syzkaller0: entered allmulticast mode [ 492.966405][ T7233] usb 5-1: USB disconnect, device number 24 [ 493.207114][ T5947] usbhid 3-1:0.0: can't add hid device: -32 [ 493.215997][ T5947] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 493.249979][ T5947] usb 3-1: USB disconnect, device number 25 [ 493.923464][ T24] usb 1-1: USB disconnect, device number 23 [ 493.930487][ T24] option 1-1:0.0: device disconnected [ 494.385403][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 494.547077][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 494.554722][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 494.564212][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 494.575337][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 494.585145][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 494.599560][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 494.610346][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 494.621769][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 22797, setting to 1024 [ 494.647242][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 494.659472][ T24] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 494.668836][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.676935][ T24] usb 1-1: Product: syz [ 494.681246][ T24] usb 1-1: Manufacturer: syz [ 494.685906][ T24] usb 1-1: SerialNumber: syz [ 494.693667][ T24] usb 1-1: config 0 descriptor?? [ 494.700440][T10657] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 494.707998][T10657] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 494.721134][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 494.950073][T10657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1276'. [ 495.226869][T10664] openvswitch: netlink: Flow key attr not present in new flow. [ 495.320769][T10664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.331176][T10664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.367236][T10664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.377000][T10664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.941052][T10643] Process accounting resumed [ 496.035407][T10674] kvm: kvm [10672]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xa01 [ 496.086004][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 496.086020][ T30] audit: type=1400 audit(2000000010.120:601): avc: denied { setopt } for pid=10678 comm="syz.3.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 496.118896][ T30] audit: type=1400 audit(2000000010.141:602): avc: denied { getopt } for pid=10677 comm="syz.2.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 496.139353][ T30] audit: type=1400 audit(2000000010.141:603): avc: denied { map } for pid=10677 comm="syz.2.1280" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 496.179726][ T30] audit: type=1400 audit(2000000010.204:604): avc: denied { ioctl } for pid=10677 comm="syz.2.1280" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 496.355383][T10685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10685 comm=syz.2.1280 [ 497.133826][ T5947] usb 1-1: USB disconnect, device number 24 [ 497.157273][ T7233] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 497.167313][ T25] block nbd2: Possible stuck request ffff888026ae8000: control (read@0,1024B). Runtime 300 seconds [ 497.178988][ T25] block nbd2: Possible stuck request ffff888026ae8200: control (read@1024,1024B). Runtime 300 seconds [ 497.190348][ T25] block nbd2: Possible stuck request ffff888026ae8400: control (read@2048,1024B). Runtime 300 seconds [ 497.201944][ T25] block nbd2: Possible stuck request ffff888026ae8600: control (read@3072,1024B). Runtime 300 seconds [ 497.386509][ T7233] usb 6-1: Using ep0 maxpacket: 8 [ 497.464514][ T7233] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 497.533266][ T7233] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 497.575860][ T7233] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 497.586161][ T7233] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.604470][ T7233] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 497.634155][ T7233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.823979][ T5947] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 497.876668][ T7233] usb 6-1: GET_CAPABILITIES returned 0 [ 497.883165][ T7233] usbtmc 6-1:16.0: can't read capabilities [ 497.903706][ T5946] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 497.996169][ T5947] usb 1-1: Using ep0 maxpacket: 8 [ 498.021442][ T5947] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.031798][ T5947] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.044799][ T7233] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 498.056050][ T5947] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.065675][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.073959][ T5947] usb 1-1: Product: syz [ 498.078188][ T5947] usb 1-1: Manufacturer: syz [ 498.083050][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 498.083506][ T5947] usb 1-1: SerialNumber: syz [ 498.092483][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 498.106016][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 498.115097][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 498.124173][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 498.134756][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.148237][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.149987][ T5947] cdc_ether 1-1:1.0: invalid descriptor buffer length [ 498.167118][ T5946] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 498.176167][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.185319][ T5947] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 498.195979][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 498.205102][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 498.213149][ T5946] usb 4-1: config 0 descriptor?? [ 498.214192][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 498.228420][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 498.276051][ T7233] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.291229][ T7233] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.299310][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 498.306160][ T7233] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 498.309241][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 498.318468][ T7233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 498.327600][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 498.335950][ T7233] usb 5-1: SerialNumber: syz [ 498.354161][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 498.363283][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 498.372392][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 498.381498][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 498.426730][ T5877] usb 6-1: USB disconnect, device number 8 [ 498.807905][ T5946] usbhid 4-1:0.0: can't add hid device: -32 [ 498.818725][ T5946] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 498.866861][ T5946] usb 4-1: USB disconnect, device number 25 [ 499.122837][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.131924][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.140997][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 500.364826][ T30] audit: type=1400 audit(2000000014.613:605): avc: denied { ioctl } for pid=10710 comm="syz.5.1289" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 500.478234][ T5946] usb 1-1: USB disconnect, device number 25 [ 500.523211][T10711] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1289'. [ 502.121624][T10714] Process accounting resumed [ 503.249599][ T7233] usb 5-1: 0:2 : does not exist [ 503.274564][T10761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.415380][T10761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.454717][T10765] FAULT_INJECTION: forcing a failure. [ 503.454717][T10765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.467875][T10765] CPU: 1 UID: 0 PID: 10765 Comm: syz.5.1301 Not tainted syzkaller #0 PREEMPT(full) [ 503.467892][T10765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 503.467899][T10765] Call Trace: [ 503.467903][T10765] [ 503.467907][T10765] dump_stack_lvl+0x100/0x190 [ 503.467927][T10765] should_fail_ex.cold+0x5/0xa [ 503.467939][T10765] _copy_from_user+0x2e/0xd0 [ 503.467955][T10765] copy_msghdr_from_user+0x9f/0x4f0 [ 503.467967][T10765] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 503.467986][T10765] ___sys_sendmsg+0x106/0x1e0 [ 503.467998][T10765] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.468016][T10765] ? find_held_lock+0x2b/0x80 [ 503.468041][T10765] __sys_sendmsg+0x170/0x220 [ 503.468055][T10765] ? __pfx___sys_sendmsg+0x10/0x10 [ 503.468079][T10765] do_syscall_64+0xc9/0xf80 [ 503.468093][T10765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.468105][T10765] RIP: 0033:0x7fb653d9aeb9 [ 503.468114][T10765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.468125][T10765] RSP: 002b:00007fb651ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.468136][T10765] RAX: ffffffffffffffda RBX: 00007fb654016090 RCX: 00007fb653d9aeb9 [ 503.468144][T10765] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 503.468151][T10765] RBP: 00007fb651ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 503.468157][T10765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.468164][T10765] R13: 00007fb654016128 R14: 00007fb654016090 R15: 00007ffc620c28b8 [ 503.468179][T10765] [ 503.684686][T10742] FAULT_INJECTION: forcing a failure. [ 503.684686][T10742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.774709][T10742] CPU: 0 UID: 0 PID: 10742 Comm: syz.0.1296 Not tainted syzkaller #0 PREEMPT(full) [ 503.774736][T10742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 503.774747][T10742] Call Trace: [ 503.774753][T10742] [ 503.774761][T10742] dump_stack_lvl+0x100/0x190 [ 503.774792][T10742] should_fail_ex.cold+0x5/0xa [ 503.774821][T10742] _copy_to_user+0x32/0xd0 [ 503.774849][T10742] simple_read_from_buffer+0xcb/0x170 [ 503.774876][T10742] proc_fail_nth_read+0x1af/0x230 [ 503.774905][T10742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 503.774934][T10742] ? rw_verify_area+0xce/0x6d0 [ 503.774953][T10742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 503.774980][T10742] vfs_read+0x1e4/0xb30 [ 503.775005][T10742] ? __pfx_vfs_read+0x10/0x10 [ 503.775024][T10742] ? find_held_lock+0x2b/0x80 [ 503.775051][T10742] ? __fget_files+0x215/0x3d0 [ 503.775080][T10742] ? __fget_files+0x21f/0x3d0 [ 503.775112][T10742] ksys_read+0x12a/0x250 [ 503.775133][T10742] ? __pfx_ksys_read+0x10/0x10 [ 503.775164][T10742] do_syscall_64+0xc9/0xf80 [ 503.775208][T10742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.775228][T10742] RIP: 0033:0x7fa03d75b78e [ 503.775245][T10742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 503.775263][T10742] RSP: 002b:00007fa03e63cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 503.775283][T10742] RAX: ffffffffffffffda RBX: 00007fa03e63d6c0 RCX: 00007fa03d75b78e [ 503.775296][T10742] RDX: 000000000000000f RSI: 00007fa03e63d0a0 RDI: 0000000000000004 [ 503.775308][T10742] RBP: 00007fa03e63d090 R08: 0000000000000000 R09: 0000000000000000 [ 503.775320][T10742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.775332][T10742] R13: 00007fa03da16038 R14: 00007fa03da15fa0 R15: 00007fffc3299008 [ 503.775361][T10742] [ 504.054133][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5160 ms [ 504.062161][ C1] lec:lec_tx_timeout: lec0 [ 504.284361][ T5947] usb 5-1: USB disconnect, device number 25 [ 504.293294][ T7740] lec:lec_start_xmit: lec0:No lecd attached [ 504.341264][T10773] netlink: 'syz.2.1302': attribute type 1 has an invalid length. [ 504.364022][T10772] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1302'. [ 504.506767][T10772] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1302'. [ 504.530214][ T30] audit: type=1400 audit(2000000018.896:606): avc: denied { write } for pid=10771 comm="syz.2.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 505.368650][ T30] audit: type=1400 audit(2000000019.872:607): avc: denied { read } for pid=10788 comm="syz.5.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 505.592644][ T30] audit: type=1400 audit(2000000019.967:608): avc: denied { write } for pid=10788 comm="syz.5.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 505.660811][ T30] audit: type=1326 audit(2000000020.019:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10790 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03d79aeb9 code=0x7ffc0000 [ 505.758998][T10802] netlink: 'syz.0.1308': attribute type 1 has an invalid length. [ 505.777051][ T30] audit: type=1326 audit(2000000020.019:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10790 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03d79aeb9 code=0x7ffc0000 [ 505.806853][ T30] audit: type=1326 audit(2000000020.030:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10790 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa03d79aeb9 code=0x7ffc0000 [ 505.830480][ T30] audit: type=1326 audit(2000000020.030:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10790 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03d79aeb9 code=0x7ffc0000 [ 505.856776][ T30] audit: type=1326 audit(2000000020.030:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10790 comm="syz.0.1308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa03d79aeb9 code=0x7ffc0000 [ 505.882825][ T30] audit: type=1400 audit(2000000020.093:614): avc: denied { ioctl } for pid=10788 comm="syz.5.1309" path="socket:[34342]" dev="sockfs" ino=34342 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 505.941366][T10802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.664832][T10814] FAULT_INJECTION: forcing a failure. [ 506.664832][T10814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.683152][T10814] CPU: 0 UID: 0 PID: 10814 Comm: syz.2.1313 Not tainted syzkaller #0 PREEMPT(full) [ 506.683180][T10814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 506.683192][T10814] Call Trace: [ 506.683198][T10814] [ 506.683206][T10814] dump_stack_lvl+0x100/0x190 [ 506.683237][T10814] should_fail_ex.cold+0x5/0xa [ 506.683260][T10814] _copy_from_user+0x2e/0xd0 [ 506.683285][T10814] __sys_bpf+0x243/0x5050 [ 506.683305][T10814] ? __schedule+0x2ef9/0x5e10 [ 506.683329][T10814] ? __pfx___sys_bpf+0x10/0x10 [ 506.683353][T10814] ? __pfx_sched_clock_cpu+0x10/0x10 [ 506.683371][T10814] ? do_raw_spin_lock+0x1e0/0x260 [ 506.683398][T10814] ? find_held_lock+0x2b/0x80 [ 506.683423][T10814] ? __schedule+0x2ef9/0x5e10 [ 506.683445][T10814] ? rcu_is_watching+0x12/0xc0 [ 506.683471][T10814] ? trace_sched_exit_tp+0xcd/0x100 [ 506.683490][T10814] ? __schedule+0xff6/0x5e10 [ 506.683507][T10814] ? __pfx___schedule+0x10/0x10 [ 506.683542][T10814] ? __pfx___schedule+0x10/0x10 [ 506.683569][T10814] __x64_sys_bpf+0x7b/0xc0 [ 506.683590][T10814] ? lockdep_hardirqs_on+0x78/0x100 [ 506.683611][T10814] do_syscall_64+0xc9/0xf80 [ 506.683634][T10814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.683654][T10814] RIP: 0033:0x7fed7439aeb9 [ 506.683671][T10814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.683690][T10814] RSP: 002b:00007fed725d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 506.683709][T10814] RAX: ffffffffffffffda RBX: 00007fed74616090 RCX: 00007fed7439aeb9 [ 506.683721][T10814] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 506.683733][T10814] RBP: 00007fed725d5090 R08: 0000000000000000 R09: 0000000000000000 [ 506.683746][T10814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.683757][T10814] R13: 00007fed74616128 R14: 00007fed74616090 R15: 00007ffe37ebbf68 [ 506.683785][T10814] [ 507.601223][T10099] block nbd4: Possible stuck request ffff888026ba0000: control (read@0,1024B). Runtime 270 seconds [ 507.612136][T10099] block nbd4: Possible stuck request ffff888026ba0200: control (read@1024,1024B). Runtime 270 seconds [ 507.623249][T10099] block nbd4: Possible stuck request ffff888026ba0400: control (read@2048,1024B). Runtime 270 seconds [ 507.634318][T10099] block nbd4: Possible stuck request ffff888026ba0600: control (read@3072,1024B). Runtime 270 seconds [ 507.653982][T10825] io-wq is not configured for unbound workers [ 507.871530][T10827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1312'. [ 508.276402][T10791] Process accounting resumed [ 508.311652][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 508.526150][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.567655][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.597539][ T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 508.647969][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.685623][ T24] usb 1-1: config 0 descriptor?? [ 508.742209][ T6876] block nbd1: Possible stuck request ffff888026a78000: control (read@0,1024B). Runtime 360 seconds [ 508.753143][ T6876] block nbd1: Possible stuck request ffff888026a78200: control (read@1024,1024B). Runtime 360 seconds [ 508.764951][ T6876] block nbd1: Possible stuck request ffff888026a78400: control (read@2048,1024B). Runtime 360 seconds [ 508.776779][ T6876] block nbd1: Possible stuck request ffff888026a78600: control (read@3072,1024B). Runtime 360 seconds [ 509.031827][ T7233] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 509.297862][ T24] usbhid 1-1:0.0: can't add hid device: -32 [ 509.370008][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 509.432149][ T24] usb 1-1: USB disconnect, device number 26 [ 509.529766][T10852] FAULT_INJECTION: forcing a failure. [ 509.529766][T10852] name failslab, interval 1, probability 0, space 0, times 0 [ 509.544308][ T7233] usb 6-1: Using ep0 maxpacket: 8 [ 509.549652][ T30] audit: type=1404 audit(2000000024.250:615): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 509.552256][T10852] CPU: 1 UID: 0 PID: 10852 Comm: syz.2.1321 Not tainted syzkaller #0 PREEMPT(full) [ 509.552282][T10852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 509.552294][T10852] Call Trace: [ 509.552301][T10852] [ 509.552308][T10852] dump_stack_lvl+0x100/0x190 [ 509.552339][T10852] should_fail_ex.cold+0x5/0xa [ 509.552363][T10852] should_failslab+0xc2/0x120 [ 509.552389][T10852] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 509.552416][T10852] ? __alloc_skb+0x156/0x410 [ 509.552438][T10852] ? __alloc_skb+0x35d/0x410 [ 509.552463][T10852] ? __alloc_skb+0x156/0x410 [ 509.552484][T10852] __alloc_skb+0x156/0x410 [ 509.552505][T10852] ? __alloc_skb+0x35d/0x410 [ 509.552526][T10852] ? __pfx___alloc_skb+0x10/0x10 [ 509.552559][T10852] alloc_skb_with_frags+0xe0/0x810 [ 509.552590][T10852] ? avc_has_perm_noaudit+0x145/0x3b0 [ 509.552618][T10852] sock_alloc_send_pskb+0x801/0x980 [ 509.552651][T10852] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 509.552677][T10852] ? sock_has_perm+0x258/0x2f0 [ 509.552707][T10852] ? __pfx_sock_has_perm+0x10/0x10 [ 509.552738][T10852] hci_sock_sendmsg+0x1c7/0x2620 [ 509.552767][T10852] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 509.552798][T10852] sock_write_iter+0x566/0x610 [ 509.552823][T10852] ? __pfx_sock_write_iter+0x10/0x10 [ 509.552850][T10852] ? bpf_lsm_file_permission+0x9/0x10 [ 509.552875][T10852] ? security_file_permission+0x76/0x210 [ 509.552898][T10852] ? rw_verify_area+0xce/0x6d0 [ 509.552920][T10852] vfs_write+0x6ac/0x1070 [ 509.552941][T10852] ? __pfx_sock_write_iter+0x10/0x10 [ 509.552963][T10852] ? __pfx_vfs_write+0x10/0x10 [ 509.552981][T10852] ? find_held_lock+0x2b/0x80 [ 509.553025][T10852] ksys_write+0x1f8/0x250 [ 509.553045][T10852] ? __pfx_ksys_write+0x10/0x10 [ 509.553074][T10852] do_syscall_64+0xc9/0xf80 [ 509.553098][T10852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.553118][T10852] RIP: 0033:0x7fed7439aeb9 [ 509.553133][T10852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.553152][T10852] RSP: 002b:00007fed725f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 509.553172][T10852] RAX: ffffffffffffffda RBX: 00007fed74615fa0 RCX: 00007fed7439aeb9 [ 509.553185][T10852] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000018 [ 509.553196][T10852] RBP: 00007fed725f6090 R08: 0000000000000000 R09: 0000000000000000 [ 509.553208][T10852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.553219][T10852] R13: 00007fed74616038 R14: 00007fed74615fa0 R15: 00007ffe37ebbf68 [ 509.553247][T10852] [ 509.634510][ T7233] usb 6-1: device descriptor read/all, error -71 [ 509.771971][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 509.772007][ C1] lec:lec_tx_timeout: lec0 [ 509.775396][ T30] audit: type=1400 audit(2000000024.271:616): avc: denied { ioctl } for pid=10841 comm="syz.5.1318" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 510.017197][ T30] audit: type=1400 audit(2000000024.281:617): avc: denied { prog_load } for pid=10841 comm="syz.5.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 510.036814][ T30] audit: type=1400 audit(2000000024.323:618): avc: denied { create } for pid=10841 comm="syz.5.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 510.064875][ T30] audit: type=1400 audit(2000000024.323:619): avc: denied { execmem } for pid=10841 comm="syz.5.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 510.084222][ T30] audit: type=1400 audit(2000000024.323:620): avc: denied { create } for pid=10841 comm="syz.5.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 510.186194][ T30] audit: type=1400 audit(2000000024.334:621): avc: denied { create } for pid=10841 comm="syz.5.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 510.309569][ T30] audit: type=1400 audit(2000000024.334:622): avc: denied { read write } for pid=10841 comm="syz.5.1318" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 510.532276][ T30] audit: type=1400 audit(2000000024.334:623): avc: denied { read write } for pid=10841 comm="syz.5.1318" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 510.556053][ T30] audit: type=1400 audit(2000000024.334:624): avc: denied { create } for pid=10841 comm="syz.5.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 510.924671][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1325'. [ 511.102956][T10881] FAULT_INJECTION: forcing a failure. [ 511.102956][T10881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.165729][T10881] CPU: 0 UID: 0 PID: 10881 Comm: syz.3.1329 Not tainted syzkaller #0 PREEMPT(full) [ 511.165749][T10881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 511.165756][T10881] Call Trace: [ 511.165760][T10881] [ 511.165765][T10881] dump_stack_lvl+0x100/0x190 [ 511.165785][T10881] should_fail_ex.cold+0x5/0xa [ 511.165798][T10881] _copy_to_user+0x32/0xd0 [ 511.165814][T10881] simple_read_from_buffer+0xcb/0x170 [ 511.165838][T10881] proc_fail_nth_read+0x1af/0x230 [ 511.165864][T10881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 511.165892][T10881] ? rw_verify_area+0xce/0x6d0 [ 511.165910][T10881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 511.165927][T10881] vfs_read+0x1e4/0xb30 [ 511.165941][T10881] ? __pfx_vfs_read+0x10/0x10 [ 511.165951][T10881] ? find_held_lock+0x2b/0x80 [ 511.165967][T10881] ? __fget_files+0x215/0x3d0 [ 511.165983][T10881] ? __fget_files+0x21f/0x3d0 [ 511.166000][T10881] ksys_read+0x12a/0x250 [ 511.166011][T10881] ? __pfx_ksys_read+0x10/0x10 [ 511.166023][T10881] ? fdget+0x18b/0x210 [ 511.166039][T10881] do_syscall_64+0xc9/0xf80 [ 511.166053][T10881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.166065][T10881] RIP: 0033:0x7f0d1655b78e [ 511.166075][T10881] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 511.166086][T10881] RSP: 002b:00007f0d17371fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 511.166097][T10881] RAX: ffffffffffffffda RBX: 00007f0d173726c0 RCX: 00007f0d1655b78e [ 511.166105][T10881] RDX: 000000000000000f RSI: 00007f0d173720a0 RDI: 0000000000000003 [ 511.166112][T10881] RBP: 00007f0d17372090 R08: 0000000000000000 R09: 0000000000000000 [ 511.166118][T10881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.166124][T10881] R13: 00007f0d16816038 R14: 00007f0d16815fa0 R15: 00007ffc985f87f8 [ 511.166140][T10881] [ 512.611983][ T5179] udevd[5179]: worker [6064] /devices/virtual/block/nbd2 timeout; kill it [ 512.629496][ T5179] udevd[5179]: seq 11980 '/devices/virtual/block/nbd2' killed [ 512.647083][ T5179] udevd[5179]: worker [6783] /devices/virtual/block/nbd3 timeout; kill it [ 512.669446][ T5179] udevd[5179]: seq 12373 '/devices/virtual/block/nbd3' killed [ 512.685939][ T5179] udevd[5179]: worker [6780] /devices/virtual/block/nbd4 timeout; kill it [ 512.741670][ T5179] udevd[5179]: seq 12607 '/devices/virtual/block/nbd4' killed [ 512.749217][ T5179] udevd[5179]: worker [5809] /devices/virtual/block/nbd5 timeout; kill it [ 512.798750][ T5179] udevd[5179]: seq 12789 '/devices/virtual/block/nbd5' killed [ 512.806303][ T5179] udevd[5179]: worker [5824] /devices/virtual/block/nbd1 timeout; kill it [ 512.849862][ T5179] udevd[5179]: seq 11395 '/devices/virtual/block/nbd1' killed [ 512.875139][T10908] syzkaller0: entered promiscuous mode [ 512.890721][T10908] syzkaller0: entered allmulticast mode [ 513.122103][T10918] FAULT_INJECTION: forcing a failure. [ 513.122103][T10918] name failslab, interval 1, probability 0, space 0, times 0 [ 513.178603][T10918] CPU: 1 UID: 0 PID: 10918 Comm: syz.0.1341 Not tainted syzkaller #0 PREEMPT(full) [ 513.178632][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 513.178643][T10918] Call Trace: [ 513.178650][T10918] [ 513.178657][T10918] dump_stack_lvl+0x100/0x190 [ 513.178688][T10918] should_fail_ex.cold+0x5/0xa [ 513.178711][T10918] should_failslab+0xc2/0x120 [ 513.178735][T10918] ? tomoyo_realpath_from_path+0xb6/0x690 [ 513.178767][T10918] __kmalloc_noprof+0xf6/0x9c0 [ 513.178795][T10918] ? tomoyo_realpath_from_path+0xb6/0x690 [ 513.178816][T10918] tomoyo_realpath_from_path+0xb6/0x690 [ 513.178850][T10918] tomoyo_path_number_perm+0x23c/0x580 [ 513.178878][T10918] ? tomoyo_path_number_perm+0x22e/0x580 [ 513.178907][T10918] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 513.178966][T10918] ? find_held_lock+0x2b/0x80 [ 513.178989][T10918] ? hook_file_ioctl_common+0x146/0x410 [ 513.179012][T10918] ? __fget_files+0x215/0x3d0 [ 513.179047][T10918] ? __fget_files+0x21f/0x3d0 [ 513.179076][T10918] security_file_ioctl+0xd3/0x230 [ 513.179100][T10918] __x64_sys_ioctl+0xb7/0x210 [ 513.179123][T10918] do_syscall_64+0xc9/0xf80 [ 513.179148][T10918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.179168][T10918] RIP: 0033:0x7fa03d79aeb9 [ 513.179185][T10918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.179204][T10918] RSP: 002b:00007fa03e63d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.179224][T10918] RAX: ffffffffffffffda RBX: 00007fa03da15fa0 RCX: 00007fa03d79aeb9 [ 513.179237][T10918] RDX: 0000200000000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 513.179250][T10918] RBP: 00007fa03e63d090 R08: 0000000000000000 R09: 0000000000000000 [ 513.179262][T10918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.179274][T10918] R13: 00007fa03da16038 R14: 00007fa03da15fa0 R15: 00007fffc3299008 [ 513.179303][T10918] [ 513.179312][T10918] ERROR: Out of memory at tomoyo_realpath_from_path. [ 513.447965][T10923] netlink: 'syz.5.1342': attribute type 8 has an invalid length. [ 513.529682][T10930] capability: warning: `syz.0.1344' uses 32-bit capabilities (legacy support in use) [ 513.791487][T10922] lo speed is unknown, defaulting to 1000 [ 514.316712][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 514.316728][ T30] audit: type=1400 audit(2000000029.257:739): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 514.389736][ T30] audit: type=1400 audit(2000000029.310:740): avc: denied { read } for pid=10942 comm="syz.3.1347" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 514.430694][T10945] FAULT_INJECTION: forcing a failure. [ 514.430694][T10945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.446295][ T30] audit: type=1400 audit(2000000029.310:741): avc: denied { create } for pid=10942 comm="syz.3.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 514.466682][T10945] CPU: 1 UID: 0 PID: 10945 Comm: syz.3.1350 Not tainted syzkaller #0 PREEMPT(full) [ 514.466711][T10945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 514.466723][T10945] Call Trace: [ 514.466731][T10945] [ 514.466739][T10945] dump_stack_lvl+0x100/0x190 [ 514.466771][T10945] should_fail_ex.cold+0x5/0xa [ 514.466795][T10945] _copy_to_user+0x32/0xd0 [ 514.466823][T10945] simple_read_from_buffer+0xcb/0x170 [ 514.466851][T10945] proc_fail_nth_read+0x1af/0x230 [ 514.466880][T10945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.466906][T10945] ? rw_verify_area+0xce/0x6d0 [ 514.466924][T10945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.466947][T10945] vfs_read+0x1e4/0xb30 [ 514.466972][T10945] ? __pfx_vfs_read+0x10/0x10 [ 514.466990][T10945] ? find_held_lock+0x2b/0x80 [ 514.467015][T10945] ? __fget_files+0x215/0x3d0 [ 514.467044][T10945] ? __fget_files+0x21f/0x3d0 [ 514.467073][T10945] ksys_read+0x12a/0x250 [ 514.467093][T10945] ? __pfx_ksys_read+0x10/0x10 [ 514.467115][T10945] ? fdget+0x18b/0x210 [ 514.467143][T10945] do_syscall_64+0xc9/0xf80 [ 514.467169][T10945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.467189][T10945] RIP: 0033:0x7f0d1655b78e [ 514.467207][T10945] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 514.467226][T10945] RSP: 002b:00007f0d17371fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 514.467246][T10945] RAX: ffffffffffffffda RBX: 00007f0d173726c0 RCX: 00007f0d1655b78e [ 514.467260][T10945] RDX: 000000000000000f RSI: 00007f0d173720a0 RDI: 0000000000000003 [ 514.467272][T10945] RBP: 00007f0d17372090 R08: 0000000000000000 R09: 0000000000000000 [ 514.467284][T10945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.467296][T10945] R13: 00007f0d16816038 R14: 00007f0d16815fa0 R15: 00007ffc985f87f8 [ 514.467331][T10945] [ 514.694378][ T30] audit: type=1400 audit(2000000029.320:742): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 514.718560][ T30] audit: type=1400 audit(2000000029.320:743): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 514.742826][ T30] audit: type=1400 audit(2000000029.383:744): avc: denied { read write } for pid=10944 comm="syz.3.1350" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 514.766321][ T30] audit: type=1400 audit(2000000029.646:745): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 514.925328][ T30] audit: type=1400 audit(2000000029.898:746): avc: denied { module_request } for pid=10949 comm="syz.3.1351" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 515.042495][ T30] audit: type=1400 audit(2000000029.898:747): avc: denied { sys_module } for pid=10949 comm="syz.3.1351" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 515.068167][T10955] IPv6: NLM_F_CREATE should be specified when creating new route [ 515.109281][ T30] audit: type=1400 audit(2000000029.929:748): avc: denied { read write } for pid=10951 comm="syz.0.1349" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 515.538202][T10963] FAULT_INJECTION: forcing a failure. [ 515.538202][T10963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.551516][T10963] CPU: 1 UID: 0 PID: 10963 Comm: syz.4.1353 Not tainted syzkaller #0 PREEMPT(full) [ 515.551544][T10963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 515.551553][T10963] Call Trace: [ 515.551559][T10963] [ 515.551566][T10963] dump_stack_lvl+0x100/0x190 [ 515.551598][T10963] should_fail_ex.cold+0x5/0xa [ 515.551618][T10963] _copy_to_user+0x32/0xd0 [ 515.551643][T10963] simple_read_from_buffer+0xcb/0x170 [ 515.551667][T10963] proc_fail_nth_read+0x1af/0x230 [ 515.551695][T10963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 515.551722][T10963] ? rw_verify_area+0xce/0x6d0 [ 515.551740][T10963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 515.551766][T10963] vfs_read+0x1e4/0xb30 [ 515.551790][T10963] ? __pfx_vfs_read+0x10/0x10 [ 515.551807][T10963] ? find_held_lock+0x2b/0x80 [ 515.551834][T10963] ? __fget_files+0x215/0x3d0 [ 515.551863][T10963] ? __fget_files+0x21f/0x3d0 [ 515.551893][T10963] ksys_read+0x12a/0x250 [ 515.551912][T10963] ? __pfx_ksys_read+0x10/0x10 [ 515.551940][T10963] do_syscall_64+0xc9/0xf80 [ 515.551965][T10963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.551985][T10963] RIP: 0033:0x7f80b7f5b78e [ 515.552002][T10963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 515.552022][T10963] RSP: 002b:00007f80b8f1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 515.552042][T10963] RAX: ffffffffffffffda RBX: 00007f80b8f1e6c0 RCX: 00007f80b7f5b78e [ 515.552055][T10963] RDX: 000000000000000f RSI: 00007f80b8f1e0a0 RDI: 0000000000000003 [ 515.552067][T10963] RBP: 00007f80b8f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 515.552078][T10963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.552089][T10963] R13: 00007f80b8216038 R14: 00007f80b8215fa0 R15: 00007fff0e610788 [ 515.552119][T10963] [ 515.969169][T10976] FAULT_INJECTION: forcing a failure. [ 515.969169][T10976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.995334][T10976] CPU: 1 UID: 0 PID: 10976 Comm: syz.3.1360 Not tainted syzkaller #0 PREEMPT(full) [ 515.995357][T10976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 515.995364][T10976] Call Trace: [ 515.995368][T10976] [ 515.995373][T10976] dump_stack_lvl+0x100/0x190 [ 515.995392][T10976] should_fail_ex.cold+0x5/0xa [ 515.995405][T10976] _copy_to_user+0x32/0xd0 [ 515.995421][T10976] simple_read_from_buffer+0xcb/0x170 [ 515.995436][T10976] proc_fail_nth_read+0x1af/0x230 [ 515.995452][T10976] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 515.995467][T10976] ? rw_verify_area+0xce/0x6d0 [ 515.995478][T10976] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 515.995492][T10976] vfs_read+0x1e4/0xb30 [ 515.995506][T10976] ? __pfx_vfs_read+0x10/0x10 [ 515.995516][T10976] ? find_held_lock+0x2b/0x80 [ 515.995532][T10976] ? __fget_files+0x215/0x3d0 [ 515.995548][T10976] ? __fget_files+0x21f/0x3d0 [ 515.995565][T10976] ksys_read+0x12a/0x250 [ 515.995576][T10976] ? __pfx_ksys_read+0x10/0x10 [ 515.995592][T10976] do_syscall_64+0xc9/0xf80 [ 515.995608][T10976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.995620][T10976] RIP: 0033:0x7f0d1655b78e [ 515.995630][T10976] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 515.995640][T10976] RSP: 002b:00007f0d17371fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 515.995651][T10976] RAX: ffffffffffffffda RBX: 00007f0d173726c0 RCX: 00007f0d1655b78e [ 515.995659][T10976] RDX: 000000000000000f RSI: 00007f0d173720a0 RDI: 0000000000000004 [ 515.995666][T10976] RBP: 00007f0d17372090 R08: 0000000000000000 R09: 0000000000000000 [ 515.995672][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.995679][T10976] R13: 00007f0d16816038 R14: 00007f0d16815fa0 R15: 00007ffc985f87f8 [ 515.995694][T10976] [ 516.553407][T11013] FAULT_INJECTION: forcing a failure. [ 516.553407][T11013] name failslab, interval 1, probability 0, space 0, times 0 [ 516.566120][T11013] CPU: 0 UID: 0 PID: 11013 Comm: syz.3.1375 Not tainted syzkaller #0 PREEMPT(full) [ 516.566146][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 516.566157][T11013] Call Trace: [ 516.566165][T11013] [ 516.566173][T11013] dump_stack_lvl+0x100/0x190 [ 516.566203][T11013] should_fail_ex.cold+0x5/0xa [ 516.566226][T11013] should_failslab+0xc2/0x120 [ 516.566251][T11013] kmem_cache_alloc_noprof+0x83/0x780 [ 516.566276][T11013] ? getname_flags.part.0+0x4c/0x540 [ 516.566311][T11013] ? getname_flags.part.0+0x4c/0x540 [ 516.566334][T11013] getname_flags.part.0+0x4c/0x540 [ 516.566361][T11013] getname_flags+0x93/0xf0 [ 516.566379][T11013] do_sys_openat2+0xc5/0x220 [ 516.566402][T11013] ? __pfx_do_sys_openat2+0x10/0x10 [ 516.566424][T11013] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 516.566447][T11013] ? __fget_files+0x21f/0x3d0 [ 516.566471][T11013] __x64_sys_openat+0x12d/0x210 [ 516.566495][T11013] ? __pfx___x64_sys_openat+0x10/0x10 [ 516.566520][T11013] ? ksys_write+0x1ac/0x250 [ 516.566546][T11013] do_syscall_64+0xc9/0xf80 [ 516.566567][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.566584][T11013] RIP: 0033:0x7f0d1659aeb9 [ 516.566599][T11013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.566615][T11013] RSP: 002b:00007f0d17372028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 516.566632][T11013] RAX: ffffffffffffffda RBX: 00007f0d16815fa0 RCX: 00007f0d1659aeb9 [ 516.566643][T11013] RDX: 0000000000000000 RSI: 0000200000002440 RDI: ffffffffffffff9c [ 516.566654][T11013] RBP: 00007f0d17372090 R08: 0000000000000000 R09: 0000000000000000 [ 516.566664][T11013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.566674][T11013] R13: 00007f0d16816038 R14: 00007f0d16815fa0 R15: 00007ffc985f87f8 [ 516.566697][T11013] [ 516.871637][T11023] FAULT_INJECTION: forcing a failure. [ 516.871637][T11023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.904371][T11023] CPU: 1 UID: 0 PID: 11023 Comm: syz.3.1379 Not tainted syzkaller #0 PREEMPT(full) [ 516.904403][T11023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 516.904415][T11023] Call Trace: [ 516.904422][T11023] [ 516.904429][T11023] dump_stack_lvl+0x100/0x190 [ 516.904461][T11023] should_fail_ex.cold+0x5/0xa [ 516.904484][T11023] _copy_to_user+0x32/0xd0 [ 516.904512][T11023] simple_read_from_buffer+0xcb/0x170 [ 516.904538][T11023] proc_fail_nth_read+0x1af/0x230 [ 516.904566][T11023] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 516.904595][T11023] ? rw_verify_area+0xce/0x6d0 [ 516.904615][T11023] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 516.904650][T11023] vfs_read+0x1e4/0xb30 [ 516.904676][T11023] ? __pfx_vfs_read+0x10/0x10 [ 516.904696][T11023] ? find_held_lock+0x2b/0x80 [ 516.904723][T11023] ? __fget_files+0x215/0x3d0 [ 516.904753][T11023] ? __fget_files+0x21f/0x3d0 [ 516.904785][T11023] ksys_read+0x12a/0x250 [ 516.904807][T11023] ? __pfx_ksys_read+0x10/0x10 [ 516.904837][T11023] do_syscall_64+0xc9/0xf80 [ 516.904863][T11023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.904884][T11023] RIP: 0033:0x7f0d1655b78e [ 516.904901][T11023] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 516.904921][T11023] RSP: 002b:00007f0d17371fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 516.904941][T11023] RAX: ffffffffffffffda RBX: 00007f0d173726c0 RCX: 00007f0d1655b78e [ 516.904955][T11023] RDX: 000000000000000f RSI: 00007f0d173720a0 RDI: 0000000000000004 [ 516.904968][T11023] RBP: 00007f0d17372090 R08: 0000000000000000 R09: 0000000000000000 [ 516.904981][T11023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.904993][T11023] R13: 00007f0d16816038 R14: 00007f0d16815fa0 R15: 00007ffc985f87f8 [ 516.905023][T11023] [ 517.159026][T11032] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1382'. [ 517.435137][T11050] FAULT_INJECTION: forcing a failure. [ 517.435137][T11050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.448480][T11050] CPU: 0 UID: 0 PID: 11050 Comm: syz.3.1389 Not tainted syzkaller #0 PREEMPT(full) [ 517.448507][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 517.448519][T11050] Call Trace: [ 517.448525][T11050] [ 517.448532][T11050] dump_stack_lvl+0x100/0x190 [ 517.448563][T11050] should_fail_ex.cold+0x5/0xa [ 517.448585][T11050] _copy_from_user+0x2e/0xd0 [ 517.448610][T11050] __sys_bpf+0x243/0x5050 [ 517.448635][T11050] ? __pfx___sys_bpf+0x10/0x10 [ 517.448654][T11050] ? proc_fail_nth_write+0x9f/0x220 [ 517.448681][T11050] ? find_held_lock+0x2b/0x80 [ 517.448714][T11050] ? find_held_lock+0x2b/0x80 [ 517.448738][T11050] ? ksys_write+0x190/0x250 [ 517.448767][T11050] ? __mutex_unlock_slowpath+0x15c/0x790 [ 517.448808][T11050] ? fput+0x79/0x100 [ 517.448833][T11050] ? ksys_write+0x1ac/0x250 [ 517.448854][T11050] ? __pfx_ksys_write+0x10/0x10 [ 517.448882][T11050] __x64_sys_bpf+0x7b/0xc0 [ 517.448904][T11050] ? lockdep_hardirqs_on+0x78/0x100 [ 517.448926][T11050] do_syscall_64+0xc9/0xf80 [ 517.448950][T11050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.448970][T11050] RIP: 0033:0x7f0d1659aeb9 [ 517.448987][T11050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.449006][T11050] RSP: 002b:00007f0d147f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 517.449026][T11050] RAX: ffffffffffffffda RBX: 00007f0d16816090 RCX: 00007f0d1659aeb9 [ 517.449040][T11050] RDX: 0000000000000094 RSI: 00002000000012c0 RDI: 0000000000000005 [ 517.449052][T11050] RBP: 00007f0d147f6090 R08: 0000000000000000 R09: 0000000000000000 [ 517.449064][T11050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.449076][T11050] R13: 00007f0d16816128 R14: 00007f0d16816090 R15: 00007ffc985f87f8 [ 517.449104][T11050] [ 518.601434][T11074] FAULT_INJECTION: forcing a failure. [ 518.601434][T11074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.628658][T11074] CPU: 1 UID: 0 PID: 11074 Comm: syz.2.1397 Not tainted syzkaller #0 PREEMPT(full) [ 518.628681][T11074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 518.628688][T11074] Call Trace: [ 518.628692][T11074] [ 518.628697][T11074] dump_stack_lvl+0x100/0x190 [ 518.628716][T11074] should_fail_ex.cold+0x5/0xa [ 518.628729][T11074] _copy_to_user+0x32/0xd0 [ 518.628745][T11074] simple_read_from_buffer+0xcb/0x170 [ 518.628759][T11074] proc_fail_nth_read+0x1af/0x230 [ 518.628775][T11074] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 518.628791][T11074] ? rw_verify_area+0xce/0x6d0 [ 518.628802][T11074] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 518.628816][T11074] vfs_read+0x1e4/0xb30 [ 518.628830][T11074] ? __pfx_vfs_read+0x10/0x10 [ 518.628841][T11074] ? find_held_lock+0x2b/0x80 [ 518.628856][T11074] ? __fget_files+0x215/0x3d0 [ 518.628872][T11074] ? __fget_files+0x21f/0x3d0 [ 518.628889][T11074] ksys_read+0x12a/0x250 [ 518.628900][T11074] ? __pfx_ksys_read+0x10/0x10 [ 518.628916][T11074] do_syscall_64+0xc9/0xf80 [ 518.628931][T11074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.628942][T11074] RIP: 0033:0x7fed7435b78e [ 518.628952][T11074] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 518.628963][T11074] RSP: 002b:00007fed725f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 518.628974][T11074] RAX: ffffffffffffffda RBX: 00007fed725f66c0 RCX: 00007fed7435b78e [ 518.628982][T11074] RDX: 000000000000000f RSI: 00007fed725f60a0 RDI: 0000000000000008 [ 518.628989][T11074] RBP: 00007fed725f6090 R08: 0000000000000000 R09: 0000000000000000 [ 518.628995][T11074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.629002][T11074] R13: 00007fed74616038 R14: 00007fed74615fa0 R15: 00007ffe37ebbf68 [ 518.629017][T11074] [ 519.096554][ T30] kauditd_printk_skb: 240 callbacks suppressed [ 519.096567][ T30] audit: type=1400 audit(2000000034.286:989): avc: denied { read write } for pid=11077 comm="syz.0.1398" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 519.155586][ T30] audit: type=1400 audit(2000000034.286:990): avc: denied { read write } for pid=11077 comm="syz.0.1398" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 519.244207][ T30] audit: type=1400 audit(2000000034.286:991): avc: denied { write } for pid=11077 comm="syz.0.1398" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 519.273992][ T30] audit: type=1400 audit(2000000034.286:992): avc: denied { read } for pid=11077 comm="syz.0.1398" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 519.304337][ T30] audit: type=1400 audit(2000000034.370:993): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 519.331177][ T30] audit: type=1400 audit(2000000034.391:994): avc: denied { read write } for pid=11080 comm="syz.3.1400" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 519.356686][ T30] audit: type=1400 audit(2000000034.401:995): avc: denied { create } for pid=11081 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 519.401499][T11063] Process accounting resumed [ 519.406567][ T30] audit: type=1400 audit(2000000034.401:996): avc: denied { create } for pid=11081 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 519.454789][ T30] audit: type=1400 audit(2000000034.412:997): avc: denied { create } for pid=11081 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 519.475419][ T30] audit: type=1400 audit(2000000034.422:998): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 520.286513][ T6876] block nbd5: Possible stuck request ffff888027020000: control (read@0,1024B). Runtime 270 seconds [ 520.297655][ T6876] block nbd5: Possible stuck request ffff888027020200: control (read@1024,1024B). Runtime 270 seconds [ 520.308961][ T6876] block nbd5: Possible stuck request ffff888027020400: control (read@2048,1024B). Runtime 270 seconds [ 520.320124][ T6876] block nbd5: Possible stuck request ffff888027020600: control (read@3072,1024B). Runtime 270 seconds [ 520.492853][T11113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1412'. [ 520.516645][T11113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1412'. [ 520.537632][T11113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1412'. [ 520.552280][T11113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1412'. [ 520.654055][T11113] lo speed is unknown, defaulting to 1000 [ 520.806766][ T5822] Bluetooth: hci3: unexpected event for opcode 0x040d [ 520.906495][T10099] block nbd3: Possible stuck request ffff888026b88000: control (read@0,1024B). Runtime 300 seconds [ 521.305326][T10099] block nbd3: Possible stuck request ffff888026b88200: control (read@1024,1024B). Runtime 300 seconds [ 521.317333][T10099] block nbd3: Possible stuck request ffff888026b88400: control (read@2048,1024B). Runtime 300 seconds [ 521.341271][T10099] block nbd3: Possible stuck request ffff888026b88600: control (read@3072,1024B). Runtime 300 seconds [ 521.431097][T11135] FAULT_INJECTION: forcing a failure. [ 521.431097][T11135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.448330][T11133] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 521.511998][T11135] CPU: 0 UID: 0 PID: 11135 Comm: syz.3.1421 Not tainted syzkaller #0 PREEMPT(full) [ 521.512017][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 521.512024][T11135] Call Trace: [ 521.512028][T11135] [ 521.512033][T11135] dump_stack_lvl+0x100/0x190 [ 521.512054][T11135] should_fail_ex.cold+0x5/0xa [ 521.512067][T11135] _copy_to_user+0x32/0xd0 [ 521.512084][T11135] simple_read_from_buffer+0xcb/0x170 [ 521.512098][T11135] proc_fail_nth_read+0x1af/0x230 [ 521.512114][T11135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 521.512130][T11135] ? rw_verify_area+0xce/0x6d0 [ 521.512141][T11135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 521.512156][T11135] vfs_read+0x1e4/0xb30 [ 521.512173][T11135] ? __pfx_vfs_read+0x10/0x10 [ 521.512184][T11135] ? find_held_lock+0x2b/0x80 [ 521.512199][T11135] ? __fget_files+0x215/0x3d0 [ 521.512215][T11135] ? __fget_files+0x21f/0x3d0 [ 521.512232][T11135] ksys_read+0x12a/0x250 [ 521.512243][T11135] ? __pfx_ksys_read+0x10/0x10 [ 521.512260][T11135] do_syscall_64+0xc9/0xf80 [ 521.512274][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.512285][T11135] RIP: 0033:0x7f0d1655b78e [ 521.512294][T11135] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 521.512305][T11135] RSP: 002b:00007f0d17371fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 521.512316][T11135] RAX: ffffffffffffffda RBX: 00007f0d173726c0 RCX: 00007f0d1655b78e [ 521.512324][T11135] RDX: 000000000000000f RSI: 00007f0d173720a0 RDI: 0000000000000003 [ 521.512330][T11135] RBP: 00007f0d17372090 R08: 0000000000000000 R09: 0000000000000000 [ 521.512337][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.512343][T11135] R13: 00007f0d16816038 R14: 00007f0d16815fa0 R15: 00007ffc985f87f8 [ 521.512358][T11135] [ 523.457675][T11173] FAULT_INJECTION: forcing a failure. [ 523.457675][T11173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.470892][T11173] CPU: 1 UID: 0 PID: 11173 Comm: syz.0.1434 Not tainted syzkaller #0 PREEMPT(full) [ 523.470908][T11173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 523.470915][T11173] Call Trace: [ 523.470920][T11173] [ 523.470925][T11173] dump_stack_lvl+0x100/0x190 [ 523.470945][T11173] should_fail_ex.cold+0x5/0xa [ 523.470958][T11173] _copy_from_user+0x2e/0xd0 [ 523.470973][T11173] get_timespec64+0x8d/0x240 [ 523.470984][T11173] ? __pfx_get_timespec64+0x10/0x10 [ 523.470995][T11173] ? __fget_files+0x215/0x3d0 [ 523.471011][T11173] do_pselect.constprop.0+0xc8/0x270 [ 523.471026][T11173] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 523.471041][T11173] ? ksys_write+0x1ac/0x250 [ 523.471056][T11173] __x64_sys_pselect6+0x149/0x1c0 [ 523.471071][T11173] do_syscall_64+0xc9/0xf80 [ 523.471085][T11173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.471098][T11173] RIP: 0033:0x7fa03d79aeb9 [ 523.471108][T11173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.471119][T11173] RSP: 002b:00007fa03e63d028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 523.471130][T11173] RAX: ffffffffffffffda RBX: 00007fa03da15fa0 RCX: 00007fa03d79aeb9 [ 523.471138][T11173] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 523.471145][T11173] RBP: 00007fa03e63d090 R08: 0000200000000280 R09: 0000000000000000 [ 523.471151][T11173] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 523.471158][T11173] R13: 00007fa03da16038 R14: 00007fa03da15fa0 R15: 00007fffc3299008 [ 523.471173][T11173] [ 524.434861][ T30] kauditd_printk_skb: 171 callbacks suppressed [ 524.434878][ T30] audit: type=1400 audit(2000000039.818:1170): avc: denied { prog_load } for pid=11176 comm="syz.0.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 524.562746][ T30] audit: type=1400 audit(2000000039.986:1171): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 524.668369][ T30] audit: type=1400 audit(2000000040.133:1172): avc: denied { create } for pid=11182 comm="syz.0.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 525.024601][ T30] audit: type=1400 audit(2000000040.165:1173): avc: denied { read write } for pid=11182 comm="syz.0.1437" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 525.077961][ T30] audit: type=1400 audit(2000000040.175:1174): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 525.082583][T11187] FAULT_INJECTION: forcing a failure. [ 525.082583][T11187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.133187][ T30] audit: type=1400 audit(2000000040.186:1175): avc: denied { create } for pid=11184 comm="syz.0.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 525.143387][T11187] CPU: 1 UID: 0 PID: 11187 Comm: syz.4.1439 Not tainted syzkaller #0 PREEMPT(full) [ 525.143413][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 525.143423][T11187] Call Trace: [ 525.143430][T11187] [ 525.143437][T11187] dump_stack_lvl+0x100/0x190 [ 525.143466][T11187] should_fail_ex.cold+0x5/0xa [ 525.143487][T11187] _copy_to_user+0x32/0xd0 [ 525.143513][T11187] simple_read_from_buffer+0xcb/0x170 [ 525.143530][T11187] proc_fail_nth_read+0x1af/0x230 [ 525.143546][T11187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 525.143562][T11187] ? rw_verify_area+0xce/0x6d0 [ 525.143573][T11187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 525.143587][T11187] vfs_read+0x1e4/0xb30 [ 525.143601][T11187] ? __pfx_vfs_read+0x10/0x10 [ 525.143611][T11187] ? find_held_lock+0x2b/0x80 [ 525.143626][T11187] ? __fget_files+0x215/0x3d0 [ 525.143642][T11187] ? __fget_files+0x21f/0x3d0 [ 525.143659][T11187] ksys_read+0x12a/0x250 [ 525.143671][T11187] ? __pfx_ksys_read+0x10/0x10 [ 525.143688][T11187] ? fdget+0x18b/0x210 [ 525.143703][T11187] do_syscall_64+0xc9/0xf80 [ 525.143718][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.143729][T11187] RIP: 0033:0x7f80b7f5b78e [ 525.143739][T11187] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 525.143749][T11187] RSP: 002b:00007f80b8f1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 525.143761][T11187] RAX: ffffffffffffffda RBX: 00007f80b8f1e6c0 RCX: 00007f80b7f5b78e [ 525.143768][T11187] RDX: 000000000000000f RSI: 00007f80b8f1e0a0 RDI: 0000000000000003 [ 525.143775][T11187] RBP: 00007f80b8f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 525.143781][T11187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.143787][T11187] R13: 00007f80b8216038 R14: 00007f80b8215fa0 R15: 00007fff0e610788 [ 525.143803][T11187] [ 525.499106][ T30] audit: type=1400 audit(2000000040.186:1176): avc: denied { read write } for pid=11184 comm="syz.0.1438" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 525.600881][ T30] audit: type=1400 audit(2000000040.249:1177): avc: denied { create } for pid=11165 comm="syz.5.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 525.667062][ T30] audit: type=1400 audit(2000000040.364:1178): avc: denied { create } for pid=11160 comm="syz.2.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 525.730720][ T30] audit: type=1400 audit(2000000040.543:1179): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 525.762090][T11201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1444'. [ 525.773948][T11201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1444'. [ 525.783174][T10099] block nbd2: Possible stuck request ffff888026ae8000: control (read@0,1024B). Runtime 330 seconds [ 525.793990][T10099] block nbd2: Possible stuck request ffff888026ae8200: control (read@1024,1024B). Runtime 330 seconds [ 525.804965][T10099] block nbd2: Possible stuck request ffff888026ae8400: control (read@2048,1024B). Runtime 330 seconds [ 525.830031][T10099] block nbd2: Possible stuck request ffff888026ae8600: control (read@3072,1024B). Runtime 330 seconds [ 527.631666][T11203] Process accounting resumed [ 528.092686][T11241] FAULT_INJECTION: forcing a failure. [ 528.092686][T11241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.156290][T11241] CPU: 1 UID: 0 PID: 11241 Comm: syz.0.1457 Not tainted syzkaller #0 PREEMPT(full) [ 528.156319][T11241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 528.156330][T11241] Call Trace: [ 528.156337][T11241] [ 528.156344][T11241] dump_stack_lvl+0x100/0x190 [ 528.156376][T11241] should_fail_ex.cold+0x5/0xa [ 528.156400][T11241] _copy_to_user+0x32/0xd0 [ 528.156428][T11241] simple_read_from_buffer+0xcb/0x170 [ 528.156453][T11241] proc_fail_nth_read+0x1af/0x230 [ 528.156481][T11241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 528.156510][T11241] ? rw_verify_area+0xce/0x6d0 [ 528.156530][T11241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 528.156557][T11241] vfs_read+0x1e4/0xb30 [ 528.156583][T11241] ? __pfx_vfs_read+0x10/0x10 [ 528.156602][T11241] ? find_held_lock+0x2b/0x80 [ 528.156628][T11241] ? __fget_files+0x215/0x3d0 [ 528.156656][T11241] ? __fget_files+0x21f/0x3d0 [ 528.156693][T11241] ksys_read+0x12a/0x250 [ 528.156715][T11241] ? __pfx_ksys_read+0x10/0x10 [ 528.156745][T11241] do_syscall_64+0xc9/0xf80 [ 528.156772][T11241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.156792][T11241] RIP: 0033:0x7fa03d75b78e [ 528.156809][T11241] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 528.156827][T11241] RSP: 002b:00007fa03e63cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 528.156847][T11241] RAX: ffffffffffffffda RBX: 00007fa03e63d6c0 RCX: 00007fa03d75b78e [ 528.156861][T11241] RDX: 000000000000000f RSI: 00007fa03e63d0a0 RDI: 0000000000000003 [ 528.156874][T11241] RBP: 00007fa03e63d090 R08: 0000000000000000 R09: 0000000000000000 [ 528.156886][T11241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.156898][T11241] R13: 00007fa03da16038 R14: 00007fa03da15fa0 R15: 00007fffc3299008 [ 528.156929][T11241] [ 529.625173][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 529.625188][ T30] audit: type=1400 audit(2000000045.330:1279): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 529.739533][ T30] audit: type=1400 audit(2000000045.456:1280): avc: denied { name_bind } for pid=11265 comm="syz.0.1463" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 529.904396][ T30] audit: type=1400 audit(2000000045.456:1281): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 529.956406][ T30] audit: type=1400 audit(2000000045.508:1282): avc: denied { prog_load } for pid=11267 comm="syz.2.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 529.979181][T11271] FAULT_INJECTION: forcing a failure. [ 529.979181][T11271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.002226][T11271] CPU: 1 UID: 0 PID: 11271 Comm: syz.2.1465 Not tainted syzkaller #0 PREEMPT(full) [ 530.002253][T11271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 530.002265][T11271] Call Trace: [ 530.002271][T11271] [ 530.002279][T11271] dump_stack_lvl+0x100/0x190 [ 530.002310][T11271] should_fail_ex.cold+0x5/0xa [ 530.002334][T11271] _copy_to_user+0x32/0xd0 [ 530.002361][T11271] simple_read_from_buffer+0xcb/0x170 [ 530.002388][T11271] proc_fail_nth_read+0x1af/0x230 [ 530.002416][T11271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.002444][T11271] ? rw_verify_area+0xce/0x6d0 [ 530.002463][T11271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.002490][T11271] vfs_read+0x1e4/0xb30 [ 530.002519][T11271] ? __pfx_vfs_read+0x10/0x10 [ 530.002538][T11271] ? find_held_lock+0x2b/0x80 [ 530.002564][T11271] ? __fget_files+0x215/0x3d0 [ 530.002594][T11271] ? __fget_files+0x21f/0x3d0 [ 530.002631][T11271] ksys_read+0x12a/0x250 [ 530.002652][T11271] ? __pfx_ksys_read+0x10/0x10 [ 530.002681][T11271] do_syscall_64+0xc9/0xf80 [ 530.002706][T11271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.002726][T11271] RIP: 0033:0x7fed7435b78e [ 530.002743][T11271] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 530.002762][T11271] RSP: 002b:00007fed725f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 530.002781][T11271] RAX: ffffffffffffffda RBX: 00007fed725f66c0 RCX: 00007fed7435b78e [ 530.002794][T11271] RDX: 000000000000000f RSI: 00007fed725f60a0 RDI: 0000000000000003 [ 530.002806][T11271] RBP: 00007fed725f6090 R08: 0000000000000000 R09: 0000000000000000 [ 530.002818][T11271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.002830][T11271] R13: 00007fed74616038 R14: 00007fed74615fa0 R15: 00007ffe37ebbf68 [ 530.002859][T11271] [ 530.202224][ T30] audit: type=1400 audit(2000000045.582:1283): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 530.226706][ T30] audit: type=1400 audit(2000000045.624:1284): avc: denied { create } for pid=11251 comm="syz.5.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 530.247389][ T30] audit: type=1400 audit(2000000045.697:1285): avc: denied { read write } for pid=11270 comm="syz.2.1465" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 530.271035][ T30] audit: type=1400 audit(2000000045.697:1286): avc: denied { prog_load } for pid=11270 comm="syz.2.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 530.290151][ T30] audit: type=1400 audit(2000000045.697:1287): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 530.314335][ T30] audit: type=1400 audit(2000000045.697:1288): avc: denied { read } for pid=11270 comm="syz.2.1465" dev="nsfs" ino=4026532828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 530.426003][T11273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1466'. [ 530.473806][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1466'. [ 533.021945][T11311] xt_TCPMSS: Only works on TCP SYN packets [ 533.034708][T11311] FAULT_INJECTION: forcing a failure. [ 533.034708][T11311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.063601][T11311] CPU: 1 UID: 0 PID: 11311 Comm: syz.3.1475 Not tainted syzkaller #0 PREEMPT(full) [ 533.063629][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 533.063641][T11311] Call Trace: [ 533.063649][T11311] [ 533.063657][T11311] dump_stack_lvl+0x100/0x190 [ 533.063687][T11311] should_fail_ex.cold+0x5/0xa [ 533.063711][T11311] _copy_to_user+0x32/0xd0 [ 533.063740][T11311] simple_read_from_buffer+0xcb/0x170 [ 533.063767][T11311] proc_fail_nth_read+0x1af/0x230 [ 533.063796][T11311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.063825][T11311] ? rw_verify_area+0xce/0x6d0 [ 533.063845][T11311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.063872][T11311] vfs_read+0x1e4/0xb30 [ 533.063898][T11311] ? __pfx_vfs_read+0x10/0x10 [ 533.063917][T11311] ? find_held_lock+0x2b/0x80 [ 533.063945][T11311] ? __fget_files+0x215/0x3d0 [ 533.063974][T11311] ? __fget_files+0x21f/0x3d0 [ 533.064003][T11311] ksys_read+0x12a/0x250 [ 533.064025][T11311] ? __pfx_ksys_read+0x10/0x10 [ 533.064046][T11311] ? fdget+0x18b/0x210 [ 533.064071][T11311] do_syscall_64+0xc9/0xf80 [ 533.064096][T11311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.064119][T11311] RIP: 0033:0x7f0d1655b78e [ 533.064135][T11311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 533.064153][T11311] RSP: 002b:00007f0d147d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 533.064173][T11311] RAX: ffffffffffffffda RBX: 00007f0d147d56c0 RCX: 00007f0d1655b78e [ 533.064186][T11311] RDX: 000000000000000f RSI: 00007f0d147d50a0 RDI: 0000000000000007 [ 533.064199][T11311] RBP: 00007f0d147d5090 R08: 0000000000000000 R09: 0000000000000000 [ 533.064211][T11311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.064222][T11311] R13: 00007f0d16816218 R14: 00007f0d16816180 R15: 00007ffc985f87f8 [ 533.064252][T11311] [ 534.486987][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 534.487003][ T30] audit: type=1400 audit(2000000050.064:1364): avc: denied { prog_load } for pid=11323 comm="syz.2.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 534.859871][ T30] audit: type=1400 audit(2000000050.589:1365): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 534.943701][ T30] audit: type=1400 audit(2000000050.768:1366): avc: denied { create } for pid=11321 comm="syz.4.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 534.980233][T11328] syz.2.1483 (11328): drop_caches: 2 [ 535.012054][ T30] audit: type=1400 audit(2000000050.810:1367): avc: denied { read } for pid=11331 comm="syz.0.1485" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 535.173975][ T30] audit: type=1400 audit(2000000050.810:1368): avc: denied { prog_load } for pid=11331 comm="syz.0.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 535.246498][ T30] audit: type=1400 audit(2000000050.810:1369): avc: denied { read } for pid=11331 comm="syz.0.1485" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 535.308629][ T30] audit: type=1400 audit(2000000050.810:1370): avc: denied { create } for pid=11331 comm="syz.0.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 535.347993][T11343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1488'. [ 535.357261][ T30] audit: type=1400 audit(2000000050.852:1371): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 535.383561][ T30] audit: type=1400 audit(2000000051.051:1372): avc: denied { create } for pid=11333 comm="syz.3.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 535.422468][ T30] audit: type=1400 audit(2000000051.051:1373): avc: denied { create } for pid=11333 comm="syz.3.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 536.798003][T10099] block nbd4: Possible stuck request ffff888026ba0000: control (read@0,1024B). Runtime 300 seconds [ 536.808899][T10099] block nbd4: Possible stuck request ffff888026ba0200: control (read@1024,1024B). Runtime 300 seconds [ 536.827070][T10099] block nbd4: Possible stuck request ffff888026ba0400: control (read@2048,1024B). Runtime 300 seconds [ 536.844379][T10099] block nbd4: Possible stuck request ffff888026ba0600: control (read@3072,1024B). Runtime 300 seconds [ 537.360842][ T6876] block nbd1: Possible stuck request ffff888026a78000: control (read@0,1024B). Runtime 390 seconds [ 537.371666][ T6876] block nbd1: Possible stuck request ffff888026a78200: control (read@1024,1024B). Runtime 390 seconds [ 537.382750][ T6876] block nbd1: Possible stuck request ffff888026a78400: control (read@2048,1024B). Runtime 390 seconds [ 537.406924][ T6876] block nbd1: Possible stuck request ffff888026a78600: control (read@3072,1024B). Runtime 390 seconds [ 537.796891][T11369] FAULT_INJECTION: forcing a failure. [ 537.796891][T11369] name failslab, interval 1, probability 0, space 0, times 0 [ 537.823718][T11369] CPU: 1 UID: 0 PID: 11369 Comm: syz.2.1497 Not tainted syzkaller #0 PREEMPT(full) [ 537.823736][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 537.823743][T11369] Call Trace: [ 537.823747][T11369] [ 537.823753][T11369] dump_stack_lvl+0x100/0x190 [ 537.823772][T11369] should_fail_ex.cold+0x5/0xa [ 537.823786][T11369] should_failslab+0xc2/0x120 [ 537.823802][T11369] kmem_cache_alloc_noprof+0x83/0x780 [ 537.823822][T11369] ? getname_flags.part.0+0x4c/0x540 [ 537.823842][T11369] ? getname_flags.part.0+0x4c/0x540 [ 537.823857][T11369] getname_flags.part.0+0x4c/0x540 [ 537.823875][T11369] getname_flags+0x93/0xf0 [ 537.823887][T11369] do_sys_openat2+0xc5/0x220 [ 537.823903][T11369] ? __pfx_do_sys_openat2+0x10/0x10 [ 537.823918][T11369] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 537.823933][T11369] ? __fget_files+0x21f/0x3d0 [ 537.823949][T11369] __x64_sys_openat+0x12d/0x210 [ 537.823965][T11369] ? __pfx___x64_sys_openat+0x10/0x10 [ 537.823987][T11369] ? ksys_write+0x1ac/0x250 [ 537.824015][T11369] do_syscall_64+0xc9/0xf80 [ 537.824035][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.824047][T11369] RIP: 0033:0x7fed7439aeb9 [ 537.824057][T11369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.824068][T11369] RSP: 002b:00007fed725f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 537.824080][T11369] RAX: ffffffffffffffda RBX: 00007fed74615fa0 RCX: 00007fed7439aeb9 [ 537.824087][T11369] RDX: 0000000000042002 RSI: 0000200000001480 RDI: ffffffffffffff9c [ 537.824094][T11369] RBP: 00007fed725f6090 R08: 0000000000000000 R09: 0000000000000000 [ 537.824101][T11369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.824107][T11369] R13: 00007fed74616038 R14: 00007fed74615fa0 R15: 00007ffe37ebbf68 [ 537.824122][T11369] [ 538.935740][T11369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1497'. [ 539.160086][T11392] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1503'. [ 539.374912][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 539.374929][ T30] audit: type=1400 audit(2000000055.565:1465): avc: denied { create } for pid=11386 comm="syz.2.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 539.718538][ T30] audit: type=1400 audit(2000000055.565:1466): avc: denied { read write } for pid=11394 comm="syz.0.1506" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0 [ 539.790658][ T30] audit: type=1400 audit(2000000055.733:1467): avc: denied { read } for pid=11394 comm="syz.0.1506" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 539.858191][T11385] FAULT_INJECTION: forcing a failure. [ 539.858191][T11385] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 539.884079][ T30] audit: type=1400 audit(2000000055.733:1468): avc: denied { prog_load } for pid=11394 comm="syz.0.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 539.904728][ T30] audit: type=1400 audit(2000000055.828:1469): avc: denied { read write } for pid=11394 comm="syz.0.1506" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 539.916429][T11404] netlink: 'syz.5.1509': attribute type 10 has an invalid length. [ 539.929080][T11385] CPU: 1 UID: 0 PID: 11385 Comm: syz.3.1502 Not tainted syzkaller #0 PREEMPT(full) [ 539.929107][T11385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 539.929119][T11385] Call Trace: [ 539.929125][T11385] [ 539.929133][T11385] dump_stack_lvl+0x100/0x190 [ 539.929163][T11385] should_fail_ex.cold+0x5/0xa [ 539.929181][T11385] ? prepare_alloc_pages+0x16d/0x5f0 [ 539.929213][T11385] should_fail_alloc_page+0xeb/0x140 [ 539.929240][T11385] prepare_alloc_pages+0x1f0/0x5f0 [ 539.929272][T11385] __alloc_frozen_pages_noprof+0x193/0x2410 [ 539.929311][T11385] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 539.929332][T11385] ? __pfx___might_resched+0x10/0x10 [ 539.929356][T11385] ? find_held_lock+0x2b/0x80 [ 539.929380][T11385] ? process_measurement+0x4c2/0x2400 [ 539.929402][T11385] ? process_measurement+0x4c2/0x2400 [ 539.929427][T11385] ? up_write+0x290/0x4f0 [ 539.929452][T11385] ? process_measurement+0x1ea/0x2400 [ 539.929471][T11385] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 539.929501][T11385] ? policy_nodemask+0xed/0x4f0 [ 539.929529][T11385] alloc_pages_mpol+0x1fb/0x550 [ 539.929556][T11385] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 539.929590][T11385] folio_alloc_mpol_noprof+0x36/0x340 [ 539.929620][T11385] vma_alloc_folio_noprof+0xed/0x1d0 [ 539.929648][T11385] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 539.929685][T11385] do_anonymous_page+0xb10/0x1f40 [ 539.929716][T11385] __handle_mm_fault+0x1d3a/0x2b50 [ 539.929740][T11385] ? mt_find+0x45e/0x8e0 [ 539.929765][T11385] ? __pfx___handle_mm_fault+0x10/0x10 [ 539.929783][T11385] ? __pfx_mt_find+0x10/0x10 [ 539.929821][T11385] ? find_vma+0xbf/0x140 [ 539.929845][T11385] ? __pfx_find_vma+0x10/0x10 [ 539.929876][T11385] handle_mm_fault+0x36d/0xa20 [ 539.929902][T11385] do_user_addr_fault+0x74c/0x12f0 [ 539.929937][T11385] exc_page_fault+0x6f/0xd0 [ 539.929959][T11385] asm_exc_page_fault+0x26/0x30 [ 539.929978][T11385] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 539.930005][T11385] Code: c9 75 f6 e9 82 8a 04 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 539.930024][T11385] RSP: 0018:ffffc9000416fcc8 EFLAGS: 00050246 [ 539.930041][T11385] RAX: 0000000000000000 RBX: 000000007f4ca000 RCX: 0000000000000040 [ 539.930053][T11385] RDX: ffff88807bd88000 RSI: ffffffff82541381 RDI: 0000200000b36000 [ 539.930066][T11385] RBP: 0000000000001000 R08: 0000000000000001 R09: 00000000000001c4 [ 539.930077][T11385] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000b36000 [ 539.930089][T11385] R13: ffff88807bd88000 R14: dffffc0000000000 R15: 0000200000b35040 [ 539.930115][T11385] ? __might_fault+0x111/0x140 [ 539.930139][T11385] read_zero+0xed/0x1f0 [ 539.930168][T11385] ? __pfx_read_zero+0x10/0x10 [ 539.930195][T11385] vfs_read+0x1e4/0xb30 [ 539.930220][T11385] ? __pfx_vfs_read+0x10/0x10 [ 539.930238][T11385] ? find_held_lock+0x2b/0x80 [ 539.930262][T11385] ? __fget_files+0x215/0x3d0 [ 539.930284][T11385] ? __fget_files+0x215/0x3d0 [ 539.930311][T11385] ? __fget_files+0x21f/0x3d0 [ 539.930342][T11385] ksys_read+0x12a/0x250 [ 539.930363][T11385] ? __pfx_ksys_read+0x10/0x10 [ 539.930392][T11385] do_syscall_64+0xc9/0xf80 [ 539.930416][T11385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.930435][T11385] RIP: 0033:0x7f0d1659aeb9 [ 539.930451][T11385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.930469][T11385] RSP: 002b:00007f0d17372028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 539.930486][T11385] RAX: ffffffffffffffda RBX: 00007f0d16815fa0 RCX: 00007f0d1659aeb9 [ 539.930499][T11385] RDX: 00000000ffffff96 RSI: 0000200000000040 RDI: 0000000000000003 [ 539.930511][T11385] RBP: 00007f0d17372090 R08: 0000000000000000 R09: 0000000000000000 [ 539.930523][T11385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.930535][T11385] R13: 00007f0d16816038 R14: 00007f0d16815fa0 R15: 00007ffc985f87f8 [ 539.930562][T11385] [ 539.942395][ T30] audit: type=1400 audit(2000000055.891:1470): avc: denied { read } for pid=11394 comm="syz.0.1506" name="video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 540.357708][T11411] FAULT_INJECTION: forcing a failure. [ 540.357708][T11411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.371144][T11411] CPU: 1 UID: 0 PID: 11411 Comm: syz.5.1509 Not tainted syzkaller #0 PREEMPT(full) [ 540.371161][T11411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 540.371168][T11411] Call Trace: [ 540.371172][T11411] [ 540.371178][T11411] dump_stack_lvl+0x100/0x190 [ 540.371197][T11411] should_fail_ex.cold+0x5/0xa [ 540.371210][T11411] _copy_to_user+0x32/0xd0 [ 540.371227][T11411] simple_read_from_buffer+0xcb/0x170 [ 540.371242][T11411] proc_fail_nth_read+0x1af/0x230 [ 540.371257][T11411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.371273][T11411] ? rw_verify_area+0xce/0x6d0 [ 540.371284][T11411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.371299][T11411] vfs_read+0x1e4/0xb30 [ 540.371313][T11411] ? __pfx_vfs_read+0x10/0x10 [ 540.371323][T11411] ? find_held_lock+0x2b/0x80 [ 540.371338][T11411] ? __fget_files+0x215/0x3d0 [ 540.371354][T11411] ? __fget_files+0x21f/0x3d0 [ 540.371371][T11411] ksys_read+0x12a/0x250 [ 540.371382][T11411] ? __pfx_ksys_read+0x10/0x10 [ 540.371398][T11411] do_syscall_64+0xc9/0xf80 [ 540.371413][T11411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.371425][T11411] RIP: 0033:0x7fb653d5b78e [ 540.371435][T11411] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 540.371446][T11411] RSP: 002b:00007fb651ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.371458][T11411] RAX: ffffffffffffffda RBX: 00007fb651ff66c0 RCX: 00007fb653d5b78e [ 540.371465][T11411] RDX: 000000000000000f RSI: 00007fb651ff60a0 RDI: 0000000000000004 [ 540.371472][T11411] RBP: 00007fb651ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 540.371479][T11411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.371485][T11411] R13: 00007fb654016128 R14: 00007fb654016090 R15: 00007ffc620c28b8 [ 540.371500][T11411] [ 540.804390][T11404] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 540.825477][ T30] audit: type=1400 audit(2000000055.901:1471): avc: denied { map_create } for pid=11394 comm="syz.0.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 540.912753][ T30] audit: type=1400 audit(2000000055.912:1472): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 540.983242][ T30] audit: type=1400 audit(2000000055.922:1473): avc: denied { name_bind } for pid=11399 comm="syz.0.1507" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 541.011999][T11421] syzkaller0: entered promiscuous mode [ 541.038849][T11421] syzkaller0: entered allmulticast mode [ 541.066709][ T30] audit: type=1400 audit(2000000055.996:1474): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 541.579407][T11431] FAULT_INJECTION: forcing a failure. [ 541.579407][T11431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.618356][T11431] CPU: 1 UID: 0 PID: 11431 Comm: syz.2.1515 Not tainted syzkaller #0 PREEMPT(full) [ 541.618386][T11431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 541.618398][T11431] Call Trace: [ 541.618405][T11431] [ 541.618413][T11431] dump_stack_lvl+0x100/0x190 [ 541.618444][T11431] should_fail_ex.cold+0x5/0xa [ 541.618468][T11431] _copy_to_user+0x32/0xd0 [ 541.618512][T11431] simple_read_from_buffer+0xcb/0x170 [ 541.618538][T11431] proc_fail_nth_read+0x1af/0x230 [ 541.618565][T11431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 541.618592][T11431] ? rw_verify_area+0xce/0x6d0 [ 541.618609][T11431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 541.618632][T11431] vfs_read+0x1e4/0xb30 [ 541.618654][T11431] ? __pfx_vfs_read+0x10/0x10 [ 541.618669][T11431] ? find_held_lock+0x2b/0x80 [ 541.618691][T11431] ? __fget_files+0x215/0x3d0 [ 541.618715][T11431] ? __fget_files+0x21f/0x3d0 [ 541.618741][T11431] ksys_read+0x12a/0x250 [ 541.618759][T11431] ? __pfx_ksys_read+0x10/0x10 [ 541.618784][T11431] do_syscall_64+0xc9/0xf80 [ 541.618806][T11431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.618823][T11431] RIP: 0033:0x7fed7435b78e [ 541.618837][T11431] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 541.618853][T11431] RSP: 002b:00007fed725b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 541.618870][T11431] RAX: ffffffffffffffda RBX: 00007fed725b46c0 RCX: 00007fed7435b78e [ 541.618881][T11431] RDX: 000000000000000f RSI: 00007fed725b40a0 RDI: 0000000000000006 [ 541.618892][T11431] RBP: 00007fed725b4090 R08: 0000000000000000 R09: 0000000000000000 [ 541.618902][T11431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.618911][T11431] R13: 00007fed74616218 R14: 00007fed74616180 R15: 00007ffe37ebbf68 [ 541.618936][T11431] [ 544.095453][T11471] xt_TCPMSS: Only works on TCP SYN packets [ 544.448055][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 544.448075][ T30] audit: type=1400 audit(2000000060.888:1560): avc: denied { mounton } for pid=11464 comm="syz.3.1528" path="/319/file1" dev="tmpfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 544.524545][ T30] audit: type=1400 audit(2000000060.888:1561): avc: denied { create } for pid=11464 comm="syz.3.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 544.812057][ T30] audit: type=1400 audit(2000000061.266:1562): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 544.882195][ T30] audit: type=1400 audit(2000000061.308:1563): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 544.955713][ T30] audit: type=1400 audit(2000000061.413:1564): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 544.977318][T11476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1530'. [ 545.032011][ T30] audit: type=1400 audit(2000000061.455:1565): avc: denied { create } for pid=11475 comm="syz.2.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 545.047129][T11480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1530'. [ 545.053073][ T30] audit: type=1400 audit(2000000061.455:1566): avc: denied { create } for pid=11475 comm="syz.2.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 545.103659][ T30] audit: type=1400 audit(2000000061.570:1567): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 545.142857][ T30] audit: type=1400 audit(2000000061.602:1568): avc: denied { name_bind } for pid=11481 comm="syz.4.1532" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 545.188374][ T30] audit: type=1400 audit(2000000061.665:1569): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 546.551996][T11495] FAULT_INJECTION: forcing a failure. [ 546.551996][T11495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.566744][T11495] CPU: 1 UID: 0 PID: 11495 Comm: syz.4.1536 Not tainted syzkaller #0 PREEMPT(full) [ 546.566772][T11495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 546.566784][T11495] Call Trace: [ 546.566789][T11495] [ 546.566794][T11495] dump_stack_lvl+0x100/0x190 [ 546.566813][T11495] should_fail_ex.cold+0x5/0xa [ 546.566826][T11495] _copy_to_user+0x32/0xd0 [ 546.566843][T11495] simple_read_from_buffer+0xcb/0x170 [ 546.566858][T11495] proc_fail_nth_read+0x1af/0x230 [ 546.566874][T11495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.566890][T11495] ? rw_verify_area+0xce/0x6d0 [ 546.566901][T11495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.566918][T11495] vfs_read+0x1e4/0xb30 [ 546.566942][T11495] ? __pfx_vfs_read+0x10/0x10 [ 546.566959][T11495] ? find_held_lock+0x2b/0x80 [ 546.566983][T11495] ? __fget_files+0x215/0x3d0 [ 546.567009][T11495] ? __fget_files+0x21f/0x3d0 [ 546.567041][T11495] ksys_read+0x12a/0x250 [ 546.567056][T11495] ? __pfx_ksys_read+0x10/0x10 [ 546.567068][T11495] ? fdget+0x18b/0x210 [ 546.567083][T11495] do_syscall_64+0xc9/0xf80 [ 546.567098][T11495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.567109][T11495] RIP: 0033:0x7f80b7f5b78e [ 546.567119][T11495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 546.567130][T11495] RSP: 002b:00007f80b8f1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 546.567142][T11495] RAX: ffffffffffffffda RBX: 00007f80b8f1e6c0 RCX: 00007f80b7f5b78e [ 546.567150][T11495] RDX: 000000000000000f RSI: 00007f80b8f1e0a0 RDI: 0000000000000003 [ 546.567156][T11495] RBP: 00007f80b8f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 546.567163][T11495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.567169][T11495] R13: 00007f80b8216038 R14: 00007f80b8215fa0 R15: 00007fff0e610788 [ 546.567184][T11495] [ 546.868521][T11480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1530'. [ 547.007090][T11484] Process accounting resumed [ 547.058229][T11469] Process accounting resumed [ 547.113669][T11505] FAULT_INJECTION: forcing a failure. [ 547.113669][T11505] name failslab, interval 1, probability 0, space 0, times 0 [ 547.161259][T11505] CPU: 0 UID: 0 PID: 11505 Comm: syz.0.1542 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.161290][T11505] Tainted: [L]=SOFTLOCKUP [ 547.161297][T11505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 547.161309][T11505] Call Trace: [ 547.161316][T11505] [ 547.161324][T11505] dump_stack_lvl+0x100/0x190 [ 547.161354][T11505] should_fail_ex.cold+0x5/0xa [ 547.161376][T11505] should_failslab+0xc2/0x120 [ 547.161402][T11505] ? tomoyo_realpath_from_path+0xb6/0x690 [ 547.161425][T11505] __kmalloc_noprof+0xf6/0x9c0 [ 547.161458][T11505] ? tomoyo_realpath_from_path+0xb6/0x690 [ 547.161480][T11505] tomoyo_realpath_from_path+0xb6/0x690 [ 547.161509][T11505] tomoyo_path_number_perm+0x23c/0x580 [ 547.161539][T11505] ? tomoyo_path_number_perm+0x22e/0x580 [ 547.161569][T11505] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 547.161630][T11505] ? find_held_lock+0x2b/0x80 [ 547.161656][T11505] ? hook_file_ioctl_common+0x146/0x410 [ 547.161681][T11505] ? __fget_files+0x215/0x3d0 [ 547.161710][T11505] ? __fget_files+0x21f/0x3d0 [ 547.161738][T11505] security_file_ioctl+0xd3/0x230 [ 547.161762][T11505] __x64_sys_ioctl+0xb7/0x210 [ 547.161782][T11505] do_syscall_64+0xc9/0xf80 [ 547.161804][T11505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.161824][T11505] RIP: 0033:0x7fa03d79aeb9 [ 547.161840][T11505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.161859][T11505] RSP: 002b:00007fa03e63d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.161879][T11505] RAX: ffffffffffffffda RBX: 00007fa03da15fa0 RCX: 00007fa03d79aeb9 [ 547.161892][T11505] RDX: 0000200000000340 RSI: 00000000c1105517 RDI: 0000000000000003 [ 547.161905][T11505] RBP: 00007fa03e63d090 R08: 0000000000000000 R09: 0000000000000000 [ 547.161917][T11505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.161929][T11505] R13: 00007fa03da16038 R14: 00007fa03da15fa0 R15: 00007fffc3299008 [ 547.161959][T11505] [ 547.163003][T11505] ERROR: Out of memory at tomoyo_realpath_from_path. [ 547.757545][T11523] netlink: 'syz.3.1545': attribute type 11 has an invalid length. [ 548.895755][T11542] syzkaller0: entered promiscuous mode [ 548.912827][T11542] syzkaller0: entered allmulticast mode [ 548.938902][ T6876] block nbd5: Possible stuck request ffff888027020000: control (read@0,1024B). Runtime 300 seconds [ 548.951762][ T6876] block nbd5: Possible stuck request ffff888027020200: control (read@1024,1024B). Runtime 300 seconds [ 548.966819][ T6876] block nbd5: Possible stuck request ffff888027020400: control (read@2048,1024B). Runtime 300 seconds [ 548.981992][ T6876] block nbd5: Possible stuck request ffff888027020600: control (read@3072,1024B). Runtime 300 seconds [ 549.025471][T11545] FAULT_INJECTION: forcing a failure. [ 549.025471][T11545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.087221][T11545] CPU: 1 UID: 0 PID: 11545 Comm: syz.2.1552 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.087256][T11545] Tainted: [L]=SOFTLOCKUP [ 549.087262][T11545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 549.087273][T11545] Call Trace: [ 549.087280][T11545] [ 549.087288][T11545] dump_stack_lvl+0x100/0x190 [ 549.087319][T11545] should_fail_ex.cold+0x5/0xa [ 549.087341][T11545] _copy_to_user+0x32/0xd0 [ 549.087367][T11545] simple_read_from_buffer+0xcb/0x170 [ 549.087382][T11545] proc_fail_nth_read+0x1af/0x230 [ 549.087398][T11545] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.087414][T11545] ? rw_verify_area+0xce/0x6d0 [ 549.087424][T11545] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.087439][T11545] vfs_read+0x1e4/0xb30 [ 549.087453][T11545] ? __pfx_vfs_read+0x10/0x10 [ 549.087463][T11545] ? find_held_lock+0x2b/0x80 [ 549.087479][T11545] ? __fget_files+0x215/0x3d0 [ 549.087494][T11545] ? __fget_files+0x21f/0x3d0 [ 549.087511][T11545] ksys_read+0x12a/0x250 [ 549.087523][T11545] ? __pfx_ksys_read+0x10/0x10 [ 549.087539][T11545] do_syscall_64+0xc9/0xf80 [ 549.087553][T11545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.087565][T11545] RIP: 0033:0x7fed7435b78e [ 549.087575][T11545] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 549.087586][T11545] RSP: 002b:00007fed725f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 549.087597][T11545] RAX: ffffffffffffffda RBX: 00007fed725f66c0 RCX: 00007fed7435b78e [ 549.087605][T11545] RDX: 000000000000000f RSI: 00007fed725f60a0 RDI: 0000000000000004 [ 549.087611][T11545] RBP: 00007fed725f6090 R08: 0000000000000000 R09: 0000000000000000 [ 549.087618][T11545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.087624][T11545] R13: 00007fed74616038 R14: 00007fed74615fa0 R15: 00007ffe37ebbf68 [ 549.087640][T11545] [ 549.521478][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 549.521495][ T30] audit: type=1400 audit(2000000066.221:1662): avc: denied { execmem } for pid=11548 comm="syz.3.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 549.578198][T10099] block nbd3: Possible stuck request ffff888026b88000: control (read@0,1024B). Runtime 330 seconds [ 549.608502][ T30] audit: type=1400 audit(2000000066.315:1663): avc: denied { read } for pid=11548 comm="syz.3.1553" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 549.724392][ T30] audit: type=1400 audit(2000000066.347:1664): avc: denied { allowed } for pid=11548 comm="syz.3.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 549.796869][ T30] audit: type=1400 audit(2000000066.410:1665): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 550.265106][T10099] block nbd3: Possible stuck request ffff888026b88200: control (read@1024,1024B). Runtime 330 seconds [ 550.276170][T10099] block nbd3: Possible stuck request ffff888026b88400: control (read@2048,1024B). Runtime 330 seconds [ 550.326750][T10099] block nbd3: Possible stuck request ffff888026b88600: control (read@3072,1024B). Runtime 330 seconds [ 550.393996][ T30] audit: type=1400 audit(2000000066.420:1666): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 550.548333][ T30] audit: type=1400 audit(2000000066.494:1667): avc: denied { map_create } for pid=11551 comm="syz.2.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 550.616190][ T30] audit: type=1400 audit(2000000066.536:1668): avc: denied { create } for pid=11551 comm="syz.2.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 550.679839][ T30] audit: type=1400 audit(2000000066.536:1669): avc: denied { create } for pid=11551 comm="syz.2.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 550.761570][ T30] audit: type=1400 audit(2000000067.082:1670): avc: denied { read write } for pid=11553 comm="syz.3.1554" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 550.844298][ T30] audit: type=1400 audit(2000000067.082:1671): avc: denied { read write } for pid=11553 comm="syz.3.1554" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 551.875193][ T5822] Bluetooth: hci5: link tx timeout [ 551.883024][ T5822] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 553.212818][ T31] INFO: task syz.1.1023:9630 blocked for more than 143 seconds. [ 553.225949][ T31] Tainted: G L syzkaller #0 [ 553.232846][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 553.242146][ T31] task:syz.1.1023 state:D stack:28744 pid:9630 tgid:9629 ppid:5806 task_flags:0x400040 flags:0x00080002 [ 553.254616][ T31] Call Trace: [ 553.258926][ T31] [ 553.273039][ T31] ? __schedule+0xf65/0x5e10 [ 553.305441][ T31] __schedule+0xfe4/0x5e10 [ 553.320614][ T31] ? __lock_acquire+0x4a5/0x2630 [ 553.334675][ T31] ? __pfx___schedule+0x10/0x10 [ 553.353857][ T31] ? find_held_lock+0x2b/0x80 [ 553.368245][ T31] ? schedule+0x2bf/0x390 [ 553.375282][ T31] schedule+0xdd/0x390 [ 553.383897][ T31] schedule_preempt_disabled+0x13/0x30 [ 553.394005][ T31] __mutex_lock+0xc9a/0x1b90 [ 553.402213][ T31] ? bdev_open+0x41a/0xe40 [ 553.411255][ T31] ? find_held_lock+0x2b/0x80 [ 553.426407][ T31] ? find_inode_fast+0x5de/0x910 [ 553.431965][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 553.440008][ T31] ? find_inode_fast+0x1fa/0x910 [ 553.448575][ T31] ? bdev_open+0x41a/0xe40 [ 553.453804][ T31] bdev_open+0x41a/0xe40 [ 553.458148][ T31] ? iput+0x3a/0x40 [ 553.461956][ T31] blkdev_open+0x34e/0x4f0 [ 553.466447][ T31] do_dentry_open+0x73e/0x1570 [ 553.471403][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 553.476405][ T31] vfs_open+0x82/0x3f0 [ 553.480562][ T31] path_openat+0x21dc/0x3120 [ 553.485303][ T31] ? __pfx_path_openat+0x10/0x10 [ 553.490347][ T31] do_filp_open+0x1f7/0x420 [ 553.495105][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 553.500272][ T31] ? _raw_spin_unlock+0x28/0x50 [ 553.505262][ T31] ? alloc_fd+0x476/0x790 [ 553.509780][ T31] do_sys_openat2+0x12e/0x220 [ 553.514548][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 553.519877][ T31] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 553.529111][ T31] __x64_sys_openat+0x12d/0x210 [ 553.534100][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 553.539632][ T31] ? do_user_addr_fault+0x8d6/0x12f0 [ 553.544932][ T31] do_syscall_64+0xc9/0xf80 [ 553.550201][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.556099][ T31] RIP: 0033:0x7f597fb5b78e [ 553.560564][ T31] RSP: 002b:00007f5980af8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 553.569019][ T31] RAX: ffffffffffffffda RBX: 00007f5980af96c0 RCX: 00007f597fb5b78e [ 553.576982][ T31] RDX: 0000000000105201 RSI: 00007f5980af8c00 RDI: ffffffffffffff9c [ 553.585013][ T31] RBP: 00007f5980af8c00 R08: 0000000000000000 R09: 0000000000000000 [ 553.593224][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 553.601275][ T31] R13: 00007f597fe16038 R14: 00007f597fe15fa0 R15: 00007fffb23ac0c8 [ 553.609305][ T31] [ 553.615548][ T31] [ 553.615548][ T31] Showing all locks held in the system: [ 553.623812][ T31] 1 lock held by khungtaskd/31: [ 553.629030][ T31] #0: ffffffff8e5e32e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 553.640078][ T31] 3 locks held by kworker/u8:2/34: [ 553.648125][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 553.659596][ T31] #1: ffffc90000aa7c98 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 553.670225][ T31] #2: ffffffff903f31a8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 553.679448][ T31] 2 locks held by klogd/5168: [ 553.684286][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 553.694405][ T31] #1: ffff8880b8424608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2b6f/0x5e10 [ 553.703176][ T31] 1 lock held by udevd/5809: [ 553.707826][ T31] #0: ffff888142352358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 553.717223][ T31] 3 locks held by kworker/u9:7/5822: [ 553.722545][ T31] #0: ffff88807aeaa148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 553.732897][ T31] #1: ffffc90003dffc98 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 553.745247][ T31] #2: ffff8880435a8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 553.755177][ T31] 1 lock held by udevd/5824: [ 553.759777][ T31] #0: ffff88802694c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 553.769156][ T31] 1 lock held by udevd/6064: [ 553.773734][ T31] #0: ffff888026a29358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 553.783074][ T31] 1 lock held by udevd/6780: [ 553.787733][ T31] #0: ffff888026a2d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 553.797138][ T31] 1 lock held by udevd/6783: [ 553.801842][ T31] #0: ffff888142350358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 553.811219][ T31] 2 locks held by getty/7035: [ 553.815953][ T5130] Bluetooth: hci5: command 0x0406 tx timeout [ 553.822054][ T31] #0: ffff88814e1980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 553.831984][ T31] #1: ffffc900042e32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 553.842357][ T31] 1 lock held by syz.1.1023/9630: [ 553.847429][ T31] #0: ffff88802694c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 553.856802][ T31] 2 locks held by kbnepd bnep0/10532: [ 553.862168][ T31] #0: ffffffff906be810 (bnep_session_sem){+.+.}-{4:4}, at: bnep_session+0x21e5/0x2da0 [ 553.871925][ T31] #1: ffffffff903f31a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x146/0x360 [ 553.881367][ T31] 2 locks held by syz.4.1551/11541: [ 553.886576][ T31] #0: ffffffff903f31a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 553.895719][ T31] #1: ffffffff8e5efab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 553.905820][ T31] 1 lock held by syz.2.1555/11552: [ 553.910981][ T31] #0: ffffffff903f31a8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x23e/0x47c0 [ 553.920295][ T31] 1 lock held by syz.3.1560/11570: [ 553.925443][ T31] #0: ffffffff903f31a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 553.934876][ T31] 1 lock held by syz.0.1561/11577: [ 553.940277][ T31] #0: ffffffff903f31a8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x23e/0x47c0 [ 553.949695][ T31] 1 lock held by syz.0.1561/11578: [ 553.954801][ T31] #0: ffffffff903f31a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 553.964246][ T31] 2 locks held by syz.0.1561/11579: [ 553.969761][ T31] #0: ffff88806283d6f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 553.980170][ T31] #1: ffffffff903f31a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x18f/0x1f0 [ 553.989092][ T31] 1 lock held by syz.5.1563/11584: [ 553.994226][ T31] #0: ffffffff903f31a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 554.003672][ T31] 1 lock held by syz.5.1563/11585: [ 554.008870][ T31] #0: ffffffff903f31a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 554.018326][ T31] [ 554.020653][ T31] ============================================= [ 554.020653][ T31] [ 554.029198][ T31] NMI backtrace for cpu 1 [ 554.029216][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 554.029239][ T31] Tainted: [L]=SOFTLOCKUP [ 554.029245][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 554.029254][ T31] Call Trace: [ 554.029259][ T31] [ 554.029266][ T31] dump_stack_lvl+0x100/0x190 [ 554.029290][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 554.029311][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 554.029329][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 554.029353][ T31] sys_info+0x141/0x190 [ 554.029370][ T31] watchdog+0xcc3/0xfe0 [ 554.029397][ T31] ? __pfx_watchdog+0x10/0x10 [ 554.029417][ T31] ? __kthread_parkme+0x18c/0x230 [ 554.029439][ T31] ? __pfx_watchdog+0x10/0x10 [ 554.029461][ T31] ? __pfx_watchdog+0x10/0x10 [ 554.029480][ T31] kthread+0x3b3/0x730 [ 554.029497][ T31] ? __pfx_kthread+0x10/0x10 [ 554.029510][ T31] ? ret_from_fork+0x79/0xaf0 [ 554.029526][ T31] ? ret_from_fork+0x79/0xaf0 [ 554.029542][ T31] ? rcu_is_watching+0x12/0xc0 [ 554.029562][ T31] ? __pfx_kthread+0x10/0x10 [ 554.029578][ T31] ret_from_fork+0x754/0xaf0 [ 554.029595][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 554.029624][ T31] ? __switch_to+0x7b9/0x10c0 [ 554.029645][ T31] ? __pfx_kthread+0x10/0x10 [ 554.029661][ T31] ret_from_fork_asm+0x1a/0x30 [ 554.029686][ T31] [ 554.029691][ T31] Sending NMI from CPU 1 to CPUs 0: [ 554.174575][ C0] NMI backtrace for cpu 0 [ 554.174595][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.174619][ C0] Tainted: [L]=SOFTLOCKUP [ 554.174625][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 554.174636][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 554.174660][ C0] Code: 56 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 ae 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 554.174677][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000242 [ 554.174692][ C0] RAX: 0000000002d423f1 RBX: ffffffff8e297ac0 RCX: ffffffff8b76d4b5 [ 554.174704][ C0] RDX: 0000000000000000 RSI: ffffffff8dc45b9b RDI: ffffffff8bfa3620 [ 554.174715][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708673d [ 554.174726][ C0] R10: ffff8880b84339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 554.174738][ C0] R13: 0000000000000000 R14: ffffffff90b749d0 R15: 0000000000000000 [ 554.174749][ C0] FS: 0000000000000000(0000) GS:ffff8881245d9000(0000) knlGS:0000000000000000 [ 554.174766][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.174778][ C0] CR2: 000055558b2114e8 CR3: 000000007795a000 CR4: 00000000003526f0 [ 554.174789][ C0] Call Trace: [ 554.174797][ C0] [ 554.174803][ C0] default_idle+0x9/0x10 [ 554.174824][ C0] default_idle_call+0x6c/0xb0 [ 554.174844][ C0] do_idle+0x35b/0x4b0 [ 554.174874][ C0] ? __pfx_do_idle+0x10/0x10 [ 554.174899][ C0] cpu_startup_entry+0x4f/0x60 [ 554.174922][ C0] rest_init+0x251/0x260 [ 554.174943][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 554.174965][ C0] start_kernel+0x47a/0x480 [ 554.174983][ C0] x86_64_start_reservations+0x24/0x30 [ 554.175001][ C0] x86_64_start_kernel+0x122/0x130 [ 554.175020][ C0] common_startup_64+0x13e/0x148 [ 554.175050][ C0] [ 554.385349][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 554.385365][ T30] audit: type=1400 audit(2000000071.312:1721): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 554.422809][ T5474] audit: audit_backlog=65 > audit_backlog_limit=64 [ 554.432047][ T30] audit: type=1400 audit(2000000071.323:1722): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 554.453219][ T5474] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 554.461607][T10099] block nbd2: Possible stuck request ffff888026ae8000: control (read@0,1024B). Runtime 360 seconds [ 554.472458][T10099] block nbd2: Possible stuck request ffff888026ae8200: control (read@1024,1024B). Runtime 360 seconds [ 554.483533][T10099] block nbd2: Possible stuck request ffff888026ae8400: control (read@2048,1024B). Runtime 360 seconds [ 554.494666][T10099] block nbd2: Possible stuck request ffff888026ae8600: control (read@3072,1024B). Runtime 360 seconds [ 554.505722][ T5474] audit: backlog limit exceeded [ 554.510907][ T5474] audit: audit_backlog=65 > audit_backlog_limit=64 [ 554.517483][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 554.524346][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 554.535034][ T31] Tainted: [L]=SOFTLOCKUP [ 554.539355][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 554.549396][ T31] Call Trace: [ 554.552660][ T31] [ 554.556006][ T31] dump_stack_lvl+0x100/0x190 [ 554.560675][ T31] vpanic+0x20d/0x630 [ 554.564640][ T31] panic+0xd1/0xd1 [ 554.568341][ T31] ? __pfx_panic+0x10/0x10 [ 554.572741][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 554.578892][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 554.585034][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 554.591174][ T31] ? watchdog.cold+0x198/0x1ca [ 554.595920][ T31] ? watchdog+0xcd3/0xfe0 [ 554.600243][ T31] watchdog.cold+0x1a9/0x1ca [ 554.605252][ T31] ? __pfx_watchdog+0x10/0x10 [ 554.609916][ T31] ? __kthread_parkme+0x18c/0x230 [ 554.614927][ T31] ? __pfx_watchdog+0x10/0x10 [ 554.619596][ T31] ? __pfx_watchdog+0x10/0x10 [ 554.624259][ T31] kthread+0x3b3/0x730 [ 554.628317][ T31] ? __pfx_kthread+0x10/0x10 [ 554.632907][ T31] ? ret_from_fork+0x79/0xaf0 [ 554.637569][ T31] ? ret_from_fork+0x79/0xaf0 [ 554.642231][ T31] ? rcu_is_watching+0x12/0xc0 [ 554.646982][ T31] ? __pfx_kthread+0x10/0x10 [ 554.651565][ T31] ret_from_fork+0x754/0xaf0 [ 554.656144][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 554.661240][ T31] ? __switch_to+0x7b9/0x10c0 [ 554.665903][ T31] ? __pfx_kthread+0x10/0x10 [ 554.670476][ T31] ret_from_fork_asm+0x1a/0x30 [ 554.675229][ T31] [ 554.678535][ T31] Kernel Offset: disabled [ 554.682838][ T31] Rebooting in 86400 seconds..