last executing test programs: 1m21.391569679s ago: executing program 1 (id=4882): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(0x0, 0x0) fsmount(r1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0xd43f, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r13 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r13, 0xc028564d, &(0x7f00000001c0)={0x3, 0x0, [0x9, 0x5, 0x2, 0xc, 0x1d9a, 0x34e1, 0xfffffff7, 0x8]}) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r14 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r14, 0xc0145608, &(0x7f0000000180)={0xfffffffa, 0x5, 0x1}) ioctl$VIDIOC_S_FMT(r14, 0xc0d05605, &(0x7f0000000280)={0x7, @raw_data="aba47109bc8591377f6d859b26e1e9beae5cdef51af0e56244b510d8020851e096c52293aa14f0c3b453d93452fd211c5de98ace86dd92331e8de2a8bca15f7264c4e68083e95940071555f792101c5131dfd212b10a7cf3d6c4ade89910536176932f7168ff5a2fa576e0ea3949e2dec73188081744476bc478e76e3491ca65718ce009cf8affd2e0c08fb1cce81c8786c609f912e34918e0f83b8a81d305bc06a6917992c9ffbf2639ab6f82dfacc93ab17429b298df6ead1d0b75549a052fb3e8783aa9eff741"}) 1m20.028875047s ago: executing program 1 (id=4891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e4000000001f000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) 1m19.967281299s ago: executing program 1 (id=4892): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) copy_file_range(r0, &(0x7f0000000040)=0x2, r0, &(0x7f0000000080)=0x1e0, 0xff, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9b, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500008d0000000000919078000000000000000000004e21007990780400"/155], 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r4, 0x0, 0x4004005) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "ff"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0x50}}, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='signal_generate\x00'}, 0x18) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) sendmmsg$alg(r7, &(0x7f0000002340)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="e51bb9f18e07a3d644ba8c7d3bfc0f8af57229422d0ecbce26ff046a56040dcc85d058d0acdff86aa0fcd83be37b627db760c9cf31fea0e83afd1378083d0865686968958c5ce9970bff9637963779014c834dc2f1efd00250d68c2ebcfd3d9d448c042d49cec5cc66d0fd2774199f3cfb991169f4578a2224b8e171fd6667be5c59788ec8554cf032578c8d5a24c4bb356cfa0a", 0x94}, {&(0x7f00000001c0)="5c335271f05323c1545fe9af36c8f9631879887173e7aace2b6f359b29aa8606d5f4a721684ae27c5614a0bf8ba725bc4f15190f907f74aa54cf4680e859422953210a091c54918910caf4a8197fa093f8451dc7dd381d13606ca1f3cf262639e313193b12a10136b78dab38f73014a17bc656d94e99353b9e851168659810c7c3ab016e7d42872270d3eceba7771b69189ce3f65f73a8311536124ecf5afbaff18b5c85e32818ea8f1f8f03359a066887d95a98cde338a8640d5325d03edbde9a7c4cae80b33d44b75c8b49f6a5ac9e4945c5a38575dfc1d61681", 0xdb}, {&(0x7f00000002c0)="f8ea66869ff493f01c9ae76d6a1f8bcf43c64d116be3e2c5bdae25c13ce08c1552185bc2a303c14e0a1e6bbad49f513c2f972f7dd783e5327fd146e544fa94ee30dc4ff49b7a61a1e04a798e4289b86b4f3760d4ce590f3b73c3e0ed9a343a735a417ae9e2fc0edee4fa32bf41e31baa6ce71c2e2982112cf5abee61ab5a5bdf3cc99fb943ed8d0f18c47269611c0c904c014fcc4160e4f20b0cb0", 0x9b}], 0x3, 0x0, 0x0, 0xbc0eb2452a091594}, {0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="4588054c56b75e5b752ba19d997184d53ed2bdd7e282d0955b681635e2ebbd7e0ff76e2ad30e4e2fc936421971ad11323ffdb2f468ab7123159bbd993e614ccc8e80c745b3d8e2b1235408c9e97dc3c83a2986ce7705707ac448492ff98a82ab47a66f52ca1393628a635fdbd70e52", 0x6f}, {&(0x7f0000000540)="37395089702b014b24e3eb1fce23178e29d26de8ffe9235a58db99f9c80b6bee079791400d31e805090540e2701d15d2ea714363b3fd4220f2c2ee7a411d4512a0ab7d0ff6725c18", 0x48}, {&(0x7f00000005c0)="76a2321f396528fc8fbf4b73d175705633a39f309fb94c284c86c81b6ea019d534ee4a0ad710e12354435543272ab6d537dd4334a7058bc7929622f6f6eda9aac66f62205186029ba4bf5ef0f0feea2ab6afa93e8b09ee", 0x57}], 0x3, &(0x7f0000002540)=[@iv={0x108, 0x117, 0x2, 0xed, "b90be4a71ecf00e5fc276a1e894fa03d930ce2e8a02ca19ce0e5b0ccb9ec1f41da1f785802f347381ef46d4de170b1c0a11d745d24a514fe843d08731643be0d74d1a4dbebc3d4b566a51839462d171744f92c86703a28268d68feccb0339e3fd9c4157ecfef11356f5dc97b3e10215fa9f9fe935b11b9f07f3659115e4502ec81a3550f4ebf6e2813d951b73ad2f51cc1341830084c92fc68d158262663bcafd54303e567e390114e6b068bd1a28e87c5c5a1867632510c64332cb86e17b7c509fd6af157a8011953f0594546884f9f6f8f6303bd9be099d22cdaf08eb34ed61efd9c0b84f46ca339a595746b"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xbf1}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x43, "e27254bb72e4c9c0eb36aa247c4cede96c750c33739cea52a0e82cdec49fa55d25c3860c709f349c26142e45926f8817a83ea9a2a2bc97e259f53eadc5c285ede7e842"}, @iv={0x110, 0x117, 0x2, 0xf9, "e2b9e14c6cd457f2f8055ce3f1c724c832316ab4fa1148c799666f08d98ed73e7f68f737fe3c3edf5677ada88f7a1fa3473397f11d0c3b4d1983e21485b20b15288bb0322c7bc0d64383c7fb97061524c7f35c1af13e4ea71a0d17d437bf60520e59053f0a8957e4b546f2f1854c550634304fd2a5cf5431934adea28c58b58257d27630bdf717caf6f6c450fde51e894f4fba85c075f6e53948d3ec0dc90fb1e268806f24991280fde1a70247eae7d6e9f64a8cd6b6944bb5831f65bd0485c471874ccef7ce9dfa97fe84425747c77e948f37dfb4ac345723dc4318b81187e2e27358ec3ee33c1f15d1fec35df79146dd0759fef7b01628ca"}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x2e8, 0x4000}, {0x0, 0x0, &(0x7f0000002080), 0x0, &(0x7f0000002100)=[@assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}], 0x60, 0x40010}, {0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002180)="5a90e3043c17b817ba0e1b1a31467b2d6284dd1648d1aedd6a861862af385b5fc0a0be9759415e59eedb3afec14ad4d3b4c1a0a955e19761b5342a3956b0dfa92412b6ffa2a65a2a74f4918e02c6a62ba3edb889629a5e3ace848b65c6e11827c4e849cb", 0x64}], 0x1, &(0x7f0000002240)=ANY=[@ANYBLOB="f8000000000000001701000002000000e1000000d8d76394ba0fb1047abcc09cd1528000a31ffc44506aaa907a4ef469c0a9e20772ea1d89e1a2759cbd119cdff68b5a2f47e4dd6c3513c30eb91f42ac67143a90d3d1e38a5055b50c1cf5b8cbc5b033f7275a5a52020df16f40b22c3660381f632966545544d7fce78cd055539cb9cfae9c2a425425c93f9cf69b0d1c99a951cdd3e5ed6b4c66a345d44f065df962288f63d9158fad44b72dc46e1057bf7164443db7ccf518224850a135bf482151650babe1f532a0fe657cf35485324cfd85994022ba7f0c2ef8faaedda1b998ea2c5683c7f23e39935681ce714043325d000000000000"], 0xf8, 0x4000}], 0x4, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180400000000000000000000010001008142fcdcf40000009520000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 1m19.590385287s ago: executing program 1 (id=4894): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) (async) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) (async) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000000800006b21000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000971bac5544ad77590779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000fe"], 0x80}}, 0x0) (async) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000270001000000000000000000ac1e01"], 0x50}}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4041) 1m15.473264023s ago: executing program 1 (id=4906): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c810) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd58, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x400) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x2a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000560001003bd9c95d71c0d530bd7000fcdbc833c48210df2507a4af00", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x24040010) socket$key(0xf, 0x3, 0x2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) poll(&(0x7f00000001c0)=[{r3, 0x200}], 0x1, 0xfffeffff) ioctl$VHOST_NET_SET_BACKEND(r3, 0xaf02, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket(0x2, 0x80805, 0x0) r4 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x20000}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYBLOB="010025bd7000fddbdf253b00000008000300", @ANYRES32], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000) 1m14.492077988s ago: executing program 1 (id=4910): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellinkprop={0x20, 0x6c, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x2800}}, 0x20}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)={0x4c, 0x0, 0xe096044a3fc9e6f1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x8c04]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2f9}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, '\x00\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000124}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x4004000) (async) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) (async, rerun: 32) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) (rerun: 32) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4014, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) (async) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r7, 0x0) (async) r8 = io_uring_setup(0x4126, &(0x7f0000000680)={0x0, 0xa74f, 0x2, 0x0, 0x243}) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x13, &(0x7f0000001bc0), 0x2) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) (async) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ppoll(&(0x7f0000000240)=[{}], 0xd8, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00222400009f13c51f82513b59"], 0x0}, 0x0) (rerun: 64) 58.284550015s ago: executing program 32 (id=4910): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellinkprop={0x20, 0x6c, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x2800}}, 0x20}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)={0x4c, 0x0, 0xe096044a3fc9e6f1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x8c04]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2f9}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, '\x00\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000124}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x4004000) (async) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) (async, rerun: 32) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) (rerun: 32) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4014, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) (async) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r7, 0x0) (async) r8 = io_uring_setup(0x4126, &(0x7f0000000680)={0x0, 0xa74f, 0x2, 0x0, 0x243}) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x13, &(0x7f0000001bc0), 0x2) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) (async) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ppoll(&(0x7f0000000240)=[{}], 0xd8, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00222400009f13c51f82513b59"], 0x0}, 0x0) (rerun: 64) 11.315551154s ago: executing program 4 (id=5124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x81, 0x8, 0x0, 0x14, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x8000, 0x1, 0xe636, 0x8}}) sendmmsg$sock(r1, &(0x7f00000030c0)=[{{&(0x7f0000000480)=@ll={0x11, 0x1, r2, 0x1, 0x2, 0x6, @local}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000003180)="fd26729164ffd0b16c656ac377d8bd51526f4b557257aee1977a4d1e25df8854bcae7efbbc6cd4d325c12230fada037bf55c8a397ed0fc2761de79e0a2b1165527d59e9300aed7dd38d79c1794fb1bb8e9dc7fcbb436ded0d66349ee427b751269adfa8614dccefdc2b9931960c6c9e6393204eb50d7621f2f1bb9c66b6ce292c0837625", 0x84}, {&(0x7f00000005c0)="5a3e290124e6f741edf706dfa1969dea90110b5796989d1b6c841d9669bc62ab62d1e7cc0503681900bb215534681e58b5ec05eb248852c91394b218e1a082d0b9984a605650ab", 0x47}, {&(0x7f00000016c0)="6fce7d16abf8125bd5489dc4eba31b0ca46b33e9724fe6d522e66a8114d66b5129f0c5afb59c879ba052d4cc35b2e309a81d49aca2f2c53eeaab1b229968f1d82842543838f3a82b901b659c06f07c971df75ca06b7ad8913638a709795568777bfdb99c704cd9877462d649423e086de6c111429197417104f882b80886e06aa34024020b7423af791fd1f08e9593430c5e35a8a6f374f27e01e3720b6866c373c7b395ffc7cdb68344b580cdf42352704e52c02bc4ac", 0xb7}, {&(0x7f0000001780)="db0efbe3d52896bd70286697353a5ac47887a7f1c9b440cdaad19b4987eeb11ed1140f044a359d77a47bc4b8db79c4467875c2758dd18dc5b23855ce898cdeb9b51abf4ffa59ecc8c711421de97ae483ee3d0919029fd4082979d87734e1558807848995e9a61923d67cb0d075ddaf6c72b23f47ffc4b0dfddd14d59b1442d11dce86d2d70ea5fc09f820eb5c78e4a3319e56f12013821bab6b70a51050818dcceed447e8c6d43aacd75fc063cdc91c6ace08c9b9b1fa113f4313e5d6acbd4190f54d9598e5fa105ecd90387e25d30dd5fa02a8d8406dc34a423d3bde089193c96a9ade0e7028e61d08d56", 0xeb}, {&(0x7f0000001880)="409d26c2fb5f2414426f841f6ad3ed8ed9b33f8f8449e980dca9cd23bc53258ab6668e8d24500baac629be1fff43d00dd6715973a260daa5340b82e1af6b20eb37a0604d89226ef82f248b8149c27a940cdda73e3ea8aec0d579158a9a75fea545a42521fc51107ecf12637f769ec76468893f39eb21a5a0f51a063d82e0392712a15ca9b570dacc4003211ae447fc290246b73051992fb180c1230241602252c74e12efa083c4ea28ca70069fd062b01cadda51b6a0b9915f8a31d976933fc4e2dc5fc3fc48c0b7f7ecc50f66c3aacdc6f80b1da9e64406bc62377debb18eccc900"/238, 0xee}, {&(0x7f0000000380)="4cfff9091b65ac49", 0x8}, {&(0x7f0000001980)="177ce871a47fd99d99297705faea013b082f19c127e7a6a01863d7a012fb0bf56c435a62f1b0fc81ce8db6d041eeeb5fbafdc42a82381e961305baaeeaeb2cc99323f3492ca761e80935a3e70369b428d4235e9eec1a126bb5efe6e2c0e3ba8a481678fed9c15e743362fb1e0e2739404e46b2839120b32005d179a63c403bc98b8fd7b5d8f49011d747ab51d729483a11eb573a5d0bff30aaeb2bb87de1fda4f1038c66a3222a32505a1190e6cd1c9dcab38f2470e56b587eacd9aeecca53a33f3c413395dddd8ddeecc89e782f19a9d9e4fe0263583a2a4f7a06a455b0f2441039c08bcb35af8808b6bc9da4ed3810047f0a251cf991537277a7c2f81c6ec0449457110021326f0c0a538766ffe9762e1c84014d726c1d1b2697baafc75ffe42440bab88d3c8323bb38278b3062c4952d60f2f7b0005d6db5dec58d52ec7efe69c5bf507e2d94924970c97e28f0fff8674ac0d86c2510ec8f0383148d3f70ab05f129f3b13dc0dcada0428514503245e36a551b11851e2bd1de2d7c8dc4bf69474d068e91fadd871107b40d0fa5f3b0d5b9cad2732673371b1ece05d590bf7a531d78edabe58885318e45bdc096347666c9798434a6169dbfe1ae60afc57b713c858d4c9960767a98e2aa9c14fbdac409b50bd3cffc35c84eff6471517f77e12622338ee84fedb206a80442635e91a57b1966a403b107cc90bd7d682ece962134a363b76b62943d3349ba904593ec18793a647b284e61c97d67a5a2737629993dcf7d5b7ee2cfe7da5577031430723e01ea4cfa8d0948029277992de77b1f90f4ae12cd861450c933d94694487bd93b9ad69634107dbe264894455c94f6c267b6fe5508c5f5fea383ff5331c4a0eff39ca213a86e2b3f570a17a16235c3a6f68b8989602ae9a1f6f74ee24c5b43b05f3599e53a108b5c1dd2cbe662bfcc4f35e00a4c855891a70681598ef4a1181e01b03d0c3a9ed290e7839fba53e9794ac5ddf6a715aa1be95cbd61d290e433da5fdc54ce9f47cb70c39233566e9fd19483b185028b2cd119aa33041cd715e51086a699d8144eeb5a8c64b22fe2624d9db1de318398c6b6e60d6da9cbea49e8ab315a26ea720e20ea7f0ade3877457fc7dfdc9c63c258f11c5096075f38941e13c7e92df5a2ef2187c78834aac202488175da0aa6f0458599c36e5c51d7f1787b5791a6ffe266ab5b8833a008d86b247012710be69857476e8edb811aa55b2c69a43007132c3f87c7a11cffaa5fb7c4951444576a90d4f14efa9f3192e1d4fa68d4677e714970784767c5cccc4528da422a24e4ea6367b51d959eac4a1f53afc4b670b0d2b8ba697e261a147e1c2411c323f2ea20bd786faf4e87c614cea41bbf2e203311c89ab847cb2adaee6055939d11ace2e3609a255281cb5630561493826a4d8c6785a1900834c8f109f267c55f73941f8783f9c7608c1aba6ff07896b4048b57c5b83eed44a5ff0c1a6bafb559d7c6e76383d274ab8361a57a5d632043d194d87033be8ec95b5ffa78b0a81bff39fa1cbcdde2ccd39e6f9c870e10a3fdfc9f30bebab15d422a70ebc470969799bffaf55e6b44fae88ed1ee404e6c473cf94ce5870ee6c900ebe671239e2b74c5a763bd62820f0f7f92068402ce902a0296fe8141e7aa1cf3e172286f8a6ce49b6d728a4c076dd1317b411c6114c10215dd00bb290ae125db6639d3f8df1616177ba4c5b998aea91d02256d4642cd14156fd616829ed8a7b6b96639285a925b124aa7a9a33cb24cbf4f0a0d2749a415f2d2ab922d03ebe643355db1b8f02253c972749a01b01758a6998e57f5ab1a85c71fa0905a16668aaef41bc50e5969c35c81fb326d6fd42839f207d19d0e9f7a15362c8586bb4f43383dc6c8141a2f07b3f566a7639d04c838fc5f6cc18e95b89295c3c230fbb93d5948408f7ee94bbe65dc2e12c97561a76aafd43cd60e6931c8f3e6e5776c8c3f79e36d0a6595be34271995b0a7d00ff31996e335a9c7bc3f3caed5595051a396c6f7d6a146150711afdca19581976d43d0623dc3f06102e83c2d14726ca2a2b969752b49e4cc39311486e8e75380425fa4b6e75489440b7fca5772b7f1f920665a29f1dfcd0e07523859c730a7579027a245fb092b0d550b3f79c928f313a509a4850bd6524013f64017c7960584b9098be1d197d11c9fe70a4a234742cc29958ec0adfc6429ccdda9c9f9d15dc27605d936ba3093a27528e17cc50cfb08281bf364dcf641f2a23c9bc2190fe610e0a1d50393f71e28adb161f181ce2d053d0d0d01fd596f2953e52c36b54b562ac329c963f2b08ff77fffb2e123e3db0862b64d69bbfe9875c3c3199feb4a6949d137b2db88d767d8b5f215bbe205e4666ec94e79916be651d3bb6926cb8237431e772526945dbf66b8f50e3f1d505042f4af6e415e023496f8ac98372272eda1ad8b483b636b985103763a617c6ff63a59533b8b381af2b4b8c1273e04e54a00f8a00860bdf49e5d2809f926eb191851749409147e5a9387e1e068a1f4052050f4e674e5a16cfb135229c340d2f090f6aa946fc5c5ca76e722b762bf1fecefe1654697b42df43f313dd24d8fd07c70367a3ccf3f6fe28b260d877399266849bd54e75b0d61f43ff618951f37543613d20733d732c54cf7408c7733d68b938e346de3968b59e30479af1b04dcd70f61ccb5621dd538f119f9cadc81be139153bf309cb8554b58fd37ffd8f936157205b89d19757993ace186d069f77c535592f93ea7c5ade652fa7c1a76413cf8fc8de08077bf75b61336fb151ec13c51e6d5b1fa5f5f428e24109dd8c1a07f1c99df69d1177ea535c8f146853a8fc0222430063d62fa2eb0e1e2aef3e57ffc976536ed97cf97df120409956ed7e69acc7cb08595550646e86ebb96602e1d8d2460b7d31a5e5ba03f8639245476b0ac383670e3464f4b572a5f0e7266ed1ee57701e61057cf608983eaf24683763c04b087d4105e1c82ba489aefe0213cf13cc2198beeb7096c66e3c44453ec58bcd6cd69caccdb9325a8ca9659973786c1672dde5fa7c9eca44487ce0cc15758e4febe34c1e7c28ea8c815cc938f12bc4946bb1ea98bdb23f1954b8d5b9f648b9b1245fb92f65a721d0970b1d59f48426b893a806ad0063ba9b307458c4e6146acf6785f17411a49eba226461ab6fad80ff5103cef387837c91b3116a9e450e2518bc975e3b0a193e3078c9d91b7489ae671c6168a9edf7bec8b8aa733b65a6d1c3b7eceb85564bce63c3cc16ac29a7d16f3fb1cbfa535039664491d05b432f8554ff00212556e5289bf0bc7d74caa8ed83d1c2e70ca3681da73722d03c7438e2b23cab112eeb050201e8e12482a407c9d171dd8e958a45730f114dc12d1c099eef541f27a70c53bef0dd3ded7968dbf998fc76e5065514b68eb73318d8c4e9a35d1441dbfc4fe5190d238b6ff4a93a4d8c57b3e6b4c1491ce18baa0f2a10696557fbef4cbfe63362163898b73642483b2ff5859ddaa2a21a4e25667f252168c18f71cb8b4c8b39cb703960bcf3b6966137405ea1bdcb3282f14a3303fd5838c86239673ec1fd5209d04642e4e99bd5a28670ddf3e80ca171d86a47e247221400749c7690fb9469529c2ee85234e2cab9a05280cbf38cd2422ac4f63cc8fe16ba968eac0deba048446249869bade75d37771d9df7bf37cdcf7cf780d1e6c772a5f0a514c34ae3d20a09b5554cc07bcb38ab288f1aeaaae583f322297b7b6f237176983ce5e7eadbaae196fd06272ffee17035609c584df10dc2e940d032c0d4e5bc1b6484196b49ca2833a81b3f4796d8face32a2e17846eeb14cd3b0d82b0cfa9994d5f4ec958a75c16a39a8123de07c317993ae38307df9d0537dddf6fbce16a80591316b94d4fda7f88a00f29d8d7e346c56c608eb567e13ec192dd26844e64d1b8d7c1ee6b5bf034e136cf4281dcd341323fffb733d6b5e881bfcdb325586c6e62a0c588f2e7109e387a1d7cb48cc931ca224905f4e04821086ac38484d9a212544f4dc972b8d658e25a2ac757e150c995ca0946e1cd9f873b324e1bc0c76f30f7cd801d875fd4846d19b466f76dac2510dbeb041a19bc3b32891b2664c8ef09713157036794846bf38d5a4224093b028643738382441ee7366584a57b552e0705786f33d768cfe7e67b59adbae57b77f0270278188f0014b04e48f78294815a6e0608ee67a47d793705655e0f5de6c76236a7e320999860e2b67c51bdcd0d150a03bbb8bef6dd70e40f746d1f466121eeb98867f4a63b4da1163c4dc41eb9275485215ee0463a29f5c0ed60cb6d03d0001413d6702964aae5e3e7c5e8d75c82460e3e62ed654a4f640523f236e857c4c8405affba97c967063acc23f8dd73d5fa8eeb0ca2bbe3de2cc7a62cfaa85da7fc601bf0e191dd7999123fbe43ee14e74d81e9de778ec203a589dc0b65e93e7d00264e5a34a4e688f2918be5a6feb7639e109521a933dc9ab055d747d20ede1706307a14378a30d3dfc01d4baddd7215d364fd7817d868a750e1440a88e2d707e6816bdc10df2847f504d7c0d809ffccb424c54fa8c91a55797c4605bb1d470a4c0ca0b736a6d69000eecc578526c77a95b0b5459dcea2f84155396c4fc4c0632edf989ad98b15718de72b81ab6b18277a20403d04a73965cf650aa5ab43cbac51829ca5bddb6b0764f3539e3074f6513f4eed7c7dcc4018356707c5ddabfee5bd298136328a7a721d4364d0d3a168a0e7eef9983f850752170564a50bdc1449426b1d906483fab570f9fe3a7b5f7a068fbe4e774cd1d6beb05864c19b172f57274d391db52d6753c3733d0153d257a11dd5bf313155332f03000e406270307195d7269a11e164e50583ea5c217411326643f9ecdd0de3232e0a87753d0ea717efdcabef35b75f93d99f0d14d1e823cec5669ef33be5639561b96bdf3e742f00a8af38ef6965045cee94a2aadeaa16c84ba310084bcb12da2d6b20e060c0294dce19443789acb5d96dd60aa4c16ddbd5db9e137ff399730bfcd794e66716e3085e8ca868cc04bbe9a4185c9d3a2c9e29a26a61045a3b44920cca5152ec174c6897d7320e06162d22cea1c8b582dac108f978e2402d1ffb5e7191a0742744c3475a6046fe4e6ad2b868435338b3c50378ce63c9fde69ebdf0865e6ab9977f3f8a2a9394cea0b18cbc92982e4d98e799755565a02682ff7ccb58e76573e9aba71fe178c569d90acc3959cf33f71de6463b0070d3c94605cf91bcaba0d5047f2c1da28244eb8eaa777c456db8cb5341e5e499c9bb237e07cb051db5aa62fe106533e503b0d398227e5626ed9f02cde5e7cd214dd0d22335ffc4a2b5dc84a9bcb11cf8b5c747928c9ee29a3aa6decde2d5fcb2cb816c0fe25406cab1d083979875b257376a244f2be16800d4a86ce056e3a73d13cc5131e66a3565ea2e07aa7136ea265311a7ab30db4580c921d679b381d2294d1cdfccb90e7e87f81e088a433dffd88203bbdb42917935ad135bef3f6c4d77aaad5b9587d0921d72e8fe8c7f71550b5b1987c9519612f3d9fcab2e9dd06ed90800128ae0c9c223aa5e0bf997dd569ee69be2a0fd718a1ecdc83915425c8efedb0104eee05cd34ece743fd3322f98961e11385d30cb409baad61c348e75abdbf10981cd656927d4ba2f43e282991d21d2e76040d55b8e785ab6fe4545b18309a444f228db417166253df1730e677d9447d7f2c3882b05488d01fe08caef2760f2a2944575afccfd21afd3dd64fab5d95ebab7135f863da5c7c6b27bbb573", 0x1000}, {&(0x7f0000002980)="aa619a2b143116ca3d6e11f678c46760325b6363348ca1894fca1b139829d365b5d62be0b08a0b1b98296a2f15feb6d74a68c82827c4482acef666629098dec0207554e4e8e40da838a72c247baca20136950516184ba7a00232b2a9913bf6c5f63c", 0x62}], 0x9, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002ac0)="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", 0xfd}, {&(0x7f0000002bc0)="69c444d2fa552dad2cf3726ab9081e4ea2414ca7958e33d020b941591a03f1b212eea2611619c915ec74053c6281f9083a7763ba64915e7e5597d2e151b9b91831b7bd2d1a85f833aab1d0c45a61e0f015008d296e51eb49a67e157bf722e16f3e3067b547e0cc3fd1e59c85369b4d9ff7e0751df860fa06e5eb3d3b57287159694f2d0c482b337ab9697f4c6af49f9df85cee07b6766f4d2fe1a5ccd0eaa4e800a7463f8e093ebf2ae0a097efd6ea1f280143670d0a21a1bce8", 0xba}], 0x2}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002cc0)="9989a4f24fae8c37399be9dc6e33b6dec60327902c633ecd41f0e3f14e4c781efdf1751767b9e29f3d489d7bc06c0289348e2bffae1bc378b72f350f003d5336bddf4a205d23e76b8afa704263581b2499d94389d2a09675551a36b3e3d615b4", 0x60}, {&(0x7f0000002d40)="8655aea82505a12566c33b98df366a4e04174f5f1a038c51e403832cbae4099fb129889aaf34d2ffb5a488453fe11e418ecae65abf2bea5703205fed5cbe0dfa2181be7b736b3d4737eb41d94ec8cbd5aaa475c43beb70eeef560fceed628f56e3f921787797ff582abd704b10aad932035326d8ae5c893b4c9a712354b7dbd534d50c16490aedec2aaed4af87c60175fc7fec1d8d7c2b54a1929ba89bbb98c34e8e1b002aee85e6c4cd51721caf22a33e4f33c1780658ee943b3f6512135f4b20d84eef2bb38c2f17f4fa99a62df2b663b404e66b20cbcba882b787ce17fd1bcd743181", 0xe4}, {&(0x7f0000002e40)="8f2078d428ea64a004cf683c018786954ea5bb6bcf72ee931bfa556ae9237eeaed1804461e93778cd6f3075ac1dc90699754fa3a79ae45ceb7376c2ca45ac371033e6c1e2d72dc31000cc26933e4946b1abfa75ef10a84b41997bc78134e3196a460216e01", 0x65}, {&(0x7f0000002ec0)="a3885451de34b4c4574a299e53c8f129e1ee73ba61384028d370e85f4a45501df3e84177761049795111e4d6a202ced8f3b7fb87d0897f20e39d2d8b8623e2e049271f1eb2945e85e50f0c1e12dfee7c4955c9bebd03290162f0ef32938911d99023499501ec", 0x66}, {&(0x7f0000002f40)="0f3526bbc14abb6ace72c9ec2bf753c3e334d837c1001a15c18f267ed0d1805c19bcdcfa41ec6d80bfa1732ec70bb7bba193a1df89127e0a25ef15ed6aea8d9cbf2ac235c1730892537ef4733a237072bdd8714996761624475d94382b1461db3c657d651b85eca43eadeafaff242de458c1fcc4ad3c71ce65532fa45c8af880037cc055eb5226515d2faad5bdde04ae7d18c3838ae4c73deb3852ed686867498737372305018decf937fc76e4d6d92a1a85c17d8a32402df93ed3d565c5920cd6f4141a2e4ef0cf1c71db26aae2492ff599291583211067be9e5646fc", 0xdd}], 0x5}}], 0x3, 0x0) setrlimit(0xa, &(0x7f0000000280)={0xfffffffffffffffb, 0x81}) r3 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) 10.195724392s ago: executing program 4 (id=5129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x9704, 0x0, 0x9, 0x0, 0x4, 0x8, 0x80000, 0x6, 0x2, 0xf1b, 0x0, 0x0, 0x2000000000000, 0x3, 0x4, 0x1, 0x0, 0x4000000, 0x3, 0xfffffffffffffff7, 0x0, 0xfffffffffffffffe, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) close(r5) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x29, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@jmp={0x5, 0x0, 0x5, 0x7, 0x6, 0xc, 0xfffffffffffffff0}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x71, &(0x7f0000000240)=""/113, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x7, 0x200, 0x400000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000400), 0x10, 0x6}, 0x94) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r9}, @RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r9, 0x25, 0x9, @void}, 0x10) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000200)={0xc}) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000170a010100000000"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) 8.238334248s ago: executing program 4 (id=5133): connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff}, 0xe) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa14"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r1 = inotify_init1(0x80800) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x0) 8.083196063s ago: executing program 3 (id=5134): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = getpid() clock_gettime(0x0, &(0x7f0000000140)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000100)=""/111, 0x66}], 0x1, 0xfffffffc, 0x0) 7.960788332s ago: executing program 4 (id=5135): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x53d932c2f4d10c5b) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) socket(0xa, 0x80000, 0x7a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000380)=0xffffffff, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) setsockopt$inet_int(r4, 0x0, 0x17b3883a49e66f6e, &(0x7f0000000140)=0x8, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000000000085eefb00050000001801000020786c250000000000202020db"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_end\x00', r5}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4d0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) 7.473175629s ago: executing program 0 (id=5136): msgsnd(0x0, &(0x7f0000000040)=ANY=[], 0x4, 0x0) r0 = creat(0x0, 0x24) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r2, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000) sched_setscheduler(r3, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRES16=r0], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r6) ptrace$peeksig(0x4212, r6, &(0x7f0000000440)={0x5}, &(0x7f0000000480)) socket$kcm(0x2d, 0x2, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}, 0x1, 0x0, 0x1600}, 0x20000086) 7.387164776s ago: executing program 2 (id=5137): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x38, r5, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x260}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) 7.130328678s ago: executing program 3 (id=5138): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 6.354582127s ago: executing program 2 (id=5139): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi1\x00', 0x800, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000400)={'pcl730\x00', [0x4, 0xe854, 0x10001, 0x8, 0x8, 0x10, 0x5, 0x2, 0xfff, 0x4, 0x6, 0x2, 0x9, 0x82ca, 0x5, 0x2, 0x8, 0xff, 0x97, 0x9, 0xd259, 0x7, 0x45, 0x3ff, 0x9e8, 0x3ff, 0xde24, 0xfffffffb, 0x3, 0x4, 0x3]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfff) r2 = msgget(0x3, 0x401) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/74) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 6.258611818s ago: executing program 0 (id=5140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x81, 0x8, 0x0, 0x14, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x8000, 0x1, 0xe636, 0x8}}) sendmmsg$sock(r1, &(0x7f00000030c0)=[{{&(0x7f0000000480)=@ll={0x11, 0x1, r2, 0x1, 0x2, 0x6, @local}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000003180)="fd26729164ffd0b16c656ac377d8bd51526f4b557257aee1977a4d1e25df8854bcae7efbbc6cd4d325c12230fada037bf55c8a397ed0fc2761de79e0a2b1165527d59e9300aed7dd38d79c1794fb1bb8e9dc7fcbb436ded0d66349ee427b751269adfa8614dccefdc2b9931960c6c9e6393204eb50d7621f2f1bb9c66b6ce292c0837625", 0x84}, {&(0x7f00000005c0)="5a3e290124e6f741edf706dfa1969dea90110b5796989d1b6c841d9669bc62ab62d1e7cc0503681900bb215534681e58b5ec05eb248852c91394b218e1a082d0b9984a605650ab", 0x47}, {&(0x7f00000016c0)="6fce7d16abf8125bd5489dc4eba31b0ca46b33e9724fe6d522e66a8114d66b5129f0c5afb59c879ba052d4cc35b2e309a81d49aca2f2c53eeaab1b229968f1d82842543838f3a82b901b659c06f07c971df75ca06b7ad8913638a709795568777bfdb99c704cd9877462d649423e086de6c111429197417104f882b80886e06aa34024020b7423af791fd1f08e9593430c5e35a8a6f374f27e01e3720b6866c373c7b395ffc7cdb68344b580cdf42352704e52c02bc4ac", 0xb7}, {&(0x7f0000001780)="db0efbe3d52896bd70286697353a5ac47887a7f1c9b440cdaad19b4987eeb11ed1140f044a359d77a47bc4b8db79c4467875c2758dd18dc5b23855ce898cdeb9b51abf4ffa59ecc8c711421de97ae483ee3d0919029fd4082979d87734e1558807848995e9a61923d67cb0d075ddaf6c72b23f47ffc4b0dfddd14d59b1442d11dce86d2d70ea5fc09f820eb5c78e4a3319e56f12013821bab6b70a51050818dcceed447e8c6d43aacd75fc063cdc91c6ace08c9b9b1fa113f4313e5d6acbd4190f54d9598e5fa105ecd90387e25d30dd5fa02a8d8406dc34a423d3bde089193c96a9ade0e7028e61d08d56", 0xeb}, {&(0x7f0000001880)="409d26c2fb5f2414426f841f6ad3ed8ed9b33f8f8449e980dca9cd23bc53258ab6668e8d24500baac629be1fff43d00dd6715973a260daa5340b82e1af6b20eb37a0604d89226ef82f248b8149c27a940cdda73e3ea8aec0d579158a9a75fea545a42521fc51107ecf12637f769ec76468893f39eb21a5a0f51a063d82e0392712a15ca9b570dacc4003211ae447fc290246b73051992fb180c1230241602252c74e12efa083c4ea28ca70069fd062b01cadda51b6a0b9915f8a31d976933fc4e2dc5fc3fc48c0b7f7ecc50f66c3aacdc6f80b1da9e64406bc62377debb18eccc900"/238, 0xee}, {&(0x7f0000000380)="4cfff9091b65ac49", 0x8}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="aa619a2b143116ca3d6e11f678c46760325b6363348ca1894fca1b139829d365b5d62be0b08a0b1b98296a2f15feb6d74a68c82827c4482acef666629098dec0207554e4e8e40da838a72c247baca20136950516184ba7a00232b2a9913bf6c5f63c", 0x62}], 0x9, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002ac0)="0d6ca90c6df8136c8f29c5bf32bcf41ef8de899b6ef45c94f7fb1a8b52692073804d6aaee0c501c07d70b2141aef6547d9b6408a04f70bfba434a21fbc00307c83b7bf7fe72d1f96a6fcda0b465ddde90a9ec65a2fbcf0e2dfce514ab40aa2c4bd7c93967fe78111df89329d7a0f962167d24e881a9a5de313eccf1f52aa5ed0325c349947f848228cede54a3e3403ab4c2d0ef4c4ee9c9c2c88808d830b07f71bcc8dc88ca2748366bb60ad5fea69d4ea962de3248547dfde9f1a0a543578077757cafa41b7cc98498d0894d2e15163477dc287040f810412336b64f52f93773e1566984de8681454fba86d76ed881ba946214cf76d113faa49e53747", 0xfd}, {&(0x7f0000002bc0)="69c444d2fa552dad2cf3726ab9081e4ea2414ca7958e33d020b941591a03f1b212eea2611619c915ec74053c6281f9083a7763ba64915e7e5597d2e151b9b91831b7bd2d1a85f833aab1d0c45a61e0f015008d296e51eb49a67e157bf722e16f3e3067b547e0cc3fd1e59c85369b4d9ff7e0751df860fa06e5eb3d3b57287159694f2d0c482b337ab9697f4c6af49f9df85cee07b6766f4d2fe1a5ccd0eaa4e800a7463f8e093ebf2ae0a097efd6ea1f280143670d0a21a1bce8", 0xba}], 0x2}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002cc0)="9989a4f24fae8c37399be9dc6e33b6dec60327902c633ecd41f0e3f14e4c781efdf1751767b9e29f3d489d7bc06c0289348e2bffae1bc378b72f350f003d5336bddf4a205d23e76b8afa704263581b2499d94389d2a09675551a36b3e3d615b4", 0x60}, {&(0x7f0000002d40)="8655aea82505a12566c33b98df366a4e04174f5f1a038c51e403832cbae4099fb129889aaf34d2ffb5a488453fe11e418ecae65abf2bea5703205fed5cbe0dfa2181be7b736b3d4737eb41d94ec8cbd5aaa475c43beb70eeef560fceed628f56e3f921787797ff582abd704b10aad932035326d8ae5c893b4c9a712354b7dbd534d50c16490aedec2aaed4af87c60175fc7fec1d8d7c2b54a1929ba89bbb98c34e8e1b002aee85e6c4cd51721caf22a33e4f33c1780658ee943b3f6512135f4b20d84eef2bb38c2f17f4fa99a62df2b663b404e66b20cbcba882b787ce17fd1bcd743181", 0xe4}, {&(0x7f0000002e40)="8f2078d428ea64a004cf683c018786954ea5bb6bcf72ee931bfa556ae9237eeaed1804461e93778cd6f3075ac1dc90699754fa3a79ae45ceb7376c2ca45ac371033e6c1e2d72dc31000cc26933e4946b1abfa75ef10a84b41997bc78134e3196a460216e01", 0x65}, {&(0x7f0000002ec0)="a3885451de34b4c4574a299e53c8f129e1ee73ba61384028d370e85f4a45501df3e84177761049795111e4d6a202ced8f3b7fb87d0897f20e39d2d8b8623e2e049271f1eb2945e85e50f0c1e12dfee7c4955c9bebd03290162f0ef32938911d99023499501ec", 0x66}, {&(0x7f0000002f40)="0f3526bbc14abb6ace72c9ec2bf753c3e334d837c1001a15c18f267ed0d1805c19bcdcfa41ec6d80bfa1732ec70bb7bba193a1df89127e0a25ef15ed6aea8d9cbf2ac235c1730892537ef4733a237072bdd8714996761624475d94382b1461db3c657d651b85eca43eadeafaff242de458c1fcc4ad3c71ce65532fa45c8af880037cc055eb5226515d2faad5bdde04ae7d18c3838ae4c73deb3852ed686867498737372305018decf937fc76e4d6d92a1a85c17d8a32402df93ed3d565c5920cd6f4141a2e4ef0cf1c71db26aae2492ff599291583211067be9e5646fc", 0xdd}], 0x5}}], 0x3, 0x0) setrlimit(0xa, &(0x7f0000000280)={0xfffffffffffffffb, 0x81}) r3 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) 5.605917102s ago: executing program 2 (id=5141): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x4b, 0x42, 0xe6, 0x8, 0x1a0a, 0x103, 0xad1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf6, 0x39, 0xbe}}]}}]}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf25080000008c00058007000100696200003400028008000100170000000800040012040000080001001700000008000200010001000800010010000000080002002a0e00003c00028008000300090000000800030000000000080001000f00000008000200090000000800030001000080080001001800000008000100060000f007000100657468000700010069620000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000084}, 0x840) 5.515154958s ago: executing program 0 (id=5142): accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0xe}, @l2cap_cid_le_signaling={{0xa}, @l2cap_ecred_reconf_req={{0x19, 0x0, 0x6}, {0x9, 0xf9, [0x0]}}}}, 0x13) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xef}, "106cbf58c6cdc0f6685d1492c04dcc6029390c7c9c14ff57e222f98e658fbd4b40254f7780c3652c4038d772a63287b77c1cb47fffd412f543ce3b6b7e038ac92832787a161a1dde33e2ad5c63cd3375fe8c282b04543418e34ffe2b0a6417af04a7f0baeb5e33d7b248c2043d8732aad23497cfd0d524b361337a692d7f0d6a6191194bec67e7d66dfeeabae27564a0513c69f7f8e35bc34b452a413b49411949e27a3c2f74b9a62574c0ba5c2f9e4686ab3330243a37fb03826c202a24d5402607a16b61f7a82d35c92939276f91dac886f7f57993fc501310d7697a58b0c22b83776fd9a7d5826ca81fb889326e"}, 0xf3) 5.310268465s ago: executing program 0 (id=5143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x26, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x77, 0x0, [{0x0, 0x12, "881681ba3162cfdfa8b34cc86e1be900"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xa, 0x0, [{0x0, 0x4, "7f36"}]}]}}}}}}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x4480, &(0x7f00000002c0)=ANY=[@ANYRESHEX]) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./cgroup\x00', 0x1) 5.1335443s ago: executing program 3 (id=5144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) sendto$inet6(r0, &(0x7f0000000280)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x17) 4.371079078s ago: executing program 3 (id=5145): syz_open_dev$loop(&(0x7f0000000140), 0x760, 0x200) sysinfo(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x0, 0x8e, 0x0, 0x1, 0xa}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_secret(0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a41", 0x12) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100000e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a00000000000000fe8092"], 0x70}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0), 0x0, 0x20040141, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @mcast1, 0xe}, 0x1c) socket$netlink(0x10, 0x3, 0x0) 3.697133839s ago: executing program 4 (id=5146): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000280)="1000a8631eabc817ff") 3.601856522s ago: executing program 3 (id=5147): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) sendto$inet6(r5, 0x0, 0x0, 0x440000c0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r5) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x2040014}, 0x8000) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x4}, 0x8) close_range(r4, 0xffffffffffffffff, 0x0) r6 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$RTC_SET_TIME(r6, 0x4024700a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.113211522s ago: executing program 3 (id=5148): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mount(0x0, 0x0, 0x0, 0x8000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f0000000dc0)=[{{&(0x7f0000000200)=@x25={0x9, @remote}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)=""/70, 0x46}, {&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000340)=""/40, 0x28}, {&(0x7f0000000640)=""/136, 0x88}, {&(0x7f0000000700)=""/17, 0x11}, {&(0x7f0000000740)=""/158, 0x9e}], 0x9, &(0x7f00000008c0)=""/97, 0x61}, 0xfffffffc}, {{&(0x7f0000000940)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/117, 0x75}, {&(0x7f0000000a40)=""/134, 0x86}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/222, 0xde}], 0x4, &(0x7f0000002180)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c40)=""/127, 0x7f}, {&(0x7f0000000cc0)=""/57, 0x39}, {&(0x7f0000000d00)=""/76, 0x4c}], 0x3}, 0x6}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$inet6(0xa, 0x3, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f00000001c0)={@default, @bcast}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r5}, 0x38) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000e80)='net/nfsfs\x00') getdents(r6, &(0x7f0000000380)=""/200, 0x1d) 2.106089884s ago: executing program 5 (id=5149): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x1}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000540)={{0x32, @multicast1, 0x4e22, 0x4, 'lblcr\x00', 0x8, 0xe6, 0x66}, {@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x3ff}}, 0x44) sync_file_range(r2, 0xffffffffffffa525, 0x7, 0x3) migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) setresuid(0x0, 0xee00, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="000425bd7000ffdbdf251c00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) 2.066793612s ago: executing program 2 (id=5150): socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9282, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r2, 0x0, 0x1}, 0x18) write$cgroup_int(r1, &(0x7f0000000040)=0x1c9, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000080)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x64, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback, {[@cipso={0x86, 0x6}, @end, @timestamp_prespec={0x44, 0xc, 0xf0, 0x3, 0xe, [{@private=0xa010111, 0x4}]}, @lsrr={0x83, 0xf, 0x68, [@multicast1, @multicast2, @multicast2]}, @timestamp={0x44, 0x1c, 0x44, 0x0, 0x6, [0x7, 0x2, 0xb3eb, 0x4, 0x8, 0x972]}, @ra={0x94, 0x4, 0x1}]}}}}}, 0x82) 1.967189071s ago: executing program 0 (id=5151): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) dup(0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf2510000000080005000b0000003000038014000200697036677265746170"], 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x40400c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') (async, rerun: 64) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000280)={0x1, 0x0, 0x27f}) (rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x550}}, 0xc020) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) fsopen(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.554940853s ago: executing program 0 (id=5152): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x28, "4d59e1a2b67c09d33c388742aeff1390ef8c0ced88f80be93bba0b912b88f578ffd1e6de6c5db8df"}, &(0x7f0000000100)=0x30) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x8, 0x7}, 0x8) r2 = syz_io_uring_setup(0x20000ec9, &(0x7f0000000000)={0x0, 0xcd52, 0x80, 0x2, 0xffffffff}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="001500100000"], 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000000)={0x0, 0x4, 0x2, "6fde"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c0001800600060065580000100002800c001780080001800400", @ANYRES64=r6], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x5e22, 0x10a5, 0x3, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.545315597s ago: executing program 5 (id=5153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendto$packet(r2, &(0x7f00000000c0)="10", 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockname$llc(r5, 0x0, 0x0) 1.209194391s ago: executing program 2 (id=5154): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000505000a000000050004000000000000000000a650e3c5411092cf7ed9ed09e2f5b9b9109a2beef57938be58b508a17274e1c12f93da0eeac923f32713c469ae4ef45473e3386869abe2d5492bc6be3e9fbb2555dcffe473722a28115ca08b0871662c359871d1206eb5c9aad4fd4942415a9d2e57955332791ad5fd0c7e831a0ff50018fe7b9357dad21d5d763fe77dd303adaf80d99849128c0d9a1e0c8755bccd409ba01fab68853c5c69a2ef5589767b93c12d7b23e4e6d29ac3de201ee6b9a8f03629c95e3c4bee53d8b40881992fad"], 0x5c}}, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd70", @ANYRES32], 0x50}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f0000000080)=0xe2a8d1d21b84a7f3) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006a0083130000000000000000000000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x1, 0x1, 0x0, r8}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x30, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5102}, 0x94) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@delchain={0x1504, 0x65, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x3, 0xf}, {0x1}, {0xfff1, 0xf}}, [@f_tcindex={{0xc}, {0x2b4, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xc8ca}, @TCA_TCINDEX_ACT={0x2a8, 0x7, [@m_gact={0xcc, 0xc, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x727, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2a4, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x37a, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffe00, 0x6, 0x10000000, 0x9, 0x200}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2500, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x1, 0x7, 0x101, 0x9000}}]}, {0x3d, 0x6, "700660148193a0f9a847776413aabccd9eb91fd56b37823a3714a6d4f3ff728275b2422823b1995845c817e509e07fe54fce3e9b4a3dfd1de0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xec, 0x1b, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}]}, {0xb8, 0x6, "e7336a66cac2427599adba62edcd1d2d990c389e23f2186bdd571913216669b25fc5fa5516adcea7b20b69b487b203def37fc6411610a192ec3c2e39279bbf220805c1a813c8a5017d22bd49b30b59469fe29a87a555152ee646e2e7b74a1e737f7ff66ee80b4d1b3de4ef07742d82e354e26d0fe46a1e2cede370bcc60121b7170746d3bfe69e821fa7552aca2809da6f7cac1e5b7e9b42617de41e975dcedee818d7d4f12fe75da6c43f9d4fc78769fe73d435"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0xec, 0x17, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xca7f789, 0x8, 0x6, 0x0, 0xfa5}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x0, 0x6, 0x3ff}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x1, 0x0, 0x6}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x3, 0x8, 0x100, 0x2}, 0x4}}]}, {0x4b, 0x6, "79364c500777bce0276fa11991dd67223227e4966662a03f927e067957809bf38bbcace67cd9694df6c3baa2fa39abbd9df68b6a6d415c8393af819bad899b8ee74798c021c6f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @f_tcindex={{0xc}, {0x11f4, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x66d4}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xaa5b}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x62c1}, @TCA_TCINDEX_POLICE={0x1028, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0x8001, 0x4, 0x3ff, 0x0, 0x3, 0xf095, 0x9, 0x6, 0x816d, 0x6, 0x8001, 0x8164, 0x5, 0x0, 0xfff, 0x400000, 0x40, 0x50, 0x2, 0x8, 0x9, 0x1, 0x3, 0x5a, 0x2, 0xbe, 0x8, 0x10000, 0x8, 0x7fff, 0x7fff, 0x400, 0x5469, 0x9, 0x0, 0x1, 0x17fcb8e3, 0x7, 0x8, 0x81, 0xffffffff, 0x69, 0x4, 0x7, 0x0, 0x4, 0x5, 0x1, 0xff, 0x6e, 0xebd, 0x7, 0x1, 0x9, 0x85, 0x8, 0x9, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x80000000, 0xffffffff, 0x800, 0xa6, 0x9, 0x10001, 0x0, 0x10000, 0x7, 0x9c42, 0x3, 0x48d, 0x8000, 0x0, 0xf, 0x5, 0x4, 0x3, 0x200, 0x10001, 0x7, 0xd, 0x1, 0xfffffffc, 0x10001, 0x2, 0x97, 0xfffffffb, 0x5, 0x80, 0x3, 0xfffffff8, 0x5782d1ef, 0x8, 0xfffffff9, 0x9, 0x800, 0x2, 0x48, 0x8, 0x2, 0x1, 0x2, 0x9, 0xffff5044, 0x4, 0x7, 0x4f8e, 0x80000000, 0x1ff, 0x5, 0xc74b, 0x9, 0xf9cb9a70, 0x7f, 0x5, 0x242, 0xffff, 0x4, 0x1, 0x1, 0x1ff, 0x4, 0xfffffffa, 0x6, 0x80, 0x8, 0x7, 0x66, 0x6326, 0x0, 0x1, 0x9, 0x8, 0xbe37, 0x4, 0x4, 0x7fffffff, 0x4, 0x5, 0xa, 0x3, 0xff, 0x9, 0x10, 0x2, 0x9, 0x2, 0x8, 0x3, 0x7, 0xa, 0x101, 0x100, 0xfbb, 0x40, 0x7, 0x4, 0x6, 0x1000, 0x2, 0x9, 0x81, 0x1, 0x6, 0x2, 0x1, 0x9, 0x0, 0x2, 0x83, 0x5, 0x9, 0x40c, 0xd, 0x7, 0x9, 0x800, 0x3, 0xffffffff, 0x8000, 0x5, 0x7, 0xfffffffb, 0x4, 0x7, 0x1, 0x9, 0x10001, 0xf, 0x1, 0x23a2, 0x4, 0x7, 0x4, 0x10000, 0x7ff, 0x6, 0x80000001, 0x7fffffff, 0x401, 0x7, 0x8, 0x4, 0x9, 0xffffff81, 0x49, 0x7, 0x2, 0x5b42, 0x7, 0x0, 0x81, 0x7, 0x4, 0xbe, 0x4, 0xfff, 0x401, 0x81, 0x4, 0x6, 0xa, 0x3, 0xffff7fff, 0x9b, 0x7, 0x3, 0x7, 0x5, 0x100, 0x9, 0x5, 0x9, 0x1, 0x4, 0x6, 0x81, 0x65, 0x439, 0x7d10dd6e, 0x1, 0x101, 0x585a, 0xa5, 0x9, 0x19, 0x101, 0x1, 0x3, 0x2, 0x4, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0xc000000, 0xfffffffe, 0x7, 0xc, 0x3, 0x5c3, 0xa3c, 0x3, 0xffffffff, 0x40, 0x9, 0x7, 0x1, 0xa0, 0x5, 0x100, 0x80, 0x1d0, 0x401, 0x1, 0x40, 0x2, 0x4, 0x9, 0x9, 0xa29, 0x3, 0x3, 0x9e7f, 0x2, 0x7ff, 0x5, 0x0, 0x8, 0x9, 0xffffffff, 0x6, 0x80, 0x7, 0x2, 0x0, 0x0, 0x80000001, 0x4, 0x6, 0x5, 0x80000000, 0x897, 0x1, 0x600, 0x2, 0x8, 0x87e, 0x8, 0x5, 0xb, 0x5, 0x7fffffff, 0xd59, 0x4, 0x10, 0x10, 0x10, 0x8001, 0x0, 0xfffffffd, 0x7, 0x8, 0x7, 0x2, 0x1ec, 0x3, 0x3, 0x4, 0x1, 0x64, 0x6, 0x5, 0x1, 0x6, 0xfff, 0xdb1d, 0x0, 0x29, 0x5e6df115, 0x9, 0x542f, 0x1a0000, 0x10, 0x7fff, 0xf76, 0x100, 0x3ff, 0x1, 0xaa12, 0x8d, 0x8, 0xfff, 0x7, 0x72, 0x4, 0x9, 0x400, 0x7fff, 0x4, 0x10001, 0x1800000, 0xd00000, 0x4, 0x2, 0x8000, 0x1ff, 0x3dd, 0xeac, 0x59d9, 0x4, 0xff, 0x3, 0x81, 0x9, 0x3, 0x0, 0x57, 0x4, 0x4, 0x9, 0x89, 0x80000000, 0x7, 0x0, 0x4, 0x0, 0x0, 0xfff, 0x9, 0x40, 0x4, 0x8, 0x8f6, 0x6, 0x2, 0xaa, 0x9, 0x5, 0xffff2ac3, 0xa1, 0x2, 0xfffffe01, 0x1, 0xfffffffe, 0x3ff, 0x9, 0x9b0d, 0x7, 0xc, 0x9, 0x87, 0xeaa, 0x1, 0x4, 0x86f, 0x9, 0x8, 0x7, 0x8, 0xa, 0xf, 0x2, 0x3, 0x8, 0x0, 0x5c, 0x378, 0x3, 0xffffff50, 0x100, 0x7fff, 0xff, 0x7, 0xfffffffb, 0x1, 0x6, 0x9, 0xf6f, 0xfffff001, 0x5, 0x15, 0xfff, 0x5fa0, 0x7, 0x7fff, 0x1, 0xa1, 0xfff, 0x4, 0x3, 0xffffffff, 0x8001, 0x0, 0x3, 0x8, 0x6, 0x0, 0x2, 0xffffff7a, 0x22, 0x80000000, 0x5, 0xdded, 0x9, 0x100, 0x29, 0x5, 0x0, 0x7, 0x1, 0x42f09ef6, 0x8, 0x9, 0x100, 0xb, 0x3, 0x3, 0x7, 0x8, 0x8e, 0x6, 0xf, 0x4, 0x5, 0x1, 0x5, 0x7, 0x0, 0x2, 0x200, 0x4, 0xffffffff, 0x8, 0x9, 0x10, 0x2, 0x5fd9, 0x3, 0xffffffff, 0x8000, 0xf9b, 0x10, 0xfffffffc, 0xc14, 0x390a, 0x80000001, 0x0, 0x81, 0x7, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x4, 0x38e5, 0x6, 0x2a, 0x100, 0x81, 0x3, 0xee, 0x9, 0xc, 0x454, 0x5, 0x6, 0x7, 0x4, 0x7, 0x3, 0x9, 0x3ff, 0x8001, 0x5, 0x8, 0x8, 0xdc38, 0x10, 0x6702, 0x8, 0x3, 0x1000, 0xc96, 0xffffffff, 0x2, 0x8, 0x1, 0x9, 0x2, 0xfffffff5, 0x5, 0x2, 0x8, 0x2, 0x101, 0x6, 0xf8, 0x1, 0x1, 0x80, 0x9, 0x8, 0x3, 0x81, 0xfff, 0x10001, 0x9, 0xa, 0x8, 0x8, 0xda, 0x8, 0x8, 0xb167, 0x101, 0x5f, 0xc, 0x5, 0x3, 0x3, 0x40, 0xdd1, 0x7, 0x6, 0x6, 0x309, 0x423f, 0x8, 0x9, 0x1000, 0x3, 0x7, 0x6, 0x10000, 0x6, 0x6, 0x78, 0x3, 0x3, 0x7, 0x521, 0x2, 0xfffffffa, 0x2, 0x6, 0x7, 0x5, 0x3, 0x5ae6, 0x40, 0x13, 0x81, 0xe5b, 0x2, 0x1, 0x1, 0x7, 0x9, 0x1, 0xfffffffc, 0x7, 0xff, 0x200, 0x18001, 0xec, 0xfe, 0x0, 0x2, 0x9, 0x1000, 0x8, 0x5, 0x9, 0x9, 0x5, 0x400, 0x6, 0x0, 0x2, 0x2, 0x5, 0x4, 0x1, 0x9, 0x5, 0x1, 0x2, 0x6654, 0x6, 0x6, 0xffff0001, 0x246, 0x10, 0x7fff, 0x8, 0x4, 0x1ff, 0xf, 0x400, 0x1, 0x7, 0x7, 0xff, 0x7, 0x81, 0x9, 0xe455, 0x3, 0x3, 0x8, 0x2, 0x9, 0x7, 0x80, 0x1, 0xfff, 0x4, 0x5, 0x2, 0x7, 0x0, 0x5a99, 0xfffffff7, 0x3ff, 0x913, 0x3, 0x1b48521d, 0x3, 0x90a, 0x7f, 0xe1fc, 0x1, 0xc27, 0x38525fca, 0x3400, 0xfffff000, 0x2, 0x3, 0x4, 0x6f, 0x3, 0xfffffd0d, 0x3e5, 0x9, 0xe73, 0x2, 0x0, 0x7, 0x5e8c, 0xe456, 0x8, 0x6e61, 0x6, 0x0, 0x3, 0x0, 0x3, 0x8000, 0x5b09, 0x10001, 0x1000, 0x0, 0xef, 0x6, 0xe19, 0x8c3, 0xff, 0x9, 0x7, 0x7, 0x3, 0xff, 0xbc, 0xfffffffc, 0x8, 0x4, 0xa, 0x2, 0xc55, 0x0, 0x4a, 0x9, 0x0, 0xd, 0x7ee5, 0x80, 0x400, 0xe, 0xba4, 0x7f, 0x10, 0x5, 0x2, 0x0, 0x497, 0xbb, 0x1, 0x2, 0xfd, 0x8, 0x3, 0x7f48, 0x6, 0x5, 0x2, 0xdfbf, 0xff, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1000, 0x1, 0x5, 0x4, 0xac, 0x3fff8000, 0x6, 0xffffffff, 0x2, 0xe8c3, 0x1, 0x3, 0x5, 0x80000000, 0x2, 0x100, 0x80000001, 0xad, 0x1, 0x7, 0x7, 0x97bd, 0x3, 0x8f4, 0xfffffff8, 0x3f6, 0x1, 0xffffff70, 0x8, 0xfff, 0xa20, 0x8, 0x8, 0x5, 0x1ff, 0xd, 0x9, 0x81, 0x0, 0x200, 0x0, 0x8, 0x1, 0x1, 0x4, 0xfffffff7, 0x70, 0x2, 0x8, 0xf, 0x4, 0x8, 0x2, 0x4, 0x2, 0x5, 0x8, 0xc40, 0x7, 0x4, 0x4, 0x3, 0x1ff, 0x9, 0x101, 0xfffffff1, 0x1, 0xc0000000, 0x7455, 0x9, 0x8, 0x80000001, 0x8000, 0x2, 0x101, 0x7, 0x200, 0x7, 0x6, 0x3, 0x1000, 0xfffffff6, 0x4, 0x5, 0x0, 0x8001, 0x400000, 0x3, 0x7fffffff, 0x10001, 0x0, 0x6, 0x8, 0x8, 0x3, 0xdbd6, 0x0, 0x2, 0x8, 0x6, 0xfffffff6, 0x1, 0x6, 0x5, 0x3, 0x0, 0x6, 0xc, 0xfffffff8, 0x7, 0xd, 0x9, 0x80000000, 0x7, 0x8, 0x81, 0x3, 0x1, 0x80000001, 0xe8f, 0x456e, 0x1, 0xffffffff, 0x9, 0xfffffffd, 0x8, 0x6, 0x8d0f, 0x401, 0x4, 0x10001, 0x9, 0x3, 0x5, 0x8, 0xfffffffc, 0xd, 0x5, 0x1, 0x6998, 0xb7, 0xe, 0x7fc00, 0x5, 0x3f33, 0x6, 0x1ff, 0x22, 0x6, 0x5, 0xffff, 0x9, 0x5, 0x1, 0xf, 0x3, 0x8a4, 0x2, 0x2, 0xe4, 0x4, 0x8, 0x7, 0xad, 0x7, 0x5, 0x1680000, 0x7, 0x9, 0xac6c, 0x1, 0x7ff, 0x2, 0x8, 0xca1d, 0xe4, 0x1, 0xddd6, 0x101, 0x3, 0x4, 0x1ff, 0x72ee1952, 0x3, 0x6, 0x9f, 0x9, 0x6, 0xfffffffc, 0x10000, 0x7fff, 0xffffffff, 0x9, 0x80, 0x1, 0xd, 0x2, 0xf9f, 0x9df9, 0x6, 0xfff, 0x9, 0x3, 0x0, 0x5, 0x401, 0x6864, 0xfffffffc, 0x8000, 0x10001, 0x6, 0x4, 0x3, 0xfffffff9, 0x7, 0xca62, 0x480, 0x1, 0x1, 0xc, 0x5, 0x9e4, 0x8, 0x7, 0xd11, 0x3, 0x2, 0x9, 0x4, 0x9, 0x7, 0x15, 0x0, 0xfffffff9, 0x5, 0x7, 0x6, 0x2, 0xfffffb2c, 0x0, 0x2, 0xb1, 0x6292, 0x1, 0x10000, 0xcabc, 0xfff, 0x80000000, 0xfffffff7, 0x7fff, 0x2, 0x8, 0x8, 0x26, 0x6]}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x0, 0xb}}, @TCA_TCINDEX_ACT={0x1a0, 0x7, [@m_tunnel_key={0xbc, 0x4, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x81, 0x6, "8a4fdabddcb827a82bc7b7ad1dc464c0dea86d30c554ac2d5e388980979b4981d819ad05775471d103d0597af15486ccf17fe770bfb24ae1d05e948de4a06be55051d443894684509f7ed709e61b743d0175435bf703ae31cf26f267cf3064c7ca804bff42c9c49ce0168a87d710872b45f4b8c1e54e37a4a72801a473"}, {0xc}, {0xc, 0x8, {0x2, 0x666527f77a244bbd}}}}, @m_vlan={0xe0, 0x1d, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x824}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xebc}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x4, 0x5, 0x8, 0x499}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4a6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1e7}]}, {0x6d, 0x6, "8ac8d4708f7e5b2ce44309d80988897202173b6661838378d542de78ec543e30f4c566b76b0ec6f48ef155c6ceb2649809ae45b637217d3ff6f3f51d768995b79639c096f90fc9ba067d0daf892127352aefe77633a36d5b8499be351d8bd0cc750252bdf67530cb41"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x169a}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xd8b3}]}}]}, 0x1504}, 0x1, 0x0, 0x0, 0x4088800}, 0x4044101) 1.103103681s ago: executing program 5 (id=5155): creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) (async) sendmsg$nl_route(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141842, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x3a5a42, 0x10b) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x3a5a42, 0x10b) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) connect$unix(r2, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0xa, 0x800000000004}, &(0x7f0000bbdffc)) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x88) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 1.006018687s ago: executing program 5 (id=5156): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x480, 0x1, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000000}, 0xf3ffffffffff) 965.883858ms ago: executing program 5 (id=5157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a64", 0x16, 0xebec93e830f96115}) io_uring_enter(0xffffffffffffffff, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @mcast1, 0xa}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)='v', 0x1}], 0x1) 301.014211ms ago: executing program 4 (id=5158): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x3) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10008) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x88200) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 235.082801ms ago: executing program 2 (id=5159): socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r1, 0x0, 0x20040080) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote, @null, 0x1, @null}, &(0x7f0000000080)=0x1c, 0x80000) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8, @bcast, @rose={'rose', 0x0}, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_setup(0x1b9c, &(0x7f0000000240)={0x0, 0x54f4, 0x0, 0x3, 0x2bd}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000d70400000400000000950000f5ffffff00"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000200)=0x2, 0x4) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000000c0)={0xc, r5}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x4) 0s ago: executing program 5 (id=5160): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000040), 0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) copy_file_range(r0, &(0x7f0000000080)=0x2, r0, &(0x7f00000000c0)=0x4908, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x8001) r6 = getpgid(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r6}) sendmmsg$unix(r4, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x0, '\x00', @p_u32=0x0}}) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="28bba70d000000027f", 0x9}, {&(0x7f0000000340)='\f\t:', 0x3}], 0x2, 0x8, 0x96) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): ] usb 2-1: config 0 descriptor?? [ 1163.906304][T22703] syzkaller0: entered promiscuous mode [ 1163.928772][T22703] syzkaller0: entered allmulticast mode [ 1164.541659][T17550] usb 2-1: USB disconnect, device number 72 [ 1164.633849][T22713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1164.869212][T22716] netlink: 'syz.0.4739': attribute type 6 has an invalid length. [ 1165.095196][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 1165.095230][ T30] audit: type=1400 audit(22545548.953:3303): avc: denied { append } for pid=22712 comm="syz.1.4740" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1165.476263][ T30] audit: type=1400 audit(22545549.003:3304): avc: denied { read } for pid=22712 comm="syz.1.4740" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1165.498842][ C0] vkms_vblank_simulate: vblank timer overrun [ 1165.505446][ T30] audit: type=1400 audit(22545549.013:3305): avc: denied { open } for pid=22712 comm="syz.1.4740" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1165.529745][ T30] audit: type=1400 audit(22545549.013:3306): avc: denied { ioctl } for pid=22712 comm="syz.1.4740" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1165.580863][ T30] audit: type=1400 audit(22545549.313:3307): avc: denied { write } for pid=22718 comm="syz.4.4741" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1165.708517][ T30] audit: type=1400 audit(22545549.583:3308): avc: denied { bind } for pid=22725 comm="syz.0.4743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1165.741821][T22726] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4743'. [ 1165.759005][T22726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.792359][ T30] audit: type=1400 audit(22545549.613:3309): avc: denied { ioctl } for pid=22725 comm="syz.0.4743" path="socket:[87776]" dev="sockfs" ino=87776 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1165.817103][ C0] vkms_vblank_simulate: vblank timer overrun [ 1165.830333][T22730] qrtr: Invalid version 255 [ 1165.891453][ T30] audit: type=1400 audit(22545549.703:3310): avc: denied { setopt } for pid=22725 comm="syz.0.4743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1165.964330][ T30] audit: type=1400 audit(22545549.833:3311): avc: denied { create } for pid=22733 comm="syz.4.4745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1166.334056][ T30] audit: type=1400 audit(22545549.913:3312): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.74 dest=43590 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1169.140861][T22792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1170.178998][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 1170.179010][ T30] audit: type=1400 audit(23069842.055:3421): avc: denied { ioctl } for pid=22797 comm="syz.3.4760" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=87926 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1170.990139][ T30] audit: type=1400 audit(23069842.865:3422): avc: denied { read } for pid=22809 comm="syz.4.4763" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1171.012671][ C0] vkms_vblank_simulate: vblank timer overrun [ 1171.265177][ T30] audit: type=1400 audit(23069842.885:3423): avc: denied { open } for pid=22809 comm="syz.4.4763" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1171.293124][ T30] audit: type=1400 audit(23069842.885:3424): avc: denied { ioctl } for pid=22809 comm="syz.4.4763" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1171.317564][ C0] vkms_vblank_simulate: vblank timer overrun [ 1171.372904][T22813] syzkaller1: entered promiscuous mode [ 1171.378420][T22813] syzkaller1: entered allmulticast mode [ 1171.566620][ T30] audit: type=1400 audit(23069843.245:3425): avc: denied { ioctl } for pid=22811 comm="syz.2.4764" path="socket:[87951]" dev="sockfs" ino=87951 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1171.666898][ T30] audit: type=1400 audit(23069843.535:3426): avc: denied { create } for pid=22816 comm="syz.3.4765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1171.699391][T22818] loop6: detected capacity change from 0 to 2560 [ 1171.706423][T22818] buffer_io_error: 5 callbacks suppressed [ 1171.706436][T22818] Buffer I/O error on dev loop6, logical block 0, async page read [ 1171.720310][T22818] Buffer I/O error on dev loop6, logical block 0, async page read [ 1171.728184][T22818] Buffer I/O error on dev loop6, logical block 0, async page read [ 1171.736026][T22818] Buffer I/O error on dev loop6, logical block 0, async page read [ 1171.743989][T22818] Buffer I/O error on dev loop6, logical block 0, async page read [ 1171.751855][T22818] Buffer I/O error on dev loop6, logical block 0, async page read [ 1171.759819][T22818] Buffer I/O error on dev loop6, logical block 0, async page read [ 1171.767662][T22818] Buffer I/O error on dev loop6, logical block 0, async page read [ 1171.775494][T22818] ldm_validate_partition_table(): Disk read failed. [ 1171.782278][T22818] Buffer I/O error on dev loop6, logical block 0, async page read [ 1171.790150][T22818] Buffer I/O error on dev loop6, logical block 0, async page read [ 1171.798067][T22818] Dev loop6: unable to read RDB block 0 [ 1171.804146][T22818] loop6: unable to read partition table [ 1171.810013][T22818] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1171.868656][ T30] audit: type=1400 audit(23069843.565:3427): avc: denied { read write } for pid=22816 comm="syz.3.4765" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1171.900879][ T30] audit: type=1400 audit(23069843.565:3428): avc: denied { open } for pid=22816 comm="syz.3.4765" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1172.278524][ T30] audit: type=1400 audit(23069843.575:3429): avc: denied { append } for pid=22816 comm="syz.3.4765" name="loop6" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1172.302108][ C0] vkms_vblank_simulate: vblank timer overrun [ 1172.473740][T22830] o2cb: This node has not been configured. [ 1172.479804][T22830] o2cb: Cluster check failed. Fix errors before retrying. [ 1172.487166][T22830] (syz.4.4769,22830,0):user_dlm_register:674 ERROR: status = -22 [ 1172.495073][T22830] (syz.4.4769,22830,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 1172.694771][ T30] audit: type=1400 audit(23069843.905:3430): avc: denied { create } for pid=22823 comm="syz.2.4767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1172.714071][ C0] vkms_vblank_simulate: vblank timer overrun [ 1172.744968][T22827] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1172.910663][T22840] netlink: 'syz.0.4774': attribute type 1 has an invalid length. [ 1172.998633][T16918] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1173.200732][T22846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22846 comm=syz.1.4775 [ 1173.222520][T16918] usb 3-1: Using ep0 maxpacket: 16 [ 1173.400214][T16918] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1173.400242][T16918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.400261][T16918] usb 3-1: Product: syz [ 1173.400275][T16918] usb 3-1: Manufacturer: syz [ 1173.400290][T16918] usb 3-1: SerialNumber: syz [ 1173.402858][T16918] usb 3-1: config 0 descriptor?? [ 1173.654163][T22853] FAULT_INJECTION: forcing a failure. [ 1173.654163][T22853] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.654191][T22853] CPU: 1 UID: 0 PID: 22853 Comm: syz.1.4777 Not tainted syzkaller #0 PREEMPT(full) [ 1173.654209][T22853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1173.654218][T22853] Call Trace: [ 1173.654221][T22853] [ 1173.654226][T22853] dump_stack_lvl+0x16c/0x1f0 [ 1173.654242][T22853] should_fail_ex+0x512/0x640 [ 1173.654256][T22853] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1173.654273][T22853] should_failslab+0xc2/0x120 [ 1173.654286][T22853] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1173.654309][T22853] ? __alloc_skb+0x2b2/0x380 [ 1173.654327][T22853] ? avc_has_perm+0x144/0x1f0 [ 1173.654351][T22853] __alloc_skb+0x2b2/0x380 [ 1173.654366][T22853] ? __pfx___alloc_skb+0x10/0x10 [ 1173.654376][T22853] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1173.654388][T22853] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1173.654403][T22853] netlink_alloc_large_skb+0x69/0x130 [ 1173.654418][T22853] netlink_sendmsg+0x6a1/0xdd0 [ 1173.654440][T22853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1173.654469][T22853] ____sys_sendmsg+0xa98/0xc70 [ 1173.654493][T22853] ? copy_msghdr_from_user+0x10a/0x160 [ 1173.654510][T22853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1173.654531][T22853] ___sys_sendmsg+0x134/0x1d0 [ 1173.654544][T22853] ? __pfx____sys_sendmsg+0x10/0x10 [ 1173.654577][T22853] __sys_sendmsg+0x16d/0x220 [ 1173.654597][T22853] ? __pfx___sys_sendmsg+0x10/0x10 [ 1173.654636][T22853] do_syscall_64+0xcd/0x4e0 [ 1173.654658][T22853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.654674][T22853] RIP: 0033:0x7f5896f8eec9 [ 1173.654692][T22853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.654708][T22853] RSP: 002b:00007f5897e11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1173.654724][T22853] RAX: ffffffffffffffda RBX: 00007f58971e5fa0 RCX: 00007f5896f8eec9 [ 1173.654735][T22853] RDX: 0000000020000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1173.654745][T22853] RBP: 00007f5897e11090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.654754][T22853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.654763][T22853] R13: 00007f58971e6038 R14: 00007f58971e5fa0 R15: 00007ffe938e7f28 [ 1173.654786][T22853] [ 1173.882274][T16918] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1174.005038][T16918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1174.022618][T16918] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1174.023239][T16918] usb 3-1: media controller created [ 1174.094945][T22827] dtv5100: wlen = 0, aborting. [ 1174.137866][T16918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1174.298033][ C0] vkms_vblank_simulate: vblank timer overrun [ 1174.468981][T16918] zl10353_read_register: readreg error (reg=127, ret==0) [ 1174.469028][T16918] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1174.469040][T16918] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1174.484147][T16918] usb 3-1: USB disconnect, device number 61 [ 1174.557698][T16918] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1174.671812][T22863] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4781'. [ 1174.975779][T22863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4781'. [ 1175.421765][T16918] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1175.474708][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1175.474725][ T30] audit: type=1400 audit(23069847.345:3466): avc: denied { create } for pid=22874 comm="syz.0.4784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1175.580875][ T30] audit: type=1400 audit(23069847.375:3467): avc: denied { write } for pid=22874 comm="syz.0.4784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1175.928921][T17550] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1176.069508][T16918] usb 2-1: Using ep0 maxpacket: 8 [ 1176.079420][T22878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1176.095005][T16918] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1176.105578][T17550] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1176.115877][T16918] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1176.139258][T17550] usb 3-1: not running at top speed; connect to a high speed hub [ 1176.149122][T16918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1176.152094][T17550] usb 3-1: config 8 has an invalid interface number: 11 but max is 0 [ 1176.170866][T16918] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1176.175395][T17550] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.457716][T16918] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1176.522610][T17550] usb 3-1: config 8 has no interface number 0 [ 1176.534431][T17550] usb 3-1: config 8 interface 11 has no altsetting 0 [ 1176.534633][T16918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1176.585623][T17550] usb 3-1: New USB device found, idVendor=08e9, idProduct=bdb3, bcdDevice=7c.ff [ 1176.597540][T17550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.605848][T16918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1176.610617][T17550] usb 3-1: Product: syz [ 1176.625371][T17550] usb 3-1: Manufacturer: syz [ 1176.637432][ T30] audit: type=1400 audit(23069848.505:3468): avc: denied { write } for pid=22879 comm="syz.0.4786" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1176.670361][T17550] usb 3-1: SerialNumber: syz [ 1176.675206][T16918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1176.733331][T16918] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1176.744878][T16918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.753210][T16918] usb 2-1: Product: syz [ 1176.773159][T16918] usb 2-1: Manufacturer: syz [ 1176.778229][T16918] usb 2-1: SerialNumber: syz [ 1176.788594][T16918] usb 2-1: config 0 descriptor?? [ 1176.796725][T22869] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1176.807805][T16918] hub 2-1:0.0: bad descriptor, ignoring hub [ 1176.814181][T16918] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1176.833651][T16918] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input71 [ 1176.853182][ T30] audit: type=1400 audit(23069848.725:3469): avc: denied { read } for pid=5180 comm="acpid" name="mouse1" dev="devtmpfs" ino=3885 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1176.876255][ T30] audit: type=1400 audit(23069848.725:3470): avc: denied { open } for pid=5180 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3885 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1176.923732][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.935627][ C1] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 1176.984395][ T30] audit: type=1400 audit(23069848.725:3471): avc: denied { ioctl } for pid=5180 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3885 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1177.039214][ T30] audit: type=1400 audit(23069848.895:3472): avc: denied { append } for pid=22868 comm="syz.1.4782" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1177.173527][ T30] audit: type=1400 audit(23069849.035:3473): avc: denied { execute } for pid=22886 comm="syz.0.4788" name="file1" dev="tmpfs" ino=1653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1177.496574][ T30] audit: type=1400 audit(23069849.045:3474): avc: denied { execute_no_trans } for pid=22886 comm="syz.0.4788" path="/313/file1" dev="tmpfs" ino=1653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1177.526907][ T30] audit: type=1400 audit(23069849.394:3475): avc: denied { create } for pid=22886 comm="syz.0.4788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1177.546249][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.564339][T17550] cdc_wdm 3-1:8.11: probe with driver cdc_wdm failed with error -22 [ 1178.643905][T17550] usb 3-1: USB disconnect, device number 62 [ 1178.765831][ T24] usb 2-1: USB disconnect, device number 73 [ 1180.655943][T22926] svc: failed to register nfsdv3 RPC service (errno 111). [ 1180.674500][T22926] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1181.051289][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1181.051321][ T30] audit: type=1400 audit(23069852.864:3487): avc: denied { name_bind } for pid=22933 comm="syz.4.4801" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1181.387845][ T30] audit: type=1400 audit(23069852.864:3488): avc: denied { node_bind } for pid=22933 comm="syz.4.4801" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1181.413128][ T30] audit: type=1400 audit(23069853.034:3489): avc: denied { mount } for pid=22938 comm="syz.2.4802" name="/" dev="mqueue" ino=47657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1181.617711][ T30] audit: type=1400 audit(23069853.484:3490): avc: denied { ioctl } for pid=22938 comm="syz.2.4802" path="socket:[89436]" dev="sockfs" ino=89436 ioctlcmd=0x1277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1182.278451][T22955] FAULT_INJECTION: forcing a failure. [ 1182.278451][T22955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.299953][ T30] audit: type=1400 audit(23069854.124:3491): avc: denied { recv } for pid=15082 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.74 dest=43590 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1182.342715][T22955] CPU: 0 UID: 0 PID: 22955 Comm: syz.3.4806 Not tainted syzkaller #0 PREEMPT(full) [ 1182.342740][T22955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1182.342750][T22955] Call Trace: [ 1182.342756][T22955] [ 1182.342762][T22955] dump_stack_lvl+0x16c/0x1f0 [ 1182.342790][T22955] should_fail_ex+0x512/0x640 [ 1182.342820][T22955] _copy_from_iter+0x29f/0x1720 [ 1182.342847][T22955] ? __pfx__copy_from_iter+0x10/0x10 [ 1182.342868][T22955] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1182.342903][T22955] copy_page_from_iter+0xde/0x180 [ 1182.342928][T22955] tun_build_skb.constprop.0+0x2e8/0x1500 [ 1182.342963][T22955] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1182.342985][T22955] ? unwind_get_return_address+0x59/0xa0 [ 1182.343011][T22955] ? find_held_lock+0x2b/0x80 [ 1182.343040][T22955] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1182.343062][T22955] tun_get_user+0x14a5/0x3cd0 [ 1182.343084][T22955] ? __pfx_tun_get_user+0x10/0x10 [ 1182.343101][T22955] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1182.343119][T22955] ? find_held_lock+0x2b/0x80 [ 1182.343133][T22955] ? tun_get+0x191/0x370 [ 1182.343150][T22955] tun_chr_write_iter+0xdc/0x210 [ 1182.343166][T22955] vfs_write+0x7d0/0x11d0 [ 1182.343182][T22955] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1182.343199][T22955] ? __pfx_vfs_write+0x10/0x10 [ 1182.343213][T22955] ? find_held_lock+0x2b/0x80 [ 1182.343234][T22955] ksys_write+0x12a/0x250 [ 1182.343249][T22955] ? __pfx_ksys_write+0x10/0x10 [ 1182.343267][T22955] do_syscall_64+0xcd/0x4e0 [ 1182.343282][T22955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.343292][T22955] RIP: 0033:0x7ff97a58d97f [ 1182.343301][T22955] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1182.343312][T22955] RSP: 002b:00007ff97b359000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1182.343322][T22955] RAX: ffffffffffffffda RBX: 00007ff97a7e5fa0 RCX: 00007ff97a58d97f [ 1182.343328][T22955] RDX: 000000000000005e RSI: 0000200000000340 RDI: 00000000000000c8 [ 1182.343335][T22955] RBP: 00007ff97b359090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.343341][T22955] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 1182.343347][T22955] R13: 00007ff97a7e6038 R14: 00007ff97a7e5fa0 R15: 00007ffd01f90848 [ 1182.343360][T22955] [ 1182.581431][T22957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1182.589672][ T30] audit: type=1400 audit(23069854.134:3492): avc: denied { read write } for pid=15082 comm="syz-executor" name="loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1182.590692][T22957] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1182.639712][ T30] audit: type=1400 audit(23069854.134:3493): avc: denied { open } for pid=15082 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1182.708737][ T30] audit: type=1400 audit(23069854.134:3494): avc: denied { ioctl } for pid=15082 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1182.755279][ T30] audit: type=1400 audit(23069854.134:3495): avc: denied { name_bind } for pid=22954 comm="syz.3.4806" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1182.779391][ T30] audit: type=1400 audit(23069854.134:3496): avc: denied { node_bind } for pid=22954 comm="syz.3.4806" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1183.471325][T22966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1183.552193][T22963] syzkaller1: entered promiscuous mode [ 1183.557943][T22963] syzkaller1: entered allmulticast mode [ 1183.828631][ T5146] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 1185.631752][ T5953] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1185.893579][ T5953] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 1185.908700][ T5953] usb 4-1: config 0 has no interface number 0 [ 1185.959867][ T5953] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1185.999464][ T5953] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1186.023806][ T5953] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1186.037533][ T5953] usb 4-1: Manufacturer: syz [ 1186.053111][ T5953] usb 4-1: config 0 descriptor?? [ 1186.066386][ T5953] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input72 [ 1186.150303][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 1186.150322][ T30] audit: type=1400 audit(23069857.953:3583): avc: denied { execmem } for pid=23010 comm="syz.1.4825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1186.187194][T23013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4824'. [ 1186.675935][ T30] audit: type=1400 audit(23069858.153:3584): avc: denied { create } for pid=23010 comm="syz.1.4825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1186.731891][ T30] audit: type=1400 audit(23069858.163:3585): avc: denied { setopt } for pid=23010 comm="syz.1.4825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1186.764997][ T30] audit: type=1400 audit(23069858.163:3586): avc: denied { create } for pid=23010 comm="syz.1.4825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1186.786119][ T30] audit: type=1400 audit(23069858.163:3587): avc: denied { map_create } for pid=23010 comm="syz.1.4825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1186.806508][ T30] audit: type=1400 audit(23069858.173:3588): avc: denied { map_read map_write } for pid=23010 comm="syz.1.4825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1186.877346][T23018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1187.139370][ T30] audit: type=1400 audit(23069858.183:3589): avc: denied { create } for pid=23010 comm="syz.1.4825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1187.159815][ T30] audit: type=1400 audit(23069858.183:3590): avc: denied { write } for pid=23010 comm="syz.1.4825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1187.249310][ T30] audit: type=1400 audit(23069858.183:3591): avc: denied { write } for pid=23010 comm="syz.1.4825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1187.276018][ T30] audit: type=1400 audit(23069858.183:3592): avc: denied { create } for pid=23010 comm="syz.1.4825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1187.306583][T17550] usb 4-1: USB disconnect, device number 60 [ 1187.306633][ C1] usbtouchscreen 4-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1188.548246][T23043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4834'. [ 1188.905542][T17550] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1189.385686][T17550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.388249][T23065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23065 comm=syz.2.4839 [ 1189.411873][ T5826] Bluetooth: hci0: command 0x1407 tx timeout [ 1189.413983][T17550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.430585][T17550] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1189.440226][T17550] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1189.462878][T17550] usb 4-1: Manufacturer: syz [ 1189.475740][T17550] usb 4-1: config 0 descriptor?? [ 1189.704676][T23068] syz.1.4840 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1189.782299][T23073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1190.310824][ T5953] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1190.472203][ T5953] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1190.483501][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.495180][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1190.523770][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1190.525521][T23045] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4833'. [ 1190.541363][ T5953] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1190.595465][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.648441][ T5953] usb 2-1: config 0 descriptor?? [ 1191.154534][ T5953] holtek_kbd 0003:04D9:A055.001B: item fetching failed at offset 0/1 [ 1191.169944][ T5953] holtek_kbd 0003:04D9:A055.001B: probe with driver holtek_kbd failed with error -22 [ 1191.211865][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 1191.211885][ T30] audit: type=1326 audit(23069862.463:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23044 comm="syz.3.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ff97a58eec9 code=0x7ffc0000 [ 1191.526879][ T30] audit: type=1400 audit(23069862.933:3785): avc: denied { ioctl } for pid=23083 comm="syz.0.4845" path="socket:[89732]" dev="sockfs" ino=89732 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1191.628102][T17550] uclogic 0003:256C:006D.001A: failed retrieving Huion firmware version: -71 [ 1191.637436][T17550] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 1191.645442][T17550] uclogic 0003:256C:006D.001A: probe with driver uclogic failed with error -71 [ 1191.662617][T17550] usb 4-1: USB disconnect, device number 61 [ 1191.672613][ T30] audit: type=1400 audit(23069862.963:3786): avc: denied { create } for pid=23083 comm="syz.0.4845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1191.696272][ T30] audit: type=1400 audit(23069862.973:3787): avc: denied { create } for pid=23083 comm="syz.0.4845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1191.718855][ T30] audit: type=1400 audit(23069862.993:3788): avc: denied { view } for pid=23083 comm="syz.0.4845" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1191.753335][ T30] audit: type=1400 audit(23069863.623:3789): avc: denied { map } for pid=23086 comm="syz.3.4846" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=89755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1191.880955][ T30] audit: type=1400 audit(23069863.623:3790): avc: denied { read write } for pid=23086 comm="syz.3.4846" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=89755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1191.944851][ T30] audit: type=1400 audit(23069863.623:3791): avc: denied { create } for pid=23086 comm="syz.3.4846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1191.971509][ T30] audit: type=1400 audit(23069863.623:3792): avc: denied { read } for pid=23086 comm="syz.3.4846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1192.525842][T23095] FAULT_INJECTION: forcing a failure. [ 1192.525842][T23095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1192.539028][ T30] audit: type=1400 audit(23069864.392:3793): avc: denied { read } for pid=23094 comm="syz.2.4848" dev="nsfs" ino=4026533569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1192.545767][T17550] usb 2-1: USB disconnect, device number 74 [ 1192.571290][T23095] CPU: 0 UID: 0 PID: 23095 Comm: syz.2.4848 Not tainted syzkaller #0 PREEMPT(full) [ 1192.571316][T23095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1192.571326][T23095] Call Trace: [ 1192.571332][T23095] [ 1192.571339][T23095] dump_stack_lvl+0x16c/0x1f0 [ 1192.571367][T23095] should_fail_ex+0x512/0x640 [ 1192.571391][T23095] _copy_from_user+0x2e/0xd0 [ 1192.571414][T23095] copy_msghdr_from_user+0x98/0x160 [ 1192.571437][T23095] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1192.571470][T23095] ___sys_sendmsg+0xfe/0x1d0 [ 1192.571493][T23095] ? __pfx____sys_sendmsg+0x10/0x10 [ 1192.571544][T23095] __sys_sendmsg+0x16d/0x220 [ 1192.571565][T23095] ? __pfx___sys_sendmsg+0x10/0x10 [ 1192.571600][T23095] do_syscall_64+0xcd/0x4e0 [ 1192.571625][T23095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.571648][T23095] RIP: 0033:0x7f8383f8eec9 [ 1192.571663][T23095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1192.571680][T23095] RSP: 002b:00007f8384e69038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1192.571696][T23095] RAX: ffffffffffffffda RBX: 00007f83841e5fa0 RCX: 00007f8383f8eec9 [ 1192.571708][T23095] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000007 [ 1192.571718][T23095] RBP: 00007f8384e69090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.571728][T23095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.571738][T23095] R13: 00007f83841e6038 R14: 00007f83841e5fa0 R15: 00007fff04c2b8f8 [ 1192.571762][T23095] [ 1192.999042][T23110] overlayfs: failed to resolve './file0': -2 [ 1193.010305][T23108] FAULT_INJECTION: forcing a failure. [ 1193.010305][T23108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1193.091217][T17201] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 1193.130979][T23116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1193.193749][T23108] CPU: 0 UID: 0 PID: 23108 Comm: syz.2.4852 Not tainted syzkaller #0 PREEMPT(full) [ 1193.193775][T23108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1193.193785][T23108] Call Trace: [ 1193.193790][T23108] [ 1193.193797][T23108] dump_stack_lvl+0x16c/0x1f0 [ 1193.193823][T23108] should_fail_ex+0x512/0x640 [ 1193.193848][T23108] _copy_to_iter+0x463/0x1710 [ 1193.193878][T23108] ? __pfx__copy_to_iter+0x10/0x10 [ 1193.193901][T23108] ? traverse.part.0.constprop.0+0x2c5/0x640 [ 1193.193932][T23108] seq_read_iter+0x719/0x12c0 [ 1193.193957][T23108] ? _kstrtoull+0x145/0x200 [ 1193.193986][T23108] seq_read+0x3a3/0x570 [ 1193.194009][T23108] ? __pfx_seq_read+0x10/0x10 [ 1193.194038][T23108] ? import_ubuf+0x1b6/0x220 [ 1193.194061][T23108] ? avc_policy_seqno+0x9/0x20 [ 1193.194088][T23108] ? __pfx_seq_read+0x10/0x10 [ 1193.194111][T23108] proc_reg_read+0x240/0x330 [ 1193.194134][T23108] ? __pfx_proc_reg_read+0x10/0x10 [ 1193.194154][T23108] vfs_readv+0x5be/0x8b0 [ 1193.194183][T23108] ? __pfx_vfs_readv+0x10/0x10 [ 1193.194206][T23108] ? find_held_lock+0x2b/0x80 [ 1193.194249][T23108] ? __fget_files+0x20e/0x3c0 [ 1193.194279][T23108] ? do_preadv+0x1a6/0x270 [ 1193.194301][T23108] do_preadv+0x1a6/0x270 [ 1193.194324][T23108] ? __pfx_do_preadv+0x10/0x10 [ 1193.194354][T23108] do_syscall_64+0xcd/0x4e0 [ 1193.194378][T23108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.194395][T23108] RIP: 0033:0x7f8383f8eec9 [ 1193.194410][T23108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1193.194426][T23108] RSP: 002b:00007f8384e69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1193.194443][T23108] RAX: ffffffffffffffda RBX: 00007f83841e5fa0 RCX: 00007f8383f8eec9 [ 1193.194453][T23108] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000004 [ 1193.194464][T23108] RBP: 00007f8384e69090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.194473][T23108] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1193.194483][T23108] R13: 00007f83841e6038 R14: 00007f83841e5fa0 R15: 00007fff04c2b8f8 [ 1193.194507][T23108] [ 1193.669083][T17201] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1194.100310][T17201] usb 1-1: config 0 has no interface number 0 [ 1194.134604][T17201] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1194.189873][T17201] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1194.256379][T17201] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1194.299129][T17201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.319715][T17201] usb 1-1: config 0 descriptor?? [ 1194.361616][T23101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1194.397366][T17201] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1196.406181][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1196.406198][ T30] audit: type=1400 audit(24118444.276:3823): avc: denied { read } for pid=23141 comm="syz.4.4863" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1196.455427][ T30] audit: type=1400 audit(24118444.276:3824): avc: denied { open } for pid=23141 comm="syz.4.4863" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1196.636879][ T30] audit: type=1400 audit(24118444.306:3825): avc: denied { firmware_load } for pid=11768 comm="kworker/u8:20" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1196.703356][ T5932] usb 1-1: USB disconnect, device number 73 [ 1196.854765][ T30] audit: type=1400 audit(24118444.726:3826): avc: denied { name_bind } for pid=23155 comm="syz.3.4867" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1196.909695][T23161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4868'. [ 1197.203051][ T30] audit: type=1400 audit(24118444.726:3827): avc: denied { node_bind } for pid=23155 comm="syz.3.4867" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1197.265975][ T30] audit: type=1400 audit(24118444.766:3828): avc: denied { shutdown } for pid=23156 comm="syz.1.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1197.293922][ T30] audit: type=1400 audit(24118444.766:3829): avc: denied { getopt } for pid=23156 comm="syz.1.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1197.318897][ T30] audit: type=1400 audit(24118444.766:3830): avc: denied { connect } for pid=23156 comm="syz.1.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1197.321901][ T5146] Bluetooth: hci0: unexpected event for opcode 0x0c56 [ 1197.338373][ C0] vkms_vblank_simulate: vblank timer overrun [ 1197.353782][ T30] audit: type=1400 audit(24118444.766:3831): avc: denied { name_connect } for pid=23156 comm="syz.1.4868" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1197.376896][ T30] audit: type=1400 audit(24118445.186:3832): avc: denied { write } for pid=23162 comm="syz.1.4869" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1197.885409][T23176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4873'. [ 1197.966601][T23177] fuse: Bad value for 'fd' [ 1198.110153][T23179] erspan1: entered allmulticast mode [ 1198.601855][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout [ 1198.602836][T23153] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1198.871126][T23153] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1199.276551][T23195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=23195 comm=syz.2.4880 [ 1199.684832][T23205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4879'. [ 1200.372393][T23216] batadv_slave_0: entered promiscuous mode [ 1200.654003][T23231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4887'. [ 1200.845005][ T5146] Bluetooth: hci0: command 0x1407 tx timeout [ 1201.089068][T23232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1201.638531][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1201.638547][ T30] audit: type=1400 audit(24118449.352:3856): avc: denied { create } for pid=23215 comm="syz.2.4885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1201.681706][ T30] audit: type=1400 audit(24118449.352:3857): avc: denied { ioctl } for pid=23215 comm="syz.2.4885" path="socket:[90852]" dev="sockfs" ino=90852 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1201.821885][T23256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1201.831583][T23256] batadv_slave_0: entered promiscuous mode [ 1202.206947][ T30] audit: type=1400 audit(24118449.885:3858): avc: denied { read write } for pid=23263 comm="syz.3.4899" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1202.481395][T23272] lo speed is unknown, defaulting to 1000 [ 1202.481648][T23272] lo speed is unknown, defaulting to 1000 [ 1202.489077][T23272] lo speed is unknown, defaulting to 1000 [ 1202.501431][ T30] audit: type=1400 audit(24118449.885:3859): avc: denied { open } for pid=23263 comm="syz.3.4899" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1202.501480][ T30] audit: type=1400 audit(24118449.913:3860): avc: denied { write } for pid=23261 comm="syz.0.4898" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1202.501812][ T30] audit: type=1400 audit(24118449.960:3861): avc: denied { mount } for pid=23263 comm="syz.3.4899" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1202.501948][ T30] audit: type=1400 audit(24118450.138:3862): avc: denied { write } for pid=23263 comm="syz.3.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1202.574194][T23273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4899'. [ 1202.644330][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.438576][ T30] audit: type=1400 audit(24118450.652:3863): avc: denied { ioctl } for pid=23271 comm="syz.4.4901" path="/dev/dri/card1" dev="devtmpfs" ino=627 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1203.438613][ T30] audit: type=1400 audit(24118451.036:3864): avc: denied { create } for pid=23263 comm="syz.3.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1203.440781][T23272] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1203.527006][T23272] lo speed is unknown, defaulting to 1000 [ 1203.537098][T23272] lo speed is unknown, defaulting to 1000 [ 1203.548357][T23272] lo speed is unknown, defaulting to 1000 [ 1203.558711][T23272] lo speed is unknown, defaulting to 1000 [ 1203.571895][T23272] lo speed is unknown, defaulting to 1000 [ 1203.581986][T23272] lo speed is unknown, defaulting to 1000 [ 1204.489336][ T30] audit: type=1400 audit(24118451.588:3865): avc: denied { name_connect } for pid=23264 comm="syz.2.4900" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1204.621443][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.743398][T17201] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1205.912920][T17201] usb 5-1: Using ep0 maxpacket: 16 [ 1205.930024][T17201] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1205.996307][T17201] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1206.086281][T17201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 1206.221079][T17201] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1206.265826][T17201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1206.278244][T17201] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1206.291169][T17201] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1206.321789][T17201] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 1206.331382][T17201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.339475][T17201] usb 5-1: Product: syz [ 1206.348083][T17201] usb 5-1: Manufacturer: syz [ 1206.353086][T17201] usb 5-1: SerialNumber: syz [ 1206.364973][T17201] usb 5-1: config 0 descriptor?? [ 1206.371857][T23284] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1206.381056][T17201] iuu_phoenix 5-1:0.0: iuu_phoenix converter detected [ 1206.395595][T17201] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 1206.543112][T23301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1206.727916][T17201] usb 5-1: USB disconnect, device number 63 [ 1206.737251][T17201] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1206.761867][T17201] iuu_phoenix 5-1:0.0: device disconnected [ 1206.851074][T23307] netfs: Couldn't get user pages (rc=-14) [ 1206.920269][T23305] netlink: 'syz.0.4909': attribute type 4 has an invalid length. [ 1207.109419][ T24] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1207.452290][ T24] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 1208.105177][T23317] FAULT_INJECTION: forcing a failure. [ 1208.105177][T23317] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.155844][ T24] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1208.164276][ T24] usb 2-1: config 0 has no interface number 0 [ 1208.172576][ T24] usb 2-1: too many endpoints for config 0 interface 2 altsetting 0: 130, using maximum allowed: 30 [ 1208.183955][ T24] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.193882][ T24] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 1208.208372][ T24] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1208.230090][T23317] CPU: 1 UID: 0 PID: 23317 Comm: syz.3.4913 Not tainted syzkaller #0 PREEMPT(full) [ 1208.230117][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1208.230128][T23317] Call Trace: [ 1208.230134][T23317] [ 1208.230141][T23317] dump_stack_lvl+0x16c/0x1f0 [ 1208.230171][T23317] should_fail_ex+0x512/0x640 [ 1208.230192][T23317] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1208.230229][T23317] should_failslab+0xc2/0x120 [ 1208.230246][T23317] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1208.230272][T23317] ? __alloc_skb+0x2b2/0x380 [ 1208.230296][T23317] __alloc_skb+0x2b2/0x380 [ 1208.230316][T23317] ? __pfx___alloc_skb+0x10/0x10 [ 1208.230338][T23317] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1208.230367][T23317] netlink_alloc_large_skb+0x69/0x130 [ 1208.230392][T23317] netlink_sendmsg+0x6a1/0xdd0 [ 1208.230419][T23317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1208.230452][T23317] ____sys_sendmsg+0xa98/0xc70 [ 1208.230479][T23317] ? lockdep_hardirqs_on+0x7c/0x110 [ 1208.230500][T23317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1208.230538][T23317] ___sys_sendmsg+0x134/0x1d0 [ 1208.230562][T23317] ? __pfx____sys_sendmsg+0x10/0x10 [ 1208.230614][T23317] __sys_sendmsg+0x16d/0x220 [ 1208.230636][T23317] ? __pfx___sys_sendmsg+0x10/0x10 [ 1208.230674][T23317] do_syscall_64+0xcd/0x4e0 [ 1208.230699][T23317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.230718][T23317] RIP: 0033:0x7ff97a58eec9 [ 1208.230732][T23317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1208.230748][T23317] RSP: 002b:00007ff97b359038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1208.230765][T23317] RAX: ffffffffffffffda RBX: 00007ff97a7e5fa0 RCX: 00007ff97a58eec9 [ 1208.230776][T23317] RDX: 0000000000001000 RSI: 0000200000000b80 RDI: 0000000000000005 [ 1208.230786][T23317] RBP: 00007ff97b359090 R08: 0000000000000000 R09: 0000000000000000 [ 1208.230797][T23317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1208.230807][T23317] R13: 00007ff97a7e6038 R14: 00007ff97a7e5fa0 R15: 00007ffd01f90848 [ 1208.230830][T23317] [ 1208.438024][ C1] vkms_vblank_simulate: vblank timer overrun [ 1208.704950][ T24] usb 2-1: config 0 has no interface number 0 [ 1208.711292][ T24] usb 2-1: too many endpoints for config 0 interface 2 altsetting 0: 130, using maximum allowed: 30 [ 1208.724056][ T24] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.733930][ T24] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 1209.196618][ T24] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1209.289998][ T24] usb 2-1: config 0 has no interface number 0 [ 1209.314247][ T24] usb 2-1: too many endpoints for config 0 interface 2 altsetting 0: 130, using maximum allowed: 30 [ 1209.440029][ T24] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.463525][T23331] netlink: 'syz.2.4918': attribute type 10 has an invalid length. [ 1209.464703][ T24] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 1209.465599][ T24] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1209.465620][ T24] usb 2-1: config 0 has no interface number 0 [ 1209.465643][ T24] usb 2-1: too many endpoints for config 0 interface 2 altsetting 0: 130, using maximum allowed: 30 [ 1209.465675][ T24] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.465696][ T24] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 1209.466982][ T24] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1209.467002][ T24] usb 2-1: config 0 has no interface number 0 [ 1209.467054][ T24] usb 2-1: too many endpoints for config 0 interface 2 altsetting 0: 130, using maximum allowed: 30 [ 1209.467124][ T24] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.467144][ T24] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 1209.468078][ T24] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1209.468118][ T24] usb 2-1: config 0 has no interface number 0 [ 1209.468141][ T24] usb 2-1: too many endpoints for config 0 interface 2 altsetting 0: 130, using maximum allowed: 30 [ 1209.468174][ T24] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.468193][ T24] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 1209.471617][ T24] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1209.728534][T23332] gfs2: not a GFS2 filesystem [ 1210.059701][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1210.059720][ T30] audit: type=1400 audit(24642744.728:3875): avc: denied { bind } for pid=23330 comm="syz.2.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1210.087804][T23331] team0: Port device geneve1 added [ 1210.544441][ T24] usb 2-1: config 0 has no interface number 0 [ 1210.550790][ T24] usb 2-1: too many endpoints for config 0 interface 2 altsetting 0: 130, using maximum allowed: 30 [ 1210.561863][ T24] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1210.571816][ T24] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 1210.764677][ T30] audit: type=1400 audit(24642745.355:3876): avc: denied { write } for pid=23330 comm="syz.2.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1210.792905][ T30] audit: type=1400 audit(24642745.664:3877): avc: denied { bind } for pid=23330 comm="syz.2.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1210.871199][ T30] audit: type=1400 audit(24642745.664:3878): avc: denied { node_bind } for pid=23330 comm="syz.2.4918" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1210.873276][ T24] usb 2-1: unable to read config index 7 descriptor/start: -71 [ 1210.935261][ T30] audit: type=1400 audit(24642746.028:3879): avc: denied { connect } for pid=23339 comm="syz.4.4920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1210.965163][ T24] usb 2-1: can't read configurations, error -71 [ 1211.002026][ T30] audit: type=1400 audit(24642746.084:3880): avc: denied { ioctl } for pid=23339 comm="syz.4.4920" path="socket:[91606]" dev="sockfs" ino=91606 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1211.033252][ T30] audit: type=1400 audit(24642746.084:3881): avc: denied { create } for pid=23339 comm="syz.4.4920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1211.125455][T23353] netlink: 'syz.2.4924': attribute type 5 has an invalid length. [ 1211.257301][ T30] audit: type=1400 audit(24642746.334:3882): avc: denied { create } for pid=23349 comm="syz.3.4923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1211.297204][ T30] audit: type=1400 audit(24642746.334:3883): avc: denied { bind } for pid=23349 comm="syz.3.4923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1211.323683][ T30] audit: type=1400 audit(24642746.334:3884): avc: denied { setopt } for pid=23349 comm="syz.3.4923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1211.672224][T23365] ISOFS: Unable to identify CD-ROM format. [ 1214.964638][T23405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4935'. [ 1215.526271][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 1215.526283][ T30] audit: type=1400 audit(25167038.347:3940): avc: denied { append } for pid=23409 comm="syz.0.4938" name="comedi0" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1215.526314][ T30] audit: type=1400 audit(25167038.347:3941): avc: denied { open } for pid=23409 comm="syz.0.4938" path="/dev/comedi0" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1215.534241][ T30] audit: type=1400 audit(25167038.347:3942): avc: denied { read } for pid=23409 comm="syz.0.4938" name="iommu" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1215.596295][ T30] audit: type=1400 audit(25167038.403:3943): avc: denied { sys_module } for pid=23396 comm="syz.4.4935" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1215.757002][ T30] audit: type=1400 audit(25167038.553:3944): avc: denied { create } for pid=23407 comm="syz.3.4937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1215.796084][ T30] audit: type=1400 audit(25167038.590:3945): avc: denied { write } for pid=23407 comm="syz.3.4937" path="socket:[91783]" dev="sockfs" ino=91783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1216.064997][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.132628][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.477761][ T30] audit: type=1400 audit(25167039.236:3946): avc: denied { mounton } for pid=23414 comm="syz.2.4939" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1216.478266][T23415] 9pnet_fd: p9_fd_create_unix (23415): problem connecting socket: ./cgroup: -111 [ 1216.513381][ T30] audit: type=1400 audit(25167039.264:3947): avc: denied { map_create } for pid=23414 comm="syz.2.4939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1216.514762][ T30] audit: type=1400 audit(25167039.264:3948): avc: denied { create } for pid=23414 comm="syz.2.4939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1216.515237][ T30] audit: type=1400 audit(25167039.264:3949): avc: denied { bind } for pid=23414 comm="syz.2.4939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1217.812369][T23425] syzkaller0: entered promiscuous mode [ 1217.829037][T23425] syzkaller0: entered allmulticast mode [ 1218.122752][T23433] FAULT_INJECTION: forcing a failure. [ 1218.122752][T23433] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.165147][T23433] CPU: 0 UID: 0 PID: 23433 Comm: syz.3.4945 Not tainted syzkaller #0 PREEMPT(full) [ 1218.165174][T23433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1218.165184][T23433] Call Trace: [ 1218.165190][T23433] [ 1218.165197][T23433] dump_stack_lvl+0x16c/0x1f0 [ 1218.165224][T23433] should_fail_ex+0x512/0x640 [ 1218.165245][T23433] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1218.165273][T23433] should_failslab+0xc2/0x120 [ 1218.165289][T23433] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1218.165321][T23433] ? __alloc_skb+0x2b2/0x380 [ 1218.165345][T23433] __alloc_skb+0x2b2/0x380 [ 1218.165363][T23433] ? __pfx___alloc_skb+0x10/0x10 [ 1218.165384][T23433] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1218.165410][T23433] netlink_alloc_large_skb+0x69/0x130 [ 1218.165433][T23433] netlink_sendmsg+0x6a1/0xdd0 [ 1218.165460][T23433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1218.165491][T23433] ____sys_sendmsg+0xa98/0xc70 [ 1218.165516][T23433] ? copy_msghdr_from_user+0x10a/0x160 [ 1218.165537][T23433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1218.165574][T23433] ___sys_sendmsg+0x134/0x1d0 [ 1218.165596][T23433] ? __pfx____sys_sendmsg+0x10/0x10 [ 1218.165645][T23433] __sys_sendmsg+0x16d/0x220 [ 1218.165666][T23433] ? __pfx___sys_sendmsg+0x10/0x10 [ 1218.165703][T23433] do_syscall_64+0xcd/0x4e0 [ 1218.165726][T23433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.165744][T23433] RIP: 0033:0x7ff97a58eec9 [ 1218.165759][T23433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1218.165776][T23433] RSP: 002b:00007ff97b359038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1218.165793][T23433] RAX: ffffffffffffffda RBX: 00007ff97a7e5fa0 RCX: 00007ff97a58eec9 [ 1218.165804][T23433] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000005 [ 1218.165815][T23433] RBP: 00007ff97b359090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.165825][T23433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.165835][T23433] R13: 00007ff97a7e6038 R14: 00007ff97a7e5fa0 R15: 00007ffd01f90848 [ 1218.165859][T23433] [ 1219.065743][T23449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4950'. [ 1221.179801][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1221.179820][ T30] audit: type=1400 audit(25167043.117:3991): avc: denied { bind } for pid=23458 comm="syz.2.4953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1221.281818][ T30] audit: type=1400 audit(25167043.117:3992): avc: denied { name_bind } for pid=23458 comm="syz.2.4953" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1221.340522][ T30] audit: type=1400 audit(25167043.117:3993): avc: denied { node_bind } for pid=23458 comm="syz.2.4953" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1221.362238][ T30] audit: type=1400 audit(25167043.126:3994): avc: denied { write } for pid=23458 comm="syz.2.4953" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1221.391442][ T30] audit: type=1400 audit(25167043.126:3995): avc: denied { connect } for pid=23458 comm="syz.2.4953" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1221.425053][ T30] audit: type=1400 audit(25167043.126:3996): avc: denied { name_connect } for pid=23458 comm="syz.2.4953" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1221.458937][ T30] audit: type=1400 audit(25167043.753:3997): avc: denied { create } for pid=23469 comm="syz.4.4956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1221.496905][ T30] audit: type=1400 audit(25167043.753:3998): avc: denied { create } for pid=23469 comm="syz.4.4956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1221.538951][ T30] audit: type=1400 audit(25167043.762:3999): avc: denied { write } for pid=23469 comm="syz.4.4956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1221.618347][ T30] audit: type=1400 audit(25167044.034:4000): avc: denied { read write } for pid=15599 comm="syz-executor" name="loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1221.669417][T23479] FAULT_INJECTION: forcing a failure. [ 1221.669417][T23479] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.683491][T23479] CPU: 0 UID: 0 PID: 23479 Comm: syz.4.4959 Not tainted syzkaller #0 PREEMPT(full) [ 1221.683516][T23479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1221.683526][T23479] Call Trace: [ 1221.683532][T23479] [ 1221.683539][T23479] dump_stack_lvl+0x16c/0x1f0 [ 1221.683566][T23479] should_fail_ex+0x512/0x640 [ 1221.683587][T23479] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1221.683614][T23479] should_failslab+0xc2/0x120 [ 1221.683631][T23479] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1221.683655][T23479] ? __alloc_skb+0x2b2/0x380 [ 1221.683679][T23479] __alloc_skb+0x2b2/0x380 [ 1221.683698][T23479] ? __pfx___alloc_skb+0x10/0x10 [ 1221.683719][T23479] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1221.683747][T23479] netlink_alloc_large_skb+0x69/0x130 [ 1221.683771][T23479] netlink_sendmsg+0x6a1/0xdd0 [ 1221.683797][T23479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1221.683830][T23479] ____sys_sendmsg+0xa98/0xc70 [ 1221.683856][T23479] ? copy_msghdr_from_user+0x10a/0x160 [ 1221.683876][T23479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1221.683913][T23479] ___sys_sendmsg+0x134/0x1d0 [ 1221.683935][T23479] ? __pfx____sys_sendmsg+0x10/0x10 [ 1221.683986][T23479] __sys_sendmsg+0x16d/0x220 [ 1221.684006][T23479] ? __pfx___sys_sendmsg+0x10/0x10 [ 1221.684043][T23479] do_syscall_64+0xcd/0x4e0 [ 1221.684067][T23479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.684084][T23479] RIP: 0033:0x7f72c8b8eec9 [ 1221.684099][T23479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1221.684116][T23479] RSP: 002b:00007f72c9986038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1221.684133][T23479] RAX: ffffffffffffffda RBX: 00007f72c8de5fa0 RCX: 00007f72c8b8eec9 [ 1221.684144][T23479] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1221.684154][T23479] RBP: 00007f72c9986090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.684164][T23479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.684174][T23479] R13: 00007f72c8de6038 R14: 00007f72c8de5fa0 R15: 00007ffef49fbe58 [ 1221.684198][T23479] [ 1222.858452][ T43] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1223.122967][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 1223.384193][ T43] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1223.424391][ T43] usb 5-1: config 0 has no interface number 0 [ 1223.619279][ T43] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1223.648188][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.667232][ T43] usb 5-1: Product: syz [ 1223.675390][ T43] usb 5-1: Manufacturer: syz [ 1223.684720][ T43] usb 5-1: SerialNumber: syz [ 1223.725352][ T43] usb 5-1: config 0 descriptor?? [ 1223.933455][ T43] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1224.395812][ T43] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1224.435476][ T43] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1224.728189][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1224.742073][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1224.751720][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1224.759818][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1224.767895][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1225.175050][T23513] fuse: Bad value for 'fd' [ 1225.356155][T23516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4969'. [ 1225.454881][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1225.456123][ T5932] usb 5-1: USB disconnect, device number 64 [ 1225.475090][ T5932] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1225.545365][ T5932] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1225.590849][ T5932] quatech2 5-1:0.51: device disconnected [ 1225.978823][T23522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4971'. [ 1226.019085][T23522] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4971'. [ 1226.029296][T23522] usb usb7: usbfs: process 23522 (syz.3.4971) did not claim interface 0 before use [ 1226.568059][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 1226.568091][ T30] audit: type=1400 audit(25691336.665:4114): avc: denied { write } for pid=23527 comm="syz.2.4973" name="vmci" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1226.715696][T23508] lo speed is unknown, defaulting to 1000 [ 1226.898560][ T30] audit: type=1400 audit(25691336.974:4115): avc: denied { mount } for pid=23527 comm="syz.2.4973" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1227.282917][ T5826] Bluetooth: hci0: command tx timeout [ 1227.331208][ T30] audit: type=1400 audit(25691337.058:4116): avc: denied { create } for pid=23527 comm="syz.2.4973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1227.341581][T23536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1227.425988][ T30] audit: type=1400 audit(25691337.058:4117): avc: denied { bind } for pid=23527 comm="syz.2.4973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1227.448978][ T30] audit: type=1400 audit(25691337.058:4118): avc: denied { accept } for pid=23527 comm="syz.2.4973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1227.577458][ T30] audit: type=1400 audit(25691337.554:4119): avc: denied { unmount } for pid=15082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1227.817508][ T30] audit: type=1400 audit(25691337.741:4120): avc: denied { append } for pid=23529 comm="syz.4.4974" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1228.024457][ T30] audit: type=1400 audit(25691337.806:4121): avc: denied { allowed } for pid=23542 comm="syz.2.4976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1228.065969][ T30] audit: type=1400 audit(25691337.806:4122): avc: denied { create } for pid=23542 comm="syz.2.4976" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1228.124451][T23508] chnl_net:caif_netlink_parms(): no params data found [ 1228.178809][ T30] audit: type=1400 audit(25691337.806:4123): avc: denied { map } for pid=23542 comm="syz.2.4976" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=92598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1228.562493][T23556] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1229.140686][T23508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.152394][T23508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.161780][T23508] bridge_slave_0: entered allmulticast mode [ 1229.169358][T23508] bridge_slave_0: entered promiscuous mode [ 1229.178706][T23508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.190803][T23508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.209493][ T5932] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1229.249710][T23508] bridge_slave_1: entered allmulticast mode [ 1229.260662][T23508] bridge_slave_1: entered promiscuous mode [ 1229.427542][ T5932] usb 3-1: device descriptor read/64, error -71 [ 1229.434079][ T5826] Bluetooth: hci0: command tx timeout [ 1229.933049][T23571] tipc: Started in network mode [ 1229.937969][T23571] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1229.945211][T23571] tipc: Enabled bearer , priority 10 [ 1229.957110][T23572] lo speed is unknown, defaulting to 1000 [ 1229.960630][T23508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.027555][T23572] lo speed is unknown, defaulting to 1000 [ 1230.041890][T23508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.061701][T23572] lo speed is unknown, defaulting to 1000 [ 1230.073740][T23572] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1230.989080][ T5932] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1231.134157][T17550] tipc: Node number set to 10005162 [ 1231.238311][T23572] lo speed is unknown, defaulting to 1000 [ 1231.246714][T23572] lo speed is unknown, defaulting to 1000 [ 1231.277244][T23572] lo speed is unknown, defaulting to 1000 [ 1231.284500][T23572] lo speed is unknown, defaulting to 1000 [ 1231.290969][T23572] lo speed is unknown, defaulting to 1000 [ 1231.297486][T23572] lo speed is unknown, defaulting to 1000 [ 1231.304489][T23572] lo speed is unknown, defaulting to 1000 [ 1231.330456][T23508] team0: Port device team_slave_0 added [ 1231.424607][ T5932] usb 3-1: device descriptor read/64, error -71 [ 1231.442553][T23508] team0: Port device team_slave_1 added [ 1231.506584][T23508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.515593][T23508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1231.571592][ T5932] usb usb3-port1: attempt power cycle [ 1231.588288][T23508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.602528][T23508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.627182][T16918] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1231.630608][T23590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4985'. [ 1231.651974][T23508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1231.681462][ T5826] Bluetooth: hci0: command tx timeout [ 1231.687026][T23508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.010861][T16918] usb 1-1: Using ep0 maxpacket: 32 [ 1232.044841][T16918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.626702][T16918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.648802][T16918] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1232.950249][T16918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.969787][T23508] hsr_slave_0: entered promiscuous mode [ 1232.978297][T23508] hsr_slave_1: entered promiscuous mode [ 1232.986896][T16918] usb 1-1: config 0 descriptor?? [ 1233.005781][T23508] debugfs: 'hsr0' already exists in 'hsr' [ 1233.036004][T23508] Cannot create hsr debugfs directory [ 1233.126552][T23600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1233.165678][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 1233.165693][ T30] audit: type=1400 audit(25691342.838:4197): avc: denied { append } for pid=23598 comm="syz.2.4989" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1233.542669][ T30] audit: type=1400 audit(25691343.193:4198): avc: denied { read write } for pid=23606 comm="syz.3.4991" name="nvram" dev="devtmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1233.686623][ T30] audit: type=1400 audit(25691343.193:4199): avc: denied { open } for pid=23606 comm="syz.3.4991" path="/dev/nvram" dev="devtmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1233.854784][ T30] audit: type=1400 audit(25691343.221:4200): avc: denied { create } for pid=23606 comm="syz.3.4991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1233.903874][ T5826] Bluetooth: hci0: command tx timeout [ 1233.913402][ T30] audit: type=1400 audit(25691343.371:4201): avc: denied { write } for pid=23606 comm="syz.3.4991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1234.068998][T23508] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1234.224867][T23508] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1234.465321][T23508] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1234.564950][T23508] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1234.776674][T23618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1235.146818][T23620] vivid-000: disconnect [ 1235.147518][ T30] audit: type=1400 audit(25691344.690:4202): avc: denied { read write } for pid=23619 comm="syz.2.4993" name="vbi1" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1235.243262][T23508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.254489][T16918] usbhid 1-1:0.0: can't add hid device: -71 [ 1235.260517][T16918] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1235.266053][T23508] 8021q: adding VLAN 0 to HW filter on device team0 [ 1235.278591][ T30] audit: type=1400 audit(25691344.690:4203): avc: denied { open } for pid=23619 comm="syz.2.4993" path="/dev/vbi1" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1235.301025][T23508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1235.322689][T23508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1235.326871][T16918] usb 1-1: USB disconnect, device number 74 [ 1235.345485][ T30] audit: type=1400 audit(25691344.690:4204): avc: denied { ioctl } for pid=23619 comm="syz.2.4993" path="/dev/vbi1" dev="devtmpfs" ino=952 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1235.372121][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.379296][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.486623][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.493741][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.493812][ T30] audit: type=1400 audit(25691345.008:4205): avc: denied { allowed } for pid=23621 comm="syz.0.4994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1235.525730][ T30] audit: type=1400 audit(25691345.008:4206): avc: denied { map } for pid=23621 comm="syz.0.4994" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1236.019997][T17550] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1236.214252][T17550] usb 3-1: Using ep0 maxpacket: 8 [ 1236.232884][T17550] usb 3-1: config 0 has an invalid interface number: 211 but max is 0 [ 1236.331405][T23635] FAULT_INJECTION: forcing a failure. [ 1236.331405][T23635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1236.345119][T23635] CPU: 0 UID: 0 PID: 23635 Comm: syz.3.4996 Not tainted syzkaller #0 PREEMPT(full) [ 1236.345143][T23635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1236.345154][T23635] Call Trace: [ 1236.345160][T23635] [ 1236.345167][T23635] dump_stack_lvl+0x16c/0x1f0 [ 1236.345193][T23635] should_fail_ex+0x512/0x640 [ 1236.345216][T23635] _copy_to_user+0x32/0xd0 [ 1236.345239][T23635] simple_read_from_buffer+0xcb/0x170 [ 1236.345265][T23635] proc_fail_nth_read+0x197/0x240 [ 1236.345282][T23635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1236.345300][T23635] ? rw_verify_area+0xcf/0x6c0 [ 1236.345321][T23635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1236.345337][T23635] vfs_read+0x1e4/0xcf0 [ 1236.345369][T23635] ? __pfx___mutex_lock+0x10/0x10 [ 1236.345390][T23635] ? __pfx_vfs_read+0x10/0x10 [ 1236.345419][T23635] ? __fget_files+0x20e/0x3c0 [ 1236.345451][T23635] ksys_read+0x12a/0x250 [ 1236.345473][T23635] ? __pfx_ksys_read+0x10/0x10 [ 1236.345503][T23635] do_syscall_64+0xcd/0x4e0 [ 1236.345526][T23635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.345544][T23635] RIP: 0033:0x7ff97a58d8dc [ 1236.345557][T23635] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1236.345573][T23635] RSP: 002b:00007ff97b359030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1236.345589][T23635] RAX: ffffffffffffffda RBX: 00007ff97a7e5fa0 RCX: 00007ff97a58d8dc [ 1236.345599][T23635] RDX: 000000000000000f RSI: 00007ff97b3590a0 RDI: 0000000000000003 [ 1236.345609][T23635] RBP: 00007ff97b359090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.345618][T23635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.345628][T23635] R13: 00007ff97a7e6038 R14: 00007ff97a7e5fa0 R15: 00007ffd01f90848 [ 1236.345651][T23635] [ 1236.533564][T17550] usb 3-1: config 0 has no interface number 0 [ 1236.540175][T17550] usb 3-1: config 0 interface 211 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1236.551471][T17550] usb 3-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=19.db [ 1236.561106][T17550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.581882][T17550] usb 3-1: config 0 descriptor?? [ 1237.363386][T23508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1237.387845][T17550] usb 3-1: USB disconnect, device number 67 [ 1237.567374][T23653] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4999'. [ 1237.583193][T23653] gretap0: entered promiscuous mode [ 1238.012362][T23662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1238.462911][T23667] CIFS mount error: No usable UNC path provided in device string! [ 1238.462911][T23667] [ 1238.472941][T23667] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1238.547069][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1238.547088][ T30] audit: type=1400 audit(26215635.877:4254): avc: denied { create } for pid=23669 comm="syz.4.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1238.602999][T23508] veth0_vlan: entered promiscuous mode [ 1238.605432][ T30] audit: type=1400 audit(26215635.923:4255): avc: denied { read append } for pid=23669 comm="syz.4.5003" name="fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1238.673759][ T30] audit: type=1400 audit(26215635.923:4256): avc: denied { open } for pid=23669 comm="syz.4.5003" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1238.687932][T23508] veth1_vlan: entered promiscuous mode [ 1238.779759][ T30] audit: type=1400 audit(26215635.961:4257): avc: denied { read } for pid=23669 comm="syz.4.5003" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1238.831550][T23508] veth0_macvtap: entered promiscuous mode [ 1238.868249][ T30] audit: type=1400 audit(26215635.961:4258): avc: denied { open } for pid=23669 comm="syz.4.5003" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1238.899267][T23508] veth1_macvtap: entered promiscuous mode [ 1238.953316][ T30] audit: type=1400 audit(26215635.961:4259): avc: denied { ioctl } for pid=23669 comm="syz.4.5003" path="/dev/dri/card1" dev="devtmpfs" ino=627 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1239.020101][ T30] audit: type=1400 audit(26215636.232:4260): avc: denied { create } for pid=23671 comm="syz.4.5004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1239.074696][ T30] audit: type=1400 audit(26215636.232:4261): avc: denied { accept } for pid=23671 comm="syz.4.5004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1239.178726][T23508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1239.196613][T23508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.277962][ T30] audit: type=1400 audit(26215636.232:4262): avc: denied { create } for pid=23671 comm="syz.4.5004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1239.308058][ T6368] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.325887][ T30] audit: type=1400 audit(26215636.241:4263): avc: denied { setopt } for pid=23671 comm="syz.4.5004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1239.327014][ T6368] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.451940][ T6368] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.469400][ T6368] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.592548][T11796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.600391][T11796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.704199][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.712526][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.083506][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.325498][T23693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5010'. [ 1241.580575][T16918] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1241.738365][T23697] tmpfs: Bad value for 'mpol' [ 1241.788014][T16918] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1241.803552][T16918] usb 1-1: not running at top speed; connect to a high speed hub [ 1241.827968][T16918] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 1241.837208][T16918] usb 1-1: config 5 interface 0 has no altsetting 1 [ 1241.869973][T16918] usb 1-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 1241.879094][T16918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.890306][T16918] usb 1-1: Product: syz [ 1241.894484][T16918] usb 1-1: Manufacturer: syz [ 1241.899116][T16918] usb 1-1: SerialNumber: syz [ 1242.678573][T23704] netlink: 'syz.4.5013': attribute type 10 has an invalid length. [ 1242.745486][T23705] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5013'. [ 1242.945218][T23709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1243.325688][T23689] unknown channel width for channel at 909000KHz? [ 1243.332662][T23689] unknown channel width for channel at 909000KHz? [ 1243.339656][T23689] unknown channel width for channel at 909000KHz? [ 1243.379906][T23701] macsec1: entered promiscuous mode [ 1243.399653][T23701] bridge0: entered promiscuous mode [ 1243.423382][T23701] bridge0: port 3(macsec1) entered blocking state [ 1243.468709][T23701] bridge0: port 3(macsec1) entered disabled state [ 1243.478591][T23701] macsec1: entered allmulticast mode [ 1243.484501][T23701] bridge0: entered allmulticast mode [ 1243.525820][T23701] macsec1: left allmulticast mode [ 1243.541459][T23701] bridge0: left allmulticast mode [ 1243.564954][T23701] bridge0: left promiscuous mode [ 1243.811116][T16918] usb 1-1: USB disconnect, device number 75 [ 1243.881665][T11106] udevd[11106]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1244.007738][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1244.007794][ T30] audit: type=1400 audit(26215640.955:4312): avc: denied { create } for pid=23717 comm="syz.2.5017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1244.249358][T23726] nft_compat: unsupported protocol 0 [ 1244.266198][ T30] audit: type=1400 audit(26215640.964:4313): avc: denied { create } for pid=23717 comm="syz.2.5017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1244.756032][ T30] audit: type=1400 audit(26215641.656:4314): avc: denied { create } for pid=23730 comm="syz.4.5020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1244.832017][T23735] FAULT_INJECTION: forcing a failure. [ 1244.832017][T23735] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.860823][ T30] audit: type=1400 audit(26215641.656:4315): avc: denied { bind } for pid=23730 comm="syz.4.5020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1244.906894][T23735] CPU: 0 UID: 0 PID: 23735 Comm: syz.0.5021 Not tainted syzkaller #0 PREEMPT(full) [ 1244.906918][T23735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1244.906929][T23735] Call Trace: [ 1244.906935][T23735] [ 1244.906948][T23735] dump_stack_lvl+0x16c/0x1f0 [ 1244.906978][T23735] should_fail_ex+0x512/0x640 [ 1244.906998][T23735] ? __kmalloc_noprof+0xbf/0x510 [ 1244.907024][T23735] ? alloc_pipe_info+0x1ec/0x590 [ 1244.907039][T23735] should_failslab+0xc2/0x120 [ 1244.907055][T23735] __kmalloc_noprof+0xd2/0x510 [ 1244.907083][T23735] alloc_pipe_info+0x1ec/0x590 [ 1244.907103][T23735] splice_direct_to_actor+0x77d/0xa30 [ 1244.907129][T23735] ? __lock_acquire+0x62e/0x1ce0 [ 1244.907145][T23735] ? __pfx_direct_splice_actor+0x10/0x10 [ 1244.907173][T23735] ? find_held_lock+0x2b/0x80 [ 1244.907195][T23735] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1244.907218][T23735] ? get_pid_task+0xfc/0x250 [ 1244.907242][T23735] do_splice_direct+0x174/0x240 [ 1244.907267][T23735] ? __pfx_do_splice_direct+0x10/0x10 [ 1244.907293][T23735] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1244.907323][T23735] ? rw_verify_area+0xcf/0x6c0 [ 1244.907348][T23735] do_sendfile+0xb06/0xe50 [ 1244.907376][T23735] ? __pfx_do_sendfile+0x10/0x10 [ 1244.907400][T23735] ? __fget_files+0x20e/0x3c0 [ 1244.907432][T23735] __x64_sys_sendfile64+0x1d8/0x220 [ 1244.907449][T23735] ? ksys_write+0x1ac/0x250 [ 1244.907472][T23735] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1244.907498][T23735] do_syscall_64+0xcd/0x4e0 [ 1244.907522][T23735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.907538][T23735] RIP: 0033:0x7fcbba18eec9 [ 1244.907553][T23735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1244.907570][T23735] RSP: 002b:00007fcbbaf4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1244.907587][T23735] RAX: ffffffffffffffda RBX: 00007fcbba3e5fa0 RCX: 00007fcbba18eec9 [ 1244.907599][T23735] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1244.907609][T23735] RBP: 00007fcbbaf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1244.907619][T23735] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001 [ 1244.907629][T23735] R13: 00007fcbba3e6038 R14: 00007fcbba3e5fa0 R15: 00007ffe7585afb8 [ 1244.907653][T23735] [ 1245.167659][ T30] audit: type=1400 audit(26215641.656:4316): avc: denied { setopt } for pid=23730 comm="syz.4.5020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1245.187041][ T30] audit: type=1400 audit(26215641.656:4317): avc: denied { ioctl } for pid=23730 comm="syz.4.5020" path="socket:[93775]" dev="sockfs" ino=93775 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1245.211853][ T30] audit: type=1400 audit(26215641.656:4318): avc: denied { shutdown } for pid=23730 comm="syz.4.5020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1245.231851][ T30] audit: type=1400 audit(26215641.656:4319): avc: denied { read } for pid=23730 comm="syz.4.5020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1245.251586][ T30] audit: type=1400 audit(26215641.656:4320): avc: denied { bind } for pid=23730 comm="syz.4.5020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1245.270824][ T30] audit: type=1400 audit(26215641.731:4321): avc: denied { watch watch_reads } for pid=23734 comm="syz.0.5021" path="/359" dev="tmpfs" ino=1894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1245.890468][T23732] lo speed is unknown, defaulting to 1000 [ 1245.898893][T23732] lo speed is unknown, defaulting to 1000 [ 1246.086166][T23754] kvm: MONITOR instruction emulated as NOP! [ 1247.836309][T23786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5031'. [ 1248.099466][T23787] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5032'. [ 1249.493895][T23806] ISOFS: Unable to identify CD-ROM format. [ 1249.693659][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 1249.693674][ T30] audit: type=1400 audit(26215646.295:4403): avc: denied { watch } for pid=23808 comm="syz.5.5040" path="/6/bus/file1" dev="overlay" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1249.838109][ T30] audit: type=1400 audit(26215646.323:4404): avc: denied { read write } for pid=23810 comm="syz.4.5039" name="nvram" dev="devtmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1249.996163][T23807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5038'. [ 1250.010068][ T30] audit: type=1400 audit(26215646.323:4405): avc: denied { open } for pid=23810 comm="syz.4.5039" path="/dev/nvram" dev="devtmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1250.172474][ T30] audit: type=1400 audit(26215646.323:4406): avc: denied { watch_sb watch_reads } for pid=23808 comm="syz.5.5040" path="/6/bus/file1" dev="overlay" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1250.238911][ T30] audit: type=1400 audit(26215646.333:4407): avc: denied { create } for pid=23810 comm="syz.4.5039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1250.319498][ T30] audit: type=1400 audit(26215646.333:4408): avc: denied { execute } for pid=23808 comm="syz.5.5040" path="/6/bus/file1" dev="overlay" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1250.392792][ T30] audit: type=1400 audit(26215646.380:4409): avc: denied { write } for pid=23795 comm="syz.3.5036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1250.508230][ T5832] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1250.609556][ T30] audit: type=1400 audit(26215646.380:4410): avc: denied { create } for pid=23795 comm="syz.3.5036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1250.644370][ T30] audit: type=1400 audit(26215646.380:4411): avc: denied { setopt } for pid=23795 comm="syz.3.5036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1251.003461][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 1251.009422][ T30] audit: type=1400 audit(26215646.398:4412): avc: denied { create } for pid=23810 comm="syz.4.5039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1251.041213][ T5832] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1251.051900][ T5832] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1251.061972][ T5832] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1251.083594][ T5832] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1251.255219][ T5832] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1251.326645][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.713197][ T5832] usb 4-1: GET_CAPABILITIES returned 0 [ 1251.724157][ T5832] usbtmc 4-1:16.0: can't read capabilities [ 1252.677439][T23853] syzkaller1: entered promiscuous mode [ 1252.683048][T23853] syzkaller1: entered allmulticast mode [ 1252.852305][T23859] afs: Unknown parameter 'dyn@' [ 1252.857742][T23859] overlay: Bad value for 'redirect_dir' [ 1253.983536][T23874] ./cgroup: Can't lookup blockdev [ 1254.067481][T23877] 9pnet_fd: Insufficient options for proto=fd [ 1254.416997][T23871] binder: BINDER_SET_CONTEXT_MGR already set [ 1254.424498][T23871] binder: 23870:23871 ioctl 4018620d 200000004a80 returned -16 [ 1255.074581][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1255.074599][ T30] audit: type=1400 audit(26215651.322:4446): avc: denied { read write } for pid=15599 comm="syz-executor" name="loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1255.121875][ T30] audit: type=1400 audit(26215651.322:4447): avc: denied { open } for pid=15599 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1255.154700][ T30] audit: type=1400 audit(26215651.322:4448): avc: denied { ioctl } for pid=15599 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1255.220956][ T30] audit: type=1400 audit(26215651.462:4449): avc: denied { prog_load } for pid=23889 comm="syz.4.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1255.258311][ T30] audit: type=1400 audit(26215651.462:4450): avc: denied { bpf } for pid=23889 comm="syz.4.5061" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1255.282670][ T30] audit: type=1400 audit(26215651.462:4451): avc: denied { perfmon } for pid=23889 comm="syz.4.5061" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1255.316447][ T30] audit: type=1400 audit(26215651.490:4452): avc: denied { create } for pid=23889 comm="syz.4.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1255.348395][ T30] audit: type=1400 audit(26215651.490:4453): avc: denied { write } for pid=23889 comm="syz.4.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1255.388060][T23892] tipc: Enabling of bearer rejected, failed to enable media [ 1255.408081][ T30] audit: type=1400 audit(26215651.621:4454): avc: denied { create } for pid=23891 comm="syz.2.5063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1255.497351][ T30] audit: type=1400 audit(26215651.621:4455): avc: denied { write } for pid=23891 comm="syz.2.5063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1255.548753][T23899] FAULT_INJECTION: forcing a failure. [ 1255.548753][T23899] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.570241][T23897] tipc: Enabling of bearer rejected, failed to enable media [ 1255.590764][T23899] CPU: 0 UID: 0 PID: 23899 Comm: syz.2.5063 Not tainted syzkaller #0 PREEMPT(full) [ 1255.590781][T23899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1255.590787][T23899] Call Trace: [ 1255.590791][T23899] [ 1255.590796][T23899] dump_stack_lvl+0x16c/0x1f0 [ 1255.590813][T23899] should_fail_ex+0x512/0x640 [ 1255.590828][T23899] ? fs_reclaim_acquire+0xae/0x150 [ 1255.590845][T23899] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1255.590865][T23899] should_failslab+0xc2/0x120 [ 1255.590880][T23899] __kmalloc_noprof+0xd2/0x510 [ 1255.590898][T23899] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1255.590913][T23899] ? tomoyo_profile+0x47/0x60 [ 1255.590928][T23899] tomoyo_path_number_perm+0x245/0x580 [ 1255.590939][T23899] ? tomoyo_path_number_perm+0x237/0x580 [ 1255.590951][T23899] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1255.590963][T23899] ? find_held_lock+0x2b/0x80 [ 1255.590989][T23899] ? find_held_lock+0x2b/0x80 [ 1255.591002][T23899] ? hook_file_ioctl_common+0x145/0x410 [ 1255.591020][T23899] ? __fget_files+0x20e/0x3c0 [ 1255.591038][T23899] security_file_ioctl+0x9b/0x240 [ 1255.591052][T23899] __x64_sys_ioctl+0xb7/0x210 [ 1255.591066][T23899] do_syscall_64+0xcd/0x4e0 [ 1255.591081][T23899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.591091][T23899] RIP: 0033:0x7f8383f8eec9 [ 1255.591100][T23899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1255.591110][T23899] RSP: 002b:00007f8384e27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1255.591121][T23899] RAX: ffffffffffffffda RBX: 00007f83841e6180 RCX: 00007f8383f8eec9 [ 1255.591127][T23899] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 1255.591134][T23899] RBP: 00007f8384e27090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.591140][T23899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.591145][T23899] R13: 00007f83841e6218 R14: 00007f83841e6180 R15: 00007fff04c2b8f8 [ 1255.591159][T23899] [ 1255.591163][T23899] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1255.914681][ T5832] usb 4-1: USB disconnect, device number 62 [ 1256.112968][T23912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5064'. [ 1256.985084][T17201] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1257.233705][T17201] usb 4-1: Using ep0 maxpacket: 8 [ 1257.253567][T17201] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 1257.378712][T17201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.387310][T17201] usb 4-1: Product: syz [ 1257.391520][T17201] usb 4-1: Manufacturer: syz [ 1257.400446][T17201] usb 4-1: SerialNumber: syz [ 1257.408134][T17201] usb 4-1: config 0 descriptor?? [ 1257.418995][T17201] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1257.643043][T17201] usb 4-1: USB disconnect, device number 63 [ 1259.848906][T23950] syzkaller1: entered promiscuous mode [ 1259.854825][T23950] syzkaller1: entered allmulticast mode [ 1259.869624][T17201] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1260.183817][T17201] usb 6-1: Using ep0 maxpacket: 8 [ 1260.224919][T17201] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.231421][T23953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5077'. [ 1260.277472][T17201] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1260.342482][T17201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1260.355066][T17201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1260.375505][T17201] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1260.396429][T17201] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1260.413236][T17201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1260.440287][T17201] usb 6-1: Product: syz [ 1260.449549][T17201] usb 6-1: Manufacturer: syz [ 1260.458767][T17201] usb 6-1: SerialNumber: syz [ 1260.471928][T17201] usb 6-1: config 0 descriptor?? [ 1260.516013][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1260.516029][ T30] audit: type=1400 audit(26739944.424:4494): avc: denied { create } for pid=23961 comm="syz.2.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1260.565034][T23962] mkiss: ax0: crc mode is auto. [ 1260.619710][ T30] audit: type=1400 audit(26739944.517:4495): avc: denied { write } for pid=23963 comm="syz.3.5082" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1260.744663][T17201] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1260.760869][T17201] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1261.267710][ T30] audit: type=1400 audit(26739945.107:4496): avc: denied { read write } for pid=23961 comm="syz.2.5079" name="video1" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1261.268047][T17201] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 1261.306757][T17201] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1261.329289][T17201] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1261.370739][T23976] SELinux: policydb magic number 0xa00 does not match expected magic number 0xf97cff8c [ 1261.373549][ T30] audit: type=1400 audit(26739945.107:4497): avc: denied { open } for pid=23961 comm="syz.2.5079" path="/dev/video1" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1261.428770][T23976] SELinux: failed to load policy [ 1261.483509][T17201] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 1261.497920][ T30] audit: type=1400 audit(26739945.107:4498): avc: denied { ioctl } for pid=23961 comm="syz.2.5079" path="/dev/video1" dev="devtmpfs" ino=930 ioctlcmd=0x5617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1261.501624][T23978] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5085'. [ 1261.522724][ C0] vkms_vblank_simulate: vblank timer overrun [ 1261.645532][ T30] audit: type=1400 audit(26739945.209:4499): avc: denied { load_policy } for pid=23961 comm="syz.2.5079" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1262.621836][T17201] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1262.998472][T17201] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 1263.012717][T17201] usb 6-1: USB disconnect, device number 2 [ 1263.167343][ T30] audit: type=1400 audit(26739946.902:4500): avc: denied { mount } for pid=23997 comm="syz.3.5090" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1263.264936][T16918] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1263.336175][T24005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5092'. [ 1263.551255][ T30] audit: type=1400 audit(26739946.921:4501): avc: denied { mounton } for pid=23997 comm="syz.3.5090" path="/415/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 1263.642546][ T30] audit: type=1400 audit(26739946.940:4502): avc: denied { create } for pid=23997 comm="syz.3.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1263.746426][T16918] usb 3-1: Using ep0 maxpacket: 16 [ 1263.753310][T16918] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1263.768815][T16918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1263.769511][T24015] FAULT_INJECTION: forcing a failure. [ 1263.769511][T24015] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.795367][T24015] CPU: 1 UID: 0 PID: 24015 Comm: syz.0.5097 Not tainted syzkaller #0 PREEMPT(full) [ 1263.795390][T24015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1263.795400][T24015] Call Trace: [ 1263.795406][T24015] [ 1263.795413][T24015] dump_stack_lvl+0x16c/0x1f0 [ 1263.795441][T24015] should_fail_ex+0x512/0x640 [ 1263.795469][T24015] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1263.795499][T24015] should_failslab+0xc2/0x120 [ 1263.795515][T24015] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1263.795540][T24015] ? __alloc_skb+0x2b2/0x380 [ 1263.795564][T24015] __alloc_skb+0x2b2/0x380 [ 1263.795582][T24015] ? __pfx___alloc_skb+0x10/0x10 [ 1263.795604][T24015] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1263.795633][T24015] netlink_alloc_large_skb+0x69/0x130 [ 1263.795656][T24015] netlink_sendmsg+0x6a1/0xdd0 [ 1263.795683][T24015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1263.795714][T24015] ____sys_sendmsg+0xa98/0xc70 [ 1263.795741][T24015] ? copy_msghdr_from_user+0x10a/0x160 [ 1263.795762][T24015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1263.795805][T24015] ___sys_sendmsg+0x134/0x1d0 [ 1263.795827][T24015] ? __pfx____sys_sendmsg+0x10/0x10 [ 1263.795878][T24015] __sys_sendmsg+0x16d/0x220 [ 1263.795899][T24015] ? __pfx___sys_sendmsg+0x10/0x10 [ 1263.795937][T24015] do_syscall_64+0xcd/0x4e0 [ 1263.795962][T24015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.795979][T24015] RIP: 0033:0x7fcbba18eec9 [ 1263.795994][T24015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1263.796010][T24015] RSP: 002b:00007fcbbaf4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1263.796027][T24015] RAX: ffffffffffffffda RBX: 00007fcbba3e5fa0 RCX: 00007fcbba18eec9 [ 1263.796038][T24015] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1263.796048][T24015] RBP: 00007fcbbaf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.796058][T24015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.796068][T24015] R13: 00007fcbba3e6038 R14: 00007fcbba3e5fa0 R15: 00007ffe7585afb8 [ 1263.796091][T24015] [ 1263.812897][T16918] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1264.110374][T24019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1264.127509][ T30] audit: type=1400 audit(26739947.791:4503): avc: denied { append } for pid=24018 comm="syz.0.5098" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1264.128148][T16918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.160034][T16918] usb 3-1: Product: syz [ 1264.180425][T16918] usb 3-1: Manufacturer: syz [ 1264.185436][T16918] usb 3-1: SerialNumber: syz [ 1264.203419][T16918] usb 3-1: config 0 descriptor?? [ 1264.213628][T16918] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1264.227540][T16918] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1264.705862][ T43] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1264.877774][T16918] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1264.892448][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 1264.916816][T16918] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1264.924846][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.123500][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.457785][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1265.518458][ T43] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1265.758076][T16918] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1265.790608][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.877565][ T43] usb 4-1: config 0 descriptor?? [ 1265.899150][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1265.899167][ T30] audit: type=1400 audit(26739949.456:4527): avc: denied { ioctl } for pid=24021 comm="syz.3.5099" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1266.012544][ T30] audit: type=1400 audit(26739949.493:4528): avc: denied { read write } for pid=24023 comm="syz.5.5100" name="video0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1266.079031][ T30] audit: type=1400 audit(26739949.493:4529): avc: denied { open } for pid=24023 comm="syz.5.5100" path="/dev/video0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1266.102678][ T30] audit: type=1400 audit(26739949.493:4530): avc: denied { ioctl } for pid=24023 comm="syz.5.5100" path="/dev/video0" dev="devtmpfs" ino=929 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1266.198609][ T30] audit: type=1400 audit(26739949.493:4531): avc: denied { create } for pid=24023 comm="syz.5.5100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1266.607425][T24022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.056519][ T43] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 1267.063614][ T43] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 1267.071328][ T43] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 1267.078373][ T43] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 1267.085567][ T43] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 1267.093478][ T30] audit: type=1400 audit(26739949.521:4532): avc: denied { recv } for pid=24038 comm="syz.4.5104" saddr=10.128.0.169 src=30006 daddr=10.128.0.74 dest=43590 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1267.119551][ T30] audit: type=1400 audit(26739949.624:4533): avc: denied { create } for pid=24044 comm="syz.0.5105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1267.147279][T24022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.160614][ T43] input: HID 0955:7214 Haptics as /devices/virtual/input/input73 [ 1267.186706][ T30] audit: type=1400 audit(26739949.624:4534): avc: denied { read write } for pid=15599 comm="syz-executor" name="loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1267.223989][T24022] netlink: 'syz.3.5099': attribute type 2 has an invalid length. [ 1267.255148][ T43] shield 0003:0955:7214.001C: Registered Thunderstrike controller [ 1267.273234][T24022] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5099'. [ 1267.310074][ T43] shield 0003:0955:7214.001C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1267.328603][T16918] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1267.340160][T16918] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1267.382913][T16918] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1267.412439][ T24] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1267.426405][ T43] usb 4-1: USB disconnect, device number 64 [ 1267.454499][ T24] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1267.486502][ T24] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1267.507878][ T30] audit: type=1400 audit(26739949.624:4535): avc: denied { open } for pid=15599 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1267.553864][ T24] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1267.561464][T16918] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1267.583122][T16918] usb 3-1: USB disconnect, device number 68 [ 1267.613651][ T30] audit: type=1400 audit(26739949.624:4536): avc: denied { ioctl } for pid=15599 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1268.188680][T24058] bond3: entered promiscuous mode [ 1268.382294][T24065] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5113'. [ 1271.235112][T24119] netlink: 'syz.3.5128': attribute type 6 has an invalid length. [ 1271.243951][T24119] netlink: 'syz.3.5128': attribute type 6 has an invalid length. [ 1271.252801][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 1271.252813][ T30] audit: type=1400 audit(27264242.471:4615): avc: denied { perfmon } for pid=24117 comm="syz.4.5129" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1271.383245][ T30] audit: type=1400 audit(27264242.489:4616): avc: denied { execmem } for pid=24117 comm="syz.4.5129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1271.588003][T24124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5129'. [ 1272.807662][ T30] audit: type=1400 audit(27264242.723:4617): avc: denied { read append } for pid=24117 comm="syz.4.5129" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1272.831816][ T30] audit: type=1400 audit(27264242.723:4618): avc: denied { open } for pid=24117 comm="syz.4.5129" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1272.855730][ T30] audit: type=1400 audit(27264242.742:4619): avc: denied { ioctl } for pid=24117 comm="syz.4.5129" path="/dev/iommu" dev="devtmpfs" ino=623 ioctlcmd=0x3b88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1272.908065][ T30] audit: type=1400 audit(27264242.779:4620): avc: denied { create } for pid=24121 comm="syz.5.5130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1272.928913][ T30] audit: type=1400 audit(27264242.910:4621): avc: denied { bind } for pid=24121 comm="syz.5.5130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1273.121219][ T30] audit: type=1400 audit(27264242.910:4622): avc: denied { module_request } for pid=24121 comm="syz.5.5130" kmod="crypto-gcm_base(ctr(aes-aesni),ghash-generic)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1273.195759][ T30] audit: type=1400 audit(27264244.108:4623): avc: denied { write } for pid=24131 comm="syz.5.5131" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1273.292258][T16918] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1273.352531][ T30] audit: type=1400 audit(27264244.426:4624): avc: denied { create } for pid=24141 comm="syz.4.5135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1273.947568][T16918] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1274.177295][T16918] usb 6-1: config 1 has no interface number 0 [ 1274.624585][T16918] usb 6-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1275.050774][T16918] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1275.077908][T16918] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0xB has invalid maxpacket 1983, setting to 1024 [ 1275.405715][T16918] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1275.500734][T16918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.509267][T16918] usb 6-1: Product: syz [ 1275.513473][T16918] usb 6-1: Manufacturer: syz [ 1275.518397][T16918] usb 6-1: SerialNumber: syz [ 1275.558295][T24132] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1275.567829][T24132] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1275.575528][T24132] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1275.587895][T16918] usb 6-1: Expected 3 endpoints, found: 2 [ 1275.664536][T24149] Bluetooth: MGMT ver 1.23 [ 1275.970538][T24132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.989607][T24132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.093973][ T5932] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1276.136344][T24132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.145576][T24132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.653889][T24174] tmpfs: Unknown parameter '0xffffffffffffffff' [ 1276.745797][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 1276.796687][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1276.796705][ T30] audit: type=1400 audit(27264247.128:4652): avc: denied { watch watch_reads } for pid=24172 comm="syz.0.5143" path="/396" dev="tmpfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1276.825936][ T30] audit: type=1400 audit(27264247.138:4653): avc: denied { execute } for pid=24172 comm="syz.0.5143" path="/396/file1" dev="tmpfs" ino=2104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1276.848673][ T30] audit: type=1400 audit(27264247.512:4654): avc: denied { mounton } for pid=24172 comm="syz.0.5143" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1276.902121][ T5932] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 1276.921899][ T30] audit: type=1400 audit(27264247.764:4655): avc: denied { bpf } for pid=24180 comm="syz.3.5145" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1276.951402][ T30] audit: type=1400 audit(27264247.792:4656): avc: denied { allowed } for pid=24180 comm="syz.3.5145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1276.980540][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.001959][ T30] audit: type=1400 audit(27264247.792:4657): avc: denied { map } for pid=24180 comm="syz.3.5145" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=96481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1277.044758][ T5932] usb 3-1: Product: syz [ 1277.053739][ T5932] usb 3-1: Manufacturer: syz [ 1277.068851][ T5932] usb 3-1: SerialNumber: syz [ 1277.089317][ T30] audit: type=1400 audit(27264247.792:4658): avc: denied { read write } for pid=24180 comm="syz.3.5145" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=96481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1277.322370][ T30] audit: type=1400 audit(27264247.811:4659): avc: denied { create } for pid=24180 comm="syz.3.5145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1277.323682][ T5932] usb 3-1: config 0 descriptor?? [ 1277.430613][ T30] audit: type=1400 audit(27264247.821:4660): avc: denied { read } for pid=24180 comm="syz.3.5145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1277.431301][ T5932] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1277.459870][ T30] audit: type=1400 audit(27264247.905:4661): avc: denied { read } for pid=24180 comm="syz.3.5145" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1277.629854][ T5932] usb 3-1: USB disconnect, device number 69 [ 1277.654068][T24132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1277.679191][T24132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1277.850053][T11796] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.861470][T11796] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.956609][ T24] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1277.968401][T24167] Bluetooth: hci0: command 0x0000 tx timeout [ 1277.983773][T11796] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.995588][T11796] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.521095][ T24] usb 5-1: device descriptor read/64, error -71 [ 1279.176650][ T5953] usb 6-1: USB disconnect, device number 3 [ 1279.542158][T24198] syzkaller1: entered promiscuous mode [ 1279.548215][T24198] syzkaller1: entered allmulticast mode [ 1279.705386][T24193] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5149'. [ 1279.729175][ T24] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1280.039248][ T24] usb 5-1: device descriptor read/64, error -71 [ 1280.179325][ T24] usb usb5-port1: attempt power cycle [ 1280.445354][ T5953] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1280.651214][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1280.959852][ T24] usb 5-1: device descriptor read/8, error -71 [ 1281.012132][ T5953] usb 1-1: Using ep0 maxpacket: 8 [ 1281.028630][ T5953] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.048011][ T5953] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1281.060516][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1281.071756][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1281.104274][ T5953] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1281.167580][ T5953] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1281.176838][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1281.191163][ T5953] usb 1-1: Product: syz [ 1281.203443][ T5953] usb 1-1: Manufacturer: syz [ 1281.241567][ T5953] usb 1-1: SerialNumber: syz [ 1281.328853][ T5953] usb 1-1: config 0 descriptor?? [ 1282.541065][ T43] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1284.400744][ T5953] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1284.412362][ T5953] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 1286.326439][ T5953] usb 1-1: USB disconnect, device number 76 [ 1306.762701][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1358.254330][ T5826] Bluetooth: hci0: command 0x0000 tx timeout [ 1372.453298][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1396.722484][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1396.729434][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P49/1:b..l [ 1396.737664][ C0] rcu: (detected by 0, t=10502 jiffies, g=115789, q=335 ncpus=2) [ 1396.745440][ C0] task:kworker/u8:3 state:R running task stack:23560 pid:49 tgid:49 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1396.760072][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1396.766305][ C0] Call Trace: [ 1396.769580][ C0] [ 1396.772487][ C0] __schedule+0x1190/0x5de0 [ 1396.776980][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1396.781903][ C0] ? __pfx___schedule+0x10/0x10 [ 1396.786724][ C0] ? lock_acquire+0x179/0x350 [ 1396.791392][ C0] ? mark_held_locks+0x49/0x80 [ 1396.796138][ C0] preempt_schedule_irq+0x51/0x90 [ 1396.801134][ C0] irqentry_exit+0x36/0x90 [ 1396.805523][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1396.811474][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 1396.816647][ C0] Code: aa e3 11 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 52 33 c8 0e 0f 82 74 02 00 00 8b 35 0a 65 c8 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 a9 a9 e3 11 0f 85 c7 02 00 00 48 83 c4 [ 1396.836223][ C0] RSP: 0018:ffffc90000b96dc0 EFLAGS: 00000206 [ 1396.842273][ C0] RAX: 0000000000000046 RBX: ffffffff8e1c34a0 RCX: 000000002ca82062 [ 1396.850404][ C0] RDX: 0000000000000000 RSI: ffffffff8d993f15 RDI: ffffffff8bd007c0 [ 1396.858360][ C0] RBP: 0000000000000002 R08: 7ba1db155557abb6 R09: 0000000000000000 [ 1396.866308][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1396.874252][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1396.882209][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 1396.887393][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1396.893526][ C0] unwind_next_frame+0xd1/0x20a0 [ 1396.898441][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 1396.903528][ C0] ? cfg80211_inform_single_bss_data+0x53e/0x1df0 [ 1396.909930][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 1396.914844][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1396.920973][ C0] arch_stack_walk+0x94/0x100 [ 1396.925633][ C0] ? cfg80211_inform_single_bss_data+0x53e/0x1df0 [ 1396.932029][ C0] ? cfg80211_inform_single_bss_data+0x53e/0x1df0 [ 1396.938415][ C0] stack_trace_save+0x8e/0xc0 [ 1396.943067][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1396.948422][ C0] kasan_save_stack+0x33/0x60 [ 1396.953081][ C0] ? kasan_save_stack+0x33/0x60 [ 1396.957905][ C0] ? kasan_save_track+0x14/0x30 [ 1396.962734][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1396.967473][ C0] ? __kmalloc_noprof+0x223/0x510 [ 1396.972469][ C0] ? cfg80211_inform_single_bss_data+0x53e/0x1df0 [ 1396.978873][ C0] kasan_save_track+0x14/0x30 [ 1396.983524][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1396.988091][ C0] __kmalloc_noprof+0x223/0x510 [ 1396.992921][ C0] cfg80211_inform_single_bss_data+0x53e/0x1df0 [ 1396.999150][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1397.005798][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1397.010716][ C0] ? ieee802_11_parse_elems_full+0x1db/0x3780 [ 1397.016755][ C0] ? stack_trace_save+0x8e/0xc0 [ 1397.021583][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1397.026931][ C0] ? cfg80211_inform_bss_data+0x224/0x3bd0 [ 1397.032707][ C0] cfg80211_inform_bss_data+0x224/0x3bd0 [ 1397.038312][ C0] ? kasan_save_stack+0x33/0x60 [ 1397.043146][ C0] ? kasan_save_track+0x14/0x30 [ 1397.047971][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1397.052709][ C0] ? __kmalloc_noprof+0x223/0x510 [ 1397.057712][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xc69/0x2fd0 [ 1397.063935][ C0] ? process_one_work+0x9cf/0x1b70 [ 1397.069019][ C0] ? worker_thread+0x6c8/0xf10 [ 1397.073757][ C0] ? kthread+0x3c5/0x780 [ 1397.077969][ C0] ? ret_from_fork+0x56a/0x730 [ 1397.082702][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1397.087624][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1397.093685][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1397.099570][ C0] ? _ieee802_11_parse_elems_full+0x626/0x44e0 [ 1397.105719][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1397.110628][ C0] ? rtl8152_probe+0x35ed/0x3660 [ 1397.115539][ C0] ? ieee802_11_parse_elems_full+0x143/0x3780 [ 1397.121578][ C0] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 1397.127622][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 1397.133232][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1397.139363][ C0] ? find_held_lock+0x2b/0x80 [ 1397.144016][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x18cb/0x2fd0 [ 1397.150321][ C0] ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 1397.156456][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1397.162955][ C0] ? kcov_remote_start+0x3c9/0x6d0 [ 1397.168059][ C0] ieee80211_iface_work+0xe2e/0x1360 [ 1397.173321][ C0] ? rcu_is_watching+0x12/0xc0 [ 1397.178061][ C0] cfg80211_wiphy_work+0x2c7/0x580 [ 1397.183149][ C0] process_one_work+0x9cf/0x1b70 [ 1397.188063][ C0] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1397.193410][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1397.198767][ C0] ? assign_work+0x1a0/0x250 [ 1397.203341][ C0] worker_thread+0x6c8/0xf10 [ 1397.207926][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1397.213018][ C0] kthread+0x3c5/0x780 [ 1397.217066][ C0] ? __pfx_kthread+0x10/0x10 [ 1397.221634][ C0] ? rcu_is_watching+0x12/0xc0 [ 1397.226372][ C0] ? __pfx_kthread+0x10/0x10 [ 1397.230949][ C0] ret_from_fork+0x56a/0x730 [ 1397.235510][ C0] ? __pfx_kthread+0x10/0x10 [ 1397.240072][ C0] ret_from_fork_asm+0x1a/0x30 [ 1397.244814][ C0] [ 1397.247807][ C0] rcu: rcu_preempt kthread starved for 10369 jiffies! g115789 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1397.259060][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1397.268997][ C0] rcu: RCU grace-period kthread stack dump: [ 1397.274853][ C0] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1397.288302][ C0] Call Trace: [ 1397.291561][ C0] [ 1397.294478][ C0] __schedule+0x1190/0x5de0 [ 1397.298975][ C0] ? __pfx___schedule+0x10/0x10 [ 1397.303820][ C0] ? find_held_lock+0x2b/0x80 [ 1397.308473][ C0] ? schedule+0x2d7/0x3a0 [ 1397.312775][ C0] schedule+0xe7/0x3a0 [ 1397.316818][ C0] schedule_timeout+0x123/0x290 [ 1397.321646][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1397.327011][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1397.332296][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1397.338077][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1397.343509][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1397.348245][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1397.353501][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1397.358678][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1397.363586][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1397.368410][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1397.374189][ C0] rcu_gp_kthread+0x26d/0x380 [ 1397.378838][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1397.384007][ C0] ? rcu_is_watching+0x12/0xc0 [ 1397.388746][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1397.393919][ C0] ? __kthread_parkme+0x19e/0x250 [ 1397.398922][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1397.404093][ C0] kthread+0x3c5/0x780 [ 1397.408137][ C0] ? __pfx_kthread+0x10/0x10 [ 1397.412699][ C0] ? rcu_is_watching+0x12/0xc0 [ 1397.417442][ C0] ? __pfx_kthread+0x10/0x10 [ 1397.422009][ C0] ret_from_fork+0x56a/0x730 [ 1397.426570][ C0] ? __pfx_kthread+0x10/0x10 [ 1397.431140][ C0] ret_from_fork_asm+0x1a/0x30 [ 1397.435899][ C0] [ 1397.438891][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1397.445190][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1397.450375][ C1] NMI backtrace for cpu 1 [ 1397.450386][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1397.450402][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1397.450409][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1397.450427][ C1] Code: f9 5b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 b8 19 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1397.450439][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 1397.450451][ C1] RAX: 0000000006c05599 RBX: 0000000000000001 RCX: ffffffff8b504f49 [ 1397.450460][ C1] RDX: 0000000000000000 RSI: ffffffff8d9b96ae RDI: ffffffff8bd007c0 [ 1397.450469][ C1] RBP: ffffed1003b5d490 R08: 0000000000000001 R09: ffffed10170e6655 [ 1397.450477][ C1] R10: ffff8880b87332ab R11: 0000000000000000 R12: 0000000000000001 [ 1397.450485][ C1] R13: ffff88801daea480 R14: ffffffff905f7990 R15: 0000000000000000 [ 1397.450494][ C1] FS: 0000000000000000(0000) GS:ffff888124f71000(0000) knlGS:0000000000000000 [ 1397.450507][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1397.450516][ C1] CR2: 00007fce2bdefff0 CR3: 0000000033b64000 CR4: 00000000003526f0 [ 1397.450524][ C1] Call Trace: [ 1397.450529][ C1] [ 1397.450534][ C1] default_idle+0x13/0x20 [ 1397.450551][ C1] default_idle_call+0x6c/0xb0 [ 1397.450568][ C1] do_idle+0x38d/0x500 [ 1397.450586][ C1] ? __pfx_do_idle+0x10/0x10 [ 1397.450602][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1397.450620][ C1] cpu_startup_entry+0x4f/0x60 [ 1397.450636][ C1] start_secondary+0x21d/0x2b0 [ 1397.450657][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1397.450678][ C1] common_startup_64+0x13e/0x148 [ 1397.450700][ C1]