last executing test programs: 5m16.029833073s ago: executing program 3 (id=302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r1, 0x5452, &(0x7f0000001840)=0x5d4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xf, 0x0, @thr={&(0x7f0000000000), &(0x7f00000004c0)="4d96353825b2eeb7ce198bdcf3259328279115609854324f837625769968676e568f50174f67ad9bb63f326700351edfa85e3d35500572ecad2ce8f4f4ff69e065389ad91ad941bccb51e4f9e821c29ad8c3bf1d94d2b2ee34a0f1b7608c1b8c10fa66b868a4b372869feced49963e2d9cf025129c0fdc37e7723d20e928f1854fb5efcfe867f847ebee0a97b533d7a52ca8054979094a2c395beafac3357d2faf49d6749885ea8256b104eddaddc3b1c4aff9e0828333a8d3eae8b4312ab1c57365bd5a52ab0ff923c168d74ae4ae240b017737373b17677cab93f1af189272"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xbf1e}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbe4250400000008000c00", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f00000001c0)={0x6, 0x100, 0x80000000, 0x2, 0x96, "f6a881613aa50e15c43572430be97800", 0x6c, 0x8}) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r9 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) sendfile(r9, r5, 0x0, 0x20000023893) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000000300)=""/228) 5m15.072586772s ago: executing program 3 (id=304): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e24, 0x3, 'nq\x00', 0x6c, 0x80005, 0x7d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@local, 0x4e20, 0x4, 0xf8}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5m14.69898975s ago: executing program 3 (id=305): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="e8", 0x1, 0xffffffffffffffff) r2 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000600)={0x0, r1, r2}, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e1700800000876c1d0000007ea60864160af36514001ac00400020207000200020001000200000000938037a786a6d0001000000e4509c5f05c2f070000000000000088bbcb", 0x52}, {&(0x7f0000000100)="9b25af20af07241a63c3", 0xa}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 5m14.141547097s ago: executing program 3 (id=308): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/208, 0xd0}], 0x1}, 0x20000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 5m13.103911526s ago: executing program 3 (id=313): ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f00000001c0)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x7f, 0x0, 0x1000}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0xb0, r5, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x40}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x60, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xa}, @broadcast, @initial, @from_mac, {0x6, 0xc4}}, @a_msdu=[{@device_b, @device_a, 0x35, "65f1595cc0e4ee3056aee5717d1dc952f4454a99daf2b6e539450cbd8a4db720933be6b1699dcbdfc91b51a79e4c79cb5494183cc2"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x4e040) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) 5m10.804475991s ago: executing program 3 (id=319): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sigaltstack(0x0, &(0x7f0000000280)={0x0}) recvmmsg(r3, &(0x7f0000002780)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000002c0)}, 0xfffff5cb}, {{&(0x7f0000000500)=@ax25={{}, [@null, @rose, @default, @default, @default, @remote, @bcast, @netrom]}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000400)=""/234, 0xea}}, {{&(0x7f0000000b80), 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000c00)=""/202, 0xca}, {&(0x7f0000000d00)=""/113, 0x71}, {&(0x7f0000000d80)=""/128, 0x80}, {&(0x7f0000001100)=""/134, 0x86}], 0x4}, 0x1}, {{&(0x7f0000000f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001040), 0x42, &(0x7f0000001080)=""/81, 0x51}, 0x8001}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/53}, {&(0x7f0000000600)=""/183}, {&(0x7f0000002480)=""/235}, {&(0x7f0000000800)=""/105}, {&(0x7f0000000880)=""/113}, {&(0x7f0000001300)=""/4096}, {&(0x7f0000000240)=""/54}, {&(0x7f00000002c0)=""/31}, {&(0x7f0000000900)=""/153}], 0x0, &(0x7f0000000a80)=""/147}, 0x6}, {{&(0x7f0000000f80)=@l2tp={0x2, 0x0, @remote}, 0x0, &(0x7f0000000580)=[{&(0x7f0000001200)=""/149}, {&(0x7f0000002300)=""/148}, {&(0x7f00000023c0)=""/166}], 0x0, &(0x7f0000002940)=""/225}, 0x3}, {{&(0x7f0000001000)=@hci, 0x0, &(0x7f0000002580)=[{&(0x7f0000000b40)=""/22}], 0x0, &(0x7f0000002680)=""/234}, 0x5e}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(0x0, 0x0, 0x0, 0x0) getpid() madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x7a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000008, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdac, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0xffff, 0xffe0}, {0x0, 0x6}, {0xf, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040054) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000080)={r7, 0x1, 0x6}) socket$kcm(0x10, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) 4m55.593750801s ago: executing program 32 (id=319): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sigaltstack(0x0, &(0x7f0000000280)={0x0}) recvmmsg(r3, &(0x7f0000002780)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000002c0)}, 0xfffff5cb}, {{&(0x7f0000000500)=@ax25={{}, [@null, @rose, @default, @default, @default, @remote, @bcast, @netrom]}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000400)=""/234, 0xea}}, {{&(0x7f0000000b80), 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000c00)=""/202, 0xca}, {&(0x7f0000000d00)=""/113, 0x71}, {&(0x7f0000000d80)=""/128, 0x80}, {&(0x7f0000001100)=""/134, 0x86}], 0x4}, 0x1}, {{&(0x7f0000000f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001040), 0x42, &(0x7f0000001080)=""/81, 0x51}, 0x8001}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/53}, {&(0x7f0000000600)=""/183}, {&(0x7f0000002480)=""/235}, {&(0x7f0000000800)=""/105}, {&(0x7f0000000880)=""/113}, {&(0x7f0000001300)=""/4096}, {&(0x7f0000000240)=""/54}, {&(0x7f00000002c0)=""/31}, {&(0x7f0000000900)=""/153}], 0x0, &(0x7f0000000a80)=""/147}, 0x6}, {{&(0x7f0000000f80)=@l2tp={0x2, 0x0, @remote}, 0x0, &(0x7f0000000580)=[{&(0x7f0000001200)=""/149}, {&(0x7f0000002300)=""/148}, {&(0x7f00000023c0)=""/166}], 0x0, &(0x7f0000002940)=""/225}, 0x3}, {{&(0x7f0000001000)=@hci, 0x0, &(0x7f0000002580)=[{&(0x7f0000000b40)=""/22}], 0x0, &(0x7f0000002680)=""/234}, 0x5e}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(0x0, 0x0, 0x0, 0x0) getpid() madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x7a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20000008, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdac, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0xffff, 0xffe0}, {0x0, 0x6}, {0xf, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040054) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000080)={r7, 0x1, 0x6}) socket$kcm(0x10, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) 14.604859193s ago: executing program 4 (id=1510): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0xffffffff) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$clear(0x7, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = io_uring_setup(0x5be0, &(0x7f0000000500)={0x0, 0x400067c1, 0x400, 0x4000000, 0x1f1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00!', 0x2}], 0x1, 0x7, 0x1) 12.889328237s ago: executing program 5 (id=1517): socket$inet6(0xa, 0x5, 0x0) (async) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000fee000)=0x43fa, 0xec) (async) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000fee000)=0x43fa, 0xec) listen(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)}, {&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000440)=""/100, 0x64}], 0x4, &(0x7f0000000700)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f00000005c0)=""/4, 0x4}, {&(0x7f0000000600)=""/200, 0xc8}], 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x7, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000000000000000110000ac1414aa00000000442c00030a0101000000e7b2d60ba30000ac1c14bbfffffffe0000000000000000ac141400fffffffd0000000000000000"], 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000000000000000110000ac1414aa00000000442c00030a0101000000e7b2d60ba30000ac1c14bbfffffffe0000000000000000ac141400fffffffd0000000000000000"], 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x7, 0x0, 0x2, 0x4}}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b0f, &(0x7f0000000140)={'wlan1\x00', @random="0300000000eb"}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8b0f, &(0x7f0000000140)={'wlan1\x00', @random="0300000000eb"}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106}}, 0x20) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r5, 0x0) 12.867942309s ago: executing program 4 (id=1518): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xbf1e}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbe4250400", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 12.275386352s ago: executing program 5 (id=1519): r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x441, 0x4800001a, r1, 0x0) fanotify_mark(r0, 0x2, 0x20, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 11.560523783s ago: executing program 4 (id=1522): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {@in6=@mcast2, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0x3, 0x2}, {0x0, 0x4000000, 0x0, 0x9}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'essiv-cbc-aes-sha256-neon\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@broadcast}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r2, 0x89f1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) connect$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa) splice(r3, 0x0, r5, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r4, 0x407, 0x100004) write$eventfd(r4, &(0x7f0000000240), 0xffffff14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) syz_pidfd_open(0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001e580)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e}, 0x0) 7.913959235s ago: executing program 5 (id=1531): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x50}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xd6}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7", 0x7b}, {&(0x7f0000000300)}], 0x5}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.734556536s ago: executing program 0 (id=1533): mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0xffffffffffffff5a}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x7c, 0x4, 0xb, 0xb, 0x9, 0x81}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r4, 0x1000000, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtaction={0x12c, 0x30, 0x1, 0x0, 0x0, {}, [{0x118, 0x1, [@m_mpls={0x114, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x11, 0x3, 0x1088, 0x9c4}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8035}]}, {0xc4, 0x4, "c9f62a802cdc36139e6efabefc7781071705109539d35e0f85c9fad8beac209d12341f5e51f8ee093981896fb30cb66a6969ac350eeb1acf2ed6041ad938ad25ef6a356641ca50093e83eb53e561a1843cb9945ca38c8ec9a4f6fbabd5e16c3911a042400c7d20fab8da91a31adb0fe11cfbfd468e493622305228fd2f5d025c7c0d4975a22ec8db2a0be408e8dde0b7f7e4f86244ba6ac1241cbdef61cbe2dabb149834ef1f916569bedb81ac9c641ff1ae42d87f70849a485c7e5be0740285"}, {0xc}, {0xc}}}]}]}, 0x12c}}, 0x10) r7 = gettid() ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 7.582870376s ago: executing program 4 (id=1534): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r1 = mq_open(&(0x7f0000000000)='*$\\D\x00', 0x40, 0x101, &(0x7f0000000180)={0x8000000000000000, 0x4bb, 0x8, 0x100000001}) mq_notify(r1, &(0x7f00000001c0)={0x0, 0x3b, 0x1, @thr={&(0x7f0000000280)="5da18501db173e1482a76fb82aed8848bbd5f9f97b9c176e6f5255dc8174bc41a284bae2a717add936386cc4ef8cf6d9d05516997371ef0e28ca08b958c04dc6659b9465cb1222f02365", &(0x7f0000000340)="c2f5225104328a354cd232371d282c87c33cce8f2c4596c17a41bc1c2b62e44caef0bbacd83fd5ed08c79ebccd8af7eb9b1f7182769fd997e438c849045c7d456145651470e61928e8cabfd11938788044136accc9656d19006a6860b250fbfe45e859836949d46a32104ad181259790273329517ed5cc5db468adac1c889715ee7ce7446adb2eae3a47c0d386bd55c6ff56cfaf76b80ed4a9988ec8263f166d9b83dd53e744e0b20ffb0c65de2c8f735ed6aa0f20029fad0ff05812128cf68513c7aa819b"}}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0x2, @vbi={0x6, 0xca0a, 0x5, 0x20343059, [0x8], [0x30dd, 0x7], 0x1}}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x1, r0, 0x4}) 6.771376079s ago: executing program 0 (id=1535): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x400000000000001a, 0x2b, 0x0, r1, 0x1f00}) 6.697256412s ago: executing program 4 (id=1536): r0 = syz_usb_connect$uac1(0x0, 0x87, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d010140000102030109027500030100000009040000000101"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00031a0000001a03ac"]}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}}, 0x0) 6.624415407s ago: executing program 2 (id=1537): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x3541, 0x104) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) r3 = getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f000000b240)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f000000b340)=0xe8) read$FUSE(r0, &(0x7f000000b380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r0, &(0x7f000000d400)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="92d7f470fcb04811a2478a57e3a289edeb1f0ed421e04cc315146bfdd04737b03bf7664b75dd7ae958fd1dadfae8d0a28165b0f3446a28681c93c7b064a42c866c730e702e4000db5c05a67b88c1d062e54870ef814334e06cc37336c708954ff91e37a481201018f28183829b77c5b354b2ec5e41cffda83fe6de7bdf5f991b2dd1b1b12c98315d19fccd44effd9c49aecd1c5f4292fbfacaf0d1b000460f5c91fc8ebc7990", 0xa6}, {&(0x7f0000000380)="1ba8070e5ce32fbf566d6f04f9adcceff47dfac058c4c638dd6855ebd76ecb006e5864d9eaa0231cf695d96b1b16bd1e7b7a8f4c69af849f46416a658da44f8582baba726d5463fb58b6847dddc511acfdc99f342bddfd9ba5a32d527873590ae4bc8bee5d25900e67c8811aa62a76ff09cc2c828745addcb04efe", 0x7b}, {&(0x7f0000000400)="30a09f85cac4c1bf8d32aeace2428d8fc324a34f63f910b910f4992bb03c6a25e2b083d334765311cae88ebfb59c0a637018b03b1389c5d4ec6c2d2cf55933fa9b89ac5f8fe0a3dbdb5bd30acd21a68758efb7666a82921033462fb860d2eefce4a9061bf721be905a0976feb8a47a19d677a11a0a0d0be6dcc6ec59544d15b697b0782fbf2f8117f3e2280c23d25ec3c27af6345f6ba1fc5107ec6d4fd15da40e3b1959eb237a508428b89c00b99cd080d6acda63e60bcd45df8ca39a94a06eb6587ca0f08c80ac7dbd7695bfb9", 0xce}, {&(0x7f0000000500)="7cb7a5c774d405b68f23fc2499849d2be65e18ffce090de0cdebd42194dcd1f6e566355409cd7a8f072e307e86ac2ffca1acfb46260c43f077a6efa8a7588504f86a426f76f80d4df8137515817d7305dd376bdb83684688eda001dd6cac5005a5c85d151be4f9a3a2ddffbb65e51c06b7a3071eb512b2c00c7b014dd6a5f70faff5a92fd7185417d2c21f7fab9b8fe0560d65605352359298f722fccafa57197771b67f9b4d44fdce17e62cf9a55675", 0xb0}], 0x4, &(0x7f00000027c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}], 0x90, 0x4008800}}, {{&(0x7f0000002880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002900)="c201432af9d92a6b4f6b8dfaecc4a2b8c64d5ac3364b7171c2a565931a9d6e94474ab7d7bb0f76043634432fd72b85db333332dc416cffe6845c820d706595cacb34d662f72047c1bbe730b2a947350324c6644fe8b88f88cc88b12c456a295fba7383b570b83696591bb384e3fdd59ee6fc79be0a764e2e2b94592fcf43243fc5899dc224d99610e184a49e20f2bf3c4f43ddb6096b26a2f2bbf09dd35b3046caec97102d54168b26dbaff07c27", 0xae}], 0x1, &(0x7f00000031c0)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}], 0x100, 0x48040}}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000003300)="fc6292faaa1c605881ff5a879c808d9faef8bac31aa7ff6a72d37f96dce7c4313d7a87be25001e874a2baa40e00608cbda1671ce47a9e541f325e6874034cdfcabca2ae1143e07ff88", 0x49}, {&(0x7f0000003380)="37d895b62e6132d718b4988f279719e498fb5f043396aaa981f55a0bd122ada0ce51d6664b11d7d0075d3a172007cdfffe12706aea3be5a7d0c54657617af915b3fc4f", 0x43}], 0x2, 0x0, 0x0, 0x4004090}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003440)="801af4dc35943db19536181243443f7f96cd3bb439c892fa02bb98cddf9220d8c84bbac64385f4979a62af84e903801932754c1da268d19163507b07287bbbf188e503d06a0ec62cf84aafcebe9581acb18007e1b0469f65a7eae81f1eaa8d14ddade5e7eae4ebf5e4dc8656d649bb12b884c176036b87859591ef0650476d8ec4bf563a29d0f7", 0x87}, {&(0x7f0000003500)="79f039d28a4c757564629c629c43ded92475beb8ec8f8fe4964481c12354d108567a759c3cd3e429bc876a64504829b734b9799d5a358207c68a18ca442c7ba40c6545674c0fe2858008f2c821eb140bb839bdb47b2f1bcb9111b008dabdec0e178dfeaa2bcca2159eb81f045c0d", 0x6e}, {&(0x7f0000003580)}, {&(0x7f00000035c0)="e2cf1a4e2ce489c53691f30348ab590da7d3c5a6d31940a837e7623aa225fda45ccf58d91777cdec4c8c4f7ffe98", 0x2e}, {&(0x7f0000003600)="61ef6388fb998cc7746e4dc5f519cb7d9b2d73108d408dd8749796b9206fcfad687c4ea44d73970627f284f1cfc1956eab300cf304f3120b76a41c51583ec381cef3672997017381d44b3b3ec2cb79801d8f3ac6f2ac8a3f923c30fffb133f8f7c48e89713d181798a328b3ecb72f898fdc3cfa4a08fd81f33cbd9735710f956f65628a1fe39e608c3601b05b80d6f4659333daabbe2f100d0d6c8652c733cb80134ed7a9909aea72cf0ace186ed038d4d2d6acfabb333a828f3e0e6cfaa8bfb25155dbeb7f7", 0xc6}, {&(0x7f0000003700)="8be8b9e1b8dfbe6ad4a19e6417633b", 0xf}, {&(0x7f0000003740)="a31a", 0x2}, {&(0x7f0000003780)="9667aa76c3fd6d5e32f0f837de56038f9d2ed078f6c7e17788bdc986b4fdceacba0970fa1f45ccea5ffdb9693a7e13268ca747c402f5ae40c3c345055bdb9c360f0e7bc51663", 0x46}, {&(0x7f0000003800)="2e53caaa5328562e82702bd9e2b1499c5e0a963414001404796bc02dcd860d0e323ce931eb5f9c4a19ae2d6c1df60b1c36fbc028c64c92b392dc57685a7d1ca3e3b8382877cf3117624cb8022297ad71d5e25afd61f4a54a7ecbb055e72f3ec71db4f992019e0d34a33b108be324dceca0e672db02c881ffdef5b3ae2769779662c5ceb673e0cb7c", 0x88}, {&(0x7f00000038c0)="a46a00efd09a6a9c1b59775002c391cd6c0e4f7686011855a488971b8a09aca240781b8b1917e1", 0x27}], 0xa, &(0x7f0000003b00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x10}}], 0x30}}, {{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f00000051c0)="923e52b937cb18f37a6895dd66b12e93ddd32fa13cbaa2ecee3f1fadf13918407e44ff80d5146674", 0x28}, {&(0x7f0000005200)="26cf8aee0696e4721c8a6abdb6dd58a8ab8ba557b662404d4b92ad8e086e9f05973cd4c02c20ccab83c604f80b69cbdcd8e6fe51188ca63ff1f894e254264fcd0d56837ab79e01420efb29d9c0a93119897081cbb42dce03d3c80c16bf74730b0f01b013c043942d11cff00065f523b6bd791ae7fb5a4259a91868bb5d3925061e8e796a2e0f96eeaa8cb2f676e999f1d0270b2420a09c72bf3ff032762694e8b8f8905611d2661db3f0b266", 0xac}, {&(0x7f00000052c0)="0580ccb9270046", 0x7}], 0x3, &(0x7f0000007440)=[@rights={{0x34, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @cred={{0x1c}}], 0x78, 0x20004408}}, {{&(0x7f0000008980)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000009b80)=[{&(0x7f0000008a00)="4750eb75a0221fc8c4a565f5d86774195e71b3a6dc711703703f43b5386168a66f16acfe8c35803ffe991bac951f7299e4a572d721bb57d7ed75001407274156d49e5b2b6e90e952cf82059bd56034ea090666189c060b8d86d2ed59a9ba3c9c1dffc01e6912c4959a4865bb8788c345290b04dd71b75ceb9150a584d5558898cb11a5f78e494e2c6bd6e50faf310d5d660e93e27f862327d23e9d703493bd5e6e3609d6a4e8ff72e71c50c7cb1952207862bdf93656faa1abf79a32c7916aebf8ff7105623a4267b982387c4daf516851eba0a9781dd8cbd08fcf9c4ed5835624f2cc08d26fd5dadea14af3052d43b8d1dc9b01630f6c08150704481c6086094e3f7345a83e3f75c8d0c9614cbff8cb1cbb47e012f12789c0121bce25d7b3d17cb3e1facd39a45b6005675b1e1e4ba590a3a3a8d784747e6820ca408693cd4df4f3b197e08654787627f0736b94748b6b78fdf0372c63495c7c1caae3eac5d26de82c05d307bfe40915f74028db7f2bf9efec77ac1a83c9927fdb01657a8150bcbe26afd51565a4bb726b3a98cfde3c2a806e41bd1a8083cdfb0baa8248582d6e6d40a5b1b84ad4e2532125e573db93004d4ecc8158e13424afe3789fe1e8bf5bcf94f6e37ebaf35387f4051f5e8529907630fea6a52cd2a3b966fd4ddb8d6fbf94db5274b01cd9e6eb0b5f1dde69e95ef50c975b435bb38efdc35811ed105965c174a4c728f0be4bd8a4a10bedc4d45efdf54cd9d26e2a502019327fa2c6583f90c73ab249c49fc1e57f826b738b09f55f7bc81b26843da094ad3b28f95346cb38417560b3eb8982c066763cfa351e0b4aab635c97844e316daa743bef6bbcdc57ed9e1256f528efc271f51157042343208e0877ea0a2f234dcb30a29082ee42a6ee78ad2d598262ad2c7020d71465f62f95476b2ced5219bb867261d925b3da85abddd1a66d4f05d397e00ab7326134d585dcacbd45d0a7cfaccbdf2210f892c06bb7df46ed7b7d8a6b6a00622611ca60ac05ae3f694b43f80bca5aa7f6503b366dbe47f4d198a889c9152f5a39f37d53765ad897d7ee17835b40f3da3dd72068cbb0805bb542cfdfc58f71640e88bb23baabfbc2c99cb5e50a6b3376d9bcd4cf0358861b3927ac889c67e2d00a1743df3a3f578a14942e9082ce58efcaaffcc1684d37f00062deea87b3686cb224236639a484ccbc0191870883d7c303845e7f9054a19c0d4c1efacff63333bb88782337008f39dfb53b0b9197ccc52981d7241a5c421c466b358ba9e94eed351391e64ec6fd21acc2a32deeb203ee250858a8c676cebfa564790a2ef107d665902bd876e20a35f0cacc227e7bcbcf899f4960db59e36ba14fe59e10d4a75f4e09e87f3818d1631080fb588cd0e582b3e2cff00f811b13e424bdae33a49939e421d1aa772bd9c7779f93b4334b5d8788a861bef92713226cb94139a841b4ce6e3e256e344d09628fdaf2b35764705a236a57501a9d29b5b51c23aaea2acab8a06a3204cda9fdb3eddce01286e9426f3fcaac1e31aeef7364fa7f3af09fadc2d828a40859c49193a38f60a24299a178c518e6970b01cc748a07d9352914709c98618154cb69260fc75e6c382d4e98fa8bfa183f5ee94953d9a19bba8efc0b57ce1ee152ed3682c759e6ffe3c6d2e2a134004bd35bae79e8ab2f8209a42aad390d3052040b220d520dd6d2237e6ae1729341e719768939ff5de08c3e1790d2d0f3ccbfd8695244ee9bc59db0ceb2652a4d90afd6f8e5462be6732e27c8ada8f9e7aa1165377aae0965fee04320957ebfecbea67c8849d147177c722b953d038fe9bc7de79aa5e459f31389ee048864c4c701ff91261494f7de0c655d1d58c7976bedca0456c8dd9301f8152f7444d1c109dba0a0c3149dcf4b9665aa28b5447b63bd1e22790946c7627b7ddb7ae37aea9af99070b9d91f46d6736e2531b4fdaf01803ca14207c396113fede4a15c8a4a586c3084ac5285603773e6099f0f1ea312cfd9537eb6745de807321d89e6ebd506cadf49a02526822938d187962f3e95c657678578df7a35ea3cb68b8c7bedb0be6cafe358acbf1b9e2cd0a119b29d9cfb0b651f1906c318b498eb1ed5e455fc52caf1da35ab6f8a59d15046991da09b3ddf76fd9cf506f2ee89a01cdacc9ccd024052d7dc0639536ddf080f35286be35017971d5f927ec211e49ef1a6610d8c2f331c58407e1086a8d9b299c3ace8b2ceb08037aaf877a477d964f22e03da7b793bdeda8572dcc2b8bea648d30e7db6e2da8618cb9ddc146edf4a98f6863ccc23c47b174a8c2cb280a4b5261d2fb2e829bf67c5bdc23cae21c827c68aa20e211958d1563f6cbd79b334ead70e6c152ab48b71fe2da905723c18866df3e27e5e6dbeed0a016e2ad858674222bc36a9c4feabd3380d31b8ca118ada132038a703adadee72864554053dc472e09ffd1886123fc07b4c7fbc86790b64fdf0b2ac2996134ac309625a9cba5053791ae03b231a331dde10b772c87159b417187cbfd49b89b3d1ac16deb121709245478705a9fd55445efaea58472a40028679169bfe2537310da69891dca29e22b68179310159ee0c85aa856cac4b4589814c28d635427e87781cf0235d18a6012d9fd6fcc2268ba01655347b42c09802c7dd51ce6a7589570e629de4f491e10ae0d6f9162689a1ab16bc2fe51fc60992baaf81f379e928518dd952b91abb8626441f52397a0ee35d271f1cffbe71c8645f1ce02e1f06552b3412cb795009a2c2af22375de11c8be0661448358c54d643bd05362043bd8f1b8c122c788e3e80af0cc81ee7a884e94e317a4adb65442aa8143d2a4770f243c46ccdd1dff4fa6015040d0e55bef86f66c8797dc042a4ec6ddc5f06b642eef97cbe03373a9c0142e04b465612862b030f2bb1264cc9eed8fb1fc13438c416ad389d0aba05f773fae11c3817b296098a574a1469b146748dbcf79ad67584cc4ac841311a10c67d9c8c239eecc31415b97c246e22e212e6b8c3dcfa3ba3ff0379637d1c8f88e921c8a738f049351e820ca6b6a0e060f6d830d2b041e4854559a5f9ec94cdb58ef978a355669733c1296960fb8551f631f420785447f9cdb3b5edbee399fbdeb87d1811386d9a9610fa8d6df6d2efdfe72f543bb8355e0481a697a22bf241fbb63009fc60ecb71e4a032555d84e4edb9a5765473aaed63f000155408d9e37c38e9a2f02b7815255fbfc6441f216d3441c0c81cd08e68b6dc37de67a6837a35519aae60e291209cbb4edc1318aefbc024c27dc560183ee5abf331a759670052c8a8d60b89b1dd9ba4b03d629841cc7407e02d8f8d1cfe54048aa544e60ad6e066b96c807d7d8d6f98fb7e929d9f8a4e3811f32b4a4a05dc15f9dc88b283a4dd4048279fd0a6400e5a15447d75d6774d6b229244f204e8b485a55b31a4d4f32bc0295fae6532973e5df34652ba471017901d482f9f07d3dcd7640b0e27ceba9ae0ed7f54e182b44bcf33e56031317153d9f5080e0ef8a3b040b9a529bd094b6e371c93a3412b14c858d2252ae5f5ad861c1c0c3c4ace2df31077254b22f2a086897207daa668ce8504ee45e7d5faa9df53557ff8e1e97af725b50279954bd8f234dbece30ef40436d894e5e4d8fb16d30aaefeda31460334c8943084d44b6684a40ccd7e81e1f6a96dfa9814cefe04c6b71b43675f5c56449ad8ec843f655fcbb3bde18dc05e025a439b8111dc8dd6eb0aa5704a466de8e18e88834a72d103241e4c4ff7dfafbb2e3ed62adf43c4f8716c2dc7e98be3e9cc4fb4e8ce5e2176c6b4aad0b418837012252e5adfe2eb60079319052f281299ef7b22afda65dbe81c7f79e60a697dd4151e22fbcd4519fcebb94c79ad24853ce43bf6ca1d320a2a0fe5f67f8b8d038bf59871840093cb0f4adbca19cea76f63792de331c3e432c10665a3964182a4316a15b71d24f388021395db899d2f2605a9b063ba241165b8955734e6837fbb92ebf6ce9be1e6b439d7753a2fa87664e44c51321f18940d0ac2361b3eb4e90cc7e7d50ae98e19b929202a1a6141197f55f6b9835e90fea27a4db06a0b7edf6481a604511cfba59ca9a18c7bcac20c2914ee82120337a546c33875b91652eb76fa94306a9babe97e9127f68c01a0100e855721707d84364427b11a423951ab598f9e7c7d1771002a958eb6e22a6dd106d784acca6330dab9cbc6b10f99729cb57232eaf9b53d69f02a103e629520447f59ea0efaabbe40f9e73d23e0dc5a53648396f980743ff3a9578522884b619075c811aaf3a328d586f6df742b788ef14e9dc17c6445fc0b044a6123add32549668108ce20c544f3be22e30115306b1fd371c4ed95c3fb6592b9828a6f32e57c137bd3a5abe848eb222260e408dd60c39b2d3d2e865d050e418316ee32477973070fd86f0a561c70ca4fb29231f507b9e7f45ad50f7b249ba881cda32052ed585a5ba76b16dab2378e9eee8d696ec9b6006fed836806dc22bc29cdd764835798eeabc32860ef7fe750034534b3fa939216b7f351b9854c724b1adecc5da988adf1ae1a77690146e66fe6593ca86feacbe3612b202ddc3fceb194d67c2149efe08596f0cb7e34381e7d24386c7e6a74dfff9d88b039c9ff73396b535afbda684e4d30c34be24ec2616a701c30033c53e51087ed3ff5c38604458e89f8794aa0919b3e18e41c3ebbc7f320c9eb19a83ca31d8baf2bc9ee1a5ee099dc3f8ac254f05cc7bdbba7b306058f92af8909facfe90819145529ac7c13fa6cfe3b0dc784c027145b20505a4137df57f8ba7483da2db471259f8c3f499472ddd58e1bdf243dbf81a4ce9f339c9a444de90289b3d298fb465275f708b16661660418ad01e53eaa5cc12f92809ad92d8e5fe916197c5460d680de01fef93910703d6f96051402e80d7186a05a83eeec88cb48c7cc88fd3fa7a27b9454b6e3901162d4f76a7c13d0c1e34d2365718681fa0a8f82842556eb19c75b671a2db6bf951ac47e2e8a836556cef93dbe00439afa75a5844d75c1cddbad4063635eecf6e926fe5a610d6acc9524a79336ae4fd01c4f8981fbe75603de1902a959a8bbe2135f2c7039fcbbfd079a99d7782f04461dcdcd0be515b983e3b13e2fe7a6bf5d14c527c47b8b35b119b417f84281f30ad9d119a39cc8c36df880bf764c655572308b968da9cd30bebd4f4654c12307c765eefabe86ff07af846f4a928a992f53d6d858457f3fe614deebfe5e4ff3e388d24a1cf60dd5706bd77b478ca79eec6c446c92309f9c835439358b241e7fc378c3026f54adbefbf742d280f1d4e63c70ba3bfb9ba524d358d702c956469c35727e9edc43c1208c73be455b440f883da05fc17f12da2d03f2be32384ad7017dc9f4c9debf01b0913b58a8888e7a304b5e79b6d34f1cfb776fe8531651ba49ced35025df6e453cf0cbe7c55273d2f55fe4b68860c361ec6cfd04998746e17815d02a7fdd96e519fc5985c7c463c6fb687fa978b997742352ea473f938cf249013f6944d86418609bbd9e59a9db8e56c78194c25a64442e63f176dcacee221458763c1b954eca5ceabc5de919246f101391a39569cd13774bcf5d4016fd989028c1f35fd2430568480f292405aada63ee40770d57e47ade0c94b707dba1cddf6e4454fee1160acd40f479d8c1ca7db2f2915e512e4e88eb7e7dac1161b49e6f3a7a59ccc5af6e4e1029ab5d09c207ad0d9b86873bee28ffcad934ede7dbeee8a5bbf038e7989f3e8dea838c4437440011fdf7546fe3c304a89ebcef58d3126", 0x1000}, {&(0x7f0000009a00)="9b28eafc80a2b1f1263f76b089dd9d036251d39ea590db2af34f8b7f5597749ef461ae4f8c8c786c46000a164a827aafaeefe0c11787f53188ef572640a9652f54f0", 0x42}, {&(0x7f0000009a80)="5f13e97979306dbef4ffa6667af4971832d30e235fce079ce36e3c12e44565b9a32420a8985f696ee067bd5689bdf4b8659e246e7c091437366316f60a15ed2ccfb3f809b700e9457ed3d972b144dce4b1961b3311c582cdd7ec82190b0e4bd3e3bf515667e280713519ecffb8c9ae34b7c0e43b02d82ed757a5880490fa53d808af2dce6a3fc5dcdb30142a20234ef5452ef05a9ab59b5fb35efe5a38d49b3a96ba2548c6a8f6acb44ea28927987251282c7200eb062a70778e4f066b91d92bf0bfb714dd12dc94ee9d700155e23c4ab53022", 0xd3}], 0x3, 0x0, 0x0, 0x8040}}, {{&(0x7f0000009e00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f000000b1c0)=[{&(0x7f0000009e80)="12d65724201fba49fb7eabefdaf069e93113576c7731544df73cc533cf282c6ba1a9342ce5ad5d5d978efe80b12f1e258c9c7c41ca1c44adab7dda986f4e903218cb124259b36d0219c74155f71651db7e4c08889238b3ac26546ba8bf6cd9b4d68c0d09340be2c3b82c696f284351f5a36d7e72b21ddd27c179c5317b47283b00fe2cad2adf54a0685bb5ed4a683342992069d765dc9e93745a0e", 0x9b}, {&(0x7f0000009f40)="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", 0x1000}, {&(0x7f000000af40)="5179fcb7787b50ad201fb3297e5ccea85b8dffcb848909a6b3f8f60b769afd66513f9bc91d8b23c5aa83d803ace4423bc36abcc269a4fa053d", 0x39}, {&(0x7f000000afc0)="cab69de3ddda9deb6fb1c28c2166abf24c0eb1e2715616ff5c7a65aad4f86b0036b5776c3cdeece93a9f79294d12c0f7c83562f1a284d2b190cf9f8158e83887ecb018d27f77f50c636baf042ed6156e51a17279dbd2fe7c455de44b5485003751fab1fe12d6f2a1ef9de25172f9d9fd8210752e7cc9f3771eb7771509bd642a0e5bb9dfd93c1d5c3140dfa5f1ae2456398010ce2e89e7287ef5bb8ae4ab55a7d3bff1df95ccdb831f3a9a946cf381baf5d099150b303fc45d69ae116bb4f0caa7ec", 0xc2}, {&(0x7f000000b0c0)="32b2b2b8e1224fc35af3ebcda891fa5c6f82f2e3d964a66397a9a33ac7c464042c598c67ae38ad961a96ad5688ba120ab874d120de2777a2465070f83730ae", 0x3f}, {&(0x7f000000b140)="98ef60f81112b4ac296d914a27fe5a5eaa5ec4a30fbadb815f116acee538525b0a0fb8f290998e1330f65f0c6585ddf46424b39dd86581aef8c9fbf643c003748337009bbc70", 0x46}], 0x6, &(0x7f000000d3c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x20}}], 0x7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r10}) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r11, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) 6.53536868s ago: executing program 0 (id=1538): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x9, @empty}, 0x1c) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r1, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x3) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x1, 0xffff, 0xa, 0x67, 0x1}) 5.692322775s ago: executing program 2 (id=1539): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4050000000000000000950000000000000005eed401f9d3cef548128ed16572c16d76b50f7ef4e1f98a78f567076d67529b91c13af02344a05f253b1acc3bbf80270cf3dab0f21f8adce41fc90d55caf04c938633c06735e716bb9e8df309320ec698a443165f686064a7582f9cd7b150c35d29abe4ff41ed4983b9b9a9fb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf8, 0x48, 0xf3, 0x8, 0xc72, 0xc, 0xdf29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4b, 0x0, 0x2, 0x67, 0x72, 0xe, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x6, 0x3, 0x23}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x3, 0x7, 0x8a}}]}}]}}]}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) fsmount(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffe, 0x6, 0xf, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="000039302ce8", 0xfffffffffffffffd, 0x12f67568, 0x16, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r2}, 0x18) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x2, @mcast2, 0xc}], 0x1c) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = getpid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x10, 0xffff834d, {r4}, {0xee00}, 0x10000, 0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000002740)={'pcl816\x00', [0x4f27, 0x6, 0x3, 0x5, 0x5, 0x1100cc5, 0xc, 0x8a, 0xb, 0xe8aa, 0x2, 0x1, 0xffffbffd, 0x80000001, 0x5, 0x4, 0xe, 0x1a448, 0x3ff, 0x40000003, 0x200099, 0xcaa7, 0x0, 0x20001e57, 0x7, 0xe6b, 0x3c, 0x80d0, 0x2, 0x8, 0xfce]}) setpriority(0x0, r5, 0x2) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x0, 0xffff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) getpid() 5.424592388s ago: executing program 5 (id=1540): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES16, @ANYRES8=0x0], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0220000000100000140012800b0001006c6f7770616e000004000280532ff7305314fca979e04c4228c44c40cbb5b88390c8e06ff2f7c936cbebbb8defebbf"], 0x34}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x40002000}) io_setup(0xf6, &(0x7f0000000380)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x406, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) timer_create(0xa, 0x0, &(0x7f0000000280)=0x0) timer_settime(r4, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) pselect6(0x40, &(0x7f0000000040)={0x80000000, 0x0, 0x3, 0xffffffff, 0x4, 0x7, 0xd4, 0x2}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x15) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000002c0)="baa000b8ae38efb805008ec83e0f32650f090f01bdf79075000f20d86635200000000f22d8f30fbc9ffa1f360f215e2ef30f1ee7", 0x34}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) rt_sigaction(0xe, &(0x7f00000000c0)={&(0x7f0000000180)="f30f1efc6645f10f0808c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b2c0000653ed9fa", 0x80000004, 0x0, {[0x7ffc]}}, 0x0, 0x8, &(0x7f0000000200)) r9 = syz_usb_connect(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="40142e000000ae4bb3"], 0x0, 0x0}) syz_usb_control_io$sierra_net(r9, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.363972564s ago: executing program 0 (id=1542): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r0], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000006c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) 5.267433258s ago: executing program 0 (id=1544): socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r2, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x4000) ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8004500b, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00\b\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="9e36d449b388dd965f7ade1a86dd", 0x0, 0x10727, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000a6b32f6e8a45bac47f7a579b04b147039f7d8d3312fac2da35576e75a04576d9e"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x1a, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000d2a07cfbd1f7006d39f97e3f4044f96c789367110f60f8a756066911af7d30cfcbcd846a8e9261a0041cef2389f1fec34461117af0b057a016e9425136e6c0e7cb6eb632edd0c9687239145f3d183493b0210d5f238e322413d6d25405a9475d881b390d0da41b0af2060f9ba8a7588d039ea05d7956543a02ee17c5", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000000240)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x18) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x2}, 0x1c) socket(0xf, 0x80000, 0xa) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x406}}}, 0x7) sendmmsg$inet6(r8, &(0x7f0000003340)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x200, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x14000001) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.37285841s ago: executing program 1 (id=1545): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) io_uring_setup(0x1c10, &(0x7f0000002040)={0x0, 0xd1d2, 0x1, 0x1, 0x221}) 3.971247013s ago: executing program 1 (id=1546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) flistxattr(r0, &(0x7f0000000080)=""/202, 0xca) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, 0x0, 0x4000000) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 3.079896224s ago: executing program 1 (id=1547): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setpriority(0x0, r1, 0x10000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lchown(&(0x7f00000001c0)='./file1\x00', 0x0, 0xee01) 2.50785333s ago: executing program 2 (id=1548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xb, 0xfffff038}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) read$char_usb(r7, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) dup(r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r8, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000102, 0x0, 0x8}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) setpriority(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 2.447198354s ago: executing program 5 (id=1549): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004bc0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24004084) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x40084503, &(0x7f0000000540)=0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) setsockopt$inet6_int(r5, 0x29, 0xc9, &(0x7f0000000140)=0x7, 0x4) write$char_usb(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000004c80)={0x0, 0x0, &(0x7f0000004c40)={&(0x7f0000004c00)={0x14, r1, 0x800, 0x30bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/notes', 0x101000, 0x1) 2.257801506s ago: executing program 5 (id=1550): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x50}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xd6}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7", 0x7b}, {&(0x7f0000000300)}], 0x5}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.247669798s ago: executing program 4 (id=1551): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x28) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.146937004s ago: executing program 1 (id=1552): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) close(0x3) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x4) (async) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x4) 2.007341019s ago: executing program 1 (id=1553): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1ad841, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) fstat(r2, &(0x7f0000003d40)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000003c0)={0x2b, 0x1, 0x0, "a6892d080000000e5dedae4d40137137c17a5ac1f393f65946a68dd1f8822c88", 0x34324142}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000010, &(0x7f0000001240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@directio}]}}) 1.462323423s ago: executing program 0 (id=1554): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4050000000000000000950000000000000005eed401f9d3cef548128ed16572c16d76b50f7ef4e1f98a78f567076d67529b91c13af02344a05f253b1acc3bbf80270cf3dab0f21f8adce41fc90d55caf04c938633c06735e716bb9e8df309320ec698a443165f686064a7582f9cd7b150c35d29abe4ff41ed4983b9b9a9fb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf8, 0x48, 0xf3, 0x8, 0xc72, 0xc, 0xdf29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4b, 0x0, 0x2, 0x67, 0x72, 0xe, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x6, 0x3, 0x23}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x3, 0x7, 0x8a}}]}}]}}]}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) fsmount(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffe, 0x6, 0xf, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="000039302ce8", 0xfffffffffffffffd, 0x12f67568, 0x16, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r2}, 0x18) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x2, @mcast2, 0xc}], 0x1c) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = getpid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x10, 0xffff834d, {r4}, {0xee00}, 0x10000, 0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000002740)={'pcl816\x00', [0x4f27, 0x6, 0x3, 0x5, 0x5, 0x1100cc5, 0xc, 0x8a, 0xb, 0xe8aa, 0x2, 0x1, 0xffffbffd, 0x80000001, 0x5, 0x4, 0xe, 0x1a448, 0x3ff, 0x40000003, 0x200099, 0xcaa7, 0x0, 0x20001e57, 0x7, 0xe6b, 0x3c, 0x80d0, 0x2, 0x8, 0xfce]}) setpriority(0x0, r5, 0x2) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x0, 0xffff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) getpid() 1.001782143s ago: executing program 1 (id=1555): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) socket(0x40000000015, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e00, 0x4}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8004) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x4, 0x4, 0x1, 0x1, 0x80000001}, 0x20) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0xff96}, {0x6, 0x0, 0x1}]}}, @NHA_OIF={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) 952.739125ms ago: executing program 2 (id=1556): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0xffff0000, 0x0, 0x448d3}, 0x800) 859.371627ms ago: executing program 2 (id=1557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) flistxattr(r0, &(0x7f0000000080)=""/202, 0xca) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, 0x0, 0x4000000) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 0s ago: executing program 2 (id=1558): write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@bridge_delvlan={0x24, 0x71, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000002e00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002e40)=ANY=[@ANYBLOB="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"], 0x2b58}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r2 = syz_io_uring_setup(0x5c4, &(0x7f0000000100)={0x0, 0xb601, 0x800, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x1e}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x800448d2, &(0x7f0000000000)) kernel console output (not intermixed with test programs): :715): avc: denied { mounton } for pid=9660 comm="syz.4.1028" path="/208/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 320.153291][ T9675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'. [ 320.197260][ T30] audit: type=1400 audit(1761206487.036:716): avc: denied { ioctl } for pid=9676 comm="syz.4.1032" path="socket:[37668]" dev="sockfs" ino=37668 ioctlcmd=0x6101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 320.277945][ T30] audit: type=1400 audit(1761206487.066:717): avc: denied { accept } for pid=9676 comm="syz.4.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 320.983055][ T5823] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 321.795875][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 322.657859][ T9714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.732815][ T9716] dvmrp1: entered allmulticast mode [ 322.929908][ T30] audit: type=1400 audit(1761206489.766:718): avc: denied { setopt } for pid=9719 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 323.107352][ T30] audit: type=1400 audit(1761206489.946:719): avc: denied { ioctl } for pid=9719 comm="syz.1.1046" path="socket:[37764]" dev="sockfs" ino=37764 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 323.131986][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.610377][ T30] audit: type=1400 audit(1761206490.046:720): avc: denied { create } for pid=9727 comm="syz.0.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 323.633638][ T30] audit: type=1400 audit(1761206490.046:721): avc: denied { write } for pid=9727 comm="syz.0.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 323.686433][ T30] audit: type=1400 audit(1761206490.526:722): avc: denied { listen } for pid=9730 comm="syz.2.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 323.715227][ T30] audit: type=1400 audit(1761206490.526:723): avc: denied { accept } for pid=9730 comm="syz.2.1049" lport=36339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 323.819228][ T9742] mkiss: ax0: crc mode is auto. [ 324.000587][ T9744] mkiss: ax0: crc mode is auto. [ 324.053068][ T1549] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 324.574926][ T30] audit: type=1400 audit(1761206491.056:724): avc: denied { setopt } for pid=9743 comm="syz.0.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 324.616187][ T1549] usb 3-1: device descriptor read/64, error -71 [ 325.025855][ T1549] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 325.203117][ T1549] usb 3-1: device descriptor read/64, error -71 [ 325.229870][ T30] audit: type=1326 audit(1761206492.066:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.5.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe4b8efc9 code=0x7ffc0000 [ 325.322470][ T1549] usb usb3-port1: attempt power cycle [ 325.323212][ T30] audit: type=1326 audit(1761206492.066:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.5.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbe4b8efc9 code=0x7ffc0000 [ 325.356847][ T30] audit: type=1326 audit(1761206492.066:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.5.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbbe4b8efc9 code=0x7ffc0000 [ 325.380057][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.381286][ T9765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.715461][ T1549] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 325.927222][ T1549] usb 3-1: device descriptor read/8, error -71 [ 326.183224][ T1549] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 327.055316][ T1549] usb 3-1: device descriptor read/8, error -71 [ 327.174543][ T1549] usb usb3-port1: unable to enumerate USB device [ 330.721605][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 330.721619][ T30] audit: type=1400 audit(1761206497.556:759): avc: denied { ioctl } for pid=9803 comm="syz.0.1070" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 330.751482][ T9808] FAULT_INJECTION: forcing a failure. [ 330.751482][ T9808] name failslab, interval 1, probability 0, space 0, times 0 [ 330.773898][ T9808] CPU: 0 UID: 0 PID: 9808 Comm: syz.4.1073 Not tainted syzkaller #0 PREEMPT(full) [ 330.773923][ T9808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 330.773933][ T9808] Call Trace: [ 330.773938][ T9808] [ 330.773945][ T9808] dump_stack_lvl+0x16c/0x1f0 [ 330.773974][ T9808] should_fail_ex+0x512/0x640 [ 330.773993][ T9808] ? fs_reclaim_acquire+0xae/0x150 [ 330.774014][ T9808] should_failslab+0xc2/0x120 [ 330.774034][ T9808] __kmalloc_noprof+0xdd/0x880 [ 330.774059][ T9808] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 330.774085][ T9808] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 330.774103][ T9808] tomoyo_realpath_from_path+0xc2/0x6e0 [ 330.774126][ T9808] ? tomoyo_profile+0x47/0x60 [ 330.774150][ T9808] tomoyo_path_number_perm+0x245/0x580 [ 330.774175][ T9808] ? tomoyo_path_number_perm+0x237/0x580 [ 330.774203][ T9808] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 330.774230][ T9808] ? find_held_lock+0x2b/0x80 [ 330.774275][ T9808] ? find_held_lock+0x2b/0x80 [ 330.774295][ T9808] ? hook_file_ioctl_common+0x145/0x410 [ 330.774323][ T9808] ? __fget_files+0x20e/0x3c0 [ 330.774345][ T9808] security_file_ioctl+0x9b/0x240 [ 330.774365][ T9808] __x64_sys_ioctl+0xb7/0x210 [ 330.774390][ T9808] do_syscall_64+0xcd/0xfa0 [ 330.774418][ T9808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.774435][ T9808] RIP: 0033:0x7f4ae698efc9 [ 330.774448][ T9808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.774463][ T9808] RSP: 002b:00007f4ae786a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.774479][ T9808] RAX: ffffffffffffffda RBX: 00007f4ae6be5fa0 RCX: 00007f4ae698efc9 [ 330.774490][ T9808] RDX: 0000200000000080 RSI: 000000004048aecb RDI: 0000000000000006 [ 330.774500][ T9808] RBP: 00007f4ae786a090 R08: 0000000000000000 R09: 0000000000000000 [ 330.774510][ T9808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.774520][ T9808] R13: 00007f4ae6be6038 R14: 00007f4ae6be5fa0 R15: 00007ffef4b85aa8 [ 330.774546][ T9808] [ 330.774573][ T9808] ERROR: Out of memory at tomoyo_realpath_from_path. [ 331.005447][ T30] audit: type=1400 audit(1761206497.846:760): avc: denied { setopt } for pid=9803 comm="syz.0.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 331.043815][ T9806] syz.0.1070 (9806): /proc/9803/oom_adj is deprecated, please use /proc/9803/oom_score_adj instead. [ 331.108228][ T9810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.133324][ T9810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.181104][ T30] audit: type=1400 audit(1761206498.016:761): avc: denied { create } for pid=9811 comm="syz.4.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 331.231999][ T30] audit: type=1400 audit(1761206498.046:762): avc: denied { bind } for pid=9811 comm="syz.4.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 331.815326][ T30] audit: type=1400 audit(1761206498.656:763): avc: denied { mount } for pid=9819 comm="syz.5.1078" name="/" dev="rpc_pipefs" ino=38229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 333.507541][ T30] audit: type=1326 audit(1761206500.346:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9848 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 333.621051][ T30] audit: type=1326 audit(1761206500.346:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9848 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 333.646478][ T30] audit: type=1326 audit(1761206500.366:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9848 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 334.153048][ T30] audit: type=1326 audit(1761206500.366:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9848 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 334.222106][ T30] audit: type=1326 audit(1761206500.366:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9848 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 335.745684][ T9862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.755117][ T9862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.927256][ T5823] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 336.114858][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 336.114909][ T30] audit: type=1400 audit(1761206502.946:784): avc: denied { map } for pid=9861 comm="syz.1.1090" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 336.144708][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.153635][ T30] audit: type=1400 audit(1761206502.986:785): avc: denied { write } for pid=9861 comm="syz.1.1090" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 336.176312][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.641674][ T9867] binder: 9861:9867 ioctl c0306201 0 returned -14 [ 337.203579][ T9889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.609008][ T30] audit: type=1400 audit(1761206504.446:786): avc: denied { read } for pid=9891 comm="syz.2.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 337.760390][ T30] audit: type=1326 audit(1761206504.586:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313c58efc9 code=0x7ffc0000 [ 337.796178][ T30] audit: type=1326 audit(1761206504.586:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313c58efc9 code=0x7ffc0000 [ 337.819763][ T30] audit: type=1326 audit(1761206504.586:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f313c58efc9 code=0x7ffc0000 [ 337.843017][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.899089][ T30] audit: type=1326 audit(1761206504.586:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313c58efc9 code=0x7ffc0000 [ 337.922388][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.945325][ T30] audit: type=1326 audit(1761206504.586:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313c58efc9 code=0x7ffc0000 [ 338.067840][ T30] audit: type=1326 audit(1761206504.596:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f313c58efc9 code=0x7ffc0000 [ 338.091124][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.098007][ T30] audit: type=1326 audit(1761206504.596:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313c58efc9 code=0x7ffc0000 [ 338.181841][ T9898] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1100'. [ 338.761024][ T9903] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1102'. [ 338.930423][ T9909] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 338.939638][ T9909] netlink: 'syz.5.1103': attribute type 10 has an invalid length. [ 338.949771][ T9909] mac80211_hwsim hwsim28 wlan1: left allmulticast mode [ 338.966950][ T9909] bond0: (slave wlan1): Opening slave failed [ 339.116756][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1099'. [ 339.129113][ T9905] openvswitch: netlink: Flow key attr not present in new flow. [ 339.808671][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 339.943954][ T5823] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 339.953359][ T5823] Bluetooth: hci2: Injecting HCI hardware error event [ 339.961810][ T5823] Bluetooth: hci2: hardware error 0x00 [ 340.003063][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 340.064303][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 340.072845][ T24] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 340.103044][ T24] usb 1-1: config 4 has no interface number 0 [ 340.109124][ T24] usb 1-1: config 4 interface 30 has no altsetting 0 [ 340.233364][ T24] usb 1-1: string descriptor 0 read error: -22 [ 340.239612][ T24] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 340.248703][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.286778][ T24] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 340.294075][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 340.301711][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 340.329604][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 340.340748][ T24] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 340.349532][ T24] usb 1-1: media controller created [ 340.356104][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 340.362014][ T24] dw2102: i2c transfer failed. [ 340.367359][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 340.373391][ T24] dw2102: i2c transfer failed. [ 340.378227][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 340.384059][ T24] dw2102: i2c transfer failed. [ 340.388952][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 340.394804][ T24] dw2102: i2c transfer failed. [ 340.399598][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 340.405441][ T24] dw2102: i2c transfer failed. [ 340.410329][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 340.416149][ T24] dw2102: i2c transfer failed. [ 340.420934][ T24] dvb-usb: MAC address: 02:02:02:02:02:02 [ 340.462397][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.486462][ T9900] dvb-usb: bulk message failed: -22 (3/0) [ 340.497035][ T9900] dw2102: i2c transfer failed. [ 340.508588][ T9900] dvb-usb: bulk message failed: -22 (4/0) [ 340.516592][ T9900] dw2102: i2c transfer failed. [ 340.522138][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 340.528071][ T24] dw2102: command 0x0e transfer failed. [ 340.541006][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 340.547000][ T24] dw2102: command 0x0e transfer failed. [ 340.697727][ T9919] FAULT_INJECTION: forcing a failure. [ 340.697727][ T9919] name failslab, interval 1, probability 0, space 0, times 0 [ 340.729683][ T9919] CPU: 0 UID: 0 PID: 9919 Comm: syz.5.1107 Not tainted syzkaller #0 PREEMPT(full) [ 340.729704][ T9919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 340.729710][ T9919] Call Trace: [ 340.729713][ T9919] [ 340.729718][ T9919] dump_stack_lvl+0x16c/0x1f0 [ 340.729737][ T9919] should_fail_ex+0x512/0x640 [ 340.729750][ T9919] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 340.729767][ T9919] should_failslab+0xc2/0x120 [ 340.729779][ T9919] kmem_cache_alloc_noprof+0x75/0x6e0 [ 340.729794][ T9919] ? ptlock_alloc+0x1f/0x70 [ 340.729811][ T9919] ? ptlock_alloc+0x1f/0x70 [ 340.729823][ T9919] ptlock_alloc+0x1f/0x70 [ 340.729836][ T9919] pte_alloc_one+0x84/0x350 [ 340.729849][ T9919] __pte_alloc+0x6d/0x380 [ 340.729860][ T9919] ? __pfx___pte_alloc+0x10/0x10 [ 340.729871][ T9919] ? do_raw_spin_lock+0x12c/0x2b0 [ 340.729884][ T9919] do_pte_missing+0x282c/0x3ba0 [ 340.729899][ T9919] ? do_raw_spin_unlock+0x172/0x230 [ 340.729911][ T9919] ? _raw_spin_unlock+0x28/0x50 [ 340.729924][ T9919] ? __pmd_alloc+0x64f/0x8b0 [ 340.729939][ T9919] __handle_mm_fault+0x1556/0x2aa0 [ 340.729955][ T9919] ? mt_find+0x3e2/0xa20 [ 340.729965][ T9919] ? __pfx___handle_mm_fault+0x10/0x10 [ 340.729978][ T9919] ? __pfx_mt_find+0x10/0x10 [ 340.729995][ T9919] ? find_vma+0xbf/0x140 [ 340.730005][ T9919] ? __pfx_find_vma+0x10/0x10 [ 340.730017][ T9919] handle_mm_fault+0x589/0xd10 [ 340.730031][ T9919] ? __pkru_allows_pkey+0x11/0xb0 [ 340.730042][ T9919] do_user_addr_fault+0x7a6/0x1370 [ 340.730054][ T9919] ? rcu_is_watching+0x12/0xc0 [ 340.730070][ T9919] exc_page_fault+0x64/0xc0 [ 340.730085][ T9919] asm_exc_page_fault+0x26/0x30 [ 340.730095][ T9919] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 340.730107][ T9919] Code: c4 10 e9 84 3c 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 [ 340.730117][ T9919] RSP: 0018:ffffc9000425fd58 EFLAGS: 00050202 [ 340.730126][ T9919] RAX: 0000000000000001 RBX: 0000200000000080 RCX: 0000000000000004 [ 340.730132][ T9919] RDX: fffff5200084bfb8 RSI: 0000200000000080 RDI: ffffc9000425fdc0 [ 340.730138][ T9919] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff5200084bfb8 [ 340.730144][ T9919] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 340.730150][ T9919] R13: ffffc9000425fdc0 R14: ffff8880781c8000 R15: 0000200000000080 [ 340.730164][ T9919] _copy_from_user+0x98/0xd0 [ 340.730178][ T9919] nr_setsockopt+0x2d6/0x470 [ 340.730190][ T9919] ? __pfx_nr_setsockopt+0x10/0x10 [ 340.730203][ T9919] ? selinux_socket_setsockopt+0x6a/0x80 [ 340.730221][ T9919] ? __pfx_nr_setsockopt+0x10/0x10 [ 340.730232][ T9919] do_sock_setsockopt+0xf3/0x1d0 [ 340.730250][ T9919] __sys_setsockopt+0x1a0/0x230 [ 340.730265][ T9919] __x64_sys_setsockopt+0xbd/0x160 [ 340.730277][ T9919] ? do_syscall_64+0x91/0xfa0 [ 340.730291][ T9919] ? lockdep_hardirqs_on+0x7c/0x110 [ 340.730306][ T9919] do_syscall_64+0xcd/0xfa0 [ 340.730321][ T9919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.730331][ T9919] RIP: 0033:0x7fbbe4b8efc9 [ 340.730339][ T9919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.730348][ T9919] RSP: 002b:00007fbbe5aaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 340.730357][ T9919] RAX: ffffffffffffffda RBX: 00007fbbe4de5fa0 RCX: 00007fbbe4b8efc9 [ 340.730363][ T9919] RDX: 0000000000000001 RSI: 0000000000000103 RDI: 0000000000000004 [ 340.730369][ T9919] RBP: 00007fbbe5aaa090 R08: 0000000000000004 R09: 0000000000000000 [ 340.730375][ T9919] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 340.730381][ T9919] R13: 00007fbbe4de6038 R14: 00007fbbe4de5fa0 R15: 00007fffe48a9b68 [ 340.730395][ T9919] [ 341.094605][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.107168][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 341.112922][ T24] dw2102: command 0x0e transfer failed. [ 341.118480][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 341.124239][ T24] dw2102: command 0x0e transfer failed. [ 341.130017][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 341.135798][ T24] dw2102: command 0x51 transfer failed. [ 341.141332][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 341.147772][ T24] dw2102: i2c probe for address 0x68 failed. [ 341.154135][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 341.159890][ T24] dw2102: i2c probe for address 0x69 failed. [ 341.166240][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 341.172004][ T24] dw2102: i2c probe for address 0x6a failed. [ 341.190229][ T24] dw2102: probing for demodulator failed. Is the external power switched on? [ 341.219573][ T24] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 341.290823][ T9922] netlink: 'syz.5.1108': attribute type 13 has an invalid length. [ 341.323484][ T24] rc_core: IR keymap rc-tt-1500 not found [ 341.329295][ T24] Registered IR keymap rc-empty [ 341.571520][ T24] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 341.663128][ T24] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input30 [ 341.702112][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 341.702127][ T30] audit: type=1400 audit(1761206508.536:811): avc: denied { read } for pid=5170 comm="acpid" name="event4" dev="devtmpfs" ino=5043 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.731272][ T24] dvb-usb: schedule remote query interval to 250 msecs. [ 341.747141][ T24] dw2102: su3000_power_ctrl: 0, initialized 1 [ 341.753383][ T24] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 341.764203][ T30] audit: type=1400 audit(1761206508.536:812): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=5043 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.816834][ T30] audit: type=1400 audit(1761206508.536:813): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=5043 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.830581][ T24] usb 1-1: USB disconnect, device number 41 [ 341.841697][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.924357][ T9937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.005762][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 342.011814][ T5889] dw2102: i2c transfer failed. [ 342.063179][ T5823] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 342.349359][ T24] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 342.362733][ T9944] sp0: Synchronizing with TNC [ 342.375994][ T9944] Bluetooth: Invalid byte 02 after esc byte [ 342.406025][ T9944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1114'. [ 342.416391][ T9944] input: syz1 as /devices/virtual/input/input31 [ 342.485163][ T9867] syz.1.1090 (9867): drop_caches: 2 [ 342.588296][ T9949] netlink: 'syz.4.1115': attribute type 11 has an invalid length. [ 342.599719][ T9949] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1115'. [ 342.611650][ T9949] netlink: 'syz.4.1115': attribute type 4 has an invalid length. [ 343.153092][ T5812] Bluetooth: hci5: link tx timeout [ 343.158320][ T5812] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 343.729939][ T9958] netlink: 684 bytes leftover after parsing attributes in process `syz.5.1112'. [ 344.054118][ T30] audit: type=1400 audit(1761206510.886:814): avc: denied { read } for pid=9959 comm="syz.1.1117" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 344.074463][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.423099][ T5824] Bluetooth: hci1: command 0x1003 tx timeout [ 344.430824][ T5823] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 345.223120][ T5823] Bluetooth: hci5: command 0x0405 tx timeout [ 345.819027][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1123'. [ 345.906505][ T30] audit: type=1400 audit(1761206512.746:815): avc: denied { ioctl } for pid=9975 comm="syz.4.1123" path="/dev/sg0" dev="devtmpfs" ino=761 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 346.045719][ T5928] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 346.263808][ T24] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 346.312631][ T9983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.844990][ T24] usb 1-1: device descriptor read/64, error -71 [ 346.891226][ T9989] tmpfs: Bad value for 'mpol' [ 347.119129][ T24] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 347.131431][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.142785][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.152698][ T5928] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.165856][ T5928] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.174986][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.195723][ T5928] usb 6-1: config 0 descriptor?? [ 347.263484][ T24] usb 1-1: device descriptor read/64, error -71 [ 347.384729][ T24] usb usb1-port1: attempt power cycle [ 347.523021][ T1549] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 347.640831][ T5928] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 347.663025][ T1549] usb 3-1: device descriptor read/64, error -71 [ 347.733050][ T24] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 347.753577][ T24] usb 1-1: device descriptor read/8, error -71 [ 347.776204][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 347.913067][ T1549] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 347.993060][ T24] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 348.025791][ T24] usb 1-1: device descriptor read/8, error -71 [ 348.043044][ T1549] usb 3-1: device descriptor read/64, error -71 [ 348.143746][ T24] usb usb1-port1: unable to enumerate USB device [ 348.153283][ T1549] usb usb3-port1: attempt power cycle [ 348.513146][ T1549] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 348.534061][ T1549] usb 3-1: device descriptor read/8, error -71 [ 348.793075][ T1549] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 348.827313][ T1549] usb 3-1: device descriptor read/8, error -71 [ 348.953072][ T1549] usb usb3-port1: unable to enumerate USB device [ 349.134881][ T30] audit: type=1400 audit(1761206515.976:816): avc: denied { mount } for pid=10022 comm="syz.4.1139" name="/" dev="ramfs" ino=39682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 349.384418][ T5928] usb 6-1: USB disconnect, device number 21 [ 349.687132][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 349.944202][ T24] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 350.156781][ T24] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 350.183040][ T24] usb 1-1: config 7 has no interface number 0 [ 350.189175][ T24] usb 1-1: config 7 interface 252 has no altsetting 0 [ 350.214342][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 350.223576][T10040] netlink: 'syz.4.1144': attribute type 30 has an invalid length. [ 350.231540][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 350.234020][ T24] usb 1-1: string descriptor 0 read error: -22 [ 350.246937][ T24] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 350.270896][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.375600][T10046] FAULT_INJECTION: forcing a failure. [ 350.375600][T10046] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 350.390074][T10046] CPU: 0 UID: 0 PID: 10046 Comm: syz.2.1147 Not tainted syzkaller #0 PREEMPT(full) [ 350.390098][T10046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 350.390108][T10046] Call Trace: [ 350.390114][T10046] [ 350.390120][T10046] dump_stack_lvl+0x16c/0x1f0 [ 350.390151][T10046] should_fail_ex+0x512/0x640 [ 350.390177][T10046] should_fail_alloc_page+0xe7/0x130 [ 350.390200][T10046] prepare_alloc_pages+0x3c2/0x610 [ 350.390220][T10046] ? __pfx_map_id_range_up+0x10/0x10 [ 350.390246][T10046] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 350.390272][T10046] ? __bfs+0x148/0x290 [ 350.390300][T10046] ? check_irq_usage+0xcb/0x920 [ 350.390324][T10046] ? nla_put_64bit+0x11a/0x160 [ 350.390353][T10046] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 350.390382][T10046] ? check_path.constprop.0+0x24/0x50 [ 350.390417][T10046] ? lockdep_unlock+0x64/0xe0 [ 350.390436][T10046] ? __lock_acquire+0x1053/0x1c90 [ 350.390463][T10046] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 350.390487][T10046] ? policy_nodemask+0xea/0x4e0 [ 350.390510][T10046] alloc_pages_mpol+0x1fb/0x550 [ 350.390532][T10046] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 350.390567][T10046] folio_alloc_mpol_noprof+0x36/0x2f0 [ 350.390592][T10046] shmem_alloc_folio+0x135/0x160 [ 350.390616][T10046] shmem_alloc_and_add_folio+0x499/0xc20 [ 350.390649][T10046] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 350.390677][T10046] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 350.390711][T10046] shmem_get_folio_gfp+0x67f/0x1610 [ 350.390743][T10046] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 350.390779][T10046] shmem_write_begin+0x160/0x300 [ 350.390808][T10046] ? __pfx_shmem_write_begin+0x10/0x10 [ 350.390836][T10046] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 350.390863][T10046] generic_perform_write+0x3c4/0x900 [ 350.390897][T10046] ? __pfx_generic_perform_write+0x10/0x10 [ 350.390925][T10046] ? generic_update_time+0xcf/0xf0 [ 350.390946][T10046] ? mnt_put_write_access_file+0x45/0xf0 [ 350.390968][T10046] shmem_file_write_iter+0x10e/0x140 [ 350.390989][T10046] do_iter_readv_writev+0x662/0x9e0 [ 350.391018][T10046] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 350.391059][T10046] vfs_iter_write+0x1e2/0x9c0 [ 350.391091][T10046] backing_file_write_iter+0x647/0x8f0 [ 350.391120][T10046] ovl_write_iter+0x355/0x430 [ 350.391140][T10046] ? __pfx_ovl_write_iter+0x10/0x10 [ 350.391159][T10046] ? __pfx_ovl_file_end_write+0x10/0x10 [ 350.391186][T10046] vfs_write+0x7d3/0x11d0 [ 350.391203][T10046] ? __pfx_ovl_write_iter+0x10/0x10 [ 350.391222][T10046] ? __pfx___mutex_lock+0x10/0x10 [ 350.391240][T10046] ? __pfx_vfs_write+0x10/0x10 [ 350.391275][T10046] ksys_write+0x12a/0x250 [ 350.391292][T10046] ? __pfx_ksys_write+0x10/0x10 [ 350.391317][T10046] do_syscall_64+0xcd/0xfa0 [ 350.391345][T10046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.391363][T10046] RIP: 0033:0x7f313c58efc9 [ 350.391378][T10046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.391393][T10046] RSP: 002b:00007f313d40d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 350.391410][T10046] RAX: ffffffffffffffda RBX: 00007f313c7e5fa0 RCX: 00007f313c58efc9 [ 350.391420][T10046] RDX: 000000000001000a RSI: 0000200000002600 RDI: 0000000000000004 [ 350.391430][T10046] RBP: 00007f313d40d090 R08: 0000000000000000 R09: 0000000000000000 [ 350.391440][T10046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.391449][T10046] R13: 00007f313c7e6038 R14: 00007f313c7e5fa0 R15: 00007fffdfd54e28 [ 350.391477][T10046] [ 351.281274][ T30] audit: type=1400 audit(1761206518.116:817): avc: denied { mount } for pid=10023 comm="syz.0.1138" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 351.302894][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.313122][ T5875] usb 1-1: USB disconnect, device number 46 [ 351.619424][T10061] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1150'. [ 351.755858][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 351.762154][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 351.769404][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1145'. [ 351.849497][ T5875] libceph: connect (1)[b::]:6789 error -101 [ 351.866403][ T5875] libceph: mon0 (1)[b::]:6789 connect error [ 351.872822][T10061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.906451][T10061] bond_slave_0: left allmulticast mode [ 351.993495][T10061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.008340][T10061] bond_slave_1: left allmulticast mode [ 352.020548][T10061] bond0 (unregistering): Released all slaves [ 352.024943][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 352.032753][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 352.105145][T10042] vlan2: entered allmulticast mode [ 352.123375][ T5889] libceph: connect (1)[b::]:6789 error -101 [ 352.132138][T10042] hsr0: entered allmulticast mode [ 352.137266][T10042] hsr_slave_0: entered allmulticast mode [ 352.137357][ T5889] libceph: mon0 (1)[b::]:6789 connect error [ 352.142923][T10042] hsr_slave_1: entered allmulticast mode [ 352.238542][T10059] ceph: No mds server is up or the cluster is laggy [ 352.238643][T10060] ceph: No mds server is up or the cluster is laggy [ 355.367992][ T30] audit: type=1400 audit(1761206522.206:818): avc: denied { listen } for pid=10096 comm="syz.1.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 355.848579][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 356.271171][ T5812] Bluetooth: hci5: unknown advertising packet type: 0x31 [ 356.271231][ T5812] Bluetooth: hci5: Malformed LE Event: 0x02 [ 356.651203][ T30] audit: type=1400 audit(1761206523.406:819): avc: denied { ioctl } for pid=10110 comm="syz.1.1164" path="socket:[40071]" dev="sockfs" ino=40071 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 356.958306][ T1549] IPVS: starting estimator thread 0... [ 357.414014][T10123] IPVS: using max 43 ests per chain, 103200 per kthread [ 357.721331][T10136] netlink: 'syz.2.1169': attribute type 4 has an invalid length. [ 358.087418][T10136] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 360.041563][T10152] sp0: Synchronizing with TNC [ 360.061196][T10152] sp0: Found TNC [ 360.730241][ T30] audit: type=1400 audit(1761206527.566:820): avc: denied { getopt } for pid=10161 comm="syz.4.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 361.055199][ T30] audit: type=1400 audit(1761206527.806:821): avc: denied { ioctl } for pid=10164 comm="syz.1.1182" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 361.144625][ T5882] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 361.218543][T10180] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 361.315392][ T30] audit: type=1400 audit(1761206528.056:822): avc: denied { append } for pid=10179 comm="syz.5.1186" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 361.343084][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 361.405317][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 361.627650][ T5882] usb 3-1: config 3 has an invalid interface number: 83 but max is 0 [ 361.673286][ T5882] usb 3-1: config 3 has no interface number 0 [ 361.683068][ T5889] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 361.720798][ T5882] usb 3-1: config 3 interface 83 altsetting 7 endpoint 0xE has invalid maxpacket 20224, setting to 64 [ 361.760024][ T5882] usb 3-1: config 3 interface 83 has no altsetting 0 [ 361.797569][ T5882] usb 3-1: New USB device found, idVendor=0403, idProduct=e0f5, bcdDevice= 1.d6 [ 361.833000][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 361.837486][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.863743][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.872983][ T5882] usb 3-1: Product: syz [ 361.898103][ T5882] usb 3-1: Manufacturer: syz [ 361.912569][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.927110][ T5882] usb 3-1: SerialNumber: syz [ 361.943588][ T5889] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 361.963360][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.008874][ T5889] usb 6-1: config 0 descriptor?? [ 362.738670][ T5889] savu 0003:1E7D:2D5A.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 363.164734][ T5889] usb 6-1: USB disconnect, device number 22 [ 363.599132][T10201] binder: 10199:10201 ioctl c0306201 0 returned -14 [ 363.608453][T10201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.623369][T10201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.945961][ T5882] ftdi_sio 3-1:3.83: FTDI USB Serial Device converter detected [ 363.963279][ T5882] usb 3-1: Detected SIO [ 363.981468][ T5882] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 364.007716][ T5882] usb 3-1: USB disconnect, device number 30 [ 364.010545][ T30] audit: type=1400 audit(1761206530.846:823): avc: denied { unmount } for pid=7380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 364.057213][ T5882] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 364.131915][ T5882] ftdi_sio 3-1:3.83: device disconnected [ 364.599399][T10212] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1196'. [ 364.608519][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 364.836239][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'. [ 364.882967][ C0] hrtimer: interrupt took 20318 ns [ 366.060082][ T30] audit: type=1326 audit(1761206532.896:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542798efc9 code=0x7ffc0000 [ 366.083504][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.099789][ T30] audit: type=1326 audit(1761206532.896:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542798efc9 code=0x7ffc0000 [ 366.213245][ T30] audit: type=1326 audit(1761206532.896:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f542798efc9 code=0x7ffc0000 [ 366.293439][ T30] audit: type=1326 audit(1761206532.896:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542798efc9 code=0x7ffc0000 [ 366.390033][ T30] audit: type=1326 audit(1761206532.896:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542798efc9 code=0x7ffc0000 [ 366.460187][ T30] audit: type=1326 audit(1761206532.896:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f542798efc9 code=0x7ffc0000 [ 366.658824][ T30] audit: type=1326 audit(1761206532.896:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542798efc9 code=0x7ffc0000 [ 366.731876][ T30] audit: type=1326 audit(1761206532.896:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f542798efc9 code=0x7ffc0000 [ 366.873337][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1204'. [ 366.984816][ T30] audit: type=1326 audit(1761206532.896:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542798efc9 code=0x7ffc0000 [ 367.124213][ T30] audit: type=1326 audit(1761206532.896:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.1.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f542798efc9 code=0x7ffc0000 [ 367.648358][T10262] netlink: 'syz.0.1208': attribute type 32 has an invalid length. [ 367.720406][ T5823] Bluetooth: hci5: command 0x0405 tx timeout [ 371.184788][T10298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.631735][T10300] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 371.647113][T10300] overlayfs: missing 'lowerdir' [ 371.838579][T10302] vivid-000: disconnect [ 371.854270][T10302] FAULT_INJECTION: forcing a failure. [ 371.854270][T10302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.905560][T10302] CPU: 1 UID: 0 PID: 10302 Comm: syz.5.1218 Not tainted syzkaller #0 PREEMPT(full) [ 371.905580][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 371.905586][T10302] Call Trace: [ 371.905590][T10302] [ 371.905594][T10302] dump_stack_lvl+0x16c/0x1f0 [ 371.905614][T10302] should_fail_ex+0x512/0x640 [ 371.905628][T10302] _copy_to_user+0x32/0xd0 [ 371.905642][T10302] video_usercopy+0xf43/0x1720 [ 371.905660][T10302] ? __pfx___video_do_ioctl+0x10/0x10 [ 371.905674][T10302] ? selinux_kernel_read_file+0xf0/0x130 [ 371.905686][T10302] ? __pfx_video_usercopy+0x10/0x10 [ 371.905710][T10302] v4l2_ioctl+0x1bd/0x250 [ 371.905724][T10302] ? __pfx_v4l2_ioctl+0x10/0x10 [ 371.905738][T10302] __x64_sys_ioctl+0x18e/0x210 [ 371.905755][T10302] do_syscall_64+0xcd/0xfa0 [ 371.905771][T10302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.905781][T10302] RIP: 0033:0x7fbbe4b8efc9 [ 371.905791][T10302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.905801][T10302] RSP: 002b:00007fbbe5aaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.905811][T10302] RAX: ffffffffffffffda RBX: 00007fbbe4de5fa0 RCX: 00007fbbe4b8efc9 [ 371.905817][T10302] RDX: 00002000000000c0 RSI: 00000000c008561c RDI: 0000000000000003 [ 371.905823][T10302] RBP: 00007fbbe5aaa090 R08: 0000000000000000 R09: 0000000000000000 [ 371.905829][T10302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.905835][T10302] R13: 00007fbbe4de6038 R14: 00007fbbe4de5fa0 R15: 00007fffe48a9b68 [ 371.905848][T10302] [ 371.908018][T10301] vivid-000: reconnect [ 375.398730][T10344] tipc: Enabled bearer , priority 0 [ 375.478414][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 375.478427][ T30] audit: type=1400 audit(1761206542.316:870): avc: denied { create } for pid=10347 comm="syz.5.1230" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 375.519896][ T30] audit: type=1400 audit(1761206542.356:871): avc: denied { mounton } for pid=10347 comm="syz.5.1230" path="/156/file0" dev="tmpfs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 375.671807][T10353] binder: 10350:10353 ioctl c0306201 0 returned -14 [ 375.685638][T10353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.697199][T10353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.713243][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 375.994442][ T30] audit: type=1400 audit(1761206542.836:872): avc: denied { getopt } for pid=10360 comm="syz.2.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 376.014251][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.033124][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 376.039700][ T24] usb 1-1: config 0 has an invalid interface number: 75 but max is 0 [ 376.047865][ T24] usb 1-1: config 0 has no interface number 0 [ 376.055423][ T24] usb 1-1: config 0 interface 75 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 376.069262][ T24] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=df.29 [ 376.078836][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.086875][ T24] usb 1-1: Product: syz [ 376.091029][ T24] usb 1-1: Manufacturer: syz [ 376.165076][ T24] usb 1-1: SerialNumber: syz [ 376.175130][ T24] usb 1-1: config 0 descriptor?? [ 376.313925][ T30] audit: type=1326 audit(1761206543.156:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.4.1236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ae698efc9 code=0x0 [ 376.394552][ T5882] tipc: Node number set to 272471758 [ 376.408923][ T30] audit: type=1400 audit(1761206543.246:874): avc: denied { unlink } for pid=7380 comm="syz-executor" name="file0" dev="tmpfs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 376.844086][T10373] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1238' sets config #0 [ 376.859908][T10373] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1238' sets config #1 [ 377.398455][ T5882] usb 1-1: USB disconnect, device number 47 [ 377.820490][ T30] audit: type=1400 audit(1761206544.656:875): avc: denied { name_connect } for pid=10391 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 377.877660][ T30] audit: type=1326 audit(1761206544.716:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10391 comm="syz.1.1245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f542798efc9 code=0x0 [ 377.917172][T10401] FAULT_INJECTION: forcing a failure. [ 377.917172][T10401] name failslab, interval 1, probability 0, space 0, times 0 [ 377.929991][T10401] CPU: 1 UID: 0 PID: 10401 Comm: syz.2.1247 Not tainted syzkaller #0 PREEMPT(full) [ 377.930014][T10401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 377.930024][T10401] Call Trace: [ 377.930030][T10401] [ 377.930037][T10401] dump_stack_lvl+0x16c/0x1f0 [ 377.930067][T10401] should_fail_ex+0x512/0x640 [ 377.930088][T10401] ? fs_reclaim_acquire+0xae/0x150 [ 377.930111][T10401] should_failslab+0xc2/0x120 [ 377.930131][T10401] __kmalloc_noprof+0xdd/0x880 [ 377.930156][T10401] ? tomoyo_encode2+0x100/0x3e0 [ 377.930180][T10401] ? tomoyo_encode2+0x100/0x3e0 [ 377.930199][T10401] tomoyo_encode2+0x100/0x3e0 [ 377.930221][T10401] tomoyo_encode+0x29/0x50 [ 377.930240][T10401] tomoyo_realpath_from_path+0x18f/0x6e0 [ 377.930268][T10401] tomoyo_path_number_perm+0x245/0x580 [ 377.930295][T10401] ? tomoyo_path_number_perm+0x237/0x580 [ 377.930324][T10401] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 377.930353][T10401] ? find_held_lock+0x2b/0x80 [ 377.930400][T10401] ? find_held_lock+0x2b/0x80 [ 377.930421][T10401] ? hook_file_ioctl_common+0x145/0x410 [ 377.930450][T10401] ? __fget_files+0x20e/0x3c0 [ 377.930472][T10401] security_file_ioctl+0x9b/0x240 [ 377.930493][T10401] __x64_sys_ioctl+0xb7/0x210 [ 377.930520][T10401] do_syscall_64+0xcd/0xfa0 [ 377.930547][T10401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.930565][T10401] RIP: 0033:0x7f313c58efc9 [ 377.930579][T10401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.930596][T10401] RSP: 002b:00007f313d40d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.930613][T10401] RAX: ffffffffffffffda RBX: 00007f313c7e5fa0 RCX: 00007f313c58efc9 [ 377.930624][T10401] RDX: 0000200000000540 RSI: 00000000000007a8 RDI: 0000000000000003 [ 377.930634][T10401] RBP: 00007f313d40d090 R08: 0000000000000000 R09: 0000000000000000 [ 377.930644][T10401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.930653][T10401] R13: 00007f313c7e6038 R14: 00007f313c7e5fa0 R15: 00007fffdfd54e28 [ 377.930680][T10401] [ 377.930697][T10401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 378.114349][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.155871][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.178907][T10403] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1248'. [ 378.609297][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 378.773141][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 378.803356][ T24] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 378.890998][ T24] usb 3-1: config 0 has no interface number 0 [ 378.957748][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 378.988749][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.028234][ T24] usb 3-1: Product: syz [ 379.053265][ T24] usb 3-1: Manufacturer: syz [ 379.058252][ T24] usb 3-1: SerialNumber: syz [ 379.111555][ T24] usb 3-1: config 0 descriptor?? [ 379.149521][ T24] smsc95xx v2.0.0 [ 379.359360][ T5812] Bluetooth: hci0: unknown advertising packet type: 0x31 [ 379.359438][ T5812] Bluetooth: hci0: Dropping invalid advertising data [ 379.378829][ T5812] Bluetooth: hci0: Malformed LE Event: 0x02 [ 379.388431][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 379.409461][ T24] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 379.433204][ T24] usb 3-1: USB disconnect, device number 31 [ 380.548951][T10423] FAULT_INJECTION: forcing a failure. [ 380.548951][T10423] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 380.562580][T10423] CPU: 1 UID: 0 PID: 10423 Comm: syz.5.1253 Not tainted syzkaller #0 PREEMPT(full) [ 380.562601][T10423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 380.562610][T10423] Call Trace: [ 380.562616][T10423] [ 380.562622][T10423] dump_stack_lvl+0x16c/0x1f0 [ 380.562650][T10423] should_fail_ex+0x512/0x640 [ 380.562673][T10423] should_fail_alloc_page+0xe7/0x130 [ 380.562693][T10423] prepare_alloc_pages+0x3c2/0x610 [ 380.562712][T10423] ? rcu_is_watching+0x12/0xc0 [ 380.562735][T10423] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 380.562757][T10423] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 380.562796][T10423] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 380.562818][T10423] ? smp_call_function_many_cond+0x1239/0x1600 [ 380.562840][T10423] ? lockdep_hardirqs_on+0x7c/0x110 [ 380.562861][T10423] ? smp_call_function_many_cond+0x457/0x1600 [ 380.562895][T10423] ? __lock_acquire+0x622/0x1c90 [ 380.562923][T10423] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 380.562948][T10423] ? policy_nodemask+0xea/0x4e0 [ 380.562971][T10423] alloc_pages_mpol+0x1fb/0x550 [ 380.562991][T10423] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 380.563017][T10423] folio_alloc_mpol_noprof+0x36/0x2f0 [ 380.563039][T10423] vma_alloc_folio_noprof+0xed/0x1e0 [ 380.563059][T10423] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 380.563080][T10423] ? rcu_read_unlock+0x2d/0xb0 [ 380.563107][T10423] do_wp_page+0x11d8/0x52b0 [ 380.563132][T10423] ? __pfx_do_wp_page+0x10/0x10 [ 380.563153][T10423] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 380.563170][T10423] ? ___pte_offset_map+0x2ad/0x4f0 [ 380.563191][T10423] __handle_mm_fault+0x1ae3/0x2aa0 [ 380.563219][T10423] ? __pfx___handle_mm_fault+0x10/0x10 [ 380.563242][T10423] ? __pte_offset_map_lock+0x174/0x310 [ 380.563258][T10423] ? find_held_lock+0x2b/0x80 [ 380.563285][T10423] ? follow_page_pte+0x5cf/0x1390 [ 380.563308][T10423] handle_mm_fault+0x589/0xd10 [ 380.563334][T10423] __get_user_pages+0x54e/0x3530 [ 380.563360][T10423] ? down_read_killable+0x220/0x4b0 [ 380.563376][T10423] ? __lock_acquire+0x622/0x1c90 [ 380.563398][T10423] ? __pfx___get_user_pages+0x10/0x10 [ 380.563419][T10423] ? __lock_acquire+0x622/0x1c90 [ 380.563445][T10423] __gup_longterm_locked+0xa92/0x17e0 [ 380.563471][T10423] ? __pfx___gup_longterm_locked+0x10/0x10 [ 380.563492][T10423] ? try_get_folio+0x255/0x730 [ 380.563508][T10423] ? find_held_lock+0x2b/0x80 [ 380.563526][T10423] ? sanity_check_pinned_pages+0x58a/0x11d0 [ 380.563549][T10423] gup_fast_fallback+0xee2/0x22a0 [ 380.563587][T10423] ? __pfx_gup_fast_fallback+0x10/0x10 [ 380.563605][T10423] ? bpf_ksym_find+0x127/0x1c0 [ 380.563628][T10423] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 380.563650][T10423] ? is_bpf_text_address+0x94/0x1a0 [ 380.563669][T10423] ? kernel_text_address+0x8d/0x100 [ 380.563690][T10423] pin_user_pages_fast+0xa7/0xf0 [ 380.563709][T10423] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 380.563735][T10423] iov_iter_extract_pages+0x3a2/0x1ed0 [ 380.563758][T10423] ? stack_depot_save_flags+0x29/0x9c0 [ 380.563777][T10423] ? __pfx___might_resched+0x10/0x10 [ 380.563798][T10423] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 380.563816][T10423] ? kasan_save_stack+0x42/0x60 [ 380.563830][T10423] ? kasan_save_stack+0x33/0x60 [ 380.563844][T10423] ? kasan_save_track+0x14/0x30 [ 380.563857][T10423] ? __kasan_kmalloc+0xaa/0xb0 [ 380.563871][T10423] ? __kmalloc_noprof+0x32f/0x880 [ 380.563894][T10423] ? sock_kmalloc+0x111/0x170 [ 380.563915][T10423] ? af_alg_alloc_areq+0xbc/0x2e0 [ 380.563936][T10423] ? skcipher_recvmsg+0x314/0x1030 [ 380.563951][T10423] ? sock_recvmsg+0x1f9/0x250 [ 380.563971][T10423] ? ____sys_recvmsg+0x218/0x6b0 [ 380.563992][T10423] ? ___sys_recvmsg+0x114/0x1a0 [ 380.564009][T10423] ? __sys_recvmsg+0x16a/0x220 [ 380.564027][T10423] ? do_syscall_64+0xcd/0xfa0 [ 380.564047][T10423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.564072][T10423] extract_iter_to_sg+0xf6e/0x20c0 [ 380.564098][T10423] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 380.564124][T10423] ? rcu_is_watching+0x12/0xc0 [ 380.564149][T10423] af_alg_get_rsgl+0x2b8/0x7f0 [ 380.564184][T10423] skcipher_recvmsg+0x375/0x1030 [ 380.564210][T10423] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 380.564234][T10423] sock_recvmsg+0x1f9/0x250 [ 380.564259][T10423] ____sys_recvmsg+0x218/0x6b0 [ 380.564286][T10423] ? __pfx_____sys_recvmsg+0x10/0x10 [ 380.564321][T10423] ? __lock_acquire+0x622/0x1c90 [ 380.564348][T10423] ___sys_recvmsg+0x114/0x1a0 [ 380.564367][T10423] ? __pfx____sys_recvmsg+0x10/0x10 [ 380.564410][T10423] __sys_recvmsg+0x16a/0x220 [ 380.564430][T10423] ? __pfx___sys_recvmsg+0x10/0x10 [ 380.564469][T10423] do_syscall_64+0xcd/0xfa0 [ 380.564493][T10423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.564508][T10423] RIP: 0033:0x7fbbe4b8efc9 [ 380.564521][T10423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.564535][T10423] RSP: 002b:00007fbbe5a89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 380.564550][T10423] RAX: ffffffffffffffda RBX: 00007fbbe4de6090 RCX: 00007fbbe4b8efc9 [ 380.564560][T10423] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 380.564569][T10423] RBP: 00007fbbe5a89090 R08: 0000000000000000 R09: 0000000000000000 [ 380.564578][T10423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.564586][T10423] R13: 00007fbbe4de6128 R14: 00007fbbe4de6090 R15: 00007fffe48a9b68 [ 380.564610][T10423] [ 381.225209][ T30] audit: type=1400 audit(1761206548.066:877): avc: denied { bind } for pid=10424 comm="syz.4.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 381.289708][ T30] audit: type=1400 audit(1761206548.066:878): avc: denied { setopt } for pid=10424 comm="syz.4.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 381.317920][T10429] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 381.454899][T10438] bond0: (slave caif0): Error: Device type is different from other slaves [ 381.525929][T10444] atomic_op ffff888056286998 conn xmit_atomic 0000000000000000 [ 383.708751][T10474] FAULT_INJECTION: forcing a failure. [ 383.708751][T10474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.722210][T10474] CPU: 0 UID: 0 PID: 10474 Comm: syz.1.1269 Not tainted syzkaller #0 PREEMPT(full) [ 383.722230][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 383.722236][T10474] Call Trace: [ 383.722240][T10474] [ 383.722245][T10474] dump_stack_lvl+0x16c/0x1f0 [ 383.722264][T10474] should_fail_ex+0x512/0x640 [ 383.722279][T10474] _copy_from_user+0x2e/0xd0 [ 383.722293][T10474] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 383.722305][T10474] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 383.722319][T10474] ? __local_bh_enable_ip+0xa4/0x120 [ 383.722334][T10474] sk_setsockopt+0x2d9a/0x3ac0 [ 383.722350][T10474] ? __pfx_sk_setsockopt+0x10/0x10 [ 383.722365][T10474] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 383.722381][T10474] ? rcu_is_watching+0x12/0xc0 [ 383.722394][T10474] ? irqentry_exit+0x3b/0x90 [ 383.722409][T10474] ? lockdep_hardirqs_on+0x7c/0x110 [ 383.722431][T10474] do_sock_setsockopt+0x193/0x1d0 [ 383.722448][T10474] __sys_setsockopt+0x1a0/0x230 [ 383.722463][T10474] __x64_sys_setsockopt+0xbd/0x160 [ 383.722475][T10474] ? do_syscall_64+0x91/0xfa0 [ 383.722489][T10474] ? lockdep_hardirqs_on+0x7c/0x110 [ 383.722504][T10474] do_syscall_64+0xcd/0xfa0 [ 383.722519][T10474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.722530][T10474] RIP: 0033:0x7f542798efc9 [ 383.722539][T10474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.722548][T10474] RSP: 002b:00007f54288dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 383.722559][T10474] RAX: ffffffffffffffda RBX: 00007f5427be6090 RCX: 00007f542798efc9 [ 383.722565][T10474] RDX: 000000000000003d RSI: 0000000000000001 RDI: 0000000000000007 [ 383.722571][T10474] RBP: 00007f54288dd090 R08: 0000000000000008 R09: 0000000000000000 [ 383.722577][T10474] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 383.722583][T10474] R13: 00007f5427be6128 R14: 00007f5427be6090 R15: 00007ffed6c78648 [ 383.722597][T10474] [ 384.157758][ T30] audit: type=1400 audit(1761206550.776:879): avc: denied { write } for pid=10472 comm="syz.1.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 384.455699][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'. [ 384.488987][T10478] netlink: 'syz.1.1271': attribute type 30 has an invalid length. [ 384.537362][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'. [ 384.803930][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 384.900253][T10481] netlink: 'syz.0.1270': attribute type 30 has an invalid length. [ 384.964028][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1270'. [ 385.166479][ T30] audit: type=1400 audit(1761206552.006:880): avc: denied { ioctl } for pid=10487 comm="syz.4.1273" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 385.435361][ T30] audit: type=1326 audit(1761206552.256:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 385.675539][ T30] audit: type=1326 audit(1761206552.256:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 386.327848][ T30] audit: type=1326 audit(1761206552.256:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 386.351331][ T30] audit: type=1326 audit(1761206552.256:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 386.394852][ T30] audit: type=1326 audit(1761206552.256:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 386.664571][ T30] audit: type=1326 audit(1761206552.266:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 386.769439][ T30] audit: type=1326 audit(1761206552.266:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 386.792877][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.870287][ T30] audit: type=1326 audit(1761206552.266:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 386.893696][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.900714][ T30] audit: type=1326 audit(1761206552.266:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 386.932470][ T30] audit: type=1326 audit(1761206552.266:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 386.956139][ T30] audit: type=1326 audit(1761206552.266:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 386.979549][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.985943][ T30] audit: type=1326 audit(1761206552.266:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 387.009301][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.958764][T10540] openvswitch: netlink: Message has 383 unknown bytes. [ 387.970567][T10534] IPv6: Can't replace route, no match found [ 388.323922][T10551] IPv6: Can't replace route, no match found [ 389.203666][ T42] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 389.863040][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 390.221581][ T42] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 390.229986][ T42] usb 6-1: config 0 has no interface number 0 [ 390.240228][ T42] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 390.260458][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.268531][ T42] usb 6-1: Product: syz [ 390.272729][ T42] usb 6-1: Manufacturer: syz [ 390.277635][ T42] usb 6-1: SerialNumber: syz [ 390.288140][ T42] usb 6-1: config 0 descriptor?? [ 390.304209][ T42] smsc95xx v2.0.0 [ 390.307911][ T42] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 390.334100][ T42] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 390.576423][ T5823] Bluetooth: hci5: unknown advertising packet type: 0x31 [ 390.576513][ T5823] Bluetooth: hci5: Dropping invalid advertising data [ 390.590499][ T5823] Bluetooth: hci5: Malformed LE Event: 0x02 [ 390.611605][ T42] usb 6-1: USB disconnect, device number 23 [ 392.140742][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 393.048448][T10613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.954192][T10624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1313'. [ 395.016042][T10637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1315'. [ 395.367669][T10642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.455517][T10642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.520242][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 395.903086][ T5882] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 396.063097][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 396.088043][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 396.124678][ T5882] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 396.154577][ T5882] usb 3-1: config 4 has no interface number 0 [ 396.173141][ T5882] usb 3-1: config 4 interface 30 has no altsetting 0 [ 396.192585][ T5882] usb 3-1: string descriptor 0 read error: -22 [ 396.199269][ T5882] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 396.219226][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.244053][ T5882] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 396.260697][ T5882] dw2102: su3000_power_ctrl: 1, initialized 0 [ 396.273064][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 396.297301][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 396.323989][ T5882] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 396.331809][ T5882] usb 3-1: media controller created [ 396.343799][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 396.350367][ T5882] dw2102: i2c transfer failed. [ 396.355742][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 396.370708][ T5882] dw2102: i2c transfer failed. [ 396.383007][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 396.411790][ T5882] dw2102: i2c transfer failed. [ 396.427675][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 396.453456][ T5882] dw2102: i2c transfer failed. [ 396.458364][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 396.464465][ T5882] dw2102: i2c transfer failed. [ 396.469452][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 396.476339][ T5882] dw2102: i2c transfer failed. [ 396.481501][ T5882] dvb-usb: MAC address: 02:02:02:02:02:02 [ 396.525174][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 396.566995][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 396.595287][ T5882] dw2102: command 0x0e transfer failed. [ 396.610485][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 396.630705][ T5882] dw2102: command 0x0e transfer failed. [ 397.108038][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 397.115573][ T5882] dw2102: command 0x0e transfer failed. [ 397.121170][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 397.126980][ T5882] dw2102: command 0x0e transfer failed. [ 397.132524][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 397.138559][ T5882] dw2102: command 0x51 transfer failed. [ 397.144233][ T5882] dvb-usb: bulk message failed: -22 (5/0) [ 397.151390][ T5882] dw2102: i2c probe for address 0x68 failed. [ 397.158094][ T5882] dvb-usb: bulk message failed: -22 (5/0) [ 397.165092][ T5882] dw2102: i2c probe for address 0x69 failed. [ 397.172209][ T5882] dvb-usb: bulk message failed: -22 (5/0) [ 397.179390][ T5882] dw2102: i2c probe for address 0x6a failed. [ 397.186974][ T5882] dw2102: probing for demodulator failed. Is the external power switched on? [ 397.197296][ T5882] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 397.384785][ T5882] rc_core: IR keymap rc-tt-1500 not found [ 397.400297][ T5882] Registered IR keymap rc-empty [ 397.419840][ T5882] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 397.452098][ T5882] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input36 [ 397.469886][ T5882] dvb-usb: schedule remote query interval to 250 msecs. [ 397.478063][ T5882] dw2102: su3000_power_ctrl: 0, initialized 1 [ 397.484356][ T5882] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 397.966395][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 397.972159][ T5882] dw2102: i2c transfer failed. [ 398.007549][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 398.007564][ T30] audit: type=1400 audit(1761206564.846:909): avc: denied { watch watch_reads } for pid=10683 comm="syz.4.1329" path="/proc/872/task/873/maps" dev="proc" ino=43082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 398.170575][ T30] audit: type=1400 audit(1761206565.006:910): avc: denied { map } for pid=10690 comm="syz.0.1331" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 398.253893][ T1549] dvb-usb: bulk message failed: -22 (1/0) [ 398.266305][ T1549] dw2102: i2c transfer failed. [ 398.442068][T10696] binder: 10693:10696 ioctl c0306201 0 returned -14 [ 398.466045][T10696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.475753][T10696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.642503][ T1549] usb 3-1: USB disconnect, device number 32 [ 398.780919][T10704] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1332'. [ 398.817469][ T1549] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 398.882564][T10705] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1334'. [ 399.117085][ T30] audit: type=1400 audit(1761206565.956:911): avc: denied { bind } for pid=10699 comm="syz.5.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 399.698610][ T30] audit: type=1400 audit(1761206566.526:912): avc: denied { listen } for pid=10699 comm="syz.5.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 399.758789][ T30] audit: type=1400 audit(1761206566.586:913): avc: denied { create } for pid=10715 comm="syz.0.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 401.109037][T10740] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 401.418682][T10742] proc: Unknown parameter 'usbquo|aãl“9h¶/LŒ2]¹“g@%*®kðã5ì' [ 401.546164][ T30] audit: type=1400 audit(1761206568.386:914): avc: denied { listen } for pid=10741 comm="syz.2.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 401.565794][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.710101][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1346'. [ 402.771468][ T30] audit: type=1400 audit(1761206569.606:915): avc: denied { read } for pid=10750 comm="syz.1.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 403.555353][T10764] fuse: Bad value for 'user_id' [ 403.560419][T10764] fuse: Bad value for 'user_id' [ 403.799476][ T30] audit: type=1400 audit(1761206570.636:916): avc: denied { connect } for pid=10763 comm="syz.0.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 403.819678][ T30] audit: type=1400 audit(1761206570.636:917): avc: denied { shutdown } for pid=10763 comm="syz.0.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 404.133008][ T5928] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 404.363015][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 404.372062][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.405649][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.424244][ T5928] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 404.464888][ T5928] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 404.483309][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.520046][ T5928] usb 6-1: config 0 descriptor?? [ 404.751746][ T30] audit: type=1400 audit(1761206571.586:918): avc: denied { ioctl } for pid=10797 comm="syz.2.1359" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 404.933294][ T5928] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 404.953353][ T5928] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 404.960904][ T5928] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 404.969244][ T5928] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 405.001953][ T5928] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 405.010226][ T5928] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 405.017788][ T5928] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 405.026313][ T5928] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 405.033850][ T5928] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 405.041921][ T5928] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 405.301218][ T5928] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0016/input/input37 [ 405.334428][ T30] audit: type=1400 audit(1761206572.176:919): avc: denied { write } for pid=10774 comm="syz.5.1353" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 405.419484][ T5928] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 405.435178][ T30] audit: type=1400 audit(1761206572.176:920): avc: denied { open } for pid=10774 comm="syz.5.1353" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 407.275412][T10813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.284239][T10813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.457371][ T1549] usb 6-1: reset high-speed USB device number 24 using dummy_hcd [ 408.109724][ T30] audit: type=1400 audit(1761206574.946:921): avc: denied { read } for pid=10820 comm="syz.2.1364" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 408.139632][ T30] audit: type=1400 audit(1761206574.946:922): avc: denied { open } for pid=10820 comm="syz.2.1364" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 408.713032][ T5934] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 408.783082][ T5882] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 409.003390][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 409.010618][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.021014][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.032204][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 409.098796][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1371'. [ 409.994308][ T5928] usb 6-1: USB disconnect, device number 24 [ 410.003081][ T5934] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 410.013796][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.030103][ T5882] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 410.039486][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.220800][ T5934] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 410.231882][ T5882] usb 1-1: config 0 descriptor?? [ 410.238353][ T5934] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 410.254677][ T5882] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 410.275113][ T5934] usb 3-1: Manufacturer: syz [ 410.290624][ T5934] usb 3-1: config 0 descriptor?? [ 410.468395][ T5882] gp8psk: usb in 128 operation failed. [ 410.500280][T10857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.509106][ T5882] gp8psk: usb in 137 operation failed. [ 410.519991][T10821] veth0_to_bridge: entered promiscuous mode [ 410.529311][ T5882] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 410.541804][T10857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.560306][ T5882] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 410.578198][ T30] audit: type=1400 audit(1761206577.416:923): avc: denied { write } for pid=10854 comm="syz.4.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 410.603024][ T5934] rc_core: IR keymap rc-hauppauge not found [ 410.608938][ T5934] Registered IR keymap rc-empty [ 410.614221][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 410.621500][T10862] fuse: Bad value for 'fd' [ 410.633106][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 410.653467][ T5934] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 410.666219][ T5934] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input38 [ 410.689723][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 410.714892][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 410.744597][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 410.773050][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 410.803074][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 410.823197][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 410.854332][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 410.883068][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 410.903197][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 410.923074][ T5934] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 410.944790][ T5934] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 410.953897][ T5934] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 411.117695][T10820] veth0_to_bridge: left promiscuous mode [ 411.126459][ T5889] usb 3-1: USB disconnect, device number 33 [ 411.696335][ T24] usb 1-1: USB disconnect, device number 49 [ 412.809469][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.022031][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'. [ 413.476333][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.602731][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.740550][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 413.753093][T10898] netlink: 'syz.4.1388': attribute type 30 has an invalid length. [ 413.760969][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1388'. [ 413.785216][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.522306][ T36] bridge_slave_1: left allmulticast mode [ 414.549269][ T36] bridge_slave_1: left promiscuous mode [ 414.575422][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.775590][ T36] bridge_slave_0: left allmulticast mode [ 414.794842][ T36] bridge_slave_0: left promiscuous mode [ 414.807469][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.816512][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 414.824601][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 414.832177][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 414.840316][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 414.853145][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.864224][ T30] audit: type=1400 audit(1761206581.696:924): avc: denied { mounton } for pid=10912 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 416.293684][ T36] dvmrp1 (unregistering): left allmulticast mode [ 416.608135][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.626975][T10939] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 416.637951][ T30] audit: type=1400 audit(1761206583.466:925): avc: denied { read } for pid=10937 comm="syz.0.1396" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 416.680604][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.691031][ T36] bond0 (unregistering): Released all slaves [ 416.707621][T10928] netlink: 'syz.2.1394': attribute type 3 has an invalid length. [ 416.808438][T10912] lo speed is unknown, defaulting to 1000 [ 416.903224][ T5812] Bluetooth: hci1: command tx timeout [ 417.015441][T10947] netlink: 'syz.0.1400': attribute type 32 has an invalid length. [ 417.072373][ T30] audit: type=1400 audit(1761206583.896:926): avc: denied { write } for pid=10948 comm="syz.1.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 417.383068][ T42] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 417.397434][T10912] chnl_net:caif_netlink_parms(): no params data found [ 417.448876][T10966] sp0: Synchronizing with TNC [ 417.533174][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 417.547674][ T42] usb 3-1: config 0 has an invalid interface number: 75 but max is 0 [ 417.558719][ T42] usb 3-1: config 0 has no interface number 0 [ 417.575471][ T42] usb 3-1: config 0 interface 75 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 417.607269][ T42] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=df.29 [ 417.662370][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.680828][ T42] usb 3-1: Product: syz [ 417.690449][ T42] usb 3-1: Manufacturer: syz [ 417.701439][ T42] usb 3-1: SerialNumber: syz [ 417.720760][ T42] usb 3-1: config 0 descriptor?? [ 417.782199][T10912] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.791571][T10912] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.798808][T10912] bridge_slave_0: entered allmulticast mode [ 417.806647][T10912] bridge_slave_0: entered promiscuous mode [ 417.821119][ T36] hsr_slave_0: left promiscuous mode [ 417.827392][ T36] hsr_slave_1: left promiscuous mode [ 417.836305][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.845218][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.853227][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.860605][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.882857][ T36] veth1_macvtap: left promiscuous mode [ 417.888592][ T36] veth1_vlan: left promiscuous mode [ 417.893991][ T36] veth0_vlan: left promiscuous mode [ 418.308842][ T5882] usb 3-1: USB disconnect, device number 34 [ 418.580746][ T36] team0 (unregistering): Port device team_slave_1 removed [ 418.618958][ T36] team0 (unregistering): Port device team_slave_0 removed [ 418.859132][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'. [ 418.870132][T10912] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.877324][T10912] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.884461][T10912] bridge_slave_1: entered allmulticast mode [ 418.891128][T10912] bridge_slave_1: entered promiscuous mode [ 418.983090][ T5812] Bluetooth: hci1: command tx timeout [ 419.277158][T11008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.288463][T11008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.290310][T11008] bond0 (unregistering): Released all slaves [ 419.401953][T10912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.419409][T10912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.600310][T10912] team0: Port device team_slave_0 added [ 419.674497][T10912] team0: Port device team_slave_1 added [ 419.798338][T10912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.806742][ T36] IPVS: stop unused estimator thread 0... [ 419.823275][T10912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.104052][T10912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.155136][T10912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.195374][T10912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.247378][T10912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.446080][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 420.457638][T10912] hsr_slave_0: entered promiscuous mode [ 420.465719][T10912] hsr_slave_1: entered promiscuous mode [ 420.473710][T10912] debugfs: 'hsr0' already exists in 'hsr' [ 420.496130][T10912] Cannot create hsr debugfs directory [ 420.754685][ T30] audit: type=1400 audit(1761206587.586:927): avc: denied { read write } for pid=11037 comm="syz.0.1412" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 420.795264][ T30] audit: type=1400 audit(1761206587.586:928): avc: denied { open } for pid=11037 comm="syz.0.1412" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 420.818625][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.865041][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'. [ 420.927215][T10912] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 420.939202][T10912] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 420.951973][T10912] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 420.961712][T10912] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 421.063124][ T5812] Bluetooth: hci1: command tx timeout [ 421.619496][T10912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.649735][T10912] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.663315][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.670454][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.701851][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.709000][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.877947][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1415'. [ 422.422641][T10912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.613046][ T5889] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 422.774812][ T5889] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 422.813299][ T5889] usb 1-1: config 0 has no interface number 0 [ 422.819434][ T5889] usb 1-1: config 0 interface 29 has no altsetting 0 [ 422.830521][T10912] veth0_vlan: entered promiscuous mode [ 422.856065][ T5889] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 422.867208][T10912] veth1_vlan: entered promiscuous mode [ 422.882430][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.909231][T10912] veth0_macvtap: entered promiscuous mode [ 422.915088][ T5889] usb 1-1: Product: syz [ 422.918653][T10912] veth1_macvtap: entered promiscuous mode [ 422.919262][ T5889] usb 1-1: Manufacturer: syz [ 422.939432][T10912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.954026][T10912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.967541][ T3502] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.034942][ T3502] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.068304][ T5889] usb 1-1: SerialNumber: syz [ 423.075945][ T5889] usb 1-1: config 0 descriptor?? [ 423.089824][ T3502] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.556941][ T5812] Bluetooth: hci1: command tx timeout [ 423.567130][ T30] audit: type=1400 audit(1761206590.046:929): avc: denied { mount } for pid=11089 comm="syz.4.1424" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 423.617509][ T5889] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 423.621480][T11098] sctp: [Deprecated]: syz.2.1426 (pid 11098) Use of int in max_burst socket option. [ 423.621480][T11098] Use struct sctp_assoc_value instead [ 423.673168][ T3502] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.677701][T11099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.691385][ T30] audit: type=1400 audit(1761206590.516:930): avc: denied { ioctl } for pid=11094 comm="syz.2.1426" path="socket:[44654]" dev="sockfs" ino=44654 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 423.691762][T11099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.723946][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.899456][ T5889] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 423.959322][ T5889] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 424.091197][ T30] audit: type=1400 audit(1761206590.926:931): avc: denied { map } for pid=11101 comm="syz.4.1428" path="socket:[45699]" dev="sockfs" ino=45699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 424.115556][ T5889] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 424.116783][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.146861][ T5889] usb 1-1: USB disconnect, device number 50 [ 424.156199][ T30] audit: type=1400 audit(1761206590.926:932): avc: denied { accept } for pid=11101 comm="syz.4.1428" path="socket:[45699]" dev="sockfs" ino=45699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 424.164438][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.216564][ T24] libceph: connect (1)[c::]:6789 error -101 [ 424.232807][T11103] ceph: No mds server is up or the cluster is laggy [ 424.240859][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 424.294768][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.303320][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.319987][ T30] audit: type=1400 audit(1761206591.156:933): avc: denied { mounton } for pid=10912 comm="syz-executor" path="/root/syzkaller.R0K8Z6/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 424.377776][ T30] audit: type=1400 audit(1761206591.186:934): avc: denied { mount } for pid=10912 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 424.441933][ T30] audit: type=1400 audit(1761206591.196:935): avc: denied { mounton } for pid=10912 comm="syz-executor" path="/root/syzkaller.R0K8Z6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 424.863160][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1430'. [ 425.120002][ T30] audit: type=1400 audit(1761206591.196:936): avc: denied { mounton } for pid=10912 comm="syz-executor" path="/root/syzkaller.R0K8Z6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=45835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 425.148834][ T30] audit: type=1400 audit(1761206591.196:937): avc: denied { mounton } for pid=10912 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 425.187153][ T30] audit: type=1400 audit(1761206591.196:938): avc: denied { mount } for pid=10912 comm="syz-executor" name="/" dev="gadgetfs" ino=8239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 425.673333][ T5889] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 425.883386][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 426.055294][T11142] bridge0: entered promiscuous mode [ 426.061121][T11142] macvlan2: entered promiscuous mode [ 426.397950][ T5889] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 426.407081][ T5889] usb 3-1: config 0 has no interface number 0 [ 426.413791][ T5889] usb 3-1: config 0 interface 196 has no altsetting 0 [ 426.422593][ T5889] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 426.455664][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.752123][ T5889] usb 3-1: Product: syz [ 426.757612][ T5889] usb 3-1: Manufacturer: syz [ 426.762601][ T5889] usb 3-1: SerialNumber: syz [ 426.770900][ T5889] usb 3-1: config 0 descriptor?? [ 426.945944][T11158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.961660][T11158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.980284][T11134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.989358][T11134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.000670][T11134] ieee802154 phy0 wpan0: encryption failed: -22 [ 427.003023][ T5934] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 427.163029][ T5934] usb 6-1: Using ep0 maxpacket: 32 [ 427.170625][ T5934] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 427.179036][ T5934] usb 6-1: config 0 has no interface number 0 [ 427.189541][ T5934] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 427.198771][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.206841][ T5934] usb 6-1: Product: syz [ 427.211076][ T5934] usb 6-1: Manufacturer: syz [ 427.215852][ T5934] usb 6-1: SerialNumber: syz [ 427.224058][ T5934] usb 6-1: config 0 descriptor?? [ 427.232065][ T5934] smsc95xx v2.0.0 [ 427.235882][ T5934] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 427.246548][ T5934] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 427.435339][ T24] usb 6-1: USB disconnect, device number 25 [ 427.484052][ T5889] ipheth 3-1:0.196: Unable to find endpoints [ 427.492709][ T5889] usb 3-1: USB disconnect, device number 35 [ 427.679232][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1446'. [ 427.695119][T11162] vxlan0: entered promiscuous mode [ 427.702301][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.712258][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.722021][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.730836][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.002898][T11174] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1450'. [ 430.500507][T11189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.523238][T11189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.683348][ T42] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 431.963009][ T5928] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 432.014277][ T42] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 432.022757][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.032884][ T42] usb 3-1: config 0 has no interface number 0 [ 432.039431][ T42] usb 3-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 432.052450][ T42] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 432.061582][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.071769][ T42] usb 3-1: config 0 descriptor?? [ 432.080037][ T42] ttusbir 3-1:0.83: cannot find expected altsetting [ 432.224780][ T5928] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.234944][ T5928] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 432.247928][ T5928] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.257293][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.276398][ T5928] usb 6-1: config 0 descriptor?? [ 432.353063][ T5934] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 432.686640][ T5928] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 432.694471][ T24] usb 3-1: USB disconnect, device number 36 [ 432.853042][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 432.914632][ T5934] usb 1-1: unable to get BOS descriptor or descriptor too short [ 433.313309][ T5934] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 433.330726][ T5934] usb 1-1: config 4 has no interface number 0 [ 433.350054][T11220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.358942][T11220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.366751][ T5934] usb 1-1: config 4 interface 30 has no altsetting 0 [ 433.730151][ T5934] usb 1-1: string descriptor 0 read error: -22 [ 433.736563][ T5934] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 433.753059][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.889441][ T5934] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 433.896632][ T5934] dw2102: su3000_power_ctrl: 1, initialized 0 [ 433.902861][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 433.914397][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 434.078725][T11231] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1466'. [ 434.185771][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 434.578061][ T5934] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 434.654105][ T5934] usb 1-1: media controller created [ 434.656393][T11206] dvb-usb: bulk message failed: -22 (3/0) [ 434.672015][T11206] dw2102: i2c transfer failed. [ 434.678469][T11206] dvb-usb: bulk message failed: -22 (4/0) [ 434.684449][T11206] dw2102: i2c transfer failed. [ 434.690405][ T5934] dvb-usb: bulk message failed: -22 (6/0) [ 434.698673][ T5934] dw2102: i2c transfer failed. [ 434.704170][ T5934] dvb-usb: bulk message failed: -22 (6/0) [ 434.710049][ T5934] dw2102: i2c transfer failed. [ 434.715008][ T5934] dvb-usb: bulk message failed: -22 (6/0) [ 434.721421][ T5934] dw2102: i2c transfer failed. [ 434.837947][ T5934] dvb-usb: bulk message failed: -22 (6/0) [ 434.859515][ T5934] dw2102: i2c transfer failed. [ 434.878836][ T5934] dvb-usb: bulk message failed: -22 (6/0) [ 434.911243][ T5934] dw2102: i2c transfer failed. [ 435.619908][ T42] usb 6-1: USB disconnect, device number 26 [ 435.626013][ T5934] dvb-usb: bulk message failed: -22 (6/0) [ 435.637132][ T5934] dw2102: i2c transfer failed. [ 435.654247][ T5934] dvb-usb: MAC address: 02:02:02:02:02:02 [ 435.968324][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 435.992157][ T5934] dvb-usb: bulk message failed: -22 (3/0) [ 435.992190][ T5934] dw2102: command 0x0e transfer failed. [ 435.992202][ T5934] dvb-usb: bulk message failed: -22 (3/0) [ 435.992213][ T5934] dw2102: command 0x0e transfer failed. [ 436.024244][ T42] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 436.113045][ T24] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 436.147452][T11252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.152976][T11252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.183393][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 436.189705][ T42] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 436.197931][ T42] usb 6-1: config 0 has no interface number 0 [ 436.205606][ T42] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 436.215172][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.223221][ T42] usb 6-1: Product: syz [ 436.227426][ T42] usb 6-1: Manufacturer: syz [ 436.232099][ T42] usb 6-1: SerialNumber: syz [ 436.239613][ T42] usb 6-1: config 0 descriptor?? [ 436.246896][ T42] smsc95xx v2.0.0 [ 436.250529][ T42] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 436.261027][ T42] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 436.270399][ T24] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 436.280850][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.290000][ T24] usb 3-1: config 0 descriptor?? [ 436.293026][ T5934] dvb-usb: bulk message failed: -22 (3/0) [ 436.297184][ T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 436.301647][ T5934] dw2102: command 0x0e transfer failed. [ 436.314410][ T5934] dvb-usb: bulk message failed: -22 (3/0) [ 436.320113][ T5934] dw2102: command 0x0e transfer failed. [ 436.325702][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 436.331422][ T5934] dw2102: command 0x51 transfer failed. [ 436.337010][ T5934] dvb-usb: bulk message failed: -22 (5/0) [ 436.342698][ T5934] dw2102: i2c probe for address 0x68 failed. [ 436.350192][ T5934] dvb-usb: bulk message failed: -22 (5/0) [ 436.355940][ T5934] dw2102: i2c probe for address 0x69 failed. [ 436.361900][ T5934] dvb-usb: bulk message failed: -22 (5/0) [ 436.367634][ T5934] dw2102: i2c probe for address 0x6a failed. [ 436.373606][ T5934] dw2102: probing for demodulator failed. Is the external power switched on? [ 436.382370][ T5934] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 436.433505][ T5934] rc_core: IR keymap rc-tt-1500 not found [ 436.439256][ T5934] Registered IR keymap rc-empty [ 436.444720][ T5934] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 436.453351][ T42] usb 6-1: USB disconnect, device number 27 [ 436.461537][ T5934] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input41 [ 436.472434][ T5934] dvb-usb: schedule remote query interval to 250 msecs. [ 436.479393][ T5934] dw2102: su3000_power_ctrl: 0, initialized 1 [ 436.485473][ T5934] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 436.500185][ T5934] usb 1-1: USB disconnect, device number 51 [ 436.504351][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 436.504362][ T30] audit: type=1400 audit(1761206603.346:947): avc: denied { watch } for pid=11238 comm="syz.2.1469" path="/298/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 436.557844][ T24] gp8psk: usb in 128 operation failed. [ 436.558303][ T30] audit: type=1400 audit(1761206603.346:948): avc: denied { watch_sb watch_reads } for pid=11238 comm="syz.2.1469" path="/298/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 436.608874][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.629922][ T5934] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 436.773110][ T24] gp8psk: FW Version = 159.119.170 (0x9f77aa) Build 2207/68/144 [ 436.923106][ T5934] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 437.113039][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 437.176245][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.231365][ T24] gp8psk: usb in 149 operation failed. [ 437.241840][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.315049][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 437.397791][ T5934] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 437.448425][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.533376][ T5934] usb 1-1: config 0 descriptor?? [ 437.590076][T11263] loop7: detected capacity change from 0 to 4 [ 437.747783][T11265] Dev loop7: unable to read RDB block 4 [ 437.777396][T11265] loop7: unable to read partition table [ 437.796211][ T24] gp8psk: failed to get FPGA version [ 437.801834][ T24] gp8psk: usb in 138 operation failed. [ 437.807441][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 437.818311][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 437.843528][ T24] usb 3-1: USB disconnect, device number 37 [ 437.845554][T11265] loop7: partition table beyond EOD, truncated [ 438.143103][T11265] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.) failed (rc=-5) [ 438.377939][ T5934] hid_parser_main: 4 callbacks suppressed [ 438.377959][ T5934] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 438.510355][ T5934] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 438.519780][ T5934] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 438.535355][ T5934] shield 0003:0955:7214.0017: reserved main item tag 0xd [ 438.542404][ T5934] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 438.565412][ T5934] input: HID 0955:7214 Haptics as /devices/virtual/input/input42 [ 438.566370][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1482'. [ 438.591049][ T5934] shield 0003:0955:7214.0017: Registered Thunderstrike controller [ 438.623237][ T5934] shield 0003:0955:7214.0017: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 438.677337][ T30] audit: type=1400 audit(1761206605.516:949): avc: denied { bind } for pid=11279 comm="syz.5.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.714130][T11283] overlayfs: missing 'lowerdir' [ 438.728768][ T30] audit: type=1400 audit(1761206605.516:950): avc: denied { listen } for pid=11279 comm="syz.5.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.728824][ T5928] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 438.748341][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.757986][ T30] audit: type=1400 audit(1761206605.546:951): avc: denied { name_connect } for pid=11282 comm="syz.1.1484" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 438.760975][ T5934] usb 1-1: USB disconnect, device number 52 [ 438.766445][ T30] audit: type=1400 audit(1761206605.556:952): avc: denied { accept } for pid=11279 comm="syz.5.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.800880][ T5928] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 438.838561][ T5928] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 438.849822][ T5928] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 438.863942][ T30] audit: type=1400 audit(1761206605.556:953): avc: denied { read } for pid=11279 comm="syz.5.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 439.524397][T11302] FAULT_INJECTION: forcing a failure. [ 439.524397][T11302] name failslab, interval 1, probability 0, space 0, times 0 [ 439.537332][T11302] CPU: 1 UID: 0 PID: 11302 Comm: syz.5.1490 Not tainted syzkaller #0 PREEMPT(full) [ 439.537355][T11302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 439.537365][T11302] Call Trace: [ 439.537371][T11302] [ 439.537377][T11302] dump_stack_lvl+0x16c/0x1f0 [ 439.537408][T11302] should_fail_ex+0x512/0x640 [ 439.537428][T11302] ? fs_reclaim_acquire+0xae/0x150 [ 439.537451][T11302] should_failslab+0xc2/0x120 [ 439.537471][T11302] __kmalloc_noprof+0xdd/0x880 [ 439.537495][T11302] ? tomoyo_encode2+0x100/0x3e0 [ 439.537518][T11302] ? tomoyo_encode2+0x100/0x3e0 [ 439.537536][T11302] tomoyo_encode2+0x100/0x3e0 [ 439.537558][T11302] tomoyo_encode+0x29/0x50 [ 439.537575][T11302] tomoyo_realpath_from_path+0x18f/0x6e0 [ 439.537603][T11302] tomoyo_path_number_perm+0x245/0x580 [ 439.537628][T11302] ? tomoyo_path_number_perm+0x237/0x580 [ 439.537657][T11302] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 439.537685][T11302] ? find_held_lock+0x2b/0x80 [ 439.537731][T11302] ? find_held_lock+0x2b/0x80 [ 439.537751][T11302] ? hook_file_ioctl_common+0x145/0x410 [ 439.537780][T11302] ? __fget_files+0x20e/0x3c0 [ 439.537802][T11302] security_file_ioctl+0x9b/0x240 [ 439.537822][T11302] __x64_sys_ioctl+0xb7/0x210 [ 439.537848][T11302] do_syscall_64+0xcd/0xfa0 [ 439.537875][T11302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.537892][T11302] RIP: 0033:0x7f6cc0b8efc9 [ 439.537906][T11302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.537921][T11302] RSP: 002b:00007f6cc1962038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.537939][T11302] RAX: ffffffffffffffda RBX: 00007f6cc0de5fa0 RCX: 00007f6cc0b8efc9 [ 439.537950][T11302] RDX: 0000200000000100 RSI: 0000000040046109 RDI: 0000000000000003 [ 439.537960][T11302] RBP: 00007f6cc1962090 R08: 0000000000000000 R09: 0000000000000000 [ 439.537970][T11302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.537980][T11302] R13: 00007f6cc0de6038 R14: 00007f6cc0de5fa0 R15: 00007ffd7f9d1718 [ 439.538007][T11302] [ 439.538109][T11302] ERROR: Out of memory at tomoyo_realpath_from_path. [ 439.749222][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'. [ 439.749601][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.798454][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.556990][T11315] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1493'. [ 442.454100][ T30] audit: type=1400 audit(1761206609.256:954): avc: denied { write } for pid=11325 comm="syz.4.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 444.083480][ T30] audit: type=1400 audit(1761206610.916:955): avc: denied { ioctl } for pid=11333 comm="syz.1.1499" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 444.141451][ T30] audit: type=1400 audit(1761206610.976:956): avc: denied { relabelfrom } for pid=11339 comm="syz.2.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 444.169077][ T30] audit: type=1400 audit(1761206610.976:957): avc: denied { relabelto } for pid=11339 comm="syz.2.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 444.193025][T11346] xt_limit: Overflow, try lower: 271964/0 [ 445.203061][ T5875] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 447.080978][T11359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.089498][T11359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.223546][ T5889] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 448.553021][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 448.703003][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 448.713714][ T24] usb 3-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 448.728071][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 9: 100, using maximum allowed: 30 [ 448.742020][ T24] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 448.755268][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.764638][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 448.775513][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.795772][ T24] usb 3-1: config 0 descriptor?? [ 448.824171][T11390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.832655][T11390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.891126][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1518'. [ 450.251542][ T30] audit: type=1400 audit(1761206617.086:958): avc: denied { watch_reads } for pid=11404 comm="syz.5.1519" path="/17" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 450.567401][T11100] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 451.042446][T11413] netlink: 'syz.4.1522': attribute type 32 has an invalid length. [ 451.183461][T11100] usb 6-1: Using ep0 maxpacket: 16 [ 451.230308][T11100] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 451.333413][ T5875] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 451.457183][ T24] usb 3-1: string descriptor 0 read error: -71 [ 451.469741][T11100] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.592296][T11100] usb 6-1: config 0 has no interface number 0 [ 451.767968][ T24] usb 3-1: USB disconnect, device number 38 [ 451.775464][ T5875] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 451.789607][T11100] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 451.856737][T11100] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.868725][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 451.885561][T11100] usb 6-1: Product: syz [ 451.893201][T11100] usb 6-1: Manufacturer: syz [ 451.901799][T11100] usb 6-1: SerialNumber: syz [ 451.902522][ T5875] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 451.939667][T11100] usb 6-1: config 0 descriptor?? [ 451.948293][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 452.050187][ T5875] usb 1-1: Product: syz [ 452.145601][ T5875] usb 1-1: Manufacturer: syz [ 452.169122][ T5875] usb 1-1: SerialNumber: syz [ 452.288352][ T5875] usb 1-1: config 0 descriptor?? [ 452.294899][T11100] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 452.303198][T11100] uvcvideo 6-1:0.105: No valid video chain found. [ 452.311909][ T5875] usb 1-1: selecting invalid altsetting 0 [ 452.333815][ T30] audit: type=1400 audit(1761206619.176:959): avc: denied { connect } for pid=11426 comm="syz.2.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 452.751002][T11100] usb 6-1: USB disconnect, device number 29 [ 453.014188][T11410] netlink: 'syz.0.1521': attribute type 1 has an invalid length. [ 453.026174][ T30] audit: type=1400 audit(1761206619.856:960): avc: denied { read write } for pid=11426 comm="syz.2.1527" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 453.186774][ T5875] usb 1-1: USB disconnect, device number 54 [ 453.222339][ T30] audit: type=1400 audit(1761206619.856:961): avc: denied { open } for pid=11426 comm="syz.2.1527" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 454.420172][ T30] audit: type=1400 audit(1761206621.256:962): avc: denied { ioctl } for pid=11447 comm="syz.2.1532" path="socket:[46883]" dev="sockfs" ino=46883 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.480182][ T30] audit: type=1400 audit(1761206621.316:963): avc: denied { map } for pid=11447 comm="syz.2.1532" path="socket:[46883]" dev="sockfs" ino=46883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.506953][ T30] audit: type=1400 audit(1761206621.316:964): avc: denied { read accept } for pid=11447 comm="syz.2.1532" path="socket:[46883]" dev="sockfs" ino=46883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.531424][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.128714][ T30] audit: type=1326 audit(1761206622.966:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 456.230180][ T30] audit: type=1326 audit(1761206622.996:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 456.263808][ T30] audit: type=1326 audit(1761206622.996:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 456.287826][ T30] audit: type=1326 audit(1761206622.996:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 456.311153][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.317827][ T30] audit: type=1326 audit(1761206622.996:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 456.341176][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.348332][ T30] audit: type=1326 audit(1761206622.996:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 456.373837][ T30] audit: type=1326 audit(1761206622.996:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 456.397202][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.456981][ T30] audit: type=1326 audit(1761206622.996:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 456.480372][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.512396][ T30] audit: type=1326 audit(1761206622.996:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 456.566845][ T30] audit: type=1326 audit(1761206622.996:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.0.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee27b8efc9 code=0x7ffc0000 [ 456.804032][T11100] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 457.033317][T11100] usb 3-1: Using ep0 maxpacket: 8 [ 457.065906][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 457.438238][T11100] usb 3-1: config 0 has an invalid interface number: 75 but max is 0 [ 457.446420][T11100] usb 3-1: config 0 has no interface number 0 [ 457.452532][T11100] usb 3-1: config 0 interface 75 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 457.467633][T11100] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=df.29 [ 457.476721][T11100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.484797][T11100] usb 3-1: Product: syz [ 457.489192][T11100] usb 3-1: Manufacturer: syz [ 457.493829][T11100] usb 3-1: SerialNumber: syz [ 457.499579][T11100] usb 3-1: config 0 descriptor?? [ 457.503233][ T5928] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 457.512116][ T5934] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 457.664800][ T5928] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 457.673364][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 457.683483][ T5928] usb 1-1: config 0 has no interface number 0 [ 457.689823][ T5934] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 457.699542][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 17152, setting to 1024 [ 457.710975][ T5934] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 457.721331][ T5934] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 457.730420][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.741037][ T5934] usb 6-1: config 0 descriptor?? [ 457.746806][T11485] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 457.773152][ T5928] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 457.818646][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.833872][ T5928] usb 1-1: Product: syz [ 457.838897][ T5928] usb 1-1: Manufacturer: syz [ 457.860108][ T5928] usb 1-1: SerialNumber: syz [ 457.993806][ T5928] usb 1-1: config 0 descriptor?? [ 458.104913][ T5934] hdpvr 6-1:0.0: firmware version 0x4b dated ³ [ 458.124794][ T5934] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 458.189112][T11100] usb 3-1: USB disconnect, device number 39 [ 458.398399][T11504] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1546'. [ 458.861735][T11503] Dead loop on virtual device ip6_vti0, fix it urgently! [ 459.082054][ T5934] hdpvr 6-1:0.0: Could not setup controls [ 459.088497][ T5934] hdpvr 6-1:0.0: registering videodev failed [ 459.129491][ T5934] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 459.141611][ T5934] usb 6-1: USB disconnect, device number 30 [ 460.113276][ T5928] usb 1-1: Firmware version (0.0) predates our first public release. [ 460.121524][ T5928] usb 1-1: Please update to version 0.2 or newer [ 460.662878][T11100] usb 1-1: USB disconnect, device number 55 [ 461.460778][T11544] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1557'. [ 461.873162][T11100] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 461.990065][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1555'. [ 462.185151][T11546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=11546 comm=syz.2.1558 [ 462.202005][T11546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=11546 comm=syz.2.1558 [ 462.218105][T11546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=11546 comm=syz.2.1558 [ 567.202896][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 567.209863][ C0] rcu: 1-...!: (1 ticks this GP) idle=3e1c/0/0x1 softirq=47416/47416 fqs=2 [ 567.219334][ C0] rcu: (detected by 0, t=10502 jiffies, g=40193, q=163 ncpus=2) [ 567.227039][ C0] Sending NMI from CPU 0 to CPUs 1: [ 567.227065][ C1] NMI backtrace for cpu 1 [ 567.227075][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 567.227090][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 567.227098][ C1] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 567.227123][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <75> 06 5a c3 cc cc cc cc 56 0f b6 f0 e8 9f ff ff ff 5e 5a e9 d8 43 [ 567.227136][ C1] RSP: 0018:ffffc90000a08d50 EFLAGS: 00000046 [ 567.227149][ C1] RAX: 0000000000000001 RBX: ffff88806838c2e8 RCX: ffffffff819937e3 [ 567.227157][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88806838c2e8 [ 567.227165][ C1] RBP: ffff88806838c2f0 R08: 0000000000000000 R09: ffffed100d07185d [ 567.227174][ C1] R10: ffff88806838c2eb R11: 0000000000000001 R12: ffff88806838c2f8 [ 567.227182][ C1] R13: 187e84158c000000 R14: 0000000000000002 R15: ffff8880256f6410 [ 567.227190][ C1] FS: 0000000000000000(0000) GS:ffff888124b0b000(0000) knlGS:0000000000000000 [ 567.227204][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.227213][ C1] CR2: 0000200000030000 CR3: 000000004a8b4000 CR4: 00000000003526f0 [ 567.227222][ C1] Call Trace: [ 567.227228][ C1] [ 567.227235][ C1] do_raw_spin_unlock+0x172/0x230 [ 567.227256][ C1] _raw_spin_unlock+0x1e/0x50 [ 567.227273][ C1] advance_sched+0x62b/0xc80 [ 567.227291][ C1] ? __pfx_advance_sched+0x10/0x10 [ 567.227302][ C1] __hrtimer_run_queues+0x202/0xad0 [ 567.227321][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 567.227336][ C1] ? read_tsc+0x9/0x20 [ 567.227355][ C1] hrtimer_interrupt+0x397/0x8e0 [ 567.227375][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 567.227389][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 567.227407][ C1] [ 567.227411][ C1] [ 567.227416][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.227431][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 567.227449][ C1] Code: 17 6d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 e5 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 567.227461][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 567.227471][ C1] RAX: 0000000001eedfe1 RBX: 0000000000000001 RCX: ffffffff8b6042a9 [ 567.227479][ C1] RDX: 0000000000000000 RSI: ffffffff8da2a184 RDI: ffffffff8bf06cc0 [ 567.227487][ C1] RBP: ffffed1003adb490 R08: 0000000000000001 R09: ffffed10170a6655 [ 567.227495][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 567.227503][ C1] R13: ffff88801d6da480 R14: ffffffff9081f4d0 R15: 0000000000000000 [ 567.227514][ C1] ? ct_kernel_exit+0x139/0x190 [ 567.227536][ C1] default_idle+0x13/0x20 [ 567.227548][ C1] default_idle_call+0x6c/0xb0 [ 567.227561][ C1] do_idle+0x38d/0x500 [ 567.227577][ C1] ? __pfx_do_idle+0x10/0x10 [ 567.227592][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 567.227608][ C1] cpu_startup_entry+0x4f/0x60 [ 567.227623][ C1] start_secondary+0x21d/0x2b0 [ 567.227641][ C1] ? __pfx_start_secondary+0x10/0x10 [ 567.227660][ C1] common_startup_64+0x13e/0x148 [ 567.227680][ C1] [ 567.228059][ C0] rcu: rcu_preempt kthread starved for 10497 jiffies! g40193 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 567.553458][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 567.563410][ C0] rcu: RCU grace-period kthread stack dump: [ 567.569275][ C0] task:rcu_preempt state:R running task stack:28232 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 567.582749][ C0] Call Trace: [ 567.586014][ C0] [ 567.588933][ C0] __schedule+0x1190/0x5de0 [ 567.593438][ C0] ? __lock_acquire+0x622/0x1c90 [ 567.598378][ C0] ? __pfx___schedule+0x10/0x10 [ 567.603229][ C0] ? find_held_lock+0x2b/0x80 [ 567.607903][ C0] ? schedule+0x2d7/0x3a0 [ 567.612227][ C0] schedule+0xe7/0x3a0 [ 567.616285][ C0] schedule_timeout+0x123/0x290 [ 567.621127][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 567.626489][ C0] ? __pfx_process_timeout+0x10/0x10 [ 567.631773][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 567.637571][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 567.643027][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 567.647783][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 567.653054][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 567.658243][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 567.663162][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 567.668003][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 567.673802][ C0] rcu_gp_kthread+0x26d/0x380 [ 567.678464][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 567.683647][ C0] ? rcu_is_watching+0x12/0xc0 [ 567.688402][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 567.693596][ C0] ? __kthread_parkme+0x19e/0x250 [ 567.698613][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 567.703797][ C0] kthread+0x3c5/0x780 [ 567.707850][ C0] ? __pfx_kthread+0x10/0x10 [ 567.712427][ C0] ? rcu_is_watching+0x12/0xc0 [ 567.717180][ C0] ? __pfx_kthread+0x10/0x10 [ 567.721759][ C0] ret_from_fork+0x675/0x7d0 [ 567.726330][ C0] ? __pfx_kthread+0x10/0x10 [ 567.730908][ C0] ret_from_fork_asm+0x1a/0x30 [ 567.735677][ C0] [ 567.738679][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 567.744986][ C0] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 567.754249][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 567.764287][ C0] Workqueue: events_unbound toggle_allocation_gate [ 567.770780][ C0] RIP: 0010:smp_call_function_many_cond+0xdfd/0x1600 [ 567.777447][ C0] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 e5 0c 0c 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 08 31 [ 567.797039][ C0] RSP: 0018:ffffc9000215f878 EFLAGS: 00000293 [ 567.803089][ C0] RAX: 0000000000000000 RBX: ffff8880b8540320 RCX: ffffffff81b0fd91 [ 567.811044][ C0] RDX: ffff88801cfa0000 RSI: ffffffff81b0fd6b RDI: 0000000000000005 [ 567.818999][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 567.826953][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 567.834907][ C0] R13: ffffed10170a8065 R14: 0000000000000001 R15: 0000000000000001 [ 567.842864][ C0] FS: 0000000000000000(0000) GS:ffff888124a0b000(0000) knlGS:0000000000000000 [ 567.851777][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.858345][ C0] CR2: 000000110c27d064 CR3: 000000000e182000 CR4: 00000000003526f0 [ 567.866304][ C0] Call Trace: [ 567.869568][ C0] [ 567.872490][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 567.877514][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 567.883829][ C0] ? perf_event_text_poke+0x130/0x180 [ 567.889185][ C0] ? __kmalloc_node_track_caller_noprof+0xf4/0x8a0 [ 567.895674][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 567.901385][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 567.906397][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 567.911503][ C0] smp_text_poke_batch_finish+0x5ad/0xdb0 [ 567.917217][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 567.923451][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 567.929694][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 567.935665][ C0] jump_label_update+0x376/0x550 [ 567.940593][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 567.946478][ C0] static_key_enable+0x1a/0x20 [ 567.951237][ C0] toggle_allocation_gate+0xfa/0x280 [ 567.956512][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 567.962398][ C0] ? rcu_is_watching+0x12/0xc0 [ 567.967153][ C0] process_one_work+0x9cf/0x1b70 [ 567.972085][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 567.978228][ C0] ? __pfx_process_one_work+0x10/0x10 [ 567.983595][ C0] ? assign_work+0x1a0/0x250 [ 567.988173][ C0] worker_thread+0x6c8/0xf10 [ 567.992760][ C0] ? __kthread_parkme+0x19e/0x250 [ 567.997777][ C0] ? __pfx_worker_thread+0x10/0x10 [ 568.002873][ C0] kthread+0x3c5/0x780 [ 568.006929][ C0] ? __pfx_kthread+0x10/0x10 [ 568.011504][ C0] ? rcu_is_watching+0x12/0xc0 [ 568.016259][ C0] ? __pfx_kthread+0x10/0x10 [ 568.020833][ C0] ret_from_fork+0x675/0x7d0 [ 568.025404][ C0] ? __pfx_kthread+0x10/0x10 [ 568.029980][ C0] ret_from_fork_asm+0x1a/0x30 [ 568.034749][ C0]