last executing test programs: 14m17.801239282s ago: executing program 0 (id=679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000800)='1', 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xd00}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa94, 0x800, 0x1000002, 0x1b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe344, 0x100, 0x40040001, 0x253, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000022, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) 14m11.899010403s ago: executing program 0 (id=692): syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) fallocate(0xffffffffffffffff, 0x100000000000011, 0x2000, 0x2f93) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 14m11.435893044s ago: executing program 0 (id=694): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a04c9000600000000000000ffff"], 0x22) 14m11.035246509s ago: executing program 0 (id=695): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r7}, 0x18) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) 14m8.008481183s ago: executing program 0 (id=700): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x5, @mcast1, 0x101}]}, &(0x7f0000000100)=0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000000000001000000c000000006000200861f", 0x1d, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001080900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write(r2, &(0x7f0000000900)="5b026c7c84c906313302b74cffc27a06877c09dc61343ab65276f8fec7d70d600a4e16599c827105ac95a27e5d69965d6efcf10b548be2c2652136869bf33ebba0c83ceb383ae23d8de5c6a723a02371626ed111780e5753699f245bdaf68f90deb799a63358aaf3477cbdc040bbc446c98091e1672b61f8e2abfd421fb9eb1b5457e2baa3488e18a3e2dad9d4fa0ee235aa506f3bd63c0d7e04cc", 0x9b) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="64010000130000032dbd7000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB], 0x164}}, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") 14m5.739645489s ago: executing program 0 (id=707): mknod$loop(&(0x7f0000000240)='./file0\x00', 0x1, 0x1) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x77ed, @private1={0xfc, 0x1, '\x00', 0x1}, 0xae}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)='P', 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000022c0)="81", 0x1}], 0x1}}], 0x2, 0xc000) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffff58}}, [0x5, 0x8, 0x8, 0xd, 0x4a58, 0x5, 0x8, 0x100, 0x4, 0x1, 0x2, 0x7, 0xfffffffffffff9d3, 0x3, 0x7]}, &(0x7f0000000200)=0x100) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x48080}, 0x8c0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) lsetxattr$security_evm(&(0x7f0000000180)='./trace/current_tracer\x00', &(0x7f00000001c0), &(0x7f0000000200)=@md5={0x1, "6cb915c46477bc50efc1af7084a3bc5c"}, 0x11, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f00000002c0)=0x46, 0x0, 0x5) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r5, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x8848, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0xebfd, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) write(r4, &(0x7f0000000140)='blk', 0x3) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) r9 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r9, 0x40284504, &(0x7f0000004e40)={0xb, 0x18, 0xeffe, 0xf, "4d512c91002a49500000008000000000f82a1d73f20000010000000000fbf29c"}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20044800}, 0x810) 13m50.493956085s ago: executing program 32 (id=707): mknod$loop(&(0x7f0000000240)='./file0\x00', 0x1, 0x1) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x77ed, @private1={0xfc, 0x1, '\x00', 0x1}, 0xae}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)='P', 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000022c0)="81", 0x1}], 0x1}}], 0x2, 0xc000) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffff58}}, [0x5, 0x8, 0x8, 0xd, 0x4a58, 0x5, 0x8, 0x100, 0x4, 0x1, 0x2, 0x7, 0xfffffffffffff9d3, 0x3, 0x7]}, &(0x7f0000000200)=0x100) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x48080}, 0x8c0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) lsetxattr$security_evm(&(0x7f0000000180)='./trace/current_tracer\x00', &(0x7f00000001c0), &(0x7f0000000200)=@md5={0x1, "6cb915c46477bc50efc1af7084a3bc5c"}, 0x11, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f00000002c0)=0x46, 0x0, 0x5) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r5, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x8848, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0xebfd, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) write(r4, &(0x7f0000000140)='blk', 0x3) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) r9 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r9, 0x40284504, &(0x7f0000004e40)={0xb, 0x18, 0xeffe, 0xf, "4d512c91002a49500000008000000000f82a1d73f20000010000000000fbf29c"}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20044800}, 0x810) 7m47.733793938s ago: executing program 1 (id=1406): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0x9, @local, 0x10001}, @in6={0xa, 0x4e24, 0x8, @loopback, 0xfffffff9}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x58a}, @in6={0xa, 0x4e21, 0x9, @remote, 0x1}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @multicast2}], 0xbc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r2}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f0000000680)='b\x90{\xc3/dev\x01\x00,\x14\x00\x00idiC#D#\x00\xae6\xb3\x1fO\xa13Hs\xf8\x028lu\xe0P/<\xd0y.\xbdSi7\xb1\xff\r\xc33\x17\xd3\\\xd0\xb0\x01\x00\x00\x00\x00\x00\x00\x00\xe7@@\xd8\x1b\xd4J.\x92\x89\xbd\xdd\x82\x88\xcc\x7f\xf2\xc2\x89\x03\x05\xfae\xd8\xc5\xf9\xc8\x04\xa3\xa5J\xda.p\xe3H\x85oAU\x15\x99\\\xa3\x86*LG\xbfC\x17\xba\xa5)\xde\xb1\xe4\xef\xd3\xa5\xb5\xf1\x1dG\x90\xdf\xe7l\x95\xb3\x85%~c\xb8\xd2c\xa0\x12\xd6\xa7\xcc\xaa\xa2uT\x8b\xd0\xea\x18a\x01\xe1\xde\xd2\x93B\b\x96\v\xf9?\xe9\xc7D\x98\x0f\x18\f\xf4\x81\xde\xaf\xa4\xddcw\xf9\x8c\x959f\t\a\x00\x00\x00\x00\x00\x00\x00', 0x121100, &(0x7f0000000440)={@align=0x7fff, {0xfffa, 0x4bd0, 0x8, 0x2}}, 0xd0, &(0x7f0000000100), &(0x7f0000000140)=0x8}) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r8, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}], {0x14}}, 0x3c}}, 0x840) 7m43.182289176s ago: executing program 5 (id=1412): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@x86={0x38, 0xa, 0x81, 0x0, 0x7ff, 0x5, 0x67, 0x0, 0x2, 0x6, 0x0, 0xd, 0x0, 0x5, 0x4, 0x9, 0xf3, 0x0, 0x4, '\x00', 0xb2, 0x44c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x2, 0x805, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000045c0)={0x0, 0x4, 0x1, 0xfffffffc}, 0x10) socket(0x1d, 0x2, 0x6) syz_io_uring_setup(0x3ee8, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000540), &(0x7f0000000240), &(0x7f00000000c0)) socket$inet_smc(0x2b, 0x1, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r4) r5 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9f, 0x2000000, 0x20010, r4, 0x20000000) r6 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)) syz_ublk_setup_io_uring(0x7646, &(0x7f0000000680)={0x0, 0xb274, 0x2000, 0x3, 0x1ff, 0x0, r4}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) r11 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r11, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r13, 0xc0145401, &(0x7f0000000200)={0x3, 0x2, 0x1, 0x1}) syz_io_uring_submit(r5, r8, r10, &(0x7f00000042c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, r4, 0x0, &(0x7f0000004280)={&(0x7f00000007c0)=@caif, 0x80, &(0x7f0000004180)=[{&(0x7f0000000840)=""/4, 0x4}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/104, 0x68}, {&(0x7f0000002e80)=""/254, 0xfe}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/189, 0xbd}, {&(0x7f0000004040)=""/70, 0x46}, {&(0x7f00000040c0)=""/182, 0xb6}], 0x8, &(0x7f0000004200)=""/108, 0x6c}, 0x0, 0x0, 0x1, {0x3, r12}}) 7m43.093544047s ago: executing program 2 (id=1414): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, 0x0, 0x0) shutdown(r4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 7m40.632009202s ago: executing program 2 (id=1417): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@setlink={0x34, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 7m40.443558416s ago: executing program 1 (id=1418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000500)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x801) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') read(r7, &(0x7f0000001380)=""/4096, 0x1000) close(r7) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2001f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xfffffffe}}], 0x1, 0x0, 0x0) 7m40.053774901s ago: executing program 2 (id=1419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@setlink={0x34, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 7m39.360126125s ago: executing program 1 (id=1420): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x21f}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x20040800) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c9000a0006000500010102d796bce5f3a3b7a317e1f34e677bc16807004cdc0b3e558bfe95f3fc026ea597ffb04488c2ae2aa957d19760c143e17bb5252a8894f6c2129712a065329775613fbefa75865f7f5cc6d6c58e7e9324994ee40da400476dc17ce6f3f7"], 0xf) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x87, 0x2, {}, {0xee01}, 0x8000000000000000, 0x2}) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) 7m39.067461538s ago: executing program 2 (id=1421): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0c010000", @ANYRES16, @ANYBLOB="080027bd7000ffdbdf25870000000c009900060000007e00000035002a0075040800000072060303030303030517b95181640ca3ba156f9ca5e1a99d7ab575c8cc2195e3ee06d9f9003c04010807c60000007b002a0082670004ff"], 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0xc801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40840) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r5}, 0x94) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000040), &(0x7f0000000040), 0xa7a, r7}, 0x38) 7m38.540497787s ago: executing program 1 (id=1422): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000"/117, 0x75, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c0", 0x10, 0x0, 0x0, 0x0) 7m38.180260988s ago: executing program 5 (id=1423): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300"/89, 0x59, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d535350000200000000000000000000000002082000"/124, 0x7c, 0x0, 0x0, 0x0) 7m37.450368687s ago: executing program 2 (id=1424): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/file0\x00', 0x20) 7m37.133096973s ago: executing program 5 (id=1427): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, 0x0, 0x0) shutdown(r4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 7m37.126210898s ago: executing program 1 (id=1428): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @private2, 0x1}, 0x1c) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x40}}, 0x4) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) mount(0x0, 0x0, &(0x7f0000000010)='proc\x00', 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'dh\x00', 0x1e, 0x4, 0x68}, 0x2c) 7m35.462594372s ago: executing program 2 (id=1430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000500)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x801) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') read(r7, &(0x7f0000001380)=""/4096, 0x1000) close(r7) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2001f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xfffffffe}}], 0x1, 0x0, 0x0) 7m34.578301014s ago: executing program 5 (id=1431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@setlink={0x34, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 7m31.140964023s ago: executing program 1 (id=1434): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8401, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='1', 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xd00}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa94, 0x800, 0x1000002, 0x1b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe344, 0x100, 0x40040001, 0x253, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000022, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) 7m30.970649325s ago: executing program 5 (id=1435): io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r3 = socket$packet(0x11, 0x3, 0x300) listen(r3, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000025c0)={{{@in=@initdev, @in6=@dev}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f00000024c0)=0x143) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r6, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r6, &(0x7f0000000240)={0x78, 0x0, r7, {0x2000000007, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0x58, 0x51d7, 0x0, 0x3, 0x2, 0x400000, 0xfffffff7, 0xa000, 0xa0000000, r8, r9, 0x483, 0xa98b, 0x1000000}}}, 0x78) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100037040100"/20, @ANYRES32=r11, @ANYBLOB="c30801000b2eba2628001280090001007665746800000000180002801400010000000000", @ANYRES32=r11, @ANYBLOB="0002020081025495"], 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x14) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r12, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(r10, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)=@expire={0x158, 0x18, 0x400, 0x70bd2a, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x42}, @in=@private=0xa010101, 0x4e23, 0x5, 0x4e22, 0x1ff, 0xa, 0xed7364be322e0c1f, 0x20, 0x87, 0x0, r5}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x33}, @in6=@empty, {0x5, 0xfffffffffffffff9, 0x1, 0x8, 0x8, 0x8, 0xf, 0xa}, {0xffffffffffff30be, 0x9, 0x3, 0xf00}, {0x4, 0x6, 0x2}, 0x70bd26, 0x34ff, 0xa, 0x0, 0x2}}, [@replay_thresh={0x8}, @etimer_thresh={0x8, 0xc, 0x200}, @lastused={0xc, 0xf, 0xe000000}, @user_kmaddress={0x2c, 0x13, {@in6=@local, @in=@private=0xa010102, 0x0, 0x2}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd29, 0xa}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}]}, 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000005680)='./sys/bus/acpi/devices/device:00/uevent\x00', 0x400, 0x100, &(0x7f00000056c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r4, &(0x7f0000000180)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc, &(0x7f00000055c0)=[{&(0x7f0000000480)={0x10c, 0x24, 0x300, 0x70bd26, 0x25dfdbfc, "", [@typed={0xc, 0x132, 0x0, 0x0, @u64=0xfff}, @generic="0b97fedc0614b110afbb157b36fe6aa75e49edd8f6363d7fbb4063eba2ac71a1de4e9afab0013b4b2812df390db86cc81b75729a9f028e1f10216b3f4d7a7143d9d9cbf4bc77c3b9cb47e13a3e7e1e31d35dc919153db33c95c0511651519402acd94dab2d19938b9ab53d01908f770205eca20b06e36235296246d752677ca66d425b84", @typed={0x8, 0x1c, 0x0, 0x0, @uid=r5}, @typed={0x14, 0x77, 0x0, 0x0, @ipv6=@mcast1}, @generic="c5b3fe19a331013491ecafc4c583ce22f44d0d8e9610306a915f51f125c221b1b5b0bb12ae2f1c327d961a85eb97e083e9bae5b80d547edb2f4878701698078e70e7f07e813c5ebeab181c2dec"]}, 0x10c}, {&(0x7f0000007ec0)={0x1274, 0x1e, 0x10, 0x70bd27, 0x25dfdbfb, "", [@nested={0x1c, 0x5, 0x0, 0x1, [@typed={0x8, 0x79, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x98, 0x0, 0x0, @pid=r0}, @typed={0x8, 0x14b, 0x0, 0x0, @u32=0x5}]}, @nested={0x3a, 0x10a, 0x0, 0x1, [@generic="048e028a377a44629298458e776d01ba3202c0e15e5223be3ba379c765bfb9196bac18a2fcc7", @nested={0x4, 0xba}, @typed={0x8, 0xbe, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0x150}]}, @typed={0x14, 0x47, 0x0, 0x0, @ipv6=@remote}, @nested={0xa0, 0x0, 0x0, 0x1, [@typed={0x4, 0x166}, @typed={0x14, 0x167, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="874e808b6583bda4af0e6b685fe987e2d1da6b79d1ea2bbfe776812e8ae1b66b67456d69197ae99404ba787e13622a673c2fda125142aa3853e1a2d7daa4efde0cad5b094027f4db4c99fb47ce8553d26abcdf175c8d630a961607c5f8df7d0bbf29271d3a2f720667d3bf5b236d5228cdbc0c8e9100de5af646ae3d", @typed={0x8, 0x14, 0x0, 0x0, @u32=0x1b2c}]}, @generic="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", @typed={0x4, 0x7}, @nested={0x81, 0x7, 0x0, 0x1, [@typed={0x14, 0x66, 0x0, 0x0, @ipv6=@empty}, @generic="5f16a9d8110970a1fbf3d92b40c11b906509c65a0dd4d1345c970f4a7a33bd9106c1e72e80ced1488ece0e30e2963948", @generic="baab6a42724b10b1801eab650de08efc66e8a1fd5703547b6c4c1b524e735da508412b8d820fe598c47a3e4b8b9eb7428d5d23d3d634d6d983"]}, @generic="e57bd36af168765d401526a468f8104a6891b5a94c4b1c31df5d6701223d48807ead89b9a898b9e0a5fce310455b1f829b9c5598a2e612ea01245eead840ccd8b8daf29583be4c9866b1ff927e6772880408fb896dd07aff3c65724dda23424cc82787fcc574f45c768e1f6763c7fcd631a7377319dbf9a3ef5aba48f030c1ac7ffcdb9a1fe6ba7b651ac41ac4e7344287e44d519194aee49d9dc9f13100b8030c5af21a98f0649b8702905a2213fddef466f6a8de1fa88e7221774dc7d4e84152e74611f492105666d515323a"]}, 0x1274}, {&(0x7f00000018c0)=ANY=[@ANYBLOB="200000002b00000829bd83e1b0a0b425c667908004003280080005e07082bb80"], 0x20}, {&(0x7f0000002240)=ANY=[@ANYBLOB="489644001f00000229bd7000fedbdf254497a00c11785dcfc5ea1c70de76a1fe0d6a1c06d585c72ac75a1857b481243360a0dd6dd6f498c6fc5442ae55efc03e1326595e202d7b10b8f42eaad3f1c8c1a19986eabf6e217363018047e7e42c08cdb96128508634cf2d1c3465e21472ebcb26de93375e24e48d6619cfa087054921caabecbcf6073ff97a9cfa705555f2177f61dc666abfb581c2ec9bea4e03f022ecafc5753935f69944a9ae6efee395ae138f7c82cfcbd1b8c1fd132a3fb68834f64ddfca035ee157e90a57880978e871b1dd7c5d319845f010860400b100680050800800af00", @ANYBLOB="54df59c0a2f1aad78321bd3878bda0f31c73030eade7404109c5af4a829d94f59437e19d0e066a2021170584837709e7d72520124a5a87211cf6e8a6d26d88b45e", @ANYBLOB="0e0033000000681d782f000015b8b40000ffff00940000000000", @ANYRES32=r2, @ANYBLOB="1697854b188451cd1ef920b8435efcc8dfc26e57daac88a9ffbc6dd780bc352457692cc52c7edf16d2080061000000000000"], 0x148}, {&(0x7f0000001a80)={0x1f8, 0x2a, 0x800, 0x70bd27, 0x25dfdbfd, "", [@nested={0xf9, 0x16a, 0x0, 0x1, [@nested={0x4, 0x60}, @nested={0x4, 0x1e}, @nested={0x4, 0x64}, @nested={0x4, 0x7c}, @nested={0x4, 0xd4}, @generic="10dfde55fc63483b60918f6dbff701856efaeba4c10282f0546a2be76b99347883d1d4f87c111ba4f91cfea3c08faa9765c7051d3b1d42c0ab4affdb50382723f1c9445ff0003570b68e4eab6c35cc074b319f9abdef1ad8b2a40e72e812c5e5ac532d6f07dffa958d612116914ac761a7aecbbc10ac0f5515b9a7f1616290c0c455d65a98a5ad8bc7b9222aa70d268add5541fd4e1fc4441ce1ff044a32a3cffbe401accc2cc1b50aca397375d47479a924931337f16fb9b3ff0ee1dd5cfc59903c36e67bcb18391d253d140e6e0cc5a8e23e3a97a7b3b884b0cf866ec05feb49"]}, @generic="cf76456b39409c593f927f9f32082ae56b85395745d6de9a9a1bd38fee5fa5d810c730f15f37015c64a6accbf2cb35993fd5a53a3edbbddb9634818a682691cee2dd783be4a869ad5eb7395909efc9f1e5a858fd568dcbe632a1deb076ce199a9ff24490efebd73b797ef8a1c9236af84a3a20df94b7498dee061876e549713d92fb1a8cfa91675931bb3869be8cf559079d9b518a70f7666e5fe07da61e696f370eab5ae3df859933aaede8346c3ab637e777ddf6e71e70af", @generic="4ef96ff28c2665a055f8c847279b18d484159cd1395bbec62f1b2301e68e694daaaabc3d883d05cd2ddafe1540b88d0416a9e9"]}, 0x1f8}, {&(0x7f0000001c80)={0x8c, 0x11, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@generic="2c8860e85da529a5d8ad93331106005513a8a9841762e0daf605177a15682ea63882768a5e63fa692c9e34af3691b19b81ee1dac7345884f5466fae9282f78e87301b940b8edbbdc3772c6126eb6743d0f7008e2038a75be54b9e8983cc571c6095457d087d48cf345e1414e8a6e5fa0b94b585c0ebc2d6ca559db"]}, 0x8c}, {&(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x1010}, {&(0x7f00000026c0)=ANY=[@ANYBLOB="780000002300040027bd7000fbdbdf25308d800092bddb838b93cb799574f5f3f598959c2a559f7de72a10fe43e5a34291d0febce68150e02d47386c679d3d969601dfb6d31dc338c5d98f08b68459f73777794ba773aab0ffcd22b7777884b381db804291ffa33d11e3009cfdc5ebccb4657dd00800630015eb5d1c704bbb1e0830b1dde8964ba34bd8674da441ecba028dbb292c06ad09bc8b784e1a10f64923765a45890dd54e66b37d4de23733d2c5ba201f292cb179e2de7192a575321f06bd0c3938113c6a58666041a8c9040c16cc897dac292e4d", @ANYRES32=r3, @ANYBLOB="f96749ee63951372099f1dd66f10932a2a8df6c93240a5c450a06df72f37f7189d3c988f5775d4d423b342898abf6da931931adb3e4157cc180196"], 0x78}, {&(0x7f0000002e00)=ANY=[@ANYBLOB="100000002b0008002cb17000fedbdf25"], 0x10}, {&(0x7f0000006a00)={0x1498, 0x1d, 0x300, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x76, 0x0, 0x0, @pid=r0}, @nested={0x88, 0x1a, 0x0, 0x1, [@typed={0x7b, 0x42, 0x0, 0x0, @binary="28188513c0e1a9e60af27472ff5172fab1a259471d5d265989ba7b796ca30204da3087316cadcc7f1d8e1d9bfc1a23df9f89858f75721afd2b138c4e1dbfaf4ecff9a4a66cba5143e53b3a5a896032135819e5f6360df40e5eca0054b4032f458b9fd546e956d9f0129e2a6e1c7428b1c21f198c93d0e0"}, @typed={0x8, 0x125, 0x0, 0x0, @binary="aa9b613f"}]}, @typed={0x4, 0xca}, @generic="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", @generic="0246728fa374dad3b844a0ce934fe17c18", @nested={0x30d, 0xe9, 0x0, 0x1, [@generic="b0cac683d0f0ef3bed0720f8b31fa8cdee49ad74516d5e3d149acf607127064575f4204dafd37ebafe9bb7d974549ee72687d21ed51c1358900688d0f3b8134ed35ef2e8129278a8dce02fe37327705c1747fc0da1c3d43632440b53ce46e57df3e57472e253e92305df4879e8c15b27b311d5e48db921b5", @nested={0x4, 0xf4}, @typed={0x14, 0xef, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1f}}, @typed={0xa, 0x20, 0x0, 0x0, @str='sysfs\x00'}, @generic="11dfbb8599daa80917b800a1ca7d9a23325c5a23b0077d7cf83c7d28ed60ca0291e309f511b424e609ea2816144dc58dfadeb0f600a41b98516d837c0ecc6700ee2aa770738d9353348a572210e3fc6b1b0ae55186f1ff33746fa89012f8dc106818a4d46fdb826ff313f6452d8cfde41b1d1ae87647538eac6cd86debd15782b95f275e3aeb951f2102a1b17c477c60c9b9da7a455f289ab2dfe00d132b849b416e30b7cff9fe5f1e8b8e5b", @generic="6fbc1fec7d3bf6d61f8d8cd05fd5668536347cdbf9ea72", @typed={0x8, 0x11f, 0x0, 0x0, @uid=r8}, @generic="fbb88dc22800f807ff8ca567b25e5e8540f5c3dbe303c4101264c3146ffbd3c449bd2809bf2236d5b074b8540da44050cb0d65fbd7568f6769b96c16ec4222dab28e6a319e9bed5f3c999f90fdd893f160b79ef64ded0160e370c27a8cc03f3b92f9a9b8984962ab04fdfdbe360d1940f51028badd65fed81e4f2d70666b06f4f53419f8d7c424c90b26499070bfd4436c8202adb994bea32edadb110d2ee6f4b09af7aae6eaa674982aeb3b6155cfc8b548ccfcc40743088bd351807c75cd045d5746074ce272", @generic="c9cf241b2eeef6216e3c170c798d6d1bb80ea1be7d05b7cd7b5dc8262ca1ae64921a873ebac87faa606c6b5b1a4010abbe14fd302b83ac26ab1a2b2e301dfe96bf0f6c888ccb4da822e5f7b268c4ccb0bf181ee84675bf8cb72aeae146b1eba99231c35f3bbc3dd9ed0e922a1f9516454a97ff407e3c6c2dba847bdc934adc564b0a6b9136e0cce0fda141c823256e09c503409d8deef45a07c1fb4208bb1f9f8e1c3cb6426263c63a6d04f9147f6be2a7f3f46fd9e2fc175d599167c4a0e3390fb48b4a5d8b5463530047f8af60c1eca92d06", @typed={0x8, 0x4b, 0x0, 0x0, @uid}]}, @generic="5cc9654e5d74b28d7a0be3f6185789543d15d330c7f8888224054223cc6ede68264c2a05c1aef0b65dc70424df102311b9f496275f83336131bf4c9403c83f7477bdd0b258f3e7f9d70b0a260de030ea7ca7f71bdec4e9a3ecf6eca82e9a536ead6cf6232e88194c51c92903dc83f8e3d9beba8147f958a18bad2a03cb29e482d1a4fd0a0eee75421a3ee0e531cedf70573c9a4b82259537142fd8bd9dfe905be11fc631aea89059329959a225a13acf22b2137078629e22cde4b836ebc4bf521b1fe3b3fd17107b8b1f8ccffa903bcf"]}, 0x1498}], 0xa, &(0x7f00000057c0)=[@cred={{0x1c, 0x1, 0x2, {r0, r13, r14}}}], 0x20}, 0x20008000) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x4000, 0x0) r15 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/device:00/uevent\x00', 0x1, 0x0) write$FUSE_INIT(r15, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x2, 0x104, 0x6, 0x4, 0xc06ac84, 0xc, 0x0, 0x0, 0x2, 0x3857}}, 0x50) 7m26.398306286s ago: executing program 5 (id=1436): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000ac46b740e1092151c140010203010902120001000000000904"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000ac46b740e1092151c140010203010902120001000000000904"], 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) (async) 7m19.977861793s ago: executing program 33 (id=1430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000500)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x801) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') read(r7, &(0x7f0000001380)=""/4096, 0x1000) close(r7) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2001f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xfffffffe}}], 0x1, 0x0, 0x0) 7m15.327653793s ago: executing program 34 (id=1434): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8401, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='1', 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xd00}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa94, 0x800, 0x1000002, 0x1b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe344, 0x100, 0x40040001, 0x253, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000022, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000680)=[@acquire_done, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) 7m10.815598797s ago: executing program 35 (id=1436): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000ac46b740e1092151c140010203010902120001000000000904"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000ac46b740e1092151c140010203010902120001000000000904"], 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) (async) 1m55.172258913s ago: executing program 6 (id=1942): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m54.272856685s ago: executing program 6 (id=1944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x0, &(0x7f0000002d40)=[{&(0x7f00000003c0)=""/11}, {&(0x7f0000000500)=""/154}, {&(0x7f0000000700)=""/202}, {&(0x7f0000001c40)=""/4096}, {&(0x7f0000002c40)=""/225}]}, 0x5}], 0x3fffffffffffe09, 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 1m48.389650717s ago: executing program 6 (id=1964): openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2b40, 0x0) syz_open_procfs(0x0, 0x0) writev(r5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r6, 0x4030582b, &(0x7f0000000300)={0x0, 0x0, 0xffe00000000, 0x7, 0x4, 0x6}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[], 0x10) r7 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3, 0x2}}) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010022"], 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r1) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)={0x38, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x38}}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x17c}) 1m47.408255543s ago: executing program 6 (id=1970): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1000000000) 1m45.201086469s ago: executing program 6 (id=1979): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x4000000) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) connect$unix(r3, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) write$tun(r6, 0x0, 0x0) 1m42.737977176s ago: executing program 6 (id=1989): r0 = socket(0xa, 0x3, 0xff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/address_bits', 0x2202, 0x0) syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 1m32.628494836s ago: executing program 8 (id=2032): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_settime(0x0, 0x0) 1m32.051137992s ago: executing program 8 (id=2038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) poll(0x0, 0x0, 0x9) 1m31.824403577s ago: executing program 8 (id=2039): r0 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x7f, 0x8, &(0x7f0000000140)="34d947b9b253f9a4") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r2, r2) 1m30.369028836s ago: executing program 8 (id=2047): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000005c0)="a75f04ebffffff6f2f3534fdb867", 0x0, 0x400000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m29.416735044s ago: executing program 8 (id=2048): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m29.31085355s ago: executing program 8 (id=2049): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x0, 0x38e}, 0x0, &(0x7f0000ff4000), 0x0) 1m27.672895364s ago: executing program 36 (id=1989): r0 = socket(0xa, 0x3, 0xff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/address_bits', 0x2202, 0x0) syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 1m14.225237408s ago: executing program 37 (id=2049): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x0, 0x38e}, 0x0, &(0x7f0000ff4000), 0x0) 1m1.135288159s ago: executing program 3 (id=2149): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_connect$midi(0x5, 0x32, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x15ca, 0x1806, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x0, 0xa0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, [], [{{0x9, 0x5, 0x7, 0x3, 0x200, 0x3, 0x0, 0x5, {0x5, 0x25, 0x1, 0x1, "9a"}}}]}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 59.676374664s ago: executing program 4 (id=2155): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 58.86688281s ago: executing program 9 (id=2156): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000526) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0, 0x19) getdents(r3, 0x0, 0x0) 58.798685276s ago: executing program 3 (id=2157): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x98, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 58.462079327s ago: executing program 9 (id=2159): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r0, 0x0, 0x0, 0x800) 58.056151366s ago: executing program 9 (id=2161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xbf}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004801}, 0x24040080) 57.075645708s ago: executing program 4 (id=2162): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x10000004, 0xc0, &(0x7f0000002380)=""/192}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="160000000400000008000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000300"/18], 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/vmstat\x00', 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d00000004000000080000000000000001"], 0x40) 56.534536035s ago: executing program 9 (id=2164): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x24004884) dup(0xffffffffffffffff) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}) fchdir(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 56.516410739s ago: executing program 4 (id=2165): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0xa8, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 56.493797325s ago: executing program 3 (id=2166): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071123600000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) socket$nl_generic(0x11, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f0000000340)='\x00\x00\x00\x00', 0x4}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, &(0x7f0000000000)={0x4dd49c4f, 0x1, 0x7}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]) 55.533886527s ago: executing program 4 (id=2167): setreuid(0x0, 0xee01) r0 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sync() add_key$fscrypt_provisioning(&(0x7f0000000d00), 0x0, 0x0, 0x0, r0) 55.484939936s ago: executing program 3 (id=2168): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x4280286) readv(r0, 0x0, 0x0) readv(r0, &(0x7f00000030c0)=[{&(0x7f0000000280)=""/240, 0xf0}], 0x1) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd", 0x2}], 0x1, 0x0, 0x0) 55.336480967s ago: executing program 7 (id=2169): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 55.154337765s ago: executing program 7 (id=2170): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x56, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 55.130855688s ago: executing program 3 (id=2171): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000540)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 55.064303839s ago: executing program 9 (id=2172): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) write$selinux_validatetrans(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sendto$unix(r3, 0x0, 0x0, 0x84, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000900)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r6 = socket(0x10, 0x803, 0x0) accept$inet6(r6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0xfffffffffffffffd) 54.868916071s ago: executing program 4 (id=2173): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = io_uring_setup(0x79b2, &(0x7f0000000100)={0x0, 0xaa00, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000040)="d2", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='0fc5:1227:eg', 0xc) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000002780), 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b48, 0x0) 53.699155253s ago: executing program 7 (id=2174): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) 53.697863989s ago: executing program 4 (id=2175): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x44800}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000001780)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0xbbe9b68db8b621d2) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) 53.561904084s ago: executing program 9 (id=2176): mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0, 0x9, 0xba, &(0x7f0000000480)=""/186, 0x41100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) madvise(&(0x7f00005cf000/0x3000)=nil, 0x3000, 0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00', 0x1ff) 53.31248148s ago: executing program 7 (id=2177): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd28, 0x35dfdbff, {0xa, 0x80, 0x0, 0x0, 0xb5, 0x0, 0x0, 0xecbccf9d081e67cc, 0x17}}, 0x1c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) 52.997050866s ago: executing program 7 (id=2178): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_usb_connect(0x0, 0x6b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad09", @ANYRES64], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r5, 0x7, 0x1000002, 0x1, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x7}]}, 0x3c}}, 0x40800) fcntl$setpipe(r3, 0x407, 0x100004) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) 49.155332453s ago: executing program 7 (id=2179): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f00000001c0)={0x7, 0x2, 0x4, 0x1}, 0x8) 45.905096715s ago: executing program 3 (id=2180): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 33.025560966s ago: executing program 38 (id=2176): mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0, 0x9, 0xba, &(0x7f0000000480)=""/186, 0x41100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) madvise(&(0x7f00005cf000/0x3000)=nil, 0x3000, 0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00', 0x1ff) 22.316716173s ago: executing program 39 (id=2175): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x44800}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000001780)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0xbbe9b68db8b621d2) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) 11.715054187s ago: executing program 40 (id=2179): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f00000001c0)={0x7, 0x2, 0x4, 0x1}, 0x8) 0s ago: executing program 41 (id=2180): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) kernel console output (not intermixed with test programs): 8][T14484] do_sys_openat2+0xc7/0x1e0 [ 999.662412][T14484] ? __pfx_do_sys_openat2+0x10/0x10 [ 999.662434][T14484] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 999.662460][T14484] ? __fget_files+0x21f/0x3d0 [ 999.662492][T14484] __x64_sys_openat+0x12d/0x210 [ 999.662515][T14484] ? __pfx___x64_sys_openat+0x10/0x10 [ 999.662536][T14484] ? ksys_write+0x1ac/0x250 [ 999.662559][T14484] do_syscall_64+0x123/0x790 [ 999.662583][T14484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.662601][T14484] RIP: 0033:0x7f559f79e159 [ 999.662617][T14484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.662634][T14484] RSP: 002b:00007f55a0656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 999.662655][T14484] RAX: ffffffffffffffda RBX: 00007f559fa26090 RCX: 00007f559f79e159 [ 999.662667][T14484] RDX: 0000000000004180 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 999.662678][T14484] RBP: 00007f55a0656090 R08: 0000000000000000 R09: 0000000000000000 [ 999.662689][T14484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.662699][T14484] R13: 00007f559fa26128 R14: 00007f559fa26090 R15: 00007ffdf99266d8 [ 999.662723][T14484] [ 999.984107][T12361] usb 7-1: USB disconnect, device number 17 [ 1000.002902][T12361] idmouse 7-1:1.0: disconnected [ 1000.112972][T14487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 1000.158306][ T31] audit: type=1400 audit(1789116511.440:7397): avc: denied { ioctl } for pid=14488 comm="syz.8.1772" path="socket:[55777]" dev="sockfs" ino=55777 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1000.162293][ T31] audit: type=1400 audit(1789116511.440:7398): avc: denied { write } for pid=14488 comm="syz.8.1772" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1000.218629][T14494] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1772'. [ 1001.577128][T12361] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 1001.735704][T14507] FAULT_INJECTION: forcing a failure. [ 1001.735704][T14507] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.735757][T14507] CPU: 1 UID: 0 PID: 14507 Comm: syz.7.1778 Not tainted syzkaller #0 PREEMPT(full) [ 1001.735771][T14507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1001.735778][T14507] Call Trace: [ 1001.735783][T14507] [ 1001.735787][T14507] dump_stack_lvl+0x100/0x190 [ 1001.735808][T14507] should_fail_ex.cold+0x5/0xa [ 1001.735824][T14507] should_failslab+0xc2/0x120 [ 1001.735839][T14507] __kmalloc_noprof+0xfc/0x840 [ 1001.735851][T14507] ? tomoyo_encode2+0xfb/0x3c0 [ 1001.735867][T14507] tomoyo_encode2+0xfb/0x3c0 [ 1001.735884][T14507] tomoyo_encode+0x29/0x50 [ 1001.735896][T14507] tomoyo_realpath_from_path+0x18c/0x690 [ 1001.735913][T14507] tomoyo_path_number_perm+0x23c/0x580 [ 1001.735930][T14507] ? tomoyo_path_number_perm+0x22e/0x580 [ 1001.735949][T14507] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1001.735972][T14507] ? __lock_acquire+0x5c0/0x1f40 [ 1001.735991][T14507] ? __fget_files+0x34/0x3d0 [ 1001.736005][T14507] ? find_held_lock+0x2b/0x80 [ 1001.736020][T14507] ? hook_file_ioctl_common+0x140/0x440 [ 1001.736038][T14507] ? __fget_files+0x21f/0x3d0 [ 1001.736053][T14507] security_file_ioctl+0xd3/0x230 [ 1001.736066][T14507] __x64_sys_ioctl+0xb7/0x210 [ 1001.736078][T14507] do_syscall_64+0x123/0x790 [ 1001.736095][T14507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.736107][T14507] RIP: 0033:0x7f8d4059e159 [ 1001.736117][T14507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.736128][T14507] RSP: 002b:00007f8d4151d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1001.736139][T14507] RAX: ffffffffffffffda RBX: 00007f8d40825fa0 RCX: 00007f8d4059e159 [ 1001.736147][T14507] RDX: 0000200000000040 RSI: 000000004008af00 RDI: 0000000000000003 [ 1001.736154][T14507] RBP: 00007f8d4151d090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.736160][T14507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.736167][T14507] R13: 00007f8d40826038 R14: 00007f8d40825fa0 R15: 00007fff20c2c9e8 [ 1001.736185][T14507] [ 1001.736219][T14507] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1001.815046][T12361] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1001.816873][T12361] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.816894][T12361] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1001.816949][T12361] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.819886][T12361] usb 7-1: config 0 descriptor?? [ 1001.826659][T12361] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1001.826751][T12361] dvb-usb: bulk message failed: -22 (3/0) [ 1001.832203][T12361] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1001.833141][T12361] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1001.833178][T12361] usb 7-1: media controller created [ 1001.836555][T12361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1001.843675][T12361] dvb-usb: bulk message failed: -22 (6/0) [ 1001.843793][T12361] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1001.848621][T12361] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input54 [ 1001.853612][T12361] dvb-usb: schedule remote query interval to 150 msecs. [ 1001.853723][T12361] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1001.899769][ T5707] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1001.899877][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1002.007876][T12361] dvb-usb: bulk message failed: -22 (1/0) [ 1002.007901][T12361] dvb-usb: error while querying for an remote control event. [ 1002.119138][ T9] usb 4-1: device descriptor read/64, error -71 [ 1002.204101][ T5707] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1002.205536][ T5707] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 3751, setting to 64 [ 1002.232684][ T5707] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.232713][ T5707] usb 9-1: Product: syz [ 1002.232728][ T5707] usb 9-1: Manufacturer: syz [ 1002.232743][ T5707] usb 9-1: SerialNumber: syz [ 1002.244802][T12361] dvb-usb: bulk message failed: -22 (1/0) [ 1002.244830][T12361] dvb-usb: error while querying for an remote control event. [ 1002.281977][ T5707] usb 9-1: config 0 descriptor?? [ 1002.282554][T14500] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1002.360865][T14509] dvb-usb: bulk message failed: -22 (2/0) [ 1002.362176][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1002.916950][T12361] dvb-usb: bulk message failed: -22 (1/0) [ 1002.916979][T12361] dvb-usb: error while querying for an remote control event. [ 1002.999768][ T5707] hub 9-1:0.0: bad descriptor, ignoring hub [ 1002.999862][ T5707] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1003.068269][ T5707] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input55 [ 1003.092233][ T9] usb 4-1: device descriptor read/64, error -71 [ 1003.204321][ T9] usb usb4-port1: attempt power cycle [ 1003.450187][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1003.450213][ T5803] dvb-usb: error while querying for an remote control event. [ 1003.557880][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1003.582881][T12029] usb 9-1: USB disconnect, device number 14 [ 1003.610303][T12361] dvb-usb: bulk message failed: -22 (1/0) [ 1003.610333][T12361] dvb-usb: error while querying for an remote control event. [ 1003.768140][T12361] dvb-usb: bulk message failed: -22 (1/0) [ 1003.768171][T12361] dvb-usb: error while querying for an remote control event. [ 1003.778676][ T9] usb 4-1: device not accepting address 41, error -71 [ 1004.030286][T12361] dvb-usb: bulk message failed: -22 (1/0) [ 1004.030392][T12361] dvb-usb: error while querying for an remote control event. [ 1004.187647][ T5805] dvb-usb: bulk message failed: -22 (1/0) [ 1004.187862][ T5805] dvb-usb: error while querying for an remote control event. [ 1004.375169][ T5805] dvb-usb: bulk message failed: -22 (1/0) [ 1004.399127][ T5805] dvb-usb: error while querying for an remote control event. [ 1004.553557][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1784'. [ 1004.553732][T12029] usb 7-1: USB disconnect, device number 18 [ 1004.630993][T12029] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1005.632750][ T31] audit: type=1400 audit(1789116516.230:7399): avc: denied { map } for pid=14531 comm="syz.6.1785" path="socket:[55921]" dev="sockfs" ino=55921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1005.824593][T14536] FAULT_INJECTION: forcing a failure. [ 1005.824593][T14536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.824635][T14536] CPU: 0 UID: 0 PID: 14536 Comm: syz.8.1787 Not tainted syzkaller #0 PREEMPT(full) [ 1005.824656][T14536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1005.824667][T14536] Call Trace: [ 1005.824674][T14536] [ 1005.824682][T14536] dump_stack_lvl+0x100/0x190 [ 1005.824713][T14536] should_fail_ex.cold+0x5/0xa [ 1005.824740][T14536] _copy_from_user+0x2e/0xd0 [ 1005.824759][T14536] kstrtouint_from_user+0xd6/0x1d0 [ 1005.824783][T14536] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1005.824810][T14536] ? lock_acquire+0x1d1/0x380 [ 1005.824836][T14536] proc_fail_nth_write+0x83/0x220 [ 1005.824860][T14536] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1005.824889][T14536] vfs_write+0x2aa/0x1050 [ 1005.824909][T14536] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1005.824930][T14536] ? lock_acquire+0x1d1/0x380 [ 1005.824948][T14536] ? __fget_files+0x34/0x3d0 [ 1005.824969][T14536] ? __pfx_vfs_write+0x10/0x10 [ 1005.824985][T14536] ? find_held_lock+0x2b/0x80 [ 1005.825011][T14536] ? __fget_files+0x215/0x3d0 [ 1005.825037][T14536] ? __fget_files+0x21f/0x3d0 [ 1005.825067][T14536] ksys_write+0x12a/0x250 [ 1005.825085][T14536] ? __pfx_ksys_write+0x10/0x10 [ 1005.825112][T14536] do_syscall_64+0x123/0x790 [ 1005.825138][T14536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.825157][T14536] RIP: 0033:0x7f559f75e98e [ 1005.825172][T14536] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1005.825189][T14536] RSP: 002b:00007f55a0676fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1005.825207][T14536] RAX: ffffffffffffffda RBX: 00007f55a06776c0 RCX: 00007f559f75e98e [ 1005.825221][T14536] RDX: 0000000000000001 RSI: 00007f55a06770a0 RDI: 0000000000000005 [ 1005.825232][T14536] RBP: 00007f55a0677090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.825244][T14536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.825255][T14536] R13: 00007f559fa26038 R14: 00007f559fa25fa0 R15: 00007ffdf99266d8 [ 1005.825284][T14536] [ 1010.059335][T14565] CIFS: Attempting to mount //127.0.0.1/share [ 1010.121491][T14566] CIFS: VFS: Invalid response size 0 for command 0 [ 1010.121597][T14566] CIFS: VFS: \\127.0.0.1 SMB response too short (9 bytes) [ 1010.134269][T14565] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1010.546782][ T5783] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1010.698857][ T5783] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1010.700931][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.700956][ T5783] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1010.700997][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.746993][ T5783] usb 5-1: config 0 descriptor?? [ 1011.886762][ T5783] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1011.886800][ T5783] dvb-usb: bulk message failed: -22 (3/0) [ 1011.890284][ T5783] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1012.020303][ T5783] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1012.020350][ T5783] usb 5-1: media controller created [ 1012.021611][ T5783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1012.025669][ T5783] dvb-usb: bulk message failed: -22 (6/0) [ 1012.025731][ T5783] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1012.116200][T14582] dvb-usb: bulk message failed: -22 (2/0) [ 1013.740766][ T5783] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input56 [ 1013.765565][ T5783] dvb-usb: schedule remote query interval to 150 msecs. [ 1013.765592][ T5783] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1013.916449][ T5783] dvb-usb: bulk message failed: -22 (1/0) [ 1013.916475][ T5783] dvb-usb: error while querying for an remote control event. [ 1013.959717][T14588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1014.076557][ T5783] dvb-usb: bulk message failed: -22 (1/0) [ 1014.076587][ T5783] dvb-usb: error while querying for an remote control event. [ 1014.121371][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1798'. [ 1014.251078][ T5783] dvb-usb: bulk message failed: -22 (1/0) [ 1014.251103][ T5783] dvb-usb: error while querying for an remote control event. [ 1014.292612][T14596] CIFS: Attempting to mount //127.0.0.1/share [ 1014.350506][T14597] CIFS: VFS: data area offset 65 overlaps SMB2 header 129 [ 1014.350671][T14597] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x1 [ 1014.351715][T14596] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1014.407924][ T5707] dvb-usb: bulk message failed: -22 (1/0) [ 1014.407953][ T5707] dvb-usb: error while querying for an remote control event. [ 1014.618038][T14604] CUSE: info not properly terminated [ 1014.714835][T14604] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 1014.715053][T14604] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 1015.024445][ T5803] usb 5-1: USB disconnect, device number 22 [ 1015.203057][ T5803] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1015.476306][ T5783] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1015.476455][T12029] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1016.766759][T12029] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1016.767303][ T5783] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 1016.768248][T12029] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.768270][T12029] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1016.768386][T12029] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.772050][ T5783] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.775972][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.775995][ T5783] usb 4-1: Product: syz [ 1016.776008][ T5783] usb 4-1: Manufacturer: syz [ 1016.776021][ T5783] usb 4-1: SerialNumber: syz [ 1016.924557][ T5783] usb 4-1: config 0 descriptor?? [ 1016.965922][T12029] usb 9-1: config 0 descriptor?? [ 1017.269643][ T5783] ums_eneub6250 4-1:0.0: USB Mass Storage device detected [ 1018.058047][T12029] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1018.058089][T12029] dvb-usb: bulk message failed: -22 (3/0) [ 1018.163001][T12029] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1018.200559][T12029] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1018.200706][T12029] usb 9-1: media controller created [ 1018.254144][T12029] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1018.485740][T12029] dvb-usb: bulk message failed: -22 (6/0) [ 1018.485782][T12029] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1018.514825][T12029] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input57 [ 1018.534581][T12029] dvb-usb: schedule remote query interval to 150 msecs. [ 1018.534603][T12029] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1018.647276][ T5783] usb 4-1: USB disconnect, device number 43 [ 1019.821252][ T5707] dvb-usb: bulk message failed: -22 (1/0) [ 1019.821281][ T5707] dvb-usb: error while querying for an remote control event. [ 1020.006215][ T5707] dvb-usb: bulk message failed: -22 (1/0) [ 1020.006244][ T5707] dvb-usb: error while querying for an remote control event. [ 1020.025262][T12505] usb 9-1: USB disconnect, device number 15 [ 1020.174668][T12505] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1020.252028][T14637] batman_adv: batadv0: Adding interface: veth0 [ 1020.252046][T14637] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.252073][T14637] batman_adv: batadv0: Interface activated: veth0 [ 1020.532429][T14638] input: syz0 as /devices/virtual/input/input58 [ 1021.043117][T14632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.500531][T14637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1021.500549][T14637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.517069][T14637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1021.517089][T14637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.524165][T14637] batman_adv: batadv0: Interface deactivated: veth0 [ 1021.524183][T14637] batman_adv: batadv0: Removing interface: veth0 [ 1022.082042][ T5707] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1022.236497][ T5707] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1022.238145][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.238297][ T5707] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1022.238471][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.244663][ T5707] usb 5-1: config 0 descriptor?? [ 1022.293597][ T5707] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1022.293634][ T5707] dvb-usb: bulk message failed: -22 (3/0) [ 1022.311231][ T5707] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1022.312861][ T5707] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1022.312913][ T5707] usb 5-1: media controller created [ 1022.336336][ T5707] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1022.363717][ T5707] dvb-usb: bulk message failed: -22 (6/0) [ 1022.378039][ T5707] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1022.382942][ T5707] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input59 [ 1022.405795][ T5707] dvb-usb: schedule remote query interval to 150 msecs. [ 1022.405817][ T5707] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1022.597199][T12029] dvb-usb: bulk message failed: -22 (1/0) [ 1022.597231][T12029] dvb-usb: error while querying for an remote control event. [ 1023.009552][ T5707] dvb-usb: bulk message failed: -22 (1/0) [ 1023.009583][ T5707] dvb-usb: error while querying for an remote control event. [ 1023.175815][ T5707] dvb-usb: bulk message failed: -22 (1/0) [ 1023.175843][ T5707] dvb-usb: error while querying for an remote control event. [ 1023.526523][T14648] input: syz0 as /devices/virtual/input/input60 [ 1024.102750][ T5707] dvb-usb: bulk message failed: -22 (1/0) [ 1024.102775][ T5707] dvb-usb: error while querying for an remote control event. [ 1024.254975][ T5707] dvb-usb: bulk message failed: -22 (1/0) [ 1024.255002][ T5707] dvb-usb: error while querying for an remote control event. [ 1024.414706][T14657] batman_adv: batadv0: Adding interface: veth0 [ 1024.414736][T14657] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.414764][T14657] batman_adv: batadv0: Interface activated: veth0 [ 1024.417961][T14657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.417983][T14657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.421841][T14657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.421858][T14657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.425590][ T5783] dvb-usb: bulk message failed: -22 (1/0) [ 1024.425611][ T5783] dvb-usb: error while querying for an remote control event. [ 1024.448628][T14657] batman_adv: batadv0: Interface deactivated: veth0 [ 1024.448648][T14657] batman_adv: batadv0: Removing interface: veth0 [ 1024.508323][T14651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1024.574959][ T5783] dvb-usb: bulk message failed: -22 (1/0) [ 1024.574983][ T5783] dvb-usb: error while querying for an remote control event. [ 1024.740827][ T5707] dvb-usb: bulk message failed: -22 (1/0) [ 1024.740857][ T5707] dvb-usb: error while querying for an remote control event. [ 1024.889016][T12361] usb 5-1: USB disconnect, device number 23 [ 1024.981883][T12361] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1024.981917][ T31] audit: type=1400 audit(1789116536.263:7400): avc: denied { create } for pid=14661 comm="syz.8.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1026.059299][ T31] audit: type=1400 audit(1789116537.343:7401): avc: denied { ioctl } for pid=14670 comm="syz.6.1818" path="socket:[56640]" dev="sockfs" ino=56640 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1026.099074][ T31] audit: type=1400 audit(1789116537.383:7402): avc: denied { create } for pid=14673 comm="syz.3.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1027.502145][T14684] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1822'. [ 1029.593166][T14697] FAULT_INJECTION: forcing a failure. [ 1029.593166][T14697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.593205][T14697] CPU: 1 UID: 0 PID: 14697 Comm: syz.4.1825 Not tainted syzkaller #0 PREEMPT(full) [ 1029.593227][T14697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1029.593238][T14697] Call Trace: [ 1029.593245][T14697] [ 1029.593253][T14697] dump_stack_lvl+0x100/0x190 [ 1029.593286][T14697] should_fail_ex.cold+0x5/0xa [ 1029.593312][T14697] _copy_to_user+0x32/0xd0 [ 1029.593332][T14697] simple_read_from_buffer+0xcb/0x170 [ 1029.593357][T14697] proc_fail_nth_read+0x1af/0x230 [ 1029.593379][T14697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1029.593402][T14697] ? rw_verify_area+0xce/0x6d0 [ 1029.593428][T14697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1029.593450][T14697] vfs_read+0x1e4/0xb40 [ 1029.593469][T14697] ? lock_acquire+0x1d1/0x380 [ 1029.593487][T14697] ? __fget_files+0x34/0x3d0 [ 1029.593508][T14697] ? __pfx_vfs_read+0x10/0x10 [ 1029.593524][T14697] ? find_held_lock+0x2b/0x80 [ 1029.593547][T14697] ? __fget_files+0x215/0x3d0 [ 1029.593572][T14697] ? __fget_files+0x21f/0x3d0 [ 1029.593599][T14697] ksys_read+0x12a/0x250 [ 1029.593617][T14697] ? __pfx_ksys_read+0x10/0x10 [ 1029.593642][T14697] do_syscall_64+0x123/0x790 [ 1029.593670][T14697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.593690][T14697] RIP: 0033:0x7f18b0b5e98e [ 1029.593706][T14697] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1029.593724][T14697] RSP: 002b:00007f18b1987fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1029.593742][T14697] RAX: ffffffffffffffda RBX: 00007f18b19886c0 RCX: 00007f18b0b5e98e [ 1029.593756][T14697] RDX: 000000000000000f RSI: 00007f18b19880a0 RDI: 0000000000000006 [ 1029.593767][T14697] RBP: 00007f18b1988090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.593779][T14697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.593790][T14697] R13: 00007f18b0e26128 R14: 00007f18b0e26090 R15: 00007ffeb4231c68 [ 1029.593816][T14697] [ 1029.935325][T14702] FAULT_INJECTION: forcing a failure. [ 1029.935325][T14702] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.935362][T14702] CPU: 1 UID: 0 PID: 14702 Comm: syz.4.1827 Not tainted syzkaller #0 PREEMPT(full) [ 1029.935385][T14702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1029.935396][T14702] Call Trace: [ 1029.935404][T14702] [ 1029.935412][T14702] dump_stack_lvl+0x100/0x190 [ 1029.935447][T14702] should_fail_ex.cold+0x5/0xa [ 1029.935474][T14702] should_failslab+0xc2/0x120 [ 1029.935499][T14702] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1029.935520][T14702] ? __alloc_skb+0x140/0x710 [ 1029.935545][T14702] __alloc_skb+0x140/0x710 [ 1029.935562][T14702] ? __alloc_skb+0x5b7/0x710 [ 1029.935581][T14702] ? __pfx___alloc_skb+0x10/0x10 [ 1029.935607][T14702] netlink_alloc_large_skb+0x69/0x150 [ 1029.935629][T14702] netlink_sendmsg+0x680/0xda0 [ 1029.935653][T14702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.935675][T14702] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1029.935710][T14702] ____sys_sendmsg+0xa4d/0xbe0 [ 1029.935737][T14702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.935759][T14702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1029.935790][T14702] ? find_held_lock+0x2b/0x80 [ 1029.935816][T14702] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 1029.935838][T14702] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 1029.935864][T14702] ___sys_sendmsg+0x190/0x1e0 [ 1029.935894][T14702] ? __pfx____sys_sendmsg+0x10/0x10 [ 1029.935921][T14702] ? rcu_is_watching+0x13/0xc0 [ 1029.935957][T14702] ? find_held_lock+0x2b/0x80 [ 1029.935999][T14702] __sys_sendmsg+0x160/0x210 [ 1029.936022][T14702] ? __pfx___sys_sendmsg+0x10/0x10 [ 1029.936064][T14702] do_syscall_64+0x123/0x790 [ 1029.936097][T14702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.936117][T14702] RIP: 0033:0x7f18b0b9e159 [ 1029.936134][T14702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.936151][T14702] RSP: 002b:00007f18b1988028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1029.936171][T14702] RAX: ffffffffffffffda RBX: 00007f18b0e26090 RCX: 00007f18b0b9e159 [ 1029.936184][T14702] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000007 [ 1029.936208][T14702] RBP: 00007f18b1988090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.936220][T14702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.936231][T14702] R13: 00007f18b0e26128 R14: 00007f18b0e26090 R15: 00007ffeb4231c68 [ 1029.936258][T14702] [ 1030.355506][ T25] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1030.526144][ T25] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1030.531958][ T25] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.532014][ T25] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1030.546578][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.637000][ T25] usb 8-1: config 0 descriptor?? [ 1030.645757][ T25] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1030.645794][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 1030.778886][ T25] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1030.797996][ T25] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1030.798045][ T25] usb 8-1: media controller created [ 1030.820823][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1030.967105][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 1030.967173][ T25] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1030.993810][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input61 [ 1031.070225][T14707] dvb-usb: bulk message failed: -22 (2/0) [ 1031.072033][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 1031.072054][ T25] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1031.746168][T12361] dvb-usb: bulk message failed: -22 (1/0) [ 1031.746303][T12361] dvb-usb: error while querying for an remote control event. [ 1031.930036][T12361] dvb-usb: bulk message failed: -22 (1/0) [ 1031.930061][T12361] dvb-usb: error while querying for an remote control event. [ 1032.083996][T12361] dvb-usb: bulk message failed: -22 (1/0) [ 1032.084076][T12361] dvb-usb: error while querying for an remote control event. [ 1032.254175][T12361] dvb-usb: bulk message failed: -22 (1/0) [ 1032.254206][T12361] dvb-usb: error while querying for an remote control event. [ 1032.414197][T12361] dvb-usb: bulk message failed: -22 (1/0) [ 1032.414223][T12361] dvb-usb: error while querying for an remote control event. [ 1032.574128][T12361] dvb-usb: bulk message failed: -22 (1/0) [ 1032.574172][T12361] dvb-usb: error while querying for an remote control event. [ 1033.828049][T12361] dvb-usb: bulk message failed: -22 (1/0) [ 1033.828073][T12361] dvb-usb: error while querying for an remote control event. [ 1033.885037][ T5805] usb 8-1: USB disconnect, device number 7 [ 1034.028902][ T5805] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1034.735279][ T31] audit: type=1400 audit(1789116546.024:7403): avc: denied { write } for pid=14738 comm="syz.6.1837" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1035.644351][T14740] could not allocate digest TFM handle blake2s-224-arm [ 1036.051209][ T1148] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.416447][ T1148] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.455518][T14757] CIFS: Attempting to mount //127.0.0.1/share [ 1036.518795][T14758] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1036.522971][T14757] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1037.682104][T10251] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1037.708850][T10251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1037.711403][T10251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1037.730985][T10251] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1037.757548][T10251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1037.842788][ T1148] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.933687][ T5783] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1038.095805][ T5783] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1038.097093][ T5783] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.097121][ T5783] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1038.097162][ T5783] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.100855][ T5783] usb 7-1: config 0 descriptor?? [ 1038.120393][ T5783] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1038.120429][ T5783] dvb-usb: bulk message failed: -22 (3/0) [ 1038.141093][ T5783] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1038.146414][ T5783] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1038.146460][ T5783] usb 7-1: media controller created [ 1038.158125][ T5783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1038.165720][ T1148] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.200425][ T5783] dvb-usb: bulk message failed: -22 (6/0) [ 1038.200466][ T5783] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1038.213487][ T5783] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input62 [ 1038.222438][ T5783] dvb-usb: schedule remote query interval to 150 msecs. [ 1038.222458][ T5783] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1038.439509][ T5783] dvb-usb: bulk message failed: -22 (1/0) [ 1038.439540][ T5783] dvb-usb: error while querying for an remote control event. [ 1038.556595][T14778] dvb-usb: bulk message failed: -22 (2/0) [ 1038.863246][ T5783] dvb-usb: bulk message failed: -22 (1/0) [ 1038.863277][ T5783] dvb-usb: error while querying for an remote control event. [ 1039.023338][ T5783] dvb-usb: bulk message failed: -22 (1/0) [ 1039.023365][ T5783] dvb-usb: error while querying for an remote control event. [ 1039.596750][ T25] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1039.614315][ T5783] dvb-usb: bulk message failed: -22 (1/0) [ 1039.614339][ T5783] dvb-usb: error while querying for an remote control event. [ 1039.766547][ T25] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1039.772411][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.772437][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1039.772477][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.773114][ T5783] dvb-usb: bulk message failed: -22 (1/0) [ 1039.773138][ T5783] dvb-usb: error while querying for an remote control event. [ 1039.794182][ T25] usb 4-1: config 0 descriptor?? [ 1039.803120][ T4919] Bluetooth: hci2: command tx timeout [ 1039.883413][ T25] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1039.883459][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 1039.933782][ T5783] dvb-usb: bulk message failed: -22 (1/0) [ 1039.933812][ T5783] dvb-usb: error while querying for an remote control event. [ 1039.960942][ T25] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1039.978342][ T25] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1039.978389][ T25] usb 4-1: media controller created [ 1040.000964][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1040.093083][ T5707] dvb-usb: bulk message failed: -22 (1/0) [ 1040.093114][ T5707] dvb-usb: error while querying for an remote control event. [ 1040.128230][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1845'. [ 1040.216980][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 1040.217044][ T25] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1040.249616][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input63 [ 1040.254506][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 1040.254526][ T25] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1040.265201][ T5707] dvb-usb: bulk message failed: -22 (1/0) [ 1040.265218][ T5707] dvb-usb: error while querying for an remote control event. [ 1040.424091][ T5707] dvb-usb: bulk message failed: -22 (1/0) [ 1040.424126][ T5707] dvb-usb: error while querying for an remote control event. [ 1040.424379][ T5805] dvb-usb: bulk message failed: -22 (1/0) [ 1040.424392][ T5805] dvb-usb: error while querying for an remote control event. [ 1040.584814][ T5707] dvb-usb: bulk message failed: -22 (1/0) [ 1040.584843][ T5707] dvb-usb: error while querying for an remote control event. [ 1040.611387][ T5805] dvb-usb: bulk message failed: -22 (1/0) [ 1040.611407][ T5805] dvb-usb: error while querying for an remote control event. [ 1040.691986][ T5805] usb 7-1: USB disconnect, device number 19 [ 1040.773234][T12505] dvb-usb: bulk message failed: -22 (1/0) [ 1040.773260][T12505] dvb-usb: error while querying for an remote control event. [ 1040.840304][ T5805] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1040.943159][T12505] dvb-usb: bulk message failed: -22 (1/0) [ 1040.943190][T12505] dvb-usb: error while querying for an remote control event. [ 1041.113124][ T5805] dvb-usb: bulk message failed: -22 (1/0) [ 1041.113143][ T5805] dvb-usb: error while querying for an remote control event. [ 1041.274969][ T5805] dvb-usb: bulk message failed: -22 (1/0) [ 1041.274998][ T5805] dvb-usb: error while querying for an remote control event. [ 1041.447752][ T5805] dvb-usb: bulk message failed: -22 (1/0) [ 1041.447781][ T5805] dvb-usb: error while querying for an remote control event. [ 1041.499499][ T1148] bridge_slave_1: left allmulticast mode [ 1041.499517][ T1148] bridge_slave_1: left promiscuous mode [ 1041.499674][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.535613][T14803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1849'. [ 1041.587757][ T1148] bridge_slave_0: left allmulticast mode [ 1041.587785][ T1148] bridge_slave_0: left promiscuous mode [ 1041.589244][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.603595][ T5805] dvb-usb: bulk message failed: -22 (1/0) [ 1041.603621][ T5805] dvb-usb: error while querying for an remote control event. [ 1041.653528][T14803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1041.704579][T14806] FAULT_INJECTION: forcing a failure. [ 1041.704579][T14806] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.704602][T14806] CPU: 1 UID: 0 PID: 14806 Comm: syz.8.1851 Not tainted syzkaller #0 PREEMPT(full) [ 1041.704616][T14806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1041.704623][T14806] Call Trace: [ 1041.704627][T14806] [ 1041.704632][T14806] dump_stack_lvl+0x100/0x190 [ 1041.704654][T14806] should_fail_ex.cold+0x5/0xa [ 1041.704677][T14806] should_failslab+0xc2/0x120 [ 1041.704692][T14806] __kmalloc_cache_noprof+0x91/0x6d0 [ 1041.704709][T14806] ? allocate_file_region_entries+0x15d/0x630 [ 1041.704722][T14806] ? allocate_file_region_entries+0x1a0/0x630 [ 1041.704737][T14806] allocate_file_region_entries+0x1a0/0x630 [ 1041.704753][T14806] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1041.704771][T14806] region_chg+0x85/0x140 [ 1041.704783][T14806] __vma_reservation_common+0x34b/0x6f0 [ 1041.704796][T14806] ? find_held_lock+0x2b/0x80 [ 1041.704812][T14806] ? __pfx___vma_reservation_common+0x10/0x10 [ 1041.704824][T14806] ? filemap_get_entry+0x22d/0x450 [ 1041.704845][T14806] alloc_hugetlb_folio+0x594/0x870 [ 1041.704862][T14806] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1041.704878][T14806] ? trace_contention_end+0x126/0x160 [ 1041.704893][T14806] ? __filemap_get_folio_mpol+0x369/0x1320 [ 1041.704908][T14806] ? lock_acquire+0x1d1/0x380 [ 1041.704923][T14806] hugetlb_no_page+0x1099/0x1c20 [ 1041.704943][T14806] ? __pfx_down_read+0x10/0x10 [ 1041.704960][T14806] ? __pfx_hugetlb_no_page+0x10/0x10 [ 1041.704978][T14806] ? huge_pte_alloc+0x39f/0x5a0 [ 1041.704996][T14806] hugetlb_fault+0x5a7/0x1650 [ 1041.705014][T14806] ? __pfx_mt_find+0x10/0x10 [ 1041.705030][T14806] ? __pfx_hugetlb_fault+0x10/0x10 [ 1041.705054][T14806] ? find_vma+0xbf/0x140 [ 1041.705066][T14806] ? __pfx_find_vma+0x10/0x10 [ 1041.705079][T14806] handle_mm_fault+0x604/0xa20 [ 1041.705099][T14806] do_user_addr_fault+0x745/0x12f0 [ 1041.705118][T14806] exc_page_fault+0x6f/0xd0 [ 1041.705132][T14806] asm_exc_page_fault+0x26/0x30 [ 1041.705144][T14806] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 1041.705162][T14806] Code: c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 1041.705175][T14806] RSP: 0018:ffffc9000518fcc8 EFLAGS: 00050246 [ 1041.705185][T14806] RAX: 0000000000000000 RBX: 000000007fc00000 RCX: 0000000000000040 [ 1041.705193][T14806] RDX: ffff8880289e8000 RSI: ffffffff82616161 RDI: 0000200000400000 [ 1041.705200][T14806] RBP: 0000000000001000 R08: 0000000000056f1d R09: 00000000000001cb [ 1041.705206][T14806] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000400000 [ 1041.705213][T14806] R13: ffff8880289e8000 R14: dffffc0000000000 R15: 00002000003ff040 [ 1041.705225][T14806] ? __might_fault+0x111/0x140 [ 1041.705243][T14806] read_zero+0xed/0x1f0 [ 1041.705260][T14806] ? __pfx_read_zero+0x10/0x10 [ 1041.705274][T14806] vfs_read+0x1e4/0xb40 [ 1041.705286][T14806] ? lock_acquire+0x1d1/0x380 [ 1041.705297][T14806] ? __fget_files+0x34/0x3d0 [ 1041.705311][T14806] ? __pfx_vfs_read+0x10/0x10 [ 1041.705320][T14806] ? find_held_lock+0x2b/0x80 [ 1041.705335][T14806] ? __fget_files+0x215/0x3d0 [ 1041.705348][T14806] ? __fget_files+0x215/0x3d0 [ 1041.705364][T14806] ? __fget_files+0x21f/0x3d0 [ 1041.705381][T14806] ksys_read+0x12a/0x250 [ 1041.705392][T14806] ? __pfx_ksys_read+0x10/0x10 [ 1041.705407][T14806] do_syscall_64+0x123/0x790 [ 1041.705423][T14806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.705434][T14806] RIP: 0033:0x7f559f79e159 [ 1041.705444][T14806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.705454][T14806] RSP: 002b:00007f55a0656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1041.705465][T14806] RAX: ffffffffffffffda RBX: 00007f559fa26090 RCX: 00007f559f79e159 [ 1041.705472][T14806] RDX: 00000000ffffff96 RSI: 0000200000000040 RDI: 0000000000000005 [ 1041.705479][T14806] RBP: 00007f55a0656090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.705485][T14806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.705492][T14806] R13: 00007f559fa26128 R14: 00007f559fa26090 R15: 00007ffdf99266d8 [ 1041.705507][T14806] [ 1041.762920][T12505] dvb-usb: bulk message failed: -22 (1/0) [ 1041.762944][T12505] dvb-usb: error while querying for an remote control event. [ 1041.874174][ T4919] Bluetooth: hci2: command tx timeout [ 1041.925193][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 1041.925218][ T25] dvb-usb: error while querying for an remote control event. [ 1042.084124][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 1042.084150][ T25] dvb-usb: error while querying for an remote control event. [ 1042.252962][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 1042.252992][ T25] dvb-usb: error while querying for an remote control event. [ 1042.412821][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 1042.412847][ T25] dvb-usb: error while querying for an remote control event. [ 1042.556494][T14815] CUSE: info not properly terminated [ 1042.574950][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 1042.575126][ T25] dvb-usb: error while querying for an remote control event. [ 1042.733149][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 1042.733301][ T25] dvb-usb: error while querying for an remote control event. [ 1043.210658][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 1043.210686][ T25] dvb-usb: error while querying for an remote control event. [ 1043.362739][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 1043.362770][ T25] dvb-usb: error while querying for an remote control event. [ 1043.522667][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 1043.522698][ T25] dvb-usb: error while querying for an remote control event. [ 1043.538389][T12029] usb 4-1: USB disconnect, device number 44 [ 1043.598776][T12029] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1043.787365][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.800609][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1043.818709][ T1148] bond0 (unregistering): Released all slaves [ 1043.952699][ T4919] Bluetooth: hci2: command tx timeout [ 1044.139621][T14823] CIFS: Attempting to mount //127.0.0.1/share [ 1044.179134][T14823] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1044.179177][T14823] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1044.183994][ T31] audit: type=1400 audit(1789116555.475:7404): avc: denied { write } for pid=14799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.627417][ T31] audit: type=1400 audit(1789116555.915:7405): avc: denied { write } for pid=14826 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.975225][ T1148] hsr_slave_0: left promiscuous mode [ 1044.975691][ T1148] hsr_slave_1: left promiscuous mode [ 1044.976181][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.976193][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.976932][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1044.976947][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.029836][ T1148] veth1_macvtap: left promiscuous mode [ 1045.029874][ T1148] veth0_macvtap: left promiscuous mode [ 1045.029934][ T1148] veth1_vlan: left promiscuous mode [ 1045.029985][ T1148] veth0_vlan: left promiscuous mode [ 1045.540535][T10251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1045.543727][T10251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1045.551326][T10251] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1045.569976][T10251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1045.572205][T10251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1045.662901][ T5805] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1045.702577][ T5803] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1045.827457][ T5805] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1045.831904][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1045.831983][ T5805] usb 5-1: Product: syz [ 1045.831999][ T5805] usb 5-1: SerialNumber: syz [ 1045.873138][ T5803] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1045.874644][ T5803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.874697][ T5803] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1045.874721][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.876344][ T5803] usb 4-1: config 0 descriptor?? [ 1045.878858][ T5803] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1045.878880][ T5803] dvb-usb: bulk message failed: -22 (3/0) [ 1045.939042][ T5805] usb 5-1: config 0 descriptor?? [ 1045.963182][ T5803] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1045.967680][ T5803] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1045.967706][ T5803] usb 4-1: media controller created [ 1045.968451][ T5805] hso 5-1:0.0: Not our interface [ 1046.013982][ T5803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1046.032490][ T4919] Bluetooth: hci2: command tx timeout [ 1046.087853][ T5803] dvb-usb: bulk message failed: -22 (6/0) [ 1046.088014][ T5803] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1046.244371][ T5803] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input64 [ 1046.246043][ T5783] usb 5-1: USB disconnect, device number 24 [ 1046.321385][T14841] dvb-usb: bulk message failed: -22 (2/0) [ 1047.238247][ T5803] dvb-usb: schedule remote query interval to 150 msecs. [ 1047.238263][ T5803] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1047.457524][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1047.457553][ T5803] dvb-usb: error while querying for an remote control event. [ 1047.496529][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 1047.536157][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 1047.622142][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1047.622223][ T5803] dvb-usb: error while querying for an remote control event. [ 1047.634037][ T4919] Bluetooth: hci4: command tx timeout [ 1047.782303][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1047.782333][ T5803] dvb-usb: error while querying for an remote control event. [ 1047.943595][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1047.943625][ T5803] dvb-usb: error while querying for an remote control event. [ 1048.103739][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1048.103766][ T5803] dvb-usb: error while querying for an remote control event. [ 1048.140686][ T5264] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1048.141580][T14851] CIFS: Attempting to mount //127.0.0.1/share [ 1048.236976][T14853] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1048.247062][ T5707] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1048.262121][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1048.262149][ T5803] dvb-usb: error while querying for an remote control event. [ 1048.262486][T14851] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1048.415675][ T5707] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1048.420051][ T5707] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1048.420078][ T5707] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1048.420089][ T5707] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1048.420133][ T5707] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1048.420156][ T5707] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1048.422488][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1048.422515][ T5803] dvb-usb: error while querying for an remote control event. [ 1048.436296][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1048.436320][ T5707] usb 5-1: Product: syz [ 1048.436332][ T5707] usb 5-1: Manufacturer: syz [ 1048.452318][ T5707] cdc_wdm 5-1:1.0: skipping garbage [ 1048.452338][ T5707] cdc_wdm 5-1:1.0: skipping garbage [ 1048.507656][ T5707] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1048.507677][ T5707] cdc_wdm 5-1:1.0: Unknown control protocol [ 1048.592063][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 1048.592093][ T5803] dvb-usb: error while querying for an remote control event. [ 1048.652126][ T5803] usb 4-1: USB disconnect, device number 45 [ 1048.743180][T14866] FAULT_INJECTION: forcing a failure. [ 1048.743180][T14866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1048.743211][T14866] CPU: 1 UID: 0 PID: 14866 Comm: syz.8.1862 Not tainted syzkaller #0 PREEMPT(full) [ 1048.743234][T14866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1048.743246][T14866] Call Trace: [ 1048.743252][T14866] [ 1048.743260][T14866] dump_stack_lvl+0x100/0x190 [ 1048.743293][T14866] should_fail_ex.cold+0x5/0xa [ 1048.743320][T14866] _copy_from_user+0x2e/0xd0 [ 1048.743340][T14866] move_addr_to_kernel+0x65/0x170 [ 1048.743370][T14866] __sys_bind+0x11d/0x260 [ 1048.743398][T14866] ? __pfx___sys_bind+0x10/0x10 [ 1048.743423][T14866] ? __fget_files+0x21f/0x3d0 [ 1048.743455][T14866] ? __pfx_ksys_write+0x10/0x10 [ 1048.743480][T14866] __x64_sys_bind+0x72/0xb0 [ 1048.743505][T14866] ? lockdep_hardirqs_on+0x7d/0x110 [ 1048.743530][T14866] do_syscall_64+0x123/0x790 [ 1048.743556][T14866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.743576][T14866] RIP: 0033:0x7f559f79e159 [ 1048.743598][T14866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.743617][T14866] RSP: 002b:00007f55a0677028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1048.743636][T14866] RAX: ffffffffffffffda RBX: 00007f559fa25fa0 RCX: 00007f559f79e159 [ 1048.743649][T14866] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 1048.743660][T14866] RBP: 00007f55a0677090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.743671][T14866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.743681][T14866] R13: 00007f559fa26038 R14: 00007f559fa25fa0 R15: 00007ffdf99266d8 [ 1048.743706][T14866] [ 1048.881811][ T5803] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1048.913899][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1048.913940][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.202312][ T5803] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1049.259989][ T1148] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.327076][T14763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.327249][T14763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.327386][T14763] bridge_slave_0: entered allmulticast mode [ 1049.332781][T14763] bridge_slave_0: entered promiscuous mode [ 1049.370455][ T5803] usb 4-1: New USB device found, idVendor=413c, idProduct=8218, bcdDevice=ca.32 [ 1049.371650][ T5803] usb 4-1: config 127 has an invalid interface number: 136 but max is 0 [ 1049.371673][ T5803] usb 4-1: config 127 has an invalid interface descriptor of length 6, skipping [ 1049.371691][ T5803] usb 4-1: config 127 has no interface number 0 [ 1049.371725][ T5803] usb 4-1: config 127 interface 136 has no altsetting 0 [ 1049.381295][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.381317][ T5803] usb 4-1: Product: syz [ 1049.381330][ T5803] usb 4-1: SerialNumber: syz [ 1049.440935][T14763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.440979][T14763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.441084][T14763] bridge_slave_1: entered allmulticast mode [ 1049.443547][T14763] bridge_slave_1: entered promiscuous mode [ 1049.555818][ T31] audit: type=1400 audit(1789116560.846:7406): avc: denied { write } for pid=14858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.670675][ T31] audit: type=1400 audit(1789116560.956:7407): avc: denied { write } for pid=14885 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.691913][ T5803] usb 4-1: USB disconnect, device number 46 [ 1049.711875][ T4919] Bluetooth: hci4: command tx timeout [ 1049.776441][ T1148] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.896966][ T5264] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1049.911609][T14763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.945453][T14763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.050218][ T1148] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.077049][T14763] team0: Port device team_slave_0 added [ 1050.095423][T14763] team0: Port device team_slave_1 added [ 1050.293383][ T1148] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.318743][T14763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.318759][T14763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.318780][T14763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.423401][T14763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.423419][T14763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.423440][T14763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.708429][T14763] hsr_slave_0: entered promiscuous mode [ 1050.710360][T14763] hsr_slave_1: entered promiscuous mode [ 1050.711095][T14763] debugfs: 'hsr0' already exists in 'hsr' [ 1050.711112][T14763] Cannot create hsr debugfs directory [ 1050.845917][ T31] audit: type=1400 audit(1789116562.136:7408): avc: denied { write } for pid=14893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1050.973908][ T5707] usb 5-1: USB disconnect, device number 25 [ 1050.990555][ T31] audit: type=1400 audit(1789116562.266:7409): avc: denied { write } for pid=14915 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1051.424889][ T5264] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1051.544807][ T1148] bridge_slave_1: left allmulticast mode [ 1051.544826][ T1148] bridge_slave_1: left promiscuous mode [ 1051.544988][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.546531][ T1148] bridge_slave_0: left allmulticast mode [ 1051.546546][ T1148] bridge_slave_0: left promiscuous mode [ 1051.546668][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.791759][ T4919] Bluetooth: hci4: command tx timeout [ 1051.995031][T14940] syz.4.1871(14940): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1053.184395][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.312678][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.317337][ T1148] bond0 (unregistering): Released all slaves [ 1053.482685][ T1148] IPVS: stopping master sync thread 14232 ... [ 1053.686374][T14934] syzkaller0: entered promiscuous mode [ 1053.686397][T14934] syzkaller0: entered allmulticast mode [ 1053.690726][T14944] ip6tnl1: entered allmulticast mode [ 1053.881440][ T4919] Bluetooth: hci4: command tx timeout [ 1054.076965][T14836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.083582][T14836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.083718][T14836] bridge_slave_0: entered allmulticast mode [ 1054.088621][T14836] bridge_slave_0: entered promiscuous mode [ 1054.149078][ T31] audit: type=1400 audit(1789116565.436:7410): avc: denied { setopt } for pid=14957 comm="syz.4.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1055.803586][ T5707] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1055.971868][ T5707] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1055.973617][ T5707] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1055.973656][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.973677][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.973695][ T5707] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1055.973725][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.976810][ T5707] usb 5-1: config 0 descriptor?? [ 1056.436811][ T5707] holtek_kbd 0003:04D9:A055.0004: unbalanced collection at end of report description [ 1056.437226][ T5707] holtek_kbd 0003:04D9:A055.0004: probe with driver holtek_kbd failed with error -22 [ 1056.879713][T12505] usb 5-1: USB disconnect, device number 26 [ 1058.839819][T14836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.841594][T14836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.841735][T14836] bridge_slave_1: entered allmulticast mode [ 1058.843847][T14836] bridge_slave_1: entered promiscuous mode [ 1059.400070][T12029] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1059.593729][T12029] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1059.598631][T12029] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1059.598669][T12029] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.598783][T12029] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.647725][T12029] usb 9-1: config 0 descriptor?? [ 1059.663469][T12029] uvcvideo 9-1:0.0: Found UVC 0.00 device (10c4:ea90) [ 1059.663499][T12029] uvcvideo 9-1:0.0: No valid video chain found. [ 1059.668626][ T31] audit: type=1400 audit(1789116570.957:7411): avc: denied { write } for pid=14987 comm="syz.4.1885" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1060.002559][T14836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.041972][T14836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.241271][ T31] audit: type=1400 audit(1789116571.537:7412): avc: denied { write } for pid=14978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1060.296683][T14836] team0: Port device team_slave_0 added [ 1060.334101][ T1148] hsr_slave_0: left promiscuous mode [ 1060.337270][ T1148] hsr_slave_1: left promiscuous mode [ 1060.338396][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.338413][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.345049][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.345067][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.393635][ T31] audit: type=1400 audit(1789116571.687:7413): avc: denied { write } for pid=15004 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1060.429030][ T1148] veth1_macvtap: left promiscuous mode [ 1060.429083][ T1148] veth0_macvtap: left promiscuous mode [ 1060.429166][ T1148] veth1_vlan: left promiscuous mode [ 1060.429232][ T1148] veth0_vlan: left promiscuous mode [ 1060.901896][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 1060.922009][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 1060.951717][ T31] audit: type=1400 audit(1789116572.247:7414): avc: denied { create } for pid=15016 comm="syz.4.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1060.953082][ T31] audit: type=1400 audit(1789116572.247:7415): avc: denied { lock } for pid=15016 comm="syz.4.1892" path="socket:[59580]" dev="sockfs" ino=59580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1061.235535][T14836] team0: Port device team_slave_1 added [ 1061.487925][T14836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.487943][T14836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.487980][T14836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.574877][T14836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.574894][T14836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.574930][T14836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.772730][T14836] hsr_slave_0: entered promiscuous mode [ 1061.773571][T14836] hsr_slave_1: entered promiscuous mode [ 1061.775173][T14836] debugfs: 'hsr0' already exists in 'hsr' [ 1061.775193][T14836] Cannot create hsr debugfs directory [ 1061.902893][ T5783] usb 9-1: USB disconnect, device number 16 [ 1062.333844][T15025] gre0: MTU too low for tipc bearer [ 1062.333878][T15025] tipc: Enabling of bearer rejected, failed to enable media [ 1062.558978][T15027] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1895'. [ 1062.832622][ T31] audit: type=1400 audit(1789116574.127:7416): avc: denied { ioctl } for pid=15040 comm="syz.8.1898" path="socket:[59692]" dev="sockfs" ino=59692 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1063.073158][T15050] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1901'. [ 1063.073181][T15050] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1901'. [ 1063.592022][T14763] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1063.606104][T14763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1063.612677][T14763] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1063.892819][T14763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1063.945931][T14763] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1064.071609][T14763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1064.090635][T14763] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1064.134536][T14763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1064.637221][ T31] audit: type=1400 audit(1789116575.928:7417): avc: denied { write } for pid=15030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1064.715843][T14763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.757042][T14763] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.996162][T14844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.996242][T14844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.004118][T14844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.004203][T14844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.410450][ T31] audit: type=1400 audit(1789116576.648:7418): avc: denied { write } for pid=15079 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1066.352871][T10251] Bluetooth: hci3: command 0x0406 tx timeout [ 1066.888226][ T31] audit: type=1400 audit(1789116578.178:7419): avc: denied { read } for pid=15097 comm="syz.4.1909" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1066.888323][ T31] audit: type=1400 audit(1789116578.178:7420): avc: denied { open } for pid=15097 comm="syz.4.1909" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1066.888363][ T31] audit: type=1400 audit(1789116578.178:7421): avc: denied { ioctl } for pid=15097 comm="syz.4.1909" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1067.110289][T14836] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1067.114928][T14836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1067.117243][T14836] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1067.155070][T14836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1067.167410][T14836] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1067.181970][T14836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1067.184801][T14836] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1067.208281][T14836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1067.333954][T14836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.366095][T14836] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.390917][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.390972][ T6063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.424094][T12784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.424183][T12784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.508052][ T31] audit: type=1400 audit(1789116578.798:7422): avc: denied { write } for pid=15090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1067.777355][ T31] audit: type=1400 audit(1789116579.068:7423): avc: denied { write } for pid=15125 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1068.056828][T14763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.125627][T15137] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1913'. [ 1068.615477][T15155] netlink: 'syz.3.1914': attribute type 13 has an invalid length. [ 1068.675318][T14836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.914049][ T31] audit: type=1400 audit(1789116580.208:7424): avc: denied { write } for pid=15134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1069.173620][T14763] veth0_vlan: entered promiscuous mode [ 1069.211407][ T31] audit: type=1400 audit(1789116580.508:7425): avc: denied { write } for pid=15170 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1069.216104][T14763] veth1_vlan: entered promiscuous mode [ 1069.398729][T14836] veth0_vlan: entered promiscuous mode [ 1069.424100][T14763] veth0_macvtap: entered promiscuous mode [ 1069.454977][T14763] veth1_macvtap: entered promiscuous mode [ 1069.490136][T14836] veth1_vlan: entered promiscuous mode [ 1069.528407][T14763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.607470][T14763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.745974][ T5860] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.746017][ T5860] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.746043][ T5860] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.746069][ T5860] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.748482][T14836] veth0_macvtap: entered promiscuous mode [ 1069.811669][T14836] veth1_macvtap: entered promiscuous mode [ 1069.839994][T14836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.885763][T14836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.987436][ T5860] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.988332][ T5860] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.988770][ T5860] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.988803][ T5860] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.045179][T12784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.045200][T12784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.170476][ T31] audit: type=1400 audit(1789116581.468:7426): avc: denied { write } for pid=15175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1070.309213][ T31] audit: type=1400 audit(1789116581.598:7427): avc: denied { write } for pid=15192 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1070.450718][ T5860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.450735][ T5860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.538467][ T5860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.538488][ T5860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.566210][ T31] audit: type=1400 audit(1789116581.858:7428): avc: denied { firmware_load } for pid=15183 comm="syz.4.1918" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1070.652153][T12784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.652174][T12784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.926246][T15186] syz.4.1918 (15186) used greatest stack depth: 19288 bytes left [ 1071.038188][T15200] FAULT_INJECTION: forcing a failure. [ 1071.038188][T15200] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.038220][T15200] CPU: 0 UID: 0 PID: 15200 Comm: syz.7.1839 Not tainted syzkaller #0 PREEMPT(full) [ 1071.038246][T15200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1071.038259][T15200] Call Trace: [ 1071.038266][T15200] [ 1071.038275][T15200] dump_stack_lvl+0x100/0x190 [ 1071.038314][T15200] should_fail_ex.cold+0x5/0xa [ 1071.038343][T15200] should_failslab+0xc2/0x120 [ 1071.038369][T15200] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1071.038394][T15200] ? find_held_lock+0x2b/0x80 [ 1071.038421][T15200] ? kasprintf+0xc7/0x100 [ 1071.038445][T15200] kvasprintf+0xbc/0x150 [ 1071.038465][T15200] ? __pfx_kvasprintf+0x10/0x10 [ 1071.038486][T15200] ? __lock_acquire+0x5c0/0x1f40 [ 1071.038514][T15200] kasprintf+0xc7/0x100 [ 1071.038534][T15200] ? __pfx_kasprintf+0x10/0x10 [ 1071.038555][T15200] ? avc_has_perm_noaudit+0x56/0x3b0 [ 1071.038583][T15200] ? find_held_lock+0x2b/0x80 [ 1071.038608][T15200] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1071.038640][T15200] logfc+0x11c/0x4e0 [ 1071.038671][T15200] ? __pfx_logfc+0x10/0x10 [ 1071.038714][T15200] ceph_get_tree+0x1a36/0x1fd0 [ 1071.038742][T15200] ? bpf_lsm_capable+0x9/0x10 [ 1071.038767][T15200] ? security_capable+0x80/0x260 [ 1071.038796][T15200] vfs_get_tree+0x92/0x320 [ 1071.038825][T15200] vfs_cmd_create+0xd7/0x2a0 [ 1071.038846][T15200] __do_sys_fsconfig+0x55a/0xcb0 [ 1071.038867][T15200] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1071.038899][T15200] do_syscall_64+0x123/0x790 [ 1071.038928][T15200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.038949][T15200] RIP: 0033:0x7fa13759e159 [ 1071.038966][T15200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.038985][T15200] RSP: 002b:00007fa1357f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1071.039005][T15200] RAX: ffffffffffffffda RBX: 00007fa137826090 RCX: 00007fa13759e159 [ 1071.039019][T15200] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1071.039031][T15200] RBP: 00007fa13763503b R08: 0000000000000000 R09: 0000000000000000 [ 1071.039043][T15200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1071.039054][T15200] R13: 00007fa137826128 R14: 00007fa137826090 R15: 00007ffda89c3b08 [ 1071.039081][T15200] [ 1071.707112][ T31] audit: type=1400 audit(1789116582.998:7429): avc: denied { write } for pid=15194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1071.819848][T15213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.820789][T15213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.981312][T12033] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1072.149693][T12033] usb 4-1: Using ep0 maxpacket: 8 [ 1072.154854][T12033] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 1072.156536][T12033] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.156561][T12033] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1072.164220][T12033] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.164247][T12033] usb 4-1: Product: syz [ 1072.164262][T12033] usb 4-1: Manufacturer: syz [ 1072.164276][T12033] usb 4-1: SerialNumber: syz [ 1072.226752][T15221] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1922'. [ 1072.226852][T15221] IPv6: Can't replace route, no match found [ 1072.271811][ T6063] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.272745][ T6063] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.273006][ T367] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.273040][ T367] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.328202][ T31] audit: type=1400 audit(1789116583.618:7430): avc: denied { write } for pid=15217 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.377812][T15224] mmap: syz.7.1839 (15224) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1072.466327][T12033] usb 4-1: unit 6 not found! [ 1072.578448][T12033] usb 4-1: USB disconnect, device number 47 [ 1072.923809][T11923] udevd[11923]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1073.345317][ T31] audit: type=1400 audit(1789116584.639:7431): avc: denied { write } for pid=15234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.364215][T12033] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1073.364243][T12033] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1073.364260][T12033] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1073.364277][T12033] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1073.364295][T12033] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1073.364312][T12033] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1073.364329][T12033] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1073.364346][T12033] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1073.368140][T12033] hid-generic 0000:0000:0001.0005: hidraw0: HID v0.10 Device [syz0] on syz1 [ 1073.485509][ T31] audit: type=1400 audit(1789116584.779:7432): avc: denied { read } for pid=15252 comm="syz.4.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1073.784811][T15256] fido_id[15256]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1074.008018][ T31] audit: type=1400 audit(1789116585.149:7433): avc: denied { write } for pid=15258 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1074.008068][ T31] audit: type=1326 audit(1789116585.199:7434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15262 comm="syz.3.1931" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd778b9e159 code=0x7ffc0000 [ 1074.008101][ T31] audit: type=1326 audit(1789116585.199:7435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15262 comm="syz.3.1931" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd778b9e159 code=0x7ffc0000 [ 1074.008779][ T31] audit: type=1326 audit(1789116585.199:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15262 comm="syz.3.1931" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd778b9e159 code=0x7ffc0000 [ 1074.008918][ T31] audit: type=1326 audit(1789116585.199:7437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15262 comm="syz.3.1931" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd778b9e159 code=0x7ffc0000 [ 1074.191495][T15277] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1929'. [ 1075.877145][T15290] xt_CONNSECMARK: invalid mode: 66 [ 1076.373382][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1076.373402][ T31] audit: type=1400 audit(1789116587.659:7440): avc: denied { write } for pid=15272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1076.624250][T15304] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1937'. [ 1076.690446][ T31] audit: type=1400 audit(1789116587.979:7441): avc: denied { write } for pid=15305 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1076.965114][T12031] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1076.992865][ T4919] Bluetooth: hci5: command 0x0406 tx timeout [ 1077.109028][T12031] usb 9-1: Using ep0 maxpacket: 16 [ 1077.109592][T12031] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1077.110525][T12031] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 1077.110548][T12031] usb 9-1: config 0 has no interface number 0 [ 1077.110582][T12031] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1077.110606][T12031] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1077.112407][T12031] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.112428][T12031] usb 9-1: Product: syz [ 1077.112442][T12031] usb 9-1: Manufacturer: syz [ 1077.112457][T12031] usb 9-1: SerialNumber: syz [ 1077.114809][T12031] usb 9-1: config 0 descriptor?? [ 1077.116025][T15309] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1077.116333][T15309] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1077.331336][T15309] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1077.331448][T15309] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1077.916015][ T31] audit: type=1400 audit(1789116589.199:7442): avc: denied { write } for pid=15318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.089006][ T31] audit: type=1400 audit(1789116589.379:7443): avc: denied { write } for pid=15338 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.166254][T12031] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1078.166287][T12031] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 1078.188596][T12031] asix 9-1:0.34: probe with driver asix failed with error -71 [ 1078.192816][T12031] usb 9-1: USB disconnect, device number 17 [ 1078.818100][T15349] netlink: 'syz.4.1946': attribute type 4 has an invalid length. [ 1078.878472][T15350] netlink: 'syz.4.1946': attribute type 4 has an invalid length. [ 1079.498445][T15355] serio: Serial port ptm0 [ 1080.829624][T15366] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1081.753647][T15216] Set syz1 is full, maxelem 65536 reached [ 1081.918295][T12031] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1082.078154][T12031] usb 5-1: Using ep0 maxpacket: 16 [ 1082.078722][T12031] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1082.079636][T12031] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.079657][T12031] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1082.081349][T12031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.081371][T12031] usb 5-1: Product: syz [ 1082.081385][T12031] usb 5-1: Manufacturer: syz [ 1082.081399][T12031] usb 5-1: SerialNumber: syz [ 1082.170724][T12031] usb 5-1: 0:2 : does not exist [ 1082.293051][T12031] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1082.380430][T12031] usb 5-1: USB disconnect, device number 27 [ 1082.488208][ T5803] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1082.532078][T11923] udevd[11923]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1082.639547][ T5803] usb 8-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1082.643479][ T5803] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.643566][ T5803] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1082.643593][ T5803] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1082.643622][ T5803] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.679637][ T5803] usb 8-1: config 0 descriptor?? [ 1082.931994][ T5803] usbhid 8-1:0.0: can't add hid device: -71 [ 1082.932076][ T5803] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1082.939500][ T5803] usb 8-1: USB disconnect, device number 8 [ 1084.478047][T12033] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1084.898204][T12033] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1084.899321][T12033] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1084.899357][T12033] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.899378][T12033] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1084.899411][T12033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.902505][T12033] usb 4-1: config 0 descriptor?? [ 1084.969852][T12033] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1087.307435][ T4919] Bluetooth: hci6: command 0x1003 tx timeout [ 1087.309228][T10251] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1088.031414][T12505] usb 4-1: USB disconnect, device number 48 [ 1090.085980][ T31] audit: type=1400 audit(1789116601.371:7444): avc: denied { getopt } for pid=15494 comm="syz.7.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1090.114617][ T31] audit: type=1400 audit(1789116601.401:7445): avc: denied { read } for pid=15493 comm="syz.4.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1090.304354][ T31] audit: type=1400 audit(1789116601.591:7446): avc: denied { bind } for pid=15500 comm="syz.7.1992" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1090.304757][ T31] audit: type=1400 audit(1789116601.591:7447): avc: denied { name_bind } for pid=15500 comm="syz.7.1992" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1090.567679][ T25] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1090.722436][ T25] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1090.723770][ T25] usb 8-1: not running at top speed; connect to a high speed hub [ 1090.723795][ T25] usb 8-1: New USB device found, idVendor=07b8, idProduct=abc1, bcdDevice=c3.af [ 1090.743200][ T25] usb 8-1: config 2 has an invalid interface number: 214 but max is 0 [ 1090.743225][ T25] usb 8-1: config 2 has an invalid descriptor of length 241, skipping remainder of the config [ 1090.743296][ T25] usb 8-1: config 2 has no interface number 0 [ 1090.743326][ T25] usb 8-1: config 2 interface 214 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 1090.743346][ T25] usb 8-1: config 2 interface 214 has no altsetting 0 [ 1090.759515][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.759541][ T25] usb 8-1: Product: syz [ 1090.759600][ T25] usb 8-1: Manufacturer: syz [ 1090.759614][ T25] usb 8-1: SerialNumber: syz [ 1091.384654][ T25] pegasus 8-1:2.214: Missing or invalid endpoints [ 1091.403816][ T25] usb 8-1: USB disconnect, device number 9 [ 1091.486854][T12033] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1091.567252][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1091.647412][T12033] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1091.649181][T12033] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1091.649222][T12033] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.649247][T12033] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.649268][T12033] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1091.649302][T12033] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.652442][T12033] usb 9-1: config 0 descriptor?? [ 1091.738826][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1091.739867][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1091.739891][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1091.739911][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1091.744180][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1091.744204][ T9] usb 5-1: Product: syz [ 1091.744217][ T9] usb 5-1: Manufacturer: syz [ 1091.744231][ T9] usb 5-1: SerialNumber: syz [ 1091.996102][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1092.043030][T15519] netlink: 200 bytes leftover after parsing attributes in process `syz.7.1997'. [ 1092.092626][T12033] holtek_kbd 0003:04D9:A055.0006: unbalanced collection at end of report description [ 1092.096198][T12033] holtek_kbd 0003:04D9:A055.0006: probe with driver holtek_kbd failed with error -22 [ 1092.193995][T12033] usb 5-1: USB disconnect, device number 28 [ 1092.207115][T12033] usblp0: removed [ 1092.610480][T12033] usb 9-1: USB disconnect, device number 18 [ 1094.088236][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1094.648147][ T9] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1095.801441][ T31] audit: type=1400 audit(1789116607.091:7448): avc: denied { read } for pid=15558 comm="syz.8.2010" name="file0" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1095.803671][ T31] audit: type=1400 audit(1789116607.091:7449): avc: denied { ioctl } for pid=15558 comm="syz.8.2010" path="/61/file0" dev="tmpfs" ino=341 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1095.910724][T15555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.911230][T15555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.170521][T15555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.191881][T15555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.566326][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 1096.566360][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.566392][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 1096.566454][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.566484][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 1096.566506][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.566534][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 1096.566557][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.336265][ T31] audit: type=1400 audit(1789116608.431:7450): avc: denied { write } for pid=15586 comm="syz.8.2021" name="functions" dev="configfs" ino=24782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1097.336420][ T31] audit: type=1400 audit(1789116608.521:7451): avc: denied { write } for pid=15586 comm="syz.8.2021" name="header" dev="configfs" ino=61405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1097.336506][ T31] audit: type=1400 audit(1789116608.541:7452): avc: denied { write } for pid=15586 comm="syz.8.2021" name="fs" dev="configfs" ino=61412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1097.336597][ T31] audit: type=1400 audit(1789116608.551:7453): avc: denied { create } for pid=15586 comm="syz.8.2021" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1097.336645][ T31] audit: type=1400 audit(1789116608.551:7454): avc: denied { write } for pid=15586 comm="syz.8.2021" name="fs" dev="configfs" ino=61412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1100.688839][ T31] audit: type=1400 audit(1789116611.972:7455): avc: denied { read } for pid=15632 comm="syz.3.2036" dev="nsfs" ino=4026532797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1100.688889][ T31] audit: type=1400 audit(1789116611.972:7456): avc: denied { open } for pid=15632 comm="syz.3.2036" path="net:[4026532797]" dev="nsfs" ino=4026532797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1102.011793][T15656] sit0: entered promiscuous mode [ 1102.022487][T15656] netlink: 'syz.4.2045': attribute type 1 has an invalid length. [ 1102.022510][T15656] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2045'. [ 1102.156015][T12505] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1102.307975][T12505] usb 8-1: Using ep0 maxpacket: 16 [ 1102.308688][T12505] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1102.310823][T12505] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 1102.310847][T12505] usb 8-1: config 0 has no interface number 0 [ 1102.310922][T12505] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1102.310943][T12505] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1102.316354][T12505] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.316374][T12505] usb 8-1: Product: syz [ 1102.316387][T12505] usb 8-1: Manufacturer: syz [ 1102.316446][T12505] usb 8-1: SerialNumber: syz [ 1102.323449][T12505] usb 8-1: config 0 descriptor?? [ 1102.324580][T15654] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1102.324702][T15654] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1102.535080][T15654] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1102.535185][T15654] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1103.516666][T15670] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1104.167642][T12505] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1104.371332][ T31] audit: type=1400 audit(1789116615.662:7457): avc: denied { mounton } for pid=15671 comm="syz.4.2051" path="/93/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1105.245945][T12505] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 1105.310211][T12505] asix 8-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 1105.313392][T12505] asix 8-1:0.251: probe with driver asix failed with error -5 [ 1105.346709][T12505] usb 8-1: USB disconnect, device number 10 [ 1105.691525][T11736] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1105.702371][T11736] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1105.711652][T11736] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1105.722216][T11736] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1105.724404][T11736] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1106.371534][ T31] audit: type=1400 audit(1789116617.662:7458): avc: denied { write } for pid=15689 comm="syz.4.2058" name="functions" dev="configfs" ino=24782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1106.371758][T15702] LUN: removable file: (no medium) [ 1106.375735][ T31] audit: type=1400 audit(1789116617.662:7459): avc: denied { write } for pid=15700 comm="syz.7.2061" name="usb_gadget" dev="configfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1106.390369][ T31] audit: type=1400 audit(1789116617.672:7460): avc: denied { write } for pid=15700 comm="syz.7.2061" name="functions" dev="configfs" ino=62922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1106.395738][ T31] audit: type=1400 audit(1789116617.672:7461): avc: denied { write } for pid=15689 comm="syz.4.2058" name="mass_storage.0" dev="configfs" ino=62919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1106.402135][ T31] audit: type=1400 audit(1789116617.693:7462): avc: denied { write } for pid=15700 comm="syz.7.2061" name="configs" dev="configfs" ino=62923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1106.402543][ T31] audit: type=1400 audit(1789116617.693:7463): avc: denied { write } for pid=15700 comm="syz.7.2061" name="c.1" dev="configfs" ino=62931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1106.403934][ T31] audit: type=1400 audit(1789116617.693:7464): avc: denied { write } for pid=15700 comm="syz.7.2061" name="c.1" dev="configfs" ino=62931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1106.411585][T15702] LUN: removable file: (no medium) [ 1106.449625][T15701] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 1107.771453][ T31] audit: type=1400 audit(1789116619.063:7465): avc: denied { accept } for pid=15715 comm="syz.3.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1107.796925][T10251] Bluetooth: hci6: command tx timeout [ 1108.904401][T15726] slcan: can't register candev [ 1109.055904][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1109.144120][T15680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.144202][T15680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.147707][T15680] bridge_slave_0: entered allmulticast mode [ 1109.148872][T15680] bridge_slave_0: entered promiscuous mode [ 1109.163441][T15680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.163513][T15680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.163641][T15680] bridge_slave_1: entered allmulticast mode [ 1109.171848][T15680] bridge_slave_1: entered promiscuous mode [ 1109.206148][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1109.209121][ T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1109.214352][ T9] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1109.214380][ T9] usb 5-1: config 0 has no interface number 0 [ 1109.214413][ T9] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1109.214437][ T9] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1109.270175][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.270202][ T9] usb 5-1: Product: syz [ 1109.270216][ T9] usb 5-1: Manufacturer: syz [ 1109.270228][ T9] usb 5-1: SerialNumber: syz [ 1109.300435][ T9] usb 5-1: config 0 descriptor?? [ 1109.307007][T15728] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1109.307146][T15728] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1109.405573][T15680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.423718][T15680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.541244][T15728] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1109.541393][T15728] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1109.606791][T15680] team0: Port device team_slave_0 added [ 1109.622003][T15680] team0: Port device team_slave_1 added [ 1109.759089][T15680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.759107][T15680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.759146][T15680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.810353][T15680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.810387][T15680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.810410][T15680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.865344][T10251] Bluetooth: hci6: command tx timeout [ 1110.017955][T15680] hsr_slave_0: entered promiscuous mode [ 1110.038620][T15680] hsr_slave_1: entered promiscuous mode [ 1110.039482][T15680] debugfs: 'hsr0' already exists in 'hsr' [ 1110.039500][T15680] Cannot create hsr debugfs directory [ 1110.348595][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.348638][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.865006][ T25] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1111.023900][ T25] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1111.027525][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.031689][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.031712][ T25] usb 8-1: Product: syz [ 1111.031724][ T25] usb 8-1: Manufacturer: syz [ 1111.031738][ T25] usb 8-1: SerialNumber: syz [ 1111.100520][T15680] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1111.120724][T15680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1111.149451][T15680] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1111.162615][T15680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1111.164192][T15680] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1111.179090][ T9] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1111.182849][T15680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1111.191240][T15680] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1111.219034][T15680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1111.574966][T15680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.593288][T15680] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.606708][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.606800][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.632195][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.632283][ T5860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.944768][T10251] Bluetooth: hci6: command tx timeout [ 1112.001075][ T9] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 1112.038803][ T9] asix 5-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 1112.039051][ T9] asix 5-1:0.251: probe with driver asix failed with error -5 [ 1112.064092][ T9] usb 5-1: USB disconnect, device number 29 [ 1112.090189][ T25] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1112.090215][ T25] cdc_ncm 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1112.090231][ T25] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 1112.295883][ T25] cdc_ncm 8-1:1.0: setting tx_max = 40 [ 1112.353617][ T25] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1112.378666][ T25] usb 8-1: USB disconnect, device number 11 [ 1112.404736][ T25] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 1112.958026][T15680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.495346][ T5707] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1113.644718][ T5707] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1113.645552][ T5707] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.645572][ T5707] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1113.646426][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1113.646448][ T5707] usb 4-1: SerialNumber: syz [ 1113.682819][T15680] veth0_vlan: entered promiscuous mode [ 1113.741142][ T5707] usb 4-1: 0:2 : does not exist [ 1113.743233][T15680] veth1_vlan: entered promiscuous mode [ 1113.880772][T15680] veth0_macvtap: entered promiscuous mode [ 1113.917856][T15680] veth1_macvtap: entered promiscuous mode [ 1114.008752][T15680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.024562][T10251] Bluetooth: hci6: command tx timeout [ 1114.037987][T15680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.152863][ T5707] usb 4-1: USB disconnect, device number 49 [ 1114.185853][ T6063] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.186747][ T6063] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.186805][ T6063] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.186854][ T6063] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.491302][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.491323][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.544151][ T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1114.570876][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.570898][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.697706][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1114.697799][ T25] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1114.701723][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.701748][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1114.713070][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.713095][ T25] usb 5-1: Product: syz [ 1114.713108][ T25] usb 5-1: Manufacturer: syz [ 1114.713121][ T25] usb 5-1: SerialNumber: syz [ 1114.757215][ T25] usb 5-1: selecting invalid altsetting 1 [ 1114.758168][ T25] usb 5-1: unit 6 not found! [ 1115.372267][T15802] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2083'. [ 1115.635800][ T25] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 1115.951290][ T25] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1115.967632][ T25] usb 5-1: USB disconnect, device number 30 [ 1116.015373][T11923] udevd[11923]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1118.781027][T11736] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1118.785873][T11736] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1118.792873][T11736] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1118.806734][T11736] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1118.807567][T11736] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1120.903468][T10251] Bluetooth: hci7: command tx timeout [ 1121.592137][T15881] : renamed from bond_slave_0 (while UP) [ 1122.674867][T10251] Bluetooth: hci1: command 0x0406 tx timeout [ 1122.842454][T15899] netlink: 'syz.7.2111': attribute type 49 has an invalid length. [ 1122.983261][T11736] Bluetooth: hci7: command tx timeout [ 1123.188420][T15899] ip6gretap0: entered promiscuous mode [ 1123.188444][T15899] ip6gretap0: entered allmulticast mode [ 1125.066457][T11736] Bluetooth: hci7: command tx timeout [ 1125.165865][ T6063] bridge_slave_1: left allmulticast mode [ 1125.165892][ T6063] bridge_slave_1: left promiscuous mode [ 1125.166128][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.196219][ T6063] bridge_slave_0: left allmulticast mode [ 1125.196297][ T6063] bridge_slave_0: left promiscuous mode [ 1125.196525][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.972580][ T31] audit: type=1400 audit(1789116637.265:7466): avc: denied { setopt } for pid=15948 comm="syz.4.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1125.998527][ T6063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1126.021093][ T6063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.025000][ T6063] bond0 (unregistering): Released all slaves [ 1126.050224][ T31] audit: type=1400 audit(1789116637.345:7467): avc: denied { write } for pid=15920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.828562][ T31] audit: type=1400 audit(1789116638.115:7468): avc: denied { write } for pid=15957 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1127.085065][T15970] syzkaller0: entered promiscuous mode [ 1127.085088][T15970] syzkaller0: entered allmulticast mode [ 1127.134919][ T5264] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1127.172874][T11736] Bluetooth: hci7: command tx timeout [ 1127.215106][T15958] tipc: Started in network mode [ 1127.215136][T15958] tipc: Node identity 767155f484d, cluster identity 4711 [ 1127.243041][T15958] tipc: Enabled bearer , priority 0 [ 1127.464836][T15965] tipc: Resetting bearer [ 1127.568396][ T6063] hsr_slave_0: left promiscuous mode [ 1127.569019][ T6063] hsr_slave_1: left promiscuous mode [ 1128.153946][ T6063] team0 (unregistering): Port device team_slave_1 removed [ 1128.192312][ T6063] team0 (unregistering): Port device team_slave_0 removed [ 1128.274980][ T31] audit: type=1400 audit(1789116639.575:7469): avc: denied { validate_trans } for pid=15994 comm="syz.3.2136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1128.372707][T15837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.372998][T15837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.373128][T15837] bridge_slave_0: entered allmulticast mode [ 1128.374547][T15837] bridge_slave_0: entered promiscuous mode [ 1128.403902][T15837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.403982][T15837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.404095][T15837] bridge_slave_1: entered allmulticast mode [ 1128.405468][T15837] bridge_slave_1: entered promiscuous mode [ 1128.482664][T15956] tipc: Resetting bearer [ 1128.510525][T15956] tipc: Disabling bearer [ 1128.925774][ T9] tipc: Node number set to 4070659572 [ 1129.237825][T16005] xt_CONNSECMARK: invalid mode: 66 [ 1129.585563][T15998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.586962][T15998] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.593853][T15998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.629927][T15998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.631694][T15998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.636163][T15998] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1129.636185][T15998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1129.640418][T15998] veth1_vlan: left promiscuous mode [ 1129.641352][T15998] veth0_vlan: left promiscuous mode [ 1129.642945][T15998] veth0_vlan: entered promiscuous mode [ 1129.644681][T15998] veth1_vlan: entered promiscuous mode [ 1129.650640][T15998] veth1_macvtap: left promiscuous mode [ 1129.651578][T15998] veth0_macvtap: left promiscuous mode [ 1129.652483][T15998] veth0_macvtap: entered promiscuous mode [ 1129.653416][T15998] veth1_macvtap: entered promiscuous mode [ 1129.658580][T15998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1129.659620][T15998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1129.660925][T15998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1129.662500][T15998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1129.664671][T15998] veth2: left allmulticast mode [ 1130.468266][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.468361][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1130.495431][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.495523][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.109768][T15837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1131.131926][T15837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.307605][T16023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1131.366486][ T31] audit: type=1326 audit(1789116642.665:7470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.4.2146" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0b9e159 code=0x7ffc0000 [ 1131.367606][ T31] audit: type=1326 audit(1789116642.665:7471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.4.2146" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0b9e159 code=0x7ffc0000 [ 1131.404806][ T31] audit: type=1400 audit(1789116642.705:7472): avc: denied { append } for pid=16030 comm="syz.3.2147" name="uprobe_events" dev="tracefs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1131.452575][T15837] team0: Port device team_slave_0 added [ 1131.471600][ T31] audit: type=1326 audit(1789116642.765:7473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.4.2146" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f18b0b9e159 code=0x7ffc0000 [ 1131.471645][ T31] audit: type=1326 audit(1789116642.765:7474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.4.2146" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0b9e159 code=0x7ffc0000 [ 1131.471684][ T31] audit: type=1326 audit(1789116642.765:7475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.4.2146" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0b9e159 code=0x7ffc0000 [ 1131.479813][ T31] audit: type=1326 audit(1789116642.775:7476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.4.2146" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18b0b9e159 code=0x7ffc0000 [ 1131.479870][ T31] audit: type=1326 audit(1789116642.775:7477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.4.2146" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0b9e159 code=0x7ffc0000 [ 1131.479902][ T31] audit: type=1326 audit(1789116642.775:7478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.4.2146" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0b9e159 code=0x7ffc0000 [ 1131.483035][ T31] audit: type=1326 audit(1789116642.775:7479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16028 comm="syz.4.2146" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18b0b9e159 code=0x7ffc0000 [ 1131.496191][T15837] team0: Port device team_slave_1 added [ 1131.597617][T15837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.597633][T15837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.597653][T15837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.478721][T16041] netlink: 'syz.9.2150': attribute type 49 has an invalid length. [ 1132.544302][T15837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.544320][T15837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.544342][T15837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.602295][ T5707] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1132.608127][ T6063] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1132.608156][ T6063] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.784050][ T5707] usb 4-1: Using ep0 maxpacket: 8 [ 1132.792147][ T5707] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1132.792191][ T5707] usb 4-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 1132.798243][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.798270][ T5707] usb 4-1: Product: syz [ 1132.798284][ T5707] usb 4-1: Manufacturer: syz [ 1132.798299][ T5707] usb 4-1: SerialNumber: syz [ 1132.812068][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1132.812098][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.814117][ T5961] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1132.814140][ T5961] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.876579][T15837] hsr_slave_0: entered promiscuous mode [ 1132.880122][T15837] hsr_slave_1: entered promiscuous mode [ 1132.891158][T15837] debugfs: 'hsr0' already exists in 'hsr' [ 1132.891180][T15837] Cannot create hsr debugfs directory [ 1132.944983][ T5707] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1132.945033][ T5707] usb 4-1: MIDIStreaming interface descriptor not found [ 1133.782582][T12724] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1133.782617][T12724] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.843975][ T5707] usb 4-1: USB disconnect, device number 50 [ 1134.246695][T15837] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.573224][T14629] udevd[14629]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1134.681512][T16088] ip6tnl1: entered allmulticast mode [ 1136.041991][T15837] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.385545][ T31] kauditd_printk_skb: 37 callbacks suppressed [ 1136.385563][ T31] audit: type=1400 audit(1789116647.686:7517): avc: denied { write } for pid=16113 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1136.785581][T15837] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.881937][ T5264] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1137.126848][T15837] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.830847][ T5783] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1137.977959][ T31] audit: type=1400 audit(1789116649.276:7518): avc: denied { write } for pid=16131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1138.042053][ T5783] usb 4-1: Using ep0 maxpacket: 32 [ 1138.043249][ T5783] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1138.044255][ T5783] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.044279][ T5783] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1138.044317][ T5783] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1138.044348][ T5783] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1138.044383][ T5783] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1138.044404][ T5783] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1138.046322][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.046344][ T5783] usb 4-1: Product: syz [ 1138.046358][ T5783] usb 4-1: Manufacturer: syz [ 1138.046373][ T5783] usb 4-1: SerialNumber: syz [ 1138.175776][ T31] audit: type=1400 audit(1789116649.476:7519): avc: denied { accept } for pid=16144 comm="syz.9.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1139.112364][ T31] audit: type=1400 audit(1789116650.416:7520): avc: denied { write } for pid=16165 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1139.168438][ T5783] usb 4-1: selecting invalid altsetting 0 [ 1139.350101][ T5783] usb 4-1: 1:1: cannot get freq (v2/v3): err -32 [ 1139.500269][T16173] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1139.501108][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1139.555223][ T5783] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 1139.636344][ T5264] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1139.639993][T15837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1139.674900][ T5783] usb 4-1: USB disconnect, device number 51 [ 1140.176975][T15837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1140.342221][ T30] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1140.525468][T15837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1140.819731][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 1141.053453][ T30] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1141.053880][ T30] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1141.212073][ T30] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 1141.212108][ T30] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.212132][ T30] usb 8-1: config 4 has no interface number 0 [ 1141.724064][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.724103][ T30] usb 8-1: Product: syz [ 1141.724129][ T30] usb 8-1: Manufacturer: syz [ 1141.724157][ T30] usb 8-1: SerialNumber: syz [ 1142.816782][T15837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1143.697160][ T30] usb 8-1: can't set config #4, error -71 [ 1145.069406][ T30] usb 8-1: USB disconnect, device number 12 [ 1149.615982][T15837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1151.334869][T15837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1151.415811][T15837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1154.242247][T15837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1163.797296][T10251] Bluetooth: hci2: command 0x0406 tx timeout [ 1167.640193][T11920] udevd[11920]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1168.758124][T11736] Bluetooth: hci4: command 0x0406 tx timeout [ 1171.891541][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.892114][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1230.179460][T10251] Bluetooth: hci6: command 0x0406 tx timeout [ 1232.893943][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1232.894012][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.290868][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.317088][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.809671][T10251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1242.856854][T10251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1242.998664][T10251] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1243.227187][T10251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1243.373849][T10251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1244.718260][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1244.718322][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.549559][T16214] Bluetooth: hci3: command tx timeout [ 1245.550131][T16214] Bluetooth: hci7: command 0x0406 tx timeout [ 1247.610420][T10251] Bluetooth: hci3: command tx timeout [ 1249.709887][T10251] Bluetooth: hci3: command tx timeout [ 1251.141581][ T32] INFO: task syz.6.1989:15499 blocked for more than 143 seconds. [ 1251.141648][ T32] Not tainted syzkaller #0 [ 1251.141699][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1251.141767][ T32] task:syz.6.1989 state:D stack:28728 pid:15499 tgid:15491 ppid:14836 task_flags:0x400040 flags:0x00080002 [ 1251.141895][ T32] Call Trace: [ 1251.141913][ T32] [ 1251.142020][ T32] __schedule+0x1259/0x6920 [ 1251.142118][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1251.142748][ T32] ? __pfx___schedule+0x10/0x10 [ 1251.142841][ T32] ? find_held_lock+0x2b/0x80 [ 1251.142938][ T32] ? schedule+0x225/0x2c0 [ 1251.143171][ T32] schedule+0xdd/0x2c0 [ 1251.143344][ T32] cgroup_lock_and_drain_offline+0x383/0x800 [ 1251.143732][ T32] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 1251.143855][ T32] ? kernfs_root+0xee/0x2a0 [ 1251.144013][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1251.144104][ T32] ? cgroup_kn_lock_live+0xf4/0x520 [ 1251.144188][ T32] ? kernfs_root+0xf8/0x2a0 [ 1251.144515][ T32] cgroup_kn_lock_live+0x188/0x520 [ 1251.144700][ T32] cgroup_subtree_control_write+0x3dd/0xe90 [ 1251.145045][ T32] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 1251.145137][ T32] ? kernfs_root+0xf8/0x2a0 [ 1251.145422][ T32] cgroup_file_write+0x1e6/0x8a0 [ 1251.145556][ T32] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 1251.145636][ T32] ? __pfx_cgroup_file_write+0x10/0x10 [ 1251.145687][ T32] ? __kmalloc_noprof+0x350/0x840 [ 1251.146081][ T32] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1251.146134][ T32] ? __pfx_cgroup_file_write+0x10/0x10 [ 1251.146286][ T32] vfs_write+0x6af/0x1050 [ 1251.146457][ T32] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1251.146659][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1251.146699][ T32] ? find_held_lock+0x2b/0x80 [ 1251.147323][ T32] ksys_write+0x12a/0x250 [ 1251.147454][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1251.147533][ T32] ? kcov_ioctl+0x17a/0x760 [ 1251.147836][ T32] do_syscall_64+0x123/0x790 [ 1251.528883][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.528961][ T32] RIP: 0033:0x7f0acd19e159 [ 1251.529054][ T32] RSP: 002b:00007f0ace079028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1251.529127][ T32] RAX: ffffffffffffffda RBX: 00007f0acd426090 RCX: 00007f0acd19e159 [ 1251.529168][ T32] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000000006 [ 1251.529212][ T32] RBP: 00007f0acd23503b R08: 0000000000000000 R09: 0000000000000000 [ 1251.529255][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1251.529301][ T32] R13: 00007f0acd426128 R14: 00007f0acd426090 R15: 00007ffdbbb64738 [ 1251.529794][ T32] [ 1251.691345][ T32] [ 1251.691345][ T32] Showing all locks held in the system: [ 1251.691385][ T32] locks held by kworker/u8:0/12: 6, last CPU#0: [ 1251.691422][ T32] #0: ffff88801d2d8940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1251.691671][ T32] #1: ffffc90000117d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1251.691982][ T32] #2: ffffffff90cb9328 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1251.692130][ T32] #3: ffff888061cda128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 1251.692343][ T32] #4: ffff888077fbc258 (&devlink->lock_key#19){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 [ 1251.692679][ T32] #5: ffffffff8edf8328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1251.692895][ T32] locks held by kworker/u8:1/13: 3, last CPU#0: [ 1251.692924][ T32] #0: [ 1251.779996][T10251] Bluetooth: hci3: command tx timeout [ 1251.919551][ T32] ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1251.919859][ T32] #1: ffffc90000127d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1251.920184][ T32] #2: ffff88804cd007a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1251.920347][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1251.920380][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1251.920605][ T32] locks held by kworker/u8:2/43: 4, on CPU#0: [ 1251.920650][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1251.920961][ T32] #1: ffffc90000b37d08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1251.921326][ T32] #2: ffffffff8ec7ca50 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 1251.921581][ T32] #3: ffffffff8ef40f00 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xb5/0x270 [ 1251.921881][ T32] locks held by kworker/u8:4/59: 3, last CPU#0: [ 1251.921905][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1251.922071][ T32] #1: ffffc9000201fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1251.922321][ T32] #2: ffff8880885207a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1251.922638][ T32] locks held by kworker/u8:5/79: 3, last CPU#0: [ 1251.922690][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1251.922837][ T32] #1: ffffc9000203fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1251.923058][ T32] #2: ffff888041ed07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1251.923362][ T32] locks held by kworker/u8:6/367: 3, last CPU#0: [ 1251.923417][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1251.923629][ T32] #1: ffffc90003997d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1251.923823][ T32] #2: ffff88803e9007a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1251.924095][ T32] locks held by kworker/u8:9/1148: 2, last CPU#0: [ 1251.924152][ T32] #0: ffff88805438c140 ((wq_completion)wg-kex-wg2#37){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1251.924447][ T32] #1: ffffc9000574fd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1251.924625][ T32] locks held by kworker/u8:10/1350: 3, last CPU#1: [ 1251.924660][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1251.924923][ T32] #1: ffffc90005fbfd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1251.925224][ T32] #2: ffff88807e420258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1251.925418][ T32] locks held by syslogd/4951: 1, last CPU#0: [ 1251.925454][ T32] #0: ffff88802d473070 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30 [ 1251.925701][ T32] locks held by klogd/4958: 1, last CPU#0: [ 1251.925750][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1251.926060][ T32] locks held by udevd/4969: 3, last CPU#0: [ 1251.926083][ T32] #0: ffffffff8ef3d8b0 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x4806/0x8370 [ 1251.926244][ T32] #1: ffff88807e73b6b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 1251.926480][ T32] #2: ffff8880901c29f8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 1251.926835][ T32] locks held by getty/5373: 2, on CPU#0: [ 1251.926888][ T32] #0: ffff8880384960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1251.927033][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1251.927259][ T32] locks held by kworker/u8:11/5860: 3, last CPU#0: [ 1251.927304][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1251.927613][ T32] #1: ffffc9000523fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1251.927832][ T32] #2: ffff888064a007a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1252.672964][ T32] locks held by kworker/u8:13/5961: 4, last CPU#1: [ 1252.673017][ T32] #0: ffff888034a6d140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1252.673316][ T32] #1: ffffc9000569fd08 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1252.673474][ T32] #2: ffff88805423f1c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_send_outstanding_bat_ogm_packet+0x50f/0x7d0 [ 1252.673699][ T32] #3: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule_buff+0x583/0x15d0 [ 1252.673986][ T32] locks held by kworker/u8:15/6063: 3, last CPU#1: [ 1252.674041][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1252.674257][ T32] #1: ffffc900059afd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1252.674447][ T32] #2: ffff8880786a07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1252.674720][ T32] locks held by kworker/0:4/12031: 3, last CPU#0: [ 1252.674770][ T32] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1252.676801][ T32] #1: ffffc900032f7d08 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1252.677073][ T32] #2: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x21a/0x1a10 [ 1252.677361][ T32] locks held by kworker/0:7/12033: 2, last CPU#0: [ 1252.677387][ T32] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1252.677554][ T32] #1: ffffc900032b7d08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1252.677812][ T32] locks held by kworker/u8:8/12723: 3, last CPU#1: [ 1252.677865][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1252.879228][ T32] #1: ffffc90003e57d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1252.879361][ T32] #2: ffff8880604b8258 (&devlink->lock_key#23){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1252.879582][ T32] locks held by kworker/u8:12/12724: 2, on CPU#0: [ 1252.879622][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1252.879892][ T32] #1: ffffc90003e77d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1252.880034][ T32] locks held by kworker/u8:14/12725: 3, last CPU#0: [ 1252.880062][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1252.880253][ T32] #1: ffffc90004d97d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1252.880505][ T32] #2: ffff88802231a258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1252.880696][ T32] locks held by kworker/u8:16/12784: 3, last CPU#0: [ 1252.880720][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1252.880886][ T32] #1: ffffc90003e97d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1252.881137][ T32] #2: ffff88808bd207a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1252.881389][ T32] locks held by kworker/u8:17/14844: 3, last CPU#1: [ 1252.881410][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1252.881555][ T32] #1: ffffc90004f77d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1252.881762][ T32] #2: ffff88802be607a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1252.882035][ T32] locks held by syz.6.1989/15499: 3, on CPU#1: [ 1253.225214][ T32] #0: ffff8880359429b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1253.225457][ T32] #1: ffff88807a6ea460 (sb_writers#10){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1253.225800][ T32] #2: ffff88802a82c880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1253.225964][ T32] locks held by syz-executor/15837: 1, last CPU#0: [ 1253.225996][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: lruvec_stat_mod_folio+0x76/0x2e0 [ 1253.226215][ T32] locks held by syz.9.2176/16173: 1, last CPU#0: [ 1253.226259][ T32] #0: ffff88807ec885f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30 [ 1253.226671][ T32] locks held by syz.4.2175/16171: 7, last CPU#1: [ 1253.226695][ T32] #0: ffff88807630b5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1253.226855][ T32] #1: ffff888023ed8460 (sb_writers#20){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1253.435422][ T32] #2: ffffffff8ee95540 (event_mutex){+.+.}-{4:4}, at: system_enable_write+0x238/0x300 [ 1253.442902][ T32] #3: ffffffff8ee7c9a0 (tracepoints_mutex){+.+.}-{4:4}, at: tracepoint_probe_register+0x9d/0x110 [ 1253.445131][ T32] #4: ffffffff8ec7ca50 (cpu_hotplug_lock){++++}-{0:0}, at: __static_call_update+0xa6/0x590 [ 1253.446988][ T32] #5: ffffffff8ef2f200 (static_call_mutex){+.+.}-{4:4}, at: __static_call_update+0xb4/0x590 [ 1253.448382][ T32] #6: ffffffff8ec9c3c0 (text_mutex){+.+.}-{4:4}, at: arch_static_call_transform+0x28/0xc0 [ 1253.448574][ T32] locks held by kworker/u8:18/16179: 3, last CPU#1: [ 1253.448616][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1253.448898][ T32] #1: ffffc90003f27d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1253.449179][ T32] #2: ffff88807e7f3258 (&devlink->lock_key#21){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1253.449366][ T32] locks held by kworker/u8:19/16180: 2, last CPU#1: [ 1253.449403][ T32] #0: ffff8880274ca940 ((wq_completion)wg-kex-wg1#37){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1253.449689][ T32] #1: ffffc90004bbfd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1253.449930][ T32] locks held by kworker/u8:20/16181: 2, last CPU#1: [ 1253.449952][ T32] #0: ffff88807ae60940 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1253.450129][ T32] #1: ffffc90004bafd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1253.450352][ T32] locks held by syz-executor/16196: 1, last CPU#1: [ 1253.450394][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1253.450641][ T32] locks held by kworker/u8:23/16198: 3, last CPU#1: [ 1253.450662][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1253.450820][ T32] #1: ffffc90004c77d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1253.451028][ T32] #2: ffff88807e420258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1253.451330][ T32] locks held by syz-executor/16203: 2, last CPU#1: [ 1253.451350][ T32] #0: ffff888037174378 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 1253.451479][ T32] #1: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1253.451669][ T32] locks held by kworker/u8:25/16207: 3, last CPU#0: [ 1253.451708][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1253.451975][ T32] #1: ffffc90003827d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1253.452128][ T32] #2: ffff88802b95e258 (&devlink->lock_key#25){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1253.452330][ T32] locks held by sed/16217: 1, last CPU#1: [ 1253.452367][ T32] #0: ffff8880901c4378 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 1253.452619][ T32] locks held by syz-executor/16218: 3, last CPU#1: [ 1253.452667][ T32] #0: ffff88808cbfe110 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b8/0x490 [ 1253.452823][ T32] #1: ffffffff911a7ce0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb30 [ 1253.452990][ T32] #2: ffffffff8effd118 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 1253.453222][ T32] locks held by modprobe/16219: 1, last CPU#1: [ 1253.453266][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1254.142773][ T32] [ 1254.142798][ T32] ============================================= [ 1254.142798][ T32] [ 1254.142820][ T32] NMI backtrace for cpu 0 [ 1254.142841][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1254.142872][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1254.142893][ T32] Call Trace: [ 1254.142924][ T32] [ 1254.142959][ T32] dump_stack_lvl+0x100/0x190 [ 1254.143136][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1254.143332][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1254.143403][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1254.143521][ T32] sys_info+0x141/0x190 [ 1254.143637][ T32] watchdog+0xcb1/0x1030 [ 1254.143968][ T32] ? __pfx_watchdog+0x10/0x10 [ 1254.144089][ T32] ? __kthread_parkme+0x18f/0x230 [ 1254.144358][ T32] ? kthread+0x13a/0x450 [ 1254.144395][ T32] ? __pfx_watchdog+0x10/0x10 [ 1254.144430][ T32] kthread+0x373/0x450 [ 1254.144493][ T32] ? __pfx_kthread+0x10/0x10 [ 1254.144640][ T32] ret_from_fork+0x730/0xd60 [ 1254.144812][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1254.144953][ T32] ? __switch_to+0x800/0x10f0 [ 1254.145040][ T32] ? __pfx_kthread+0x10/0x10 [ 1254.145193][ T32] ret_from_fork_asm+0x1a/0x30 [ 1254.145705][ T32] [ 1254.145894][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1254.145929][ C1] NMI backtrace for cpu 1 [ 1254.145945][ C1] CPU: 1 UID: 0 PID: 15837 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1254.145967][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1254.145979][ C1] RIP: 0010:__rb_reserve_next.constprop.0+0x207/0x1640 [ 1254.146013][ C1] Code: 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 6a 10 00 00 48 8d 43 30 4c 89 23 48 89 c2 48 89 44 24 18 <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 08 ** replaying previous printk message ** [ 1254.146013][ C1] Code: 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 6a 10 00 00 48 8d 43 30 4c 89 23 48 89 c2 48 89 44 24 18 <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 08 [ 1254.146031][ C1] RSP: 0018:ffffc90000a18128 EFLAGS: 00000046 [ 1254.146052][ C1] RAX: ffffc90000a182a0 RBX: ffffc90000a18270 RCX: 0000000000000104 [ 1254.146067][ C1] RDX: ffffc90000a182a0 RSI: ffffffff820ee29d RDI: ffff888028c7a580 [ 1254.146082][ C1] RBP: ffff88801d2c4000 R08: 0000000000000001 R09: 0000000000000000 [ 1254.146095][ C1] R10: 0000000000000000 R11: 0000000000016d3e R12: 00000124016916ac [ 1254.146115][ C1] R13: ffff88801d2c4150 R14: ffff888033a1a000 R15: ffff88801d2c4148 [ 1254.146129][ C1] FS: 0000000000000000(0000) GS:ffff888123c5c000(0000) knlGS:0000000000000000 [ 1254.146148][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1254.146162][ C1] CR2: 00007f3c11dff300 CR3: 00000000666ba000 CR4: 00000000003526f0 [ 1254.146176][ C1] Call Trace: [ 1254.146187][ C1] [ 1254.146200][ C1] ? __pfx_trace_clock_local+0x10/0x10 [ 1254.146258][ C1] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 1254.146326][ C1] ring_buffer_lock_reserve+0x49a/0x1220 [ 1254.146400][ C1] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 1254.146478][ C1] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 1254.146549][ C1] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 1254.146581][ C1] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 1254.146661][ C1] trace_event_buffer_lock_reserve+0x123/0x6f0 [ 1254.146727][ C1] trace_event_buffer_reserve+0x1f9/0x350 [ 1254.146787][ C1] trace_event_raw_event_lock_acquire+0x12c/0x330 [ 1254.146840][ C1] ? __pfx_trace_event_raw_event_lock_acquire+0x10/0x10 [ 1254.146907][ C1] ? lock_acquire+0x1d1/0x380 [ 1254.146991][ C1] lock_acquire+0xe7/0x380 [ 1254.147019][ C1] ? unwind_next_frame+0xbd/0x2090 [ 1254.147052][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1254.147084][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1254.147139][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1254.147183][ C1] unwind_next_frame+0xd1/0x2090 [ 1254.147211][ C1] ? unwind_next_frame+0xbd/0x2090 [ 1254.147241][ C1] ? kcov_close+0x34/0x60 [ 1254.147296][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1254.147339][ C1] arch_stack_walk+0x94/0xf0 [ 1254.147409][ C1] ? kcov_close+0x34/0x60 [ 1254.147475][ C1] stack_trace_save+0x8e/0xc0 [ 1254.147515][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1254.147562][ C1] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 1254.147620][ C1] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 1254.147658][ C1] kasan_save_stack+0x30/0x50 [ 1254.147684][ C1] ? kasan_save_stack+0x30/0x50 [ 1254.147710][ C1] ? kasan_save_track+0x14/0x30 [ 1254.147737][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1254.147763][ C1] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1254.147796][ C1] ? dummy_urb_enqueue+0xa3/0x880 [ 1254.147823][ C1] ? usb_hcd_submit_urb+0x268/0x2150 [ 1254.147859][ C1] ? usb_submit_urb+0x827/0x19b0 [ 1254.147885][ C1] ? imon_ir_rx+0x104/0x5e0 [ 1254.147917][ C1] ? __usb_hcd_giveback_urb+0x38e/0x610 [ 1254.147952][ C1] ? usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1254.147984][ C1] ? dummy_timer+0xdb2/0x3700 [ 1254.148009][ C1] ? __hrtimer_run_queues+0x462/0x9c0 [ 1254.148041][ C1] ? hrtimer_run_softirq+0x1ca/0x360 [ 1254.148075][ C1] ? handle_softirqs+0x1e6/0x9d0 [ 1254.148101][ C1] ? __irq_exit_rcu+0x16a/0x210 [ 1254.148134][ C1] ? irq_exit_rcu+0x9/0x30 [ 1254.148160][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1254.148190][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1254.148220][ C1] ? __sanitizer_cov_trace_pc+0x40/0x70 [ 1254.148248][ C1] ? rb_read_data_buffer.isra.0+0x330/0x470 [ 1254.148282][ C1] ? check_buffer+0x282/0x820 [ 1254.148316][ C1] ? __rb_reserve_next.constprop.0+0x486/0x1640 [ 1254.148353][ C1] ? ring_buffer_lock_reserve+0x49a/0x1220 [ 1254.148388][ C1] ? trace_event_buffer_lock_reserve+0x123/0x6f0 [ 1254.148422][ C1] ? trace_event_buffer_reserve+0x1f9/0x350 [ 1254.148450][ C1] ? trace_event_raw_event_lock_acquire+0x12c/0x330 [ 1254.148480][ C1] ? lock_acquire+0xe7/0x380 [ 1254.148506][ C1] ? lruvec_stat_mod_folio+0x8a/0x2e0 [ 1254.148536][ C1] ? vm_area_free_pages+0x1cb/0x2a0 [ 1254.148562][ C1] ? vfree+0xf7/0x6d0 [ 1254.148590][ C1] ? kcov_close+0x34/0x60 [ 1254.148802][ C1] kasan_save_track+0x14/0x30 [ 1254.148832][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1254.148877][ C1] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1254.148922][ C1] ? dummy_urb_enqueue+0xa3/0x880 [ 1254.148992][ C1] dummy_urb_enqueue+0xa3/0x880 [ 1254.149021][ C1] ? usb_hcd_map_urb_for_dma+0x28a/0x1190 [ 1254.149050][ C1] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 1254.149121][ C1] usb_hcd_submit_urb+0x268/0x2150 [ 1254.149226][ C1] usb_submit_urb+0x827/0x19b0 [ 1254.149295][ C1] ? lock_acquire+0x1d1/0x380 [ 1254.149346][ C1] imon_ir_rx+0x104/0x5e0 [ 1254.149375][ C1] ? find_held_lock+0x2b/0x80 [ 1254.149406][ C1] ? kcov_remote_start+0x2e6/0x6d0 [ 1254.149435][ C1] ? kcov_remote_start+0x2e6/0x6d0 [ 1254.149473][ C1] ? __pfx_imon_ir_rx+0x10/0x10 [ 1254.149531][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1254.149589][ C1] __usb_hcd_giveback_urb+0x38e/0x610 [ 1254.149652][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1254.149687][ C1] ? do_raw_spin_unlock+0x53/0x1e0 [ 1254.149746][ C1] dummy_timer+0xdb2/0x3700 [ 1254.149799][ C1] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 1254.149862][ C1] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 1254.149931][ C1] ? trace_event_buffer_commit+0x20a/0xa80 [ 1254.149995][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1254.150088][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1254.150124][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1254.150153][ C1] ? rcu_is_watching+0x13/0xc0 [ 1254.150188][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1254.150230][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1254.150260][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1254.150368][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 1254.150426][ C1] handle_softirqs+0x1e6/0x9d0 [ 1254.150497][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1254.150528][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1254.150557][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1254.150613][ C1] __irq_exit_rcu+0x16a/0x210 [ 1254.150646][ C1] irq_exit_rcu+0x9/0x30 [ 1254.150670][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1254.150702][ C1] [ 1254.150711][ C1] [ 1254.150729][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1254.150755][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x40/0x70 [ 1254.150781][ C1] Code: 80 12 48 63 c8 a9 00 01 00 ff 74 1e f6 c4 01 74 44 a9 00 00 00 0f 75 3d f7 c1 00 00 00 f0 75 35 8b 82 3c 17 00 00 85 c0 74 2b <8b> 82 10 17 00 00 83 f8 02 75 20 48 8b 8a 18 17 00 00 8b 92 14 17 [ 1254.150798][ C1] RSP: 0018:ffffc900038c7410 EFLAGS: 00000246 [ 1254.150829][ C1] RAX: 8000000000000002 RBX: ffff88802d46024c RCX: 0000000000000002 [ 1254.150842][ C1] RDX: ffff888028c7a580 RSI: ffffffff820ea030 RDI: ffff888028c7a580 [ 1254.150856][ C1] RBP: 000000000000023c R08: 0000000000000004 R09: 000000000000002c [ 1254.150869][ C1] R10: 0000000000000740 R11: 0000000000000000 R12: 000000000000097c [ 1254.150881][ C1] R13: 000000000000002c R14: 0000012401619096 R15: ffff88802d460010 [ 1254.150956][ C1] ? rb_read_data_buffer.isra.0+0x330/0x470 [ 1254.151017][ C1] rb_read_data_buffer.isra.0+0x330/0x470 [ 1254.151095][ C1] check_buffer+0x282/0x820 [ 1254.151167][ C1] ? __pfx_check_buffer+0x10/0x10 [ 1254.151231][ C1] ? __pfx_check_buffer+0x10/0x10 [ 1254.151270][ C1] ? __pfx_trace_clock_local+0x10/0x10 [ 1254.151326][ C1] __rb_reserve_next.constprop.0+0x486/0x1640 [ 1254.151444][ C1] ring_buffer_lock_reserve+0x49a/0x1220 [ 1254.151512][ C1] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 1254.151594][ C1] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 1254.151732][ C1] trace_event_buffer_lock_reserve+0x123/0x6f0 [ 1254.151798][ C1] trace_event_buffer_reserve+0x1f9/0x350 [ 1254.151857][ C1] trace_event_raw_event_lock_acquire+0x12c/0x330 [ 1254.151908][ C1] ? __pfx_trace_event_raw_event_lock_acquire+0x10/0x10 [ 1254.151943][ C1] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 1254.152061][ C1] lock_acquire+0xe7/0x380 [ 1254.152090][ C1] ? lruvec_stat_mod_folio+0x76/0x2e0 [ 1254.152128][ C1] ? rcu_read_unlock+0x17/0x60 [ 1254.152203][ C1] lruvec_stat_mod_folio+0x8a/0x2e0 [ 1254.152230][ C1] ? lruvec_stat_mod_folio+0x76/0x2e0 [ 1254.152278][ C1] vm_area_free_pages+0x1cb/0x2a0 [ 1254.152331][ C1] ? __pfx_kcov_close+0x10/0x10 [ 1254.152368][ C1] vfree+0xf7/0x6d0 [ 1254.152407][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1254.152436][ C1] ? rcu_is_watching+0x13/0xc0 [ 1254.152471][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1254.152495][ C1] ? __pfx_kcov_close+0x10/0x10 [ 1254.152527][ C1] ? __pfx_kcov_close+0x10/0x10 [ 1254.152564][ C1] kcov_close+0x34/0x60 [ 1254.152593][ C1] __fput+0x3ff/0xb50 [ 1254.152650][ C1] ? cleanup_mnt+0x263/0x450 [ 1254.152702][ C1] task_work_run+0x150/0x240 [ 1254.152753][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1254.152852][ C1] do_exit+0x951/0x2ae0 [ 1254.152889][ C1] ? __pfx_trace_event_raw_event_preemptirq_template+0x10/0x10 [ 1254.152949][ C1] ? __pfx_do_exit+0x10/0x10 [ 1254.152987][ C1] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 1254.153027][ C1] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 1254.153084][ C1] do_group_exit+0xd5/0x2a0 [ 1254.153145][ C1] get_signal+0x1ec7/0x21e0 [ 1254.153260][ C1] ? __pfx_get_signal+0x10/0x10 [ 1254.153297][ C1] ? trace_event_buffer_commit+0x20a/0xa80 [ 1254.153375][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 1254.153406][ C1] ? trace_event_raw_event_preemptirq_template+0x13f/0x1d0 [ 1254.153447][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1254.153557][ C1] ? exit_to_user_mode_loop+0x57/0x700 [ 1254.153623][ C1] exit_to_user_mode_loop+0x139/0x700 [ 1254.153654][ C1] ? rcu_is_watching+0x13/0xc0 [ 1254.153706][ C1] do_syscall_64+0x661/0x790 [ 1254.153761][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.153786][ C1] RIP: 0033:0x7fcc1575e98e [ 1254.153814][ C1] Code: Unable to access opcode bytes at 0x7fcc1575e964. [ 1254.153824][ C1] RSP: 002b:00007ffc60bb32e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1254.153845][ C1] RAX: 0000000000000028 RBX: 000055559060a500 RCX: 00007fcc1575e98e [ 1254.153858][ C1] RDX: 0000000000000028 RSI: 00007fcc16554670 RDI: 0000000000000003 [ 1254.153871][ C1] RBP: 0000000000000001 R08: 00007ffc60bb3364 R09: 000000000000000c [ 1254.153884][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1254.153896][ C1] R13: 0000000000000000 R14: 00007fcc16554670 R15: 0000000000000000 [ 1254.154015][ C1] [ 1254.589073][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1255.615805][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1255.624925][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1255.634998][ T32] Call Trace: [ 1255.638300][ T32] [ 1255.641255][ T32] dump_stack_lvl+0x100/0x190 [ 1255.646116][ T32] vpanic+0x553/0x970 [ 1255.650210][ T32] ? __pfx_vpanic+0x10/0x10 [ 1255.654921][ T32] panic+0xd1/0xe0 [ 1255.658749][ T32] ? __pfx_panic+0x10/0x10 [ 1255.663351][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1255.669576][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1255.675772][ T32] ? watchdog.cold+0x1ec/0x234 [ 1255.680764][ T32] watchdog.cold+0x1fd/0x234 [ 1255.685616][ T32] ? __pfx_watchdog+0x10/0x10 [ 1255.690448][ T32] ? __kthread_parkme+0x18f/0x230 [ 1255.695601][ T32] ? kthread+0x13a/0x450 [ 1255.699882][ T32] ? __pfx_watchdog+0x10/0x10 [ 1255.704592][ T32] kthread+0x373/0x450 [ 1255.708743][ T32] ? __pfx_kthread+0x10/0x10 [ 1255.713522][ T32] ret_from_fork+0x730/0xd60 [ 1255.718260][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1255.723484][ T32] ? __switch_to+0x800/0x10f0 [ 1255.728271][ T32] ? __pfx_kthread+0x10/0x10 [ 1255.733028][ T32] ret_from_fork_asm+0x1a/0x30 [ 1255.738234][ T32] [ 1255.741470][ T32] Kernel Offset: disabled [ 1255.745800][ T32] Rebooting in 86400 seconds..