last executing test programs: 8m40.163091062s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x0, &(0x7f0000000180)=[0x6bd1a311, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x400009, 0x4, 0x401, 0x466c, 0x89004, 0x2, 0x4e, 0x400009, 0x2, 0x49, 0x100000000003, 0x5, 0x400000000002, 0x7fffffff, 0x8, 0x7, 0xc1, 0x8, 0xfffffffffffff000, 0xffffffffffffffff, 0x6, 0x7f, 0x96, 0xffffffff, 0xff, 0xfffffffffffffffc, 0x4, 0x4, 0x2, 0x3, 0x4000009, 0x8892, 0x1, 0x43dd1007, 0x46, 0x2001, 0xfffffffffffffff8, 0xa3de, 0x2cc0000000000000, 0x8, 0x5, 0x400, 0x6, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0xfffffffffffff068, 0x4, 0xe7, 0x6, 0x2, 0xd, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x3, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x18, 0xcdc, 0x100004000000007, 0x2, 0x3, 0x2, 0x10000, 0x9, 0x6, 0x4, 0x1, 0x81, 0x100, 0x4, 0xd70300000000, 0xffffffffffffff81, 0xb, 0xff, 0x6, 0x28000000, 0x80000005, 0x8061d, 0x8, 0x7, 0xf6, 0x4, 0x5, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332d, 0x6, 0x5, 0x7, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0xfff9, 0x20000000000013, 0x2, 0x8, 0x1, 0x6, 0x200eb4, 0x3, 0x1, 0xb68e, 0x1, 0x8, 0x1000003]}) 8m38.404229542s ago: executing program 3 (id=12): syz_emit_ethernet(0x123, &(0x7f0000000100)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @dccp={{0x2d, 0x4, 0x0, 0x10, 0x115, 0x67, 0x0, 0x0, 0x21, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x41, 0x2, [{0x2, 0xb, "45b906ca3d2790b5ee"}, {0x0, 0xa, "47bd7198e9b0b965"}, {0x7, 0x7, "c356086af1"}, {0x1, 0xa, "9fb8189343396ef1"}, {0x1, 0x6, "5b95eeb9"}, {0x6, 0xf, "e4d4947234334160bd5603dcb2"}]}, @cipso={0x86, 0x51, 0xffffffffffffffff, [{0x0, 0xb, "68704361e36fc28553"}, {0x1, 0x12, "9d24981fae8ab824e206cd3a4baeca50"}, {0x1, 0x2}, {0x5, 0xd, "684d8ed01987533b5f66c2"}, {0x5, 0xe, "ecdc8050bf3ffaf16dc7f6b0"}, {0x7, 0xf, "63e9ba9cb20af94143091690b2"}, {0x1, 0x2}]}, @timestamp={0x44, 0x8, 0x65, 0x0, 0x3, [0xfffff000]}, @ra={0x94, 0x4}]}}, {{0x4e20, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x3, 0x0, "85ce92", 0x40, "842d12"}, "cbd1ddba8df56b994f80e46edae18a6c673d8f5b97203269e8d3490c4f2605155195543868013716c9af885c50933a8043efe796cac750abfef33cdd4dcf0ac9dbc70fdc17e804995ef7ef664a64b9b57d"}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x10b8, 0x5, 0x4, 0x0, 0x7f}) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000003000/0x3000)=nil) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000000c0)=0x43, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8m37.021611197s ago: executing program 3 (id=13): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x1000000000000000) 8m34.208629829s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee00, &(0x7f00000000c0)={0x7, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x200000000fe, 0x1fffffffffffffc, 0x9, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0xee00, &(0x7f0000000840)={0x100000000, 0x4, 0x4, 0x3, 0x24, 0x6, 0x6, 0x0, 0x101002}) 8m33.039249566s ago: executing program 3 (id=21): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000100)={0x10, 0xc, {0x54, 0x8000, 0x10, {0x1ff, 0x5}, {0x10, 0x3}, @cond=[{0x4, 0x0, 0xd5, 0x31, 0x9, 0xf001}, {0x90, 0x1, 0x8, 0x30f, 0x3, 0x8}]}, {0x53, 0x1, 0x0, {0x2, 0x400}, {0x8000, 0xfffe}, @const={0x5d1, {0x2, 0x4901, 0xa, 0x5e87}}}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="003d0581a1f4e8327bba12006363"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x81) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x19, &(0x7f0000000740)=0x103, 0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x4}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x7, 0xffffffff, 0x7}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 8m31.497539395s ago: executing program 3 (id=26): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000000101680000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30002000003c000380380000804400018030000b802c0001800a0001006c696d697400"], 0x118}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390016001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x9, 0x4, 0x8, 0x8, [0xfffffffffffffff7, 0x6, 0x5, 0x1, 0x5]}) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8m30.225073655s ago: executing program 32 (id=26): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000000101680000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30002000003c000380380000804400018030000b802c0001800a0001006c696d697400"], 0x118}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390016001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x9, 0x4, 0x8, 0x8, [0xfffffffffffffff7, 0x6, 0x5, 0x1, 0x5]}) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m39.068320589s ago: executing program 2 (id=1037): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f61de68f83382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m37.945371768s ago: executing program 2 (id=1041): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) close(0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 2m36.877379688s ago: executing program 2 (id=1044): socket$alg(0x26, 0x5, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRES64], 0x28) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', 0x0}) setregid(0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x2}, 0xfd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0045543, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)='\\\\\xe9\x838\x9d<\f\x91\b\xab\xe6\xfc\xf8\xbf\x82]\xdf\x12\xb5\xb1\a\xd4$\xae$\x91&6n @\xf4\xd6A\xdb\xd7+\x95,\x06r\xefz%\xeab\x15\xaeYB\xc5\x13@\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\f\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xae\xc3j\xa4v\xefw\xb8\xce_\xdd\n\x1d/x\x81:E\x96\\\\//\xa3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\b\x00\x00\x00\x00\xdcx\x00\"\ts\xe3\x19\x11z \xd2\xfb\xc1\x1d\xb0\xdfg\xb2\f\x14\xdb\xae\x02<\xa0\x99\xcd\xf4\xec<\xf5\xa7;\x1b:\x8b\xb1\xd1\xc7\x9dW\x01\xad\x7f\r\xe9\xb2\xa3\xfe~\x06\xe76G\x045\x91\xe6\xd3\v\xdf\x14PF\x9d.V\x02\b\x9d}!\xc8@\xcd\xc7`L\xa0o\xb7U=<\x15o@\x14(s\xc0\xcd\r8=X', 0x0) socket(0x10, 0x803, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, &(0x7f0000000240)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80201) 2m31.111061937s ago: executing program 2 (id=1058): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="850000008d000009dc88069bd92b8983eef884b9f7563e8abf3317016d76834b473b4e2a9148a56fd159c0a91134625eefc4dde5e3bce96f78f514c858ef13815a58e8ea4bc6777a5145e5584f1001d0327b580924e1f5db06c23939bb009b1bfb81a731590577bf55ec6f1a242f0617b102ca0aea64b1d33802d716a4b698"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a}, 0x94) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000480)='./file0\x00', &(0x7f0000000580)='incremental-fs\x00', 0x1000080, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200080006a00010027bd7000fcd2a42cec67d7bcb171dbdf2502000000000000000800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4c830) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') read$char_usb(r2, &(0x7f00000005c0)=""/71, 0x47) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @local}, {0xa, 0x0, 0x7ffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa8a9}, r4, 0x2}}, 0x48) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x5) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r8, 0x0, 0x0, 0x9, 0x0, 0x3}]) shutdown(r8, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 2m30.114757613s ago: executing program 2 (id=1060): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xaf}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc5}, 0x24000806) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c008", 0x35}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0x4, 0x10}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c810}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x14, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20016}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x6, 0x1, 0x8, 0xc41d1d0d564e5448, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x8}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000080), &(0x7f00000008c0)=""/177}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r6}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60101413000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000080)={0x2, 0x67}) r9 = add_key$keyring(&(0x7f0000000200), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f00000000c0)="510003000000", 0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain) 2m29.795379412s ago: executing program 2 (id=1061): r0 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) io_setup(0x9, &(0x7f0000000300)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) io_submit(r4, 0x1, &(0x7f0000001380)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) 2m14.6977725s ago: executing program 33 (id=1061): r0 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) io_setup(0x9, &(0x7f0000000300)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) io_submit(r4, 0x1, &(0x7f0000001380)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) 16.081284212s ago: executing program 5 (id=1457): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2ec1c1, 0x0) r0 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r1 = socket$inet6(0xa, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x3881, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000010c0)=[{{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @dev}}, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/125}, {&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x0, &(0x7f0000000d40)=""/19}, 0x4}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x0, &(0x7f0000000f80)=[{&(0x7f0000001b00)=""/4096}, {&(0x7f0000000e00)=""/69}, {&(0x7f0000000e80)=""/252}], 0x0, &(0x7f0000000fc0)=""/193}}], 0x3fffffffffffe10, 0x4000002b, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, 0x0, 0x0) r7 = dup(r0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r7}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r8, 0x4018f514, &(0x7f0000000080)={0x5, 0x0, 0x2}) 15.288141857s ago: executing program 5 (id=1464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x1, 0x85, 0x0, 0x7fffffff}]}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, 0x0, 0x0, 0x200) mmap$binder(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x9) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="000008000100000000003d00000048f800400000000000f78490783fffffffac1414aa440c670000000004000000030000000005f2250dbb08444b", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x4e) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="bb6233c1eb870180c200000086dd6410f746004a2f0100000000000000000000ffffffffffffff0200000000000000000000000000010401000904000800010086ddef2f6de0080088be000000041c0930000100"], 0x0) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14bc0000003a00010325bd7000fcffffff070000"], 0x14}}, 0x0) r7 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r7, &(0x7f0000000840)={'syz0\x00', {0x1, 0x9, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0xc5bc, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4cc59375, 0x0, 0x8001, 0x1, 0x6, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x10000, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0xfffffffe, 0xe, 0x8000, 0x1, 0x9d, 0x80, 0x7, 0x9, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x2, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xffffffff, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x80000001, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x9, 0x8, 0x80000001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x0, 0x2, 0x2, 0x3, 0xe, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc00, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0x3, 0x800d08, 0xffffffff, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0x0, 0x1, 0xe5, 0xffff8000, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x9, 0x7, 0x590, 0x10000000, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x6, 0x7, 0x3, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79f9, 0x1, 0xf8, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x7, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x3a1, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x78, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x1, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x6, 0x6, 0x6, 0x5, 0x1, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x2, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x6]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xfe38, &(0x7f0000006680)=0xb) mkdir(&(0x7f0000000040)='./file0\x00', 0x14) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) 14.863231398s ago: executing program 0 (id=1467): syz_emit_ethernet(0x107, &(0x7f0000000100)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @dccp={{0x26, 0x4, 0x0, 0x10, 0xf9, 0x67, 0x0, 0x0, 0x21, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x41, 0x2, [{0x2, 0xb, "45b906ca3d2790b5ee"}, {0x0, 0xa, "47bd7198e9b0b965"}, {0x7, 0x7, "c356086af1"}, {0x1, 0xa, "9fb8189343396ef1"}, {0x1, 0x6, "5b95eeb9"}, {0x6, 0xf, "e4d4947234334160bd5603dcb2"}]}, @cipso={0x86, 0x35, 0xffffffffffffffff, [{0x0, 0xb, "68704361e36fc28553"}, {0x1, 0x2}, {0x1, 0x2}, {0x5, 0x2}, {0x5, 0xe, "ecdc8050bf3ffaf16dc7f6b0"}, {0x7, 0xe, "63e9ba9cb20af94143091690"}, {0x1, 0x2}]}, @timestamp={0x44, 0x8, 0x65, 0x0, 0x3, [0xfffff000]}, @ra={0x94, 0x4}]}}, {{0x4e20, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x3, 0x0, "85ce92", 0x40, "842d12"}, "cbd1ddba8df56b994f80e46edae18a6c673d8f5b97203269e8d3490c4f2605155195543868013716c9af885c50933a8043efe796cac750abfef33cdd4dcf0ac9dbc70fdc17e804995ef7ef664a64b9b57d"}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x10b8, 0x5, 0x4, 0x0, 0x7f}) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000003000/0x3000)=nil) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000000c0)=0x43, 0x4) setsockopt$inet6_int(r5, 0x29, 0x3, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 13.840637904s ago: executing program 0 (id=1468): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143902) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRESDEC=r6, @ANYRESDEC=0x0]) syz_fuse_handle_req(r7, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r7, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x6f, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r8 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r9 = openat$cgroup_type(r8, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r9, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 12.412968703s ago: executing program 0 (id=1470): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0xffffffffffffffdc, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0xeaff, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11.664017188s ago: executing program 5 (id=1474): openat$tun(0xffffffffffffff9c, 0x0, 0x125000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f00"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1b, r3, 0x1, 0x1, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r5, &(0x7f0000000240)={0xa, 0xffff, 0x4462, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd38f}, 0x1c) 8.812640465s ago: executing program 6 (id=1480): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum64={0x9, 0x0, 0x0, 0x13, 0x0, 0xc}]}, {0x0, [0x0, 0x4f, 0x0, 0x30, 0x30, 0x30, 0x2e]}}, &(0x7f0000000280)=""/111, 0x2d, 0x6f, 0x1, 0x1}, 0x28) 8.754732447s ago: executing program 0 (id=1481): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffffd, 0xa9, &(0x7f0000006680)) r0 = gettid() r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xfffe, @remote}, 0x10, 0x0, 0x0, &(0x7f00000014c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x49}, &(0x7f0000000180)=0x7ff, 0x0, 0x2, 0x9, 0x7fffffff, 0xeb3, 0x20}}], 0x58}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000380)=@ethtool_sset_info={0x45, 0x9, 0xfffffffffffffff2}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x3d, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, &(0x7f0000001040)={0x8000000000000001, 0x6}) socket$inet_tcp(0x2, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0xfffffffffffffec0}}, 0x1033) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(r0, 0xd, &(0x7f0000000140)={0x7, 0x2}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r6 = socket(0x25, 0x5, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x8801, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r7, &(0x7f0000000380)=ANY=[], 0x200002e6) fcntl$setpipe(r7, 0x407, 0x7000000) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01ffffff7f00000000006700080008000300", @ANYRES32, @ANYBLOB="0800c300741300000800c400"], 0x30}}, 0x0) 8.241234928s ago: executing program 6 (id=1483): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3}, 0x94) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0xffffffffffffffff) r7 = socket(0x400000000010, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000580)=0x20000007) fcntl$lock(r6, 0x7, &(0x7f0000000040)={0x1, 0x4, 0x6c90, 0x8, r9}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x120, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000054) getdents64(r8, 0xffffffffffffffff, 0x43) r10 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0x8000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r10, 0xc0045520, &(0x7f0000000500)=""/107) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x34}}, 0x400c010) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) 6.475718101s ago: executing program 1 (id=1485): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x17, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a740000000c0a010100000000000000010a0000060900020073797a31000000000900010073797a3100000000480003801c0000800c00018006000100d103"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 6.324984785s ago: executing program 6 (id=1486): socket(0xa, 0x1, 0x1a5b) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000800000003010991695eef4530d20baf12242c2019436202120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 5.287103561s ago: executing program 4 (id=1487): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000100)={0x5, 0x200000088}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141880, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @raw_data=[0x8, 0x4, 0x9, 0x6, 0x7f, 0x3, 0xc, 0x8, 0x4, 0x4, 0x3fe, 0x800, 0x2, 0x6, 0x42f5ef96, 0x2]}) (async) r5 = add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r3, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0xf) recvmmsg(r6, 0x0, 0x0, 0xfc0, 0x0) (async) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 64) r8 = io_uring_setup(0x1890, &(0x7f0000000580)={0x0, 0xa1c5, 0x80, 0x4, 0x30f}) (async) r9 = eventfd2(0x100, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f0000000140)=r9, 0x1) 5.11602773s ago: executing program 5 (id=1488): ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB="000000000048c1866a841f8e4b882ca7671b74bad96620d719b1886546b5a1f532311fcdb5c5504502", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) setgroups(0xffffffffffffff79, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000098"], &(0x7f0000000680)='syzkaller\x00'}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) dup3(r1, r1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x80040, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) io_submit(r5, 0x1e, &(0x7f0000000540)) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfa, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4010) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00c81c", @ANYRES16, @ANYBLOB="01e200000000000000000600040914000200000000000000000000000000000000010f000700756e636f6e66696e656400001400"], 0x4c}, 0x2, 0x34005}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x29, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4042806}, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d00200700", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4.713455531s ago: executing program 0 (id=1489): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) readv(r1, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/129, 0x81}, {&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f00000002c0)=""/173, 0xad}, {&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000000580)=""/93, 0x5d}, {&(0x7f0000000600)=""/45, 0x2d}, {&(0x7f0000000640)}], 0x8) 4.491387726s ago: executing program 1 (id=1490): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x8400) 4.3522501s ago: executing program 5 (id=1491): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x28, r1, 0x10d, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0xf00000000000000}, 0x10) 4.292255529s ago: executing program 1 (id=1492): r0 = syz_open_dev$sndctrl(&(0x7f0000001b00), 0xfffffffffffffffb, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000001fc0)={{0x3, 0x3, 0x9, 0x9, '\x00', 0x2131411a}, 0x1, [0x3, 0x18, 0x5, 0x2, 0x7, 0x1611bc10, 0x401, 0x8, 0x813, 0x10001, 0x368de55e, 0x5, 0xb, 0xffffffffffffff18, 0x1000000, 0x1, 0x200, 0x6, 0x4, 0xe, 0x9, 0x12001, 0x7, 0x4, 0x6, 0x7b, 0xc960, 0x8001, 0x67, 0x2, 0x3, 0xfff, 0x7, 0x2, 0x10000, 0x3, 0x8, 0x10001, 0x8, 0x7ff, 0x3, 0x3, 0x8, 0x6, 0x8000000000000000, 0x5, 0x7, 0x6, 0x0, 0xffffffff9f4dcdfc, 0x100003f00, 0x2, 0x7656, 0xffff, 0x0, 0xf049, 0x4, 0x7, 0x0, 0x840, 0x0, 0x9, 0x1, 0xffffffffffff8000, 0x100, 0x0, 0x7f, 0x5, 0x8000000000000001, 0x7fffffff, 0xbedb, 0xffffffffffffffff, 0x0, 0x3, 0x6, 0x9, 0x2, 0x5, 0x1, 0xff, 0xc, 0x8000, 0x10000, 0x3, 0x3, 0x3, 0x8, 0x5, 0x7, 0x7496c20d, 0x8000000000000001, 0x3, 0x5, 0xffffffff, 0x7fffffff, 0x7fffffffffffffff, 0x8, 0x8, 0x8000, 0x4, 0x9, 0x0, 0x7, 0x4, 0x1037a2b6, 0x8, 0x0, 0x6, 0x7, 0x7, 0x7, 0x5, 0x6, 0x80000000, 0x7, 0x0, 0x100, 0xefeb, 0xfffffffffffffffe, 0x7fffffff, 0x6, 0x1ff, 0xff, 0xfffffffffffffff1, 0x4, 0x6, 0x57, 0xfffffffffffffffd]}) 4.194522448s ago: executing program 1 (id=1493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, 0x0, 0x4040800) 4.123058889s ago: executing program 5 (id=1494): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f00000002c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000cbe2281eeb27763f0000c073e2cde62009b7580db2793a764e78", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), 0x0, 0x2}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0x25) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) eventfd(0x8001) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002480)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x110, 0x7}, 0xfffffffe, 0x4, 0x3, 0xffffffffffff52e9, r0, r0, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf0400000000fddbdf251300000008000300", @ANYRES32=r9, @ANYBLOB="0a000600ffffffffffff000006001202010000000600b50028020000040013000597e2f15c94d6349900e40001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x4040004) socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 3.608192289s ago: executing program 4 (id=1495): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000063117c00000000008510000002000000850000002300000095000000000000009500a50500000000c44b1defc554982be068738cdaa6a11d8b19eed281f8068f17615104b8aeb47338e4053308b6fc684c46dc6575beccc991af6e0ada0e581e185c6f635675af6cc32536cb69e8de4248c0fd42d60fa34adc1ba2afcca512d3b20f410452c9a40dde5140a4df40def2017194981e95c48d597ed3013ff3a629768bc3192132ebfadad2b9a9a61add0f89"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) lsetxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f00000006c0)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) read$FUSE(r1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r0, r0, 0x2f}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x56, 0x60, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) socket(0x29, 0x4, 0x7) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a0000000500040000000000090002"], 0x50}}, 0x20040000) socket(0x1f, 0x2, 0x8) r4 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b00), 0x800, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 3.555472357s ago: executing program 1 (id=1496): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = semget$private(0x0, 0x4000000009, 0x2) semctl$GETALL(r2, 0x0, 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) symlinkat(0x0, 0xffffffffffffff9c, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r6, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 3.202008199s ago: executing program 6 (id=1497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xf5ffffff}, [@NFT_MSG_NEWCHAIN={0x7c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x59, 0x3, "fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4999bf4d277be1203e812a25bea54f1"}]}], {0x14}}, 0xa4}}, 0x0) 3.143636869s ago: executing program 4 (id=1498): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=""/172, 0x1a, 0xac, 0x1, 0x4}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000004297e2d90a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000010900010073797a30000000000900030073797a320000000054000000060a010400000000000000000100000008000b400000000038000480340001800b000100657874686472000024000280080001400000000c080003400002000008000440000000220500"], 0xc8}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0xfffffffff50e5761, 0x12) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x1, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000000c0)=0x2, &(0x7f0000000300), 0x2}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xd5}, 0x44004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x20, r7, 0x200, 0x70bd2d, 0x2, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x3}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048040}, 0x24040090) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="000800000400000100000000"]) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000680"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.016454165s ago: executing program 6 (id=1499): syz_emit_ethernet(0x117, &(0x7f0000000100)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @dccp={{0x2a, 0x4, 0x0, 0x10, 0x109, 0x67, 0x0, 0x0, 0x21, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x41, 0x2, [{0x2, 0xb, "45b906ca3d2790b5ee"}, {0x0, 0xa, "47bd7198e9b0b965"}, {0x7, 0x7, "c356086af1"}, {0x1, 0xa, "9fb8189343396ef1"}, {0x1, 0x6, "5b95eeb9"}, {0x6, 0xf, "e4d4947234334160bd5603dcb2"}]}, @cipso={0x86, 0x44, 0xffffffffffffffff, [{0x0, 0xb, "68704361e36fc28553"}, {0x1, 0x12, "9d24981fae8ab824e206cd3a4baeca50"}, {0x1, 0x2}, {0x5, 0xd, "684d8ed01987533b5f66c2"}, {0x5, 0xe, "ecdc8050bf3ffaf16dc7f6b0"}, {0x7, 0x2}, {0x1, 0x2}]}, @timestamp={0x44, 0x8, 0x65, 0x0, 0x3, [0xfffff000]}, @ra={0x94, 0x4}]}}, {{0x4e20, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x3, 0x0, "85ce92", 0x40, "842d12"}, "cbd1ddba8df56b994f80e46edae18a6c673d8f5b97203269e8d3490c4f2605155195543868013716c9af885c50933a8043efe796cac750abfef33cdd4dcf0ac9dbc70fdc17e804995ef7ef664a64b9b57d"}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x10b8, 0x5, 0x4, 0x0, 0x7f}) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000003000/0x3000)=nil) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x43, 0x4) setsockopt$inet6_int(r4, 0x29, 0x3, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.929830343s ago: executing program 4 (id=1500): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01ffffff7f00000000006700080008000300", @ANYRES32, @ANYBLOB="0800c300741300000800c400"], 0x30}}, 0x0) 2.807169341s ago: executing program 4 (id=1501): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x5, &(0x7f0000000200)=[{0x7, 0x9, 0xba, 0x6}, {0x7, 0x81, 0x7, 0x1}, {0x89be, 0x8e, 0x3, 0x5}, {0x9, 0x1, 0x3, 0xb20}, {0x1, 0xfe, 0x9, 0x2}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ca000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00c81c", @ANYRES16=r6, @ANYBLOB="01e200000000000000000600040914000200000000000000000000000000000000010f000700756e636f6e66696e656400001400"], 0x4c}, 0x2, 0x34005}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd0, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3f}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:crond_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:dhcpd_unit_file_t:s0\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8004800}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02a31d0004000000080000000100000080000000e04cda8a0b0cacb4a8aaf36704e14ae1c53d60aa60a18fd4cc5ab43c43036f64a8f5fa9796cec53b88f18864832f1c5fadb444", @ANYRES32=0x0, @ANYBLOB="00000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0xfffffffffffffffe, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x3) r8 = getpid() socket(0x1f, 0x2, 0x4) prlimit64(r8, 0x5, &(0x7f0000000040)={0x6, 0x5}, &(0x7f0000000080)) chmod(&(0x7f0000000140)='./cgroup\x00', 0x51) 1.443301716s ago: executing program 6 (id=1502): ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB="000000000048c1866a841f8e4b882ca7671b74bad96620d719b1886546b5a1f532311fcdb5c5504502", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) setgroups(0xffffffffffffff79, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000098"], &(0x7f0000000680)='syzkaller\x00'}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) dup3(r1, r1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x80040, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) io_submit(r5, 0x1e, &(0x7f0000000540)) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfa, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4010) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00c81c", @ANYRES16, @ANYBLOB="01e200000000000000000600040914000200000000000000000000000000000000010f000700756e636f6e66696e656400001400"], 0x4c}, 0x2, 0x34005}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x29, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4042806}, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d00200700", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.396636228s ago: executing program 4 (id=1503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000002c0)={0x0, 0xe0, {0xffffffffffffffff}, {0xee01}, 0x5, 0x9}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) prlimit64(r2, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0xcb, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}}}, 0xb) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x3, 0xe) recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r6, &(0x7f0000001700)=[{{&(0x7f0000000240), 0x80, &(0x7f00000016c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1}, 0x80}], 0x1, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) dup(r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c000008000480"], 0x1c}}, 0x400c010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x24008011}, 0xc011) 1.347437857s ago: executing program 0 (id=1504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x1) copy_file_range(r2, 0x0, r1, &(0x7f0000000200)=0x9b, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) rt_sigsuspend(&(0x7f0000000180)={[0x7]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a1", 0x10}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x8084) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES64=r1, @ANYRES8=r4, @ANYRES32=r5, @ANYRES8=r1], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x40000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000006000000000000000a00000000000000", @ANYRES32=r1, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYRES16=r7, @ANYRES32, @ANYBLOB="00000000b90600"/28, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r0, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="0000e17a6d0000400000000000000700000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="0000000085000000dd900000000000100000000000a7150000000000", @ANYRES16=r6, @ANYBLOB="0000000001000100"/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28]) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r10, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xd8, 0x30, 0xffff, 0x70bd28, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xbe9}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x6, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100), 0x14) 0s ago: executing program 1 (id=1505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4000400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0x10, 0x2, 0x0) io_setup(0x43, &(0x7f0000000140)) timerfd_create(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xc) read$usbfs(0xffffffffffffffff, &(0x7f0000000440)=""/201, 0xc9) request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001b3eb000040e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="4884000000c0000008001d00c3"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r3) fchdir(0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) kernel console output (not intermixed with test programs): =system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.495365][ T9417] Sensor A: ================== END STATUS ================== [ 404.639354][ T9436] 9p: Bad value for 'wfdno' [ 405.091889][ T29] audit: type=1400 audit(1780759279.714:570): avc: denied { lock } for pid=9446 comm="syz.2.954" path="/dev/vmci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 405.844121][ T29] audit: type=1400 audit(1780759280.474:571): avc: denied { write } for pid=9434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.236973][ T29] audit: type=1400 audit(1780759280.864:572): avc: denied { write } for pid=9475 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.099732][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.961'. [ 409.166874][ T29] audit: type=1800 audit(1780759282.974:573): pid=9481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.960" name="bus" dev="ramfs" ino=21847 res=0 errno=0 [ 410.621337][ T9529] netlink: 'syz.5.964': attribute type 3 has an invalid length. [ 410.688844][ T9529] netlink: 'syz.5.964': attribute type 3 has an invalid length. [ 410.710471][ T9529] netlink: 'syz.5.964': attribute type 3 has an invalid length. [ 410.740813][ T9529] netlink: 'syz.5.964': attribute type 3 has an invalid length. [ 410.794098][ T9529] netlink: 'syz.5.964': attribute type 3 has an invalid length. [ 410.818100][ T9529] netlink: 'syz.5.964': attribute type 3 has an invalid length. [ 410.845113][ T9529] netlink: 'syz.5.964': attribute type 3 has an invalid length. [ 410.868178][ T9529] netlink: 'syz.5.964': attribute type 3 has an invalid length. [ 410.890803][ T9529] netlink: 'syz.5.964': attribute type 3 has an invalid length. [ 410.898728][ T9529] netlink: 'syz.5.964': attribute type 3 has an invalid length. [ 411.712302][ T24] kernel read not supported for file /audio1 (pid: 24 comm: kworker/1:0) [ 412.130516][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 412.790398][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 412.817505][ T24] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 412.861548][ T24] usb 6-1: config 0 has no interface number 0 [ 412.878897][ T24] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 412.904917][ T24] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 412.943106][ T24] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 413.081265][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.095163][ T24] usb 6-1: Product: syz [ 413.099388][ T24] usb 6-1: Manufacturer: syz [ 413.104381][ T24] usb 6-1: SerialNumber: syz [ 413.122323][ T24] usb 6-1: config 0 descriptor?? [ 413.130752][ T9545] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 413.138389][ T9545] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 413.318372][ T29] audit: type=1400 audit(1780759287.864:574): avc: denied { read } for pid=9555 comm="syz.4.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 413.705942][ T9559] block nbd2: NBD_DISCONNECT [ 413.773148][ T9558] block nbd2: Disconnected due to user request. [ 413.813963][ T9558] block nbd2: shutting down sockets [ 413.878800][ T9545] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 413.896221][ T9545] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 414.960701][ T9580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.978'. [ 415.651145][ T5619] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 416.399620][ T29] audit: type=1400 audit(1780759291.024:575): avc: denied { create } for pid=9596 comm="syz.4.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 416.435212][ T24] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 416.465572][ T29] audit: type=1400 audit(1780759291.024:576): avc: denied { setopt } for pid=9596 comm="syz.4.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 416.500151][ T24] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 416.513875][ T9597] netlink: 212 bytes leftover after parsing attributes in process `syz.4.981'. [ 416.556324][ T24] asix 6-1:0.34: probe with driver asix failed with error -71 [ 416.652917][ T24] usb 6-1: USB disconnect, device number 20 [ 416.693112][ T29] audit: type=1400 audit(1780759291.324:577): avc: denied { write } for pid=9601 comm="syz.1.983" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 416.743510][ T9595] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.138989][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'. [ 417.198624][ T29] audit: type=1400 audit(1780759291.374:578): avc: denied { watch watch_reads } for pid=9598 comm="syz.0.982" path="/179/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 417.288588][ T29] audit: type=1400 audit(1780759291.894:579): avc: denied { lock } for pid=9610 comm="syz.4.986" path="socket:[22062]" dev="sockfs" ino=22062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 418.088408][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.988'. [ 418.635442][ T29] audit: type=1400 audit(1780759293.264:580): avc: denied { lock } for pid=9625 comm="syz.4.991" path="socket:[22098]" dev="sockfs" ino=22098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 418.692089][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 419.220515][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 420.965651][ T9643] binder: 9639:9643 ioctl c0306201 0 returned -14 [ 420.991528][ T9646] overlayfs: failed to clone upperpath [ 421.154853][ T9648] 9p: Bad value for 'rfdno' [ 421.259256][ T9649] validate_nla: 44 callbacks suppressed [ 421.305700][ T9649] netlink: 'syz.2.995': attribute type 1 has an invalid length. [ 422.664640][ T9671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1001'. [ 422.688718][ T9671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1001'. [ 423.115173][ T5625] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 423.178465][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 423.230132][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 423.250666][ T9674] netlink: 'syz.1.1002': attribute type 30 has an invalid length. [ 423.391777][ T9677] netlink: 'syz.1.1002': attribute type 30 has an invalid length. [ 423.926125][ T9674] Sensor A: ================= START STATUS ================= [ 423.959217][ T9674] Sensor A: Test Pattern: 75% Colorbar [ 423.983587][ T9674] Sensor A: Show Information: All [ 424.003220][ T9683] netlink: 'syz.5.1004': attribute type 5 has an invalid length. [ 424.011231][ T9674] Sensor A: Vertical Flip: false [ 424.034576][ T9674] Sensor A: Horizontal Flip: false [ 424.060571][ T9674] Sensor A: Brightness: 128 [ 424.071447][ T9674] Sensor A: Contrast: 128 [ 424.137668][ T9674] Sensor A: Hue: 0 [ 424.164472][ T9674] Sensor A: Saturation: 128 [ 424.195447][ T9674] Sensor A: Pixel Rate: 160000000 [ 424.218159][ T9674] Sensor A: Horizontal Blanking: 800 [ 424.246161][ T9674] Sensor A: Vertical Blanking: 3223 [ 424.267294][ T9674] Sensor A: ================== END STATUS ================== [ 424.370720][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 424.560660][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 424.586610][ T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 424.628545][ T24] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 424.681002][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 424.717318][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.739526][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.778930][ T24] usb 6-1: Product: syz [ 424.803934][ T24] usb 6-1: Manufacturer: syz [ 424.810370][ T5730] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 424.824719][ T24] usb 6-1: SerialNumber: syz [ 424.865569][ T24] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 424.895244][ T24] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 424.956866][ T24] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 424.994556][ T5730] usb 2-1: unable to get BOS descriptor or descriptor too short [ 425.017861][ T5730] usb 2-1: not running at top speed; connect to a high speed hub [ 425.055339][ T9683] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1004'. [ 425.060668][ T5730] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.106534][ T9683] hsr0: entered promiscuous mode [ 425.123304][ T5730] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 425.167445][ T5730] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.ff [ 425.544637][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.577154][ T5730] usb 2-1: Product: syz [ 425.586895][ T5730] usb 2-1: Manufacturer: syz [ 425.600336][ T5730] usb 2-1: SerialNumber: syz [ 425.844619][ T5730] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 425.903976][ T24] usb 6-1: USB disconnect, device number 21 [ 426.108294][ T5730] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 426.265270][ T5730] usb 2-1: USB disconnect, device number 14 [ 426.378118][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 426.785582][ T7657] udevd[7657]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 427.738659][ T29] audit: type=1400 audit(1780759302.364:581): avc: denied { listen } for pid=9720 comm="syz.1.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 429.605234][ T29] audit: type=1400 audit(1780759304.204:582): avc: denied { accept } for pid=9720 comm="syz.1.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 429.642761][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1019'. [ 429.767735][ T9740] ksmbd: Unknown IPC event: 4, ignore. [ 429.800452][ T29] audit: type=1400 audit(1780759304.264:583): avc: denied { map } for pid=9720 comm="syz.1.1015" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 432.127049][ T9766] ksmbd: Unknown IPC event: 4, ignore. [ 433.885211][ T5625] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1 [ 433.927519][ T9771] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20001 [ 436.640399][ T9796] ksmbd: Unknown IPC event: 4, ignore. [ 436.923585][ T9795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9795 comm=syz.0.1032 [ 437.509647][ T29] audit: type=1400 audit(1780759311.964:584): avc: denied { ioctl } for pid=9803 comm="syz.2.1037" path="socket:[23664]" dev="sockfs" ino=23664 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.799903][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1040'. [ 437.870452][ T5730] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 437.901985][ T9812] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 438.072254][ T5730] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 438.094985][ T5730] usb 2-1: config 0 has no interface number 0 [ 438.123172][ T5730] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 438.151067][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.181470][ T5730] usb 2-1: Product: syz [ 438.230251][ T5730] usb 2-1: Manufacturer: syz [ 438.283738][ T5730] usb 2-1: SerialNumber: syz [ 438.591593][ T5730] usb 2-1: config 0 descriptor?? [ 438.813203][ T5730] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 438.961376][ T5730] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 439.012226][ T5730] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 439.034567][ T5751] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 439.063689][ T5730] usb 2-1: media controller created [ 439.086542][ T29] audit: type=1400 audit(1780759313.714:585): avc: denied { write } for pid=9805 comm="syz.1.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 439.173470][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 439.240524][ T5751] usb 6-1: Using ep0 maxpacket: 16 [ 439.252639][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1042'. [ 439.273160][ T5751] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 439.301953][ T5751] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 439.462912][ T29] audit: type=1400 audit(1780759314.084:586): avc: denied { lock } for pid=9822 comm="syz.4.1042" path="socket:[23714]" dev="sockfs" ino=23714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 439.494459][ T5751] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 439.521736][ T5751] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 439.560040][ T5751] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 439.605652][ T29] audit: type=1400 audit(1780759314.094:587): avc: denied { lock } for pid=9822 comm="syz.4.1042" path="socket:[23703]" dev="sockfs" ino=23703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 439.640880][ T5751] usb 6-1: config 0 has no interface number 0 [ 439.663781][ T5751] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 439.703739][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.710324][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.719180][ T5751] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 439.831519][ T5625] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 439.847404][ T5751] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 439.941114][ T5730] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 439.971912][ T5751] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.101392][ T29] audit: type=1400 audit(1780759314.734:588): avc: denied { write } for pid=9820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.131827][ T5751] usb 6-1: config 0 interface 125 has no altsetting 0 [ 440.153955][ T5751] usb 6-1: config 0 interface 125 has no altsetting 2 [ 440.175966][ T5730] usb 2-1: USB disconnect, device number 15 [ 440.269119][ T29] audit: type=1400 audit(1780759314.794:589): avc: denied { ioctl } for pid=9850 comm="syz.0.1046" path="socket:[23735]" dev="sockfs" ino=23735 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 440.319800][ T5751] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 440.329223][ T5751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.360659][ T5751] usb 6-1: Product: syz [ 440.372868][ T29] audit: type=1400 audit(1780759314.864:590): avc: denied { mounton } for pid=9850 comm="syz.0.1046" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 440.400488][ T5751] usb 6-1: Manufacturer: syz [ 440.411988][ T5751] usb 6-1: SerialNumber: syz [ 440.465182][ T29] audit: type=1400 audit(1780759315.094:591): avc: denied { write } for pid=9852 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.501970][ T5751] usb 6-1: config 0 descriptor?? [ 440.567910][ T5751] usb 6-1: selecting invalid altsetting 2 [ 440.657133][ T29] audit: type=1800 audit(1780759315.144:592): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1044" name="bus" dev="ramfs" ino=23721 res=0 errno=0 [ 440.697825][ T9855] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1047'. [ 440.776830][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'. [ 440.919360][ T9858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1048'. [ 440.938486][ T9858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1048'. [ 441.492901][ T9861] overlayfs: failed to resolve './file0': -2 [ 441.885748][ T5751] get_1284_register timeout [ 442.032978][ C1] usb 6-1: async_complete: urb error -104 [ 442.038931][ C1] usb 6-1: async_complete: urb error -104 [ 442.044796][ C1] usb 6-1: async_complete: urb error -104 [ 442.050647][ C1] usb 6-1: async_complete: urb error -104 [ 443.133275][ T5730] usb 6-1: USB disconnect, device number 22 [ 443.419811][ T29] audit: type=1400 audit(1780759318.044:593): avc: denied { write } for pid=9859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.240381][ T29] audit: type=1400 audit(1780759318.864:594): avc: denied { write } for pid=9891 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.562692][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1057'. [ 444.582235][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1057'. [ 445.100055][ T9909] random: crng reseeded on system resumption [ 445.252394][ T9910] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 445.259123][ T9910] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 445.307308][ T9910] vhci_hcd vhci_hcd.0: Device attached [ 445.540478][ T5751] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 445.550488][ T5730] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 445.732836][ T5730] usb 6-1: unable to get BOS descriptor or descriptor too short [ 445.747729][ T5730] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 445.769156][ T5730] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 445.807038][ T5730] usb 6-1: config 63 has no interface number 0 [ 445.831015][ T5730] usb 6-1: config 63 interface 66 has no altsetting 0 [ 445.859166][ T5730] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 445.878276][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.917484][ T5730] usb 6-1: Product: syz [ 445.927644][ T5730] usb 6-1: Manufacturer: syz [ 445.948042][ T5730] usb 6-1: SerialNumber: syz [ 448.214814][ T9912] vhci_hcd: connection reset by peer [ 448.248158][ T5730] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 448.255922][ T137] vhci_hcd vhci_hcd.5: stop threads [ 448.281021][ T137] vhci_hcd vhci_hcd.5: release socket [ 448.295541][ T5730] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 448.322287][ T137] vhci_hcd vhci_hcd.5: disconnect device [ 448.353249][ T5730] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 448.363237][ T29] audit: type=1400 audit(1780759322.984:595): avc: denied { ioctl } for pid=9941 comm="syz.0.1069" path="socket:[23488]" dev="sockfs" ino=23488 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 448.420394][ T5730] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 448.710760][ T5730] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 448.745665][ T5730] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 448.780792][ T5730] uvcvideo 6-1:63.66: No streaming interface found for terminal 29. [ 448.809369][ T5730] uvcvideo 6-1:63.66: Entity type for entity Output 32773 was not initialized! [ 448.885618][ T5730] usb 6-1: USB disconnect, device number 23 [ 448.940555][ T5738] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 449.073755][ T29] audit: type=1400 audit(1780759323.704:596): avc: denied { ioctl } for pid=9950 comm="syz.0.1072" path="socket:[24070]" dev="sockfs" ino=24070 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 449.124178][ T5738] usb 2-1: Using ep0 maxpacket: 32 [ 449.142563][ T5738] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 449.182200][ T5738] usb 2-1: config 0 has no interface number 0 [ 449.217155][ T5738] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 449.268970][ T5738] usb 2-1: config 0 interface 85 has no altsetting 0 [ 449.294322][ T5738] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 449.330516][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.358932][ T5738] usb 2-1: Product: syz [ 449.445673][ T5738] usb 2-1: Manufacturer: syz [ 449.465916][ T5738] usb 2-1: SerialNumber: syz [ 449.558053][ T9958] FAULT_INJECTION: forcing a failure. [ 449.558053][ T9958] name failslab, interval 1, probability 0, space 0, times 0 [ 449.570826][ T9958] CPU: 1 UID: 0 PID: 9958 Comm: syz.5.1073 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.570861][ T9958] Tainted: [L]=SOFTLOCKUP [ 449.570868][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 449.570880][ T9958] Call Trace: [ 449.570888][ T9958] [ 449.570897][ T9958] dump_stack_lvl+0x100/0x190 [ 449.570928][ T9958] should_fail_ex.cold+0x5/0xa [ 449.570959][ T9958] should_failslab+0xc2/0x120 [ 449.570985][ T9958] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 449.571019][ T9958] ? __alloc_skb+0x140/0x710 [ 449.571057][ T9958] __alloc_skb+0x140/0x710 [ 449.571087][ T9958] ? __alloc_skb+0x5b7/0x710 [ 449.571123][ T9958] ? __pfx___alloc_skb+0x10/0x10 [ 449.571163][ T9958] netlink_alloc_large_skb+0x69/0x150 [ 449.571193][ T9958] netlink_sendmsg+0x680/0xda0 [ 449.571225][ T9958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.571250][ T9958] ? __might_fault+0x80/0x140 [ 449.571293][ T9958] ____sys_sendmsg+0x9e1/0xb70 [ 449.571318][ T9958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.571347][ T9958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.571378][ T9958] ? find_held_lock+0x2b/0x80 [ 449.571397][ T9958] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 449.571432][ T9958] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 449.571472][ T9958] ___sys_sendmsg+0x190/0x1e0 [ 449.571501][ T9958] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.571529][ T9958] ? trace_sched_exit_tp+0x11c/0x160 [ 449.571587][ T9958] __sys_sendmsg+0x170/0x220 [ 449.571618][ T9958] ? __pfx___sys_sendmsg+0x10/0x10 [ 449.571663][ T9958] ? __x64_sys_sendmsg+0x11/0xb0 [ 449.571696][ T9958] ? __x64_sys_sendmsg+0x1f/0xb0 [ 449.571733][ T9958] do_syscall_64+0x115/0x870 [ 449.571761][ T9958] ? clear_bhb_loop+0x40/0x90 [ 449.571788][ T9958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.571811][ T9958] RIP: 0033:0x7fbea699ce59 [ 449.571829][ T9958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.571850][ T9958] RSP: 002b:00007fbea7806028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.571872][ T9958] RAX: ffffffffffffffda RBX: 00007fbea6c16180 RCX: 00007fbea699ce59 [ 449.571886][ T9958] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a [ 449.571899][ T9958] RBP: 00007fbea7806090 R08: 0000000000000000 R09: 0000000000000000 [ 449.571913][ T9958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.571925][ T9958] R13: 00007fbea6c16218 R14: 00007fbea6c16180 R15: 00007ffc7964f4d8 [ 449.571955][ T9958] [ 449.927869][ T5738] usb 2-1: config 0 descriptor?? [ 450.548982][ T29] audit: type=1400 audit(1780759325.084:597): avc: denied { bind } for pid=9959 comm="syz.0.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 450.584524][ T5717] libceph: connect (1)[c::]:6789 error -22 [ 450.605323][ T5717] libceph: mon0 (1)[c::]:6789 connect error [ 450.662043][ T5751] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 450.746340][ T5738] appletouch 2-1:0.85: Geyser mode initialized. [ 450.753874][ T5738] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input16 [ 450.890860][ T9595] libceph: connect (1)[c::]:6789 error -22 [ 450.915043][ T9595] libceph: mon0 (1)[c::]:6789 connect error [ 451.271463][ T9965] ceph: No mds server is up or the cluster is laggy [ 451.347139][ T5717] usb 2-1: USB disconnect, device number 16 [ 451.737159][ T5717] appletouch 2-1:0.85: input: appletouch disconnected [ 452.294147][ T9985] sg_write: data in/out 3237192/14 bytes for SCSI command 0x0-- guessing data in; [ 452.294147][ T9985] program syz.5.1078 not setting count and/or reply_len properly [ 452.358985][ T29] audit: type=1400 audit(1780759326.984:598): avc: denied { connect } for pid=9984 comm="syz.5.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 453.144620][ T805] libceph: connect (1)[c::]:6789 error -22 [ 453.170511][ T805] libceph: mon0 (1)[c::]:6789 connect error [ 453.182689][ T5738] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 453.399811][ T5738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.452793][ T5738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.492923][ T805] libceph: connect (1)[c::]:6789 error -22 [ 453.504331][ T805] libceph: mon0 (1)[c::]:6789 connect error [ 453.517175][ T5738] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 453.552616][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.589546][ T5738] usb 6-1: config 0 descriptor?? [ 453.706772][T10003] ceph: No mds server is up or the cluster is laggy [ 453.818565][ T5625] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 454.235066][ T5738] hid_parser_main: 7 callbacks suppressed [ 454.235080][ T5738] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 454.286976][ T5738] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 454.292867][ T9992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.352032][ T9992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.352837][ T5738] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0010/input/input17 [ 454.576119][ T5738] cm6533_jd 0003:0D8C:0022.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 454.764289][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 454.807012][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 455.169579][ T5717] usb 6-1: USB disconnect, device number 24 [ 455.215184][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'. [ 455.250088][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'. [ 455.515918][T10033] overlayfs: overlapping lowerdir path [ 455.612729][ T5730] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 455.760514][ T5730] usb 2-1: device descriptor read/64, error -71 [ 455.987420][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1093'. [ 456.167034][T10043] bond2: entered promiscuous mode [ 456.173605][T10043] bond2: entered allmulticast mode [ 456.181237][T10043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.264723][T10039] erspan1: entered allmulticast mode [ 456.272863][T10039] erspan1: entered promiscuous mode [ 456.280324][T10039] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 456.301431][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1093'. [ 456.602298][T10046] random: crng reseeded on system resumption [ 456.860383][ T5730] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 456.917587][T10039] bond2 (unregistering): (slave erspan1): Releasing backup interface [ 456.927521][T10039] erspan1: left promiscuous mode [ 456.936078][T10039] bond2 (unregistering): Released all slaves [ 457.020424][ T5730] usb 2-1: device descriptor read/64, error -71 [ 457.178678][ T5730] usb usb2-port1: attempt power cycle [ 457.580444][ T5730] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 457.633779][ T5730] usb 2-1: device descriptor read/8, error -71 [ 457.831524][T10040] process '/newroot/278/file0' started with executable stack [ 457.910712][ T5730] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 458.095355][ T5730] usb 2-1: device descriptor read/8, error -71 [ 458.292752][ T5730] usb usb2-port1: unable to enumerate USB device [ 458.442046][T10050] ALSA: mixer_oss: invalid OSS volume '' [ 458.618336][T10056] netlink: 'syz.4.1098': attribute type 29 has an invalid length. [ 458.646009][T10056] netlink: 'syz.4.1098': attribute type 29 has an invalid length. [ 458.781109][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1100'. [ 458.833946][T10061] openvswitch: netlink: Message has 16 unknown bytes. [ 459.867386][T10076] 9pnet_virtio: no channels available for device 127.0.0.1 [ 460.316981][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 461.838367][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 461.857574][ T29] audit: type=1400 audit(1780759336.464:599): avc: denied { ioctl } for pid=10097 comm="syz-executor" path="socket:[24649]" dev="sockfs" ino=24649 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 461.883386][ T1822] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 461.899124][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 461.931858][ T29] audit: type=1400 audit(1780759336.534:600): avc: denied { bind } for pid=10098 comm="syz.0.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 461.971867][ T29] audit: type=1400 audit(1780759336.534:601): avc: denied { name_bind } for pid=10098 comm="syz.0.1110" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 462.020036][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 462.028618][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 462.036541][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 462.054162][ T29] audit: type=1400 audit(1780759336.534:602): avc: denied { node_bind } for pid=10098 comm="syz.0.1110" saddr=fe80::3a src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 462.082149][ T1822] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 462.091678][ T1822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.121637][ T1822] usb 6-1: config 0 descriptor?? [ 462.296183][T10106] Bluetooth: MGMT ver 1.23 [ 462.329413][T10096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.360936][T10096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.398348][ T1822] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 462.430592][ T1822] [drm:udl_init] *ERROR* Selecting channel failed [ 462.677466][ T1822] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 462.707407][ T1822] [drm] Initialized udl on minor 2 [ 462.782448][ T1822] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 462.856831][ T1822] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 462.903397][ T1822] usb 6-1: USB disconnect, device number 25 [ 462.911840][ T5751] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 462.969252][ T5751] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 463.478888][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1112'. [ 463.538578][T10118] openvswitch: netlink: Message has 16 unknown bytes. [ 463.826251][T10124] tipc: Started in network mode [ 463.844289][T10124] tipc: Node identity ac1414aa, cluster identity 4711 [ 463.867677][T10122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.879200][T10124] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 463.918663][T10124] tipc: Enabled bearer , priority 10 [ 463.939484][T10125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1110'. [ 464.012948][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 464.150579][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 464.180363][ T5628] Bluetooth: hci5: command tx timeout [ 464.290381][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 464.430396][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 464.570377][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 464.625303][ T29] audit: type=1400 audit(1780759339.234:603): avc: denied { connect } for pid=10128 comm="syz.1.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 464.710391][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 464.850402][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 464.982740][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 465.011109][ T5751] tipc: Node number set to 2886997162 [ 465.130448][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 465.400492][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 465.817410][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 466.260522][ T5628] Bluetooth: hci5: command tx timeout [ 466.751894][T10097] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.774374][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1123'. [ 466.786871][T10097] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.820550][T10097] bridge_slave_0: entered allmulticast mode [ 466.842745][T10097] bridge_slave_0: entered promiscuous mode [ 466.853648][T10166] 9p: Bad value for 'rfdno' [ 466.878814][T10097] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.919054][T10097] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.958225][T10097] bridge_slave_1: entered allmulticast mode [ 466.995919][T10097] bridge_slave_1: entered promiscuous mode [ 467.777367][T10185] random: crng reseeded on system resumption [ 468.222050][T10097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.258665][T10097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.340475][ T5628] Bluetooth: hci5: command tx timeout [ 468.416153][T10097] team0: Port device team_slave_0 added [ 468.454789][T10097] team0: Port device team_slave_1 added [ 468.597170][T10097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.632434][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.735289][T10097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.794601][T10097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.830517][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.915822][T10097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.060400][ C1] net_ratelimit: 4 callbacks suppressed [ 469.060418][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 469.204296][T10097] hsr_slave_0: entered promiscuous mode [ 469.245927][T10097] hsr_slave_1: entered promiscuous mode [ 469.275138][T10097] debugfs: 'hsr0' already exists in 'hsr' [ 469.299807][T10097] Cannot create hsr debugfs directory [ 469.466373][T10205] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1134'. [ 469.501977][ T29] audit: type=1400 audit(1780759344.104:604): avc: denied { write } for pid=10203 comm="syz.5.1136" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 469.608945][T10207] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5926] was attempted by " [ 470.100432][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 470.270414][ T29] audit: type=1400 audit(1780759344.834:605): avc: denied { create } for pid=10209 comm="syz.0.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 470.372204][ T29] audit: type=1400 audit(1780759344.844:606): avc: denied { setopt } for pid=10208 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 470.428930][ T5628] Bluetooth: hci5: command tx timeout [ 471.140388][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 471.437381][T10097] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 471.519988][T10097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.530348][ T5717] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 472.160402][ T5717] usb 2-1: Using ep0 maxpacket: 16 [ 472.173706][T10097] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 472.180564][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 472.266123][ T5717] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 472.293836][ T5717] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 472.306246][ T5717] usb 2-1: can't read configurations, error -61 [ 472.416693][T10097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.495204][T10097] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 472.541745][ T5717] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 472.570154][T10097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.609268][T10097] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 472.648688][T10097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.701029][ T5717] usb 2-1: Using ep0 maxpacket: 16 [ 472.720186][ T5717] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 472.753884][ T5717] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 472.787112][ T5717] usb 2-1: can't read configurations, error -61 [ 472.810890][ T5717] usb usb2-port1: attempt power cycle [ 472.889799][T10097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.934347][T10097] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.995635][ T9760] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.002837][ T9760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.220411][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 473.710485][ T29] audit: type=1400 audit(1780759348.214:607): avc: denied { mount } for pid=10243 comm="syz.4.1146" name="/" dev="hugetlbfs" ino=24916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 473.818541][ T5717] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 473.876432][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.883593][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.913951][ T5717] usb 2-1: Using ep0 maxpacket: 16 [ 473.924504][ T5717] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 474.004939][ T5717] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 474.039312][ T5717] usb 2-1: can't read configurations, error -61 [ 474.210401][ T5717] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 474.260427][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 474.389957][ T5717] usb 2-1: device descriptor read/8, error -71 [ 474.522190][ T5717] usb usb2-port1: unable to enumerate USB device [ 474.598101][T10263] random: crng reseeded on system resumption [ 475.300377][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 476.340396][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 476.655841][T10097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.893314][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1158'. [ 476.937491][T10301] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 477.214606][T10283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1156'. [ 477.380396][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 478.214827][T10349] ksmbd: Unknown IPC event: 4, ignore. [ 478.420394][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 478.768189][T10097] veth0_vlan: entered promiscuous mode [ 478.849162][T10097] veth1_vlan: entered promiscuous mode [ 478.911329][T10359] 9p: Bad value for 'rfdno' [ 479.010966][T10097] veth0_macvtap: entered promiscuous mode [ 479.068871][T10097] veth1_macvtap: entered promiscuous mode [ 479.157599][T10097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.231258][T10367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.241408][T10097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.310572][ T5751] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 479.319498][ T5949] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.348253][ T5949] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.387983][ T5949] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.419130][ T5949] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.460397][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 479.495907][ T5751] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.545483][ T5751] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 479.612848][ T5751] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.661001][ T5751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.708721][ T5751] usb 6-1: Product: syz [ 479.731586][ T5751] usb 6-1: Manufacturer: syz [ 479.751913][ T5751] usb 6-1: SerialNumber: syz [ 479.854525][ T9517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.893283][ T9517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.058037][ T9762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.095832][ T9762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.151927][ T29] audit: type=1400 audit(1780759354.774:608): avc: denied { mounton } for pid=10097 comm="syz-executor" path="/root/syzkaller.OJMX8b/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 480.290672][ T29] audit: type=1400 audit(1780759354.844:609): avc: denied { mounton } for pid=10097 comm="syz-executor" path="/root/syzkaller.OJMX8b/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 480.328803][T10365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.337705][T10365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.364728][ T5751] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 480.473414][ T29] audit: type=1400 audit(1780759354.844:610): avc: denied { mounton } for pid=10097 comm="syz-executor" path="/root/syzkaller.OJMX8b/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 480.500725][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 480.637348][ T29] audit: type=1400 audit(1780759354.884:611): avc: denied { mounton } for pid=10097 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 480.695537][ T5751] usb 6-1: USB disconnect, device number 26 [ 480.816780][T10384] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.824240][T10384] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.011457][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 481.026800][T10388] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 481.120520][ T5751] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 481.301791][ T5751] usb 6-1: Using ep0 maxpacket: 8 [ 481.310624][T10384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.339102][ T5751] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 481.384419][ T5751] usb 6-1: config 16 has an invalid descriptor of length 101, skipping remainder of the config [ 481.405549][T10384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.540432][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 482.205302][ T5751] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.218207][ T5751] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 482.235411][ T5751] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 482.250211][ T5751] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.264952][ T5751] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 482.282481][ T5751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.367747][ T5751] usb 6-1: can't set config #16, error -71 [ 482.384665][ T5751] usb 6-1: USB disconnect, device number 27 [ 482.545696][ T5628] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 482.580392][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 482.605103][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 482.740553][T10404] netlink: 'syz.0.1175': attribute type 30 has an invalid length. [ 482.830681][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 482.874533][T10409] netlink: 'syz.0.1175': attribute type 30 has an invalid length. [ 483.213170][T10413] Sensor A: ================= START STATUS ================= [ 483.245535][T10413] Sensor A: Test Pattern: 75% Colorbar [ 483.275935][T10413] Sensor A: Show Information: All [ 483.301604][T10413] Sensor A: Vertical Flip: false [ 483.318591][ T5949] Bluetooth: hci6: Frame reassembly failed (-84) [ 483.330363][ T57] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.339459][ T57] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.359875][T10413] Sensor A: Horizontal Flip: false [ 483.409208][T10413] Sensor A: Brightness: 128 [ 483.472674][ T57] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.494224][T10413] Sensor A: Contrast: 128 [ 483.532138][T10413] Sensor A: Hue: 0 [ 483.546638][ T57] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.576536][T10413] Sensor A: Saturation: 128 [ 483.600474][T10413] Sensor A: Pixel Rate: 160000000 [ 483.611538][T10416] FAULT_INJECTION: forcing a failure. [ 483.611538][T10416] name failslab, interval 1, probability 0, space 0, times 0 [ 483.620411][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 483.642947][T10413] Sensor A: Horizontal Blanking: 800 [ 483.660481][T10413] Sensor A: Vertical Blanking: 3223 [ 483.660615][T10416] CPU: 0 UID: 0 PID: 10416 Comm: syz.5.1177 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.660646][T10416] Tainted: [L]=SOFTLOCKUP [ 483.660654][T10416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 483.660666][T10416] Call Trace: [ 483.660671][T10416] [ 483.660678][T10416] dump_stack_lvl+0x100/0x190 [ 483.660709][T10416] should_fail_ex.cold+0x5/0xa [ 483.660738][T10416] should_failslab+0xc2/0x120 [ 483.660762][T10416] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 483.660793][T10416] ? alloc_empty_file+0x5b/0x1c0 [ 483.660831][T10416] alloc_empty_file+0x5b/0x1c0 [ 483.660862][T10416] alloc_file_pseudo+0x13a/0x230 [ 483.660896][T10416] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 483.660926][T10416] ? inode_init_always_gfp+0xc98/0xfb0 [ 483.660963][T10416] sock_alloc_file+0x50/0x210 [ 483.660984][T10416] do_accept+0x242/0x530 [ 483.661011][T10416] ? do_raw_spin_lock+0x128/0x260 [ 483.661042][T10416] ? __pfx_do_accept+0x10/0x10 [ 483.661090][T10416] __sys_accept4+0x108/0x200 [ 483.661119][T10416] ? __pfx___sys_accept4+0x10/0x10 [ 483.661148][T10416] ? __pfx_ksys_write+0x10/0x10 [ 483.661176][T10416] __x64_sys_accept4+0x96/0x100 [ 483.661203][T10416] ? lockdep_hardirqs_on+0x78/0x100 [ 483.661233][T10416] do_syscall_64+0x115/0x870 [ 483.661260][T10416] ? clear_bhb_loop+0x40/0x90 [ 483.661286][T10416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.661309][T10416] RIP: 0033:0x7fbea699ce59 [ 483.661328][T10416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.661349][T10416] RSP: 002b:00007fbea7848028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 483.661370][T10416] RAX: ffffffffffffffda RBX: 00007fbea6c15fa0 RCX: 00007fbea699ce59 [ 483.661385][T10416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 483.661398][T10416] RBP: 00007fbea7848090 R08: 0000000000000000 R09: 0000000000000000 [ 483.661411][T10416] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 483.661424][T10416] R13: 00007fbea6c16038 R14: 00007fbea6c15fa0 R15: 00007ffc7964f4d8 [ 483.661454][T10416] [ 483.910324][T10413] Sensor A: ================== END STATUS ================== [ 484.046466][ T29] audit: type=1400 audit(1780759358.674:612): avc: denied { map } for pid=10422 comm="syz.5.1179" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 484.130718][ T9595] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 484.147022][ T29] audit: type=1400 audit(1780759358.674:613): avc: denied { execute } for pid=10422 comm="syz.5.1179" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 484.378154][T10430] /dev/nullb0: Can't open blockdev [ 484.660389][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 485.042237][ T9595] usb 7-1: unable to get BOS descriptor or descriptor too short [ 485.061866][ T9595] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 485.074788][ T9595] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 485.084406][ T9595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.092683][ T9595] usb 7-1: Product: syz [ 485.096864][ T9595] usb 7-1: Manufacturer: syz [ 485.101772][ T9595] usb 7-1: SerialNumber: syz [ 485.330555][ T9595] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 485.381719][ T5628] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 485.382211][ T5625] Bluetooth: hci6: command 0x1003 tx timeout [ 485.566499][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1181'. [ 485.626084][T10436] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 485.700394][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 485.719541][T10421] vivid-003: disconnect [ 485.951722][ T9595] usb 7-1: invalid uac2 rates [ 486.051476][ T9595] usb 7-1: invalid uac2 rates [ 486.457517][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 486.740478][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 487.780400][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 487.824693][T10419] vivid-003: reconnect [ 488.189270][ T9595] usb 7-1: failed to enable PITCH for EP 0x82 [ 488.235649][ T9595] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 488.254168][ T29] audit: type=1400 audit(1780759362.844:614): avc: denied { ioctl } for pid=10454 comm="syz.1.1185" path="socket:[26424]" dev="sockfs" ino=26424 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 488.612836][ T9595] usb 7-1: clock source 0 is not valid, cannot use [ 488.663107][ T9595] usb 7-1: 2:1: cannot get freq (v2/v3): err -71 [ 488.707235][ T9595] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 488.716517][ T29] audit: type=1400 audit(1780759363.354:615): avc: denied { read } for pid=10459 comm="syz.5.1186" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 488.820833][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 488.876415][ T29] audit: type=1400 audit(1780759363.354:616): avc: denied { open } for pid=10459 comm="syz.5.1186" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 488.983889][ T9595] usb 7-1: USB disconnect, device number 2 [ 489.860468][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 490.094385][ T7600] udevd[7600]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.677731][T10484] FAULT_INJECTION: forcing a failure. [ 490.677731][T10484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.700353][T10484] CPU: 1 UID: 0 PID: 10484 Comm: syz.0.1192 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.700387][T10484] Tainted: [L]=SOFTLOCKUP [ 490.700394][T10484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 490.700405][T10484] Call Trace: [ 490.700412][T10484] [ 490.700420][T10484] dump_stack_lvl+0x100/0x190 [ 490.700455][T10484] should_fail_ex.cold+0x5/0xa [ 490.700483][T10484] _copy_from_iter+0x1f4/0x1690 [ 490.700511][T10484] ? rcu_is_watching+0x12/0xc0 [ 490.700542][T10484] ? trace_kmem_cache_alloc+0xd5/0x100 [ 490.700566][T10484] ? __kasan_slab_alloc+0x89/0x90 [ 490.700589][T10484] ? __pfx__copy_from_iter+0x10/0x10 [ 490.700617][T10484] ? __asan_memset+0x23/0x50 [ 490.700646][T10484] ? __build_skb_around+0x278/0x390 [ 490.700675][T10484] ? is_vmalloc_addr+0x86/0xa0 [ 490.700710][T10484] netlink_sendmsg+0x808/0xda0 [ 490.700742][T10484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.700780][T10484] sock_write_iter+0x524/0x5a0 [ 490.700804][T10484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.700830][T10484] ? __pfx_sock_write_iter+0x10/0x10 [ 490.700868][T10484] ? bpf_lsm_file_permission+0x9/0x10 [ 490.700898][T10484] ? security_file_permission+0x76/0x210 [ 490.700932][T10484] ? rw_verify_area+0xce/0x6d0 [ 490.700955][T10484] vfs_write+0x6ac/0x1070 [ 490.700980][T10484] ? __pfx_sock_write_iter+0x10/0x10 [ 490.701011][T10484] ? __pfx_vfs_write+0x10/0x10 [ 490.701032][T10484] ? find_held_lock+0x2b/0x80 [ 490.701074][T10484] ksys_write+0x1f8/0x250 [ 490.701098][T10484] ? __pfx_ksys_write+0x10/0x10 [ 490.701124][T10484] ? rcu_is_watching+0x12/0xc0 [ 490.701165][T10484] do_syscall_64+0x115/0x870 [ 490.701192][T10484] ? clear_bhb_loop+0x40/0x90 [ 490.701219][T10484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.701241][T10484] RIP: 0033:0x7fca9f19ce59 [ 490.701259][T10484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.701279][T10484] RSP: 002b:00007fca9d3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 490.701299][T10484] RAX: ffffffffffffffda RBX: 00007fca9f415fa0 RCX: 00007fca9f19ce59 [ 490.701315][T10484] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 490.701327][T10484] RBP: 00007fca9d3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 490.701340][T10484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.701353][T10484] R13: 00007fca9f416038 R14: 00007fca9f415fa0 R15: 00007ffc87976ad8 [ 490.701383][T10484] [ 490.956254][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 491.136105][T10491] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1187'. [ 491.344689][T10492] gfs2: error -5 reading superblock [ 492.020462][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 493.060461][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 493.943173][ T29] audit: type=1400 audit(1780759367.964:617): avc: denied { getopt } for pid=10520 comm="syz.4.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 493.993618][ T29] audit: type=1400 audit(1780759368.494:618): avc: denied { listen } for pid=10520 comm="syz.4.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 494.100403][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 494.527776][ T29] audit: type=1400 audit(1780759369.154:619): avc: denied { connect } for pid=10529 comm="syz.4.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 494.645828][ T29] audit: type=1400 audit(1780759369.244:620): avc: denied { mount } for pid=10512 comm="syz.6.1197" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 495.140398][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 495.771035][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 495.785909][T10544] netlink: 'syz.1.1205': attribute type 1 has an invalid length. [ 496.180382][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 496.225545][T10563] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1209'. [ 496.235305][T10563] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1209'. [ 497.178677][T10568] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1207'. [ 497.220394][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 497.627798][T10572] FAULT_INJECTION: forcing a failure. [ 497.627798][T10572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.660948][T10572] CPU: 1 UID: 0 PID: 10572 Comm: syz.1.1212 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.660982][T10572] Tainted: [L]=SOFTLOCKUP [ 497.660989][T10572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 497.661002][T10572] Call Trace: [ 497.661008][T10572] [ 497.661017][T10572] dump_stack_lvl+0x100/0x190 [ 497.661048][T10572] should_fail_ex.cold+0x5/0xa [ 497.661080][T10572] _copy_from_user+0x2e/0xd0 [ 497.661108][T10572] move_addr_to_kernel+0x65/0x170 [ 497.661137][T10572] __sys_connect+0xb5/0x170 [ 497.661166][T10572] ? __pfx___sys_connect+0x10/0x10 [ 497.661193][T10572] ? __fget_files+0x21f/0x3d0 [ 497.661232][T10572] ? __pfx_ksys_write+0x10/0x10 [ 497.661262][T10572] __x64_sys_connect+0x72/0xb0 [ 497.661291][T10572] ? lockdep_hardirqs_on+0x78/0x100 [ 497.661319][T10572] do_syscall_64+0x115/0x870 [ 497.661346][T10572] ? clear_bhb_loop+0x40/0x90 [ 497.661372][T10572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.661395][T10572] RIP: 0033:0x7f0ae279ce59 [ 497.661419][T10572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.661439][T10572] RSP: 002b:00007f0ae35ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 497.661467][T10572] RAX: ffffffffffffffda RBX: 00007f0ae2a15fa0 RCX: 00007f0ae279ce59 [ 497.661482][T10572] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 497.661495][T10572] RBP: 00007f0ae35ca090 R08: 0000000000000000 R09: 0000000000000000 [ 497.661507][T10572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.661520][T10572] R13: 00007f0ae2a16038 R14: 00007f0ae2a15fa0 R15: 00007ffff2a22568 [ 497.661550][T10572] [ 498.048361][ T29] audit: type=1400 audit(1780759372.674:621): avc: denied { accept } for pid=10575 comm="syz.1.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 498.085183][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 498.110746][T10574] SET target dimension over the limit! [ 498.262072][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 498.280359][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 498.301880][ T24] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.339935][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 498.362811][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 498.391115][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.428129][ T24] usb 7-1: config 0 descriptor?? [ 498.852433][ T24] mcp2221 0003:04D8:00DD.0011: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 499.098788][ T29] audit: type=1400 audit(1780759373.724:622): avc: denied { map } for pid=10587 comm="syz.1.1217" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 499.146381][T10588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.190982][ T29] audit: type=1400 audit(1780759373.724:623): avc: denied { execute } for pid=10587 comm="syz.1.1217" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 499.301665][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 499.785148][T10595] overlayfs: failed to clone lowerpath [ 499.809701][T10595] overlayfs: failed to clone lowerpath [ 500.203020][ T5730] usb 7-1: USB disconnect, device number 3 [ 500.340368][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 500.421762][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 500.585703][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 500.634289][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 500.659303][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 500.685070][ T24] usb 2-1: can't read configurations, error -71 [ 500.989428][T10611] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1221'. [ 501.144853][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.151285][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.380393][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 501.790719][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 501.993384][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 502.042899][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 502.088612][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 502.117808][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.141058][ T24] usb 2-1: Product: syz [ 502.156798][ T24] usb 2-1: Manufacturer: syz [ 502.164559][ T24] usb 2-1: SerialNumber: syz [ 502.240700][ T5730] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 502.420409][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 502.420788][ T5730] usb 6-1: Using ep0 maxpacket: 8 [ 502.499687][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 502.511444][ T24] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 502.649599][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 502.700400][ T5730] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 502.730549][ T5730] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200 [ 502.774017][ T5730] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 502.808985][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.842999][ T5730] usb 6-1: config 0 descriptor?? [ 502.877666][T10616] vivid-003: disconnect [ 502.895151][T10622] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 503.228501][ T24] usb 2-1: invalid uac2 rates [ 503.240796][ T24] usb 2-1: invalid uac2 rates [ 503.470406][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 503.781902][ T5628] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 503.791246][ T9595] usb 6-1: USB disconnect, device number 28 [ 503.804587][T10614] vivid-003: reconnect [ 503.847917][ T24] usb 2-1: failed to enable PITCH for EP 0x82 [ 503.987162][ T24] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 504.038523][ T24] usb 2-1: clock source 0 is not valid, cannot use [ 504.084921][ T24] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 504.097788][ T24] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 504.323132][ T24] usb 2-1: USB disconnect, device number 26 [ 504.398411][T10658] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1238'. [ 504.499198][ T7663] udevd[7663]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.515073][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 505.550401][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 505.855123][T10683] FAULT_INJECTION: forcing a failure. [ 505.855123][T10683] name failslab, interval 1, probability 0, space 0, times 0 [ 505.911400][T10683] CPU: 1 UID: 0 PID: 10683 Comm: syz.5.1244 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.911420][T10683] Tainted: [L]=SOFTLOCKUP [ 505.911424][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 505.911432][T10683] Call Trace: [ 505.911436][T10683] [ 505.911441][T10683] dump_stack_lvl+0x100/0x190 [ 505.911467][T10683] should_fail_ex.cold+0x5/0xa [ 505.911483][T10683] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 505.911501][T10683] should_failslab+0xc2/0x120 [ 505.911515][T10683] __kmalloc_noprof+0xe0/0x850 [ 505.911535][T10683] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 505.911555][T10683] genl_family_rcv_msg_doit+0xc7/0x300 [ 505.911573][T10683] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 505.911595][T10683] ? bpf_lsm_capable+0x9/0x10 [ 505.911606][T10683] ? security_capable+0x80/0x260 [ 505.911622][T10683] ? ns_capable+0xd2/0xf0 [ 505.911639][T10683] genl_rcv_msg+0x560/0x800 [ 505.911657][T10683] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.911673][T10683] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 505.911697][T10683] netlink_rcv_skb+0x159/0x420 [ 505.911711][T10683] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.911733][T10683] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 505.911764][T10683] ? netlink_deliver_tap+0x1ae/0xcc0 [ 505.911780][T10683] genl_rcv+0x28/0x40 [ 505.911799][T10683] netlink_unicast+0x585/0x850 [ 505.911816][T10683] ? __pfx_netlink_unicast+0x10/0x10 [ 505.911834][T10683] netlink_sendmsg+0x8b0/0xda0 [ 505.911852][T10683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.911864][T10683] ? __might_fault+0x80/0x140 [ 505.911887][T10683] ____sys_sendmsg+0x9e1/0xb70 [ 505.911901][T10683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.911916][T10683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.911936][T10683] ___sys_sendmsg+0x190/0x1e0 [ 505.911952][T10683] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.911988][T10683] __sys_sendmsg+0x170/0x220 [ 505.912007][T10683] ? __pfx___sys_sendmsg+0x10/0x10 [ 505.912031][T10683] ? rcu_is_watching+0x12/0xc0 [ 505.912051][T10683] do_syscall_64+0x115/0x870 [ 505.912066][T10683] ? clear_bhb_loop+0x40/0x90 [ 505.912080][T10683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.912093][T10683] RIP: 0033:0x7fbea699ce59 [ 505.912103][T10683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.912113][T10683] RSP: 002b:00007fbea7848028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.912125][T10683] RAX: ffffffffffffffda RBX: 00007fbea6c15fa0 RCX: 00007fbea699ce59 [ 505.912133][T10683] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 505.912139][T10683] RBP: 00007fbea7848090 R08: 0000000000000000 R09: 0000000000000000 [ 505.912146][T10683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.912152][T10683] R13: 00007fbea6c16038 R14: 00007fbea6c15fa0 R15: 00007ffc7964f4d8 [ 505.912168][T10683] [ 506.580381][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 507.450123][T10697] misc userio: Invalid payload size [ 507.620379][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 508.660391][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 508.785054][T10715] f2fs: Unknown parameter 'diócardoxí+¾‹„‹' [ 508.831125][T10716] f2fs: Unknown parameter 'diócardoxí+¾‹„‹' [ 508.965071][T10718] gtp0: entered promiscuous mode [ 508.994578][T10718] gtp0: entered allmulticast mode [ 509.041222][T10718] team0: Device gtp0 is of different type [ 509.158673][ T29] audit: type=1400 audit(1780759383.784:624): avc: denied { name_bind } for pid=10719 comm="syz.4.1255" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 509.710469][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 510.740388][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 511.790385][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 511.973269][T10728] overlayfs: failed to clone upperpath [ 512.820593][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 512.871507][T10732] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1257'. [ 513.860373][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 514.900382][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 515.602676][T10759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.635947][T10759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.920945][ T5717] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 515.942159][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 516.061990][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 516.082162][T10768] netlink: 'syz.1.1269': attribute type 30 has an invalid length. [ 516.151277][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 516.175411][T10768] netlink: 'syz.1.1269': attribute type 30 has an invalid length. [ 516.393754][T10778] Sensor A: ================= START STATUS ================= [ 516.493497][T10778] Sensor A: Test Pattern: 75% Colorbar [ 516.869124][T10778] Sensor A: Show Information: All [ 516.942773][T10778] Sensor A: Vertical Flip: false [ 516.980880][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 516.994378][T10778] Sensor A: Horizontal Flip: false [ 517.030450][T10778] Sensor A: Brightness: 128 [ 517.046898][T10778] Sensor A: Contrast: 128 [ 517.062868][T10778] Sensor A: Hue: 0 [ 517.080404][T10778] Sensor A: Saturation: 128 [ 517.098622][T10778] Sensor A: Pixel Rate: 160000000 [ 517.130424][T10778] Sensor A: Horizontal Blanking: 800 [ 517.163539][T10778] Sensor A: Vertical Blanking: 3223 [ 517.197721][T10778] Sensor A: ================== END STATUS ================== [ 517.416934][T10787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1274'. [ 517.462294][T10789] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1276'. [ 517.541609][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1273'. [ 517.584708][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1273'. [ 517.873771][T10798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 518.020410][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 518.742923][T10795] overlayfs: failed to clone upperpath [ 518.759270][T10801] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1278'. [ 519.060377][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 520.100390][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 521.140374][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 521.907138][ T29] audit: type=1400 audit(1780759396.524:625): avc: denied { listen } for pid=10799 comm="syz.6.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 522.180371][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 523.220383][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 524.260407][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 524.942578][T10838] FAULT_INJECTION: forcing a failure. [ 524.942578][T10838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.006080][T10838] CPU: 1 UID: 0 PID: 10838 Comm: syz.0.1289 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.006116][T10838] Tainted: [L]=SOFTLOCKUP [ 525.006125][T10838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 525.006138][T10838] Call Trace: [ 525.006145][T10838] [ 525.006153][T10838] dump_stack_lvl+0x100/0x190 [ 525.006184][T10838] should_fail_ex.cold+0x5/0xa [ 525.006214][T10838] _copy_from_iter+0x1f4/0x1690 [ 525.006245][T10838] ? __asan_memset+0x23/0x50 [ 525.006277][T10838] ? __pfx__copy_from_iter+0x10/0x10 [ 525.006303][T10838] ? __pfx___alloc_skb+0x10/0x10 [ 525.006353][T10838] netlink_sendmsg+0x808/0xda0 [ 525.006386][T10838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.006411][T10838] ? __might_fault+0x80/0x140 [ 525.006453][T10838] ____sys_sendmsg+0x9e1/0xb70 [ 525.006476][T10838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.006506][T10838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.006545][T10838] ___sys_sendmsg+0x190/0x1e0 [ 525.006573][T10838] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.006634][T10838] __sys_sendmsg+0x170/0x220 [ 525.006669][T10838] ? __pfx___sys_sendmsg+0x10/0x10 [ 525.006715][T10838] ? rcu_is_watching+0x12/0xc0 [ 525.006751][T10838] do_syscall_64+0x115/0x870 [ 525.006778][T10838] ? clear_bhb_loop+0x40/0x90 [ 525.006803][T10838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.006835][T10838] RIP: 0033:0x7fca9f19ce59 [ 525.006853][T10838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.006874][T10838] RSP: 002b:00007fca9d3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.006895][T10838] RAX: ffffffffffffffda RBX: 00007fca9f415fa0 RCX: 00007fca9f19ce59 [ 525.006910][T10838] RDX: 0000000004004004 RSI: 0000200000000100 RDI: 0000000000000003 [ 525.006923][T10838] RBP: 00007fca9d3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 525.006936][T10838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.006949][T10838] R13: 00007fca9f416038 R14: 00007fca9f415fa0 R15: 00007ffc87976ad8 [ 525.006979][T10838] [ 525.310365][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 525.602697][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1291'. [ 526.091915][ T29] audit: type=1800 audit(1780759400.724:626): pid=10825 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1282" name="bus" dev="ramfs" ino=28259 res=0 errno=0 [ 526.350368][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 526.852795][T10855] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1290'. [ 527.380376][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 528.420379][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 528.615742][ T29] audit: type=1804 audit(1780759403.244:627): pid=10872 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1296" name="/newroot/230/bus/bus" dev="overlay" ino=1294 res=1 errno=0 [ 529.460391][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 530.500429][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 531.550417][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 532.584833][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1303'. [ 532.590396][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 532.984907][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'. [ 532.994057][T10912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1305'. [ 533.037061][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'. [ 533.046249][T10912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1305'. [ 533.080457][ T5623] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 533.290546][ T5623] usb 7-1: device descriptor read/64, error -71 [ 533.620371][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 533.663035][ T5623] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 533.971728][ T5623] usb 7-1: device descriptor read/64, error -71 [ 534.164376][ T5623] usb usb7-port1: attempt power cycle [ 534.606334][ T5623] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 534.670364][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 535.046128][ T5623] usb 7-1: device descriptor read/8, error -71 [ 535.340392][ T5623] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 535.381393][ T5623] usb 7-1: device descriptor read/8, error -71 [ 535.550052][ T5623] usb usb7-port1: unable to enumerate USB device [ 535.700397][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 536.740396][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 536.808771][ T1822] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 536.990322][ T1822] usb 2-1: Using ep0 maxpacket: 32 [ 537.007510][ T1822] usb 2-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 537.087480][ T1822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.112905][ T1822] usb 2-1: Product: syz [ 537.127786][ T1822] usb 2-1: Manufacturer: syz [ 537.146396][ T1822] usb 2-1: SerialNumber: syz [ 537.433653][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'. [ 537.780409][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 538.402831][ T29] audit: type=1804 audit(1780759412.584:628): pid=10952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1311" name="/newroot/241/file0" dev="tmpfs" ino=1354 res=1 errno=0 [ 538.469843][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1321'. [ 538.504592][T10960] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 538.565277][T10960] ref_ctr decrement failed for inode: 0x54a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88813fe79880 [ 538.579933][ T29] audit: type=1400 audit(1780759413.204:629): avc: denied { set_context_mgr } for pid=10961 comm="syz.6.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 538.700647][T10960] uprobe: syz.1.1311:10960 failed to unregister, leaking uprobe [ 538.716578][T10962] binder_alloc: 10961: binder_alloc_buf, no vma [ 538.723583][ T29] audit: type=1400 audit(1780759413.344:630): avc: denied { call } for pid=10961 comm="syz.6.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 538.820374][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 538.847229][ T1822] usb 2-1: USB disconnect, device number 27 [ 539.125699][T10975] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1324'. [ 539.870367][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 539.937599][T10985] random: crng reseeded on system resumption [ 540.618794][T10992] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 540.697631][ T29] audit: type=1800 audit(1780759415.324:631): pid=10991 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1330" name="bus" dev="overlay" ino=1368 res=0 errno=0 [ 540.900389][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 541.495088][T11006] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 541.942066][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 542.368575][T11010] overlayfs: failed to clone upperpath [ 542.980370][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 544.030447][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 544.391142][T11041] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1341'. [ 544.560985][T11041] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 545.060717][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 545.858515][T11056] overlayfs: failed to clone upperpath [ 546.100428][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 546.220358][ T9595] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 546.449202][ T9595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.497803][ T9595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.556488][ T9595] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 546.597063][ T9595] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 546.621332][ T9595] usb 2-1: Manufacturer: syz [ 546.673870][ T9595] usb 2-1: config 0 descriptor?? [ 547.140390][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 547.301086][ T9595] uclogic 0003:256C:006D.0012: failed retrieving Huion firmware version: -71 [ 547.355895][ T9595] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 547.388057][ T9595] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 547.470341][ T9595] usb 2-1: USB disconnect, device number 28 [ 547.945889][ T29] audit: type=1800 audit(1780759422.564:632): pid=11062 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1347" name="bus" dev="ramfs" ino=29399 res=0 errno=0 [ 548.180358][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 549.220369][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 549.879391][ T5628] Bluetooth: hci4: unexpected event 0x35 length: 7 > 6 [ 550.262632][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 550.488738][T11097] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 550.660471][T11105] vlan2: entered promiscuous mode [ 550.665534][T11105] bridge0: entered promiscuous mode [ 551.171764][ T805] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 551.300383][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 551.353124][ T805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.410514][ T805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.511157][ T24] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 551.557057][ T805] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 552.073684][ T24] usb 2-1: device descriptor read/64, error -71 [ 552.082524][ T805] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 552.109353][ T805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.119242][T11118] syzkaller0: entered promiscuous mode [ 552.134423][T11118] syzkaller0: entered allmulticast mode [ 552.147775][ T805] usb 6-1: config 0 descriptor?? [ 552.162034][T11118] tipc: Started in network mode [ 552.184858][T11118] tipc: Node identity e20fd9518766, cluster identity 4711 [ 552.206480][T11118] tipc: Enabled bearer , priority 0 [ 552.226587][T11116] tipc: Resetting bearer [ 552.341920][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 552.434338][T11116] tipc: Disabling bearer [ 552.451440][ T24] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 552.651633][ T805] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 552.690389][ T24] usb 2-1: device descriptor read/64, error -71 [ 552.700953][ T805] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 552.734036][ T805] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 552.775926][ T805] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 552.810308][ T805] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 552.810540][ T24] usb usb2-port1: attempt power cycle [ 552.860460][ T805] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 552.890529][ T805] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 552.915814][ T29] audit: type=1804 audit(1780759427.534:633): pid=11107 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1360" name="/newroot/242/file0" dev="tmpfs" ino=1364 res=1 errno=0 [ 552.956993][ T805] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 553.005501][ T805] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 553.018176][ T29] audit: type=1400 audit(1780759427.574:634): avc: denied { setopt } for pid=11104 comm="syz.5.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 553.060334][ T805] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 553.113304][ T29] audit: type=1400 audit(1780759427.684:635): avc: denied { name_bind } for pid=11142 comm="syz.0.1368" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 553.136729][ T1822] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 553.197809][ T29] audit: type=1400 audit(1780759427.824:636): avc: denied { create } for pid=11142 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 553.230680][ T805] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 553.241310][ T24] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 553.274802][ T29] audit: type=1400 audit(1780759427.884:637): avc: denied { setopt } for pid=11142 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 553.309597][ T24] usb 2-1: device descriptor read/8, error -71 [ 553.334877][ T1822] usb 7-1: config index 0 descriptor too short (expected 7768, got 18) [ 553.356409][ T1822] usb 7-1: config 0 has an invalid interface number: 180 but max is 0 [ 553.380387][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 553.395792][ T1822] usb 7-1: config 0 has no interface number 0 [ 553.422789][ T1822] usb 7-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 553.491881][ T1822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.556649][ T1822] usb 7-1: config 0 descriptor?? [ 553.561764][ T24] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 553.608130][ T1822] ftdi_sio 7-1:0.180: FTDI USB Serial Device converter detected [ 553.622209][ T24] usb 2-1: device descriptor read/8, error -71 [ 553.676198][ T1822] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 553.750946][ T24] usb usb2-port1: unable to enumerate USB device [ 554.259955][ T24] usb 6-1: USB disconnect, device number 30 [ 554.420399][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 555.447879][T11179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1376'. [ 555.460390][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 555.475294][T11125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.581948][ T24] usb 7-1: USB disconnect, device number 8 [ 555.621549][T11177] comedi comedi4: bad chanlist[0]=0x00009d74 chan=40308 range length=2 [ 555.648357][ T24] ftdi_sio 7-1:0.180: device disconnected [ 555.708615][ T1822] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 556.500513][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 556.751107][ T1822] usb 2-1: Using ep0 maxpacket: 32 [ 556.762664][ T1822] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 556.773043][ T1822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.789210][ T1822] usb 2-1: config 0 descriptor?? [ 557.186052][ T1822] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 557.357597][ T1822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 557.368192][ T1822] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 557.376506][ T1822] usb 2-1: media controller created [ 557.398391][ T1822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 557.540397][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 558.580360][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 558.713540][ T1822] az6027: usb out operation failed. (-71) [ 558.737853][ T1822] az6027: usb out operation failed. (-71) [ 558.764357][ T1822] stb0899_attach: Driver disabled by Kconfig [ 558.826121][T11206] 9pnet_fd: Insufficient options for proto=fd [ 558.859397][ T1822] az6027: no front-end attached [ 558.859397][ T1822] [ 559.021878][ T1822] az6027: usb out operation failed. (-71) [ 559.027804][ T1822] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 559.040110][ T1822] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 559.087915][ T1822] dvb-usb: schedule remote query interval to 400 msecs. [ 559.584104][ T1822] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 559.617403][ T1822] usb 2-1: USB disconnect, device number 33 [ 559.623461][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 559.910886][ T1822] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 560.173795][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1385'. [ 560.194611][T11219] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1387'. [ 560.242732][T11213] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1385'. [ 560.271763][T11220] SELinux: syz.5.1385 (11220) wrote to checkreqprot. This is no longer supported. [ 560.367954][T11213] geneve2: entered promiscuous mode [ 560.383878][T11213] geneve2: entered allmulticast mode [ 560.519483][T11225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1389'. [ 560.537856][T11225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1389'. [ 560.660375][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 561.246986][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1393'. [ 561.430522][ T805] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 561.493517][T11238] ksmbd: Unknown IPC event: 4, ignore. [ 561.644888][ T805] usb 7-1: config 1 interface 0 has no altsetting 0 [ 561.686755][ T805] usb 7-1: string descriptor 0 read error: -22 [ 561.700387][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 561.726744][ T805] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 561.770659][ T805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.823179][ T29] audit: type=1400 audit(1780759436.454:638): avc: denied { execute } for pid=11228 comm="syz.0.1391" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 562.118506][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1397'. [ 562.147088][T11248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1397'. [ 562.204744][ T1822] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 562.303323][ T805] hid_parser_main: 28 callbacks suppressed [ 562.303338][ T805] steelseries 0003:1038:1410.0014: unknown main item tag 0x0 [ 562.306687][T11248] geneve2: entered promiscuous mode [ 562.357774][T11248] geneve2: entered allmulticast mode [ 562.363897][ T805] steelseries 0003:1038:1410.0014: unknown main item tag 0x0 [ 562.392634][ T805] steelseries 0003:1038:1410.0014: unknown main item tag 0x0 [ 562.430648][ T805] steelseries 0003:1038:1410.0014: unknown main item tag 0x0 [ 562.444979][ T1822] usb 6-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 562.480357][ T805] steelseries 0003:1038:1410.0014: unknown main item tag 0x0 [ 562.494996][ T29] audit: type=1400 audit(1780759437.124:639): avc: denied { mount } for pid=11234 comm="syz.6.1394" name="/" dev="autofs" ino=30973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 562.524270][ T1822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.556897][ T1822] usb 6-1: Product: syz [ 562.571965][ T1822] usb 6-1: Manufacturer: syz [ 562.575098][ T805] steelseries 0003:1038:1410.0014: unknown main item tag 0x0 [ 562.584674][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.584726][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.685204][ T1822] usb 6-1: SerialNumber: syz [ 562.701120][ T29] audit: type=1400 audit(1780759437.154:640): avc: denied { read } for pid=11234 comm="syz.6.1394" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 562.740347][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 562.779027][ T805] steelseries 0003:1038:1410.0014: unknown main item tag 0x0 [ 562.789696][ T29] audit: type=1400 audit(1780759437.154:641): avc: denied { open } for pid=11234 comm="syz.6.1394" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 562.816743][ T29] audit: type=1400 audit(1780759437.154:642): avc: denied { ioctl } for pid=11234 comm="syz.6.1394" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 562.867287][ T805] steelseries 0003:1038:1410.0014: unknown main item tag 0x0 [ 563.042626][ T805] steelseries 0003:1038:1410.0014: unknown main item tag 0x0 [ 563.071993][T11258] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1401'. [ 563.088045][ T805] steelseries 0003:1038:1410.0014: unknown main item tag 0x0 [ 563.147193][ T29] audit: type=1400 audit(1780759437.774:643): avc: denied { unmount } for pid=10097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 563.296275][ T1822] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 563.410450][ T1822] usb 6-1: MIDIStreaming interface descriptor not found [ 563.780382][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 564.084482][ T29] audit: type=1400 audit(1780759438.634:644): avc: denied { write } for pid=11259 comm="syz.6.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 564.234819][ T1822] usb 6-1: USB disconnect, device number 31 [ 564.246163][ T805] steelseries 0003:1038:1410.0014: missing HID_OUTPUT_REPORT 0 [ 564.464372][ T805] usb 7-1: USB disconnect, device number 9 [ 564.820360][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 565.107678][ T7600] udevd[7600]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.673630][ T1822] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 565.730129][T11292] FAULT_INJECTION: forcing a failure. [ 565.730129][T11292] name failslab, interval 1, probability 0, space 0, times 0 [ 565.745925][T11292] CPU: 1 UID: 0 PID: 11292 Comm: syz.5.1409 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.745960][T11292] Tainted: [L]=SOFTLOCKUP [ 565.745967][T11292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 565.745979][T11292] Call Trace: [ 565.745986][T11292] [ 565.745994][T11292] dump_stack_lvl+0x100/0x190 [ 565.746026][T11292] should_fail_ex.cold+0x5/0xa [ 565.746056][T11292] ? tomoyo_realpath_from_path+0xb6/0x690 [ 565.746090][T11292] should_failslab+0xc2/0x120 [ 565.746116][T11292] __kmalloc_noprof+0xe0/0x850 [ 565.746147][T11292] ? kfree+0x1dd/0x6c0 [ 565.746180][T11292] tomoyo_realpath_from_path+0xb6/0x690 [ 565.746222][T11292] tomoyo_path_number_perm+0x23c/0x580 [ 565.746250][T11292] ? tomoyo_path_number_perm+0x22e/0x580 [ 565.746287][T11292] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 565.746348][T11292] ? find_held_lock+0x2b/0x80 [ 565.746367][T11292] ? __fget_files+0x215/0x3d0 [ 565.746393][T11292] ? hook_file_ioctl_common+0x149/0x410 [ 565.746414][T11292] ? __fget_files+0x215/0x3d0 [ 565.746446][T11292] ? __fget_files+0x21f/0x3d0 [ 565.746478][T11292] security_file_ioctl+0xd3/0x230 [ 565.746512][T11292] __x64_sys_ioctl+0xb7/0x210 [ 565.746537][T11292] do_syscall_64+0x115/0x870 [ 565.746565][T11292] ? clear_bhb_loop+0x40/0x90 [ 565.746592][T11292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.746614][T11292] RIP: 0033:0x7fbea699ce59 [ 565.746632][T11292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.746653][T11292] RSP: 002b:00007fbea7848028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.746674][T11292] RAX: ffffffffffffffda RBX: 00007fbea6c15fa0 RCX: 00007fbea699ce59 [ 565.746688][T11292] RDX: 0000200000000300 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 565.746701][T11292] RBP: 00007fbea7848090 R08: 0000000000000000 R09: 0000000000000000 [ 565.746715][T11292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.746728][T11292] R13: 00007fbea6c16038 R14: 00007fbea6c15fa0 R15: 00007ffc7964f4d8 [ 565.746758][T11292] [ 565.746766][T11292] ERROR: Out of memory at tomoyo_realpath_from_path. [ 565.862051][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 566.031875][ T1822] usb 7-1: device descriptor read/64, error -71 [ 566.100393][ T5751] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 566.260824][ T5751] usb 2-1: Using ep0 maxpacket: 8 [ 566.270516][ T1822] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 566.280646][ T5751] usb 2-1: config 2 has an invalid interface number: 118 but max is 0 [ 566.295214][ T5751] usb 2-1: config 2 has no interface number 0 [ 566.323099][ T5751] usb 2-1: config 2 interface 118 has no altsetting 0 [ 566.363268][ T5751] usb 2-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice=d9.fa [ 566.382346][ T5751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.417920][ T5751] usb 2-1: Product: syz [ 566.430320][ T1822] usb 7-1: device descriptor read/64, error -71 [ 566.439411][ T5751] usb 2-1: Manufacturer: syz [ 566.455798][ T5751] usb 2-1: SerialNumber: syz [ 566.551767][ T1822] usb usb7-port1: attempt power cycle [ 566.900375][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 566.942386][ T5751] usb 2-1: unsupported MDLM descriptors [ 566.976438][ T5751] usb 2-1: USB disconnect, device number 34 [ 566.990331][ T1822] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 567.031019][ T1822] usb 7-1: device descriptor read/8, error -71 [ 567.270390][ T1822] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 567.311009][ T1822] usb 7-1: device descriptor read/8, error -71 [ 567.430720][ T1822] usb usb7-port1: unable to enumerate USB device [ 567.940375][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 568.400190][ T29] audit: type=1400 audit(1780759443.024:645): avc: denied { ioctl } for pid=11310 comm="syz.5.1417" path="socket:[31167]" dev="sockfs" ino=31167 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 568.818454][ T29] audit: type=1400 audit(1780759443.454:646): avc: denied { mount } for pid=11318 comm="syz.6.1419" name="/" dev="configfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 568.932894][ T29] audit: type=1400 audit(1780759443.524:647): avc: denied { search } for pid=11318 comm="syz.6.1419" name="/" dev="configfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 568.980440][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 569.580720][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1423'. [ 569.733349][ T29] audit: type=1400 audit(1780759444.364:648): avc: denied { sys_module } for pid=11329 comm="syz.5.1423" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 570.020381][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 571.060357][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 572.101231][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 572.871834][T11369] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.878988][T11369] bridge0: port 2(bridge_slave_1) entered listening state [ 572.886390][T11369] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.893550][T11369] bridge0: port 1(bridge_slave_0) entered listening state [ 573.140361][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 573.174897][ T29] audit: type=1400 audit(1780759447.404:649): avc: denied { setopt } for pid=11361 comm="syz.0.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 573.230402][ T1822] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 573.403687][ T29] audit: type=1400 audit(1780759447.994:650): avc: denied { ioctl } for pid=11368 comm="syz.5.1433" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 573.474046][ T1822] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.524683][ T1822] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 573.550332][ T1822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.584052][ T1822] usb 7-1: config 0 descriptor?? [ 573.721133][ T154] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 573.743232][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 573.805486][ T805] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 573.813613][ T154] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 573.813990][ T1822] usbhid 7-1:0.0: can't add hid device: -71 [ 573.880494][ T1822] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 573.931141][ T805] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 573.975297][ T1822] usb 7-1: USB disconnect, device number 14 [ 574.006677][T11384] tunl0: entered promiscuous mode [ 574.044116][T11384] netlink: 'syz.1.1437': attribute type 4 has an invalid length. [ 574.064144][T11384] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1437'. [ 574.171902][T11388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=11388 comm=syz.1.1437 [ 574.184767][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 574.202754][T11388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=11388 comm=syz.1.1437 [ 574.438296][ T29] audit: type=1400 audit(1780759449.064:651): avc: denied { write } for pid=11393 comm="syz.6.1440" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 574.510715][ T5738] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 574.619522][ T29] audit: type=1800 audit(1780759449.224:652): pid=11379 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1434" name="bus" dev="ramfs" ino=30098 res=0 errno=0 [ 574.725682][ T5738] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 574.785040][T11398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1441'. [ 574.811555][T11398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1441'. [ 575.218026][ T5738] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.220378][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 575.262838][ T5738] usb 7-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 575.290619][ T5738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.326999][ T5738] usb 7-1: Product: syz [ 575.348107][ T5738] usb 7-1: Manufacturer: syz [ 575.370664][ T5738] usb 7-1: SerialNumber: syz [ 575.412528][ T5738] usb 7-1: config 0 descriptor?? [ 575.453481][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 575.460613][ T5738] cytherm 7-1:0.0: Cypress thermometer device now attached [ 575.506319][T11403] netlink: 'syz.1.1443': attribute type 30 has an invalid length. [ 575.559594][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 575.602700][T11404] netlink: 'syz.1.1443': attribute type 30 has an invalid length. [ 575.829110][T11403] Sensor A: ================= START STATUS ================= [ 575.850354][T11403] Sensor A: Test Pattern: 75% Colorbar [ 575.906661][T11403] Sensor A: Show Information: All [ 575.908008][T11408] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 575.925421][T11408] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 576.040431][T11403] Sensor A: Vertical Flip: false [ 576.052066][T11403] Sensor A: Horizontal Flip: false [ 576.079077][T11403] Sensor A: Brightness: 128 [ 576.139815][T11415] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1445'. [ 576.260357][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 576.571550][ T24] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 576.579315][T11403] Sensor A: Contrast: 128 [ 576.620189][T11403] Sensor A: Hue: 0 [ 576.636315][T11403] Sensor A: Saturation: 128 [ 576.650626][T11403] Sensor A: Pixel Rate: 160000000 [ 576.671746][T11403] Sensor A: Horizontal Blanking: 800 [ 576.688290][T11403] Sensor A: Vertical Blanking: 3223 [ 576.707615][T11403] Sensor A: ================== END STATUS ================== [ 576.740562][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 576.806368][ T24] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 576.846292][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.909766][ T24] usb 6-1: config 0 descriptor?? [ 577.022611][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1446'. [ 577.061362][T11419] netlink: 'syz.1.1447': attribute type 1 has an invalid length. [ 577.301428][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 577.318170][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 577.341075][ T29] audit: type=1400 audit(1780759451.964:653): avc: denied { view } for pid=11418 comm="syz.1.1447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 577.363667][T11419] bond2: entered promiscuous mode [ 577.396834][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 577.407869][T11419] 8021q: adding VLAN 0 to HW filter on device bond2 [ 577.435572][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 577.485465][ T24] usb 6-1: media controller created [ 577.574725][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 577.632182][T11422] 8021q: adding VLAN 0 to HW filter on device bond3 [ 577.677529][T11422] bond2: (slave bond3): making interface the new active one [ 577.711686][ T5717] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 577.742151][T11422] bond3: entered promiscuous mode [ 577.779174][T11422] bond2: (slave bond3): Enslaving as an active interface with an up link [ 577.910533][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 577.935917][ T5717] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.969810][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 578.004840][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 578.035453][ T5717] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 578.087840][ T5717] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 578.107199][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 578.146219][ T5717] usb 2-1: Product: syz [ 578.158596][ T5717] usb 2-1: Manufacturer: syz [ 578.173275][ T5717] usb 2-1: SerialNumber: syz [ 578.207352][ T5717] usb 2-1: config 0 descriptor?? [ 578.242795][ T5717] usb 2-1: no audio or video endpoints found [ 578.260434][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 578.340381][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 578.434570][ T5717] usb 7-1: USB disconnect, device number 15 [ 578.477152][ T5717] cytherm 7-1:0.0: Cypress thermometer now disconnected [ 578.498202][ T9595] usb 2-1: USB disconnect, device number 35 [ 578.732613][ T24] az6027: usb out operation failed. (-71) [ 578.765748][ T24] az6027: usb out operation failed. (-71) [ 578.778334][ T24] stb0899_attach: Driver disabled by Kconfig [ 578.812993][ T24] az6027: no front-end attached [ 578.812993][ T24] [ 578.858374][ T24] az6027: usb out operation failed. (-71) [ 578.893988][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 578.995090][T11443] fuse: fd is not a fuse device [ 579.090919][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input20 [ 579.110760][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 579.117757][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 579.380369][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 579.682308][T11448] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1453'. [ 579.721795][T11448] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1453'. [ 579.865148][ T24] usb 6-1: USB disconnect, device number 32 [ 580.331354][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 580.420352][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 580.440695][T11454] 9p: Bad value for 'rfdno' [ 580.673284][ T29] audit: type=1400 audit(1780759455.294:654): avc: denied { remount } for pid=11464 comm="syz.4.1462" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 580.751740][T11465] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1461'. [ 581.160610][ T29] audit: type=1800 audit(1780759455.784:655): pid=11460 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1458" name="bus" dev="ramfs" ino=30272 res=0 errno=0 [ 581.377434][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 581.460354][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 582.001758][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.109625][ T24] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 582.148066][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.214904][ T24] usb 7-1: config 0 descriptor?? [ 582.314012][T11484] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 582.397504][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 582.500420][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 582.567470][T11489] fuse: Unknown parameter 'ÿÿ000000000000000000000000000000000000000900000000000000000000' [ 582.643993][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 582.698805][ T24] pwc: recv_control_msg error -71 req 02 val 2700 [ 582.752498][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 582.930174][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 582.969468][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 582.989237][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 583.008454][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 583.026238][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 583.042314][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 583.089887][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 583.118995][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 583.226255][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 583.285975][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 583.317850][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 583.372745][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 583.433950][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 583.540372][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 583.658273][ T24] pwc: Registered as video103. [ 583.749404][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input21 [ 583.845934][ T24] usb 7-1: USB disconnect, device number 16 [ 583.982660][T11513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.027941][T11513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.190997][ T5717] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 584.342606][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 584.372216][ T5717] usb 2-1: Using ep0 maxpacket: 16 [ 584.401751][ T5717] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.423411][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 584.448020][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 584.478256][ T5717] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 584.509837][ T5717] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.537070][ T24] usb 7-1: config index 0 descriptor too short (expected 7768, got 18) [ 584.556081][ T24] usb 7-1: config 0 has an invalid interface number: 180 but max is 0 [ 584.580380][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 584.589657][ T5717] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 584.603460][ T24] usb 7-1: config 0 has no interface number 0 [ 584.614886][ T5717] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 584.629418][ T24] usb 7-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 584.661701][ T5717] usb 2-1: Manufacturer: syz [ 584.667881][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.687018][ T5717] usb 2-1: config 0 descriptor?? [ 584.713063][ T24] usb 7-1: config 0 descriptor?? [ 584.733104][ T24] ftdi_sio 7-1:0.180: FTDI USB Serial Device converter detected [ 584.753984][ T24] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 584.764891][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1474'. [ 585.011219][ T5717] rc_core: IR keymap rc-hauppauge not found [ 585.025432][ T5717] Registered IR keymap rc-empty [ 585.034984][ T5717] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 585.063782][ T5717] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 585.080326][ T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 585.091467][ T5717] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 585.113424][ T5717] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input22 [ 585.133044][ T5717] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 585.161016][ T5717] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 585.183539][ T5717] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 585.215145][ T5717] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 585.242948][ T5717] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 585.250373][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 585.258564][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 585.268587][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.279200][ T5717] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 585.286668][ T24] usb 6-1: config 0 has no interfaces? [ 585.295478][ T24] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 585.307629][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.316452][ T5717] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 585.324725][ T24] usb 6-1: Product: syz [ 585.329061][ T24] usb 6-1: Manufacturer: syz [ 585.335738][ T24] usb 6-1: SerialNumber: syz [ 585.341371][ T5717] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 585.355376][ T24] usb 6-1: config 0 descriptor?? [ 585.370388][ T5717] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 585.404505][ T5717] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 585.437107][ T5717] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 585.460118][ T5717] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 585.519914][ T5717] usb 2-1: USB disconnect, device number 36 [ 585.620396][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 586.056631][T11496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 586.305302][T11525] ksmbd: Unknown IPC event: 4, ignore. [ 586.579220][ T805] usb 7-1: USB disconnect, device number 17 [ 586.648097][ T805] ftdi_sio 7-1:0.180: device disconnected [ 586.660362][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 587.540645][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 587.655012][T11548] atomic_op ffff888078141998 conn xmit_atomic 0000000000000000 [ 587.710353][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 587.803350][ T29] audit: type=1400 audit(1780759462.424:656): avc: denied { create } for pid=11547 comm="syz.0.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 587.979508][T11555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11555 comm=syz.6.1483 [ 588.194130][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 588.203020][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 588.339823][T11554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1481'. [ 588.750366][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 588.917600][ T29] audit: type=1804 audit(1780759463.084:657): pid=11561 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1484" name="/newroot/277/bus/bus" dev="overlay" ino=1569 res=1 errno=0 [ 589.780371][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 590.029686][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'. [ 590.038815][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'. [ 590.258886][ T1822] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 590.490643][ T1822] usb 7-1: device descriptor read/64, error -71 [ 590.577516][ T24] usb 6-1: USB disconnect, device number 33 [ 590.740468][ T1822] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 590.820363][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 590.890662][ T1822] usb 7-1: device descriptor read/64, error -71 [ 591.080963][ T1822] usb usb7-port1: attempt power cycle [ 591.268951][T11575] ksmbd: Unknown IPC event: 4, ignore. [ 591.430361][ T1822] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 591.499652][ T1822] usb 7-1: device descriptor read/8, error -71 [ 591.752782][ T1822] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 591.813310][ T1822] usb 7-1: device descriptor read/8, error -71 [ 591.860358][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 591.953713][ T1822] usb usb7-port1: unable to enumerate USB device [ 592.406163][T11594] SELinux: Context system_u:object_r:hald_var_lib_t:s0 is not valid (left unmapped). [ 592.445094][ T29] audit: type=1400 audit(1780759467.074:658): avc: denied { relabelto } for pid=11593 comm="syz.4.1495" name="file0" dev="tmpfs" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 592.514542][ T29] audit: type=1400 audit(1780759467.114:659): avc: denied { associate } for pid=11593 comm="syz.4.1495" name="file0" dev="tmpfs" ino=2077 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_var_lib_t:s0" [ 592.558222][T11597] 9p: Bad value for 'rfdno' [ 592.596191][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 592.606776][ T29] audit: type=1400 audit(1780759467.184:660): avc: denied { mounton } for pid=11593 comm="syz.4.1495" path="/385/file0" dev="tmpfs" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 592.649897][T11597] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1495'. [ 592.749160][ T29] audit: type=1400 audit(1780759467.374:661): avc: denied { rmdir } for pid=5613 comm="syz-executor" name="file0" dev="tmpfs" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 592.882888][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 592.894331][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1494'. [ 592.903310][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 592.924443][T11604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.065179][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1500'. [ 593.940367][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 594.714533][T11617] ksmbd: Unknown IPC event: 4, ignore. [ 594.980373][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 596.020356][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 596.732983][ T30] INFO: task syz.2.1061:9918 blocked for more than 143 seconds. [ 596.745431][ T30] Tainted: G L syzkaller #0 [ 596.781501][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.790675][T11623] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 596.797995][T11623] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 596.830271][ T30] task:syz.2.1061 state:D stack:27752 pid:9918 tgid:9917 ppid:5614 task_flags:0x400040 flags:0x00080002 [ 596.865683][ T30] Call Trace: [ 596.884434][ T30] [ 596.897331][ T30] __schedule+0x1295/0x67a0 [ 596.916106][ T30] ? __pfx___schedule+0x10/0x10 [ 596.938947][ T30] ? find_held_lock+0x2b/0x80 [ 596.963025][ T30] ? schedule+0x2bf/0x390 [ 596.990548][ T30] schedule+0xdd/0x390 [ 597.008382][ T30] schedule_preempt_disabled+0x13/0x30 [ 597.033327][ T30] __mutex_lock+0xced/0x1b10 [ 597.053422][ T30] ? usbdev_open+0x1b6/0x870 [ 597.060364][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 597.088523][ T30] ? klist_put+0xcb/0x1d0 [ 597.114634][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 597.144948][ T30] ? _raw_spin_unlock+0x28/0x50 [ 597.170623][ T30] ? kobject_put+0xb9/0x640 [ 597.193288][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 597.210293][ T30] ? usbdev_open+0x1b6/0x870 [ 597.230372][ T30] usbdev_open+0x1b6/0x870 [ 597.240477][ T30] ? do_raw_spin_lock+0x128/0x260 [ 597.260387][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 597.273021][ T30] ? chrdev_open+0x589/0x6a0 [ 597.290481][ T30] ? chrdev_open+0x589/0x6a0 [ 597.310339][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 597.317704][ T30] chrdev_open+0x234/0x6a0 [ 597.340371][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 597.347815][ T30] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 597.370320][ T30] do_dentry_open+0x6ab/0x14d0 [ 597.390278][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 597.400359][ T30] vfs_open+0x82/0x3f0 [ 597.413378][ T30] path_openat+0x208c/0x31a0 [ 597.430269][ T30] ? __pfx_path_openat+0x10/0x10 [ 597.450282][ T30] do_file_open+0x20e/0x430 [ 597.460367][ T30] ? __pfx_do_file_open+0x10/0x10 [ 597.480362][ T30] ? alloc_fd+0x476/0x790 [ 597.492959][ T30] ? do_getname+0x191/0x390 [ 597.510548][ T30] do_sys_openat2+0x10d/0x1e0 [ 597.520527][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 597.540474][ T30] __x64_sys_openat+0x12d/0x210 [ 597.560497][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 597.570447][ T30] ? rcu_is_watching+0x12/0xc0 [ 597.590266][ T30] do_syscall_64+0x115/0x870 [ 597.600490][ T30] ? clear_bhb_loop+0x40/0x90 [ 597.620282][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.640321][ T30] RIP: 0033:0x7fd42ab5d68e [ 597.650380][ T30] RSP: 002b:00007fd42b9b3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 597.682060][ T30] RAX: ffffffffffffffda RBX: 00007fd42b9b46c0 RCX: 00007fd42ab5d68e [ 597.710922][ T30] RDX: 0000000000000002 RSI: 00007fd42b9b3c00 RDI: ffffffffffffff9c [ 597.740420][ T30] RBP: 00007fd42b9b3c00 R08: 0000000000000000 R09: 0000000000000000 [ 597.778651][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 597.820358][ T30] R13: 00007fd42ae16038 R14: 00007fd42ae15fa0 R15: 00007ffefd9704b8 [ 597.840581][ T30] [ 597.851848][ T30] [ 597.851848][ T30] Showing all locks held in the system: [ 597.878277][ T30] 1 lock held by khungtaskd/30: [ 597.889583][T11623] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 597.896366][T11623] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 597.915386][ T30] #0: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 597.973455][ T30] 2 locks held by getty/5368: [ 598.010357][ T30] #0: ffff8880393ce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 598.043924][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 598.075637][ T30] 2 locks held by syz-executor/5613: [ 598.092940][ T30] 2 locks held by syz-executor/5616: [ 598.100374][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 598.117243][ T30] 5 locks held by kworker/0:6/5737: [ 598.132728][ T30] 3 locks held by kworker/0:7/5738: [ 598.150354][ T30] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 598.187126][ T30] #1: ffffc90004047d08 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 598.237592][ T30] #2: ffffffff90ad8200 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 598.270543][ T30] 1 lock held by syz.2.1061/9918: [ 598.278857][ T30] #0: ffff88802b3881d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 598.301660][ T30] 3 locks held by syz.0.1504/11623: [ 598.322116][ T30] #0: ffffffff90ad8200 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x166/0x580 [ 598.351229][ T30] #1: ffff8880744a4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 598.390031][ T30] #2: ffffffff8e7f10a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 598.416020][ T30] 1 lock held by syz.4.1503/11626: [ 598.435481][ T30] #0: ffff888076e71bb8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 598.467875][ T30] 1 lock held by syz.4.1503/11628: [ 598.483666][ T30] 3 locks held by syz.1.1505/11627: [ 598.503045][ T30] [ 598.509257][T11623] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 598.516301][T11623] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 598.530925][T11623] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 598.536851][T11623] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 598.559132][T11623] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 598.567481][T11623] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 598.655017][ T30] ============================================= [ 598.655017][ T30] [ 598.673379][ T30] NMI backtrace for cpu 1 [ 598.673399][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 598.673431][ T30] Tainted: [L]=SOFTLOCKUP [ 598.673438][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 598.673451][ T30] Call Trace: [ 598.673458][ T30] [ 598.673468][ T30] dump_stack_lvl+0x100/0x190 [ 598.673498][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 598.673525][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 598.673552][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 598.673591][ T30] sys_info+0x141/0x190 [ 598.673622][ T30] watchdog+0xcb1/0x1030 [ 598.673654][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 598.673681][ T30] ? __pfx_watchdog+0x10/0x10 [ 598.673707][ T30] ? __kthread_parkme+0x18c/0x230 [ 598.673744][ T30] ? kthread+0x13a/0x450 [ 598.673767][ T30] ? __pfx_watchdog+0x10/0x10 [ 598.673790][ T30] kthread+0x370/0x450 [ 598.673812][ T30] ? __pfx_kthread+0x10/0x10 [ 598.673838][ T30] ret_from_fork+0x72b/0xd50 [ 598.673867][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 598.673895][ T30] ? __switch_to+0x800/0x1100 [ 598.673926][ T30] ? __pfx_kthread+0x10/0x10 [ 598.673953][ T30] ret_from_fork_asm+0x1a/0x30 [ 598.673997][ T30] [ 598.674034][ T30] Sending NMI from CPU 1 to CPUs 0: [ 598.806809][ C0] NMI backtrace for cpu 0 [ 598.806826][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.806852][ C0] Tainted: [L]=SOFTLOCKUP [ 598.806859][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 598.806870][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 598.806898][ C0] Code: a6 92 02 e9 43 44 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 02 22 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 598.806918][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 598.806933][ C0] RAX: 000000000215b60d RBX: ffffffff8e4955c0 RCX: ffffffff8b899225 [ 598.806946][ C0] RDX: 0000000000000000 RSI: ffffffff8df0fbdb RDI: ffffffff8c1c4680 [ 598.806958][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 598.806969][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 598.806981][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d71950 [ 598.806993][ C0] FS: 0000000000000000(0000) GS:ffff888124387000(0000) knlGS:0000000000000000 [ 598.807011][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.807023][ C0] CR2: 000055557081da48 CR3: 00000000386f8000 CR4: 00000000003526f0 [ 598.807035][ C0] Call Trace: [ 598.807042][ C0] [ 598.807048][ C0] default_idle+0x9/0x10 [ 598.807075][ C0] default_idle_call+0x6c/0xb0 [ 598.807102][ C0] do_idle+0x464/0x590 [ 598.807133][ C0] ? __pfx_do_idle+0x10/0x10 [ 598.807166][ C0] cpu_startup_entry+0x4f/0x60 [ 598.807195][ C0] rest_init+0x251/0x260 [ 598.807211][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 598.807232][ C0] start_kernel+0x484/0x490 [ 598.807263][ C0] x86_64_start_reservations+0x24/0x30 [ 598.807282][ C0] x86_64_start_kernel+0x12b/0x130 [ 598.807302][ C0] common_startup_64+0x13e/0x148 [ 598.807335][ C0] [ 599.140367][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 599.250922][ T29] audit: type=1400 audit(1780759473.884:662): avc: denied { read } for pid=11626 comm="syz.4.1503" lport=14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 599.304803][T11631] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1503'. [ 599.391019][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 599.397905][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 599.408593][ T30] Tainted: [L]=SOFTLOCKUP [ 599.412912][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 599.422966][ T30] Call Trace: [ 599.426242][ T30] [ 599.429169][ T30] dump_stack_lvl+0x100/0x190 [ 599.433861][ T30] vpanic+0x552/0x970 [ 599.437847][ T30] ? __pfx_vpanic+0x10/0x10 [ 599.442364][ T30] ? irqentry_exit+0x24d/0x970 [ 599.447135][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 599.452345][ T30] panic+0xd1/0xe0 [ 599.456066][ T30] ? __pfx_panic+0x10/0x10 [ 599.460486][ T30] ? watchdog.cold+0x1ec/0x234 [ 599.465249][ T30] ? watchdog+0xcc1/0x1030 [ 599.469670][ T30] watchdog.cold+0x1fd/0x234 [ 599.474271][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 599.480082][ T30] ? __pfx_watchdog+0x10/0x10 [ 599.484762][ T30] ? __kthread_parkme+0x18c/0x230 [ 599.489804][ T30] ? kthread+0x13a/0x450 [ 599.494053][ T30] ? __pfx_watchdog+0x10/0x10 [ 599.498732][ T30] kthread+0x370/0x450 [ 599.502806][ T30] ? __pfx_kthread+0x10/0x10 [ 599.507404][ T30] ret_from_fork+0x72b/0xd50 [ 599.512005][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 599.517123][ T30] ? __switch_to+0x800/0x1100 [ 599.521813][ T30] ? __pfx_kthread+0x10/0x10 [ 599.526423][ T30] ret_from_fork_asm+0x1a/0x30 [ 599.531212][ T30] [ 599.534472][ T30] Kernel Offset: disabled [ 599.538779][ T30] Rebooting in 86400 seconds..