last executing test programs: 11m47.182597249s ago: executing program 0 (id=2192): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 11m46.856431232s ago: executing program 0 (id=2194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc008045}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x2, 0xb}, {0xa, 0xa}}}, 0x23}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 11m46.642232309s ago: executing program 0 (id=2195): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x8c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xb6c576abe13744c6}, 0x0) 11m46.32095496s ago: executing program 0 (id=2198): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x2, 0x5, 0x1, 0x0, @sint={0x3f8, 0x8000}}]}) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 11m45.809494465s ago: executing program 0 (id=2201): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260", 0xea}, {&(0x7f0000000280)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e", 0x68}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000006c0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {0x0}, {&(0x7f0000000d00)}, {0x0}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c5", 0x84}], 0x5}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002980)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @loopback, 0x8}, 0x1c, 0x0}}, {{&(0x7f0000000500)={0xa, 0x4e24, 0x314, @loopback, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000015c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x11, 0xa, '\x00', [@ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x20, {0x3, 0x6, 0x71, 0xfffa, [0x3a56, 0x1ff, 0x7]}}, @jumbo={0xc2, 0x4, 0x8001}, @pad1, @jumbo={0xc2, 0x4, 0x80000000}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1e}}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x11, 0xc, 0x1, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast1, @dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2]}}}], 0x100}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000016c0)="a5ca0e4166bfe6e3662dcbc06341b0a6481aa73d749e7bc46ef21c5d4db08b628562fe4ffab606b0a689cacb842ed83c5c4d2c1663baa42a8904f18591eafe2f18736de9b5905a61f03de07a3ae2276bf41416ff139a38bb1edc0a50b6c1fa2c27542bac4c52e66509c5763d5aad30de39b0095012644013aee29c9680c761415b0490df406870e80a38e9145039523d5ac43f82e78c7ec4150014b60017e124dbfc8a343d95386a22defe6123e15f", 0xaf}, {&(0x7f0000001780)="c4b42a50a4388c157988db0cc145b85045cd24524f372cf46361d94eb45cea7d72b1645a540f184afcefd2de9d2fddaf3e5f714bc4cd34230546cce41f5b15e5f8dc52b1e9a06587a3a9c466da8889368cfc360d7dd5caa87ded2482c2d66d2408adbbb800fee41b3cec57feb52073efe9df48c7dd1bd0e2b8faf5a973d4078cdd77cc64d7bc7e227dd6f4295deb758373c846024ec9169b07a6950ea40547f4c1b5c2f5ffc10f0ea88b0d8d6b8b8f17fe1a3dd01db4dd7cb97be7d0254cea7bbb16", 0xc2}], 0x2}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0xf3a, 0x8) splice(r5, 0x0, r8, 0x0, 0x80, 0x8) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r6, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r9 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(r9, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 11m44.191564389s ago: executing program 0 (id=2206): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x40, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14}, [@RTA_PREFSRC={0x8, 0x7, @local}]}, 0x24}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x5, 0x27, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044044) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x40) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "c332f38642fc6752ff087cf3407660862b9d896bb494b1e535ca0f9e076d0065", "a4f653d51babc8b6418bda58369cbd75efadb04579aed6ea03e7ef43ff4e0e34", "482822f55b594d75bdf6323ba0da13522e9ccbbb9b270f3634c4d02309ede617", "f047be5f76853bd691735699e8908db85ddea493ca33263dcc284bffcfe9e230", "4eb0b01d4c94fbbee4e4dd6861ed4c1c4b61ed83df8938053a01ae7d2c9be542", "3d7a7b4201c30446d5d76789", 0x9, 0x1000056, 0x4, 0xffff, 0x8000}}) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000300)={0x0, 0x7f, 0x6, &(0x7f00000002c0)={0x10, "dbe59aa96be76f16b24f7fa82127993690ff06d3586655d666db04ee3f6df95bc9"}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x4, 0x918, 0x7, 0x1, 0x401, 0x1, 0xffffffffffffff33, 0x0, 0x72b, 0x1470, 0x3, 0x100, 0x3, 0x81, 0x7ff, 0x100000000000], 0xeeef0001, 0x100000}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x40) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2a, 0xf, 0xb3, 0x20, 0x830, 0x80, 0xaee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x5, 0x20, 0xf2, "", [{{0x9, 0x4, 0x2c, 0x61, 0x0, 0x2a, 0xc6, 0x56, 0xff}}]}}]}}, 0x0) 11m43.297120441s ago: executing program 32 (id=2206): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x40, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14}, [@RTA_PREFSRC={0x8, 0x7, @local}]}, 0x24}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x5, 0x27, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044044) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x40) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "c332f38642fc6752ff087cf3407660862b9d896bb494b1e535ca0f9e076d0065", "a4f653d51babc8b6418bda58369cbd75efadb04579aed6ea03e7ef43ff4e0e34", "482822f55b594d75bdf6323ba0da13522e9ccbbb9b270f3634c4d02309ede617", "f047be5f76853bd691735699e8908db85ddea493ca33263dcc284bffcfe9e230", "4eb0b01d4c94fbbee4e4dd6861ed4c1c4b61ed83df8938053a01ae7d2c9be542", "3d7a7b4201c30446d5d76789", 0x9, 0x1000056, 0x4, 0xffff, 0x8000}}) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000300)={0x0, 0x7f, 0x6, &(0x7f00000002c0)={0x10, "dbe59aa96be76f16b24f7fa82127993690ff06d3586655d666db04ee3f6df95bc9"}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x4, 0x918, 0x7, 0x1, 0x401, 0x1, 0xffffffffffffff33, 0x0, 0x72b, 0x1470, 0x3, 0x100, 0x3, 0x81, 0x7ff, 0x100000000000], 0xeeef0001, 0x100000}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x40) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2a, 0xf, 0xb3, 0x20, 0x830, 0x80, 0xaee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x5, 0x20, 0xf2, "", [{{0x9, 0x4, 0x2c, 0x61, 0x0, 0x2a, 0xc6, 0x56, 0xff}}]}}]}}, 0x0) 33.805283411s ago: executing program 2 (id=4400): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(tea)\x00'}, 0x58) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setscheduler(r1, 0x0, &(0x7f0000000100)=0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7000003, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = epoll_create1(0x0) r3 = inotify_init1(0x0) r4 = dup(r3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000140)={0x40002013}) r5 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r5) 32.585274804s ago: executing program 2 (id=4406): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf) 32.489944444s ago: executing program 2 (id=4408): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x439a, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x40004, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0xbf}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) listen(r3, 0x20010001) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r6, 0x0, 0x0}) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x6}, [{0x2, 0x3}, {0x2, 0x5, 0xee01}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x7}], {0x4, 0x6}, [{0x8, 0x1}, {0x8, 0x7, r8}, {0x8, 0x7, r9}], {}, {0x20, 0x4}}, 0x6c, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r7, 0x0, r6}) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r10, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r11}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r11, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0xa, r7, 0x0, r11}) r12 = syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x6}]}, 0x20}}, 0x0) pread64(r12, &(0x7f0000000080)=""/220, 0xdc, 0x4007) 32.03537743s ago: executing program 2 (id=4411): r0 = socket(0x28, 0x5, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x8541, 0x1a9) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRESHEX, @ANYRES64=r3, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRESDEC=r2], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f00000001c0)={0x5, 0x72, 0x5}) 28.872709364s ago: executing program 1 (id=4419): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x3a2, 0x8, 0x81, 0x101, 0x2}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x12}, 0x800) (async, rerun: 32) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 32) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xf5}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1f2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}]}, 0x84}}, 0x20008811) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, &(0x7f00000003c0)=0x7ff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x4b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c045}, 0x4040000) (async) ioctl$NILFS_IOCTL_GET_CPSTAT(r2, 0x80186e83, &(0x7f0000000540)) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x17c, 0x4, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x74, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x76e19b95}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6620c725}, @NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4dce1e52}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4e7d3aec}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fff}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x612c54f5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7b}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x72519bcd}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2aeaa6ab}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffff8}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x10) r7 = accept4(r4, &(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000840)=0x80, 0x80000) connect$vsock_stream(r8, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) r9 = syz_open_dev$vbi(&(0x7f0000000a00), 0x0, 0x2) copy_file_range(r2, &(0x7f00000009c0)=0x8001, r9, &(0x7f0000000a40)=0x3, 0x40000, 0x0) (async) r10 = openat$incfs(0xffffffffffffffff, &(0x7f0000000a80)='.log\x00', 0x600000, 0x8) r11 = fsmount(r10, 0x1, 0x2) (async, rerun: 32) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000ac0), 0x4) (rerun: 32) read(r7, &(0x7f0000000b00)=""/60, 0x3c) (async, rerun: 64) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000000dc0)=0x0) (rerun: 64) r13 = getpgrp(0x0) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000e00)=0x0) (async, rerun: 64) r15 = syz_clone(0x0, &(0x7f0000000e40)="5878066fbf94a0f91ade94a1fc7be8ec599c864e684b45", 0x17, &(0x7f0000000e80), &(0x7f0000000ec0), &(0x7f0000000f00)="65e5e92ec3ba14a1b020f0d9a15c371f6733e497ff6272aacb2f2c472fded856e266ed142fd4a59aa85bda7912d4d3f3e79244d4de894fe355ecc86603d18b0070678cee0053f6bf0c7598bfd50b597fdb68883ba8b466d359acc2b4245363b9dbad774a6e33a4d303cdf7c6a4125fa41374da616c02774db20b529ed41efb69e8aa61e1ddc892cbd70c5e3d65383971ba8c4fe38f5c21518867c8d65fc5fa70fc25b6053513f1acdb5418040869760e5db8dbd4a1a9c2c36ffdb3201705771c53685becd77b") (rerun: 64) syz_clone3(&(0x7f0000001040)={0x10800400, &(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0), {0x26}, &(0x7f0000000c00)=""/186, 0xba, &(0x7f0000000cc0)=""/193, &(0x7f0000001000)=[r12, 0x0, r13, r14, r15], 0x5, {r10}}, 0x58) ioctl$VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000001140)=@multiplanar_fd={0x80000001, 0x4, 0x4, 0x10000, 0x3, {}, {0x1, 0x8, 0x5e, 0x5, 0x8a, 0x6, "9d32e0fc"}, 0x1, 0x4, {&(0x7f00000010c0)=[{0x53c4, 0xdc, {r11}, 0x100}, {0x148e, 0x4, {r11}, 0xfffffb6d}]}, 0x4}) add_key(&(0x7f00000011c0)='cifs.idmap\x00', &(0x7f0000001200)={'syz', 0x0}, &(0x7f0000001240)="f6452ec19d67f93947cf17ec45131853289f19ddd99ccf38b769c4bed4c70e34dbaa77e8bc681b732582e5e581fbc330cf0e2a3d723738fb350236671c9f6ca420feca27bf5cb304b66a9f81b29198634fc02ad9468a7be3a7833584ad2046bf8e487bd57df831e09ba4f476994d147d8e915f593d9f19e48035db963638b48297d1adc63af85556e13418af644c44c9c0add87a8c8647b2d9e1c470c600284fda7fb13bfd51737d9f6e369f08723fe93db97eebc5f4048df9d060af440671867a18843f397dea9517c407365b32ce70b5f00f2f0387f3e49516777b1b2d285ae8ca544fc45676740a85595047de3803d495d56f626f408192c69a82b45c3c451d4c2e0db1a03344e7e09f269e0b292a266f570294914f8b7e1caea13b2868051b8ea3ea69da0c37c4a56a17b593d383cc9b7f83423b4483fb612a994b555470f284337ea12c13e5737f71690cefa33a9ce7a3dc87637027de18d6a1f8ff44a4b6ee9548d5b07326458861fd1679f7521ecbadb40eefb3be2f7f345198ebd67c4564f02554ae9c3f9b866bef88e214099b9cd9173c49550e32b6d6c17128bc427ce1c4ddf1a8d9b00dc6b93f1cb0334e0f1539e7a63b302730fd33319e93b9ab1a0f9992724e223d4444378bb83fe7761fe9ba1cb9efbb7c06303b2b8b1f716d7d916b2dc6480b8e6696e9d038a299be2cb4d460825b1e5cdd9a6df78327da28a7b8a6a33fae79a279caa8460d10c7cd419fc46a70f70b1b6ca724797c08515aa5b57ac517e3846988114b822d10c3ca0e26d233fcf8fa63cd5ad8a79f987790b7dfc6ce5b8fea721e1ba2dd0a6146596f215d7dce7e26df54c677e2ebdb3c9980caa84143809db8f7f5041cb411526c43d0cb6ee5a4e82a90094736c524add3fd95b4691c2962d8401564b64c5b1ba68b70a1635d8ca9d141d1ee888ef587340865c49874ef4d0c78d13888530a8c0c02a6bb0b676d8c8033424b66606270c1968beab7dfd81bcbcc2474cd7fb211473d7969d6328c32a3731fda6dc36dc17e47cdb0f5140f469db11fdf9f78d0e8321a550bf7b30efae56f2a06afd160f1733eddf0d1b2f5d8bdcb133a756ac31017e125a36b97443b7273d979ec4c7e9642e6c6defde75a8c23df73de80ac4b79074ab5e57d4d0ac71a7fff8d67b0566bab9563759689736d05e826ab1f85d89b4c268c4e283e9c117c38b99e573a46a763a69e2f0f1e01c20ec0f4ec15ee15066209d7cd3cd2930c1bd5a59640451d166efbe7bb3449f2dcacd0fa21fdca98a87a6f7c19f6a560ad5d3a6aaeb00ba0cc0e2abeee428f70721d50b23bfb78322f231bab414bfce5172c244f72318798ae42fa98ef90bbdb93d109954062df58b58e8d433ff9a692964b4b01750cb8552e56ac2e9ebe84cecbcd2adf0f6350d7765c1b21e5ed3e691d785388e151c834126514df33fda08cbe08ac296a225f04ae018978c5970ce21d08baff45d808236f2a277bb816b9ba827fb6aa65312c33f4b62ca1e298eda3d792531a9f6aa01eb9f799b5e2abc658992eb068d0c50a4915976069c4f7f2a7cf4aa0551e2e4760014304cc2f8dd7b73e8a46e0ffab680113e8026a099f06291c2fb6e56d691e3f6fac18839de51f57fc942d2128c45008e72594cd1ab72d4455a907a8a2c19641296059354b74868fd2cc78dc48b91151fa3c2f883bbcc1b64fc6e4c89526d6b4cbb0eec4ed85cc999e0f22286c2642da04f212c607d535a30623da51cb05878d2bb32442ad5b23086bd760afb7c168d4fbb9c74d91fc4b2ea00d9f19679e58d70c7fc1dfba59dd8c7696498c10355c5540150bd0ea9b6a2c0df24af88fca85d0c6448c732fa56f28aeea2d2eccc48b196baca49152eba2ec5ef59f9117289eedb23c83dc96f7a7334089b233ba173a8850d34da4ac95bac13e0958b617a125fbbd5375503a76edcb649b5ddacb88f15778e369a738c7d11329b164c0cd4b2aff44faafe068f1fa924dfba3946619b59747b961fe01eaf0e7717b94bb88d81bbbb37d880a64a32a9a493ed0b2c8289a328d4feda75e8a10970c0b85163382ffb9b5a0da5f9759bd83c510bbd0de833bdd17d587bb00bf18d8b573b5b968b1445849ffdacdfb50c71150d61efb4f959e2f089a303d3853bbd065a5420f5fc36234e22678b590216cbd4cf1c0db14e0d088fb282a032bb63ff5b99ae5bbbd98cd0b973badfb61a576fefe17878b5a6f233b5f5488cb6cd5370573f9eba23a851ab97017da434fd6ba6eba88d5aff46800154ace5d68cad460c4ab94119484824c4dee65b280a24d2278c9eb32c3d977a5d3fc46cc3ae747590ad41f9aa3b3d3ac60829f5e21bdf2825493e05bc9f1f97f1eb5709b91795594d125a11642ff06386e8ee16e44aac842891522e364809221315313e64c01564af9e4e994eee10f889b75921b1d3535414f2253eb85c29c8413a1b70ae3fe9e83dab37bf5283afcc3ab89305924a12017146ce394dd7db9b92c7edecdf48428951dbb587fc0bde5d7c79061d07bb2bfe38e9cde828ac871155c7012aeb37251d8bc8430b95501ea949c38e9ec1788f74fde04dbc351e20073d2fdaa01b5d096497c22d8685390e1fc4fee8496362690dea3dcd4a9a364a259167337646c3f9a055a7c59a23d4d4c400c940cad17c2a761d75af42022c9e0d78c63f9359d1b0d7a2f6b14e3c28e5e476c1888bafbdf566f08f5014e67673eed170d2630b10d60dee049327173f290e7325b394d32882088d45ad8d4d059398f8942db851bd9648981936ed9fb05a68ede85c86321c3ee21af9541c45f76d367007ede3953e507486a008613b9d0ec9bc80d519873d4f831d1d556105b42ef930b64eb2e5a0e9108898f009e1db599756ca906e83198afc2de5b8b0a47e8571865177d092e05c356ef9922f5b60cc72acafc4b71460d2fd59ecc3f0198d93dc8ab71bfa5ecd7a0d00452b9942c032758bcd1d878fc0598a8995240d4b8e82f1104ea1ec2ce8ae26044491ee30966c6d73b3cebedf58eab57524c3c35b61d1dd53b35bf0fd9ce029c1a7140b0debb96eb6fc711f59643910b7846f29f3e31b19aa6c0a15327d1175ce302e0a488ec81f85d2ee86a8087c7cf98691fe166dcf2a53200b8a11807e9e534696c6c5953a6877deef45c2869fbdd536dc532b272ab798a2451024b681df9f5cf2fe477322334eaa0dd00f746675bdb4b5c5005b2500b5039a9e211c868ca5673ec980f627a5e22ecd32fd823511b1dab73641eb0d7cac8808f53e988e2a9a6c8ef7aec5671f28ef7339b3f644712794385a7b85290dacc82072e70e4910a8819c2673b949ce951dccae4460defb53ce8e79712e6bc53d79b9fccfd249bb564f2d101929dbff7a266ba9a748d6d70fd23cca8ac7b7c22484eea9f5f466667dc82069237a1b1ba0d2421d797d11de0a1f5359293de2e68e91ac9c6c62d8c0d2e51af46301f2e00882a56d77ab7afbb38b7ac83082b45976b959354a91a8d224bf20b5c2fb31cff3a3eaed064bf68c04029898e353a2b32ea7724927735e32b48675087c011ba189213de4ce1a1d825eef71d964cb5203a4110d18e0d582448a50ebdd042969a82668987db6b32513d252e47bcf249f103a0fe72ee083dacd3ae8c846e6ac43fb64f90e4b017d8a9923ee88c4ff1bfbe71716d30878047acb213ff573e78a4ed59e81d1a7a03681563e0de2a1daa2b28a74d3c0a25f3d71578453c86044dab5b28fcde83d164ace77911effc19eae9b6250e2070e8a038e45d09201882b573a5461f93bf31ad8f1b04341b839e6b75695d2bcdca0eae38a122325a8a6195ba37eb3ac193c5cc5ed526606f26672e603133eaa6ed25615c17f404579bb5eacf0381d4578288e35472df6e8827c2794d885834f94e879e665c833281da6749cc259afafb6cbad508405b723b078eb971ab60d83367061df9febb28cf9ba682cead7d69297b5116d527bdb2c5f024ad343ccc831f2b9fe2551786a6919ba00f98d16ff1955a9a57041a004074bf37e1163ec9daa0922f1935d29f616dcd038214f3a8124f6d28cde8a388fd704f5df1c9b03e9291002c436c336cd6cc773a7f24894b94206be34845f23323b8a1a5b5247623a98c326d5947558d410169e86f5bdb441c41bbb04de74a5da18ec7d1d4454e72c827c230163f99a41ef683bf32085ebb39f6b2101b9deddd0a19f29c47510e0e86da8e90ea671439183270b805ee57d39aa44162b3cfcc1517d000473066f24bcfbff6e2cf4abc4f62741a5f632b07957d55d0e658bc46fd7968136e4578340fb5c3c133e761166ead228138aee772348b2f0be1bdcdb43773d453a4d1c8661913fc7e246ca4f773b0be211fd7ca34760b31f08f5f4b1658af3020d0db3acbbbe61627d2cf3b30626891fb7f489b2fd1dcb9ec74d1f25ac1967f041ab9a24e34b9e4de7b80f1304996ba4092f38b4c16c81a6d6c5e95a9589b1e886a8371282a49060f7420f519a0c0a8270c6af4dac5b38d3d494603da9376ce505aa82ecd4db14dc83cf7f9995e5df8cc4075c29e378fe3a1c5982ca2798349132dea5bb0abf7441ba5e73016331a911e3f48a27a0aec09abf33dd1e12529154b5aa1bb1366f40a8de19a972cd5353052b5bbd6ad11df8ff0a471eb4ff06ae51285d4cd88326247637f1ef9de795803c9a9297c636fd148898e91bd8877ded389b098e01a5cda79546c3ed5c1b88e0e8a3d73d54a3a7195856179df8365fbd8809a6d6022686f59b98ef6bccf48d98a97699c01d5c5b753d0fcdb1097a39e6f20b5f1f4fc070543bf0a6dcfad8390322587e8671fb75e3435f550a8afe30e87deedc62f57cf36f3ba50c1761b50ea36bf980254e01abfa4a067793af55a157fdf0923a9beb56546bd567e18a33c0144d1d26f9bd6df9c1f7596249a8196cead55bd09250131c9900fe531cc987846fa83935274a644cc632764ebda6339ecbc36d463bec623961e76043b925e232693febbb67d002fa8afbadac8e5f5cd64fd0127fb0a497638a2bf06e30b8f6de6eea4448e3288c22915577e1d0cd7e9924aa011fb378bea4960d873f5a5f7a0a94e8c8f9eefb3b4011cdb073b0aead8898f56bba4652119f9677855ab352ee5d91537e4c574f6a0be403f114b3dba48b1ecf8dde1d1108a897886b85ef17e44c520a7cf9c6328883710257dd821072157e4d6f6504f8032b4dc58a299481b5fa12fa6b6b7fba6620026831a9cd7cecb800a069ad2ce10c630e7766fa3a99d5eec11ff28a4537a9b6f52bb8e48d9da3abb065e8a74bdd08fc47b9bf68755e418510f3f4949553cc94c36fc6e7adb243396ce6407057a9eef4adcd84859057b23e213c9a1c83e847ab1d468bd081526d5f177eea6e983cbb27c71ebb2d4624352c6303d77ea9941d859da685832858512b7fa1b8f9f3ede800644ba3faf333ff17bb18ae9b4754277f3f4531644d6cb21b6f5a92e4bb256a8bf8ffd759f68e02009dc441191517701a9ea0be940fa2599cbec9b0bb14ea759e722bf5d0b2ab6134c7a96215a4540e2d212071876e6695d184fd03fafb7c003018b7d635299da9530e12149cc9a89f2c83a3ed1821dad173722ca1316da6315bcb9b579d66b20a7551873a39ba893c71a00e4517f3a4c3cce0cc6f01ca05b80df2f5d285ef65c6a6ce08d47f294752ec3f970ec9e3738f29f30fd0678a02472bc0687bde4962b0e695566675be5945e94ea4451834f5f90a2c11ced4a87f3eac16e2ae7d5ab512819c24a5d42bf6368d1f207", 0x1000, 0x0) 25.141230901s ago: executing program 1 (id=4427): r0 = socket(0x1d, 0x2, 0x6) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2800, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0xa041, 0x112, 0xd}, 0x18) fanotify_mark(r1, 0x0, 0x40000000, r2, &(0x7f0000000280)='./file0\x00') setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xd, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x800b}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x4}}]}}]}, 0x3c}}, 0xd0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xffff, 0x6, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xe82d, 0xd}) ptrace$peekuser(0x3, r6, 0x7) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x1, 0xb, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x68, 0x0, 0x0, 0x4, 0x0, @empty, @empty, {[@end, @ssrr={0x89, 0xf, 0x2f, [@loopback, @broadcast, @loopback]}, @ssrr={0x89, 0x23, 0x6a, [@dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}, @local, @local]}]}}}}}) 24.705052979s ago: executing program 1 (id=4429): socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x8000002, 0x820002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 24.595726855s ago: executing program 2 (id=4430): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open(&(0x7f00000002c0)='.\x00', 0x181481, 0x134) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) readv(r0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000140)=""/33, 0x21}, {&(0x7f0000000440)=""/150, 0x96}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000640)=""/52, 0x34}, {&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000880)=""/181, 0xb5}], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) times(0xfffffffffffffffc) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='3\x00', 0x2) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) socket$netlink(0x10, 0x3, 0x6) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 24.21106029s ago: executing program 1 (id=4431): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x10b) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014", @ANYRESDEC=r2, @ANYBLOB="79b536ee72c7fe8981710772afcfbcbed112fdb60206584b97", @ANYBLOB="09e5fedced61fda4343ccb0c8e91f66f9bbf891fd01f51b824bcdb10ed23120789d5ec8abab630b7fc4ae3", @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x49, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000007880)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x14, r3, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$inet(0xa, 0x2, 0x7) connect$inet(r7, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x80000}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) listen(r7, 0x8) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r10, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}}) socket$inet_udp(0x2, 0x2, 0x0) 22.572414275s ago: executing program 1 (id=4435): syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = timerfd_create(0x1, 0x0) timerfd_settime(r1, 0x2, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="a00000001a00010000000000000000351c140000000000000000000084001300"/160], 0xa0}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r4 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) readv(r5, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1) close_range(r6, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 22.504382727s ago: executing program 2 (id=4436): r0 = semget(0x1, 0x4, 0x39c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x6, 0x0, 0x0, @generic}) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) memfd_create(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_procfs$userns(r3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x2000080) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) syz_io_uring_setup(0x4b9, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x100020e}, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) 20.613894648s ago: executing program 1 (id=4442): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xfff, 0x4, 0x4, 0x8007, 0x7, "ea710000000000f9000000024200000200", 0x4000000, 0x8000400}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) r3 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) getdents64(r3, &(0x7f0000000fc0)=""/224, 0x18) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x14, r6}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000000)={0x8, r6}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000100)) 9.096592238s ago: executing program 4 (id=4493): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x24000894) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shmget(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0xffffffff, 0x8e2d01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$EVIOCGKEY(r5, 0x80404518, 0x0) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x1a8}}) 8.289137832s ago: executing program 4 (id=4496): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x303, 0xfffd, 0x0, 0xfffffff9, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1201000044cef0084c05c3061d9b010203010902240001000000000904"], 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = io_uring_setup(0x7913, &(0x7f00000003c0)={0x0, 0xc1d7, 0x2, 0x2, 0x3d3}) fremovexattr(r7, &(0x7f0000000440)=@random={'security.', ')\x00'}) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback}, 0x10) ioctl$KVM_X86_SET_MSR_FILTER(r8, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x1, 0x0, 0x6, &(0x7f0000000640)}, {0x3, 0x0, 0x7fffffff, 0x0}, {0x3, 0x0, 0x4100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2a, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x100001, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0x1, 0x0, 0x40009, 0x0}]}) syz_open_dev$hidraw(&(0x7f0000000040), 0x5, 0xc20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) openat$tun(0xffffff9c, &(0x7f0000000200), 0x208602, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r10, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="67f8b54229e0", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, @loopback, @private=0xa810102}, "00186371ae9b1c03"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) 8.205279211s ago: executing program 5 (id=4497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x1b, 0x18, 0x901, 0x70bd2c, 0x25dfdbff, {0x2, 0x18, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 8.202785047s ago: executing program 5 (id=4498): ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, 0x0, 0x100) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(0x0, 0x80) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, 0x0) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54e00000", @ANYRES16=r4, @ANYBLOB="0100010000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ac1e000100000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, 0x0, 0x0) r5 = open(0x0, 0x842c2, 0xcb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="7b0b00000000000071115700000000008510000002000000850000007600000095000000000000009500a505000000009bf05fd3afbdff712d4e9ee5199a679c7341e526d961aa3d219c2f32dae6fb6a117602bc5a1c9a9844ed3e67ab"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x6, 0x0, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r8, {0x7, 0xc}, {0xf}, {0xe, 0x300}}, [@TCA_CHAIN={0x8, 0xb, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x20004084) 7.554160501s ago: executing program 5 (id=4499): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}}, 0x14}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) syz_usb_connect$uac2(0x2, 0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000200c201810400001020301090288000301018008080b0001010c200609040000000101200009240103000428000408240a05004000020c24030207030503050303001424060305"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f0000000480)=[{0x18, '\x00', @st={0x4, [{0x2, @svalue=0x7}, {0x1, @svalue=0x101}, {0x2, @svalue=0xee}, {0x1, @uvalue=0xb}]}, 0x8}, {0x1a, '\x00', @st={0x4, [{0x0, @svalue}, {}, {0x3, @uvalue=0x1}, {0x2, @uvalue=0x1000}]}, 0x8}]}) lseek(r2, 0xc, 0x4) fstat(r2, 0x0) accept4$llc(r2, &(0x7f0000000080), &(0x7f0000000180)=0x10, 0x800) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioprio_get$uid(0x3, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60000000001406ff00000000000000000000ffffac141414fe8000000000000000000000000000aa4e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c20801907803ff"], 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000100)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}]}}) 7.326645691s ago: executing program 33 (id=4436): r0 = semget(0x1, 0x4, 0x39c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x6, 0x0, 0x0, @generic}) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) memfd_create(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_procfs$userns(r3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x2000080) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) syz_io_uring_setup(0x4b9, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x100020e}, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) 6.752557511s ago: executing program 4 (id=4501): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x439a, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0)=0x8, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x40004, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0xbf}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) listen(r3, 0x20010001) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r5, 0x0, 0x0}) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x6}, [{0x2, 0x3}, {0x2, 0x5, 0xee01}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x7}], {0x4, 0x6}, [{0x8, 0x1}, {0x8, 0x7, r7}, {0x8, 0x7, r8}], {}, {0x20, 0x4}}, 0x6c, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r6, 0x0, r5}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r10}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r10, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x6}]}, 0x20}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/220, 0xdc, 0x4007) 6.460104817s ago: executing program 4 (id=4502): syz_io_uring_setup(0x1ff3, &(0x7f0000000780)={0x0, 0x6e11, 0x800, 0x2, 0x236}, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000000000000000000000010000850000002100000000020000000000000100000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f00000000c0), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000040000701000c005b800800098004000f80"], 0x20}, 0x1, 0x0, 0x0, 0x4c094}, 0x2004c000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x124) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, 0x0, 0x200000c0) bind$alg(r0, 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) unshare(0x62020600) 5.545911553s ago: executing program 34 (id=4442): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xfff, 0x4, 0x4, 0x8007, 0x7, "ea710000000000f9000000024200000200", 0x4000000, 0x8000400}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) r3 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) getdents64(r3, &(0x7f0000000fc0)=""/224, 0x18) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x14, r6}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000000)={0x8, r6}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000100)) 4.47644801s ago: executing program 5 (id=4506): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ppoll(0x0, 0x0, 0x0, 0x0, 0x600) 4.020607738s ago: executing program 3 (id=4507): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (fail_nth: 6) 3.909323054s ago: executing program 3 (id=4508): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020008402505a1a44000010203010902680002010040000904000001020e0000052406"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001d000000850000000500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000040)=0x8, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000000c0), 0xffff, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0), 0x1006, r2, 0x0, 0xd88d02a0}, 0x38) 3.419131877s ago: executing program 5 (id=4509): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=[{0x11, '\x00', @data=0xb, 0x9}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00') setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], 0x1090) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/140, 0x8c}], 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setpgid(0x0, r5) creat(&(0x7f0000000180)='./file0\x00', 0x5f) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYRESDEC]) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0605250c"], 0x9) sendmsg$nl_netfilter(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0c009d000600000000000000080048800400e0800800f400000000000b001d00b91153bc3dd8eb00000000"], 0x154}, 0x1, 0x0, 0x0, 0x54}, 0x4) 3.040981146s ago: executing program 4 (id=4510): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r0}) 2.828456617s ago: executing program 4 (id=4511): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa6642, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) getpid() ftruncate(0xffffffffffffffff, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = msgget$private(0x0, 0x300) msgctl$IPC_RMID(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000d00)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000000904000012020600000524060080"], 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/131], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) process_madvise(r1, &(0x7f0000002a00), 0x0, 0x10, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x3) 2.563663286s ago: executing program 3 (id=4512): openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x42054) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r2, &(0x7f0000000180)=""/195, 0xc3, 0x3) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f00000005c0)={0x2, 0x4e25, @remote}, 0x63) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001"], 0x870}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000080)={0x3, 0x6, 0x5, 0x3, 0x80, 0x4, 0x8}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x0, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r5, &(0x7f0000003940)={0x2020}, 0x2020) 2.431940962s ago: executing program 5 (id=4513): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 1.384054747s ago: executing program 3 (id=4514): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f00000001c0)}]) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x2, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}, [{0x8, 0xb, 0xfffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080) r9 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x80801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x19}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r12, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r11, 0x0}]) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@mpls_newroute={0x38, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x13}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x14}}, @RTA_OIF={0x8}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01080004000100dbdf250b00000008000300", @ANYRES32=r13, @ANYBLOB="4800508011000100ac77846391403bc86f5e386c7d00000004000500040005000500020003000000140004"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0xc0) 321.16728ms ago: executing program 3 (id=4515): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc5328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091260010000000000000e30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778fd87105119cc7e2f828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'netdevsim0\x00', @local}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x295}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c009900000000005200000008002600b409000008009f00450fbd20c0f1d4f84a29460600c807891426e6bdb2de1fb5cd2e506a0168c292400d98be81f0677116d51af35646af2c83781bfdba1414186718bdeedc52e2caf309b7e6dae65128323aa0a4d9864bd92310a914933eb2a4d69278beb53670dbda7b66d41eb316faee673508f71440445ab03994c50ac9bc0c1dc819815e994e8635a39aafa0341904c7bc7988b6ac85535d0f301b93ad257ecd65501d1341d12bb30500e0c43a5bf699bf9a41c4868240b988c87c2b2ef4035105942dd459dd8754f3ab683e8997023660ece3a2e6a29dba390f7ba25b20de065862672acf881b45743c0c442b866c69f02cd8843147"], 0x38}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000180)=[@code={0xa, 0x64, {"470f01cbf9f60000010f01c10f009000000000430f78c3f3440f09410fc79b000000000f201e430f0766b822000f00d866baf80cb8d55d75f18a8ab9800800d70f3235000400000f30b0f67daceeaceec76b01"}}], 0x64}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@rdmsr={0x66, 0x18, {0x4000009f}}], 0x18}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x3ff, 0x80, 0x2, 0x6, 0x9, 0x0, 0x9, 0x800001fffff, 0xbdb], 0x51001, 0x3c4014}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 0s ago: executing program 3 (id=4516): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0xb, 0x380000, 0x5, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x0, 0xfff, 0xae, 0x5, 0xa, 0xc, 0xfffffffffffff04d, 0x10002, 0x81, 0xbba, 0x0, 0x4000000006, 0x0, 0x100, 0x4, 0x2, 0x21, 0xffffffffffffffff, 0xc, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x2, 0xb, 0x8000000000000000, 0x6, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0x6, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x1000000000000000, 0x5, 0xc0, 0x7, 0x3, 0x6}) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x28, 0x2d, 0x8, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f00000025c0)=[{{0x0, 0x5a, &(0x7f00000004c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1}}], 0x1, 0xc015) kernel console output (not intermixed with test programs): yscall=202 compat=0 ip=0x7f199499de59 code=0x7ffc0000 [ 1216.749483][ T30] audit: type=1326 audit(1784004818.484:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21003 comm="syz.2.4064" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f199499de59 code=0x7ffc0000 [ 1218.179624][T11138] usb 2-1: USB disconnect, device number 47 [ 1218.365023][T21040] IPVS: length: 144 != 8 [ 1218.432511][ T49] Bluetooth: hci4: unexpected event for opcode 0x020e [ 1219.201757][T21045] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4075'. [ 1219.775446][T21060] fuse: Unknown parameter '0xffffffffffffffff' [ 1219.857561][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1219.857576][ T30] audit: type=1326 audit(1784004822.114:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21058 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d0b9de59 code=0x7ffc0000 [ 1220.856674][ T30] audit: type=1326 audit(1784004822.114:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21058 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d0b9de59 code=0x7ffc0000 [ 1221.014226][ T30] audit: type=1326 audit(1784004822.114:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21058 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d0b9de59 code=0x7ffc0000 [ 1221.163328][ T30] audit: type=1326 audit(1784004822.114:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21058 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f39d0b9de59 code=0x7ffc0000 [ 1221.279786][ T30] audit: type=1326 audit(1784004822.164:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21058 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d0b9de59 code=0x7ffc0000 [ 1221.356128][ T30] audit: type=1326 audit(1784004822.164:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21058 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d0b9de59 code=0x7ffc0000 [ 1221.409162][ T30] audit: type=1326 audit(1784004822.164:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21058 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d0b9de59 code=0x7ffc0000 [ 1221.437735][ T30] audit: type=1326 audit(1784004822.164:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21058 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d0b9de59 code=0x7ffc0000 [ 1221.599861][T11138] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1221.771385][ T30] audit: type=1326 audit(1784004822.164:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21058 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d0b9de59 code=0x7ffc0000 [ 1221.800609][ T30] audit: type=1326 audit(1784004822.164:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21058 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d0b9de59 code=0x7ffc0000 [ 1221.910352][T11138] usb 6-1: Using ep0 maxpacket: 32 [ 1221.925781][T21090] 9p: Bad value for 'rfdno' [ 1221.930853][T11138] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1222.305676][T11138] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1222.317073][T11138] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1222.330019][T11138] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1222.339731][T11138] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1222.505780][ T5816] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1222.518680][ T49] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1222.532941][ T49] Bluetooth: hci4: Injecting HCI hardware error event [ 1222.544531][ T49] Bluetooth: hci4: hardware error 0x00 [ 1222.721958][T11138] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1222.772498][T11138] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1222.790134][ T5816] usb 3-1: Using ep0 maxpacket: 32 [ 1222.797900][ T5816] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1222.807353][ T5816] usb 3-1: config 0 has no interface number 0 [ 1222.820817][T11138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.821870][ T5816] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1222.850210][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.870790][ T5816] usb 3-1: Product: syz [ 1222.886127][ T5816] usb 3-1: Manufacturer: syz [ 1222.895893][T21101] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4090'. [ 1222.905889][ T5816] usb 3-1: SerialNumber: syz [ 1222.915253][T11138] usb 6-1: config 0 descriptor?? [ 1222.989304][ T5816] usb 3-1: config 0 descriptor?? [ 1223.016284][ T5816] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1223.334226][T16891] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 1223.346194][T11138] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1223.416668][T21107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4092'. [ 1223.425752][T21107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4092'. [ 1223.434905][T21107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4092'. [ 1223.569756][T17394] usb 6-1: USB disconnect, device number 40 [ 1223.584336][T17394] usblp0: removed [ 1223.596261][ T5816] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1224.652199][ T49] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1225.069835][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1225.069851][ T30] audit: type=1400 audit(1784004827.324:1265): avc: denied { watch watch_reads } for pid=21102 comm="syz.3.4091" path="pipe:[86996]" dev="pipefs" ino=86996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1225.170046][T21107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4092'. [ 1225.231894][ T5816] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1225.244179][T21107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4092'. [ 1225.261074][T21107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4092'. [ 1225.454577][T21116] overlayfs: overlapping lowerdir path [ 1227.133180][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1227.143806][T11138] usb 3-1: USB disconnect, device number 33 [ 1227.588692][T11138] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1227.916469][T11138] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1227.998029][T11138] quatech2 3-1:0.51: device disconnected [ 1228.329942][T11138] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1228.618485][T11138] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 1228.631437][T11138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.951464][T11138] pwc: Logitech/Cisco VT Camera webcam detected. [ 1228.988455][T11138] pwc: Failed to set LED on/off time (-71) [ 1228.997776][T11138] pwc: send_video_command error -71 [ 1229.010382][T11138] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1229.034690][T11138] Philips webcam 3-1:127.0: probe with driver Philips webcam failed with error -71 [ 1229.067514][T11138] usb 3-1: USB disconnect, device number 34 [ 1229.079130][T21141] : renamed from vlan0 (while UP) [ 1231.015593][T21164] syzkaller0: entered promiscuous mode [ 1231.047092][T21164] syzkaller0: entered allmulticast mode [ 1231.849831][ T803] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1232.013065][ T803] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1232.028885][T21173] syzkaller0: entered promiscuous mode [ 1232.051677][T21173] syzkaller0: entered allmulticast mode [ 1232.061977][ T803] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1232.100146][ T803] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1232.127389][T21176] FAULT_INJECTION: forcing a failure. [ 1232.127389][T21176] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.203656][T21176] CPU: 1 UID: 0 PID: 21176 Comm: syz.1.4109 Tainted: G L syzkaller #0 PREEMPT(full) [ 1232.203685][T21176] Tainted: [L]=SOFTLOCKUP [ 1232.203692][T21176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1232.203703][T21176] Call Trace: [ 1232.203709][T21176] [ 1232.203716][T21176] dump_stack_lvl+0x100/0x190 [ 1232.203743][T21176] should_fail_ex.cold+0x5/0xa [ 1232.203768][T21176] should_failslab+0xc2/0x120 [ 1232.203789][T21176] __kmalloc_node_noprof+0x101/0x830 [ 1232.203809][T21176] ? qdisc_alloc+0xbb/0xb30 [ 1232.203835][T21176] qdisc_alloc+0xbb/0xb30 [ 1232.203855][T21176] ? _raw_read_unlock+0x28/0x50 [ 1232.203887][T21176] qdisc_create+0x70/0x1060 [ 1232.203919][T21176] tc_modify_qdisc+0xdcf/0x2120 [ 1232.203951][T21176] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1232.203999][T21176] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1232.204028][T21176] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1232.204051][T21176] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1232.204077][T21176] ? ref_tracker_free+0x37e/0x6c0 [ 1232.204102][T21176] netlink_rcv_skb+0x159/0x420 [ 1232.204125][T21176] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1232.204146][T21176] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1232.204180][T21176] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1232.204209][T21176] netlink_unicast+0x585/0x850 [ 1232.204237][T21176] ? __pfx_netlink_unicast+0x10/0x10 [ 1232.204269][T21176] netlink_sendmsg+0x8b0/0xda0 [ 1232.204297][T21176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1232.204324][T21176] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1232.204352][T21176] ____sys_sendmsg+0xa4d/0xbe0 [ 1232.204374][T21176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1232.204400][T21176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1232.204435][T21176] ___sys_sendmsg+0x190/0x1e0 [ 1232.204461][T21176] ? __pfx____sys_sendmsg+0x10/0x10 [ 1232.204483][T21176] ? __lock_acquire+0x49f/0x1a40 [ 1232.204505][T21176] ? get_pid_task+0x106/0x250 [ 1232.204559][T21176] __sys_sendmsg+0x160/0x210 [ 1232.204578][T21176] ? __pfx___sys_sendmsg+0x10/0x10 [ 1232.204610][T21176] do_syscall_64+0x115/0x870 [ 1232.204635][T21176] ? clear_bhb_loop+0x40/0x90 [ 1232.204657][T21176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.204676][T21176] RIP: 0033:0x7f4827d9de59 [ 1232.204691][T21176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1232.204708][T21176] RSP: 002b:00007f4828c3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1232.204725][T21176] RAX: ffffffffffffffda RBX: 00007f4828025fa0 RCX: 00007f4827d9de59 [ 1232.204737][T21176] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000005 [ 1232.204748][T21176] RBP: 00007f4828c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.204759][T21176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.204769][T21176] R13: 00007f4828026038 R14: 00007f4828025fa0 R15: 00007ffdf77a7c68 [ 1232.204794][T21176] [ 1232.207967][ T803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.513646][T21178] No source specified [ 1232.521899][T21178] overlayfs: failed to clone lowerpath [ 1232.534692][T21164] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1232.583227][ T803] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1232.713627][T21179] fuse: Unknown parameter 'f50xffffffffffffffff' [ 1232.775848][ T803] usb 6-1: USB disconnect, device number 41 [ 1233.153984][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.161276][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.314236][T11138] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1233.369760][ T803] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1233.469972][T11138] usb 3-1: Using ep0 maxpacket: 32 [ 1233.515357][T11138] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1233.537380][ T803] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1233.568051][T11138] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1233.594595][ T803] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1233.612619][T11138] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1233.657081][ T803] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1233.673898][T11138] usb 3-1: Product: syz [ 1233.689290][T11138] usb 3-1: Manufacturer: syz [ 1233.703549][ T803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.714049][T11138] usb 3-1: SerialNumber: syz [ 1233.743340][T11138] usb 3-1: config 0 descriptor?? [ 1233.779955][T21164] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1233.813753][T21187] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1233.922671][ T803] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1234.064317][T21196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4116'. [ 1234.073261][T21196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4116'. [ 1234.082167][T21196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4116'. [ 1234.155408][T21196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4116'. [ 1234.165275][T21196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4116'. [ 1234.174972][T21196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4116'. [ 1234.372024][ T803] usb 6-1: USB disconnect, device number 42 [ 1234.425297][T21205] netlink: 'syz.4.4117': attribute type 9 has an invalid length. [ 1234.472213][T21196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4116'. [ 1234.482023][T21196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4116'. [ 1234.491981][T21196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4116'. [ 1236.447358][T21224] FAULT_INJECTION: forcing a failure. [ 1236.447358][T21224] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.469988][T21224] CPU: 0 UID: 0 PID: 21224 Comm: syz.1.4123 Tainted: G L syzkaller #0 PREEMPT(full) [ 1236.470018][T21224] Tainted: [L]=SOFTLOCKUP [ 1236.470025][T21224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1236.470035][T21224] Call Trace: [ 1236.470041][T21224] [ 1236.470048][T21224] dump_stack_lvl+0x100/0x190 [ 1236.470073][T21224] should_fail_ex.cold+0x5/0xa [ 1236.470096][T21224] should_failslab+0xc2/0x120 [ 1236.470116][T21224] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1236.470136][T21224] ? __alloc_skb+0x5b7/0x710 [ 1236.470153][T21224] ? __alloc_skb+0x140/0x710 [ 1236.470172][T21224] __alloc_skb+0x140/0x710 [ 1236.470186][T21224] ? __alloc_skb+0x5b7/0x710 [ 1236.470201][T21224] ? __pfx___alloc_skb+0x10/0x10 [ 1236.470222][T21224] netlink_ack+0x117/0xb80 [ 1236.470254][T21224] netlink_rcv_skb+0x333/0x420 [ 1236.470278][T21224] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1236.470300][T21224] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1236.470331][T21224] ? rcu_is_watching+0x12/0xc0 [ 1236.470367][T21224] netlink_unicast+0x585/0x850 [ 1236.470394][T21224] ? __pfx_netlink_unicast+0x10/0x10 [ 1236.470426][T21224] netlink_sendmsg+0x8b0/0xda0 [ 1236.470453][T21224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1236.470480][T21224] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1236.470507][T21224] ____sys_sendmsg+0xa4d/0xbe0 [ 1236.470527][T21224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1236.470553][T21224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1236.470586][T21224] ___sys_sendmsg+0x190/0x1e0 [ 1236.470612][T21224] ? __pfx____sys_sendmsg+0x10/0x10 [ 1236.470633][T21224] ? __lock_acquire+0x49f/0x1a40 [ 1236.470653][T21224] ? get_pid_task+0x106/0x250 [ 1236.470703][T21224] __sys_sendmsg+0x160/0x210 [ 1236.470722][T21224] ? __pfx___sys_sendmsg+0x10/0x10 [ 1236.470752][T21224] do_syscall_64+0x115/0x870 [ 1236.470777][T21224] ? clear_bhb_loop+0x40/0x90 [ 1236.470799][T21224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.470816][T21224] RIP: 0033:0x7f4827d9de59 [ 1236.470832][T21224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.470848][T21224] RSP: 002b:00007f4828c3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1236.470866][T21224] RAX: ffffffffffffffda RBX: 00007f4828025fa0 RCX: 00007f4827d9de59 [ 1236.470877][T21224] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 1236.470887][T21224] RBP: 00007f4828c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.470898][T21224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.470908][T21224] R13: 00007f4828026038 R14: 00007f4828025fa0 R15: 00007ffdf77a7c68 [ 1236.470932][T21224] [ 1237.003653][ T30] audit: type=1400 audit(1784004839.264:1266): avc: denied { listen } for pid=21252 comm="syz.1.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1237.146939][T21256] fuse: Unknown parameter '0x0000000000000005' [ 1237.184829][ T30] audit: type=1326 audit(1784004839.444:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21255 comm="syz.4.4131" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1237.264966][ T30] audit: type=1326 audit(1784004839.474:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21255 comm="syz.4.4131" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1237.278974][ T5816] usb 3-1: USB disconnect, device number 35 [ 1237.311589][ T30] audit: type=1326 audit(1784004839.474:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21255 comm="syz.4.4131" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1237.338351][ T30] audit: type=1326 audit(1784004839.474:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21255 comm="syz.4.4131" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1237.365737][ T30] audit: type=1326 audit(1784004839.524:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21255 comm="syz.4.4131" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1237.398818][ T30] audit: type=1326 audit(1784004839.524:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21255 comm="syz.4.4131" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1237.445431][ T30] audit: type=1326 audit(1784004839.524:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21255 comm="syz.4.4131" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1237.471940][ T30] audit: type=1326 audit(1784004839.524:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21255 comm="syz.4.4131" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1237.501140][ T30] audit: type=1326 audit(1784004839.524:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21255 comm="syz.4.4131" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa1ccb5e68e code=0x7ffc0000 [ 1237.560435][ T803] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1237.719786][ T803] usb 2-1: Using ep0 maxpacket: 32 [ 1237.726191][ T803] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1237.739770][ T803] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1237.752502][ T803] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1237.762294][ T803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1237.774406][ T803] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1237.784678][ T803] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1237.818311][ T803] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1237.863966][ T803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.877982][ T803] usb 2-1: config 0 descriptor?? [ 1238.023589][T21275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4138'. [ 1238.239786][ T5345] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1238.313541][ T49] Bluetooth: hci6: unexpected event for opcode 0x1005 [ 1238.325437][ T803] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1238.481240][ T5345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.509976][ T5345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.544514][ T5816] usb 2-1: USB disconnect, device number 48 [ 1238.545431][ T5345] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1238.574550][ T5345] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1238.598489][ T5345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.609372][ T5345] usb 5-1: config 0 descriptor?? [ 1238.618073][ T5345] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 1238.626291][ T5345] usbhid 5-1:0.0: can't add hid device: -22 [ 1238.632567][ T5345] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 1238.728915][ T5816] usblp0: removed [ 1238.856915][T21290] xt_HMARK: proto mask must be zero with L3 mode [ 1239.420263][T11057] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1239.584265][T21273] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4137'. [ 1239.664566][ T803] usb 5-1: USB disconnect, device number 56 [ 1239.752481][T11057] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1239.774705][T11057] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1239.798920][T11057] usb 3-1: can't read configurations, error -61 [ 1239.935167][T11057] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1240.074975][T21309] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4149'. [ 1240.132763][T11057] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1240.144114][T11057] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1240.156617][T11057] usb 3-1: can't read configurations, error -61 [ 1240.173916][T11057] usb usb3-port1: attempt power cycle [ 1241.294857][T11057] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1241.333688][T11057] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1241.366229][T11057] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1241.380416][T11057] usb 3-1: can't read configurations, error -61 [ 1241.540845][T11057] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1241.776911][T21354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4163'. [ 1241.788651][T21354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4163'. [ 1241.797688][T21354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4163'. [ 1241.807556][T11057] usb 3-1: device not accepting address 39, error -71 [ 1241.816179][T21359] xt_hashlimit: max too large, truncated to 1048576 [ 1241.835945][T11057] usb usb3-port1: unable to enumerate USB device [ 1241.858804][T21359] xt_hashlimit: overflow, rate too high: 0 [ 1241.913900][T21354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4163'. [ 1241.926717][T21354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4163'. [ 1241.935764][T21354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4163'. [ 1242.166233][T21354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4163'. [ 1242.175232][T21354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4163'. [ 1242.939781][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1242.939797][ T30] audit: type=1400 audit(1784004845.184:1304): avc: denied { setopt } for pid=21369 comm="syz.4.4166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1243.115599][ T30] audit: type=1400 audit(1784004845.184:1305): avc: denied { getopt } for pid=21369 comm="syz.4.4166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1244.442391][ T803] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1244.732824][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.794417][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.835467][ T803] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1244.867901][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.249580][ T803] usb 5-1: config 0 descriptor?? [ 1245.727956][T21413] __nla_validate_parse: 2 callbacks suppressed [ 1245.727983][T21413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4177'. [ 1245.744290][T21413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4177'. [ 1245.753560][T21413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4177'. [ 1245.765408][ T803] cm6533_jd 0003:0D8C:0022.0038: unbalanced delimiter at end of report description [ 1245.820462][ T803] cm6533_jd 0003:0D8C:0022.0038: parse failed [ 1245.843102][T21413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4177'. [ 1245.852983][T21413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4177'. [ 1245.862322][T21413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4177'. [ 1245.883210][ T803] cm6533_jd 0003:0D8C:0022.0038: probe with driver cm6533_jd failed with error -22 [ 1246.020886][T21425] net_ratelimit: 1221 callbacks suppressed [ 1246.020898][T21425] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1246.068017][T21413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4177'. [ 1246.077361][T21413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4177'. [ 1246.086668][T21413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4177'. [ 1246.293231][T21428] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1246.390037][ T30] audit: type=1326 audit(1784004848.644:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21427 comm="syz.3.4181" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d0b9de59 code=0x7ffc0000 [ 1246.511334][ T30] audit: type=1326 audit(1784004848.654:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21427 comm="syz.3.4181" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d0b9de59 code=0x7ffc0000 [ 1246.537918][ T30] audit: type=1326 audit(1784004848.694:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21427 comm="syz.3.4181" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d0b9de59 code=0x7ffc0000 [ 1246.564416][ T30] audit: type=1326 audit(1784004848.694:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21427 comm="syz.3.4181" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d0b9de59 code=0x7ffc0000 [ 1246.603393][T21433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4182'. [ 1246.632546][ T30] audit: type=1326 audit(1784004848.704:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21427 comm="syz.3.4181" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f39d0b9de59 code=0x7ffc0000 [ 1246.659777][ T30] audit: type=1326 audit(1784004848.774:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21427 comm="syz.3.4181" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d0b5e68e code=0x7ffc0000 [ 1246.686289][ T30] audit: type=1326 audit(1784004848.874:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21427 comm="syz.3.4181" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39d0b5e68e code=0x7ffc0000 [ 1246.786739][ T30] audit: type=1326 audit(1784004848.894:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21427 comm="syz.3.4181" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d0b9de59 code=0x7ffc0000 [ 1246.860836][T18655] usb 5-1: USB disconnect, device number 57 [ 1248.869966][T18655] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1249.185731][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1249.185762][ T30] audit: type=1400 audit(1784004851.444:1317): avc: denied { mmap_zero } for pid=21454 comm="syz.2.4189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1249.240908][T18655] usb 5-1: device descriptor read/64, error -71 [ 1249.523085][T18655] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1249.679426][T21474] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 1249.689584][T18655] usb 5-1: device descriptor read/64, error -71 [ 1249.868082][T18655] usb usb5-port1: attempt power cycle [ 1250.509847][T18655] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1250.560714][T18655] usb 5-1: device descriptor read/8, error -71 [ 1250.988482][T18655] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1251.030522][T18655] usb 5-1: device descriptor read/8, error -71 [ 1251.151939][T18655] usb usb5-port1: unable to enumerate USB device [ 1251.771526][T21509] syzkaller0: entered promiscuous mode [ 1251.794503][T21509] syzkaller0: entered allmulticast mode [ 1251.826636][T21511] syzkaller0: entered promiscuous mode [ 1251.845938][T21511] syzkaller0: entered allmulticast mode [ 1252.283503][ T803] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1252.451118][ T803] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1252.601713][ T803] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1252.915914][ T803] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1252.925108][ T803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.962032][T21518] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1252.998573][ T803] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1253.273113][ T803] usb 6-1: USB disconnect, device number 43 [ 1253.863693][T18655] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1253.927347][ T803] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1254.041444][T21534] __nla_validate_parse: 7 callbacks suppressed [ 1254.041455][T21534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4207'. [ 1254.056498][T21534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4207'. [ 1254.070291][T21534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4207'. [ 1254.089642][ T30] audit: type=1400 audit(1784004856.344:1318): avc: denied { read } for pid=21529 comm="syz.1.4206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1254.165172][ T803] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1254.215292][ T803] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1254.256553][T18655] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1254.267228][ T803] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1254.283800][T18655] usb 3-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 1254.313685][T18655] usb 3-1: Product: syz [ 1254.320553][T21534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4207'. [ 1254.329926][T21534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4207'. [ 1254.339278][T21534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4207'. [ 1254.353238][T18655] usb 3-1: Manufacturer: syz [ 1254.363989][ T803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.391022][T18655] usb 3-1: SerialNumber: syz [ 1254.412584][T21511] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1254.434596][T18655] usb 3-1: config 0 descriptor?? [ 1254.849921][ T803] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1254.901668][ T5345] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1254.986859][T18655] usb 3-1: selecting invalid altsetting 3 [ 1255.102626][ T5345] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 1255.152652][ T803] usb 6-1: USB disconnect, device number 44 [ 1255.167325][ T5345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1255.183393][T21528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1255.202497][ T5345] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1255.239788][T18655] comedi comedi4: could not set alternate setting 3 in high speed [ 1255.269950][ T5345] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1255.287774][ T5345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.320874][ T5345] usb 2-1: Product: syz [ 1255.337334][ T5345] usb 2-1: Manufacturer: syz [ 1255.343622][T21547] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4210'. [ 1255.359120][ T5345] usb 2-1: SerialNumber: syz [ 1255.361440][T18655] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1255.393774][ T5345] usb 2-1: config 0 descriptor?? [ 1255.425022][ T5345] redrat3 2-1:0.0: Couldn't find all endpoints [ 1255.463341][T18655] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 1255.513805][T18655] usb 3-1: USB disconnect, device number 40 [ 1255.568570][T21551] xt_hashlimit: max too large, truncated to 1048576 [ 1256.570852][T21539] netlink: 83 bytes leftover after parsing attributes in process `syz.1.4208'. [ 1256.602396][T21559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1257.060152][T21559] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1257.104328][ T5345] usb 2-1: USB disconnect, device number 49 [ 1257.145521][ T30] audit: type=1400 audit(1784004859.404:1319): avc: denied { name_bind } for pid=21562 comm="syz.3.4214" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1257.853248][T21568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4215'. [ 1257.862332][T21568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4215'. [ 1259.553284][T21588] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 1259.707448][T21592] __nla_validate_parse: 4 callbacks suppressed [ 1259.707461][T21592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4222'. [ 1261.101747][ T30] audit: type=1400 audit(1784004863.364:1320): avc: denied { execute } for pid=21598 comm="syz.2.4225" name="sg#" dev="devtmpfs" ino=6137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1261.221171][ T30] audit: type=1400 audit(1784004863.424:1321): avc: denied { execute_no_trans } for pid=21598 comm="syz.2.4225" path="/dev/sg#" dev="devtmpfs" ino=6137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1261.310750][T21612] netlink: 348 bytes leftover after parsing attributes in process `syz.5.4227'. [ 1261.764448][T21617] netlink: zone id is out of range [ 1261.769590][T21617] netlink: zone id is out of range [ 1261.778203][T21617] netlink: zone id is out of range [ 1261.807930][T21617] netlink: zone id is out of range [ 1261.819510][T21617] netlink: zone id is out of range [ 1261.849886][T21617] netlink: zone id is out of range [ 1261.855003][T21617] netlink: zone id is out of range [ 1261.860111][T21617] netlink: zone id is out of range [ 1261.865212][T21617] netlink: zone id is out of range [ 1261.870316][T21617] netlink: zone id is out of range [ 1261.999744][ T30] audit: type=1400 audit(1784004864.224:1322): avc: denied { read } for pid=21621 comm="syz.4.4231" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1262.078495][T21626] FAULT_INJECTION: forcing a failure. [ 1262.078495][T21626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1262.099790][T21626] CPU: 1 UID: 0 PID: 21626 Comm: syz.1.4233 Tainted: G L syzkaller #0 PREEMPT(full) [ 1262.099821][T21626] Tainted: [L]=SOFTLOCKUP [ 1262.099828][T21626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1262.099839][T21626] Call Trace: [ 1262.099846][T21626] [ 1262.099853][T21626] dump_stack_lvl+0x100/0x190 [ 1262.099880][T21626] should_fail_ex.cold+0x5/0xa [ 1262.099902][T21626] _copy_to_iter+0x5a4/0x1720 [ 1262.099929][T21626] ? __pfx__copy_to_iter+0x10/0x10 [ 1262.099953][T21626] ? __skb_recv_datagram+0x1b2/0x220 [ 1262.099984][T21626] simple_copy_to_iter+0x46/0x90 [ 1262.100008][T21626] __skb_datagram_iter+0x129/0x900 [ 1262.100031][T21626] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1262.100059][T21626] ? skb_recv_datagram+0x88/0xc0 [ 1262.100092][T21626] skb_copy_datagram_iter+0xa1/0x250 [ 1262.100120][T21626] netlink_recvmsg+0x27e/0xa90 [ 1262.100145][T21626] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1262.100168][T21626] ? iovec_from_user+0x8d/0x140 [ 1262.100195][T21626] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1262.100219][T21626] sock_recvmsg+0x1d5/0x220 [ 1262.100242][T21626] ____sys_recvmsg+0x21e/0x670 [ 1262.100268][T21626] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1262.100300][T21626] ? __lock_acquire+0x49f/0x1a40 [ 1262.100320][T21626] ? __lock_acquire+0x49f/0x1a40 [ 1262.100342][T21626] ___sys_recvmsg+0x16a/0x1a0 [ 1262.100367][T21626] ? __pfx____sys_recvmsg+0x10/0x10 [ 1262.100394][T21626] ? find_held_lock+0x2b/0x80 [ 1262.100434][T21626] do_recvmmsg+0x2f3/0x740 [ 1262.100462][T21626] ? __pfx_do_recvmmsg+0x10/0x10 [ 1262.100506][T21626] __x64_sys_recvmmsg+0x199/0x280 [ 1262.100527][T21626] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1262.100554][T21626] do_syscall_64+0x115/0x870 [ 1262.100580][T21626] ? clear_bhb_loop+0x40/0x90 [ 1262.100601][T21626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.100620][T21626] RIP: 0033:0x7f4827d9de59 [ 1262.100636][T21626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.100654][T21626] RSP: 002b:00007f4828c3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1262.100673][T21626] RAX: ffffffffffffffda RBX: 00007f4828025fa0 RCX: 00007f4827d9de59 [ 1262.100685][T21626] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1262.100697][T21626] RBP: 00007f4828c3a090 R08: 0000200000003700 R09: 0000000000000000 [ 1262.100708][T21626] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.100719][T21626] R13: 00007f4828026038 R14: 00007f4828025fa0 R15: 00007ffdf77a7c68 [ 1262.100743][T21626] [ 1262.383256][T21627] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21627 comm=syz.2.4232 [ 1262.595014][T21630] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 1263.780049][ T5708] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1263.883473][T21644] xt_hashlimit: size too large, truncated to 1048576 [ 1263.950006][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 1264.020755][ T5708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.066905][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1264.114709][ T5708] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1264.340540][ T30] audit: type=1400 audit(1784004866.524:1323): avc: denied { ioctl } for pid=21643 comm="syz.4.4239" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1264.389774][ T5708] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1264.681058][ T5708] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1264.768664][ T5708] usb 2-1: Manufacturer: syz [ 1264.857537][ T5708] usb 2-1: config 0 descriptor?? [ 1265.569567][T21662] loop9: detected capacity change from 0 to 255852544 [ 1265.619933][T21662] Invalid logical block size (4) [ 1265.850381][ T5708] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1266.001581][ T5708] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.016758][ T5708] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1266.038827][ T5708] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1266.059167][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1266.075839][ T5708] usb 3-1: SerialNumber: syz [ 1266.297699][ T5708] usb 3-1: 0:2 : does not exist [ 1266.313066][ T5708] usb 3-1: unit 5 not found! [ 1266.404556][ T5708] usb 3-1: USB disconnect, device number 41 [ 1266.441828][T21052] udevd[21052]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1266.803308][ T5345] usb 2-1: USB disconnect, device number 50 [ 1266.859893][ T5708] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1267.045097][ T5708] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1267.055768][T21678] input: syz1 as /devices/virtual/input/input109 [ 1267.079620][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.080516][T21682] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 1267.123482][ T5708] usb 6-1: Product: syz [ 1267.143576][ T5708] usb 6-1: Manufacturer: syz [ 1267.160849][ T5708] usb 6-1: SerialNumber: syz [ 1267.211981][ T5708] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1267.251798][T21684] FAULT_INJECTION: forcing a failure. [ 1267.251798][T21684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1267.314627][T21684] CPU: 1 UID: 0 PID: 21684 Comm: syz.2.4250 Tainted: G L syzkaller #0 PREEMPT(full) [ 1267.314649][T21684] Tainted: [L]=SOFTLOCKUP [ 1267.314654][T21684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1267.314663][T21684] Call Trace: [ 1267.314668][T21684] [ 1267.314674][T21684] dump_stack_lvl+0x100/0x190 [ 1267.314696][T21684] should_fail_ex.cold+0x5/0xa [ 1267.314715][T21684] _copy_to_user+0x32/0xd0 [ 1267.314734][T21684] simple_read_from_buffer+0xcb/0x170 [ 1267.314757][T21684] proc_fail_nth_read+0x1af/0x230 [ 1267.314779][T21684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1267.314800][T21684] ? rw_verify_area+0xce/0x6d0 [ 1267.314819][T21684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1267.314840][T21684] vfs_read+0x1e4/0xb40 [ 1267.314863][T21684] ? __pfx_vfs_read+0x10/0x10 [ 1267.314883][T21684] ? __fget_files+0x215/0x3d0 [ 1267.314911][T21684] ? __fget_files+0x21f/0x3d0 [ 1267.314939][T21684] ksys_read+0x12a/0x250 [ 1267.314960][T21684] ? __pfx_ksys_read+0x10/0x10 [ 1267.314990][T21684] do_syscall_64+0x115/0x870 [ 1267.315013][T21684] ? clear_bhb_loop+0x40/0x90 [ 1267.315035][T21684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.315060][T21684] RIP: 0033:0x7f199495e68e [ 1267.315073][T21684] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1267.315089][T21684] RSP: 002b:00007f1995890fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1267.315106][T21684] RAX: ffffffffffffffda RBX: 00007f19958916c0 RCX: 00007f199495e68e [ 1267.315118][T21684] RDX: 000000000000000f RSI: 00007f19958910a0 RDI: 0000000000000004 [ 1267.315129][T21684] RBP: 00007f1995891090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.315140][T21684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.315150][T21684] R13: 00007f1994c26038 R14: 00007f1994c25fa0 R15: 00007fff7b466088 [ 1267.315174][T21684] [ 1267.357616][ T5345] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1267.571021][T21694] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1267.961321][T11057] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1268.206205][T21705] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4246'. [ 1268.259805][ T30] audit: type=1326 audit(1784004870.514:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f9de59 code=0x7ffc0000 [ 1268.286538][ T30] audit: type=1326 audit(1784004870.514:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f9de59 code=0x7ffc0000 [ 1268.314207][ T30] audit: type=1326 audit(1784004870.574:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f9de59 code=0x7ffc0000 [ 1268.465464][T18655] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1268.541016][ T30] audit: type=1326 audit(1784004870.634:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f9de59 code=0x7ffc0000 [ 1268.649808][ T30] audit: type=1326 audit(1784004870.634:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7ff5c7f9de59 code=0x7ffc0000 [ 1268.679917][ T5345] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1268.680186][ T5345] ath9k_htc: Failed to initialize the device [ 1268.704627][T11057] usb 3-1: Using ep0 maxpacket: 32 [ 1268.741039][ T30] audit: type=1326 audit(1784004870.634:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f9de59 code=0x7ffc0000 [ 1268.772199][ T5345] usb 6-1: ath9k_htc: USB layer deinitialized [ 1268.812527][ T30] audit: type=1326 audit(1784004870.634:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f9de59 code=0x7ffc0000 [ 1268.889897][ T30] audit: type=1326 audit(1784004870.634:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f9de59 code=0x7ffc0000 [ 1268.920891][T21717] xt_hashlimit: max too large, truncated to 1048576 [ 1268.947152][ T30] audit: type=1326 audit(1784004870.634:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f9de59 code=0x7ffc0000 [ 1269.124154][T21722] netlink: 'syz.3.4262': attribute type 11 has an invalid length. [ 1269.128311][T11057] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1269.146261][T11057] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1269.156067][T18655] usb 2-1: Using ep0 maxpacket: 32 [ 1269.162126][T11057] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1269.172949][T11057] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1269.184219][T18655] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1269.195324][T11057] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1269.207280][T11057] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1269.222317][T18655] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1269.235767][T18655] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1269.245107][T11057] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1269.341112][T18655] usb 2-1: Product: syz [ 1269.341187][ T5708] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1269.346128][T18655] usb 2-1: Manufacturer: syz [ 1269.357429][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 1269.357441][ T30] audit: type=1326 audit(1784004871.614:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5c7f5e68e code=0x7ffc0000 [ 1269.358454][T11057] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.369104][ T30] audit: type=1326 audit(1784004871.614:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f9de59 code=0x7ffc0000 [ 1269.490769][T18655] usb 2-1: SerialNumber: syz [ 1269.507929][ T30] audit: type=1326 audit(1784004871.614:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f9de59 code=0x7ffc0000 [ 1269.516384][T18655] usb 2-1: config 0 descriptor?? [ 1269.568366][T11057] usb 3-1: config 0 descriptor?? [ 1269.569892][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 1269.583626][ T5708] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1269.592039][ T5708] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1269.604557][ T30] audit: type=1326 audit(1784004871.624:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5c7f5e68e code=0x7ffc0000 [ 1269.633250][ T5708] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1269.642854][T21701] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1269.659708][ T5708] usb 5-1: config 1 has no interface number 0 [ 1269.669744][ T5708] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1269.699706][ T5708] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1269.713214][ T30] audit: type=1326 audit(1784004871.754:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5c7f5e68e code=0x7ffc0000 [ 1269.741249][ T5708] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1269.751489][T18655] hub 2-1:0.0: bad descriptor, ignoring hub [ 1269.751667][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.757391][T18655] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1269.774208][ T30] audit: type=1326 audit(1784004871.764:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5c7f5e68e code=0x7ffc0000 [ 1269.782692][ T5708] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1269.805967][ T30] audit: type=1326 audit(1784004871.764:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5c7f5e68e code=0x7ffc0000 [ 1269.837338][ T30] audit: type=1326 audit(1784004871.764:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5c7f5e68e code=0x7ffc0000 [ 1269.888688][ T30] audit: type=1326 audit(1784004871.794:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5c7f5e68e code=0x7ffc0000 [ 1269.919845][ T30] audit: type=1326 audit(1784004871.794:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.5.4246" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5c7f5e68e code=0x7ffc0000 [ 1270.103708][ T5708] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1270.315746][T11138] usb 5-1: USB disconnect, device number 62 [ 1270.333329][T11138] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1270.441098][T11057] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1270.445727][ T49] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 1270.559592][ T5345] usb 6-1: USB disconnect, device number 45 [ 1270.656764][T21742] overlayfs: missing 'lowerdir' [ 1270.736520][ T5815] usb 2-1: USB disconnect, device number 51 [ 1272.247271][ T5815] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1273.033420][T21752] xt_hashlimit: max too large, truncated to 1048576 [ 1273.195962][ T5345] usb 3-1: USB disconnect, device number 42 [ 1273.226476][ T5345] usblp1: removed [ 1273.662081][T21768] FAULT_INJECTION: forcing a failure. [ 1273.662081][T21768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.678082][T21768] CPU: 0 UID: 0 PID: 21768 Comm: syz.1.4277 Tainted: G L syzkaller #0 PREEMPT(full) [ 1273.678109][T21768] Tainted: [L]=SOFTLOCKUP [ 1273.678115][T21768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1273.678126][T21768] Call Trace: [ 1273.678131][T21768] [ 1273.678138][T21768] dump_stack_lvl+0x100/0x190 [ 1273.678165][T21768] should_fail_ex.cold+0x5/0xa [ 1273.678187][T21768] _copy_to_user+0x32/0xd0 [ 1273.678210][T21768] simple_read_from_buffer+0xcb/0x170 [ 1273.678239][T21768] proc_fail_nth_read+0x1af/0x230 [ 1273.678265][T21768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1273.678291][T21768] ? rw_verify_area+0xce/0x6d0 [ 1273.678312][T21768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1273.678336][T21768] vfs_read+0x1e4/0xb40 [ 1273.678363][T21768] ? __pfx_vfs_read+0x10/0x10 [ 1273.678386][T21768] ? __fget_files+0x215/0x3d0 [ 1273.678417][T21768] ? __fget_files+0x21f/0x3d0 [ 1273.678449][T21768] ksys_read+0x12a/0x250 [ 1273.678472][T21768] ? __pfx_ksys_read+0x10/0x10 [ 1273.678508][T21768] do_syscall_64+0x115/0x870 [ 1273.678532][T21768] ? clear_bhb_loop+0x40/0x90 [ 1273.678553][T21768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.678570][T21768] RIP: 0033:0x7f4827d5e68e [ 1273.678585][T21768] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1273.678601][T21768] RSP: 002b:00007f4828c39fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1273.678619][T21768] RAX: ffffffffffffffda RBX: 00007f4828c3a6c0 RCX: 00007f4827d5e68e [ 1273.678630][T21768] RDX: 000000000000000f RSI: 00007f4828c3a0a0 RDI: 0000000000000005 [ 1273.678641][T21768] RBP: 00007f4828c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.678651][T21768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.678662][T21768] R13: 00007f4828026038 R14: 00007f4828025fa0 R15: 00007ffdf77a7c68 [ 1273.678686][T21768] [ 1273.940703][T21772] hub 8-0:1.0: USB hub found [ 1273.947941][T21772] hub 8-0:1.0: 1 port detected [ 1274.519796][T21770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4276'. [ 1274.529130][T21770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4276'. [ 1274.538494][T21770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4276'. [ 1274.653029][T21770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4276'. [ 1274.662345][T21770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4276'. [ 1274.671666][T21770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4276'. [ 1275.389004][T21790] FAULT_INJECTION: forcing a failure. [ 1275.389004][T21790] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.411992][T21790] CPU: 1 UID: 0 PID: 21790 Comm: syz.1.4282 Tainted: G L syzkaller #0 PREEMPT(full) [ 1275.412021][T21790] Tainted: [L]=SOFTLOCKUP [ 1275.412028][T21790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1275.412039][T21790] Call Trace: [ 1275.412045][T21790] [ 1275.412052][T21790] dump_stack_lvl+0x100/0x190 [ 1275.412079][T21790] should_fail_ex.cold+0x5/0xa [ 1275.412099][T21790] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1275.412126][T21790] should_failslab+0xc2/0x120 [ 1275.412148][T21790] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1275.412168][T21790] ? skb_clone+0x190/0x400 [ 1275.412191][T21790] skb_clone+0x190/0x400 [ 1275.412210][T21790] netlink_deliver_tap+0xaed/0xcc0 [ 1275.412240][T21790] netlink_dump+0x909/0xd00 [ 1275.412267][T21790] ? __pfx_netlink_dump+0x10/0x10 [ 1275.412299][T21790] ? __inet_diag_dump_start+0x3cb/0x8f0 [ 1275.412330][T21790] __netlink_dump_start+0x6d6/0x990 [ 1275.412359][T21790] inet_diag_handler_cmd+0x282/0x2e0 [ 1275.412384][T21790] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 1275.412409][T21790] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 1275.412433][T21790] ? __pfx_inet_diag_dump+0x10/0x10 [ 1275.412455][T21790] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 1275.412479][T21790] ? sock_diag_lock_handler+0x10f/0x2e0 [ 1275.412514][T21790] sock_diag_rcv_msg+0x431/0x7a0 [ 1275.412545][T21790] netlink_rcv_skb+0x159/0x420 [ 1275.412571][T21790] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1275.412601][T21790] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1275.412635][T21790] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1275.412665][T21790] netlink_unicast+0x585/0x850 [ 1275.412694][T21790] ? __pfx_netlink_unicast+0x10/0x10 [ 1275.412726][T21790] netlink_sendmsg+0x8b0/0xda0 [ 1275.412756][T21790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.412783][T21790] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1275.412810][T21790] sock_write_iter+0x53a/0x5b0 [ 1275.412830][T21790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.412852][T21790] ? __pfx_sock_write_iter+0x10/0x10 [ 1275.412881][T21790] ? __pfx___file_has_perm+0x10/0x10 [ 1275.412906][T21790] do_iter_readv_writev+0x6f7/0x930 [ 1275.412933][T21790] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1275.412953][T21790] ? selinux_file_permission+0x8f/0x6d0 [ 1275.412986][T21790] ? bpf_lsm_file_permission+0x9/0x10 [ 1275.413010][T21790] ? security_file_permission+0x76/0x210 [ 1275.413038][T21790] ? rw_verify_area+0xce/0x6d0 [ 1275.413061][T21790] vfs_writev+0x360/0xdd0 [ 1275.413091][T21790] ? __pfx_vfs_writev+0x10/0x10 [ 1275.413116][T21790] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1275.413158][T21790] ? __fget_files+0x21f/0x3d0 [ 1275.413192][T21790] ? do_writev+0x28a/0x340 [ 1275.413214][T21790] do_writev+0x28a/0x340 [ 1275.413237][T21790] ? __pfx_do_writev+0x10/0x10 [ 1275.413268][T21790] do_syscall_64+0x115/0x870 [ 1275.413293][T21790] ? clear_bhb_loop+0x40/0x90 [ 1275.413316][T21790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.413334][T21790] RIP: 0033:0x7f4827d9de59 [ 1275.413350][T21790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.413367][T21790] RSP: 002b:00007f4828c3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1275.413383][T21790] RAX: ffffffffffffffda RBX: 00007f4828025fa0 RCX: 00007f4827d9de59 [ 1275.413395][T21790] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1275.413406][T21790] RBP: 00007f4828c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1275.413417][T21790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1275.413428][T21790] R13: 00007f4828026038 R14: 00007f4828025fa0 R15: 00007ffdf77a7c68 [ 1275.413453][T21790] [ 1276.043567][ T30] kauditd_printk_skb: 284 callbacks suppressed [ 1276.043583][ T30] audit: type=1400 audit(1784004878.304:1755): avc: denied { cmd } for pid=21802 comm="iou-wrk-21804" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1276.099761][ T30] audit: type=1400 audit(1784004878.334:1756): avc: denied { allowed } for pid=21802 comm="syz.1.4289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1276.710040][T21809] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1277.631115][ T5345] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1277.789736][ T5345] usb 6-1: Using ep0 maxpacket: 16 [ 1277.801856][ T5345] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1277.834376][ T5345] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1277.853342][ T5345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.895648][ T5345] usb 6-1: Product: syz [ 1277.907373][ T5345] usb 6-1: Manufacturer: syz [ 1277.914679][ T5345] usb 6-1: SerialNumber: syz [ 1277.926796][ T5345] usb 6-1: config 0 descriptor?? [ 1277.943075][ T5345] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1277.957090][ T5345] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1278.546483][ T5345] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1279.764113][ T49] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 1279.778538][T21829] CUSE: unknown device info "" [ 1279.806638][T21829] CUSE: unknown device info "" [ 1279.814176][T21829] CUSE: unknown device info "" [ 1279.820044][T21829] CUSE: unknown device info "" [ 1279.826494][T21829] CUSE: unknown device info "" [ 1279.831709][T21829] CUSE: zero length info key specified [ 1279.850640][ T5345] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1279.895509][ T5345] em28xx 6-1:0.0: board has no eeprom [ 1279.959518][T21850] overlayfs: failed to resolve './bus': -2 [ 1279.991635][ T5345] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1280.006364][ T5345] em28xx 6-1:0.0: dvb set to bulk mode. [ 1280.019109][ T30] audit: type=1400 audit(1784004882.274:1757): avc: denied { ioctl } for pid=21851 comm="syz.3.4299" path="socket:[92318]" dev="sockfs" ino=92318 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1280.050516][ T5708] em28xx 6-1:0.0: Binding DVB extension [ 1280.075189][ T5345] usb 6-1: USB disconnect, device number 46 [ 1280.099047][ T5345] em28xx 6-1:0.0: Disconnecting em28xx [ 1280.116522][T21860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4300'. [ 1280.172900][ T5815] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1280.251552][ T5708] em28xx 6-1:0.0: Registering input extension [ 1280.264798][ T5345] em28xx 6-1:0.0: Closing input extension [ 1280.332737][ T5345] em28xx 6-1:0.0: Freeing device [ 1280.579952][ T5816] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1280.712148][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.724309][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.735178][ T5815] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1280.746514][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.763454][ T5815] usb 3-1: config 0 descriptor?? [ 1280.904489][ T5816] usb 5-1: Using ep0 maxpacket: 32 [ 1281.473817][T11057] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1281.532578][T21849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=21849 comm=syz.2.4297 [ 1281.669170][ T5815] cm6533_jd 0003:0D8C:0022.0039: unknown main item tag 0x0 [ 1281.679257][ T5816] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1281.688338][ T5815] cm6533_jd 0003:0D8C:0022.0039: unknown main item tag 0x0 [ 1281.695898][ T5816] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1281.708329][ T5815] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0039/input/input112 [ 1281.720571][ T5816] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1281.730123][ T5816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1281.741266][ T5816] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1281.754439][ T5816] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1281.768623][ T5816] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1281.779701][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.794251][ T5815] cm6533_jd 0003:0D8C:0022.0039: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1281.809774][T11057] usb 6-1: device descriptor read/64, error -71 [ 1281.837238][ T5816] usb 5-1: config 0 descriptor?? [ 1282.049803][T11057] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1282.240888][ T49] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 1282.247464][ T5816] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 63 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1282.270513][ T5815] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1282.314349][ T5816] usb 5-1: USB disconnect, device number 63 [ 1282.327106][ T5816] usblp1: removed [ 1282.429084][T11057] usb 6-1: device descriptor read/64, error -71 [ 1282.499757][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 1282.506963][ T5815] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1282.515972][ T5815] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1282.525048][ T5815] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1282.534757][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1282.546065][T11057] usb usb6-port1: attempt power cycle [ 1282.551693][ T5815] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1282.562518][ T5815] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1282.576176][ T5815] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1282.585742][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.597514][ T5815] usb 2-1: config 0 descriptor?? [ 1283.051593][T11057] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1283.288415][T11057] usb 6-1: device descriptor read/8, error -71 [ 1283.547588][ T49] Bluetooth: hci6: unexpected event for opcode 0x1005 [ 1283.558783][ T5815] usblp 2-1:0.0: usblp1: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1283.599556][ T30] audit: type=1400 audit(1784004885.854:1758): avc: denied { ioctl } for pid=21894 comm="syz.3.4308" path="socket:[92378]" dev="sockfs" ino=92378 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1283.599820][T11057] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1283.753394][T21895] fuse: fd is not a fuse device [ 1283.831383][T21899] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4308'. [ 1284.014055][T11057] usb 6-1: device not accepting address 50, error -71 [ 1284.161248][T11057] usb usb6-port1: unable to enumerate USB device [ 1284.188595][ T5708] usb 3-1: USB disconnect, device number 43 [ 1284.260025][T11138] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1284.390080][T21908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4313'. [ 1284.440003][T11138] usb 5-1: Using ep0 maxpacket: 8 [ 1284.451288][T11138] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1284.480274][T11138] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1284.528929][T11138] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1284.571447][T11138] usb 5-1: Product: syz [ 1284.587384][T11138] usb 5-1: Manufacturer: syz [ 1284.602326][T11138] usb 5-1: SerialNumber: syz [ 1284.791042][T21906] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1284.797567][T21906] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1284.806989][T21906] vhci_hcd vhci_hcd.0: Device attached [ 1284.823288][T21919] vhci_hcd: connection closed [ 1284.823668][T14447] vhci_hcd vhci_hcd.5: stop threads [ 1284.839198][T11138] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 1284.850631][T14447] vhci_hcd vhci_hcd.5: release socket [ 1284.856073][T11138] usb 5-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 1284.864521][T14447] vhci_hcd vhci_hcd.5: disconnect device [ 1284.871178][T11138] usb 5-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 1284.894810][T11138] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1285.041720][T11138] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 1285.057597][T11138] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1285.095014][T11138] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1285.108832][T11138] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1285.122841][T11138] usb 5-1: USB disconnect, device number 64 [ 1285.144079][T11138] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1285.160236][T11138] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1285.173825][T11138] visor 5-1:1.0: device disconnected [ 1285.403283][T21923] netlink: 'syz.3.4316': attribute type 4 has an invalid length. [ 1285.440855][T21923] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4316'. [ 1285.547168][T21923] netlink: 'syz.3.4316': attribute type 1 has an invalid length. [ 1285.574464][T11057] usb 2-1: USB disconnect, device number 53 [ 1285.603088][T11057] usblp1: removed [ 1285.759020][T21924] bond3: (slave geneve2): making interface the new active one [ 1285.822761][T21924] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1285.825586][T21932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21932 comm=syz.3.4316 [ 1285.935569][T21938] net_ratelimit: 2454 callbacks suppressed [ 1285.935582][T21938] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1285.958134][T15330] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1286.006449][T21930] syzkaller0: entered promiscuous mode [ 1286.015353][T21930] syzkaller0: entered allmulticast mode [ 1286.051027][T15330] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1286.064960][T15330] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1286.081188][T15330] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1286.220022][T11138] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1286.229830][ T5816] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1286.392150][ T5816] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1286.404378][ T5816] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1286.410500][T11138] usb 5-1: Using ep0 maxpacket: 32 [ 1286.415621][ T5816] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1286.432439][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.442705][T11138] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.446097][T21927] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1286.468801][T11138] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=fc.21 [ 1286.476599][ T5816] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1286.481836][T11138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.495346][T11138] usb 5-1: Product: syz [ 1286.499560][T11138] usb 5-1: Manufacturer: syz [ 1286.504616][T11138] usb 5-1: SerialNumber: syz [ 1287.009184][ T5345] usb 6-1: USB disconnect, device number 51 [ 1287.246003][T21956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4325'. [ 1287.255678][T21956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4325'. [ 1287.266522][T21956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4325'. [ 1287.622571][T21956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4325'. [ 1287.664827][T21962] overlayfs: missing 'lowerdir' [ 1287.678858][T21956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4325'. [ 1287.712336][ T5345] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1287.762188][T21956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4325'. [ 1287.901484][ T5345] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1287.924792][ T5345] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1287.969593][ T5345] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1287.991343][T21956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4325'. [ 1288.008793][T21956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4325'. [ 1288.033416][ T5345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.052793][T21956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4325'. [ 1288.095920][T21927] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1288.131931][ T5345] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1288.156337][T11138] kobil_sct 5-1:3.0: required endpoints missing [ 1288.213572][T11138] usb 5-1: USB disconnect, device number 65 [ 1288.394319][T21967] xt_hashlimit: size too large, truncated to 1048576 [ 1288.509756][ T5816] usb 6-1: USB disconnect, device number 52 [ 1288.789798][ T5708] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1289.050005][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 1289.067181][ T5708] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1289.077046][ T5708] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1289.085921][ T5708] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1289.095095][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1289.106023][ T5708] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1289.117138][ T5708] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1289.141350][ T5708] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1289.150947][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.280220][ T5708] usb 2-1: config 0 descriptor?? [ 1289.408349][T21991] rdma_op ffff888034cbf9f0 conn xmit_rdma 0000000000000000 [ 1289.776566][ T30] audit: type=1400 audit(1784004891.984:1759): avc: denied { read } for pid=21992 comm="syz.5.4335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1290.051054][ T49] Bluetooth: hci6: unexpected event for opcode 0x1005 [ 1290.062090][ T5708] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1290.270241][ T5345] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1290.439739][ T5345] usb 3-1: Using ep0 maxpacket: 32 [ 1290.591575][ T30] audit: type=1400 audit(1784004892.774:1760): avc: denied { getopt } for pid=22007 comm="syz.4.4337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1291.549514][ T5345] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.056162][ T5345] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1292.068573][ T5345] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1292.080005][ T5345] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1292.094981][ T5345] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1292.104295][ T5345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.112602][ T5345] usb 3-1: Product: syz [ 1292.116766][ T5345] usb 3-1: Manufacturer: syz [ 1292.121622][ T5345] usb 3-1: SerialNumber: syz [ 1292.131468][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1292.148087][ T5345] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input113 [ 1292.160974][ T5816] usb 2-1: USB disconnect, device number 54 [ 1292.169152][ T5816] usblp0: removed [ 1292.350335][ T5345] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1292.376728][ T5345] (id 0x00) [ 1292.506353][ T5345] rc_core: IR keymap rc-imon-pad not found [ 1292.549232][ T5345] Registered IR keymap rc-empty [ 1292.736168][T22044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4340'. [ 1293.017686][ T5345] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1293.125101][ T5345] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1293.163265][ T5345] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1293.184768][ T5345] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input114 [ 1293.202854][ T5345] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:44> initialized [ 1293.558990][ T5708] usb 3-1: USB disconnect, device number 44 [ 1293.967674][ T5345] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1294.591769][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.675599][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1294.715548][T22054] ip6erspan0: entered allmulticast mode [ 1294.852765][ T5345] usb 5-1: Using ep0 maxpacket: 16 [ 1294.859774][ T5345] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 1294.868188][ T5345] usb 5-1: config 0 has no interface number 0 [ 1294.876295][ T5345] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1294.887372][ T5345] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1294.901709][ T5345] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1294.911293][ T5345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.919296][ T5345] usb 5-1: Product: syz [ 1294.933985][ T5345] usb 5-1: Manufacturer: syz [ 1294.949540][ T5345] usb 5-1: SerialNumber: syz [ 1294.967732][ T5345] usb 5-1: config 0 descriptor?? [ 1294.984618][T22048] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1294.992638][T22048] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1295.321557][T22048] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1295.331743][T22048] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1295.567836][ T5345] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1296.231187][T22086] netlink: 860 bytes leftover after parsing attributes in process `syz.2.4350'. [ 1296.519310][ T5345] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1296.536414][ T5345] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 1296.581754][ T5345] asix 5-1:0.34: probe with driver asix failed with error -71 [ 1296.610200][ T5345] usb 5-1: USB disconnect, device number 66 [ 1299.089214][T22103] ip6erspan0: entered allmulticast mode [ 1299.564765][T22111] ip6gre1: entered allmulticast mode [ 1299.576891][T21010] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1300.540848][T22122] xt_hashlimit: size too large, truncated to 1048576 [ 1301.160036][ T5345] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1301.340340][ T5345] usb 6-1: Using ep0 maxpacket: 32 [ 1301.354739][ T5345] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1301.365151][ T5345] usb 6-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 1301.376631][ T5345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.386609][ T5345] usb 6-1: Product: syz [ 1301.391679][ T5345] usb 6-1: Manufacturer: syz [ 1301.396331][ T5345] usb 6-1: SerialNumber: syz [ 1301.404915][ T5345] usb 6-1: config 0 descriptor?? [ 1301.555947][ T5815] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1301.589051][T22143] xt_hashlimit: size too large, truncated to 1048576 [ 1301.598778][T22145] xt_hashlimit: size too large, truncated to 1048576 [ 1301.701740][ T5345] snd_usb_podhd 6-1:0.0: Line 6 POD HD500X found [ 1301.785138][ T5345] snd_usb_podhd 6-1:0.0: set_interface failed [ 1301.836937][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 1301.841780][ T5345] snd_usb_podhd 6-1:0.0: Line 6 POD HD500X now disconnected [ 1301.945820][ T5708] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1302.067104][ T5345] snd_usb_podhd 6-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 1302.108151][ T5345] usb 6-1: USB disconnect, device number 53 [ 1302.159144][ T5815] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1302.179894][ T5815] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1302.223605][ T5815] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1302.234670][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 1302.244515][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1302.259074][ T5815] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1302.285035][ T5708] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1302.299880][ T5708] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1302.299961][ T5815] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1302.336352][ T5708] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1302.355151][ T5815] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1302.369802][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1302.374832][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.381244][ T5708] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1302.422132][ T5708] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1302.445295][ T5708] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1302.447519][ T5815] usb 2-1: config 0 descriptor?? [ 1302.468024][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.476139][ T5345] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1302.522162][ T5708] usb 5-1: config 0 descriptor?? [ 1302.639777][ T5345] usb 6-1: Using ep0 maxpacket: 32 [ 1302.646738][ T5345] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1302.660599][ T5345] usb 6-1: string descriptor 0 read error: -22 [ 1302.668116][ T5345] usb 6-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 1302.683748][ T5345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.711467][ T5345] usb 6-1: config 0 descriptor?? [ 1302.725568][ T5345] snd_usb_podhd 6-1:0.0: Line 6 POD HD500X found [ 1303.005505][ T5815] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1303.040700][ T5345] snd_usb_podhd 6-1:0.0: endpoint not available, using fallback values [ 1303.067128][ T5345] snd_usb_podhd 6-1:0.0: invalid control EP [ 1303.079977][ T5345] snd_usb_podhd 6-1:0.0: cannot start listening: -22 [ 1303.112085][ T5345] snd_usb_podhd 6-1:0.0: Line 6 POD HD500X now disconnected [ 1303.147607][ T5345] snd_usb_podhd 6-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 1303.187189][T22162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4371'. [ 1303.196653][T22162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4371'. [ 1303.206127][T22162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4371'. [ 1303.309109][ C1] usblp0: nonzero read bulk status received: -71 [ 1303.316456][T22137] usblp0: error -71 reading from printer [ 1303.323936][ T5345] usb 2-1: USB disconnect, device number 55 [ 1303.346021][ T5345] usblp0: removed [ 1303.504556][T22162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4371'. [ 1303.514091][T22162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4371'. [ 1303.523532][T22162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4371'. [ 1303.591889][ T49] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 1303.629866][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1303.768747][ T5708] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1303.954044][ T5708] usb 6-1: USB disconnect, device number 54 [ 1304.983186][ T803] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1304.990135][ T5815] usb 5-1: USB disconnect, device number 67 [ 1305.487406][ T5815] usblp0: removed [ 1305.981188][T22196] fuse: fd is not a fuse device [ 1306.052468][T17394] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1306.071193][ T803] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1306.082859][ T803] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 1306.109421][ T803] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1306.118924][ T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1306.127468][ T803] usb 3-1: SerialNumber: syz [ 1306.142931][ T803] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1306.197975][T22204] xt_hashlimit: size too large, truncated to 1048576 [ 1306.344142][ T803] usb 3-1: USB disconnect, device number 45 [ 1306.728195][T17394] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1306.739803][T17394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.749474][T17394] usb 2-1: Product: syz [ 1306.901878][T17394] usb 2-1: Manufacturer: syz [ 1306.911880][T17394] usb 2-1: SerialNumber: syz [ 1306.920038][T17394] usb 2-1: config 0 descriptor?? [ 1307.387751][T17394] usb 2-1: Firmware version (0.0) predates our first public release. [ 1307.415012][ T803] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1307.419267][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ccdcc00: rx timeout, send abort [ 1307.433331][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ccdfc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1307.469097][T22214] netlink: 'syz.5.4385': attribute type 1 has an invalid length. [ 1307.499419][T17394] usb 2-1: Please update to version 0.2 or newer [ 1307.502123][T22214] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1307.570141][ T803] usb 3-1: Using ep0 maxpacket: 8 [ 1307.582767][ T803] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1307.594188][ T803] usb 3-1: config 0 has an invalid descriptor of length 82, skipping remainder of the config [ 1307.608812][ T803] usb 3-1: config 0 has no interface number 0 [ 1307.622284][ T803] usb 3-1: config 0 interface 55 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1307.651575][ T803] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1307.666185][ T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.679362][ T803] usb 3-1: config 0 descriptor?? [ 1307.694666][ T803] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1307.890358][ T803] usb 3-1: USB disconnect, device number 46 [ 1307.933012][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ccdcc00: abort rx timeout. Force session deactivation [ 1308.283553][T22227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4386'. [ 1308.660570][T22236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4389'. [ 1310.738703][T11057] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1311.022088][T11057] usb 6-1: Using ep0 maxpacket: 32 [ 1311.174222][T11057] usb 6-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 1311.192911][T11057] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.204028][T11057] usb 6-1: Product: syz [ 1311.208517][T11057] usb 6-1: Manufacturer: syz [ 1311.221162][T11057] usb 6-1: SerialNumber: syz [ 1311.259882][T17394] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1311.462536][T17394] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1311.488230][T17394] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1311.501255][T17394] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1311.510283][T17394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.660309][T18655] usb 2-1: USB disconnect, device number 56 [ 1311.727890][T22282] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4402'. [ 1311.759413][T22284] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4403'. [ 1311.798054][T11057] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1311.899171][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1311.907471][T17394] usb 5-1: usb_control_msg returned -32 [ 1311.913027][T17394] usbtmc 5-1:16.0: can't read capabilities [ 1311.919315][T11057] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1312.135322][T11057] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1312.151506][T11057] usb 6-1: USB disconnect, device number 55 [ 1312.174725][T21052] udevd[21052]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1312.281301][T18655] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1312.482857][T18655] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.515330][T18655] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1312.545098][T18655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.608767][T18655] usb 2-1: config 0 descriptor?? [ 1312.940290][T22300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1312.982771][T22300] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1313.043893][T18655] keytouch 0003:0926:3333.003A: fixing up Keytouch IEC report descriptor [ 1313.079424][T18655] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.003A/input/input115 [ 1313.189726][ T803] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 1313.361878][T18655] keytouch 0003:0926:3333.003A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1313.385518][ T803] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1313.418017][ T803] usb 6-1: config 0 has no interface number 0 [ 1313.436527][ T803] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1313.459903][ T803] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1313.484642][ T803] usb 6-1: config 0 interface 255 has no altsetting 0 [ 1313.545756][ T5708] usb 5-1: USB disconnect, device number 68 [ 1313.750414][ T5345] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1313.809594][T11057] usb 2-1: USB disconnect, device number 57 [ 1313.955926][ T5345] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1313.972553][ T5345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.990473][T22318] FAULT_INJECTION: forcing a failure. [ 1313.990473][T22318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1314.017217][T22318] CPU: 1 UID: 0 PID: 22318 Comm: syz.4.4415 Tainted: G L syzkaller #0 PREEMPT(full) [ 1314.017241][T22318] Tainted: [L]=SOFTLOCKUP [ 1314.017247][T22318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1314.017255][T22318] Call Trace: [ 1314.017259][T22318] [ 1314.017264][T22318] dump_stack_lvl+0x100/0x190 [ 1314.017281][T22318] should_fail_ex.cold+0x5/0xa [ 1314.017300][T22318] strncpy_from_user+0x3b/0x2d0 [ 1314.017323][T22318] do_getname+0x78/0x390 [ 1314.017345][T22318] user_path_at+0x26/0x60 [ 1314.017370][T22318] __x64_sys_mount+0x1fb/0x310 [ 1314.017385][T22318] ? __pfx___x64_sys_mount+0x10/0x10 [ 1314.017401][T22318] do_syscall_64+0x115/0x870 [ 1314.017417][T22318] ? clear_bhb_loop+0x40/0x90 [ 1314.017430][T22318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.017444][T22318] RIP: 0033:0x7fa1ccb9de59 [ 1314.017459][T22318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1314.017475][T22318] RSP: 002b:00007fa1cda29028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1314.017491][T22318] RAX: ffffffffffffffda RBX: 00007fa1cce25fa0 RCX: 00007fa1ccb9de59 [ 1314.017502][T22318] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 1314.017512][T22318] RBP: 00007fa1cda29090 R08: 0000200000000040 R09: 0000000000000000 [ 1314.017521][T22318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1314.017528][T22318] R13: 00007fa1cce26038 R14: 00007fa1cce25fa0 R15: 00007ffffd0a1f38 [ 1314.017542][T22318] [ 1314.206437][ T5345] usb 3-1: Product: syz [ 1314.214753][ T5345] usb 3-1: Manufacturer: syz [ 1314.231316][ T5345] usb 3-1: SerialNumber: syz [ 1314.324994][ T5345] usb 3-1: config 0 descriptor?? [ 1316.128407][ T5345] usb 3-1: Firmware version (0.0) predates our first public release. [ 1316.142050][ T5345] usb 3-1: Please update to version 0.2 or newer [ 1316.441335][ T803] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1316.485008][ T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.534534][ T803] usb 6-1: config 0 descriptor?? [ 1316.551240][ T803] usb 6-1: can't set config #0, error -71 [ 1316.560860][T22334] tipc: Started in network mode [ 1316.565907][T22334] tipc: Node identity 7f000001, cluster identity 4711 [ 1316.572979][T22334] tipc: Enabling of bearer rejected, failed to enable media [ 1316.603810][ T803] usb 6-1: USB disconnect, device number 56 [ 1318.859179][ T30] audit: type=1326 audit(1784004921.114:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.4.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1318.929667][T22347] fuse: fd is not a fuse device [ 1318.934755][ T30] audit: type=1326 audit(1784004921.114:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.4.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1318.974796][ T30] audit: type=1326 audit(1784004921.164:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.4.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1319.586873][ T30] audit: type=1326 audit(1784004921.164:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.4.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1319.706606][ T30] audit: type=1326 audit(1784004921.164:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.4.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1319.743632][ T803] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1319.765364][ T30] audit: type=1326 audit(1784004921.164:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.4.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1319.795099][ T30] audit: type=1326 audit(1784004921.164:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.4.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1319.860481][ T30] audit: type=1326 audit(1784004921.164:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.4.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1319.910643][ T803] usb 6-1: Using ep0 maxpacket: 16 [ 1319.917552][ T803] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1319.927246][ T803] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.943680][ T30] audit: type=1326 audit(1784004921.164:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.4.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa1ccb9de59 code=0x7ffc0000 [ 1319.980282][ T803] usb 6-1: config 1 interface 2 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1320.000299][ T803] usb 6-1: config 1 interface 2 has no altsetting 1 [ 1320.010945][ T803] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 1320.027524][ T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.039807][T17394] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1320.059515][ T803] usb 6-1: Product: syz [ 1320.078189][ T803] usb 6-1: Manufacturer: syz [ 1320.087358][ T803] usb 6-1: SerialNumber: syz [ 1320.229780][T17394] usb 5-1: Using ep0 maxpacket: 32 [ 1320.248294][T17394] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1320.283493][T17394] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1320.300698][T17394] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1320.311476][T17394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1320.322060][T17394] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1320.332649][T17394] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1320.347063][T17394] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1320.357319][T17394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.469413][T17394] usb 5-1: config 0 descriptor?? [ 1320.663082][T11057] usb 3-1: USB disconnect, device number 47 [ 1320.960793][ T30] audit: type=1326 audit(1784004923.224:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22368 comm="syz.1.4429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4827d9de59 code=0x7ffc0000 [ 1321.055170][T22373] overlayfs: failed to clone lowerpath [ 1321.250474][T17394] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 69 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1321.483225][T17394] usb 5-1: USB disconnect, device number 69 [ 1321.521045][T17394] usblp0: removed [ 1322.214884][T22381] TCP: TCP_TX_DELAY enabled [ 1322.254993][T22384] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1322.338634][ T803] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1322.710377][ T803] usb 6-1: USB disconnect, device number 57 [ 1322.823113][T21052] udevd[21052]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1323.090465][ T5345] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1323.180252][ T803] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1323.242000][ T5345] usb 2-1: Using ep0 maxpacket: 32 [ 1323.254741][ T5345] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1323.264066][ T5345] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1323.273287][ T5345] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1323.283015][ T5345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1323.293264][ T5345] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1323.304244][ T5345] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1323.317854][ T5345] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1323.335181][ T5345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.344640][ T803] usb 6-1: Using ep0 maxpacket: 32 [ 1323.352675][ T5345] usb 2-1: config 0 descriptor?? [ 1323.366041][ T803] usb 6-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 1323.377141][ T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.397965][ T803] usb 6-1: Product: syz [ 1323.403012][ T803] usb 6-1: Manufacturer: syz [ 1323.414434][ T803] usb 6-1: SerialNumber: syz [ 1323.806671][ T803] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1323.819544][ T803] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1323.930876][T22399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1323.955845][ T803] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1323.971591][ T803] usb 6-1: USB disconnect, device number 58 [ 1324.002530][ T5345] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1324.014497][T21052] udevd[21052]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1324.022296][ T5345] usb 2-1: USB disconnect, device number 58 [ 1324.057563][ T5345] usblp0: removed [ 1324.766884][T22417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1324.781077][T22419] 9p: Bad value for 'rfdno' [ 1325.607465][T21012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.625758][T21012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.653779][T22431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1326.374120][ T49] Bluetooth: hci5: SCO packet for unknown connection handle 1 [ 1326.868177][T22462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4453'. [ 1326.999528][T22464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22464 comm=syz.3.4457 [ 1327.278472][T22464] netlink: 'syz.3.4457': attribute type 1 has an invalid length. [ 1327.295336][T17394] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1327.326328][T22464] bond4: (slave bridge3): making interface the new active one [ 1327.334887][T22464] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1327.480294][T22468] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1327.509305][T22470] xt_hashlimit: size too large, truncated to 1048576 [ 1327.559814][T17394] usb 5-1: Using ep0 maxpacket: 32 [ 1327.576165][T17394] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.630586][T17394] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1327.657135][T17394] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1327.671645][T17394] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1327.688924][T17394] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1327.702148][T17394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.722306][T17394] usb 5-1: Product: syz [ 1328.150054][T17394] usb 5-1: Manufacturer: syz [ 1328.186010][T17394] usb 5-1: SerialNumber: syz [ 1328.209563][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1328.219117][T17394] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input116 [ 1328.415824][T22478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4461'. [ 1328.426261][T22478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4461'. [ 1328.435533][T22478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4461'. [ 1328.445918][T17394] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1328.455317][T17394] (id 0x00) [ 1328.509873][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1328.526624][T22478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4461'. [ 1328.536320][T22478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4461'. [ 1328.545594][T22478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4461'. [ 1328.583055][T17394] rc_core: IR keymap rc-imon-pad not found [ 1328.589177][T17394] Registered IR keymap rc-empty [ 1328.600473][T17394] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1328.615559][T17394] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1328.641868][T17394] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1328.658750][T17394] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input117 [ 1328.680581][T22478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4461'. [ 1328.690223][T22478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4461'. [ 1328.699145][T22478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4461'. [ 1328.710831][T17394] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:70> initialized [ 1329.323505][T22497] xt_hashlimit: size too large, truncated to 1048576 [ 1329.398174][T22501] netlink: 'syz.3.4469': attribute type 2 has an invalid length. [ 1329.406490][T22501] netlink: 'syz.3.4469': attribute type 1 has an invalid length. [ 1329.928486][T11057] usb 5-1: USB disconnect, device number 70 [ 1332.025267][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1332.025279][ T30] audit: type=1400 audit(1784004934.284:1785): avc: denied { watch } for pid=22536 comm="syz.4.4477" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1332.341788][T22546] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1332.408697][T22548] random: crng reseeded on system resumption [ 1333.612987][T22553] xt_hashlimit: size too large, truncated to 1048576 [ 1334.846587][T22578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=22578 comm=syz.4.4485 [ 1334.965556][T22582] __nla_validate_parse: 9 callbacks suppressed [ 1334.965580][T22582] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4486'. [ 1337.004882][T22608] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1337.309737][T11057] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1337.489729][T11057] usb 5-1: Using ep0 maxpacket: 8 [ 1337.499142][T11057] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.515133][T11057] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 1337.524897][T11057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.533382][T11057] usb 5-1: Product: syz [ 1337.538104][T11057] usb 5-1: Manufacturer: syz [ 1337.544395][T11057] usb 5-1: SerialNumber: syz [ 1337.592600][T11057] usb 5-1: config 0 descriptor?? [ 1337.605673][T11057] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1337.758569][ T30] audit: type=1326 audit(1784004940.014:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22616 comm="syz.5.4499" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff5c7f9de59 code=0x0 [ 1337.899470][ T30] audit: type=1400 audit(1784004940.154:1787): avc: denied { sqpoll } for pid=22609 comm="syz.4.4496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1337.936870][ T30] audit: type=1400 audit(1784004940.174:1788): avc: denied { setattr } for pid=22609 comm="syz.4.4496" name="[io_uring]" dev="anon_inodefs" ino=93981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1338.010546][ T5345] usb 5-1: USB disconnect, device number 71 [ 1338.050301][ T5715] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1338.171210][T22624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1338.186871][T22624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1338.197982][T22624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1338.207336][T22624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1338.216586][T22624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1338.226525][ T5715] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1338.272263][ T5715] usb 6-1: not running at top speed; connect to a high speed hub [ 1338.281941][ T5715] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.292445][ T5715] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1338.304015][ T5715] usb 6-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1338.315948][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.324721][ T5715] usb 6-1: Product: syz [ 1338.328949][ T5715] usb 6-1: Manufacturer: syz [ 1338.334349][ T5715] usb 6-1: SerialNumber: syz [ 1338.646745][T22634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1338.677731][T22634] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1338.727086][T21011] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.895323][T22638] xt_hashlimit: size too large, truncated to 1048576 [ 1338.920446][T21011] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.546355][T21011] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.654193][T22622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.663199][T22622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.670290][T22622] bridge_slave_0: entered allmulticast mode [ 1339.677147][T22622] bridge_slave_0: entered promiscuous mode [ 1339.684861][T22622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.691958][T22622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.699167][T22622] bridge_slave_1: entered allmulticast mode [ 1339.727143][T22622] bridge_slave_1: entered promiscuous mode [ 1340.044334][T22624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1340.054779][T22624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1340.063005][T22624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1340.072495][T22624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1340.080790][T22624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1340.102314][T21011] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.164642][T22662] netlink: zone id is out of range [ 1340.222234][T22622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1340.226201][T22662] netlink: zone id is out of range [ 1340.236710][T22622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1340.269938][ T49] Bluetooth: hci1: command tx timeout [ 1340.317479][T22662] netlink: zone id is out of range [ 1340.344935][T22662] netlink: zone id is out of range [ 1340.355538][T22622] team0: Port device team_slave_0 added [ 1340.383014][T22662] netlink: zone id is out of range [ 1340.385651][T22622] team0: Port device team_slave_1 added [ 1340.415687][T22662] netlink: zone id is out of range [ 1340.446068][T22662] netlink: zone id is out of range [ 1340.491403][T22662] netlink: zone id is out of range [ 1340.518724][T22662] netlink: zone id is out of range [ 1340.590424][T22622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1340.598105][T22622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.627954][T22622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1340.654877][T22622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1340.670495][T22622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.708896][T22622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1340.827013][ T5715] usb 6-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1340.850352][ T5715] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1340.868797][ T5715] usb 6-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 1340.978571][T21011] bridge_slave_1: left allmulticast mode [ 1340.984638][ T5715] usb 6-1: USB disconnect, device number 59 [ 1340.991348][T21011] bridge_slave_1: left promiscuous mode [ 1340.991497][T21011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.020903][T21011] bridge_slave_0: left allmulticast mode [ 1341.026618][T21011] bridge_slave_0: left promiscuous mode [ 1341.034425][T21011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.347324][T21011] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1341.398817][T21011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.418075][T21011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.442280][T21011] bond0 (unregistering): Released all slaves [ 1341.457559][T21011] bond1 (unregistering): Released all slaves [ 1341.477410][T21011] bond2 (unregistering): Released all slaves [ 1341.506635][T21011] bond3 (unregistering): Released all slaves [ 1341.543355][T21011] bond4 (unregistering): Released all slaves [ 1341.573042][T21011] bond5 (unregistering): Released all slaves [ 1341.604527][T21011] bond6 (unregistering): Released all slaves [ 1341.644888][T22622] hsr_slave_0: entered promiscuous mode [ 1341.659060][T22622] hsr_slave_1: entered promiscuous mode [ 1341.673680][T22622] debugfs: 'hsr0' already exists in 'hsr' [ 1341.686876][T22622] Cannot create hsr debugfs directory [ 1342.289349][ T49] Bluetooth: hci0: command tx timeout [ 1342.297296][T22624] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 1342.316278][ T30] audit: type=1400 audit(1784004944.574:1789): avc: denied { write } for pid=22681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1342.371187][T21011] hsr_slave_0: left promiscuous mode [ 1342.385366][T22624] Bluetooth: hci1: command tx timeout [ 1342.408431][ T30] audit: type=1400 audit(1784004944.664:1790): avc: denied { write } for pid=22704 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1342.449430][T21011] hsr_slave_1: left promiscuous mode [ 1342.455219][T21011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.462573][T21011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.480807][T21011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.511323][T22707] 9p: Bad value for 'rfdno' [ 1342.519443][T21011] veth1_macvtap: left promiscuous mode [ 1342.524895][T21011] veth0_macvtap: left promiscuous mode [ 1342.531091][T21011] veth1_vlan: left promiscuous mode [ 1342.536321][T21011] veth0_vlan: left promiscuous mode [ 1342.733431][T21011] team0 (unregistering): Port device team_slave_1 removed [ 1342.752911][T21011] team0 (unregistering): Port device team_slave_0 removed [ 1342.770265][ T803] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1342.788342][T22709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1342.797913][T22709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1342.807219][T22709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1342.873301][T22709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1342.882640][T22709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1342.891901][T22709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1342.942229][ T803] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.971390][ T803] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1343.133405][ T803] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1343.147448][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1343.155624][T22709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1343.155660][T22709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1343.155691][T22709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1343.765911][ T803] usb 5-1: SerialNumber: syz [ 1343.793328][ T803] cdc_ether 5-1:1.0: bad CDC descriptors [ 1343.873497][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1344.147443][T22622] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1344.166133][T22622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1344.174339][T22622] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1344.206780][T22622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1344.280266][T22622] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1344.311815][T22622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1344.321580][T22622] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1344.334261][T22622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1344.371849][T22657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.379150][T22657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.386213][T22657] bridge_slave_0: entered allmulticast mode [ 1344.405694][T22657] bridge_slave_0: entered promiscuous mode [ 1344.417025][T22657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.436172][T22624] Bluetooth: hci0: command tx timeout [ 1344.443765][ T49] Bluetooth: hci1: command tx timeout [ 1344.490721][T22657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.508817][T22657] bridge_slave_1: entered allmulticast mode [ 1344.527121][T22657] bridge_slave_1: entered promiscuous mode [ 1344.620158][T22657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.654345][T22657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.674561][ T30] audit: type=1400 audit(1784004946.934:1791): avc: denied { write } for pid=22730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1344.733353][T21011] IPVS: stop unused estimator thread 0... [ 1344.753401][T22657] team0: Port device team_slave_0 added [ 1344.781982][ T30] audit: type=1400 audit(1784004947.044:1792): avc: denied { write } for pid=22751 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1344.818012][T22657] team0: Port device team_slave_1 added [ 1344.837102][T22657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.844027][T22657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.934687][T22657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.948511][T22657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1344.958104][T22657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.986807][T22657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1345.003875][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1345.015747][T22622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.105350][T22657] hsr_slave_0: entered promiscuous mode [ 1345.119865][T22657] hsr_slave_1: entered promiscuous mode [ 1345.134370][T22657] debugfs: 'hsr0' already exists in 'hsr' [ 1345.140887][T22657] Cannot create hsr debugfs directory [ 1345.169132][T22622] 8021q: adding VLAN 0 to HW filter on device team0 [ 1345.203635][T21012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.210732][T21012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.263080][T21012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.270177][T21012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1345.388542][T22622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1345.404992][ T30] audit: type=1400 audit(2000000000.080:1793): avc: denied { write } for pid=22757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1450.369612][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1450.376583][ C0] rcu: 1-...!: (1 GPs behind) idle=69e4/1/0x4000000000000000 softirq=166164/166165 fqs=3 [ 1450.387559][ C0] rcu: (detected by 0, t=10502 jiffies, g=171297, q=1380 ncpus=2) [ 1450.395440][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1450.395463][ C1] NMI backtrace for cpu 1 [ 1450.395477][ C1] CPU: 1 UID: 0 PID: 22657 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1450.395496][ C1] Tainted: [L]=SOFTLOCKUP [ 1450.395501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1450.395509][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1450.395531][ C1] Code: 56 e1 5e 00 48 89 df 5b e9 9d 5c 64 00 be 03 00 00 00 5b e9 32 5a 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 85 a3 59 12 48 8b 34 24 65 48 8b 15 61 a3 59 [ 1450.395544][ C1] RSP: 0018:ffffc90000a08e90 EFLAGS: 00000046 [ 1450.395556][ C1] RAX: ffff8880b8528480 RBX: dffffc0000000000 RCX: ffffffff81f56279 [ 1450.395566][ C1] RDX: ffff88802f46a540 RSI: ffffffff81f590d3 RDI: ffff8880b8528588 [ 1450.395575][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1450.395584][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880375ca300 [ 1450.395593][ C1] R13: 0000000000000001 R14: ffff8880b8528540 R15: ffff8880b8528590 [ 1450.395602][ C1] FS: 0000555591b36500(0000) GS:ffff888123ee8000(0000) knlGS:0000000000000000 [ 1450.395618][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1450.395627][ C1] CR2: 00007fb949a59e9c CR3: 0000000040323000 CR4: 00000000003526f0 [ 1450.395636][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 1450.395645][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1450.395654][ C1] Call Trace: [ 1450.395659][ C1] [ 1450.395664][ C1] __hrtimer_run_queues+0x21e/0x9c0 [ 1450.395685][ C1] ? rcu_is_watching+0x12/0xc0 [ 1450.395705][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1450.395729][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1450.395749][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1450.395769][ C1] [ 1450.395774][ C1] [ 1450.395784][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1450.395799][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x2a/0x70 [ 1450.395815][ C1] Code: f3 0f 1e fa 65 8b 05 85 a3 59 12 48 8b 34 24 65 48 8b 15 61 a3 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 91 b4 b2 09 8b 82 24 17 00 00 85 c0 74 f1 8b 82 f8 16 00 00 83 [ 1450.395828][ C1] RSP: 0018:ffffc90003a2efa8 EFLAGS: 00000293 [ 1450.395840][ C1] RAX: 0000000000000000 RBX: ffff88804ce2b1f0 RCX: ffffffff81f5038a [ 1450.395850][ C1] RDX: ffff88802f46a540 RSI: ffffffff81f501ac RDI: ffff88802f46a540 [ 1450.395860][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1450.395869][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000200000 [ 1450.395878][ C1] R13: ffffffff8d2a97c0 R14: ffffffff9bbb3be0 R15: ffffffff81cf4ca0 [ 1450.395888][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1450.395905][ C1] ? timer_init_key+0x27a/0x310 [ 1450.395919][ C1] ? timer_init_key+0x9c/0x310 [ 1450.395935][ C1] timer_init_key+0x9c/0x310 [ 1450.395951][ C1] ipv6_mc_init_dev+0x395/0xa30 [ 1450.395969][ C1] ipv6_add_dev+0xa6e/0x1520 [ 1450.395988][ C1] addrconf_notify+0x5db/0x1ba0 [ 1450.396004][ C1] ? __pfx_tls_dev_event+0x10/0x10 [ 1450.396020][ C1] ? __pfx_addrconf_notify+0x10/0x10 [ 1450.396035][ C1] ? ip6mr_device_event+0x1c4/0x230 [ 1450.396051][ C1] notifier_call_chain+0x99/0x3f0 [ 1450.396073][ C1] call_netdevice_notifiers_info+0xbe/0x110 [ 1450.396091][ C1] register_netdevice+0x1998/0x25a0 [ 1450.396112][ C1] ? __pfx_register_netdevice+0x10/0x10 [ 1450.396128][ C1] ? dev_addr_mod+0x14f/0x2c0 [ 1450.396146][ C1] veth_newlink+0x316/0xa00 [ 1450.396163][ C1] ? __pfx_veth_newlink+0x10/0x10 [ 1450.396176][ C1] ? netlink_rcv_skb+0x159/0x420 [ 1450.396196][ C1] ? netlink_unicast+0x585/0x850 [ 1450.396213][ C1] ? netlink_sendmsg+0x8b0/0xda0 [ 1450.396244][ C1] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 1450.396258][ C1] ? validate_linkmsg+0x57c/0xba0 [ 1450.396273][ C1] ? __pfx_validate_linkmsg+0x10/0x10 [ 1450.396287][ C1] ? alloc_netdev_mqs+0x120a/0x15c0 [ 1450.396303][ C1] ? rtnl_create_link+0xa4b/0xf80 [ 1450.396318][ C1] ? __pfx_veth_newlink+0x10/0x10 [ 1450.396332][ C1] rtnl_newlink+0x1499/0x2380 [ 1450.396349][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1450.396363][ C1] ? find_held_lock+0x2b/0x80 [ 1450.396382][ C1] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1450.396396][ C1] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1450.396411][ C1] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1450.396433][ C1] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1450.396447][ C1] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1450.396462][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1450.396477][ C1] rtnetlink_rcv_msg+0x95e/0xe90 [ 1450.396492][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1450.396508][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1450.396525][ C1] netlink_rcv_skb+0x159/0x420 [ 1450.396544][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1450.396560][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1450.396582][ C1] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1450.396602][ C1] netlink_unicast+0x585/0x850 [ 1450.396621][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1450.396639][ C1] ? __pfx_sock_has_perm+0x10/0x10 [ 1450.396657][ C1] netlink_sendmsg+0x8b0/0xda0 [ 1450.396676][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1450.396696][ C1] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1450.396715][ C1] __sys_sendto+0x48b/0x4e0 [ 1450.396734][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1450.396753][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1450.396783][ C1] ? xfd_validate_state+0x129/0x190 [ 1450.396799][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 1450.396817][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 1450.396836][ C1] ? do_syscall_64+0x90/0x870 [ 1450.396855][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1450.396873][ C1] do_syscall_64+0x115/0x870 [ 1450.396892][ C1] ? clear_bhb_loop+0x40/0x90 [ 1450.396907][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.396921][ C1] RIP: 0033:0x7f01ffd5e68e [ 1450.396934][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1450.396946][ C1] RSP: 002b:00007fff0c1c9e48 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1450.396959][ C1] RAX: ffffffffffffffda RBX: 0000555591b36500 RCX: 00007f01ffd5e68e [ 1450.396968][ C1] RDX: 000000000000008c RSI: 00007f0200b54670 RDI: 0000000000000003 [ 1450.396976][ C1] RBP: 0000000000000001 R08: 00007fff0c1c9ec4 R09: 000000000000000c [ 1450.396985][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1450.396993][ C1] R13: 0000000000000000 R14: 00007f0200b54670 R15: 0000000000000000 [ 1450.397007][ C1] [ 1450.397459][ C0] rcu: rcu_preempt kthread starved for 10494 jiffies! g171297 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1451.041775][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1451.051727][ C0] rcu: RCU grace-period kthread stack dump: [ 1451.057595][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1451.071073][ C0] Call Trace: [ 1451.074339][ C0] [ 1451.077259][ C0] __schedule+0x125c/0x6730 [ 1451.081775][ C0] ? __pfx___schedule+0x10/0x10 [ 1451.086617][ C0] ? find_held_lock+0x2b/0x80 [ 1451.091291][ C0] ? schedule+0x225/0x2c0 [ 1451.095617][ C0] schedule+0xdd/0x2c0 [ 1451.099678][ C0] schedule_timeout+0x127/0x280 [ 1451.104519][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1451.109881][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1451.115164][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1451.120962][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1451.126412][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1451.131168][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1451.136446][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1451.141375][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1451.146558][ C0] ? rcu_is_watching+0x12/0xc0 [ 1451.151312][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1451.157114][ C0] rcu_gp_kthread+0x179/0x230 [ 1451.161778][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1451.166963][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1451.172765][ C0] ? __kthread_parkme+0x18c/0x230 [ 1451.177786][ C0] ? kthread+0x13a/0x450 [ 1451.182022][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1451.187208][ C0] kthread+0x370/0x450 [ 1451.191273][ C0] ? __pfx_kthread+0x10/0x10 [ 1451.195860][ C0] ret_from_fork+0x72b/0xd50 [ 1451.200442][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1451.205547][ C0] ? __switch_to+0x800/0x10f0 [ 1451.210222][ C0] ? __pfx_kthread+0x10/0x10 [ 1451.214810][ C0] ret_from_fork_asm+0x1a/0x30 [ 1451.219581][ C0] [ 1451.222585][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1451.228894][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1451.239377][ C0] Tainted: [L]=SOFTLOCKUP [ 1451.243685][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1451.253723][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1451.259350][ C0] Code: 76 8d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 39 12 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1451.278943][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000246 [ 1451.284993][ C0] RAX: 0000000006eafa81 RBX: ffffffff8e891480 RCX: ffffffff8bb962d5 [ 1451.292951][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a3c59 RDI: ffffffff8c400f80 [ 1451.300908][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 1451.308862][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 1451.316820][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 1451.324775][ C0] FS: 0000000000000000(0000) GS:ffff888123de8000(0000) knlGS:0000000000000000 [ 1451.333695][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1451.340264][ C0] CR2: 00007f39d0beb540 CR3: 00000000512fd000 CR4: 00000000003526f0 [ 1451.348231][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 1451.356191][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1451.364145][ C0] Call Trace: [ 1451.367408][ C0] [ 1451.370323][ C0] default_idle+0x9/0x10 [ 1451.374550][ C0] default_idle_call+0x6c/0xb0 [ 1451.379299][ C0] do_idle+0x3a7/0x5b0 [ 1451.383360][ C0] ? __pfx_do_idle+0x10/0x10 [ 1451.387947][ C0] cpu_startup_entry+0x4f/0x60 [ 1451.392705][ C0] rest_init+0x251/0x260 [ 1451.396937][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1451.402474][ C0] start_kernel+0x48e/0x490 [ 1451.406973][ C0] x86_64_start_reservations+0x24/0x30 [ 1451.412420][ C0] x86_64_start_kernel+0x12b/0x130 [ 1451.417521][ C0] common_startup_64+0x13e/0x158 [ 1451.422462][ C0]