last executing test programs: 2m22.026482904s ago: executing program 0 (id=897): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f0009"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8a002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1c, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x91) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x110, 0xd, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x3, r7, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 2m18.61644202s ago: executing program 0 (id=903): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x3c1c83, 0x0) write$binfmt_elf64(r0, &(0x7f00000024c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x9, 0xff, 0xa, 0x401, 0x2, 0x3, 0x4, 0x21e, 0x40, 0x190, 0x6, 0x800, 0x38, 0x3, 0x6, 0x1, 0x2}, [{0x7, 0x8, 0x8fb, 0x100000001, 0xc, 0x7fff, 0x8, 0x1}, {0x7, 0x20000000, 0x3, 0xbf, 0x627, 0x5, 0x0, 0x2}, {0x1, 0x81, 0x2, 0x9, 0xe99, 0x8, 0x8, 0x1}], "1f7f4d9691c520bbd24ca51b4d986f0f5d95b6a05c70652d6802254701056a64b66450b5561d02b0fbbab3115c3bc585d78b59bddc2ad44846abdb91f76ddac8c7e7a05478d0c6dbc97ffd13e4974f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x837) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) write$FUSE_DIRENT(r0, 0x0, 0x0) 2m18.451073813s ago: executing program 0 (id=904): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r2, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.30488457s ago: executing program 0 (id=907): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x0) close(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000019200)={'vlan1\x00', 0x1}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x6, 0x20, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x3}}) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) 2m16.767802677s ago: executing program 0 (id=912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/disk', 0x351a83, 0x120) write$cgroup_int(r4, &(0x7f0000000040)=0x8000000001cb, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) statx(r4, &(0x7f0000000300)='./file0\x00', 0x800, 0x2, &(0x7f00000007c0)) socket$inet(0x2, 0x3, 0x8d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendto$inet6(r5, 0x0, 0x0, 0x240408c4, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 2m12.843868289s ago: executing program 0 (id=920): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3) (async) syz_io_uring_setup(0x1ca0, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpgid(0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/153) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r8 = accept4(r7, 0x0, 0x0, 0x80000) recvmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000380)=""/193, 0xc1}], 0x2}, 0x12000) writev(r8, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0x139}], 0x1) sendto$inet6(r6, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x801, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m56.97447395s ago: executing program 32 (id=920): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3) (async) syz_io_uring_setup(0x1ca0, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpgid(0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/153) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r8 = accept4(r7, 0x0, 0x0, 0x80000) recvmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000380)=""/193, 0xc1}], 0x2}, 0x12000) writev(r8, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0x139}], 0x1) sendto$inet6(r6, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x801, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 19.266338907s ago: executing program 4 (id=1269): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000082f17370000ff0300000109022400010000c00209040000010300020009210000fd012203000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="401a0300000003233b38d2c2abb36cc0d5a25fee13b863b4a00d8b5ef76e223100892e76dd505be88d7d32287d46c7c11c9d97b980a5f05b4f9f25d2821113d762d5acadfac1ae3448547963a73de540b7876181c915647efa61c5f80af19988b47d02ea580f5df2fd5b3d453782a3dbd784e71153a1d51b5776e7a3eb55fb70bca9f524135fd2917d6fda768aff0ef5bdc546e3db548945097912e4f6ac3c92619c126d37df84117418aa7a11730d1562423b3ddf2ff8c469a1c5eedd0e9cffd39a780adfca942f70b19106e34c24f91fab83c3d306100f60c644a238a5ebd08c852702fa58618451f226"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x10}, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f000000e0c0), 0x10010) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x6ea2c050, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f0000000780)={0x20, 0x2, 0xaf, {0xaf, 0xe, "b97823fc729a662131b21090a47f86f115fe7feecb262df4e6021f293d6b8d63c68427f8478da3e0eeabbe128e4f24b1bd57c4fa35eecb9ee38da8eab4b53b2ec79262339d3113779e05d1e8c8112420192ad80f1eeb6f38fb3bcfc14a7a5354bbe7efb5296179b40217290f83d3cad7672eb3328b959e5f828b61326e52a2ea539bab78b056d3c007cca454f83c52dc56a90858378d4ecc8d32bea089a1ba8001cb9f21cbd64515a531be5c95"}}, &(0x7f0000000840)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "d63142aef8328a494e21f39ea7820815bc0313efb2c99dd1225e17374e6a215174ee083cf5487a39b7f186a69ab6fbd6d6abd5f06ffe96b8906a53b899af9572ce7e97bebe168bbbbdb4ed4a7e"}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000900)={0x20, 0xc, 0x74, "a7e51afa137e02cad424a9abdf9231645bafb565d15055d8cbaaf5c0b92b045c08a33c75866169d2a3e50c14b433eacc875f83f3b9e1a6ba7617f3f83846a0cd54060d0cda9e2e2bf2f7694959026a6e81a23e5dab6486d8b8464ac3b2c6ac830aed384bf13a1f554551d7eb26b564b06ba1403a"}, &(0x7f0000000980)={0x0, 0xa, 0x1}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000a00)={0x20, 0x81, 0x3, "446c16"}, &(0x7f0000000a40)={0x20, 0x82, 0x1, "97"}, &(0x7f0000000a80)={0x20, 0x83, 0x2, "cdc3"}, &(0x7f0000000ac0)={0x20, 0x84, 0x1, 'w'}, &(0x7f0000000b00)={0x20, 0x85, 0x3, "469a41"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xf, &(0x7f0000000240)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x0, 0x4, 0x5, 0xb, 0x1, 0xfffffffffffffff0}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @jmp={0x5, 0x1, 0x5, 0x9, 0x4, 0xfffffffffffffff8, 0xfffffffffffffff0}], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x41, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x1, 0xd, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r3, r4, r5, r6, r7, r8], 0x0, 0x10, 0x3}, 0x94) 19.054382963s ago: executing program 2 (id=1270): r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x50000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={r6}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000004500)={0x14, 0x0, &(0x7f0000004400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000280)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) close_range(r1, 0xffffffffffffffff, 0x0) r10 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xeef, 0xc002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x497}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xd, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x3b, 0x9}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x3, 0x2, 0x4, 0x40, 0x4}, 0xc, &(0x7f0000000240)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x1, 0x1}]}, 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x240a}}]}) syz_usb_control_io$hid(r10, &(0x7f0000000600)={0x24, &(0x7f00000004c0)={0x20, 0xc, 0x1d, {0x1d, 0x6, "9024906a33b84c89c631b0653c4f0266b7ef64234b9eb7fbcacd02"}}, &(0x7f0000000500)={0x0, 0x3, 0x40, @string={0x40, 0x3, "7b05445739259d33d028f7b9dec3490d95f7f5124e3c464987b338bc824813a7563d0fb817d81621bbb66fc56da3e47cfdb6bfee633a469f38b63355255b"}}, &(0x7f0000000580)={0x0, 0x22, 0x1e, {[@main=@item_4={0x3, 0x0, 0x8, "b4337a08"}, @local=@item_4={0x3, 0x2, 0x7, "5247ad5e"}, @global=@item_4={0x3, 0x1, 0x0, "40b211cf"}, @local=@item_4={0x3, 0x2, 0x4, "7c468450"}, @global=@item_4={0x3, 0x1, 0x0, "e14c17f1"}, @main=@item_012={0x1, 0x0, 0x9, "86"}, @main=@item_012={0x2, 0x0, 0xc, "c479"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xb, 0x1, {0x22, 0xfe1}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000640)={0x20, 0xe, 0x2a, "eb4d1b42d938553418430a959ae43d4fc00f1280b4cdfeef3ff2b8f4442e75a465451d206229dbe43dcf"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000700)={0x20, 0x1, 0x5c, "6027ecb00d845c395fc16dd9c26bf5e53b3964b4fdf0ee761821792c4698a651b89b4cbd5431fdf8e6352d59368b332d52707f419e9cdb57dab90ff2b9fa29c793ae350b83aa5de537af4e7035a7802e5120a189cc0362ed12df8f45"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x6}}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="071db6ce2ce16db87572abe7250000", 0xf}, {&(0x7f0000001300)="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", 0xff2}], 0x2) 17.670884839s ago: executing program 3 (id=1275): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xffffffffffffffff, 0xee01) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r3, 0x5, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r4, &(0x7f0000000300)='1\x00', 0x2) syz_emit_ethernet(0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000030000403a00fc000000000000000000000000000000ff0200000007000000000000000000000000604aa19800003c"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xc, 0x7, 0x408}, 0x50) 16.775355163s ago: executing program 3 (id=1276): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="3046d70e4c7f6408a8dce1d7343c66e63207d739b16f8adbf525f579bff4f6d2a4ee147ed482982247018b0e14b1203fe3fb5ff20a5867c3e554480fc804cee440a907ada83dfe9e9b63704e68c76b8146493de769c00ac57bbfbe0bf2dbe86964813d6d17dad85e68c0caffab2c900b329d197d7e08f9dfc9a6e5811efcc03ccd2d0a8bf4123f71e21f6191628a5888f0bc935950b754a5d500276822d9", 0x9e}, {&(0x7f0000000400)="04082debeb51f63c17ca4f071d37f5a3fd1dbc5db0d9a010c22c3832f5e3e0c84dde960a1a0b557dfe2790ee425ea64926883be198be555e7dd0ca6fd7e2175e289021b77a8bee4dfefb0af38be5263866f31c8a3a591d51469705a2c99887f96a6b5f393d3895b5986a624f2f81b6566b40feabe626f09b76c13abefd7b8ab96303a86ed33cb7f08006414c66b51c49d4131fcc77", 0x95}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x248}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 16.703184284s ago: executing program 4 (id=1277): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r1, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) syz_emit_ethernet(0xd8, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@generic={0x22eb, "899d2cd90212ff27e308b3bbfcfe963b7f7a32d0f97a902a7db6b89f7347d9ded46ce172f18f3994210a3b70a543cf64546a3d57b04e2a070adcefbb7e1f27956ac761a6edd0fe4854d4dabd5327c4e04dea60d31f3024457311ca7c483a2b82da49723bca94d33a14c461cfdf9504cb53da37947be7004014741227a1ac02e0818d264f82c6c55794804d8a2e9b4855bad65577109dce1c51df35eb5194b5c26481772ef13865ffe886a9a3bd2085acb6624e5f27946d606d2e07a140e35a8500888bda635c725870d2"}}}, &(0x7f00000002c0)={0x1, 0x4, [0x7dd, 0x526, 0x8b2, 0x56a]}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x9}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f00000099c0)={0x2, 0xf}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r3) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x18) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4880}, 0xc091) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)='usrquota') chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000850000001800000085000000230000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.454058885s ago: executing program 2 (id=1278): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x7, 0x81, 0x5, 0x6}, {0x8, 0x10, 0x9, 0xffffffff}]}) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 16.013781254s ago: executing program 5 (id=1280): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) syz_open_dev$media(&(0x7f0000000040), 0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0x1}], 0x1, 0x8) splice(r5, 0x0, r7, 0x0, 0x15944, 0xc) close_range(r3, r4, 0x10000000000000) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20040001) close(r8) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x48041) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x10000010}, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) 15.706540714s ago: executing program 5 (id=1282): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001000070d23bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0400000060000000340012800b000100627269646765000024000280050025000100000005002a00010000000800040002000000060014"], 0x54}, 0x1, 0x0, 0x0, 0x6}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f00000003c0)="03639142960df25f535aa7c8bdc6e75fe70e23b316b97d2f99d6d0723670768115b5347773c16ca41b144fe2e068f4030e65ba93294ddc6c99fcef8876fe8fea42efff32765a1660d103b0ef5096294c11ceddc0da7737fcefc0e5a31fb647d34b724c151ad13071933a9fab777802d63912b1a110eb2f988827f2c6a17db16bda38e23813537b3e826d1ee3fac35c65678e9e6226ba0ab02b89e59b76ef2f5946f047c41d1f25366163dfd2c876f0", 0xaf) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r2, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x107, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80d0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x3, 0x4, 0x0, r2, 0x3}, 0x50) r4 = semget$private(0x0, 0x4000, 0x0) semctl$SETALL(r4, 0x0, 0x14, &(0x7f0000000740)) semop(r4, &(0x7f0000000280)=[{0x0, 0x5}, {0x1, 0xffff, 0x1000}, {0x2, 0x5}], 0x3) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000000680)=""/141) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000406010800000000000000000200200a0500010007000000d0fbcb8d481c42c6037e14e5a97a410b2cfe57d69c81f18cb6722c6213a82d8c06edfdea7f6f392f93c21a09750538b5fc6b"], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x30}, 0x0) 15.671096087s ago: executing program 2 (id=1283): syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x8, 0x8200) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001440), 0x101000, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) getpid() sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 14.851925659s ago: executing program 4 (id=1284): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x20031, 0xffffffffffffffff, 0xbe9f9000) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRES64=r1], 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a4a000000000900010073797a3100000100100003800c00002f5d9c575bd1acc8cacbd8d9bb1e9b9285142cad3f0bff0c2f00373c15ce09863b48b673a85dd708e5c77499dea2808fc36c"], 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$BLKSSZGET(r3, 0x1268, &(0x7f00000000c0)) 14.786882598s ago: executing program 5 (id=1285): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f0009"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8a002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1c, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x91) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_open_procfs$namespace(r2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x110, 0xd, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x3, r6, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 14.786426328s ago: executing program 1 (id=1286): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x61cc, 0x0, &(0x7f0000000040), &(0x7f0000000000)) r3 = socket$kcm(0x29, 0x2, 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r4, 0x0, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0612"], 0x9) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x3479, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fanotify_mark(r1, 0x10, 0x1, r8, &(0x7f00000001c0)='./file0\x00') io_uring_enter(r5, 0x3516, 0x20000000, 0x0, 0x0, 0x0) r9 = fsmount(0xffffffffffffffff, 0x0, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x102}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x2, [], [0x2], [0x0, 0x6c], [0xfffffffffffffffc]}) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x161e42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000200), 0x0, r10}, 0x68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 14.726043339s ago: executing program 3 (id=1287): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000980)={0x428, r1, 0x208, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b6bf5d1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bccd7a6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70519542}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd90}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x61a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6767612}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4cf0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fa5f593}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f70de90}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb07}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa8cc}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9dba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62c4fd35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8a8f31b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c0b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf98c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd534}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d6e2ca0}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39efda25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e5d4251}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49ca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a4d06f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b5bcde3}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2d6b9041c0ea3c2e}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65a6b309}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2745915c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43c01887}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9af9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5435d176}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e7b}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x6c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29b0c793}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cdd8b3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b85883c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x484c487b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x104, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6afb0b5c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x669ab73b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5763026a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x473694eb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65fd94eb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7538e783}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c3f3f37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41b4c6e9}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33fbed9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d2dc309}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3629fd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x131e3bf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a00ed9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bb1c985}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x650a480e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17e45391}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xe0, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c455bc0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e49}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c07}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22f465ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x860a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaab9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfdfa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7345e468}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4922}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3968}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19021b8f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d162a7d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5482e679}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe75990d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fe4811d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52d5f7d7}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x35bc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdce0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x601b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x680f4eee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac90}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb479}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6abc8fd}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bfc1ff5}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x9b7efdbe920fbec2}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100ffff0000000843000000850000007b000000850000000f0000009500001f00000000"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) shutdown(r3, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={&(0x7f0000000080)="dd6906804cd90100e9c3c5930178fbef0f7484a31125dd4748f1309265c2ad48111a59870f7fbdcdb1a3e850929c0d1ffdb0fc6a0002346d55372771a2ab93d3ff1d13241e8c77f4e9e5ffece5ee262e606dea6c98543e8aefaa3568cd013da14c2861e408a31c5ac6bf33708533f8a6350b8226db410724ac", &(0x7f0000000200)=""/182, &(0x7f0000000340)="88a084f620f5dda376b377c54fc50f1335e1c0150f257d31925856e254abd05e8cc7c6fcef2b98bbc2f8cb5619c2ae4379242f49cdf8e751dbf18623ad8238a836aa39ad21edf4fa6211c957b1fdef70d26c9ca966b90517c192815b31c943baebae39b4a9f13d37db9efccc9249bbc0eaef8a15486be7ee3d864b9e8e22982e7c0826edead76d518af952e7da7dc76ec8f2f1fd2c528f", &(0x7f0000000400)="1d5fd20523e75d15bd247c44dc47695f719b5efda95dba8b1e4a0d0287a195e1e421e06fbb711bb01a787713792e1b0008733bd38c15b300de774f2b5505da64d359c0ec1597ed3d5d8d2676a6f76567752d1ea018a8fe5d561a9e34969704755d3bc9b8e52e768e98a3acd3cd6735738639d77cdf3ad0dfff7fbf8a3dae49676a3602ebccedd8fd36896a7c6dceb5b92667c13aa331d71828e11f0aee45e854594fa8a46e56f9345c7153677ca71e4188c86af55b18e2c3ba18c5ede97ba7500f0bd2f6c5adf10bdc2e1f18ff60695cd996ed36e9bc4cbc4fa0e271ff3fe41303850178ba6226b473b93cad5b67c39e88e082", 0xa271}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xfcd5, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 14.316204265s ago: executing program 3 (id=1288): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x100010, 0xffffffffffffffff, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r5, 0x4b46, &(0x7f0000000000)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 14.023040867s ago: executing program 4 (id=1289): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008087b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff10000400000000000fe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 13.779339185s ago: executing program 4 (id=1290): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x2e, 0x0, &(0x7f0000000280)) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x3b) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r2, &(0x7f0000003300)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/33, 0x21}], 0x1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x9738b56c10b5a6c6, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) syz_usb_connect(0x3, 0x316, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x7, 0x5, 0x3, 0x20, 0x5}, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f160002021003000d00c028090297020000000000"], 0x1, [{0xc1, &(0x7f0000000340)=ANY=[@ANYBLOB="c103f6452a6e38c884df910c97867c8b506b714e649c48e18ac7c357312cdd0777b79c7863b6e74beaec1291c2d70ffaf5a568bc5a3cb1080de7289e3b599df40219861ca1575caf55cb9ac122d2c3f03a09270a5f0d75e40c3ba30f3d244b2e49399809b3a72adbd82c9091e6cf1208c6a038eb5b13bb28395ee8b582fa4422fb188efcfe236975e0359d899795caf1f08b097a3a1fdf8aabced98689cd7593e105120b49712e567bc7d5514eec1e8dfcefe2f23e5d9665a15ee670164c16085d"]}]}) epoll_wait(r4, &(0x7f0000000140)=[{}], 0x1, 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000100), 0xb, 0xb2001) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000040)=""/185) 12.898139248s ago: executing program 2 (id=1291): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x1ec, 0x3, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x70, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}, @CTA_NAT_DST={0x3c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4004810}, 0x40800) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000424bd7000fbdbdf2502000800080061000400000008000a01"], 0x24}, 0x1, 0x0, 0x0, 0x64008044}, 0x4000110) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 12.705343062s ago: executing program 2 (id=1292): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0xfffffffb, 0x1, &(0x7f0000000180), 0x10000, 0x0, 0x0, {0x3}}) socket$kcm(0x10, 0x2, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="ffef000040100000140012800b0001006970366772650000040002801400030069703612ee0447f867726530000000000000000000005c605d53f59f6ca3073ee674a0196522a6b46377bb3636639d78a3a95d508af1c5395c9a928457a1402d74c0401b9e5f823ca6328b48739ddd704e8fa4b32bcf2fe54dcf576bcab03f7ff7e9e370920a014af54d818412e4ee3e333165cbfada99bc0b2e1f2cb61ebe0c963f9675c1ac67230fd3706d40201e05d3357fe1766284f97390631069676113d0"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0xc000) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x101, @private0, 0x5}, 0x1c, 0x0}}], 0x2, 0x0) shutdown(r6, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) bind$bt_hci(r7, 0x0, 0x0) 12.703407639s ago: executing program 3 (id=1293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d469e7000905", @ANYRES32], 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "0ccbd336f326380623db44659a345b8e8f89e8526ca98a4d1400766d55366e6e6d088a55363eac8fc7e663e6e88c2d21982fceba6c5b9b403cf03e74aadbf6c43878229b4d115e571adb0250a6a4d4b3fa5829c4aee938c8d5ab8c9cb094e132d5ddd8ab6bf9b78e1008b5af95bec7d0781546afe8b55758bb47195fad1e378c8ab83fc9d25a04401bd86fa8ef71d95e0fb7b9354f3df3009e5e68efa426e06f7f6bcd5bec35cc0f7470618a3124fd3b309ff07aba5e190fd9142d03a2f9703d1c05d00dad80439efcd31a45cdfe2836603147ba73a790745528"}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000800)={0x40, 0x9, 0xde, "29a6fd5e76bd4e362612df61c6ca0d5dbb74c05895ee5242ac257b32c854ba02c1fb32fbdaded66c58354d7a53a8980b4bec50752cfc4630cee4e8eecaf51db682a5f8e8bafff17fdc9c7ffc18b28332606d6235c80a8bd0478146029f11efd5ae9fc0cd15d67eb877a77502a2e4aa5f6a8333c2a4426faf772fae1cdadf1396226708456a44c3bf77e054fc5f9d2b09a7750b479050127c76b940c5f7a32ce14124d87a5f0bed2340450667c11837d3d0eabc27c69594fabe60d361be69221f1d4cfc550860aba710d9a84906f078c88bba6cef4c7251f76c8707bc8703"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000580)={0x20, 0x81, 0x1, "87"}, &(0x7f0000000900)={0x20, 0x82, 0x1, ','}, &(0x7f0000000980)={0x20, 0x83, 0x2, ';-'}, &(0x7f00000009c0)={0x20, 0x84, 0x3, "370bb5"}, &(0x7f0000000a00)={0x20, 0x85, 0x3, "68efb9"}}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/96, 0x60}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12.551877795s ago: executing program 1 (id=1294): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write(r2, &(0x7f0000000040)="1c0000001a00", 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x70bd2a, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010103, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}, 0x80004}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, @in=@broadcast, @in6=@private0, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x84) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000080)={r3}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000140)) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000100)=0x58, 0x4) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x3, 0x5004) ioctl$FS_IOC_GETVERSION(r5, 0xff0a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) (async) write(r2, &(0x7f0000000040)="1c0000001a00", 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x70bd2a, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010103, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}, 0x80004}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, @in=@broadcast, @in6=@private0, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x84) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000080)={r3}) (async) getpid() (async) syz_pidfd_open(r4, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000140)) (async) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000100)=0x58, 0x4) (async) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x3, 0x5004) (async) ioctl$FS_IOC_GETVERSION(r5, 0xff0a, 0x0) (async) 12.260625591s ago: executing program 5 (id=1295): socket$netlink(0x10, 0x3, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}, @CTA_STATUS={0x8}]}, 0x60}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x14, 0x29, 0x37, {0x3c}}}], 0x14}, 0xc044) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101402, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000bc0)={0x0, 0x95, @ioapic={0x40000, 0x3a9, 0x8, 0x4, 0x0, [{0x7, 0xc8, 0x2, '\x00', 0xe}, {0xf1, 0x1, 0xd, '\x00', 0x6}, {0x4, 0x1, 0x4, '\x00', 0x8}, {0x6, 0xfa, 0x2, '\x00', 0x48}, {0x40, 0x7, 0x6c, '\x00', 0x9}, {0x8, 0x8, 0x5, '\x00', 0x4}, {0x59, 0x0, 0x8a}, {0x3, 0x1, 0x2, '\x00', 0x6}, {0x7, 0x80, 0xff, '\x00', 0x80}, {0x65, 0x4, 0xfb, '\x00', 0x1}, {0x2, 0x0, 0x2, '\x00', 0x2}, {0x2, 0x50, 0x4, '\x00', 0x47}, {0xb2, 0x81, 0x3}, {0x64, 0xf7, 0x81, '\x00', 0x3}, {0x5, 0x20, 0x7, '\x00', 0xff}, {0x2, 0x8, 0xb, '\x00', 0x4}, {0x5, 0x2, 0xa5, '\x00', 0x2}, {0x7, 0x46, 0x5, '\x00', 0x1}, {0xe, 0xf, 0xe, '\x00', 0x2c}, {0xeb, 0x7d, 0x6, '\x00', 0x10}, {0x6, 0x1, 0x48, '\x00', 0xff}, {0xf7, 0x2, 0x4, '\x00', 0x7d}, {0xd, 0x9, 0x8, '\x00', 0x9}, {0x6, 0x8, 0x9, '\x00', 0x7}]}}) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4048080) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12.108840161s ago: executing program 1 (id=1296): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001e00010028bd7000fbdbdf25ac1e0101000000000000000000000000000004d402003300ac1414aa000000000000000000e2b400000000000000000008000b0005000000"], 0x48}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000000) unshare(0x28000600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = fsopen(&(0x7f0000000bc0)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x47) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r7, 0x301, 0x70bd27, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) 11.702672008s ago: executing program 1 (id=1297): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="3046d70e4c7f6408a8dce1d7343c66e63207d739b16f8adbf525f579bff4f6d2a4ee147ed482982247018b0e14b1203fe3fb5ff20a5867c3e554480fc804cee440a907ada83dfe9e9b63704e68c76b8146493de769c00ac57bbfbe0bf2dbe86964813d6d17dad85e68c0caffab2c900b329d197d7e08f9dfc9a6e5811efcc03ccd2d0a8bf4123f71e21f6191628a5888f0bc935950b754a5d500276822d9", 0x9e}, {&(0x7f0000000400)="04082debeb51f63c17ca4f071d37f5a3fd1dbc5db0d9a010c22c3832f5e3e0c84dde960a1a0b557dfe2790ee425ea64926883be198be555e7dd0ca6fd7e2175e289021b77a8bee4dfefb0af38be5263866f31c8a3a591d51469705a2c99887f96a6b5f393d3895b5986a624f2f81b6566b40feabe626f09b76c13abefd7b8ab96303a86ed33cb7f08006414c66b51c49d4131fcc77", 0x95}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="80000000000000001001000005000000b4af6d9a7a1b2817fe109601eca11bb381a8e1a0eccc683f84c1cb668990dd22f26b4b7a1e6e457fc632b2f390b334431cad39ed0884744ed804f83f3c27b928f8c2dd043da567ea71f921ab66d71ef86b6e84cfb0aa6e360fa894364fa3b4e1da621be222c896d36da1730000000000e800000000000000040100000600000021ea588235a099f7236ab0b16140d51942f587357f468a29cc0c4a79854e85dc2a2010f4a4404ac180ec66c745e9a801225e48e46284c8c5bd31fbdb8c01538be68a0e0aa2e82b605e34e3222bc456f0443d5d8d1d144363eb0c8950756a540cd03b1fa9eaff4f25565fcb86390d1c490e4505512d69b969e34b453e356ed474840a759579b1ffdd0c1170eb46ad6f028b09d64787dcec3c11564e489686a2d7e1015a1ed6494870767c11d87621a095e29e0c2d99409fe822b325247d7a602b3fad287a2525bc4bf7771a9765bc02f2d769b4f8e0b10000e0000011000000000d01000003000000a827ae34aee08a6c719d9ab7297976aa9914d3b84c15ac1028011ca2a562c60eb2d3c971871ff1983649869b6bf7780c965db8858dc195ab37954cd013d2a35f71cae544c9d897417e71e14ba1ed715f1779cb15fcd12b351376297d9194f1c539180246011fe1799e5e42be07c534486fc7525be939f2466bb3b2e249bcb2984feb86831558f5dc21406a5b393fd92befe79948390cb7cab045adca824401a82e357d6c444af3f3c2000c04df00d8eb3d15a2c70955a8fd9e83426041888687d26202f20000000000b96e13c37fa6b56d98d81882979d5fef23a67b04fa028b61f3c026bfcbb0cc2b87241e4298ca654312d8989483b39f3cee4af488ee1f813554329afb237aafa5cc796634d45800fd00000000000000"], 0x248}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 11.147676631s ago: executing program 5 (id=1298): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000206d0437c50000000000010902240001000098000904040003030001000921001001012207000905810340"], 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x4866, 0xea86, 0xb, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x707a3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) setsockopt$ax25_int(r7, 0x101, 0x1, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x288a, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x5, "12b013e9"}, @global=@item_012={0x1, 0x1, 0x3, "e7"}]}}, 0x0}, 0x0) 10.80375007s ago: executing program 1 (id=1299): socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0186416, &(0x7f0000000340)={0x9, 0x60, 0x396e, 0x0, 0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) 10.639624771s ago: executing program 3 (id=1300): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000080)=0x1, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x40004e10, 0x104698, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = userfaultfd(0x1) fcntl$dupfd(r2, 0x406, r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) 10.639184645s ago: executing program 4 (id=1301): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xab, 0x8, {}, {0xffffffffffffffff}, 0x2, 0x6}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0xffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={0x0, r3, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000280)={0x0, r5, r6, 0x80000001, 0x4, 0x9, 0x7c7d2876, 0x4b, 0x2, 0x0, 0xffffffff, 0x85}) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_PIM(r9, 0x0, 0xcf, &(0x7f00000002c0)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003440), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e21,sq=0x0000000000000664,rq=0x0000000000000fbf,noextend,timeout=0x000000000000ffff,timeout=0x000000000000bc6d,sq=0x0000000000000005,rootcontext=unconfined_u,euid=', @ANYRESDEC=r0, @ANYBLOB='\x00 ']) 9.526415043s ago: executing program 2 (id=1302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x3, 0x12) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r4, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x20008000) sendto$inet6(r3, &(0x7f0000000040)="0b118f2b4190be586d04d99304c7975dfca451f6a36e5e11c583738f22bfc241adfd70c9456ea4fe6a5e0716c24ab3", 0xfffffffffffffea5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) r7 = dup(r1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="c744240000000080c744240200000000c7442406000000000f011424b9a90900000f320f32c744240005000000c744240200000100c7442406000000000f01142448b802000000000000000f23d80f21f835400000a00f23f866b806018ec067430f01c248b800180000000000000f23d80f21f80882800000101023f82e0f1c440a0966b89a008ee0", 0x89}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r7, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r9, 0xc0bc5351, &(0x7f00000003c0)={0xe, 0x1, 'client1\x00', 0x2, "49ea1632fea729bc", "a9bd9a7fd8645d5e6774852774a9e8c61db20f19edaa28c1cc8e5d0c62f76639", 0x31f, 0x1000}) 8.566841787s ago: executing program 5 (id=1303): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES64], 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/24) 0s ago: executing program 1 (id=1304): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x100010, 0xffffffffffffffff, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r5, 0x4b46, &(0x7f0000000000)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): e } for pid=9817 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 320.130444][ T29] audit: type=1400 audit(1772342947.113:874): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 320.224723][ T29] audit: type=1400 audit(1772342947.303:875): avc: denied { read } for pid=9826 comm="syz.3.957" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 320.269857][ T29] audit: type=1400 audit(1772342947.303:876): avc: denied { open } for pid=9826 comm="syz.3.957" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 320.430473][ T42] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 320.430758][ T5888] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 320.530411][ T5883] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 320.570525][ T42] usb 3-1: device descriptor read/64, error -71 [ 320.590382][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 320.598146][ T5888] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 320.606536][ T5888] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 320.630380][ T5888] usb 5-1: config 6 has no interface number 0 [ 320.636506][ T5888] usb 5-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 320.673429][ T5888] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 320.690375][ T5888] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 320.690872][ T5883] usb 4-1: device descriptor read/64, error -71 [ 320.719157][ T5888] usb 5-1: Product: syz [ 320.729257][ T5888] usb 5-1: Manufacturer: syz [ 320.739351][ T5888] usb 5-1: SerialNumber: syz [ 320.758544][ T5888] hso 5-1:6.2: Failed to find INT IN ep [ 320.820450][ T42] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 320.965841][ T5888] usb 5-1: USB disconnect, device number 45 [ 320.970507][ T5883] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 320.985538][ T42] usb 3-1: device descriptor read/64, error -71 [ 321.100565][ T42] usb usb3-port1: attempt power cycle [ 321.120377][ T5883] usb 4-1: device descriptor read/64, error -71 [ 321.230522][ T5883] usb usb4-port1: attempt power cycle [ 321.470389][ T42] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 321.515423][ T42] usb 3-1: device descriptor read/8, error -71 [ 321.590397][ T5883] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 321.610832][ T5883] usb 4-1: device descriptor read/8, error -71 [ 321.783952][ T42] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 321.910814][ T42] usb 3-1: device descriptor read/8, error -71 [ 321.941227][ T5883] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 321.980801][ T5883] usb 4-1: device descriptor read/8, error -71 [ 322.025511][ T9838] xt_hashlimit: size too large, truncated to 1048576 [ 322.041256][ T42] usb usb3-port1: unable to enumerate USB device [ 322.090864][ T5883] usb usb4-port1: unable to enumerate USB device [ 322.364587][ T9846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.964'. [ 322.375903][ T9846] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 325.084602][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 325.084614][ T29] audit: type=1400 audit(1772342952.173:884): avc: denied { kexec_image_load } for pid=9860 comm="syz.2.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 325.152099][ T9866] FAULT_INJECTION: forcing a failure. [ 325.152099][ T9866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.165631][ T9866] CPU: 1 UID: 0 PID: 9866 Comm: syz.1.969 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.165649][ T9866] Tainted: [L]=SOFTLOCKUP [ 325.165653][ T9866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.165659][ T9866] Call Trace: [ 325.165663][ T9866] [ 325.165667][ T9866] dump_stack_lvl+0x100/0x190 [ 325.165690][ T9866] should_fail_ex.cold+0x5/0xa [ 325.165705][ T9866] _copy_to_user+0x32/0xd0 [ 325.165723][ T9866] simple_read_from_buffer+0xcb/0x170 [ 325.165742][ T9866] proc_fail_nth_read+0x1af/0x230 [ 325.165758][ T9866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.165774][ T9866] ? rw_verify_area+0xce/0x6d0 [ 325.165788][ T9866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.165802][ T9866] vfs_read+0x1e4/0xb30 [ 325.165820][ T9866] ? __pfx_vfs_read+0x10/0x10 [ 325.165835][ T9866] ? __fget_files+0x215/0x3d0 [ 325.165849][ T9866] ? __fget_files+0x21f/0x3d0 [ 325.165863][ T9866] ksys_read+0x12a/0x250 [ 325.165878][ T9866] ? __pfx_ksys_read+0x10/0x10 [ 325.165898][ T9866] do_syscall_64+0x106/0xf80 [ 325.165910][ T9866] ? clear_bhb_loop+0x40/0x90 [ 325.165923][ T9866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.165935][ T9866] RIP: 0033:0x7fb31ef5cfce [ 325.165944][ T9866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 325.165955][ T9866] RSP: 002b:00007fb31fe0afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.165966][ T9866] RAX: ffffffffffffffda RBX: 00007fb31fe0b6c0 RCX: 00007fb31ef5cfce [ 325.165978][ T9866] RDX: 000000000000000f RSI: 00007fb31fe0b0a0 RDI: 0000000000000004 [ 325.165984][ T9866] RBP: 00007fb31fe0b090 R08: 0000000000000000 R09: 0000000000000000 [ 325.165990][ T9866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.165997][ T9866] R13: 00007fb31f216038 R14: 00007fb31f215fa0 R15: 00007ffd46ce13f8 [ 325.166012][ T9866] [ 325.632894][ T29] audit: type=1400 audit(1772342952.713:885): avc: denied { getopt } for pid=9862 comm="syz.4.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 325.697297][ T9874] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 325.705209][ T29] audit: type=1400 audit(1772342952.713:886): avc: denied { connect } for pid=9862 comm="syz.4.968" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 325.733540][ T9874] team0: Port device batadv1 added [ 325.738743][ T29] audit: type=1400 audit(1772342952.713:887): avc: denied { name_connect } for pid=9862 comm="syz.4.968" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 325.949443][ T29] audit: type=1400 audit(1772342952.783:888): avc: denied { ioctl } for pid=9862 comm="syz.4.968" path="socket:[26634]" dev="sockfs" ino=26634 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.630796][ T9877] netlink: 'syz.3.971': attribute type 4 has an invalid length. [ 327.179544][ T29] audit: type=1400 audit(1772342954.243:889): avc: denied { sqpoll } for pid=9862 comm="syz.4.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 327.468647][ T29] audit: type=1400 audit(1772342954.553:890): avc: denied { write } for pid=9862 comm="syz.4.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 327.978617][ T29] audit: type=1400 audit(1772342955.063:891): avc: denied { ioctl } for pid=9885 comm="syz.3.974" path="socket:[26661]" dev="sockfs" ino=26661 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 328.571985][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 328.581654][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 328.590731][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 328.600216][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 328.608495][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 329.041010][ T29] audit: type=1400 audit(1772342956.133:892): avc: denied { mounton } for pid=9891 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 329.212308][ T9897] FAULT_INJECTION: forcing a failure. [ 329.212308][ T9897] name failslab, interval 1, probability 0, space 0, times 0 [ 329.242189][ T29] audit: type=1400 audit(1772342956.323:893): avc: denied { connect } for pid=9894 comm="syz.1.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 329.252827][ T9897] CPU: 1 UID: 0 PID: 9897 Comm: syz.3.975 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.252852][ T9897] Tainted: [L]=SOFTLOCKUP [ 329.252858][ T9897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 329.252866][ T9897] Call Trace: [ 329.252872][ T9897] [ 329.252878][ T9897] dump_stack_lvl+0x100/0x190 [ 329.252907][ T9897] should_fail_ex.cold+0x5/0xa [ 329.252927][ T9897] should_failslab+0xc2/0x120 [ 329.252951][ T9897] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 329.252971][ T9897] ? skb_clone+0x190/0x400 [ 329.252990][ T9897] skb_clone+0x190/0x400 [ 329.253006][ T9897] netlink_deliver_tap+0xaed/0xcc0 [ 329.253027][ T9897] netlink_unicast+0x650/0x870 [ 329.253048][ T9897] ? __pfx_netlink_unicast+0x10/0x10 [ 329.253074][ T9897] netlink_sendmsg+0x8b0/0xda0 [ 329.253095][ T9897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.253111][ T9897] ? __might_fault+0xa0/0x140 [ 329.253138][ T9897] ____sys_sendmsg+0xa54/0xc30 [ 329.253159][ T9897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.253189][ T9897] ___sys_sendmsg+0x190/0x1e0 [ 329.253210][ T9897] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.253256][ T9897] __sys_sendmsg+0x170/0x220 [ 329.253272][ T9897] ? __pfx___sys_sendmsg+0x10/0x10 [ 329.253301][ T9897] do_syscall_64+0x106/0xf80 [ 329.253316][ T9897] ? clear_bhb_loop+0x40/0x90 [ 329.253336][ T9897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.253351][ T9897] RIP: 0033:0x7f6c2739c799 [ 329.253364][ T9897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.253378][ T9897] RSP: 002b:00007f6c281f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.253393][ T9897] RAX: ffffffffffffffda RBX: 00007f6c27615fa0 RCX: 00007f6c2739c799 [ 329.253403][ T9897] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 329.253412][ T9897] RBP: 00007f6c281f9090 R08: 0000000000000000 R09: 0000000000000000 [ 329.253421][ T9897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.253429][ T9897] R13: 00007f6c27616038 R14: 00007f6c27615fa0 R15: 00007ffdb1213da8 [ 329.253451][ T9897] [ 329.999452][ T9910] netlink: 'syz.1.980': attribute type 21 has an invalid length. [ 330.009889][ T9910] netlink: 156 bytes leftover after parsing attributes in process `syz.1.980'. [ 330.328475][ T9891] chnl_net:caif_netlink_parms(): no params data found [ 330.446166][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 330.446292][ T29] audit: type=1400 audit(1772342957.533:896): avc: denied { append } for pid=9913 comm="syz.4.981" name="event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 331.061985][ T5815] Bluetooth: hci5: command tx timeout [ 331.408765][ T9891] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.766897][ T29] audit: type=1400 audit(1772342958.513:897): avc: denied { setopt } for pid=9930 comm="syz.3.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 331.831171][ T29] audit: type=1400 audit(1772342958.513:898): avc: denied { ioctl } for pid=9930 comm="syz.3.983" path="socket:[26840]" dev="sockfs" ino=26840 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 331.831310][ T9891] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.880125][ T29] audit: type=1400 audit(1772342958.513:899): avc: denied { getopt } for pid=9930 comm="syz.3.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 331.880272][ T9891] bridge_slave_0: entered allmulticast mode [ 332.000368][ T5867] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 332.013550][ T9891] bridge_slave_0: entered promiscuous mode [ 332.024811][ T9891] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.079913][ T9891] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.094393][ T9891] bridge_slave_1: entered allmulticast mode [ 333.084237][ T29] audit: type=1400 audit(1772342959.993:900): avc: denied { module_load } for pid=9944 comm="syz.3.986" path="/sys/power/pm_wakeup_irq" dev="sysfs" ino=1415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 333.093648][ T9891] bridge_slave_1: entered promiscuous mode [ 333.120285][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 333.132022][ T5867] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 333.152083][ T5815] Bluetooth: hci5: command tx timeout [ 333.168314][ T5867] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.183866][ T9940] syz_tun: entered promiscuous mode [ 333.192218][ T9940] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 333.246196][ T5867] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.276907][ T9950] FAULT_INJECTION: forcing a failure. [ 333.276907][ T9950] name failslab, interval 1, probability 0, space 0, times 0 [ 333.280722][ T5867] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.316904][ T9891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.330581][ T5867] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.335947][ T9950] CPU: 1 UID: 0 PID: 9950 Comm: syz.1.988 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.335972][ T9950] Tainted: [L]=SOFTLOCKUP [ 333.335977][ T9950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 333.335986][ T9950] Call Trace: [ 333.335992][ T9950] [ 333.335997][ T9950] dump_stack_lvl+0x100/0x190 [ 333.336026][ T9950] should_fail_ex.cold+0x5/0xa [ 333.336046][ T9950] should_failslab+0xc2/0x120 [ 333.336070][ T9950] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 333.336090][ T9950] ? skb_clone+0x190/0x400 [ 333.336109][ T9950] skb_clone+0x190/0x400 [ 333.336125][ T9950] netlink_deliver_tap+0xaed/0xcc0 [ 333.336146][ T9950] netlink_unicast+0x650/0x870 [ 333.336167][ T9950] ? __pfx_netlink_unicast+0x10/0x10 [ 333.336193][ T9950] netlink_sendmsg+0x8b0/0xda0 [ 333.336214][ T9950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.336230][ T9950] ? __might_fault+0xa0/0x140 [ 333.336256][ T9950] ____sys_sendmsg+0xa54/0xc30 [ 333.336278][ T9950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.336307][ T9950] ___sys_sendmsg+0x190/0x1e0 [ 333.336328][ T9950] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.336375][ T9950] __sys_sendmsg+0x170/0x220 [ 333.336391][ T9950] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.336420][ T9950] do_syscall_64+0x106/0xf80 [ 333.336437][ T9950] ? clear_bhb_loop+0x40/0x90 [ 333.336456][ T9950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.336472][ T9950] RIP: 0033:0x7fb31ef9c799 [ 333.336484][ T9950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.336498][ T9950] RSP: 002b:00007fb31fe0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.336514][ T9950] RAX: ffffffffffffffda RBX: 00007fb31f215fa0 RCX: 00007fb31ef9c799 [ 333.336525][ T9950] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 333.336533][ T9950] RBP: 00007fb31fe0b090 R08: 0000000000000000 R09: 0000000000000000 [ 333.336542][ T9950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.336551][ T9950] R13: 00007fb31f216038 R14: 00007fb31f215fa0 R15: 00007ffd46ce13f8 [ 333.336572][ T9950] [ 333.557303][ T9891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.578842][ T9891] team0: Port device team_slave_0 added [ 333.585814][ T9891] team0: Port device team_slave_1 added [ 333.612423][ T9891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.619378][ T9891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.645694][ T9891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.657287][ T9891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.664258][ T9891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.691546][ T9891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.729512][ T9891] hsr_slave_0: entered promiscuous mode [ 333.735744][ T9891] hsr_slave_1: entered promiscuous mode [ 333.741631][ T9891] debugfs: 'hsr0' already exists in 'hsr' [ 333.747400][ T9891] Cannot create hsr debugfs directory [ 333.797894][ T5867] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 333.814979][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.039450][ T9891] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 334.074516][ T5867] usb 5-1: usb_control_msg returned -32 [ 334.080239][ T5867] usbtmc 5-1:16.0: can't read capabilities [ 334.089708][ T9891] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 334.125611][ T9891] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 334.130532][ T42] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 334.149316][ T9891] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 334.322282][ T9960] xt_hashlimit: size too large, truncated to 1048576 [ 334.337736][ T9891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.369007][ T9891] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.382614][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.389845][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.414994][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.422165][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.436152][ T29] audit: type=1400 audit(1772342961.513:901): avc: denied { write } for pid=9936 comm="syz.4.984" name="usbtmc0" dev="devtmpfs" ino=3259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 334.469362][ T42] usb 2-1: no configurations [ 334.474317][ T42] usb 2-1: can't read configurations, error -22 [ 334.492811][ T9891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.503229][ T9891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.565038][ T29] audit: type=1400 audit(1772342961.653:902): avc: denied { connect } for pid=9969 comm="syz.3.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 334.565519][ T9970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9970 comm=syz.3.991 [ 334.613958][ T42] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 334.721137][ T29] audit: type=1400 audit(1772342961.803:903): avc: denied { write } for pid=9980 comm="syz.3.993" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 334.747629][ T29] audit: type=1400 audit(1772342961.803:904): avc: denied { open } for pid=9980 comm="syz.3.993" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 334.769862][ T9891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.779056][ T29] audit: type=1400 audit(1772342961.803:905): avc: denied { ioctl } for pid=9980 comm="syz.3.993" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 334.781463][ T42] usb 2-1: no configurations [ 334.781480][ T42] usb 2-1: can't read configurations, error -22 [ 334.781737][ T42] usb usb2-port1: attempt power cycle [ 335.092951][ T9891] veth0_vlan: entered promiscuous mode [ 335.132515][ T9891] veth1_vlan: entered promiscuous mode [ 335.140957][ T42] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 335.165221][ T9891] veth0_macvtap: entered promiscuous mode [ 335.171800][ T42] usb 2-1: no configurations [ 335.182618][ T42] usb 2-1: can't read configurations, error -22 [ 335.193119][ T9891] veth1_macvtap: entered promiscuous mode [ 335.221001][ T5815] Bluetooth: hci5: command tx timeout [ 335.263690][ T9999] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 335.284089][ T9995] team0: Port device dummy0 removed [ 335.292359][ T9995] bridge_slave_0: left allmulticast mode [ 335.297982][ T9995] bridge_slave_0: left promiscuous mode [ 335.305094][ T9995] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.332760][ T9995] bridge_slave_1: left allmulticast mode [ 335.348550][ T42] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 335.350948][ T9995] bridge_slave_1: left promiscuous mode [ 335.363845][ T9995] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.373866][ T42] usb 2-1: no configurations [ 335.379208][ T9995] bond0: (slave bond_slave_0): Releasing backup interface [ 335.381074][ T42] usb 2-1: can't read configurations, error -22 [ 335.394723][ T42] usb usb2-port1: unable to enumerate USB device [ 335.404783][ T9995] bond0: (slave bond_slave_1): Releasing backup interface [ 335.422614][ T9995] team0: Port device team_slave_0 removed [ 335.433405][ T9995] team0: Port device team_slave_1 removed [ 335.442797][ T9995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.450205][ T9995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.465947][ T9995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.529388][ T5874] usb 5-1: USB disconnect, device number 46 [ 335.543315][ T9995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.557256][ T9995] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 335.611576][ T9891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.657184][ T9891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.690012][ T1134] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.727426][ T1134] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.742610][ T1134] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.752503][ T1134] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.764841][T10008] x_tables: duplicate underflow at hook 1 [ 335.834039][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.850061][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.907768][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.916962][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.940018][ T29] audit: type=1400 audit(1772342963.023:906): avc: denied { mounton } for pid=9891 comm="syz-executor" path="/root/syzkaller.akSvry/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 336.001964][ T29] audit: type=1400 audit(1772342963.023:907): avc: denied { mount } for pid=9891 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 336.133477][ T29] audit: type=1400 audit(1772342963.023:908): avc: denied { mounton } for pid=9891 comm="syz-executor" path="/root/syzkaller.akSvry/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 336.183182][ T29] audit: type=1400 audit(1772342963.023:909): avc: denied { mounton } for pid=9891 comm="syz-executor" path="/root/syzkaller.akSvry/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 336.519447][ T29] audit: type=1400 audit(1772342963.063:910): avc: denied { mounton } for pid=9891 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 336.655030][ T29] audit: type=1400 audit(1772342963.063:911): avc: denied { mount } for pid=9891 comm="syz-executor" name="/" dev="gadgetfs" ino=6887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 336.874195][ T29] audit: type=1400 audit(1772342963.063:912): avc: denied { mount } for pid=9891 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 337.140892][ T29] audit: type=1400 audit(1772342963.063:913): avc: denied { mounton } for pid=9891 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 337.173924][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'. [ 337.217402][ T3607] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.239284][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'. [ 337.248618][ T3607] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.279934][ T3607] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.301407][ T5815] Bluetooth: hci5: command tx timeout [ 337.310189][T10024] overlayfs: overlapping lowerdir path [ 337.324874][ T3607] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.371861][ T29] audit: type=1400 audit(1772342964.463:914): avc: denied { create } for pid=10013 comm="syz.2.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 337.580763][ T5874] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 337.752524][ T5874] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 337.762747][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.776732][ T5874] usb 2-1: config 0 descriptor?? [ 337.810044][ T5874] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 338.009083][ T5874] gp8psk: usb in 128 operation failed. [ 338.222494][ T5874] gp8psk: usb in 146 operation failed. [ 338.238217][ T5874] gp8psk: failed to get FW version [ 338.243608][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 338.252340][ T5874] gp8psk: usb in 149 operation failed. [ 338.258181][ T5874] gp8psk: failed to get FPGA version [ 338.268660][ T5874] gp8psk: usb in 138 operation failed. [ 338.289933][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 338.309955][ T5874] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 338.366858][ T5874] usb 2-1: media controller created [ 338.490760][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.538958][ T9] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 338.548150][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.585929][ T9] usb 6-1: config 0 descriptor?? [ 338.608153][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 338.626494][ T5874] gp8psk_fe: Frontend attached [ 338.635322][ T5874] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 338.648579][ T5874] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 338.692248][ T5874] gp8psk: usb in 138 operation failed. [ 338.697880][ T5874] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 338.710794][ T5874] gp8psk: found Genpix USB device pID = 203 (hex) [ 338.731492][ T5874] usb 2-1: USB disconnect, device number 46 [ 339.070681][ T9] gp8psk: usb in 128 operation failed. [ 339.216834][ T29] audit: type=1400 audit(1772342966.273:915): avc: denied { watch } for pid=10045 comm="syz.2.1009" path="/219/blkio.throttle.io_serviced" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 339.817817][ T9] gp8psk: usb in 137 operation failed. [ 339.859230][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 339.896545][ T9] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 339.920419][ T9] usb 6-1: media controller created [ 339.962632][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 341.069458][ T5874] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 341.090974][ T9] gp8psk_fe: Frontend attached [ 341.095794][ T9] usb 6-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 341.324419][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 341.436576][ T9] gp8psk: usb in 138 operation failed. [ 341.450563][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 341.480365][ T9] gp8psk: found Genpix USB device pID = 203 (hex) [ 341.535189][ T9] usb 6-1: USB disconnect, device number 2 [ 341.586576][T10068] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 341.671844][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 341.849488][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 341.849503][ T29] audit: type=1400 audit(1772342968.933:917): avc: denied { search } for pid=5474 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.887459][ T29] audit: type=1400 audit(1772342968.973:918): avc: denied { search } for pid=5474 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.909902][ T29] audit: type=1400 audit(1772342968.973:919): avc: denied { search } for pid=5474 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.975930][T10083] mkiss: ax0: crc mode is auto. [ 341.983542][ T29] audit: type=1400 audit(1772342968.973:920): avc: denied { read } for pid=5474 comm="dhcpcd" name="n114" dev="tmpfs" ino=6390 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 342.013384][T10089] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1019'. [ 342.029780][ T5874] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 342.099322][ T29] audit: type=1400 audit(1772342968.973:921): avc: denied { open } for pid=5474 comm="dhcpcd" path="/run/udev/data/n114" dev="tmpfs" ino=6390 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 342.137438][T10091] FAULT_INJECTION: forcing a failure. [ 342.137438][T10091] name failslab, interval 1, probability 0, space 0, times 0 [ 342.140336][ T29] audit: type=1400 audit(1772342968.973:922): avc: denied { getattr } for pid=5474 comm="dhcpcd" path="/run/udev/data/n114" dev="tmpfs" ino=6390 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 342.213057][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.2.1021 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.213084][T10091] Tainted: [L]=SOFTLOCKUP [ 342.213090][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.213098][T10091] Call Trace: [ 342.213102][T10091] [ 342.213106][T10091] dump_stack_lvl+0x100/0x190 [ 342.213130][T10091] should_fail_ex.cold+0x5/0xa [ 342.213145][T10091] should_failslab+0xc2/0x120 [ 342.213163][T10091] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 342.213179][T10091] ? xfrm_add_sa+0x219d/0x5e80 [ 342.213192][T10091] ? lockdep_init_map_type+0x5c/0x250 [ 342.213205][T10091] kmemdup_noprof+0x29/0x60 [ 342.213222][T10091] xfrm_add_sa+0x219d/0x5e80 [ 342.213239][T10091] ? __pfx_xfrm_add_sa+0x10/0x10 [ 342.213253][T10091] ? __nla_parse+0x40/0x60 [ 342.213265][T10091] ? __pfx_xfrm_add_sa+0x10/0x10 [ 342.213278][T10091] xfrm_user_rcv_msg+0x483/0xc00 [ 342.213293][T10091] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 342.213305][T10091] ? kfree_skbmem+0x19f/0x210 [ 342.213320][T10091] ? consume_skb+0xd6/0x110 [ 342.213347][T10091] ? trace_contention_end+0x140/0x180 [ 342.213359][T10091] ? __mutex_lock+0x26a/0x1b90 [ 342.213374][T10091] netlink_rcv_skb+0x159/0x420 [ 342.213387][T10091] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 342.213400][T10091] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.213422][T10091] xfrm_netlink_rcv+0x71/0x90 [ 342.213433][T10091] netlink_unicast+0x5aa/0x870 [ 342.213448][T10091] ? __pfx_netlink_unicast+0x10/0x10 [ 342.213467][T10091] netlink_sendmsg+0x8b0/0xda0 [ 342.213482][T10091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.213494][T10091] ? __might_fault+0xa0/0x140 [ 342.213513][T10091] ____sys_sendmsg+0xa54/0xc30 [ 342.213529][T10091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.213549][T10091] ___sys_sendmsg+0x190/0x1e0 [ 342.213565][T10091] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.213597][T10091] __sys_sendmsg+0x170/0x220 [ 342.213608][T10091] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.213627][T10091] do_syscall_64+0x106/0xf80 [ 342.213638][T10091] ? clear_bhb_loop+0x40/0x90 [ 342.213651][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.213663][T10091] RIP: 0033:0x7f9f1c99c799 [ 342.213673][T10091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.213683][T10091] RSP: 002b:00007f9f1d93b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.213694][T10091] RAX: ffffffffffffffda RBX: 00007f9f1cc15fa0 RCX: 00007f9f1c99c799 [ 342.213701][T10091] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 342.213708][T10091] RBP: 00007f9f1d93b090 R08: 0000000000000000 R09: 0000000000000000 [ 342.213718][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.213724][T10091] R13: 00007f9f1cc16038 R14: 00007f9f1cc15fa0 R15: 00007ffedf970f18 [ 342.213738][T10091] [ 342.647845][ T5874] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 342.657402][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.666685][ T5874] usb 5-1: Product: syz [ 342.684830][ T5874] usb 5-1: Manufacturer: syz [ 342.689455][ T5874] usb 5-1: SerialNumber: syz [ 342.782198][ T5874] usb 5-1: config 0 descriptor?? [ 343.041469][ T5924] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 343.901706][ T5874] usb 5-1: Firmware version (0.0) predates our first public release. [ 343.909810][ T5874] usb 5-1: Please update to version 0.2 or newer [ 343.933794][ T5874] usb 5-1: Firmware: build ¶ [ 344.195815][ T5874] usb 5-1: USB disconnect, device number 47 [ 344.220346][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.270386][ T5924] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 344.279446][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.304668][T10103] block device autoloading is deprecated and will be removed. [ 344.312710][ T29] audit: type=1400 audit(1772342971.373:923): avc: denied { create } for pid=10094 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 344.360772][ T5924] usb 3-1: config 0 descriptor?? [ 344.373143][ T5924] pwc: Askey VC010 type 2 USB webcam detected. [ 344.439636][T10117] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1027'. [ 344.469530][ T29] audit: type=1400 audit(1772342971.553:924): avc: denied { write } for pid=10116 comm="syz.5.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 344.545203][ T29] audit: type=1400 audit(1772342971.603:925): avc: denied { read write } for pid=10116 comm="syz.5.1027" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 344.624554][ T29] audit: type=1400 audit(1772342971.603:926): avc: denied { open } for pid=10116 comm="syz.5.1027" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 344.665573][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 344.722833][T10124] tipc: Can't bind to reserved service type 0 [ 344.891994][ T6198] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 344.937835][ T5924] pwc: recv_control_msg error -32 req 02 val 2b00 [ 344.945818][ T5924] pwc: recv_control_msg error -32 req 02 val 2700 [ 344.953529][ T5924] pwc: recv_control_msg error -32 req 02 val 2c00 [ 344.963576][ T5924] pwc: recv_control_msg error -32 req 04 val 1000 [ 344.972766][ T5924] pwc: recv_control_msg error -32 req 04 val 1300 [ 344.979814][ T5924] pwc: recv_control_msg error -32 req 04 val 1400 [ 345.629838][ T5924] pwc: recv_control_msg error -32 req 02 val 2000 [ 345.716925][ T5924] pwc: recv_control_msg error -32 req 02 val 2100 [ 345.855220][ T5924] pwc: recv_control_msg error -32 req 04 val 1500 [ 345.872364][ T5924] pwc: recv_control_msg error -32 req 02 val 2500 [ 345.883818][T10137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=10137 comm=syz.4.1034 [ 347.720511][ T5883] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 347.942984][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 347.978475][T10154] loop2: detected capacity change from 0 to 7 [ 347.995781][ T5883] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.017266][T10154] Dev loop2: unable to read RDB block 7 [ 348.028327][ T5883] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.040390][T10154] loop2: unable to read partition table [ 348.046368][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 348.056089][T10154] loop2: partition table beyond EOD, truncated [ 348.063617][ T5883] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 348.076681][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.091994][T10154] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 348.129679][ T5179] Dev loop2: unable to read RDB block 7 [ 348.150422][ T5179] loop2: unable to read partition table [ 348.156265][ T5179] loop2: partition table beyond EOD, truncated [ 348.173534][ T5883] usb 5-1: config 0 descriptor?? [ 348.485594][T10165] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1042'. [ 348.512389][ T5924] pwc: recv_control_msg error -71 req 02 val 2600 [ 348.534806][ T5924] pwc: recv_control_msg error -71 req 02 val 2900 [ 348.580082][ T5924] pwc: recv_control_msg error -71 req 02 val 2800 [ 348.590386][ T5924] pwc: recv_control_msg error -71 req 04 val 1100 [ 348.604113][ T5924] pwc: recv_control_msg error -71 req 04 val 1200 [ 348.639557][ T5883] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 348.666270][ T5924] pwc: Registered as video103. [ 348.673947][ T5883] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 348.696679][ T5924] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 348.717034][ T5883] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 348.744607][ T5883] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 348.769363][ T5924] usb 3-1: USB disconnect, device number 31 [ 348.908071][ T5883] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 349.096600][ T5883] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 349.187810][T10167] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1043'. [ 349.232211][ T5883] usb 5-1: USB disconnect, device number 48 [ 349.241927][T10167] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1043'. [ 349.257392][T10176] fido_id[10176]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 349.467175][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 349.467190][ T29] audit: type=1400 audit(1772342976.553:933): avc: denied { setopt } for pid=10179 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 349.531923][ T5924] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 349.798935][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 349.826056][ T5924] usb 3-1: unable to get BOS descriptor or descriptor too short [ 349.838236][ T5924] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 349.851883][ T5924] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 349.909222][T10195] vcan1: entered promiscuous mode [ 349.916562][T10195] team0: Device vcan1 is up. Set it down before adding it as a team port [ 350.244869][ T5924] usb 3-1: config 13 has no interface number 0 [ 350.261474][ T5924] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 350.284352][ T5924] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.349037][ T5924] usb 3-1: config 13 interface 50 has no altsetting 0 [ 350.370822][ T5924] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 350.380041][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.424445][ T5924] usb 3-1: Product: syz [ 350.428655][ T5924] usb 3-1: Manufacturer: syz [ 350.469168][ T5924] usb 3-1: SerialNumber: syz [ 350.491287][T10169] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 350.526430][ T29] audit: type=1400 audit(1772342977.613:934): avc: denied { block_suspend } for pid=10200 comm="syz.1.1051" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 350.583639][ T29] audit: type=1400 audit(1772342977.613:935): avc: denied { connect } for pid=10200 comm="syz.1.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 350.640427][ T42] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 350.715260][ T5924] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.745457][ T5924] usb 3-1: MIDIStreaming interface descriptor not found [ 350.811869][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 350.833789][ T42] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 350.862490][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 350.874544][ T5924] usb 3-1: USB disconnect, device number 32 [ 351.204540][ T42] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 351.267868][ T42] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 351.345104][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.422073][ T42] usb 4-1: Product: syz [ 351.426534][ T42] usb 4-1: Manufacturer: syz [ 351.436172][ T42] usb 4-1: SerialNumber: syz [ 351.464385][ T42] usb 4-1: config 0 descriptor?? [ 351.498158][ T42] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 351.806826][ T29] audit: type=1400 audit(1772342978.873:936): avc: denied { write } for pid=10212 comm="syz.4.1054" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 351.960427][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 352.661043][ T42] scsi host1: usb-storage 4-1:0.0 [ 352.714281][ T29] audit: type=1400 audit(1772342978.873:937): avc: denied { open } for pid=10212 comm="syz.4.1054" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 352.870403][ T29] audit: type=1400 audit(1772342978.883:938): avc: denied { ioctl } for pid=10212 comm="syz.4.1054" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 352.912606][ T9] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 352.923413][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.996430][T10225] xt_TCPMSS: Only works on TCP SYN packets [ 353.191732][T10226] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1055'. [ 353.231770][ T29] audit: type=1400 audit(1772342980.263:939): avc: denied { read } for pid=10221 comm="syz.1.1055" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 353.270544][ T42] usb 4-1: USB disconnect, device number 48 [ 353.290948][ T9] usb 3-1: config 0 descriptor?? [ 353.339776][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 353.664425][ T5924] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 354.300781][ T5874] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 354.302342][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 354.341410][ T5924] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 354.349549][ T5924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 354.409550][ T9] gp8psk: usb in 137 operation failed. [ 354.449637][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 354.482138][ T5874] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.500929][ T9] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 354.510001][ T5874] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 354.529583][ T9] usb 3-1: media controller created [ 354.546071][ T5874] usb 4-1: language id specifier not provided by device, defaulting to English [ 354.569299][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.605240][ T5874] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 354.629533][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.639623][ T9] gp8psk_fe: Frontend attached [ 354.648290][ T9] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 354.667375][ T5874] usb 4-1: Manufacturer: ‰ [ 354.685690][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 354.693403][ T5924] usb 5-1: config 0 has no interface number 0 [ 354.695543][ T5874] usb 4-1: SerialNumber: syz [ 354.710118][T10243] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 354.718820][ T5924] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 354.728395][ T29] audit: type=1400 audit(1772342981.803:940): avc: denied { read open } for pid=10244 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.764533][T10243] team0: Port device batadv1 added [ 354.779932][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.788851][ T5874] usb 4-1: config 0 descriptor?? [ 354.790373][ T5924] usb 5-1: Product: syz [ 354.938734][ T5924] usb 5-1: Manufacturer: syz [ 354.959582][ T9] gp8psk: usb in 138 operation failed. [ 354.960381][ T5924] usb 5-1: SerialNumber: syz [ 354.969152][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 354.969694][ T29] audit: type=1400 audit(1772342981.803:941): avc: denied { getattr } for pid=10244 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.003366][ T9] gp8psk: found Genpix USB device pID = 203 (hex) [ 355.008466][ T5924] usb 5-1: config 0 descriptor?? [ 355.101091][ T9] usb 3-1: USB disconnect, device number 33 [ 355.151062][ T5924] viperboard 5-1:0.61: version 0.00 found at bus 005 address 049 [ 355.215306][ T5924] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 355.353552][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 355.385301][ T5924] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 355.947456][T10256] FAULT_INJECTION: forcing a failure. [ 355.947456][T10256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.991572][ T29] audit: type=1400 audit(1772342983.083:942): avc: denied { add_name } for pid=10242 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.002037][T10256] CPU: 0 UID: 0 PID: 10256 Comm: syz.2.1060 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.002064][T10256] Tainted: [L]=SOFTLOCKUP [ 356.002069][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.002077][T10256] Call Trace: [ 356.002083][T10256] [ 356.002088][T10256] dump_stack_lvl+0x100/0x190 [ 356.002118][T10256] should_fail_ex.cold+0x5/0xa [ 356.002137][T10256] _copy_from_user+0x2e/0xd0 [ 356.002159][T10256] copy_mount_options+0x76/0x190 [ 356.002181][T10256] __x64_sys_mount+0x1ab/0x310 [ 356.002200][T10256] ? __pfx___x64_sys_mount+0x10/0x10 [ 356.002224][T10256] do_syscall_64+0x106/0xf80 [ 356.002239][T10256] ? clear_bhb_loop+0x40/0x90 [ 356.002258][T10256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.002273][T10256] RIP: 0033:0x7f9f1c99c799 [ 356.002286][T10256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.002306][T10256] RSP: 002b:00007f9f1d93b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 356.002321][T10256] RAX: ffffffffffffffda RBX: 00007f9f1cc15fa0 RCX: 00007f9f1c99c799 [ 356.002331][T10256] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 356.002340][T10256] RBP: 00007f9f1d93b090 R08: 00002000000004c0 R09: 0000000000000000 [ 356.002349][T10256] R10: 0000000000000420 R11: 0000000000000246 R12: 0000000000000001 [ 356.002358][T10256] R13: 00007f9f1cc16038 R14: 00007f9f1cc15fa0 R15: 00007ffedf970f18 [ 356.002378][T10256] [ 356.003839][T10256] tmpfs: Cannot enable quota on remount [ 356.253833][ T29] audit: type=1400 audit(1772342983.083:943): avc: denied { create } for pid=10242 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 356.313313][ T29] audit: type=1400 audit(1772342983.113:944): avc: denied { write } for pid=10242 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=6573 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 356.389384][ T29] audit: type=1400 audit(1772342983.113:945): avc: denied { append } for pid=10242 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=6573 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 356.469670][ T29] audit: type=1400 audit(1772342983.443:946): avc: denied { remove_name } for pid=10259 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=6573 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.533887][T10232] orangefs_mount: mount request failed with -4 [ 356.568091][ T5924] usb 4-1: USB disconnect, device number 49 [ 356.584338][ T29] audit: type=1400 audit(1772342983.443:947): avc: denied { unlink } for pid=10259 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=6573 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 356.698025][ T29] audit: type=1400 audit(1772342983.783:948): avc: denied { create } for pid=10266 comm="syz.5.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 356.732927][ T29] audit: type=1400 audit(1772342983.813:949): avc: denied { lock } for pid=10266 comm="syz.5.1061" path="socket:[28806]" dev="sockfs" ino=28806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 356.844922][T10270] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 356.885494][ T42] usb 5-1: USB disconnect, device number 49 [ 357.821998][T10284] fuse: Unknown parameter 'uootmode' [ 357.853383][ T42] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 358.027996][T10287] tmpfs: Cannot enable quota on remount [ 358.040388][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 358.058922][ T42] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 358.068302][ T42] usb 5-1: config 0 has no interface number 0 [ 358.078569][ T42] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.089905][ T42] usb 5-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 358.103121][ T42] usb 5-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 358.133307][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.164135][ T42] usb 5-1: config 0 descriptor?? [ 360.242291][ T42] usbhid 5-1:0.4: can't add hid device: -71 [ 360.248281][ T42] usbhid 5-1:0.4: probe with driver usbhid failed with error -71 [ 360.324233][ T42] usb 5-1: USB disconnect, device number 50 [ 360.367249][ T29] audit: type=1400 audit(1772342987.443:950): avc: denied { write } for pid=10291 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 360.485670][ T29] audit: type=1400 audit(1772342987.573:951): avc: denied { name_connect } for pid=10306 comm="syz.2.1071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 360.646314][ T29] audit: type=1400 audit(1772342987.703:952): avc: denied { listen } for pid=10306 comm="syz.2.1071" laddr=::ffff:172.20.20.170 lport=51600 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 360.997008][ T29] audit: type=1400 audit(1772342987.723:953): avc: denied { create } for pid=10307 comm="syz.3.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 361.392197][ T29] audit: type=1400 audit(1772342987.733:954): avc: denied { read } for pid=10307 comm="syz.3.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 361.468725][ T29] audit: type=1400 audit(1772342988.033:955): avc: denied { mount } for pid=10302 comm="syz.4.1069" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 361.511587][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 361.563984][ T29] audit: type=1400 audit(1772342988.033:956): avc: denied { mounton } for pid=10302 comm="syz.4.1069" path="/72/file0" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 361.664311][ T9] usb 5-1: device descriptor read/64, error -71 [ 361.840476][ T29] audit: type=1400 audit(1772342988.163:957): avc: denied { lock } for pid=10319 comm="syz.1.1072" path="socket:[28890]" dev="sockfs" ino=28890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 361.974627][ T5874] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 362.056775][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 362.309391][ T29] audit: type=1400 audit(1772342988.233:958): avc: denied { accept } for pid=10306 comm="syz.2.1071" laddr=::ffff:172.20.20.170 lport=51600 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 362.431050][ T9] usb 5-1: device descriptor read/64, error -71 [ 362.477417][ T5874] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 362.536118][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.560600][ T9] usb usb5-port1: attempt power cycle [ 362.582917][ T5874] usb 6-1: config 0 descriptor?? [ 362.611201][ T29] audit: type=1400 audit(1772342988.253:959): avc: denied { read } for pid=10302 comm="syz.4.1069" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 362.678567][ T42] libceph: connect (1)[c::]:6789 error -101 [ 362.694683][ T5874] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 362.733852][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 362.868070][T10347] ceph: No mds server is up or the cluster is laggy [ 362.970200][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 363.015115][ T9] usb 5-1: device descriptor read/8, error -71 [ 363.133391][ T5874] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 363.250552][ T42] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 363.264040][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 363.323702][ T9] usb 5-1: device descriptor read/8, error -71 [ 363.430976][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 363.431290][ T9] usb usb5-port1: unable to enumerate USB device [ 363.465176][ T42] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 363.473564][ T42] usb 4-1: config 0 has no interface number 0 [ 363.492700][ T42] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.538550][ T5874] gspca_cpia1: usb_control_msg 02, error -71 [ 363.545859][ T5874] gspca_cpia1: usb_control_msg 05, error -71 [ 363.547627][ T42] usb 4-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 363.552234][ T5874] cpia1 6-1:0.0: unexpected systemstate: 00 [ 363.575238][ T5874] usb 6-1: USB disconnect, device number 3 [ 363.632455][ T42] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 363.653737][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.689944][ T42] usb 4-1: config 0 descriptor?? [ 363.813160][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 364.053938][ T9] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 364.065141][ T9] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 364.073442][ T9] usb 5-1: Product: syz [ 364.079897][ T9] usb 5-1: Manufacturer: syz [ 364.087980][ T9] usb 5-1: SerialNumber: syz [ 364.526958][ T9] usb 5-1: config 0 descriptor?? [ 364.534440][ T9] ch341 5-1:0.0: ch341-uart converter detected [ 364.546123][ T42] logitech-djreceiver 0003:046D:C537.000B: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.3-1/input4 [ 364.625059][T10393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1083'. [ 364.729614][ T42] usb 4-1: USB disconnect, device number 50 [ 365.494584][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 365.494600][ T29] audit: type=1400 audit(1772342992.563:970): avc: denied { bind } for pid=10406 comm="syz.5.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 365.579158][ T29] audit: type=1400 audit(1772342992.583:971): avc: denied { ioctl } for pid=10406 comm="syz.5.1085" path="socket:[29053]" dev="sockfs" ino=29053 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 365.617905][T10420] mmap: syz.2.1087 (10420): VmData 37855232 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 365.631606][ T9] usb 5-1: failed to receive control message: -110 [ 365.638212][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 365.660737][ T42] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 365.850491][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 365.862215][ T42] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.873161][ T42] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 365.894974][ T42] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 365.906721][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 365.917089][ T42] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.982835][ T42] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.144948][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.480545][ T5883] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 366.587044][ T42] usb 4-1: GET_CAPABILITIES returned 0 [ 366.602856][ T42] usbtmc 4-1:16.0: can't read capabilities [ 366.615143][ T1200] usb 5-1: USB disconnect, device number 55 [ 366.631293][ T1200] ch341 5-1:0.0: device disconnected [ 366.741143][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 366.752640][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.782256][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.794100][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 366.815167][ T5883] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 366.831974][ T1200] usb 4-1: USB disconnect, device number 51 [ 366.851872][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.881231][ T5883] usb 3-1: config 0 descriptor?? [ 367.546599][ T5883] usbhid 3-1:0.0: can't add hid device: -71 [ 367.570705][ T5883] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 367.608990][ T5883] usb 3-1: USB disconnect, device number 34 [ 367.833090][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 367.904048][ T5888] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 367.916711][ T5874] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 368.010617][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 368.021965][ T9] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 368.030063][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 368.060463][ T9] usb 2-1: config 0 has no interface number 0 [ 368.071774][ T9] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 368.093076][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.108422][ T5888] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 368.119837][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 368.133489][ T9] usb 2-1: Product: syz [ 368.137665][ T9] usb 2-1: Manufacturer: syz [ 368.150789][ T5888] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 368.160351][ T5883] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 368.168848][ T9] usb 2-1: SerialNumber: syz [ 368.174600][ T5874] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 368.184723][ T5888] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 368.195123][ T9] usb 2-1: config 0 descriptor?? [ 368.205480][ T5874] usb 4-1: config 0 has no interface number 0 [ 368.213596][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.221687][ T5874] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.237624][ T5874] usb 4-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 368.251996][ T5874] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 368.270696][T10458] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 368.281822][ T5888] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 368.302205][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.322119][ T5883] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 368.322597][ T9] viperboard 2-1:0.61: version 0.00 found at bus 002 address 047 [ 368.339700][ T5883] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 368.343523][ T5874] usb 4-1: config 0 descriptor?? [ 368.375355][ T9] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 368.395215][ T5883] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.403852][ T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 368.560751][ T5883] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 368.573554][ T5883] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 368.586544][ T5883] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 368.594756][ T5883] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 368.606003][ T5883] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.617719][ T5883] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 368.634275][ T5883] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 368.646371][ T5883] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 368.668202][ T42] usb 2-1: USB disconnect, device number 47 [ 368.690370][ T5883] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 368.730401][ T5883] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.804664][ T5888] usb 6-1: USB disconnect, device number 4 [ 368.808803][ T5883] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 369.155367][ T5874] logitech-djreceiver 0003:046D:C537.000C: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.3-1/input4 [ 369.194140][ T5883] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 369.227185][ T29] audit: type=1400 audit(1772342996.303:972): avc: denied { bind } for pid=10489 comm="syz.5.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 369.324823][ T5883] usb 5-1: string descriptor 0 read error: -22 [ 369.332037][ T5883] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 370.240806][ T5874] usb 4-1: USB disconnect, device number 52 [ 370.270766][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.539807][ T5883] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 370.943076][ T5883] usb 5-1: USB disconnect, device number 56 [ 370.969464][T10507] netlink: 'syz.3.1104': attribute type 10 has an invalid length. [ 371.196021][ T29] audit: type=1400 audit(1772342996.343:973): avc: denied { write } for pid=10489 comm="syz.5.1101" path="socket:[29121]" dev="sockfs" ino=29121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 371.229970][T10509] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1104'. [ 371.450356][ T29] audit: type=1400 audit(1772342998.453:974): avc: denied { setopt } for pid=10508 comm="syz.5.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 371.463555][T10509] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1104'. [ 371.900590][ T42] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 372.182165][ T42] usb 2-1: config 4 has an invalid interface number: 48 but max is 0 [ 372.204070][ T42] usb 2-1: config 4 has no interface number 0 [ 372.233860][ T42] usb 2-1: config 4 interface 48 has no altsetting 0 [ 372.294235][ T42] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=32.78 [ 372.339881][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.372034][ T42] usb 2-1: Product: syz [ 372.376640][ T42] usb 2-1: Manufacturer: syz [ 372.392869][ T42] usb 2-1: SerialNumber: syz [ 372.550602][ T5883] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 372.869716][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.941305][T10546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1111'. [ 372.958764][ T29] audit: type=1400 audit(1772343000.033:975): avc: denied { nlmsg_read } for pid=10538 comm="syz.3.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 373.103267][ T5883] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 373.113136][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.621551][ T5883] usb 3-1: config 0 descriptor?? [ 373.632868][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 373.642533][ T29] audit: type=1400 audit(1772343000.733:976): avc: denied { ioctl } for pid=10538 comm="syz.3.1111" path="socket:[29916]" dev="sockfs" ino=29916 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 373.764349][ T29] audit: type=1400 audit(1772343000.793:977): avc: denied { accept } for pid=10532 comm="syz.5.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 373.821719][T10543] tmpfs: Cannot enable quota on remount [ 374.403840][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00 [ 374.411206][ T5883] pwc: recv_control_msg error -32 req 02 val 2700 [ 374.419027][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00 [ 374.429094][ T5883] pwc: recv_control_msg error -32 req 04 val 1000 [ 374.436853][ T5883] pwc: recv_control_msg error -32 req 04 val 1300 [ 374.450858][ T9] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 374.718332][ T9] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 374.742040][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.777511][ T5883] pwc: recv_control_msg error -32 req 02 val 2000 [ 374.779953][ T9] usb 4-1: config 0 has no interfaces? [ 374.789762][ T5883] pwc: recv_control_msg error -32 req 02 val 2100 [ 374.798644][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 374.812449][ T42] cdc_subset 2-1:4.48: probe with driver cdc_subset failed with error -71 [ 374.868336][ T5883] pwc: recv_control_msg error -32 req 04 val 1500 [ 374.905900][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.984426][ T9] usb 4-1: config 0 descriptor?? [ 375.001291][ T42] usb 2-1: USB disconnect, device number 48 [ 375.389679][ T5883] pwc: recv_control_msg error -71 req 02 val 2600 [ 375.397233][ T5883] pwc: recv_control_msg error -71 req 02 val 2900 [ 375.403945][ T5883] pwc: recv_control_msg error -71 req 02 val 2800 [ 375.416897][ T29] audit: type=1400 audit(1772343002.253:978): avc: denied { create } for pid=10568 comm="syz.4.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 375.447298][ T5883] pwc: recv_control_msg error -71 req 04 val 1100 [ 375.454814][ T29] audit: type=1400 audit(1772343002.253:979): avc: denied { append } for pid=10568 comm="syz.4.1114" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 375.454935][ T5883] pwc: recv_control_msg error -71 req 04 val 1200 [ 375.495160][ T5883] pwc: Registered as video103. [ 375.541835][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 375.590468][ T42] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 375.616587][ T5883] usb 3-1: USB disconnect, device number 35 [ 376.081851][T10581] Cannot find add_set index 0 as target [ 376.242667][ T29] audit: type=1400 audit(1772343003.333:980): avc: denied { create } for pid=10582 comm="syz.2.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 377.607605][ T6198] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 377.623459][ T5924] usb 4-1: USB disconnect, device number 53 [ 378.023482][ T29] audit: type=1400 audit(1772343004.863:981): avc: denied { setopt } for pid=10588 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 378.302025][ T29] audit: type=1400 audit(1772343005.393:982): avc: denied { mounton } for pid=10598 comm="syz.5.1122" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 378.772797][ T29] audit: type=1400 audit(1772343005.863:983): avc: denied { setopt } for pid=10605 comm="syz.1.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 380.744237][T10623] Cannot find add_set index 0 as target [ 381.720547][ T5874] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 382.648887][ T5874] usb 5-1: config 4 has an invalid interface number: 42 but max is 0 [ 382.770659][ T5874] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 382.821138][ T5874] usb 5-1: config 4 has no interface number 0 [ 382.831247][ T5874] usb 5-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=81.51 [ 382.935033][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.949570][ T5874] s2255 5-1:4.42: Could not find bulk-in endpoint [ 382.962230][ T5874] Sensoray 2255 driver load failed: 0xfffffff4 [ 382.968461][ T5874] s2255 5-1:4.42: probe with driver s2255 failed with error -12 [ 384.482202][T10618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.569747][T10618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.643897][T10618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.657572][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 384.670566][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 384.680174][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 384.708088][T10618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.740331][ T29] audit: type=1400 audit(1772343011.803:984): avc: denied { getopt } for pid=10644 comm="syz.2.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 384.783647][ T5924] usb 5-1: USB disconnect, device number 57 [ 384.800112][ T29] audit: type=1400 audit(1772343011.803:985): avc: denied { ioctl } for pid=10644 comm="syz.2.1134" path="socket:[29407]" dev="sockfs" ino=29407 ioctlcmd=0x5838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 386.147720][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'. [ 387.787968][T10681] tmpfs: Unknown parameter 'usry’RBSÖ÷2ðVoø’7 ®+ìg°(!Ȉ‚Ü+iðcõ"³»õ;W͇Ük2SŠÓ¸Nc)jšæ' [ 390.636461][ T5874] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 390.817347][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.833089][ T5888] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 390.855256][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.885561][ T5874] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 390.908496][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.959806][ T5874] usb 3-1: config 0 descriptor?? [ 391.003599][ T5888] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.033687][ T5888] usb 6-1: config 1 interface 1 has no altsetting 1 [ 391.075429][ T5888] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.100365][ T5888] usb 6-1: New USB device strings: Mfr=9, Product=130, SerialNumber=3 [ 391.118725][ T5888] usb 6-1: Product: syz [ 391.135239][ T5888] usb 6-1: Manufacturer: syz [ 391.163517][ T5888] usb 6-1: SerialNumber: syz [ 391.205713][ T5888] usb 6-1: selecting invalid altsetting 1 [ 391.477970][ T5874] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x2 [ 391.704911][ T5874] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 391.751555][T10695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.762432][T10695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.771157][ T5874] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 391.790204][ T5874] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 391.823522][ T5874] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -32 [ 392.045798][T10701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.054495][T10701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.152512][ T29] audit: type=1400 audit(1772343019.243:986): avc: denied { relabelfrom } for pid=10732 comm="syz.3.1149" name="" dev="pipefs" ino=29547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 392.153617][ T5874] usb 3-1: USB disconnect, device number 36 [ 392.374389][T10741] IPVS: set_ctl: invalid protocol: 4 172.20.20.10:21 [ 392.582463][ T29] audit: type=1400 audit(1772343019.443:987): avc: denied { ioctl } for pid=10732 comm="syz.3.1149" path="/dev/input/event2" dev="devtmpfs" ino=920 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 392.640569][ T5888] cdc_ncm 6-1:1.0: bind() failure [ 392.662062][ T5888] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 392.668882][ T5888] cdc_ncm 6-1:1.1: bind() failure [ 392.770700][ T5888] usb 6-1: USB disconnect, device number 5 [ 393.520660][ T5888] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 393.623405][T10776] Cannot find add_set index 0 as target [ 393.690631][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 393.712535][ T5888] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 393.730217][ T5888] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 393.744417][ T5888] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 14385, setting to 1024 [ 393.780449][ T5888] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 393.791587][ T5888] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 393.809843][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 393.810381][ T5883] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 393.818089][ T5888] usb 6-1: SerialNumber: syz [ 393.853732][T10752] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 393.888769][ T5888] cdc_acm 6-1:1.0: skipping garbage [ 393.898628][ T5888] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 393.928802][T10792] binder: 10791:10792 ioctl c0306201 2000000003c0 returned -14 [ 393.975546][ T5924] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 394.001796][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.012750][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 394.070998][ T5883] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 394.121734][ T5883] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 394.129830][ T5883] usb 4-1: Manufacturer: syz [ 394.134865][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 394.165499][ T5888] usb 6-1: USB disconnect, device number 6 [ 394.196096][ T5924] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 394.218064][ T5924] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 394.227715][ T5883] usb 4-1: config 0 descriptor?? [ 394.369900][ T5924] usb 3-1: config 0 has no interface number 0 [ 394.376613][ T5924] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 394.386977][ T5924] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 394.398156][ T5883] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 394.406375][ T5924] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 394.415138][ T5924] usb 3-1: config 0 has no interface number 0 [ 394.422503][ T5924] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 394.433188][ T5924] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 394.445691][ T5924] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 394.454290][ T5924] usb 3-1: config 0 has no interface number 0 [ 394.485118][ T5924] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 394.662701][ T5924] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 394.788637][ T5924] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 394.871198][T10811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.885778][ T5924] usb 3-1: config 0 has no interface number 0 [ 394.934494][ T5924] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.171866][ T5924] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 395.270052][ T5924] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 395.326003][ T5924] usb 3-1: config 0 has no interface number 0 [ 395.435814][ T5924] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.775197][ T5924] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 395.788660][ T29] audit: type=1400 audit(1772343022.863:988): avc: denied { append } for pid=10815 comm="syz.5.1172" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tty_device_t:s0" [ 395.896152][ T29] audit: type=1400 audit(1772343022.973:989): avc: denied { create } for pid=10773 comm="syz.3.1159" name="#39" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 395.922024][ T29] audit: type=1400 audit(1772343022.973:990): avc: denied { link } for pid=10773 comm="syz.3.1159" name="#39" dev="tmpfs" ino=1227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 395.922139][ T5924] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 395.974909][ T29] audit: type=1400 audit(1772343022.973:991): avc: denied { rename } for pid=10773 comm="syz.3.1159" name="#3a" dev="tmpfs" ino=1227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 396.027628][ T5924] usb 3-1: config 0 has no interface number 0 [ 396.038111][ T5924] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 396.050325][ T5924] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 396.061465][ T5924] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 396.077705][ T5924] usb 3-1: config 0 has no interface number 0 [ 396.097199][ T5924] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 396.110408][ T5924] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 396.122588][ T5924] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 396.131222][ T5924] usb 3-1: config 0 has no interface number 0 [ 396.137932][ T5924] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 396.149163][T10829] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.157137][ T5924] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 396.172955][ T5924] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 396.183142][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.194453][ T5924] usb 3-1: Product: syz [ 396.198773][ T5924] usb 3-1: Manufacturer: syz [ 396.203825][ T5924] usb 3-1: SerialNumber: syz [ 396.213354][ T5924] usb 3-1: config 0 descriptor?? [ 396.223229][ T5924] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 396.404062][ T5883] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 396.493729][ T5924] etas_es58x 3-1:0.2: could not retrieve the product info string [ 396.549972][ T5924] usb 3-1: USB disconnect, device number 37 [ 396.560175][ T5924] etas_es58x 3-1:0.2: Disconnecting syz syz [ 396.632865][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.660731][ T5883] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 396.672444][ T5883] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 396.687128][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.706874][ T5883] usb 2-1: config 0 descriptor?? [ 396.927092][ T5883] Bluetooth: Can't get state to change to load ram patch err [ 396.935520][ T5883] Bluetooth: Loading patch file failed [ 396.945021][ T5883] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 397.073415][ T5888] usb 4-1: USB disconnect, device number 54 [ 397.131673][ T5883] usb 2-1: USB disconnect, device number 50 [ 397.592173][ T29] audit: type=1400 audit(1772343024.553:992): avc: denied { bind } for pid=10845 comm="syz.3.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 397.852318][ T29] audit: type=1400 audit(1772343024.603:993): avc: denied { listen } for pid=10845 comm="syz.3.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 398.581808][ T5883] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 398.647775][ T5888] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 398.708260][T10878] netlink: 'syz.4.1191': attribute type 1 has an invalid length. [ 398.719032][T10878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1191'. [ 398.740434][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 398.753495][ T5883] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 398.770376][ T5883] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 398.779266][ T5883] usb 6-1: config 0 has no interface number 0 [ 398.844156][ T29] audit: type=1400 audit(1772343025.903:994): avc: denied { setopt } for pid=10871 comm="syz.2.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 398.864896][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 398.872770][ T5888] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 398.881918][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 398.891189][ T5888] usb 2-1: config 0 has no interface number 0 [ 398.891382][ T5883] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 398.898904][ T5888] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 398.916526][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.924716][ T5888] usb 2-1: Product: syz [ 398.931450][ T5888] usb 2-1: Manufacturer: syz [ 398.937083][ T5888] usb 2-1: SerialNumber: syz [ 398.939139][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.949872][ T5888] usb 2-1: config 0 descriptor?? [ 398.962513][ T5883] usb 6-1: Product: syz [ 398.966812][ T5883] usb 6-1: Manufacturer: syz [ 398.971767][ T5883] usb 6-1: SerialNumber: syz [ 398.994641][ T5883] usb 6-1: config 0 descriptor?? [ 399.061149][ T5888] viperboard 2-1:0.61: version 0.00 found at bus 002 address 051 [ 399.120899][ T5883] viperboard 6-1:0.61: version 0.00 found at bus 006 address 007 [ 399.711129][ T5888] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 399.728774][ T5888] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 399.743881][ T5888] usb 2-1: USB disconnect, device number 51 [ 399.867929][ T5883] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 399.879991][ T5883] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 399.933223][ T5883] usb 6-1: USB disconnect, device number 7 [ 401.460843][ T42] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 401.620557][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 401.824143][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.863306][ T42] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 401.873234][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.881965][ T42] usb 2-1: Product: syz [ 401.886794][ T42] usb 2-1: Manufacturer: syz [ 401.891859][ T42] usb 2-1: SerialNumber: syz [ 401.909774][ T42] usb 2-1: config 0 descriptor?? [ 401.935263][ T42] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 401.945309][ T42] usb 2-1: selecting invalid altsetting 1 [ 402.135139][T10902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.144010][T10902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.154207][ T42] gspca_stk014: init reg: 0x00 [ 402.159032][ T42] stk014 2-1:0.0: probe with driver stk014 failed with error -5 [ 402.353572][T10902] netlink: 'syz.1.1197': attribute type 10 has an invalid length. [ 402.361520][T10902] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1197'. [ 402.381804][T10902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.410556][T10902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.441942][ T42] usb 2-1: USB disconnect, device number 52 [ 402.810416][ T5883] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 403.650629][ T5888] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 403.790876][ T5888] usb 3-1: device descriptor read/64, error -71 [ 403.860406][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 403.891864][ T5883] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 403.905756][ T5883] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 403.915057][ T5883] usb 6-1: config 0 has no interface number 0 [ 403.924211][ T5883] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 403.935953][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.944079][ T5883] usb 6-1: Product: syz [ 403.964647][ T5883] usb 6-1: Manufacturer: syz [ 404.051940][T10931] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 404.051940][T10931] program syz.1.1205 not setting count and/or reply_len properly [ 404.250807][ T5888] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 404.268943][ T5883] usb 6-1: SerialNumber: syz [ 404.390375][ T5883] usb 6-1: config 0 descriptor?? [ 404.411466][ T5888] usb 3-1: device descriptor read/64, error -71 [ 404.510815][ T5883] viperboard 6-1:0.61: version 0.00 found at bus 006 address 008 [ 404.520787][ T5888] usb usb3-port1: attempt power cycle [ 404.771009][ T5883] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 404.780811][ T5883] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 405.398639][ T5883] usb 6-1: USB disconnect, device number 8 [ 405.570371][ T5888] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 405.613198][ T5888] usb 3-1: device descriptor read/8, error -71 [ 406.229735][ T1200] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 406.370652][ T5924] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 406.596677][ T1200] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 406.780988][ T1200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.790606][ T1200] usb 2-1: Product: syz [ 406.794779][ T1200] usb 2-1: Manufacturer: syz [ 406.799367][ T1200] usb 2-1: SerialNumber: syz [ 406.809292][ T1200] usb 2-1: config 0 descriptor?? [ 406.828579][ T5815] Bluetooth: hci6: urb ffff88802abbb100 submission failed (2) [ 407.020792][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 407.027388][ T5924] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 407.035931][T10941] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1207'. [ 407.045222][ T5924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 407.054651][ T5924] usb 5-1: config 0 has no interface number 0 [ 407.059124][ T10] usb 2-1: USB disconnect, device number 53 [ 407.074746][ T5924] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 407.084197][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.092261][ T5924] usb 5-1: Product: syz [ 407.096453][ T5924] usb 5-1: Manufacturer: syz [ 407.101130][ T5924] usb 5-1: SerialNumber: syz [ 408.136147][ T5924] usb 5-1: config 0 descriptor?? [ 408.151404][ T29] audit: type=1326 audit(1772343035.243:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.5.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30dd9c799 code=0x7ffc0000 [ 408.216961][ T29] audit: type=1326 audit(1772343035.273:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.5.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30dd9c799 code=0x7ffc0000 [ 408.260259][ T29] audit: type=1326 audit(1772343035.283:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.5.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc30dd9c799 code=0x7ffc0000 [ 408.299736][T10975] netlink: 'syz.3.1216': attribute type 1 has an invalid length. [ 408.444783][T10975] 8021q: adding VLAN 0 to HW filter on device bond3 [ 409.234911][ T29] audit: type=1326 audit(1772343035.283:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.5.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30dd9c799 code=0x7ffc0000 [ 409.281130][ T5924] viperboard 5-1:0.61: version 0.00 found at bus 005 address 058 [ 409.475767][ T29] audit: type=1326 audit(1772343035.283:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.5.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30dd9c799 code=0x7ffc0000 [ 409.595826][ T29] audit: type=1326 audit(1772343035.293:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.5.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc30dd9c799 code=0x7ffc0000 [ 409.650540][ T29] audit: type=1326 audit(1772343035.293:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.5.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30dd9c799 code=0x7ffc0000 [ 409.712956][ T29] audit: type=1326 audit(1772343035.293:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.5.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30dd9c799 code=0x7ffc0000 [ 409.820765][ T5888] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 409.903140][ T29] audit: type=1326 audit(1772343035.293:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.5.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc30dd9c799 code=0x7ffc0000 [ 410.009582][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 410.085108][ T5888] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 410.119992][ T29] audit: type=1326 audit(1772343035.293:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10967 comm="syz.5.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30dd9c799 code=0x7ffc0000 [ 410.177703][ T5888] usb 2-1: config 0 has no interface number 0 [ 410.236015][ T5888] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.286312][ T5888] usb 2-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 410.360439][ T5888] usb 2-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 410.387370][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.554612][ T5888] usb 2-1: config 0 descriptor?? [ 410.743722][ T6567] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 411.394427][ T5924] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 411.404831][ T5924] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 411.420982][ T5924] usb 5-1: USB disconnect, device number 58 [ 411.538805][T10979] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 411.548090][ T5888] logitech-djreceiver 0003:046D:C537.000E: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.1-1/input4 [ 411.586248][T10979] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 411.601194][T11001] netlink: 'syz.5.1219': attribute type 1 has an invalid length. [ 411.820392][ T5888] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 411.829645][T11004] macvlan2: entered promiscuous mode [ 411.836415][ T5883] usb 2-1: USB disconnect, device number 54 [ 411.838188][T11004] macvlan2: entered allmulticast mode [ 411.889440][T11004] bond1: entered promiscuous mode [ 411.976275][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 412.182199][T11004] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 412.184961][ T5888] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 412.198551][ T5888] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 412.209906][ T5888] usb 3-1: config 0 has no interface number 0 [ 412.247539][T11004] bond1: left promiscuous mode [ 412.249005][ T5888] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 412.310634][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.320221][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'. [ 412.370641][ T5888] usb 3-1: Product: syz [ 412.380495][ T5888] usb 3-1: Manufacturer: syz [ 412.387186][ T5888] usb 3-1: SerialNumber: syz [ 412.401292][ T5888] usb 3-1: config 0 descriptor?? [ 412.511522][ T5888] viperboard 3-1:0.61: version 0.00 found at bus 003 address 042 [ 412.538696][ T5888] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 412.650478][ T5888] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 413.257204][ T5888] usb 3-1: USB disconnect, device number 42 [ 413.688338][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 413.688348][ T29] audit: type=1400 audit(1772343040.773:1028): avc: denied { setopt } for pid=11033 comm="syz.1.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 414.022281][T11038] xt_TPROXY: Can be used only with -p tcp or -p udp [ 414.038074][ T5815] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 414.038120][ T5815] Bluetooth: hci2: unknown advertising packet type: 0x6c [ 414.045441][ T5815] Bluetooth: hci2: Malformed LE Event: 0x02 [ 414.145823][T11046] FAULT_INJECTION: forcing a failure. [ 414.145823][T11046] name failslab, interval 1, probability 0, space 0, times 0 [ 414.169032][T11046] CPU: 1 UID: 0 PID: 11046 Comm: syz.1.1229 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.169061][T11046] Tainted: [L]=SOFTLOCKUP [ 414.169067][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.169084][T11046] Call Trace: [ 414.169090][T11046] [ 414.169097][T11046] dump_stack_lvl+0x100/0x190 [ 414.169131][T11046] should_fail_ex.cold+0x5/0xa [ 414.169154][T11046] should_failslab+0xc2/0x120 [ 414.169182][T11046] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 414.169205][T11046] ? alloc_empty_file+0x55/0x1c0 [ 414.169228][T11046] alloc_empty_file+0x55/0x1c0 [ 414.169243][T11046] alloc_file_pseudo+0x13a/0x230 [ 414.169257][T11046] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 414.169271][T11046] ? _raw_spin_unlock+0x28/0x50 [ 414.169288][T11046] ? alloc_fd+0x476/0x790 [ 414.169301][T11046] __anon_inode_getfile+0xe8/0x280 [ 414.169316][T11046] __anon_inode_getfd+0x5c/0xe0 [ 414.169332][T11046] map_create+0x17fc/0x2ba0 [ 414.169348][T11046] ? avc_has_perm_noaudit+0x145/0x3b0 [ 414.169370][T11046] ? __pfx_map_create+0x10/0x10 [ 414.169386][T11046] ? __might_fault+0xc5/0x140 [ 414.169400][T11046] ? __might_fault+0xc5/0x140 [ 414.169416][T11046] ? selinux_bpf+0xfb/0x150 [ 414.169434][T11046] __sys_bpf+0x2091/0x4b90 [ 414.169447][T11046] ? __pfx___sys_bpf+0x10/0x10 [ 414.169457][T11046] ? proc_fail_nth_write+0x9f/0x220 [ 414.169472][T11046] ? find_held_lock+0x2b/0x80 [ 414.169489][T11046] ? find_held_lock+0x2b/0x80 [ 414.169502][T11046] ? ksys_write+0x190/0x250 [ 414.169522][T11046] ? __mutex_unlock_slowpath+0x15c/0x790 [ 414.169534][T11046] ? __fget_files+0x215/0x3d0 [ 414.169550][T11046] ? fput+0x79/0x100 [ 414.169562][T11046] ? ksys_write+0x1ac/0x250 [ 414.169578][T11046] ? __pfx_ksys_write+0x10/0x10 [ 414.169601][T11046] __x64_sys_bpf+0x7b/0xc0 [ 414.169613][T11046] ? lockdep_hardirqs_on+0x78/0x100 [ 414.169624][T11046] do_syscall_64+0x106/0xf80 [ 414.169634][T11046] ? clear_bhb_loop+0x40/0x90 [ 414.169647][T11046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.169659][T11046] RIP: 0033:0x7fb31ef9c799 [ 414.169669][T11046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.169679][T11046] RSP: 002b:00007fb31fe0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 414.169690][T11046] RAX: ffffffffffffffda RBX: 00007fb31f215fa0 RCX: 00007fb31ef9c799 [ 414.169697][T11046] RDX: 0000000000000031 RSI: 0000200000000080 RDI: 0000000000000000 [ 414.169703][T11046] RBP: 00007fb31fe0b090 R08: 0000000000000000 R09: 0000000000000000 [ 414.169710][T11046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.169716][T11046] R13: 00007fb31f216038 R14: 00007fb31f215fa0 R15: 00007ffd46ce13f8 [ 414.169729][T11046] [ 414.759585][T11049] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 414.759585][T11049] program syz.5.1230 not setting count and/or reply_len properly [ 415.231559][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1231'. [ 415.453259][T11087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=11087 comm=syz.3.1231 [ 415.558441][T11089] netlink: 'syz.4.1233': attribute type 1 has an invalid length. [ 415.648725][T11089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.830912][T11092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1233'. [ 415.999936][T11089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.006874][T11089] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 416.017741][T11089] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 416.165789][T11091] gretap1: entered promiscuous mode [ 416.172549][T11091] bond1: (slave gretap1): making interface the new active one [ 416.180840][T11091] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 416.191844][T11092] bond1: entered promiscuous mode [ 416.196983][T11092] bond1: entered allmulticast mode [ 416.204094][T11092] gretap1: entered allmulticast mode [ 416.214672][T11092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.992097][T11107] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 416.992097][T11107] program syz.1.1235 not setting count and/or reply_len properly [ 419.329005][ T5815] Bluetooth: hci5: link tx timeout [ 419.335054][ T5815] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 419.357188][ T29] audit: type=1400 audit(1772343046.393:1029): avc: denied { write } for pid=11123 comm="syz.4.1242" path="socket:[31380]" dev="sockfs" ino=31380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 419.965817][ T29] audit: type=1400 audit(1772343047.033:1030): avc: denied { map } for pid=11129 comm="syz.2.1244" path="socket:[32128]" dev="sockfs" ino=32128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 420.001062][T11136] loop2: detected capacity change from 0 to 7 [ 420.036761][T11136] Dev loop2: unable to read RDB block 7 [ 420.060372][T11136] loop2: AHDI p1 p2 p3 [ 420.094126][ T29] audit: type=1400 audit(1772343047.033:1031): avc: denied { read } for pid=11129 comm="syz.2.1244" path="socket:[32128]" dev="sockfs" ino=32128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 420.200402][T11136] loop2: partition table partially beyond EOD, truncated [ 420.312311][T11136] loop2: p1 start 1601398130 is beyond EOD, truncated [ 420.351788][T11136] loop2: p2 start 1702059890 is beyond EOD, truncated [ 420.924137][T11154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.999961][ T29] audit: type=1400 audit(1772343048.083:1032): avc: denied { map } for pid=11153 comm="syz.5.1248" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 421.038356][T11159] loop2: detected capacity change from 0 to 7 [ 421.055868][T11159] Dev loop2: unable to read RDB block 7 [ 421.064928][ T29] audit: type=1400 audit(1772343048.083:1033): avc: denied { execute } for pid=11153 comm="syz.5.1248" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 421.088741][T11159] loop2: unable to read partition table [ 421.098800][T11159] loop2: partition table beyond EOD, truncated [ 421.108973][T11159] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 421.158541][T11154] veth0_to_team: entered promiscuous mode [ 421.224533][T11153] veth0_to_team: left promiscuous mode [ 421.310509][T11165] syz.4.1251 (11165): /proc/11162/oom_adj is deprecated, please use /proc/11162/oom_score_adj instead. [ 421.397381][ T5815] Bluetooth: hci5: command 0x0406 tx timeout [ 421.479078][T11168] syzkaller1: entered promiscuous mode [ 421.502035][T11170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1251'. [ 421.511115][T11168] syzkaller1: entered allmulticast mode [ 421.790371][ T5883] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 421.963557][ T5883] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 421.976985][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.014527][ T5883] usb 3-1: config 0 descriptor?? [ 422.027611][ T5883] cp210x 3-1:0.0: cp210x converter detected [ 422.140621][ T5867] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 422.252237][ T5883] usb 3-1: cp210x converter now attached to ttyUSB0 [ 422.304381][ T5867] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 422.377373][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.408741][ T5867] usb 2-1: config 0 descriptor?? [ 422.435404][ T5867] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 422.580579][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 422.854493][ T5867] gp8psk: usb in 128 operation failed. [ 423.020354][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 423.027314][ T10] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 423.038598][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 423.071760][ T10] usb 5-1: config 0 has no interface number 0 [ 423.080765][ T5867] gp8psk: usb in 146 operation failed. [ 423.089838][ T5867] gp8psk: failed to get FW version [ 423.096829][ T5867] gp8psk: usb in 149 operation failed. [ 423.103212][ T5867] gp8psk: failed to get FPGA version [ 423.112094][ T10] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 423.131984][ T5867] gp8psk: usb in 138 operation failed. [ 423.138151][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.147185][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 423.157576][ T10] usb 5-1: Product: syz [ 423.163026][ T10] usb 5-1: Manufacturer: syz [ 423.168111][ T5867] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 423.176748][ T10] usb 5-1: SerialNumber: syz [ 423.188778][ T5867] usb 2-1: media controller created [ 423.194842][ T10] usb 5-1: config 0 descriptor?? [ 423.212350][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 423.254967][ T5867] gp8psk_fe: Frontend attached [ 423.274838][ T5867] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 423.298793][ T5867] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 423.314478][ T10] viperboard 5-1:0.61: version 0.00 found at bus 005 address 059 [ 423.349326][ T10] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 423.369272][ T10] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 423.385118][ T5867] gp8psk: usb in 138 operation failed. [ 423.404024][T11205] loop2: detected capacity change from 0 to 7 [ 423.474830][ T5824] Dev loop2: unable to read RDB block 7 [ 423.512115][ T5867] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 423.526535][ T5867] gp8psk: found Genpix USB device pID = 203 (hex) [ 423.538048][ T5867] usb 2-1: USB disconnect, device number 55 [ 423.551412][ T5883] usb 5-1: USB disconnect, device number 59 [ 423.588418][ T5824] loop2: unable to read partition table [ 423.608567][ T5824] loop2: partition table beyond EOD, truncated [ 423.625319][ T5867] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 423.641085][T11205] Dev loop2: unable to read RDB block 7 [ 423.770888][T11205] loop2: unable to read partition table [ 423.782652][T11205] loop2: partition table beyond EOD, truncated [ 423.809821][T11205] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 424.762260][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1265'. [ 424.777081][ T29] audit: type=1400 audit(1772343051.863:1034): avc: denied { mount } for pid=11215 comm="syz.3.1265" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 424.808042][ T42] usb 3-1: USB disconnect, device number 43 [ 424.828777][ T42] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 424.889267][ T29] audit: type=1400 audit(1772343051.973:1035): avc: denied { load_policy } for pid=11220 comm="syz.2.1267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 424.919808][ T42] cp210x 3-1:0.0: device disconnected [ 424.923362][T11222] SELinux: policydb version 1184384087 does not match my version range 15-35 [ 424.970413][T11222] SELinux: failed to load policy [ 425.049092][ T29] audit: type=1400 audit(1772343052.003:1036): avc: denied { write } for pid=11218 comm="syz.1.1266" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 425.138371][T11224] SELinux: policydb version 1184384087 does not match my version range 15-35 [ 425.164269][T11224] SELinux: failed to load policy [ 425.287923][T11236] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 425.310350][ T5883] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 425.481222][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 425.531930][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.545408][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.570334][ T5883] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice=ff.00 [ 425.585944][ T5883] usb 5-1: New USB device strings: Mfr=3, Product=0, SerialNumber=0 [ 425.603671][ T42] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 425.620437][ T5883] usb 5-1: Manufacturer: syz [ 425.627283][ T5883] usb 5-1: config 0 descriptor?? [ 425.780393][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.825088][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.836973][ T42] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 425.846311][ T42] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 426.024515][ T29] audit: type=1400 audit(1772343053.103:1037): avc: denied { read } for pid=11241 comm="syz.1.1273" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 426.111716][ T5883] waltop 0003:172F:0037.000F: item fetching failed at offset 0/3 [ 426.119873][ T5883] waltop 0003:172F:0037.000F: probe with driver waltop failed with error -22 [ 426.128752][ T42] usb 3-1: Manufacturer: syz [ 426.202757][ T42] usb 3-1: config 0 descriptor?? [ 426.402802][T11247] syzkaller1: entered promiscuous mode [ 426.435864][ T5883] usb 5-1: USB disconnect, device number 60 [ 426.444402][T11247] syzkaller1: entered allmulticast mode [ 427.403737][ T42] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0010/input/input20 [ 427.551114][ T42] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0010/input/input21 [ 427.603612][ T42] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0010/input/input22 [ 427.746256][ T42] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0010/input/input23 [ 427.846045][ T42] uclogic 0003:256C:006D.0010: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 427.890035][T11266] netlink: 'syz.2.1278': attribute type 1 has an invalid length. [ 427.899914][ T42] usb 3-1: USB disconnect, device number 44 [ 428.129766][T11266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 428.138415][T11268] fido_id[11268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 428.217733][T11269] vlan2: entered promiscuous mode [ 428.239281][T11269] bond2: entered promiscuous mode [ 428.250823][T11269] vlan2: entered allmulticast mode [ 428.280495][T11269] bond2: entered allmulticast mode [ 428.344198][T11271] bond2: (slave bridge1): making interface the new active one [ 428.379492][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 428.397956][ T29] audit: type=1400 audit(1772343055.473:1038): avc: denied { mount } for pid=11274 comm="syz.5.1280" name="/" dev="ramfs" ino=32510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 428.429644][T11271] bridge1: entered promiscuous mode [ 428.444638][T11279] overlayfs: overlapping lowerdir path [ 428.450518][T11271] bridge1: entered allmulticast mode [ 428.460629][T11271] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 428.504060][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 428.505931][ T1134] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.547812][ T29] audit: type=1400 audit(1772343055.473:1039): avc: denied { create } for pid=11274 comm="syz.5.1280" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 428.548862][ T1134] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.683061][ T29] audit: type=1400 audit(1772343055.543:1040): avc: denied { mount } for pid=11273 comm="syz.1.1279" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 429.220316][ T1134] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.251305][ T1134] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.680862][ T29] audit: type=1400 audit(1772343056.763:1041): avc: denied { write } for pid=11300 comm="syz.1.1286" path="socket:[32872]" dev="sockfs" ino=32872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 429.829288][ T42] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 430.209926][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 430.236301][T11315] random: crng reseeded on system resumption [ 430.241686][ T29] audit: type=1400 audit(1772343057.323:1042): avc: denied { write } for pid=11313 comm="syz.3.1288" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 430.241729][ T29] audit: type=1400 audit(1772343057.323:1043): avc: denied { open } for pid=11313 comm="syz.3.1288" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 430.325034][ T42] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 430.325056][ T42] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 430.325068][ T42] usb 6-1: config 0 has no interface number 0 [ 430.419769][T11318] loop2: detected capacity change from 0 to 7 [ 430.431334][ T42] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 430.431369][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.431388][ T42] usb 6-1: Product: syz [ 430.431465][ T42] usb 6-1: Manufacturer: syz [ 430.431480][ T42] usb 6-1: SerialNumber: syz [ 430.431773][T11318] Dev loop2: unable to read RDB block 7 [ 430.431805][T11318] loop2: unable to read partition table [ 430.431966][T11318] loop2: partition table beyond EOD, truncated [ 430.431983][T11318] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 430.491192][ T42] usb 6-1: config 0 descriptor?? [ 430.627997][ T42] viperboard 6-1:0.61: version 0.00 found at bus 006 address 009 [ 430.690732][ T42] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 430.690752][ T42] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 431.268973][ T5888] usb 6-1: USB disconnect, device number 9 [ 431.321347][ T5867] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 431.441200][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1291'. [ 431.512293][ T5867] usb 5-1: device descriptor read/all, error -61 [ 431.692991][ T5867] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 431.947320][ T5867] usb 5-1: device descriptor read/64, error -71 [ 431.993424][ T1311] Bluetooth: hci6: Frame reassembly failed (-84) [ 432.070663][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 432.083613][ T29] audit: type=1400 audit(1772343059.173:1044): avc: denied { create } for pid=11338 comm="syz.5.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 432.160666][ T5867] usb usb5-port1: attempt power cycle [ 432.267693][ T29] audit: type=1400 audit(1772343059.353:1045): avc: denied { bind } for pid=11340 comm="syz.1.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 432.268043][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 432.489318][ T10] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 432.510872][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.536884][ T10] usb 4-1: config 0 has no interface number 0 [ 432.543448][ T5867] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 432.552211][ T10] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 432.564994][ T10] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 432.584744][ T5867] usb 5-1: device descriptor read/8, error -71 [ 432.591248][ T10] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 432.604601][ T10] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.618402][ T10] usb 4-1: config 0 interface 52 has no altsetting 0 [ 432.625940][ T10] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 432.635628][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.655363][ T10] usb 4-1: config 0 descriptor?? [ 432.850697][ T5867] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 432.859628][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1297'. [ 432.877724][ T10] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input24 [ 432.907000][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1297'. [ 432.911926][T11348] overlayfs: overlapping lowerdir path [ 432.918757][ T6567] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.933170][ T5867] usb 5-1: device descriptor read/8, error -71 [ 432.951754][ T6567] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.984203][ T6567] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.012674][ T6567] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.040987][ T5867] usb usb5-port1: unable to enumerate USB device [ 433.089983][ T42] usb 4-1: USB disconnect, device number 55 [ 433.390396][ T42] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 433.590498][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 433.597085][ T42] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 433.610590][ T42] usb 6-1: config 0 has no interface number 0 [ 433.616711][ T42] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.644404][ T42] usb 6-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 433.697897][ T42] usb 6-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 433.712147][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.730051][ T42] usb 6-1: config 0 descriptor?? [ 434.100535][ T5809] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 437.239698][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 439.084056][ T42] usbhid 6-1:0.4: can't add hid device: -71 [ 439.107511][ T42] usbhid 6-1:0.4: probe with driver usbhid failed with error -71 [ 448.250492][T11077] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 451.050277][ C1] sched: DL replenish lagged too much [ 561.460225][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 561.467189][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2/1:b..l P5867/1:b..l [ 561.476445][ C1] rcu: (detected by 1, t=10503 jiffies, g=40961, q=1396858 ncpus=2) [ 561.484505][ C1] task:kworker/0:4 state:R running task stack:21448 pid:5867 tgid:5867 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 561.499249][ C1] Workqueue: events_power_efficient gc_worker [ 561.505342][ C1] Call Trace: [ 561.508617][ C1] [ 561.511545][ C1] __schedule+0xfee/0x60e0 [ 561.515967][ C1] ? __lock_acquire+0x4a5/0x2630 [ 561.520924][ C1] ? __pfx___schedule+0x10/0x10 [ 561.525779][ C1] ? mark_held_locks+0x40/0x70 [ 561.530545][ C1] preempt_schedule_irq+0x50/0x90 [ 561.535564][ C1] irqentry_exit+0x17b/0x670 [ 561.540147][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 561.546122][ C1] RIP: 0010:lock_release+0x19e/0x320 [ 561.551410][ C1] Code: ff 65 0f c1 05 8b 07 29 12 83 f8 01 0f 85 3d 01 00 00 9c 58 f6 c4 02 0f 85 28 01 00 00 41 f7 c6 00 02 00 00 0f 85 de 00 00 00 <48> 8b 44 24 10 65 48 2b 05 dd bf 28 12 0f 85 63 01 00 00 48 83 c4 [ 561.571118][ C1] RSP: 0018:ffffc9000452fb00 EFLAGS: 00000206 [ 561.577184][ C1] RAX: 0000000000000046 RBX: ffffffff8e7e93e0 RCX: ffffc9000452fb0c [ 561.585146][ C1] RDX: 0000000000000002 RSI: ffffffff8de4c9ef RDI: ffffffff8c1af220 [ 561.593108][ C1] RBP: ffffffff89ad43b9 R08: 0000000000000001 R09: 0000000000000000 [ 561.601069][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805c960000 [ 561.609032][ C1] R13: 0000000000040000 R14: 0000000000000202 R15: 0000000000000003 [ 561.616996][ C1] ? gc_worker+0x949/0x1630 [ 561.621518][ C1] gc_worker+0x94e/0x1630 [ 561.625854][ C1] ? __pfx_gc_worker+0x10/0x10 [ 561.630619][ C1] ? rcu_is_watching+0x12/0xc0 [ 561.635382][ C1] process_one_work+0x9d7/0x1920 [ 561.640325][ C1] ? __pfx_process_one_work+0x10/0x10 [ 561.645698][ C1] ? __pfx_gc_worker+0x10/0x10 [ 561.650464][ C1] worker_thread+0x5da/0xe40 [ 561.655057][ C1] ? __pfx_worker_thread+0x10/0x10 [ 561.660161][ C1] ? kthread+0x13a/0x450 [ 561.664394][ C1] ? __pfx_worker_thread+0x10/0x10 [ 561.669500][ C1] kthread+0x370/0x450 [ 561.673561][ C1] ? __pfx_kthread+0x10/0x10 [ 561.678144][ C1] ret_from_fork+0x754/0xd80 [ 561.682730][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 561.687838][ C1] ? __switch_to+0x7b4/0x1120 [ 561.692511][ C1] ? __pfx_kthread+0x10/0x10 [ 561.697095][ C1] ret_from_fork_asm+0x1a/0x30 [ 561.701870][ C1] [ 561.704882][ C1] task:kthreadd state:R running task stack:26696 pid:2 tgid:2 ppid:0 task_flags:0x208040 flags:0x00080000 [ 561.718368][ C1] Call Trace: [ 561.721642][ C1] [ 561.724568][ C1] __schedule+0xfee/0x60e0 [ 561.729010][ C1] ? __pfx___schedule+0x10/0x10 [ 561.733865][ C1] ? mark_held_locks+0x40/0x70 [ 561.738634][ C1] preempt_schedule_irq+0x50/0x90 [ 561.743653][ C1] irqentry_exit+0x17b/0x670 [ 561.748237][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 561.754234][ C1] RIP: 0010:lock_release+0x19e/0x320 [ 561.759534][ C1] Code: ff 65 0f c1 05 8b 07 29 12 83 f8 01 0f 85 3d 01 00 00 9c 58 f6 c4 02 0f 85 28 01 00 00 41 f7 c6 00 02 00 00 0f 85 de 00 00 00 <48> 8b 44 24 10 65 48 2b 05 dd bf 28 12 0f 85 63 01 00 00 48 83 c4 [ 561.779143][ C1] RSP: 0018:ffffc90000077220 EFLAGS: 00000206 [ 561.785212][ C1] RAX: 0000000000000046 RBX: ffffffff8e7e93e0 RCX: ffffc9000007722c [ 561.793181][ C1] RDX: 0000000000000002 RSI: ffffffff8de4c9ef RDI: ffffffff8c1af220 [ 561.801145][ C1] RBP: ffffffff81b7fdde R08: 0000000000000001 R09: 0000000000000007 [ 561.809108][ C1] R10: 0000000000000200 R11: 00000000000174ce R12: ffff88801e2a4900 [ 561.817075][ C1] R13: ffffc900000772d8 R14: 0000000000000202 R15: 0000000000000003 [ 561.825043][ C1] ? unwind_next_frame+0x3be/0x1ea0 [ 561.830256][ C1] unwind_next_frame+0x3c3/0x1ea0 [ 561.835277][ C1] ? kasan_save_stack+0x30/0x50 [ 561.840129][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 561.846282][ C1] arch_stack_walk+0x94/0xf0 [ 561.850873][ C1] ? kasan_save_track+0x14/0x30 [ 561.855725][ C1] stack_trace_save+0x8e/0xc0 [ 561.860404][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 561.865812][ C1] ? __lock_acquire+0x4a5/0x2630 [ 561.870751][ C1] kasan_save_stack+0x30/0x50 [ 561.875432][ C1] ? kasan_save_stack+0x30/0x50 [ 561.880319][ C1] kasan_save_track+0x14/0x30 [ 561.884998][ C1] __kasan_slab_alloc+0x89/0x90 [ 561.889850][ C1] kmem_cache_alloc_noprof+0x241/0x6e0 [ 561.895304][ C1] ? kmem_alloc_batch+0x49/0x170 [ 561.900239][ C1] kmem_alloc_batch+0x49/0x170 [ 561.905000][ C1] debug_objects_fill_pool+0x40e/0x670 [ 561.910452][ C1] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 561.916428][ C1] ? mark_held_locks+0x40/0x70 [ 561.921195][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 561.927006][ C1] ? __pfx_rcu_free_slab+0x10/0x10 [ 561.932114][ C1] debug_object_activate+0x103/0x490 [ 561.937392][ C1] ? do_raw_spin_lock+0x128/0x260 [ 561.942413][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 561.948218][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 561.954025][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 561.959217][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 561.965023][ C1] ? __pfx_rcu_free_slab+0x10/0x10 [ 561.970136][ C1] ? lsm_blob_alloc+0x68/0x90 [ 561.974815][ C1] __call_rcu_common.constprop.0+0x35/0x9b0 [ 561.980717][ C1] ? lsm_blob_alloc+0x68/0x90 [ 561.985391][ C1] qlist_free_all+0x47/0xe0 [ 561.989894][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 561.995356][ C1] __kasan_kmalloc+0x8a/0xb0 [ 561.999944][ C1] __kmalloc_noprof+0x301/0x850 [ 562.004802][ C1] lsm_blob_alloc+0x68/0x90 [ 562.009308][ C1] security_task_alloc+0x2a/0x260 [ 562.014330][ C1] copy_process+0x2531/0x7a10 [ 562.019022][ C1] ? __pfx_copy_process+0x10/0x10 [ 562.024052][ C1] ? update_cfs_rq_load_avg+0x51/0x550 [ 562.029521][ C1] kernel_clone+0xfc/0x9a0 [ 562.033937][ C1] ? find_held_lock+0x2b/0x80 [ 562.038612][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 562.043637][ C1] ? rcu_is_watching+0x12/0xc0 [ 562.048399][ C1] ? trace_sched_exit_tp+0x13a/0x180 [ 562.053687][ C1] ? __pfx_kthread+0x10/0x10 [ 562.058268][ C1] kernel_thread+0xdb/0x120 [ 562.062773][ C1] ? __pfx_kernel_thread+0x10/0x10 [ 562.067888][ C1] ? __pfx_kthread+0x10/0x10 [ 562.072471][ C1] ? do_raw_spin_lock+0x128/0x260 [ 562.077492][ C1] ? find_held_lock+0x2b/0x80 [ 562.082166][ C1] ? kthreadd+0x433/0x7a0 [ 562.086485][ C1] ? kthreadd+0x433/0x7a0 [ 562.090825][ C1] kthreadd+0x498/0x7a0 [ 562.094995][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 562.100203][ C1] ? __pfx_kthreadd+0x10/0x10 [ 562.104876][ C1] ret_from_fork+0x754/0xd80 [ 562.109468][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 562.114578][ C1] ? __switch_to+0x7b4/0x1120 [ 562.119257][ C1] ? __pfx_kthreadd+0x10/0x10 [ 562.123933][ C1] ret_from_fork_asm+0x1a/0x30 [ 562.128709][ C1] [ 562.131719][ C1] rcu: rcu_preempt kthread starved for 10001 jiffies! g40961 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 562.142902][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 562.152859][ C1] rcu: RCU grace-period kthread stack dump: [ 562.158736][ C1] task:rcu_preempt state:R running task stack:28680 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 562.172252][ C1] Call Trace: [ 562.175526][ C1] [ 562.178454][ C1] __schedule+0xfee/0x60e0 [ 562.182878][ C1] ? __lock_acquire+0x4a5/0x2630 [ 562.187833][ C1] ? __pfx___schedule+0x10/0x10 [ 562.192682][ C1] ? find_held_lock+0x2b/0x80 [ 562.197360][ C1] ? schedule+0x2bf/0x390 [ 562.201702][ C1] schedule+0xdd/0x390 [ 562.205774][ C1] schedule_timeout+0x127/0x280 [ 562.210632][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 562.216010][ C1] ? __pfx_process_timeout+0x10/0x10 [ 562.221297][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 562.227108][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 562.232571][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 562.237341][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 562.242633][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 562.247575][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 562.252784][ C1] rcu_gp_kthread+0x179/0x230 [ 562.257460][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 562.262657][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 562.268463][ C1] ? __kthread_parkme+0x18c/0x230 [ 562.273490][ C1] ? kthread+0x13a/0x450 [ 562.277724][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 562.282918][ C1] kthread+0x370/0x450 [ 562.286979][ C1] ? __pfx_kthread+0x10/0x10 [ 562.291560][ C1] ret_from_fork+0x754/0xd80 [ 562.296148][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 562.301253][ C1] ? __switch_to+0x7b4/0x1120 [ 562.305924][ C1] ? __pfx_kthread+0x10/0x10 [ 562.310510][ C1] ret_from_fork_asm+0x1a/0x30 [ 562.315280][ C1] [ 562.318288][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 562.324601][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.335097][ C1] Tainted: [L]=SOFTLOCKUP [ 562.339410][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.349460][ C1] RIP: 0010:kasan_save_stack+0x0/0x50 [ 562.354844][ C1] Code: 4a ff 83 e2 01 48 0f 45 c1 80 78 33 f5 75 cc 5b c3 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 41 54 31 c0 b9 40 00 00 00 41 89 f4 55 89 fd 31 d2 be [ 562.374453][ C1] RSP: 0018:ffffc90000a083a8 EFLAGS: 00000246 [ 562.380526][ C1] RAX: ffff88819b9e02c0 RBX: ffff88819b9e02c0 RCX: 0000000000000000 [ 562.388494][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000082820 [ 562.396461][ C1] RBP: 0000000000000001 R08: ffff88819b9e0000 R09: 0000000000000000 [ 562.404432][ C1] R10: ffff88819b9e02c0 R11: 0000000000000000 R12: ffff88814041a640 [ 562.412398][ C1] R13: 0000000000082820 R14: ffff88819b9e0000 R15: 00000000ffffffff [ 562.420365][ C1] FS: 0000000000000000(0000) GS:ffff888124447000(0000) knlGS:0000000000000000 [ 562.429294][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 562.435879][ C1] CR2: 00007f3e66caf7f3 CR3: 0000000064705000 CR4: 00000000003526f0 [ 562.443852][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 562.451819][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 562.459791][ C1] Call Trace: [ 562.463075][ C1] [ 562.465919][ C1] kasan_save_track+0x14/0x30 [ 562.470606][ C1] __kasan_slab_alloc+0x89/0x90 [ 562.475462][ C1] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 562.481354][ C1] ? kmalloc_reserve+0x148/0x350 [ 562.486292][ C1] ? __kasan_slab_alloc+0x60/0x90 [ 562.491325][ C1] kmalloc_reserve+0x148/0x350 [ 562.496091][ C1] __alloc_skb+0x185/0x710 [ 562.500505][ C1] ? __alloc_skb+0x5b7/0x710 [ 562.505100][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 562.510034][ C1] ? rcu_is_watching+0x12/0xc0 [ 562.514800][ C1] synproxy_send_client_synack+0x19e/0x970 [ 562.520601][ C1] ? down_write_trylock+0x230/0x3b0 [ 562.525799][ C1] ? find_held_lock+0x2b/0x80 [ 562.530479][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 562.536803][ C1] ? net_generic+0xea/0x2a0 [ 562.541309][ C1] nft_synproxy_do_eval+0xa73/0xd50 [ 562.546507][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 562.552227][ C1] ? do_raw_spin_lock+0x128/0x260 [ 562.557256][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 562.562715][ C1] nft_do_chain+0x2e8/0x1930 [ 562.567305][ C1] ? rcu_is_watching+0x12/0xc0 [ 562.572075][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 562.577093][ C1] ? ipt_do_table+0xd4f/0x1b00 [ 562.581854][ C1] ? rcu_is_watching+0x12/0xc0 [ 562.586613][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 562.591907][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 562.597208][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 562.602415][ C1] nft_do_chain_inet+0xee/0x340 [ 562.607262][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 562.612717][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 562.617752][ C1] ? nf_nat_ipv4_local_in+0x181/0x730 [ 562.623133][ C1] nf_hook_slow+0xbf/0x220 [ 562.627544][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 562.632655][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 562.638634][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 562.644265][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 562.649380][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 562.655365][ C1] ? ip_rcv_finish_core+0x80a/0x2220 [ 562.660653][ C1] ip_local_deliver+0x163/0x1f0 [ 562.665505][ C1] ip_rcv+0x2d9/0x5d0 [ 562.669489][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 562.673990][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 562.679882][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 562.686297][ C1] ? lock_acquire+0x1cf/0x380 [ 562.690980][ C1] ? process_backlog+0x32a/0x1580 [ 562.696008][ C1] ? process_backlog+0x32a/0x1580 [ 562.701028][ C1] __netif_receive_skb+0x1f/0x120 [ 562.706052][ C1] process_backlog+0x37a/0x1580 [ 562.710908][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 562.716294][ C1] net_rx_action+0xa40/0xf20 [ 562.720898][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 562.726024][ C1] ? tmigr_handle_remote+0x132/0x380 [ 562.731319][ C1] ? run_timer_base+0x121/0x190 [ 562.736170][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 562.741373][ C1] handle_softirqs+0x1eb/0x9e0 [ 562.746142][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 562.751425][ C1] __irq_exit_rcu+0xef/0x150 [ 562.756013][ C1] irq_exit_rcu+0x9/0x30 [ 562.760247][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 562.765885][ C1] [ 562.768809][ C1] [ 562.771733][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 562.777706][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 562.783333][ C1] Code: 98 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 bc 1b 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 562.802937][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 562.809004][ C1] RAX: 0000000002cbf70f RBX: ffff88801e6b2480 RCX: ffffffff8b8fcc75 [ 562.816971][ C1] RDX: 0000000000000000 RSI: ffffffff8de72aaa RDI: ffffffff8c1af220 [ 562.824938][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 562.832909][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd6490 [ 562.840878][ C1] R13: 0000000000000001 R14: ffffffff90d97910 R15: 0000000000000000 [ 562.848852][ C1] ? ct_kernel_exit+0x125/0x180 [ 562.853711][ C1] default_idle+0x9/0x10 [ 562.857949][ C1] default_idle_call+0x6c/0xb0 [ 562.862707][ C1] do_idle+0x35b/0x4b0 [ 562.866774][ C1] ? __pfx_do_idle+0x10/0x10 [ 562.871369][ C1] cpu_startup_entry+0x4f/0x60 [ 562.876131][ C1] start_secondary+0x21d/0x2d0 [ 562.880897][ C1] ? __pfx_start_secondary+0x10/0x10 [ 562.886187][ C1] common_startup_64+0x13e/0x148 [ 562.891136][ C1]