last executing test programs: 6m56.378432019s ago: executing program 3 (id=1228): timer_create(0x0, 0x0, &(0x7f0000000300)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r4, 0x0) listen(0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x5f0}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {}, {0x1, 0xa}, {0x7, 0x3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x2000c0b0) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 6m55.86963858s ago: executing program 3 (id=1231): r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xfffffffe}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c001780"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000100000000000100100000c000000"], 0x10}, 0x0) r3 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) lsetxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:nvram_device_t:s0\x00', 0x24, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x7ff) ftruncate(r3, 0x7000000) r6 = dup(r3) preadv2(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x2000, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1085408, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000620030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) mount$overlay(0x0, 0x0, 0x0, 0x40, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'gre0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x100fe, 0x8000ffa1}, {0xfffffff9, 0x80500}]}}) 6m53.498466134s ago: executing program 3 (id=1238): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'veth0_to_batadv\x00', {0x4}, 0x7fff}) (async) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r2 = socket(0x2c, 0x5, 0x9cb805f5) setsockopt$inet_tcp_int(r2, 0x6, 0x17, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x8000000000000003, {0x0, 0xf0, 0x2}, 0xff}, 0x18) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xb, 0x10}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) (async) close(r2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) (async) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) (async) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdc00}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000040) (async) r8 = fanotify_init(0x81, 0x40000) fanotify_mark(r8, 0x105, 0x800101b, r4, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = dup(r9) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0x1f, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) (async) read$FUSE(r8, &(0x7f0000002300)={0x2020}, 0x2020) 6m52.099044826s ago: executing program 3 (id=1241): timer_create(0x0, 0x0, &(0x7f0000000300)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r4, 0x0) listen(0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x5f0}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {}, {0x1, 0xa}, {0x7, 0x3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x2000c0b0) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 6m51.77763434s ago: executing program 3 (id=1243): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x188}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x2080) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 6m45.253006124s ago: executing program 3 (id=1261): r0 = signalfd(0xffffffffffffffff, &(0x7f00000007c0)={[0xffffffffffffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0xff2e, 0x2, 0x62, 0xfffffffe}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x180, &(0x7f0000000440)="d06fd3e6dd7972a1ef36c8c7751a8993b8a3511fd0dfc7eedb87dba6764364cecd1bc1e8564274f2cf9496de0119d22068ce263d691160a753eb6ce6f434680e6752432fcef210124209e8379d25e8d03763821f4264fadada8b9ffd3890a6bbb4166c929361f2daac5ca9bf0a71e3be2f19cc995b91e132172e2115977776", 0x7f, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="d5c059c03e49a3c756da0fc09deffc25bc5049e52a813c24f37c50b7a5cb427e36d9112c4af77706775d882e5b8de893d9430cb3b9285c481c9da4bc2ce76f7e30535ec92c32e63735dc1f132cd6960268") sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x10000018, 0x8001, 0x0, 0x9, 0x0, 0x80, 0xfa11, 0x8}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_ethernet(0x7e, &(0x7f00000006c0)=ANY=[@ANYBLOB="01ffffffffff86dd6000ff8000481100fe8000000000000000000000000000bbff02000000000000000000000000000100004e2286cf255fcf4260bfb2ebb0080048907804000000000000007d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440f000000000000001c32d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc9460000000000007713720bf527e5307f113f69c9b76041272029d8f23d990abb28ffbae8dd465b70875014668fb860b53c1d15e34ffcf9075d219e2678af46dcdce0faab29"], 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000040)={0x5, 0xffffffffffffffff, 0x3e, {0xe8, 0x3}, 0x7f}, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r7, 0x4068aea3, &(0x7f00000000c0)={0xed, 0x0, 0x5}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 6m29.873737116s ago: executing program 32 (id=1261): r0 = signalfd(0xffffffffffffffff, &(0x7f00000007c0)={[0xffffffffffffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0xff2e, 0x2, 0x62, 0xfffffffe}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x180, &(0x7f0000000440)="d06fd3e6dd7972a1ef36c8c7751a8993b8a3511fd0dfc7eedb87dba6764364cecd1bc1e8564274f2cf9496de0119d22068ce263d691160a753eb6ce6f434680e6752432fcef210124209e8379d25e8d03763821f4264fadada8b9ffd3890a6bbb4166c929361f2daac5ca9bf0a71e3be2f19cc995b91e132172e2115977776", 0x7f, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="d5c059c03e49a3c756da0fc09deffc25bc5049e52a813c24f37c50b7a5cb427e36d9112c4af77706775d882e5b8de893d9430cb3b9285c481c9da4bc2ce76f7e30535ec92c32e63735dc1f132cd6960268") sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x10000018, 0x8001, 0x0, 0x9, 0x0, 0x80, 0xfa11, 0x8}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_ethernet(0x7e, &(0x7f00000006c0)=ANY=[@ANYBLOB="01ffffffffff86dd6000ff8000481100fe8000000000000000000000000000bbff02000000000000000000000000000100004e2286cf255fcf4260bfb2ebb0080048907804000000000000007d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440f000000000000001c32d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc9460000000000007713720bf527e5307f113f69c9b76041272029d8f23d990abb28ffbae8dd465b70875014668fb860b53c1d15e34ffcf9075d219e2678af46dcdce0faab29"], 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000040)={0x5, 0xffffffffffffffff, 0x3e, {0xe8, 0x3}, 0x7f}, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r7, 0x4068aea3, &(0x7f00000000c0)={0xed, 0x0, 0x5}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 1m27.213993936s ago: executing program 2 (id=2045): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100030000002082052b0040000102030109026e000301008004080b0002012530060904000000010130"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) fchdir(r2) socket(0x1, 0x3, 0x20000001) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="4c494e45202743442043617074757265272030303030303030303030303030303030303030300a5350454139a64b9f73cba0e2a22bf149324b455220274344204361707475726527203030303030303030fced707a3dbe9ee5303030300a564f4c554d4520274d"], 0xbb) close(r5) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r6, &(0x7f0000000680)=""/102396, 0x18ffc) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r7, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, 0x0, 0x0) 1m24.294616236s ago: executing program 2 (id=2053): bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x0, 0x0, 0x2004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r2}, 0x68) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0xcd, 0x24, 0xf0b, 0x78bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x148, 0x2, {{0xf31c, 0x9, 0x7, 0x123, 0x4, 0x2}}}}]}, 0x178}}, 0x40a0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/107, 0x6b, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) 1m16.077070242s ago: executing program 2 (id=2067): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000600)=ANY=[], 0x18) rt_sigsuspend(&(0x7f0000000140)={[0x3]}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1}, 0x20) process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000940)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4\x19\x80\xb7\xeby\x81\xa8\x00A\x06yK\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\xf4f\x8c\x87\xc2\x01\x00\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec\xd1\xf4kG##\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe0\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xff}, 0x1c) r4 = accept$alg(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000100)={0xc000000b}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1836000007000000000000009b7e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000003000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0x1200, 0x8a, &(0x7f0000000680)=""/138, 0x40f00, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x1, 0xd, 0x813, 0x9}, 0x10, 0x23c56, 0xffffffffffffffff, 0x1, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6], &(0x7f0000000d80)=[{0x4, 0x4, 0x6}], 0x10, 0x3}, 0x94) r7 = dup3(r4, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000340)={{0x7, 0x1, 0x5, 0x2, 'syz0\x00', 0x7f}, 0x1, 0x30, 0x7807, 0x0, 0x1, 0x9dc, 'syz1\x00', &(0x7f00000002c0)=['{#\x00'], 0x3}) sendfile(r7, r1, 0x0, 0x1000009) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r9, 0x1}, 0x14}}, 0x0) 1m11.622119354s ago: executing program 2 (id=2078): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) symlinkat(&(0x7f0000000080)='.\x02\x00', r4, &(0x7f0000000200)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='.\x02\x00', 0x4) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x31) 56.267045612s ago: executing program 33 (id=2078): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) symlinkat(&(0x7f0000000080)='.\x02\x00', r4, &(0x7f0000000200)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='.\x02\x00', 0x4) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x31) 20.474947411s ago: executing program 6 (id=2206): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x800, 0x400, 0x4, 0xfb11, 0xffffffff}, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0xffffffffffffff5c) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000}) r3 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, 0x0) mq_notify(r3, &(0x7f0000000300)={0x0, 0x21, 0x4, @thr={&(0x7f0000000180)="c8805add414b599772f3f8030ae8176e8a15477e7fc66a8767132a8b5220b5bdf6fa76a80f2140b57e741f1c7f8bb5b1ca38338b64f8eb1bb0b76f7e5cc1e6d2f2a8ba05978dbe821ecb1d181dec045b6d58c62157b6f811491403c8cb71dfc5059e8dfe731b6d613295909cec17a0e147c709c6f0f382307b57abe0711c33f32b0a6ff2a2f4dfb307f0da299c5d13c636223790c63c32f086f87d8006f2b8e25233d5", &(0x7f0000000600)}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$mtd(0x0, 0x260c, 0xa02) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x100041eadf57) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000680)=""/102386, 0x18ff2) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) 16.015797766s ago: executing program 1 (id=2214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xbd}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x1c525}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0xba01, 0x0, 0x40d0}, 0x810) 14.35423117s ago: executing program 1 (id=2217): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff000015599a8f44c693d3555e10993e3a914992c5223c936b6bfa34a776962364cd288f826a2a6727bc1ae2c2f759348aeba6e913aa68375759b7d1745c733315204e1de04762889687ad723f63d4cbc6bf354b69ce9928620b4a507949d1ab", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r1, 0x5452, &(0x7f0000002480)=0x3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="734e2861552950880f7200"/20], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 13.300217169s ago: executing program 6 (id=2218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESHEX=r2], 0x44}}, 0x8001) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000680)={&(0x7f0000000200), 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1c8, r5, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x4f}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0xd6, 0x5b, "57e6efcd3fcdb960ed389ffaafeb4d83b4d9cdebff03c7722efe8220ebba78bb55365887a159a605d1c308f93ef7ff159073f8f2701706147b371674e28fc533f2e108472d923626da04d6a7af02444439447496cfe684ba7a5cfc3c26dca7dc8f49a5ecf3f80270940f4dc56034c147553c766962add8f564d7a834e8e837f2763b348134e39e0bcc902f1fe875c5731b20309404ea60ad91f107d507604d8773224134846cd1c117f9056b55d51c6a7911d52f6d6dc2de6402408da24d0755f7df364c2c56b75f9d50af919eb9bff3c175"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xdec3}, @NL80211_ATTR_FRAME_MATCH={0xb5, 0x5b, "3d606994cb3ed5a357a24d253d981ef4cd11bdb04c274bf32674f3f07d09a2c5f148924affbfdf262a216e27a5596bacfa0e00f210eb5f983bd58f3c7f0e4d3caa39589220c9595d5e28e8d17e543aa4323fa1e1104c9876c0a5174839f92452965aa9abdd8429d6825e0f35135ccc1339f40dba76dbb7793223c61ece21040fed545f8402191538d4874e83d0e6e7d156f494a00b62ab80cdab1b9dab54dcc21aa752c67def17af9fc233aa324c29dd8c"}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2004c400}, 0x20040084) 13.065284511s ago: executing program 1 (id=2219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f000001cd00)=""/102400, 0x19000) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e24, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x1}, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000240)=r4) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000009400004803c0001800b00010065787468647200002c000280080004400000000308000740000000170800064000000001050002000000000008000340000040010900010073797a30000000000900020073797a32"], 0x94}}, 0xc084) 11.795057193s ago: executing program 6 (id=2221): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b900000000109021200"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008002000fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 9.304844699s ago: executing program 4 (id=2225): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4000008, "ab3cfa07558139ede6dc06270ee04200", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x8dc3e4e26cb29028, 0x0, 0x0}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'user.', '/sys/kernel/debug/sync/sw_sync\x00'}, &(0x7f00000002c0)=""/62, 0x3e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_SENDMSG_ZC={0x30, 0x8, 0x2d, r6, 0x0, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x835a, 0x4014, 0x0, {0x1}}) io_uring_enter(r7, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000c80)={0x14, &(0x7f0000000a80)={0x40, 0x5, 0xc1, {0xc1, 0x31, "c3590ce8b3b9cda03839c347da3ebba30a9991c2a9c90a556221c9845a886db9bbac36943f2f7f15382c908df15ed2147adbb2e2e240475ffcde57daea21c8b4e624b44f7b9f4681379038b339d53318fd32cfa48ef467e4da93be179219e2333e8f0e85ea872cf7673ac313aac799c609f681f66cae3938c3afbd834b42287ad2f3a27d706fec0c767fd91db002816ffabd59b77ec89287ea9a91456653a76981de436b46d4842262ddf869f58e1ab381dcf70826ee6a9d384c13255cb2bd"}}, &(0x7f0000000b80)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "dd6155a24fea0c0bb957767e869d6ee3ebc8b29271b2d8d4a8254ea0134c72bc8b0e493a398ac6d4a956dac5331838479425d1f6df7e383114f06b972199231c3b57aae533e3900a9cd219f964e52a349ad25e95117b098a339fc44ef6369af5098d8f57406ed40bbc55ab713807ad7800e963d4660ffcda2902ce09df0d3b49e1cb31945ecb6a4fe8a71529314d911409b2aaddb01dc9c47eb4984706df2432b967f1ebeb46ca280a0232e7e4e5d238886cf99b66dd058b77e89ddcb68d8ab5bb80aa9509d8"}}}, &(0x7f0000000e80)={0x34, &(0x7f0000000cc0)={0x40, 0x14, 0x20, "ff5c3c0446f19b64c4f40975570253229f021eeb580c42952179ec2fd8fdb1e7"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000d40)={0x0, 0x8, 0x1}, &(0x7f0000000d80)={0x20, 0x0, 0x3d, {0x3b, "adb75639455febe316e4d0ccde6c13e921069eeaab0c274ad2285639b5dcc3e742e3b994b05fb19be2db52e018c213e72d9d97715d30ef9b957fac"}}, &(0x7f0000000e00)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000e40)={0x20, 0x0, 0x1, 0x5}}) syz_usb_control_io$lan78xx(r5, &(0x7f0000000700)={0x14, &(0x7f0000000540)={0x0, 0x23, 0x7b, {0x7b, 0x2, "c255f4c43d05c4617994ce3eb78bd2e0a9a9c4cf0c6ed8a49fee422eeeff8aa429114dd4fe47fc2bdc7050446cfe642915b46850500dc16071477544ffbd3850442782ddc021ba04875ad0f88f81465912682da39361a1b3f1284786a3e0b766f47c659cc218221e7a4aa1a784edfb047c93c6bd211826966e"}}, &(0x7f0000000600)={0x0, 0x3, 0xe0, @string={0xe0, 0x3, "4e0b834b008286c563bd754078649f0f69fd884a164d392cee1d526dc3aff8acb1e9596e99b0effeda888897734b1ffa863676c44f900d78d6d92d4e0404148e59522a2125f2fa54ea9df79d3f5132b4cf8ae51cfa6868837a07ef3da527b0f4490e1f39fd7161d0d648c17cf5cd31e4b06ceecd58641fbc52b757ec7b86cea0a9a8067acadf0eeff2e0a48cc000f1f63f2a7cf43b33a6ab442cca5865b2cbdf3d24a937a9484156f77de2156084b27b5f8241c94477a4eb55a66db1c7a4ef5b48bf66747fe2938f2f5fc18ac9b4a752ebbec3a1226e664bac8d1c644d21"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000740)={0x40, 0x0, 0x74, "92522c006347e4c54dea0bb34137fa23037f4c01416caa345451d7d0499b116f36ca925f96ffe9f14dffcf8bf80ebdf3607c676d60ba370a962fe5388bca7ac213ede1f16315d9fc84076c3769f36f1905b1a7432a0382726f6f75cac8643ed543f0849434c414fc5cd115866353736ec0143f12"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x80000001}, &(0x7f0000000880)={0x40, 0xa0, 0x4, 0x5}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "51b53217aab69bd3ee6c7804f16c68135c0e169dbdc22e60a431dd92a16fc8a0e507ef7c17709a36fa92315496a8c3"}}) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000300)={0x34, &(0x7f00000000c0)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r5, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x0, 0x24, 0x47, {0x47, 0x21, "4cbb37530a6c9705387892fcae37ed5d9b7c0bd0717ba38d9d130c51b1923e00990d53923d98679b2094ae92b761539ca2c522c275fb8c53527229459ba485b5102a6ab903"}}, &(0x7f0000000940)={0x0, 0x3, 0xe9, @string={0xe9, 0x3, "75f2ecda826fa9821fddbfec4c905551d6d5cf5476b7a79b280fa88d7fe37ff0569f0ccff43b911b5f5bfb8f404267ec5ae39359ffd2f0c8ad64f016a542a4d32434670b7c28b76b94a1ccc4bbb42f3bb2ef6807b6b28d5450ad3096d46da8cdec2477b408507d5b6096c5208c2834f167048e7f3287e79e35bd9eb5053569d218ef5a740ed29d37d9ae14d4d7d12d10522684817a1b9d56ffd151c8c0412c8b0870f51321e9fda11bd87d3a6aa21bccc64d6ded569bf531e53fe26d3f6768dfd1e38d030051c88e0083724988ac2521eba2a5111187966895550978d8ada3d7c2c70600000000"}}}, &(0x7f0000000400)={0x34, &(0x7f0000000340)={0x0, 0x14, 0x8b, "a942d55753aaee4a5a3d5eca7a433f229e6119813f63532e85725cfaec888b8bd217dcf251d79830d84bb507142c328923d2a129e57abf662d5f586ea5167f1ed8048935aa5abc7eae2fd7bd11122883ead9c8f4edc6d4a19ae5c9b3cf0872495936eb3bee08c0abcd0d0ee5cfea519d8ba5c1801d426a6828132a98d2877af495907c1a34f80b09fb3bf8"}, &(0x7f0000000080)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "6f09040000008de24e5d3131949951b55a192c32c3951a462e89c5824d9980ed00"}}) 8.770158551s ago: executing program 1 (id=2226): timer_create(0x0, 0x0, &(0x7f0000000300)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r4, 0x0) listen(0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x5f0}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {}, {0x1, 0xa}, {0x7, 0x3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x2000c0b0) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) 6.963311399s ago: executing program 1 (id=2230): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f00000003c0)={0x0, 0x16}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 6.80304992s ago: executing program 6 (id=2231): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0x1, 0xf, 0x1}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) timer_create(0x6, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x242c3) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000000)={0x4, 0x3, 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x3, 0x7}, {0x0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xe5}}, @TCA_RATE={0x6, 0x5, {0x94, 0x31}}, @TCA_RATE={0x6, 0x5, {0xff, 0x3}}, @TCA_RATE={0x6, 0x5, {0x4, 0x81}}, @TCA_CHAIN={0x8, 0xb, 0x2f6}, @TCA_CHAIN={0x8, 0xb, 0x8ff8}, @TCA_CHAIN={0x8, 0xb, 0x625}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4040) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={0x0}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040)=0xa, 0x1) shutdown(r2, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) timer_create(0x6, &(0x7f0000000200)={0x0, 0x28, 0x3, @thr={&(0x7f0000000080)="a25b35ac148b3c82eee247be7ee12becac79f9b84f3017538a7258bc788797dc8c573fe31128c1a74cbe83d2be50b741ed229665589fd60908045e5ae5d65d0bd63f3c79a427168f7f015399ef6227896397f3f47cde7cd93d378eeb31b398d50106bdb0b7a9378f895d72a84f", &(0x7f0000000100)="705a541be962f12edd50bc7b3a6e58b91dc1503392532639522169fb6d2da59a94eef051a103e95ab9c5bdcd64c6b0cec96f2c5ea0937ac8de14e2d04e3a74fd174b4b1b8c51ef274545a7a541bd730b01e9373c36c84adee19f2a678a28ec20076a8ed09c0e039202ec7999fbc1f9de47539603910e341790f1c9520ba983e18fcf2429fab66c13ef6f66c2ce52107d7b8a740683061fb4168ad07c51c709cecc36e1545ba0e9cfe949f4e5e1bbdd376092004f703caf199896c8fa81d07cb4566c82fe68b841c93f97aefa042f0dc12293e2dd6ae424"}}, &(0x7f0000000240)) 6.641869847s ago: executing program 5 (id=2232): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = userfaultfd(0x80801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x30, 0x1405, 0x800, 0x70bd26, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c005) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000800000/0x1000)=nil, 0x1000}) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x1d, 0x10, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "6700376022c4dae4162743ee000000330200000000dfffffff008000", [0x8, 0x5]}}) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x4fb) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000bc0)={0x1, [0x0]}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}]}]}, @NFT_MSG_NEWRULE={0x110, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_USERDATA={0xe5, 0x7, 0x1, 0x0, "77b2aa1e99cdb7d3ad3ba3b5ac031a1cca32dcc3d4d6dc482e3e81323fb1a77a183c8479f22f51b5ef12b8fbc97d5c092d4e20a02698041f054dd3e7e73de16238cc6bcb549046bbba509f06938298ae9e2641e9ab3c912307d82306066d69d94b043af3cc01683e6119a9ca821c83e2511ddf83a7763a14374608b6d295dab0c1ee21a26553127a3bb3b5348a551b4761446968b7309a55ba5be267db41c279c11661fdbd40336fa7b7b97ab53fb11e9aae060f9b8f08c822b22e4b736f68c38c9933c566f491945aac83de49e2a9966cbb8f0dfe293591aac95d5714205f8d80"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x188}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000406a054ffe00000000000109022400010000200b090400000203000100092107007c012228000905810328"], 0x0) r6 = syz_usb_connect(0x2, 0x64, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000280)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="203128000000280af17d3816fbbc787a4d4cdbb387f10127ba47b53db3"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r6, &(0x7f0000000d40)={0x14, &(0x7f0000000b40)={0x40, 0x21, 0x69, {0x69, 0x23, "586f1d6ea2f7e5f04b9a5b3b0eb2b7919a8425359b5dc06b820439850f020af156e0baade4ffe77fa94a69033412ccd6ca469bff6376e90d47b44a2931c65b73298112ca5fd44665c7c32fb79fe0854e000f1ee7e1999488b14fb94018dc0737113f4210322424"}}, &(0x7f0000000c80)={0x0, 0x3, 0xaa, @string={0xaa, 0x3, "7a49c10bdfde91dcd72d8b73626e4c7e8036b76d6592206863e7cc18a5a09bffa2605e249c85bf032b0603cc86e38002169dc487de2086e3c1a795ebf481f04f6fdc845986d9b782c5245d39986a7fe14a3eb6442e2cc9d75955657baf79fb66f883723dd2c3c176edc8c5c38586b63a2888a3a286455a0e91acdf50ac7f4e2e12babf56c0ada853791705cd1bd529ecc46c30c7c2683ecf9d29ab015d84819ec4a234af0dfae2bb"}}}, &(0x7f0000001000)={0x44, &(0x7f0000000d80)={0x40, 0x7833015d4bfa191b, 0x9c, "148a29688a8027e76998fa04f9d049c2e7ccd5c27daac83799d31984078c34a8317ebcb8f644650a1a1d33e6d9250888efbd8f9180c00d7baa67668e555e2026600bdc2dbeaaa8d686f9d513d88ba0c1f3068cc7b5ef698f58c570b27e308cb63d04132694004a84c641adc526d3769fe391663fde8b1f1e4547b764017d988e75029ad55d15b8d152f6414fb622eb283aa0b432d8480a2022f7c587"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000ec0)={0x20, 0x81, 0x1, "e2"}, &(0x7f0000000f00)={0x20, 0x82, 0x3, '8gR'}, &(0x7f0000000f40)={0x20, 0x83, 0x1, "ca"}, &(0x7f0000000f80)={0x20, 0x84, 0x3, "160697"}, &(0x7f0000000fc0)={0x20, 0x85, 0x3, "e59ac8"}}) io_setup(0x202, &(0x7f0000000200)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) syz_usb_connect$uac3(0x5, 0xe7, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x81, 0x0, 0xd9, {0x8, 0xb, 0x1, 0x0, 0x1, 0x24, 0x30, 0xe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x4b, 0x9}, [@feature_unit={0x19, 0x24, 0x7, 0x5, 0x6, [0xd, 0xc, 0x9, 0xf, 0xff]}, @output_terminal={0x13, 0x24, 0x3, 0x4, 0x302, 0x1, 0x3, 0x7, 0x45, 0xac, 0x4, 0x401}, @extension_unit={0x15, 0x24, 0xa, 0x6, 0x5, [0x0, 0x3, 0x0, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x800, 0x4, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x7, 0x9, 0x6c, 0x70}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1c, 0x200, 0x6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x94, 0x1, 0x7, {0xa, 0x25, 0x25, 0x800, 0x39, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x754b, 0xfffb, 0x80}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd8, 0xb8, 0x8, {0xa, 0x25, 0x25, 0x1, 0x6, 0x2}}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x101, 0x9, 0x7e, 0x20, 0x20, 0x1}, 0x59, &(0x7f0000000640)={0x5, 0xf, 0x59, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x38, 0x6, 0x3, 0xf00f, 0xd, [0x30, 0xf, 0x3ff0, 0xf, 0xffc00f, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0x9, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xff, 0x1, 0xf1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x70, 0x7, 0x6, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xe, 0x4, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x4, 0x3f, 0x222e}]}, 0x7, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x437}}, {0x93, &(0x7f00000007c0)=@string={0x93, 0x3, "75638b2d22a2277fdf0b6de80717155bdb8c6b6cd409a140fc92ab77402706d99391d2bf38147731953302dd41a7ee1c3ef2b8c66068487620888b85fb52bc5f452f4782ecccdb9c9887feff45d903bbe9d60ed6de51aa4b5da37f36e2e7e694b2e71a7a66202feceb2d88add67ce0ed080ce564d0e7fbf4691b651dee903227fd01aa18eb9742f8d3a45eba6ceefcab47"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4e, &(0x7f00000008c0)=@string={0x4e, 0x3, "9b6b5319d15ae3132acf4de9a273c13a3e89a8727f9226feb8977a42c264dfea8edd429b20875268db2ee131e42abbf84bf24eb320e9999d9f8ab5d03d8e71021588178372c8dfcd82cb833a"}}, {0x94, &(0x7f0000000940)=@string={0x94, 0x3, "bb0d532bc3db8f4f9e773052ec8daa4937b300176f262d1bbf1922b315a58701d372b6bb78e95b5e285ebb71f4664c1bf45e8a06196056e3079e931f85d496b1594360eb7cd20ab6eebe0d7f77e1dd95a5961316ffd309c50bb11b8f3cdfea705e774539dc18e5e927d12fe1fba6eabec1a898feb34e5ecd6d037d3dd97b325ec2cebba96d9ad5103ae66c10db889e812648"}}, {0x94, &(0x7f0000000a00)=@string={0x94, 0x3, "f9333a0208ebf173b4ac0ce39b6c45b85bfd1c4b12a8f001d683359d53d1a2739d3a4e6704a583d1016567c36b82efa54354e4ca27fe15f5ca73c147b8f575f507cfc6c84f1a2acf1b035821db5bb4761df6e0ef210dd57e9baff3422d7c930d7eb561393445a0a35f9dbf3fa1120acc0fd6c90e42fe47855a9772c3babcf44d85a5bc456a7e7557d031b542f432243495b7"}}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r7) 5.360724296s ago: executing program 4 (id=2233): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0xffffffff, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@ip4=@multicast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x4cd0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f0000000340)=@generic={0x1, 0xb3, 0xd}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) timer_create(0x3, 0x0, &(0x7f00000005c0)) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x201, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r9}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 4.352623641s ago: executing program 4 (id=2235): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x13, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0xe2, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') 4.285005537s ago: executing program 0 (id=2236): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='utf8', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xff}, 0x1c) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r4 = accept$alg(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)}, 0x20) r7 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000100)={0xc000000b}) signalfd4(r7, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1836000007000000000000009b7e000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000003000000bf91000000000000b7020000000000008500000085000000b70000"], &(0x7f0000000640)='GPL\x00', 0x1200, 0x8a, &(0x7f0000000680)=""/138, 0x40f00, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x1, 0xd, 0x813, 0x9}, 0x10, 0x23c56, 0xffffffffffffffff, 0x1, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1, r6, r7], &(0x7f0000000d80)=[{0x5, 0x3, 0x4, 0x6}], 0x10, 0x3}, 0x94) r8 = dup3(r4, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000340)={{0x7, 0x1, 0x5, 0x2, 'syz0\x00', 0x7f}, 0x1, 0x30, 0x7807, 0x0, 0x1, 0x9dc, 'syz1\x00', &(0x7f00000002c0)=['{#\x00'], 0x3}) sendfile(r8, r1, 0x0, 0x1000009) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r10, 0x1}, 0x14}}, 0x0) 4.26096279s ago: executing program 5 (id=2237): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x2a8, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000002c0)=0xffffff80, 0x4) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) syz_io_uring_setup(0x5103, &(0x7f0000000180)={0x0, 0x1370, 0x11000, 0x2, 0x2cf}, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 3.585136455s ago: executing program 1 (id=2238): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200080c1, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1f}, 0x1c) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000000)={0x3, 0x0}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={0x0, 0xdc}}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x4000) 3.538221904s ago: executing program 4 (id=2239): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019300)=""/102392, 0x18ff8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="740000000206010200000000000000000200000314000780080008400000003708000640000008000e0003006269746d61703a6970000000050005000a00000005000400040000000900020073797a310000000005000100070000000d0003006c6973743a736574"], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400400010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010000000140035006d6163766c616e300000000000000000"], 0x34}}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8, 0x80800) socket$inet_smc(0x2b, 0x1, 0x0) 3.462842642s ago: executing program 5 (id=2240): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, &(0x7f0000001fc0)) sendmsg$nl_route_sched(r0, 0x0, 0x408d4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lstat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="000000000003db8cbc49d9ce8002", 0x0, 0xfdff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0xfffc, 0xc0000000, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}}}, 0x108) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x35200011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES16], 0x5) 3.33485852s ago: executing program 0 (id=2241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 2.917948917s ago: executing program 0 (id=2242): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2001) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x80}, 'port1\x00', 0x8, 0xc08, 0x7, 0x5, 0x4fee, 0x9, 0x2, 0x0, 0x4, 0x6}) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, &(0x7f0000000780)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0) mlockall(0x7) writev(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 2.757780407s ago: executing program 6 (id=2243): r0 = socket$kcm(0xa, 0x5, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f0000000580)="b3"}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(r5, 0xd, &(0x7f0000000140)={0x2d, 0x10}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019300)=""/102378, 0xfffffffffffffe84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = socket(0x1d, 0x2, 0x6) r7 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000380)={'veth1_to_hsr\x00', 0x1000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r8, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}}, 0x44001) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9926}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x20000041) 2.531815169s ago: executing program 4 (id=2244): socket$inet6(0xa, 0x2, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7c, 0x7fff7ffc}]}) symlink(0x0, &(0x7f0000000040)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f0000000000)=@OVL_FILEID_V1={0x18, 0xf8, {'\x00', {0x0, 0xfb, 0x15, 0x0, 0x7, "81850cfdd65e9f6fee9f011d77c94c1f"}}}, &(0x7f0000002300), 0x600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000007a000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) read(r6, &(0x7f0000000140)=""/87, 0x57) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000025300)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 2.326892918s ago: executing program 5 (id=2245): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x88}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvfrom(r2, &(0x7f00000005c0)=""/35, 0x23, 0x1, &(0x7f0000000600)=@in={0x2, 0x4e21, @multicast2}, 0x80) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000002700)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000180)=0x1) 2.25854954s ago: executing program 0 (id=2246): pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002b75aab37900000002000000", @ANYRES32, @ANYBLOB="0c009900090000004400000008002500000000000800020001000000"], 0x38}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000622c, 0x0) 2.156154757s ago: executing program 0 (id=2247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0xffffffff, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@ip4=@multicast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x4cd0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') ioctl$sock_SIOCGIFBR(r9, 0x8940, &(0x7f0000000340)=@generic={0x1, 0xb3, 0xd}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) timer_create(0x3, 0x0, &(0x7f00000005c0)) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x201, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r10}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 1.153335581s ago: executing program 6 (id=2248): timer_create(0x1, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1, 0x45, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0x4, 0x1, 0x8, 0x1, 0x0, 0x7, 0x800, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x6, 0x413, 0x69, 0x2, 0x6, 0x100000006, 0x10100, 0x168, 0x7, 0x7, 0x8, 0x5}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r6, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f00000001c0)={'macsec0\x00', @ifru_mtu=0xfffffffc}}) socket$inet6_mptcp(0xa, 0x1, 0x106) 955.148894ms ago: executing program 5 (id=2249): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x13, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0xe2, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') 213.091468ms ago: executing program 0 (id=2250): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) unshare(0x8040480) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x3e, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000001100)="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", 0x53f, 0x14000800, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0xffffffff, 0x4) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x10f, 0x1, 0x0, &(0x7f0000000140)) rt_sigtimedwait(&(0x7f0000000080)={[0x180000000]}, &(0x7f0000000180), &(0x7f0000000200)={0x0, 0x989680}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8010) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x21a3, 0x30}, &(0x7f0000000900)=0xc) 121.423456ms ago: executing program 5 (id=2251): socket$inet6(0xa, 0x2, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7c, 0x7fff7ffc}]}) symlink(0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@OVL_FILEID_V1={0x18, 0xf8, {'\x00', {0x0, 0xfb, 0x15, 0x0, 0x7, "81850cfdd65e9f6fee9f011d77c94c1f"}}}, &(0x7f0000002300), 0x600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000007a000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) read(r6, &(0x7f0000000140)=""/87, 0x57) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000025300)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2252): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='utf8', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xff}, 0x1c) r4 = accept$alg(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000100)={0xc000000b}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1836000007000000000000009b7e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000003000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0x1200, 0x8a, &(0x7f0000000680)=""/138, 0x40f00, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x1, 0xd, 0x813, 0x9}, 0x10, 0x23c56, 0xffffffffffffffff, 0x2, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6], &(0x7f0000000d80)=[{0x4, 0x4, 0x6}, {0x5, 0x3, 0x4, 0x6}], 0x10, 0x3}, 0x94) r7 = dup3(r4, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000340)={{0x7, 0x1, 0x5, 0x2, 'syz0\x00', 0x7f}, 0x1, 0x30, 0x7807, 0x0, 0x1, 0x9dc, 'syz1\x00', &(0x7f00000002c0)=['{#\x00'], 0x3}) sendfile(r7, r1, 0x0, 0x1000009) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r9, 0x1}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): 20 [ 689.601411][T12286] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 689.601442][T12286] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 689.601474][T12286] ? netlink_deliver_tap+0x1ae/0xcc0 [ 689.601513][T12286] netlink_unicast+0x585/0x850 [ 689.601539][T12286] ? __pfx_netlink_unicast+0x10/0x10 [ 689.601569][T12286] netlink_sendmsg+0x8b0/0xda0 [ 689.601596][T12286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.601621][T12286] ? selinux_socket_sendmsg+0x198/0x2f0 [ 689.601658][T12286] ____sys_sendmsg+0xa4d/0xbe0 [ 689.601689][T12286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.601713][T12286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.601759][T12286] ___sys_sendmsg+0x190/0x1e0 [ 689.601795][T12286] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.601826][T12286] ? __lock_acquire+0x49f/0x1a40 [ 689.601853][T12286] ? get_pid_task+0x106/0x250 [ 689.601918][T12286] __sys_sendmsg+0x160/0x210 [ 689.601946][T12286] ? __pfx___sys_sendmsg+0x10/0x10 [ 689.601989][T12286] do_syscall_64+0x115/0x870 [ 689.602013][T12286] ? clear_bhb_loop+0x40/0x90 [ 689.602045][T12286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.602068][T12286] RIP: 0033:0x7f800d39de99 [ 689.602087][T12286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.602108][T12286] RSP: 002b:00007f800e326028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.602129][T12286] RAX: ffffffffffffffda RBX: 00007f800d625fa0 RCX: 00007f800d39de99 [ 689.602144][T12286] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 689.602157][T12286] RBP: 00007f800e326090 R08: 0000000000000000 R09: 0000000000000000 [ 689.602170][T12286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.602184][T12286] R13: 00007f800d626038 R14: 00007f800d625fa0 R15: 00007ffd7cfc87d8 [ 689.602214][T12286] [ 690.055781][T12278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.080538][T12278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.123273][T12278] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 690.317772][T12278] bond0 (unregistering): Released all slaves [ 693.782933][ T5709] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 693.977325][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 694.049617][ T5709] usb 3-1: unable to get BOS descriptor or descriptor too short [ 694.079648][ T5709] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.103227][ T5709] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 694.127481][ T5709] usb 3-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 694.146947][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.162411][ T5709] usb 3-1: Product: syz [ 694.172404][ T5709] usb 3-1: Manufacturer: syz [ 694.204008][ T5709] usb 3-1: SerialNumber: syz [ 694.279150][ T5709] usb 3-1: 0:1 : does not exist [ 694.297127][ T5709] usb 3-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 694.318473][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1709'. [ 694.495286][ T5709] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 694.619541][T12318] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 694.727315][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 695.171172][ T805] usb 3-1: USB disconnect, device number 30 [ 695.325328][T12326] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1712'. [ 695.335867][T12326] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1712'. [ 697.079879][T12333] binder: 12332:12333 ioctl c0306201 200000000180 returned -14 [ 697.897332][T12344] binder: BINDER_SET_CONTEXT_MGR already set [ 697.907153][T12341] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12341 comm=syz.5.1717 [ 697.917913][T12344] binder: 12342:12344 ioctl 4018620d 200000004a80 returned -16 [ 697.993556][T12341] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12341 comm=syz.5.1717 [ 698.017588][T12347] binder: 12342:12347 ioctl c0306201 0 returned -14 [ 698.075750][T12348] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12348 comm=syz.1.1720 [ 698.146844][T12348] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12348 comm=syz.1.1720 [ 698.399185][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1721'. [ 698.673582][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 699.329504][T12363] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 699.361058][ T29] audit: type=1400 audit(1785125466.543:1241): avc: denied { write } for pid=12362 comm="syz.2.1725" name="functions" dev="configfs" ino=9327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 699.402700][T12363] block nbd2: not configured, cannot reconfigure [ 699.725225][T12368] usbcore.quirks: string doesn't fit in 127 chars. [ 700.427593][ T805] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 700.622599][ T805] usb 2-1: Using ep0 maxpacket: 16 [ 700.644652][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.688912][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.723815][ T805] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 700.742332][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.822219][ T805] usb 2-1: config 0 descriptor?? [ 701.469599][T12396] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1729'. [ 701.491290][T12393] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 701.493062][ T805] usb 2-1: language id specifier not provided by device, defaulting to English [ 701.497812][T12393] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 701.568634][T12393] vhci_hcd vhci_hcd.0: Device attached [ 701.693674][ T29] audit: type=1400 audit(1785125468.873:1242): avc: denied { write } for pid=12369 comm="syz.1.1727" name="functions" dev="configfs" ino=9327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 701.761337][T11029] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 701.802049][ T29] audit: type=1400 audit(1785125468.873:1243): avc: denied { read } for pid=12369 comm="syz.1.1727" name="host_addr" dev="configfs" ino=37622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 701.861157][T11029] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 701.899877][ T29] audit: type=1800 audit(1785125468.873:1244): pid=12373 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1727" name="host_addr" dev="configfs" ino=37622 res=0 errno=0 [ 702.024112][T12394] vhci_hcd: connection reset by peer [ 702.031656][ T147] vhci_hcd vhci_hcd.0: stop threads [ 702.039040][ T147] vhci_hcd vhci_hcd.0: release socket [ 702.054339][ T147] vhci_hcd vhci_hcd.0: disconnect device [ 703.296617][ T805] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 703.347954][ T805] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -71 [ 703.463962][ T805] usb 2-1: USB disconnect, device number 36 [ 703.551607][T12405] FAULT_INJECTION: forcing a failure. [ 703.551607][T12405] name failslab, interval 1, probability 0, space 0, times 0 [ 704.059803][T12405] CPU: 0 UID: 0 PID: 12405 Comm: syz.5.1733 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.059838][T12405] Tainted: [L]=SOFTLOCKUP [ 704.059846][T12405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 704.059860][T12405] Call Trace: [ 704.059867][T12405] [ 704.059875][T12405] dump_stack_lvl+0x100/0x190 [ 704.059908][T12405] should_fail_ex.cold+0x5/0xa [ 704.059936][T12405] should_failslab+0xc2/0x120 [ 704.059966][T12405] __kmalloc_noprof+0xfc/0x820 [ 704.059994][T12405] ? tomoyo_encode2+0xfb/0x3c0 [ 704.060021][T12405] tomoyo_encode2+0xfb/0x3c0 [ 704.060046][T12405] tomoyo_encode+0x29/0x50 [ 704.060065][T12405] tomoyo_realpath_from_path+0x18c/0x690 [ 704.060093][T12405] tomoyo_path_number_perm+0x23c/0x580 [ 704.060123][T12405] ? tomoyo_path_number_perm+0x22e/0x580 [ 704.060155][T12405] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 704.060215][T12405] ? find_held_lock+0x2b/0x80 [ 704.060245][T12405] ? __fget_files+0x215/0x3d0 [ 704.060266][T12405] ? hook_file_ioctl_common+0x140/0x440 [ 704.060290][T12405] ? __fget_files+0x215/0x3d0 [ 704.060316][T12405] ? __fget_files+0x21f/0x3d0 [ 704.060342][T12405] security_file_ioctl+0xd3/0x230 [ 704.060376][T12405] __x64_sys_ioctl+0xb7/0x210 [ 704.060410][T12405] do_syscall_64+0x115/0x870 [ 704.060435][T12405] ? clear_bhb_loop+0x40/0x90 [ 704.060461][T12405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.060483][T12405] RIP: 0033:0x7fcd9599de99 [ 704.060499][T12405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.060520][T12405] RSP: 002b:00007fcd9685e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.060540][T12405] RAX: ffffffffffffffda RBX: 00007fcd95c25fa0 RCX: 00007fcd9599de99 [ 704.060554][T12405] RDX: 0000200000000080 RSI: 0000000040383d0c RDI: 0000000000000003 [ 704.060565][T12405] RBP: 00007fcd9685e090 R08: 0000000000000000 R09: 0000000000000000 [ 704.060579][T12405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.060598][T12405] R13: 00007fcd95c26038 R14: 00007fcd95c25fa0 R15: 00007ffce077d5e8 [ 704.060627][T12405] [ 704.060676][T12405] ERROR: Out of memory at tomoyo_realpath_from_path. [ 704.616161][T12411] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1735'. [ 704.773510][ T29] audit: type=1400 audit(1785125471.953:1245): avc: denied { write } for pid=12410 comm="syz.0.1735" name="/" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 704.900937][T12414] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12414 comm=syz.1.1736 [ 704.947567][T12414] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12414 comm=syz.1.1736 [ 706.823806][ T5748] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 707.143524][ T5709] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 707.152407][T11029] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 707.165125][T12449] binder: 12447:12449 ioctl c0306201 200000000180 returned -14 [ 707.270391][ T5748] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 707.285207][ T5748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.296636][ T5748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.306987][ T5709] usb 2-1: Using ep0 maxpacket: 16 [ 707.315485][ T5748] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 707.339116][ T5709] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 707.359230][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.373447][ T5748] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 707.390159][ T5709] usb 2-1: config 0 descriptor?? [ 707.395942][ T5748] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 707.410029][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1749'. [ 707.419150][ T5748] usb 6-1: Manufacturer: syz [ 707.427501][ T5709] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 707.450820][ T5748] usb 6-1: config 0 descriptor?? [ 709.176606][ T5709] gspca_sonixj: reg_w1 err -110 [ 709.205268][ T5709] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 709.268748][ T5748] usbhid 6-1:0.0: can't add hid device: -71 [ 709.275258][ T5748] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 709.307567][ T5748] usb 6-1: USB disconnect, device number 7 [ 709.674974][T12464] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 712.285506][ T5748] usb 2-1: USB disconnect, device number 37 [ 713.356066][T12507] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 713.376455][ T49] Bluetooth: hci5: sending frame failed (-49) [ 713.384078][ T5613] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 713.398158][T12509] syzkaller0: entered promiscuous mode [ 713.435245][T12509] syzkaller0: entered allmulticast mode [ 713.886398][T12511] batadv_slave_1: entered promiscuous mode [ 713.906407][T12511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 713.921890][T12510] batadv_slave_1: left promiscuous mode [ 714.438678][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1767'. [ 715.389799][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1769'. [ 716.937114][T12525] netlink: 75 bytes leftover after parsing attributes in process `syz.5.1769'. [ 718.252360][T11029] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 718.559740][T11029] usb 3-1: device descriptor read/all, error -71 [ 718.712405][ T805] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 719.246599][T12559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.262024][T12559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.274489][ T5748] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 719.602282][ T805] usb 5-1: Using ep0 maxpacket: 32 [ 720.189118][ T805] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 720.197478][ T805] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 720.204124][ T5748] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 720.206072][ T805] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 720.206119][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 720.225425][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.233626][ T805] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 720.233659][ T805] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 720.269667][ T805] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 720.274918][ T5748] usb 6-1: config 0 descriptor?? [ 720.278786][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.320183][ T805] usb 5-1: config 0 descriptor?? [ 720.509103][ T5748] usb 6-1: Cannot read MAC address [ 720.528279][ T5748] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 720.577223][ T5748] usb 6-1: USB disconnect, device number 8 [ 720.890798][ T805] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 721.445953][T12567] EXT4-fs (loop2): unable to read superblock [ 722.355058][T12575] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 722.364587][T12575] overlayfs: missing 'lowerdir' [ 722.427732][ T24] usb 5-1: USB disconnect, device number 35 [ 722.440644][T12580] binder: BC_ATTEMPT_ACQUIRE not supported [ 722.462170][ T24] usblp0: removed [ 722.483769][T12575] IPVS: Scheduler module ip_vs_ not found [ 722.582646][T12580] binder: 12574:12580 ioctl c0306201 200000000c00 returned -22 [ 724.661279][ T29] audit: type=1400 audit(1785125491.773:1246): avc: denied { write } for pid=12594 comm="syz.1.1789" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 724.683658][ T29] audit: type=1400 audit(1785125491.773:1247): avc: denied { write } for pid=12594 comm="syz.1.1789" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 726.625765][T12615] FAULT_INJECTION: forcing a failure. [ 726.625765][T12615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.711157][T12615] CPU: 0 UID: 0 PID: 12615 Comm: syz.0.1795 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.711192][T12615] Tainted: [L]=SOFTLOCKUP [ 726.711199][T12615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 726.711212][T12615] Call Trace: [ 726.711220][T12615] [ 726.711228][T12615] dump_stack_lvl+0x100/0x190 [ 726.711261][T12615] should_fail_ex.cold+0x5/0xa [ 726.711290][T12615] _copy_from_user+0x2e/0xd0 [ 726.711321][T12615] usbdev_ioctl+0xfea/0x3aa0 [ 726.711360][T12615] ? __pfx_usbdev_ioctl+0x10/0x10 [ 726.711400][T12615] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 726.711430][T12615] ? do_vfs_ioctl+0x226/0x13e0 [ 726.711465][T12615] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 726.711496][T12615] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 726.711540][T12615] ? __fget_files+0x215/0x3d0 [ 726.711561][T12615] ? hook_file_ioctl_common+0x140/0x440 [ 726.711594][T12615] ? selinux_file_ioctl+0x13b/0x290 [ 726.711627][T12615] ? selinux_file_ioctl+0xb6/0x290 [ 726.711662][T12615] ? __pfx_usbdev_ioctl+0x10/0x10 [ 726.711698][T12615] __x64_sys_ioctl+0x18e/0x210 [ 726.711731][T12615] do_syscall_64+0x115/0x870 [ 726.711756][T12615] ? clear_bhb_loop+0x40/0x90 [ 726.711783][T12615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.711806][T12615] RIP: 0033:0x7f800d39de99 [ 726.711825][T12615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.711845][T12615] RSP: 002b:00007f800e326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.711866][T12615] RAX: ffffffffffffffda RBX: 00007f800d625fa0 RCX: 00007f800d39de99 [ 726.711881][T12615] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 726.711895][T12615] RBP: 00007f800e326090 R08: 0000000000000000 R09: 0000000000000000 [ 726.711908][T12615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.711921][T12615] R13: 00007f800d626038 R14: 00007f800d625fa0 R15: 00007ffd7cfc87d8 [ 726.711952][T12615] [ 727.442839][ T29] audit: type=1400 audit(1785125494.573:1248): avc: denied { connect } for pid=12621 comm="syz.0.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 727.473848][ T29] audit: type=1400 audit(1785125494.573:1249): avc: denied { write } for pid=12621 comm="syz.0.1798" path="socket:[38995]" dev="sockfs" ino=38995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 728.045332][T12634] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 728.051878][T12634] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 728.069198][T12634] vhci_hcd vhci_hcd.0: Device attached [ 728.206360][T12640] vhci_hcd: connection closed [ 728.208036][ T12] vhci_hcd vhci_hcd.5: stop threads [ 728.231546][ T12] vhci_hcd vhci_hcd.5: release socket [ 728.244578][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 728.262456][ T24] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 729.411787][ T29] audit: type=1400 audit(1785125496.573:1250): avc: denied { write } for pid=12649 comm="syz.0.1804" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 729.514676][ T29] audit: type=1400 audit(1785125496.623:1251): avc: denied { write } for pid=12649 comm="syz.0.1804" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 730.612492][T12667] netlink: 157 bytes leftover after parsing attributes in process `syz.5.1810'. [ 731.119103][T12672] EXT4-fs (loop4): unable to read superblock [ 731.766454][T12677] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 731.775715][T12677] overlayfs: missing 'lowerdir' [ 731.810391][T12675] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 731.819228][T12675] overlayfs: missing 'lowerdir' [ 731.865643][T12679] binder: BC_ATTEMPT_ACQUIRE not supported [ 731.886433][T12679] binder: 12676:12679 ioctl c0306201 200000000c00 returned -22 [ 731.961897][T12681] binder: BC_ATTEMPT_ACQUIRE not supported [ 731.994356][T12681] binder: 12674:12681 ioctl c0306201 200000000c00 returned -22 [ 732.000199][T12677] IPVS: Scheduler module ip_vs_ not found [ 732.135652][T12675] IPVS: Scheduler module ip_vs_ not found [ 733.203673][ T29] audit: type=1400 audit(1785125500.393:1252): avc: denied { accept } for pid=12698 comm="syz.0.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 734.999800][ T29] audit: type=1400 audit(1785125502.183:1253): avc: denied { write } for pid=12702 comm="syz.2.1818" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 735.081497][ T29] audit: type=1400 audit(1785125502.213:1254): avc: denied { write } for pid=12702 comm="syz.2.1818" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 736.320640][T12717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.383314][T12717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.002034][T12722] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 737.010839][T12722] overlayfs: missing 'lowerdir' [ 737.098052][T12725] binder: BC_ATTEMPT_ACQUIRE not supported [ 737.141307][T12725] binder: 12721:12725 ioctl c0306201 200000000c00 returned -22 [ 737.363916][T12722] IPVS: Scheduler module ip_vs_ not found [ 738.306775][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1828'. [ 739.131499][ T29] audit: type=1400 audit(1785125506.313:1255): avc: denied { write } for pid=12747 comm="syz.4.1830" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 739.176608][ T29] audit: type=1400 audit(1785125506.343:1256): avc: denied { write } for pid=12747 comm="syz.4.1830" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 739.263010][T11029] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 739.422522][T11029] usb 6-1: Using ep0 maxpacket: 16 [ 739.495266][T11029] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.519647][T11029] usb 6-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 739.542390][T11029] usb 6-1: config 0 interface 0 has no altsetting 0 [ 739.550380][T11029] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 739.586086][T11029] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.607573][T12751] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1831'. [ 739.657071][T11029] usb 6-1: config 0 descriptor?? [ 739.732602][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.801643][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.766197][T11029] usbhid 6-1:0.0: can't add hid device: -71 [ 742.773351][T11029] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 742.794542][T11029] usb 6-1: USB disconnect, device number 9 [ 742.929245][T12760] FAULT_INJECTION: forcing a failure. [ 742.929245][T12760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.949318][T12760] CPU: 1 UID: 0 PID: 12760 Comm: syz.0.1833 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.949350][T12760] Tainted: [L]=SOFTLOCKUP [ 742.949357][T12760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 742.949370][T12760] Call Trace: [ 742.949376][T12760] [ 742.949383][T12760] dump_stack_lvl+0x100/0x190 [ 742.949415][T12760] should_fail_ex.cold+0x5/0xa [ 742.949443][T12760] _copy_from_user+0x2e/0xd0 [ 742.949474][T12760] usbdev_ioctl+0x19fb/0x3aa0 [ 742.949510][T12760] ? __pfx_usbdev_ioctl+0x10/0x10 [ 742.949548][T12760] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 742.949576][T12760] ? do_vfs_ioctl+0x226/0x13e0 [ 742.949610][T12760] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 742.949652][T12760] ? __fget_files+0x215/0x3d0 [ 742.949672][T12760] ? hook_file_ioctl_common+0x140/0x440 [ 742.949702][T12760] ? selinux_file_ioctl+0x13b/0x290 [ 742.949730][T12760] ? selinux_file_ioctl+0xb6/0x290 [ 742.949761][T12760] ? __pfx_usbdev_ioctl+0x10/0x10 [ 742.949792][T12760] __x64_sys_ioctl+0x18e/0x210 [ 742.949823][T12760] do_syscall_64+0x115/0x870 [ 742.949846][T12760] ? clear_bhb_loop+0x40/0x90 [ 742.949870][T12760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.949891][T12760] RIP: 0033:0x7f800d39de99 [ 742.949907][T12760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.949932][T12760] RSP: 002b:00007f800e326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 742.949951][T12760] RAX: ffffffffffffffda RBX: 00007f800d625fa0 RCX: 00007f800d39de99 [ 742.949965][T12760] RDX: 00002000000000c0 RSI: 00000000c0185500 RDI: 0000000000000003 [ 742.949978][T12760] RBP: 00007f800e326090 R08: 0000000000000000 R09: 0000000000000000 [ 742.949991][T12760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.950003][T12760] R13: 00007f800d626038 R14: 00007f800d625fa0 R15: 00007ffd7cfc87d8 [ 742.950031][T12760] [ 745.217857][T12781] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1839'. [ 746.039413][ T29] audit: type=1400 audit(1785125513.223:1257): avc: denied { read } for pid=12791 comm="syz.5.1843" name="g1" dev="configfs" ino=9326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 746.064090][T12792] FAULT_INJECTION: forcing a failure. [ 746.064090][T12792] name failslab, interval 1, probability 0, space 0, times 0 [ 746.092153][T12792] CPU: 1 UID: 0 PID: 12792 Comm: syz.5.1843 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.092184][T12792] Tainted: [L]=SOFTLOCKUP [ 746.092192][T12792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 746.092203][T12792] Call Trace: [ 746.092209][T12792] [ 746.092217][T12792] dump_stack_lvl+0x100/0x190 [ 746.092246][T12792] should_fail_ex.cold+0x5/0xa [ 746.092272][T12792] should_failslab+0xc2/0x120 [ 746.092299][T12792] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 746.092324][T12792] ? __d_alloc+0x35/0xa50 [ 746.092355][T12792] __d_alloc+0x35/0xa50 [ 746.092378][T12792] d_alloc+0x4a/0x1e0 [ 746.092404][T12792] lookup_one_qstr_excl+0x171/0x250 [ 746.092430][T12792] ? mnt_want_write+0x161/0x410 [ 746.092452][T12792] filename_create+0x1cf/0x400 [ 746.092485][T12792] ? __pfx_filename_create+0x10/0x10 [ 746.092529][T12792] ? find_held_lock+0x2b/0x80 [ 746.092566][T12792] filename_mkdirat+0xb9/0x5e0 [ 746.092596][T12792] ? __pfx_filename_mkdirat+0x10/0x10 [ 746.092621][T12792] ? strncpy_from_user+0x19d/0x2d0 [ 746.092653][T12792] ? do_getname+0x191/0x390 [ 746.092683][T12792] __x64_sys_mkdirat+0x89/0xc0 [ 746.092715][T12792] do_syscall_64+0x115/0x870 [ 746.092739][T12792] ? clear_bhb_loop+0x40/0x90 [ 746.092767][T12792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.092789][T12792] RIP: 0033:0x7fcd9599de99 [ 746.092808][T12792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.092829][T12792] RSP: 002b:00007fcd9685e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 746.092848][T12792] RAX: ffffffffffffffda RBX: 00007fcd95c25fa0 RCX: 00007fcd9599de99 [ 746.092862][T12792] RDX: 00000000000000c7 RSI: 0000200000000700 RDI: 0000000000000003 [ 746.092874][T12792] RBP: 00007fcd9685e090 R08: 0000000000000000 R09: 0000000000000000 [ 746.092886][T12792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.092898][T12792] R13: 00007fcd95c26038 R14: 00007fcd95c25fa0 R15: 00007ffce077d5e8 [ 746.092928][T12792] [ 746.308853][ T29] audit: type=1400 audit(1785125513.253:1258): avc: denied { read open } for pid=12791 comm="syz.5.1843" path="/108/my_configfs/usb_gadget/g1" dev="configfs" ino=9326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 746.436241][T12793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.906908][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.923001][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.086978][T12799] netlink: 157 bytes leftover after parsing attributes in process `syz.1.1844'. [ 748.850954][T12817] ubi0: attaching mtd0 [ 748.857624][T12817] ubi0: scanning is finished [ 748.862783][T12817] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 748.960410][T12817] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 749.997165][ T29] audit: type=1400 audit(1785125517.173:1259): avc: denied { write } for pid=12825 comm="syz.1.1852" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 750.091828][ T29] audit: type=1400 audit(1785125517.233:1260): avc: denied { write } for pid=12825 comm="syz.1.1852" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 750.571107][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'. [ 751.890215][T12852] FAULT_INJECTION: forcing a failure. [ 751.890215][T12852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.969908][T12852] CPU: 0 UID: 0 PID: 12852 Comm: syz.2.1860 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.969945][T12852] Tainted: [L]=SOFTLOCKUP [ 751.969953][T12852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 751.969966][T12852] Call Trace: [ 751.969974][T12852] [ 751.969982][T12852] dump_stack_lvl+0x100/0x190 [ 751.970014][T12852] should_fail_ex.cold+0x5/0xa [ 751.970041][T12852] _copy_from_iter+0x1f4/0x1690 [ 751.970076][T12852] ? __asan_memset+0x23/0x50 [ 751.970099][T12852] ? __pfx__copy_from_iter+0x10/0x10 [ 751.970129][T12852] ? __pfx___alloc_skb+0x10/0x10 [ 751.970167][T12852] netlink_sendmsg+0x808/0xda0 [ 751.970197][T12852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.970222][T12852] ? selinux_socket_sendmsg+0x198/0x2f0 [ 751.970260][T12852] ____sys_sendmsg+0xa4d/0xbe0 [ 751.970292][T12852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.970317][T12852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 751.970363][T12852] ___sys_sendmsg+0x190/0x1e0 [ 751.970399][T12852] ? __pfx____sys_sendmsg+0x10/0x10 [ 751.970432][T12852] ? __lock_acquire+0x49f/0x1a40 [ 751.970459][T12852] ? get_pid_task+0x106/0x250 [ 751.970532][T12852] __sys_sendmsg+0x160/0x210 [ 751.970560][T12852] ? __pfx___sys_sendmsg+0x10/0x10 [ 751.970603][T12852] do_syscall_64+0x115/0x870 [ 751.970628][T12852] ? clear_bhb_loop+0x40/0x90 [ 751.970655][T12852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.970678][T12852] RIP: 0033:0x7f31b1d9de99 [ 751.970696][T12852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.970717][T12852] RSP: 002b:00007f31b2cb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.970738][T12852] RAX: ffffffffffffffda RBX: 00007f31b2025fa0 RCX: 00007f31b1d9de99 [ 751.970753][T12852] RDX: 0000000000048080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 751.970766][T12852] RBP: 00007f31b2cb6090 R08: 0000000000000000 R09: 0000000000000000 [ 751.970780][T12852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.970793][T12852] R13: 00007f31b2026038 R14: 00007f31b2025fa0 R15: 00007fff48156d08 [ 751.970823][T12852] [ 752.630293][ T29] audit: type=1400 audit(1785125519.783:1261): avc: denied { write } for pid=12858 comm="syz.5.1863" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 752.836538][ T29] audit: type=1400 audit(1785125519.863:1262): avc: denied { write } for pid=12858 comm="syz.5.1863" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 752.839897][T12870] netlink: 157 bytes leftover after parsing attributes in process `syz.1.1862'. [ 753.216847][ T29] audit: type=1400 audit(1785125520.403:1263): avc: denied { setopt } for pid=12873 comm="syz.5.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 753.727131][ T29] audit: type=1400 audit(1785125520.913:1264): avc: denied { bind } for pid=12873 comm="syz.5.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 753.851645][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1865'. [ 753.944831][T12877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1865'. [ 753.944868][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1865'. [ 754.107723][T12878] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1865'. [ 755.176728][T12882] i2c i2c-0: new_device: Can't parse I2C address [ 756.090659][T12892] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12892 comm=syz.5.1869 [ 756.141511][T12893] netlink: 157 bytes leftover after parsing attributes in process `syz.0.1867'. [ 756.303453][T12888] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12888 comm=syz.5.1869 [ 757.605780][ T29] audit: type=1400 audit(1785125524.583:1265): avc: denied { write } for pid=12906 comm="syz.5.1875" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 757.753137][ T29] audit: type=1400 audit(1785125524.583:1266): avc: denied { write } for pid=12906 comm="syz.5.1875" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 758.687639][T12922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.800927][T12910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1874'. [ 763.412388][ T8847] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 763.604389][ T8847] usb 2-1: Using ep0 maxpacket: 16 [ 763.865998][T12956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 764.174752][ T8847] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.196055][ T8847] usb 2-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 764.238702][ T8847] usb 2-1: config 0 interface 0 has no altsetting 0 [ 764.263861][ T8847] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 764.291034][ T8847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.352502][ T8847] usb 2-1: config 0 descriptor?? [ 764.678972][T12958] EXT4-fs (loop4): unable to read superblock [ 765.922474][ T8847] usbhid 2-1:0.0: can't add hid device: -71 [ 765.964156][ T8847] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 766.047541][ T8847] usb 2-1: USB disconnect, device number 38 [ 767.049295][T12969] syzkaller0: entered promiscuous mode [ 767.082956][T12969] syzkaller0: entered allmulticast mode [ 768.623839][T12992] EXT4-fs (loop4): unable to read superblock [ 771.748832][ T29] audit: type=1400 audit(1785125538.933:1267): avc: denied { shutdown } for pid=13007 comm="syz.1.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 771.769743][T13008] Cannot find map_set index 135 as target [ 772.172464][ T8847] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 772.332411][ T8847] usb 2-1: Using ep0 maxpacket: 16 [ 772.363647][ T8847] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.374845][ T8847] usb 2-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 772.388867][ T8847] usb 2-1: config 0 interface 0 has no altsetting 0 [ 772.396514][ T8847] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 772.406271][ T8847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.424862][ T8847] usb 2-1: config 0 descriptor?? [ 774.107712][ T8847] usbhid 2-1:0.0: can't add hid device: -71 [ 774.150048][ T8847] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 774.430710][ T8847] usb 2-1: USB disconnect, device number 39 [ 775.884537][T13043] binder: BC_ATTEMPT_ACQUIRE not supported [ 775.890965][T13043] binder: 13032:13043 ioctl c0306201 200000000c00 returned -22 [ 776.350146][T13036] IPVS: Scheduler module ip_vs_ not found [ 776.947558][T13050] devtmpfs: Unknown parameter '' [ 776.959696][ T29] audit: type=1400 audit(1785125544.133:1268): avc: denied { remount } for pid=13049 comm="syz.5.1915" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 777.233050][ T5748] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 777.270048][T13059] netlink: 157 bytes leftover after parsing attributes in process `syz.4.1913'. [ 777.404868][ T5748] usb 6-1: not running at top speed; connect to a high speed hub [ 777.431790][ T5748] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.470132][ T5748] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 777.513667][ T5748] usb 6-1: language id specifier not provided by device, defaulting to English [ 777.526086][ T5748] usb 6-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.40 [ 777.550529][ T5748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.571602][ T5748] usb 6-1: Product: syz [ 777.584936][ T5748] usb 6-1: Manufacturer: 〉 [ 777.592481][ T5748] usb 6-1: SerialNumber: syz [ 778.143296][ T5748] usb 6-1: USB disconnect, device number 10 [ 778.343198][ T29] audit: type=1400 audit(1785125545.513:1269): avc: denied { setopt } for pid=13049 comm="syz.5.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 778.612905][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'. [ 778.643367][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'. [ 779.500907][T13087] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 780.301169][T13069] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1909'. [ 781.518182][T13110] binder: BC_ATTEMPT_ACQUIRE not supported [ 781.524731][T13110] binder: 13100:13110 ioctl c0306201 200000000c00 returned -22 [ 781.893849][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1930'. [ 782.231231][T13108] IPVS: Scheduler module ip_vs_ not found [ 784.002425][ T8847] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 784.033915][T13145] syzkaller0: entered promiscuous mode [ 784.051627][T13145] syzkaller0: entered allmulticast mode [ 785.171940][T13152] binder: BC_ATTEMPT_ACQUIRE not supported [ 785.177923][T13152] binder: 13143:13152 ioctl c0306201 200000000c00 returned -22 [ 785.229716][T13145] tipc: Started in network mode [ 785.288589][ T8847] usb 3-1: Using ep0 maxpacket: 32 [ 785.346261][T13145] tipc: Node identity 52935b9b08f2, cluster identity 4711 [ 785.723527][ T8847] usb 3-1: unable to get BOS descriptor or descriptor too short [ 785.741773][T13149] IPVS: Scheduler module ip_vs_ not found [ 785.748331][T13145] tipc: Enabled bearer , priority 0 [ 785.904703][T13156] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1945'. [ 785.924860][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1945'. [ 785.935094][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1945'. [ 785.961616][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.971443][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1945'. [ 785.980413][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.989318][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1945'. [ 785.999175][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.015155][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.069632][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 786.181914][ T8847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.236540][T13164] random: crng reseeded on system resumption [ 786.302408][ T8847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 786.396602][ T8847] usb 3-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 786.406900][ T8847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.416195][ T8847] usb 3-1: Product: syz [ 786.421570][ T8847] usb 3-1: Manufacturer: syz [ 786.438882][ T8847] usb 3-1: SerialNumber: syz [ 786.637318][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 136, changing to 7 [ 786.665109][ T8847] usb 3-1: 0:1 : does not exist [ 786.688251][ T24] usb 6-1: language id specifier not provided by device, defaulting to English [ 786.702626][ T8847] usb 3-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 786.742778][ T24] usb 6-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40 [ 786.758020][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.772568][ T24] usb 6-1: Manufacturer: ë¨ë˜ªí‹ƒâŸ›ï¥†Ï¹ì‡±ä§©â¹•é±ºäžˆé™Šæ»îµ½æ‹›ì´žï‘†èˆšä™²ç”‡ã²©é»°à¿¶ïš„ë‹´ä³…çˆ¦æ«–ä¨ŠÕ [ 786.803032][ T86] tipc: Node number set to 1516329883 [ 786.877881][ T24] usb 6-1: SerialNumber: syz [ 787.067588][ T8847] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 787.083043][ T8847] usb 3-1: USB disconnect, device number 33 [ 787.089217][T13145] tipc: Resetting bearer [ 787.131027][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 787.135361][T13182] binder_alloc: 13174: binder_alloc_buf, no vma [ 787.157389][T13145] tipc: Disabling bearer [ 787.472821][ T24] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 787.481205][T13189] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13189 comm=syz.5.1954 [ 787.499048][T13189] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13189 comm=syz.5.1954 [ 787.521994][ T24] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 787.594873][T13195] gfs2: not a GFS2 filesystem [ 788.067140][ T24] usb 6-1: USB disconnect, device number 11 [ 788.183080][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 788.444828][ T5748] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 788.794498][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 76, changing to 10 [ 788.808375][ T5748] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 788.838273][ T5748] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 788.852553][ T5748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.865136][ T5748] usb 3-1: config 0 descriptor?? [ 788.902834][ T5709] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 788.904637][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 788.942112][T13185] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1952'. [ 788.999427][T13211] FAULT_INJECTION: forcing a failure. [ 788.999427][T13211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.013371][T13203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1952'. [ 789.013478][T13211] CPU: 0 UID: 0 PID: 13211 Comm: syz.5.1959 Tainted: G L syzkaller #0 PREEMPT(full) [ 789.013512][T13211] Tainted: [L]=SOFTLOCKUP [ 789.013520][T13211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 789.013533][T13211] Call Trace: [ 789.013542][T13211] [ 789.013550][T13211] dump_stack_lvl+0x100/0x190 [ 789.013581][T13211] should_fail_ex.cold+0x5/0xa [ 789.013612][T13211] _copy_to_user+0x32/0xd0 [ 789.013644][T13211] simple_read_from_buffer+0xcb/0x170 [ 789.013669][T13211] proc_fail_nth_read+0x1af/0x230 [ 789.013703][T13211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.013737][T13211] ? rw_verify_area+0xce/0x6d0 [ 789.013774][T13211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.013806][T13211] vfs_read+0x1e4/0xb40 [ 789.013842][T13211] ? __pfx_vfs_read+0x10/0x10 [ 789.013872][T13211] ? __fget_files+0x215/0x3d0 [ 789.013901][T13211] ? __fget_files+0x21f/0x3d0 [ 789.013931][T13211] ksys_read+0x12a/0x250 [ 789.013963][T13211] ? __pfx_ksys_read+0x10/0x10 [ 789.014002][T13211] do_syscall_64+0x115/0x870 [ 789.014026][T13211] ? clear_bhb_loop+0x40/0x90 [ 789.014053][T13211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.014076][T13211] RIP: 0033:0x7fcd9595e6ce [ 789.014093][T13211] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 789.014114][T13211] RSP: 002b:00007fcd9685dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 789.014135][T13211] RAX: ffffffffffffffda RBX: 00007fcd9685e6c0 RCX: 00007fcd9595e6ce [ 789.014150][T13211] RDX: 000000000000000f RSI: 00007fcd9685e0a0 RDI: 0000000000000004 [ 789.014164][T13211] RBP: 00007fcd9685e090 R08: 0000000000000000 R09: 0000000000000000 [ 789.014177][T13211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.014189][T13211] R13: 00007fcd95c26038 R14: 00007fcd95c25fa0 R15: 00007ffce077d5e8 [ 789.014220][T13211] [ 789.072366][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 789.104306][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 789.176711][ T5709] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 789.207732][T13213] binder: 13212:13213 ioctl c0306201 200000000180 returned -14 [ 789.210472][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.371618][ T5709] usb 5-1: Product: syz [ 789.375904][ T5709] usb 5-1: Manufacturer: syz [ 789.382741][ T5709] usb 5-1: SerialNumber: syz [ 789.401397][ T5709] usb 5-1: config 0 descriptor?? [ 789.456200][ T5709] gspca_main: spca508-2.14.0 probing 041e:4018 [ 789.495806][ T5748] usbhid 3-1:0.0: can't add hid device: -71 [ 789.501871][ T5748] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 789.516361][ T5748] usb 3-1: USB disconnect, device number 34 [ 789.706219][ T5709] gspca_spca508: reg_read err -32 [ 789.716681][ T5709] gspca_spca508: reg_read err -32 [ 789.722780][ T5709] gspca_spca508: reg_read err -32 [ 789.730854][ T5709] gspca_spca508: reg_read err -32 [ 789.737755][ T5709] gspca_spca508: reg_read err -32 [ 789.902860][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.912979][ T24] usb 2-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 789.925906][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 789.932510][ T24] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 789.941514][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.957231][ T24] usb 2-1: config 0 descriptor?? [ 790.008250][ T5709] gspca_spca508: reg write: error -71 [ 790.014549][ T5709] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 790.026205][ T5709] usb 5-1: USB disconnect, device number 36 [ 790.163964][ T5748] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 790.306727][ T29] audit: type=1400 audit(1785125557.463:1270): avc: denied { ioctl } for pid=13226 comm="syz.2.1965" path="/dev/uhid" dev="devtmpfs" ino=1272 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 790.349916][T11029] hid-generic 000B:1000000:0006.0005: collection stack underflow [ 790.359112][T11029] hid-generic 000B:1000000:0006.0005: item 0 2 0 12 parsing failed [ 790.371534][T11029] hid-generic 000B:1000000:0006.0005: probe with driver hid-generic failed with error -22 [ 790.648812][ T5709] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 791.520622][T13236] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1967'. [ 791.672366][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 791.684632][ T5709] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7 [ 791.704775][ T5709] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 791.717731][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.453306][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 792.453464][ T5709] usb 3-1: Product: syz [ 792.469178][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 792.504613][ T24] usb 2-1: USB disconnect, device number 40 [ 792.556910][ T5709] usb 3-1: Manufacturer: syz [ 792.564670][ T5709] usb 3-1: SerialNumber: syz [ 792.639869][T13244] binder: 13243:13244 ioctl 4018620d 0 returned -22 [ 792.845706][ T5709] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 792.880249][ T5748] usb 6-1: unable to get BOS descriptor or descriptor too short [ 792.893424][ T5748] usb 6-1: no configurations [ 792.898828][ T5748] usb 6-1: can't read configurations, error -22 [ 792.975495][ T5709] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 793.105602][ T5709] usb 3-1: USB disconnect, device number 35 [ 793.345895][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 795.344809][ T29] audit: type=1400 audit(1785125562.533:1271): avc: denied { write } for pid=13264 comm="syz.2.1976" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 795.425945][ T29] audit: type=1400 audit(1785125562.533:1272): avc: denied { write } for pid=13264 comm="syz.2.1976" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 796.235296][T13282] ubi0: attaching mtd0 [ 796.243748][T13282] ubi0: scanning is finished [ 796.248865][T13282] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 796.459444][T13284] EXT4-fs (loop4): unable to read superblock [ 796.569639][T13282] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 796.831690][ T29] audit: type=1400 audit(1785125564.003:1273): avc: denied { create } for pid=13289 comm="syz.2.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 796.922067][ T29] audit: type=1400 audit(1785125564.003:1274): avc: denied { setopt } for pid=13289 comm="syz.2.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 796.954373][ T29] audit: type=1400 audit(1785125564.003:1275): avc: denied { connect } for pid=13287 comm="syz.1.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 797.033825][ T29] audit: type=1400 audit(1785125564.053:1276): avc: denied { bind } for pid=13289 comm="syz.2.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 797.053483][ T29] audit: type=1400 audit(1785125564.053:1277): avc: denied { getopt } for pid=13289 comm="syz.2.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 797.072963][ T29] audit: type=1400 audit(1785125564.163:1278): avc: denied { accept } for pid=13287 comm="syz.1.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 797.304558][ T29] audit: type=1400 audit(1785125564.473:1279): avc: denied { bind } for pid=13293 comm="syz.0.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 798.179127][ T29] audit: type=1326 audit(1785125565.333:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13304 comm="syz.4.1990" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb39d9de99 code=0x7ff00000 [ 798.217647][ T24] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 798.328970][ T24] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 798.697266][T13317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 799.387242][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1994'. [ 799.477859][T13329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13329 comm=syz.4.1994 [ 799.839840][ T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 800.803883][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 800.836102][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.869891][ T24] usb 5-1: Product: syz [ 800.881523][ T24] usb 5-1: Manufacturer: syz [ 800.892176][ T24] usb 5-1: SerialNumber: syz [ 801.093594][ T8847] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 801.133748][T13349] ubi0: attaching mtd0 [ 801.139784][T13349] ubi0: scanning is finished [ 801.144473][T13349] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 801.235114][T13349] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 801.656334][T13354] binder: BC_ATTEMPT_ACQUIRE not supported [ 801.662986][T13354] binder: 13348:13354 ioctl c0306201 200000000c00 returned -22 [ 802.039364][T13353] IPVS: Scheduler module ip_vs_ not found [ 802.406988][ T8847] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 802.888793][ T8847] ath9k_htc: Failed to initialize the device [ 803.195436][ T5748] usb 5-1: USB disconnect, device number 37 [ 803.243241][ T5748] usb 5-1: ath9k_htc: USB layer deinitialized [ 803.602429][ T805] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 803.786581][ T805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.815061][ T805] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 803.848550][ T805] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 803.867503][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.926567][ T805] usb 3-1: config 0 descriptor?? [ 803.959352][ T805] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 803.982025][ T805] dvb-usb: bulk message failed: -22 (3/0) [ 804.055064][ T805] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 804.177671][ T805] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 804.209839][ T805] usb 3-1: media controller created [ 804.238686][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 804.379510][ T805] dvb-usb: bulk message failed: -22 (6/0) [ 804.408709][ T805] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 804.450460][ T805] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 804.750553][ T805] dvb-usb: schedule remote query interval to 150 msecs. [ 805.155780][ T805] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 805.313038][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 805.329930][ T805] dvb-usb: error while querying for an remote control event. [ 805.533532][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 805.542650][ T805] dvb-usb: error while querying for an remote control event. [ 805.732449][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 805.738481][ T805] dvb-usb: error while querying for an remote control event. [ 805.922477][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 805.939016][ T805] dvb-usb: error while querying for an remote control event. [ 806.122388][ T8847] dvb-usb: bulk message failed: -22 (1/0) [ 806.128517][ T8847] dvb-usb: error while querying for an remote control event. [ 806.292476][ T8847] dvb-usb: bulk message failed: -22 (1/0) [ 806.308331][ T8847] dvb-usb: error while querying for an remote control event. [ 806.472403][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 806.501984][ T805] dvb-usb: error while querying for an remote control event. [ 807.028465][ T8847] dvb-usb: bulk message failed: -22 (1/0) [ 807.040424][ T8847] dvb-usb: error while querying for an remote control event. [ 807.050681][ T805] usb 3-1: USB disconnect, device number 36 [ 807.145055][ T805] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 808.697211][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.710841][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.905831][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 808.905877][ T29] audit: type=1400 audit(1785125575.993:1485): avc: denied { map } for pid=13416 comm="syz.5.2016" path="socket:[45752]" dev="sockfs" ino=45752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 809.187224][ T29] audit: type=1400 audit(1785125576.003:1486): avc: denied { read } for pid=13416 comm="syz.5.2016" path="socket:[45752]" dev="sockfs" ino=45752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 809.716311][ T29] audit: type=1400 audit(1785125576.013:1487): avc: denied { open } for pid=13413 comm="syz.0.2015" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 810.817015][ T5709] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 811.296970][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 811.312642][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 811.329882][ T5709] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 811.343499][T11029] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 811.352587][ T5709] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 811.362734][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.387308][ T5709] usb 3-1: config 0 descriptor?? [ 811.855124][T11029] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.865890][T11029] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 811.875403][T11029] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 811.885955][T11029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.903582][T11029] usb 5-1: config 0 descriptor?? [ 811.934298][T11029] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 811.941590][T11029] dvb-usb: bulk message failed: -22 (3/0) [ 811.992014][T11029] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 812.030444][T11029] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 812.050377][T11029] usb 5-1: media controller created [ 812.074440][T11029] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 812.088616][ T5709] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0007/input/input26 [ 812.107576][T11029] dvb-usb: bulk message failed: -22 (6/0) [ 812.120194][T11029] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 812.569950][T11029] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 812.599497][ T5709] sony 0003:054C:03D5.0007: input,hidraw0: USB HID vff.90 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 812.697956][T11029] dvb-usb: schedule remote query interval to 150 msecs. [ 812.716614][ T5709] usb 3-1: USB disconnect, device number 37 [ 812.748633][T11029] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 812.809042][T13460] fido_id[13460]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 812.875731][T11029] dvb-usb: bulk message failed: -22 (1/0) [ 812.924543][T11029] dvb-usb: error while querying for an remote control event. [ 812.953967][T13463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.965056][T13463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.079792][T13463] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 813.093198][T11029] dvb-usb: bulk message failed: -22 (1/0) [ 813.101285][T11029] dvb-usb: error while querying for an remote control event. [ 813.313802][T11029] dvb-usb: bulk message failed: -22 (1/0) [ 813.321175][T11029] dvb-usb: error while querying for an remote control event. [ 813.483589][ T29] audit: type=1400 audit(1785125580.663:1488): avc: denied { getopt } for pid=13467 comm="syz.5.2030" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 814.243523][T11029] dvb-usb: bulk message failed: -22 (1/0) [ 814.269870][ T5709] IPVS: starting estimator thread 0... [ 814.293509][T11029] dvb-usb: error while querying for an remote control event. [ 814.406756][T13471] IPVS: using max 63 ests per chain, 151200 per kthread [ 814.440593][T11029] usb 5-1: USB disconnect, device number 38 [ 815.633326][T11029] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 817.632290][T13513] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 817.638836][T13513] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 817.651375][T13509] fuse: Bad value for 'fd' [ 817.806914][T13513] vhci_hcd vhci_hcd.0: Device attached [ 817.902727][T13515] vhci_hcd: connection closed [ 817.903298][ T13] vhci_hcd vhci_hcd.2: stop threads [ 817.927786][ T13] vhci_hcd vhci_hcd.2: release socket [ 817.946628][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 817.992400][T11029] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 818.213115][ T5709] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 818.302364][T13523] EXT4-fs (loop4): unable to read superblock [ 818.717590][ T5709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.751818][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 818.791032][ T5709] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 818.912514][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.923224][ T5709] usb 2-1: config 0 descriptor?? [ 818.946877][ T5709] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 818.957406][ T5709] dvb-usb: bulk message failed: -22 (3/0) [ 818.970333][ T5709] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 818.989817][ T5709] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 819.007162][ T5709] usb 2-1: media controller created [ 819.176209][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 819.191381][ T5709] dvb-usb: bulk message failed: -22 (6/0) [ 819.206407][ T5709] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 819.223823][ T5709] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 819.288346][ T5709] dvb-usb: schedule remote query interval to 150 msecs. [ 819.304988][ T5709] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 819.323583][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 819.462343][ T5709] dvb-usb: bulk message failed: -22 (1/0) [ 819.469237][ T5709] dvb-usb: error while querying for an remote control event. [ 819.512500][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 819.539094][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 819.566981][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.607367][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 819.632479][ T5709] dvb-usb: bulk message failed: -22 (1/0) [ 819.639729][ T5709] dvb-usb: error while querying for an remote control event. [ 819.674246][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 819.718460][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.752391][ T24] usb 3-1: Product: syz [ 819.771076][ T24] usb 3-1: Manufacturer: syz [ 819.788679][ T24] usb 3-1: SerialNumber: syz [ 819.812376][ T5709] dvb-usb: bulk message failed: -22 (1/0) [ 819.827454][ T5709] dvb-usb: error while querying for an remote control event. [ 819.876109][ T24] usb 3-1: 0:1 : does not exist [ 819.896054][ T24] usb 3-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 820.042947][T11029] dvb-usb: bulk message failed: -22 (1/0) [ 820.064602][T11029] dvb-usb: error while querying for an remote control event. [ 820.077665][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 820.116254][T13541] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 820.335473][T11029] dvb-usb: bulk message failed: -22 (1/0) [ 820.625730][T11029] dvb-usb: error while querying for an remote control event. [ 820.645256][ T24] usb 3-1: USB disconnect, device number 38 [ 820.687260][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 820.805078][T11029] dvb-usb: bulk message failed: -22 (1/0) [ 820.812013][T11029] dvb-usb: error while querying for an remote control event. [ 820.975490][T11029] usb 2-1: USB disconnect, device number 41 [ 821.078490][T11029] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 821.593814][ T5709] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 821.772912][ T5709] usb 6-1: Using ep0 maxpacket: 16 [ 821.784867][ T5709] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.801302][ T5709] usb 6-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 821.801337][ T5709] usb 6-1: config 0 interface 0 has no altsetting 0 [ 821.801371][ T5709] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 821.801398][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.807406][ T5709] usb 6-1: config 0 descriptor?? [ 821.867938][T13560] netlink: 157 bytes leftover after parsing attributes in process `syz.2.2053'. [ 822.208457][ T29] audit: type=1400 audit(1785125589.393:1489): avc: denied { ioctl } for pid=13563 comm="syz.1.2055" path="socket:[46762]" dev="sockfs" ino=46762 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 823.598590][ T5709] usbhid 6-1:0.0: can't add hid device: -71 [ 823.611428][ T5709] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 823.644619][ T5709] usb 6-1: USB disconnect, device number 14 [ 824.014106][T13570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2057'. [ 826.129906][T13585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2061'. [ 826.188609][ T29] audit: type=1400 audit(1785125593.373:1490): avc: denied { create } for pid=13581 comm="syz.1.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 826.305025][T13583] misc userio: The device must be registered before sending interrupts [ 826.327583][T13583] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13583 comm=syz.1.2061 [ 827.142492][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 827.340216][T13596] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 828.724309][T13599] Bluetooth: hci5: sending frame failed (-49) [ 828.733691][ T5613] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 828.744354][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 828.811742][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 828.824330][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.838620][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 828.852636][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 828.867681][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.888525][ T24] usb 2-1: Product: syz [ 828.894019][ T24] usb 2-1: Manufacturer: syz [ 828.908712][ T24] usb 2-1: SerialNumber: syz [ 829.448511][ T24] usb 2-1: 0:1 : does not exist [ 829.504876][ T24] usb 2-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 829.517502][T13607] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 829.829551][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2056'. [ 830.287760][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 830.290694][T13615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.304413][T13613] i2c i2c-0: new_device: Can't parse I2C address [ 830.307474][T13615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.336631][ T24] usb 2-1: USB disconnect, device number 42 [ 830.371179][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 830.411296][T13615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.459185][T13615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.761802][T13615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.782799][T13615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.473468][ T29] audit: type=1400 audit(1785125599.433:1491): avc: denied { write } for pid=13633 comm="syz.2.2074" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 833.066906][ T29] audit: type=1400 audit(1785125599.643:1492): avc: denied { write } for pid=13633 comm="syz.2.2074" name="c.1" dev="configfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 833.122344][ T29] audit: type=1400 audit(1785125599.743:1493): avc: denied { setopt } for pid=13620 comm="syz.4.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 834.406822][T13647] FAULT_INJECTION: forcing a failure. [ 834.406822][T13647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.420036][T13647] CPU: 0 UID: 0 PID: 13647 Comm: syz.5.2072 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.420070][T13647] Tainted: [L]=SOFTLOCKUP [ 834.420078][T13647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 834.420093][T13647] Call Trace: [ 834.420101][T13647] [ 834.420110][T13647] dump_stack_lvl+0x100/0x190 [ 834.420142][T13647] should_fail_ex.cold+0x5/0xa [ 834.420172][T13647] _copy_from_user+0x2e/0xd0 [ 834.420205][T13647] copy_msghdr_from_user+0x9f/0x4c0 [ 834.420242][T13647] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 834.420283][T13647] ? __pfx__kstrtoull+0x10/0x10 [ 834.420312][T13647] ___sys_sendmsg+0x106/0x1e0 [ 834.420350][T13647] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.420383][T13647] ? __lock_acquire+0x49f/0x1a40 [ 834.420439][T13647] ? proc_fail_nth_write+0x9f/0x220 [ 834.420474][T13647] ? find_held_lock+0x2b/0x80 [ 834.420511][T13647] __sys_sendmmsg+0x20c/0x440 [ 834.420544][T13647] ? __pfx___sys_sendmmsg+0x10/0x10 [ 834.420572][T13647] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 834.420614][T13647] ? __pfx_do_sys_openat2+0x10/0x10 [ 834.420657][T13647] ? ksys_write+0x1ac/0x250 [ 834.420691][T13647] ? __pfx_ksys_write+0x10/0x10 [ 834.420735][T13647] __x64_sys_sendmmsg+0x9c/0x100 [ 834.420763][T13647] ? lockdep_hardirqs_on+0x78/0x100 [ 834.420790][T13647] do_syscall_64+0x115/0x870 [ 834.420815][T13647] ? clear_bhb_loop+0x40/0x90 [ 834.420842][T13647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.420867][T13647] RIP: 0033:0x7fcd9599de99 [ 834.420886][T13647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.420908][T13647] RSP: 002b:00007fcd9683d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 834.420929][T13647] RAX: ffffffffffffffda RBX: 00007fcd95c26090 RCX: 00007fcd9599de99 [ 834.420944][T13647] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000006 [ 834.420959][T13647] RBP: 00007fcd9683d090 R08: 0000000000000000 R09: 0000000000000000 [ 834.420973][T13647] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001 [ 834.420987][T13647] R13: 00007fcd95c26128 R14: 00007fcd95c26090 R15: 00007ffce077d5e8 [ 834.421018][T13647] [ 835.723383][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2080'. [ 836.547977][T13659] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13659 comm=syz.1.2082 [ 836.586581][T13659] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13659 comm=syz.1.2082 [ 836.752456][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 836.830899][T13665] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 836.848108][ T47] Bluetooth: hci5: Frame reassembly failed (-84) [ 837.082475][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 837.103622][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.133203][ T5709] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 837.156869][ T24] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 837.223185][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 837.252429][ T24] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 837.285352][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.303397][ T5709] usb 2-1: Using ep0 maxpacket: 32 [ 837.329212][ T5709] usb 2-1: unable to get BOS descriptor or descriptor too short [ 837.345100][ T24] usb 5-1: config 0 descriptor?? [ 837.378754][ T5709] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.389402][T13674] i2c i2c-0: new_device: Can't parse I2C address [ 837.425544][ T5709] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 837.456706][ T5709] usb 2-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 837.494780][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.516312][ T5709] usb 2-1: Product: syz [ 837.527815][ T5709] usb 2-1: Manufacturer: syz [ 837.552556][ T5709] usb 2-1: SerialNumber: syz [ 837.581576][ T5709] usb 2-1: 0:1 : does not exist [ 837.590088][ T5709] usb 2-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 837.668560][ T5709] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 838.649388][T13680] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 838.892444][ T5613] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 839.280815][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 839.628935][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 839.649710][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 839.784379][ T5709] usb 2-1: USB disconnect, device number 43 [ 839.791788][ T24] usb 5-1: USB disconnect, device number 39 [ 840.620987][T13697] Invalid logical block size (1275) [ 840.704333][T13704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.048267][T13704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.373354][T13697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.412870][T13697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.724869][T13712] binder: BC_ATTEMPT_ACQUIRE not supported [ 841.731348][T13712] binder: 13708:13712 ioctl c0306201 200000000c00 returned -22 [ 843.193351][T13716] i2c i2c-0: new_device: Can't parse I2C address [ 846.245090][T13730] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2102'. [ 846.532800][ T5748] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 847.100637][ T5748] usb 5-1: Using ep0 maxpacket: 16 [ 847.162592][T13744] i2c i2c-0: new_device: Can't parse I2C address [ 847.174402][ T5748] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1023 [ 847.191123][ T5748] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 8 [ 847.223095][ T5748] usb 5-1: config 1 interface 0 has no altsetting 0 [ 847.234009][ T5748] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 847.246011][ T5748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.296090][ T5748] usb 5-1: Product: à „ [ 847.306990][ T5748] usb 5-1: Manufacturer: Ñ• [ 847.312041][ T5748] usb 5-1: SerialNumber: Е [ 847.323284][T13734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 847.338474][T13734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 848.213089][ T5748] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 4 proto 3 vid 0x0525 pid 0xA4A8 [ 848.301987][ T5748] usb 5-1: USB disconnect, device number 40 [ 848.415398][ T5748] usblp0: removed [ 848.422030][T13750] xt_CT: No such helper "snmp_trap" [ 848.622378][T13757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 849.341532][T13760] binder: BC_ATTEMPT_ACQUIRE not supported [ 849.348251][T13760] binder: 13758:13760 ioctl c0306201 200000000c00 returned -22 [ 850.261142][T13765] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 850.267663][T13765] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 850.375386][T13769] netlink: 13 bytes leftover after parsing attributes in process `syz.5.2113'. [ 850.410289][T13765] vhci_hcd vhci_hcd.0: Device attached [ 850.480488][T13766] vhci_hcd: connection closed [ 850.483403][ T1178] vhci_hcd vhci_hcd.4: stop threads [ 850.504798][ T1178] vhci_hcd vhci_hcd.4: release socket [ 850.516359][ T1178] vhci_hcd vhci_hcd.4: disconnect device [ 850.671915][T13776] i2c i2c-0: new_device: Can't parse I2C address [ 850.701009][ T29] audit: type=1400 audit(1785125617.883:1494): avc: denied { append } for pid=13780 comm="syz.5.2116" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 850.727532][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 850.744793][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 850.755122][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 850.764926][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 850.773670][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 850.902816][ T5709] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 851.053062][ T5709] usb 2-1: Using ep0 maxpacket: 8 [ 851.064052][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 851.092336][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 851.113239][ T5709] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 851.126522][ T5709] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 851.144511][ T5709] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 851.153602][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.173356][ T5709] usb 2-1: config 0 descriptor?? [ 851.179125][T13779] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 851.330778][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.512476][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 851.546133][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.639471][T13805] netlink: 157 bytes leftover after parsing attributes in process `syz.0.2120'. [ 851.795854][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.814873][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 851.832763][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 851.842827][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.847824][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.868477][ T24] usb 5-1: config 0 descriptor?? [ 851.889322][ T24] smsusb:smsusb_probe: board id=8, interface number 0 [ 852.078565][ T24] smsusb:smsusb_probe: Device initialized with return code -19 [ 852.738896][T13815] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 852.745441][T13815] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 852.755488][T13815] vhci_hcd vhci_hcd.0: Device attached [ 852.812708][T13599] Bluetooth: hci5: command tx timeout [ 852.831118][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.932322][ T5709] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 852.975846][T13599] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 852.983372][T13599] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 852.990490][T13599] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 852.997624][T13599] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 853.002795][ T5709] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 853.031953][T13816] vhci_hcd: connection closed [ 853.036171][ T147] vhci_hcd vhci_hcd.5: stop threads [ 853.053822][ T147] vhci_hcd vhci_hcd.5: release socket [ 853.068019][ T147] vhci_hcd vhci_hcd.5: disconnect device [ 853.249680][T11029] usb 2-1: USB disconnect, device number 44 [ 853.250830][ T5613] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 853.416911][ T13] bridge_slave_1: left allmulticast mode [ 853.424341][ T13] bridge_slave_1: left promiscuous mode [ 853.432133][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.460294][ T13] bridge_slave_0: left allmulticast mode [ 853.477205][ T13] bridge_slave_0: left promiscuous mode [ 853.491421][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.876971][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.890022][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.911793][ T13] bond0 (unregistering): Released all slaves [ 853.938261][ T13] bond1 (unregistering): Released all slaves [ 853.985373][T13831] syzkaller0: entered promiscuous mode [ 853.991034][T13831] syzkaller0: entered allmulticast mode [ 854.054299][T13777] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.061770][T13777] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.069011][T13777] bridge_slave_0: entered allmulticast mode [ 854.076370][T13777] bridge_slave_0: entered promiscuous mode [ 854.101739][T11029] usb 5-1: USB disconnect, device number 41 [ 854.143407][T13777] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.150535][T13777] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.157719][T13777] bridge_slave_1: entered allmulticast mode [ 854.165113][T13777] bridge_slave_1: entered promiscuous mode [ 854.202372][T13836] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 854.276453][T13777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.295696][ T13] tipc: Left network mode [ 854.306580][T13777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.393666][T13777] team0: Port device team_slave_0 added [ 854.860776][T13777] team0: Port device team_slave_1 added [ 854.933875][T13777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.963965][T13777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.093597][T13777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.301668][T13777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.372984][T13777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.399756][T13777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.738261][ T29] audit: type=1400 audit(1785125622.923:1495): avc: denied { write } for pid=13837 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.021073][T13777] hsr_slave_0: entered promiscuous mode [ 856.027684][T13777] hsr_slave_1: entered promiscuous mode [ 856.034887][T13777] debugfs: 'hsr0' already exists in 'hsr' [ 856.040753][T13777] Cannot create hsr debugfs directory [ 856.107101][ T13] hsr_slave_0: left promiscuous mode [ 856.463019][ T13] hsr_slave_1: left promiscuous mode [ 856.468926][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.491661][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.523148][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.541144][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.597366][ T29] audit: type=1400 audit(1785125623.783:1496): avc: denied { write } for pid=13877 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.633024][T13879] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 856.639554][T13879] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 856.653090][ T13] veth1_vlan: left promiscuous mode [ 856.665016][ T13] veth0_vlan: left promiscuous mode [ 856.676032][T13879] vhci_hcd vhci_hcd.0: Device attached [ 856.853087][ T5748] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 856.912848][ T5748] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 856.962759][T13884] Invalid logical block size (1275) [ 856.974698][T13880] vhci_hcd: connection reset by peer [ 856.995866][ T116] vhci_hcd vhci_hcd.0: stop threads [ 857.014690][ T116] vhci_hcd vhci_hcd.0: release socket [ 857.025392][ T116] vhci_hcd vhci_hcd.0: disconnect device [ 857.212921][T11029] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 857.316643][ T13] team0 (unregistering): Port device team_slave_1 removed [ 857.354625][ T13] team0 (unregistering): Port device team_slave_0 removed [ 857.374319][T11029] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.388513][T11029] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 857.405107][T11029] usb 2-1: New USB device found, idVendor=056a, idProduct=fe4f, bcdDevice= 0.00 [ 857.415336][T11029] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.431095][T11029] usb 2-1: config 0 descriptor?? [ 857.750018][T13876] netlink: 157 bytes leftover after parsing attributes in process `syz.4.2130'. [ 857.800904][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 857.873709][T11029] wacom 0003:056A:FE4F.0008: unknown main item tag 0x0 [ 857.908601][T11029] wacom 0003:056A:FE4F.0008: unknown main item tag 0x0 [ 857.961076][T11029] wacom 0003:056A:FE4F.0008: unknown main item tag 0x0 [ 858.535347][T13884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.570248][T13884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.578334][ T5709] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 858.699706][ T805] usb 2-1: USB disconnect, device number 45 [ 860.100498][T13777] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 860.152159][T13777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 860.361423][T13777] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 860.568389][T13777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 860.613816][T13777] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 860.652421][ T29] audit: type=1400 audit(1785125627.833:1497): avc: denied { write } for pid=13893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.392088][T13777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 861.408182][T13777] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 862.337880][T13777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 862.425958][ T29] audit: type=1400 audit(1785125629.603:1498): avc: denied { write } for pid=13928 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 862.458918][ T5748] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 862.499664][T13936] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 862.506200][T13936] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 862.672839][T13936] vhci_hcd vhci_hcd.0: Device attached [ 863.049684][T13942] vhci_hcd: connection closed [ 863.051878][ T147] vhci_hcd vhci_hcd.4: stop threads [ 863.092493][ T147] vhci_hcd vhci_hcd.4: release socket [ 863.120366][ T147] vhci_hcd vhci_hcd.4: disconnect device [ 863.252106][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 863.445116][T13777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.524408][T13777] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.542917][ T5739] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 863.569239][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.577158][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.665647][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.673081][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.729692][ T5739] usb 6-1: config 7 has an invalid interface number: 223 but max is 0 [ 863.748262][ T5739] usb 6-1: config 7 has no interface number 0 [ 863.771292][ T5739] usb 6-1: config 7 interface 223 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 863.796492][ T5739] usb 6-1: config 7 interface 223 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 863.969321][ T5739] usb 6-1: config 7 interface 223 has no altsetting 0 [ 863.979286][ T5739] usb 6-1: New USB device found, idVendor=1199, idProduct=0023, bcdDevice=58.16 [ 863.989145][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.003388][ T5739] usb 6-1: Product: syz [ 864.008083][ T5739] usb 6-1: Manufacturer: syz [ 864.013775][ T5739] usb 6-1: SerialNumber: syz [ 864.580641][ T5739] sierra 6-1:7.223: Sierra USB modem converter detected [ 864.726163][ T5739] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 864.760790][ T5739] usb 6-1: USB disconnect, device number 15 [ 864.837406][ T5739] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 864.884984][ T5739] sierra 6-1:7.223: device disconnected [ 865.026315][T13970] syzkaller0: entered promiscuous mode [ 865.035399][T13970] syzkaller0: entered allmulticast mode [ 865.470055][ T29] audit: type=1400 audit(1785125632.653:1499): avc: denied { write } for pid=13955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.761628][ T29] audit: type=1400 audit(1785125632.943:1500): avc: denied { write } for pid=13983 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.879144][T13988] Cannot find map_set index 135 as target [ 867.632570][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'. [ 869.040430][T14008] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 869.046979][T14008] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 869.059778][T14008] vhci_hcd vhci_hcd.0: Device attached [ 869.078494][T14009] vhci_hcd: connection closed [ 869.085113][ T13] vhci_hcd vhci_hcd.1: stop threads [ 869.096784][ T13] vhci_hcd vhci_hcd.1: release socket [ 869.102195][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 869.247337][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 869.716486][ T29] audit: type=1400 audit(1785125636.903:1501): avc: denied { search } for pid=14023 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.774405][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.781373][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.811546][ T29] audit: type=1400 audit(1785125636.903:1502): avc: denied { search } for pid=14023 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.880091][ T29] audit: type=1400 audit(1785125636.903:1503): avc: denied { search } for pid=14023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.970611][ T29] audit: type=1400 audit(1785125636.933:1504): avc: denied { search } for pid=14023 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.079159][ T29] audit: type=1400 audit(1785125636.983:1505): avc: denied { create } for pid=14026 comm="syz.1.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 870.176229][ T29] audit: type=1400 audit(1785125636.993:1506): avc: denied { write } for pid=14026 comm="syz.1.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 870.301656][ T29] audit: type=1400 audit(1785125636.993:1507): avc: denied { execmem } for pid=14026 comm="syz.1.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 870.375659][T13777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.398676][ T29] audit: type=1400 audit(1785125637.033:1508): avc: denied { egress } for pid=5709 comm="kworker/0:3" saddr=fe80::1b daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 870.515538][ T29] audit: type=1400 audit(1785125637.033:1509): avc: denied { sendto } for pid=5709 comm="kworker/0:3" saddr=fe80::1b daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 870.578676][T14027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2161'. [ 870.602064][ T29] audit: type=1400 audit(1785125637.093:1510): avc: denied { sys_module } for pid=13777 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 870.661586][T14037] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2161'. [ 870.905771][T14047] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 871.286056][T13777] veth0_vlan: entered promiscuous mode [ 871.295482][T14061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2165'. [ 871.306486][T14061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2165'. [ 871.329405][T13777] veth1_vlan: entered promiscuous mode [ 871.402147][T13777] veth0_macvtap: entered promiscuous mode [ 871.426639][T13777] veth1_macvtap: entered promiscuous mode [ 871.447975][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 871.465219][T13777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.496039][T13777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.526642][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.561608][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.613912][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.623037][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.661964][T14059] Invalid logical block size (1275) [ 871.758047][ T805] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 871.828356][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.836188][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.965888][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.989924][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.589788][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.604732][ T805] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 872.627238][ T805] usb 2-1: New USB device found, idVendor=056a, idProduct=fe4f, bcdDevice= 0.00 [ 872.640817][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.651718][T14090] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2111'. [ 872.727820][ T805] usb 2-1: config 0 descriptor?? [ 873.039798][T14099] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2175'. [ 873.120330][T14100] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2175'. [ 873.284723][ T805] wacom 0003:056A:FE4F.0009: unknown main item tag 0x0 [ 873.292342][ T805] wacom 0003:056A:FE4F.0009: unknown main item tag 0x0 [ 873.299293][ T805] wacom 0003:056A:FE4F.0009: unknown main item tag 0x0 [ 873.418202][ T8847] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 873.822995][ T8847] usb 5-1: Using ep0 maxpacket: 16 [ 873.864270][ T8847] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 873.894980][T14059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.904051][ T8847] usb 5-1: config 1 has no interface number 0 [ 873.916871][T14059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.937651][ T8847] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 873.947534][ T8847] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 874.041532][ T8847] usb 5-1: config 1 interface 105 has no altsetting 0 [ 874.050995][ T805] usb 2-1: USB disconnect, device number 46 [ 874.232467][ T8847] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 874.246655][ T8847] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 874.260150][ T8847] usb 5-1: Product: syz [ 874.274643][ T8847] usb 5-1: Manufacturer: syz [ 874.286698][ T8847] usb 5-1: SerialNumber: syz [ 874.301772][T14093] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 874.312861][T14093] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 874.693782][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2180'. [ 874.787163][T14093] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 874.822534][T14093] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 874.885009][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 874.885025][ T29] audit: type=1400 audit(1785125642.073:1637): avc: denied { create } for pid=14111 comm="syz.5.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 875.033912][ T29] audit: type=1400 audit(1785125642.113:1638): avc: denied { create } for pid=14111 comm="syz.5.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 875.308796][ T8847] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 875.325809][ T8847] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 875.328737][ T29] audit: type=1400 audit(1785125642.513:1639): avc: denied { remount } for pid=14092 comm="syz.4.2172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 875.451153][ T8847] aqc111 5-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f0:40:ad:97:ea:c2 [ 875.473235][T14125] trusted_key: encrypted_key: hex blob is missing [ 875.566902][ T29] audit: type=1400 audit(1785125642.753:1640): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 875.706710][ T29] audit: type=1400 audit(1785125642.753:1641): avc: denied { allowed } for pid=14124 comm="syz.6.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 875.860393][ T29] audit: type=1400 audit(1785125642.853:1642): avc: denied { ioctl } for pid=14124 comm="syz.6.2183" path="socket:[48863]" dev="sockfs" ino=48863 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 875.947514][ T29] audit: type=1400 audit(1785125642.933:1643): avc: denied { write } for pid=14124 comm="syz.6.2183" name="ipv6_route" dev="proc" ino=4026533324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 876.034472][ T86] usb 5-1: USB disconnect, device number 42 [ 876.090265][ T86] aqc111 5-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 876.171210][T14122] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2181'. [ 876.266180][ T29] audit: type=1400 audit(1785125643.453:1644): avc: denied { read } for pid=14134 comm="syz.5.2184" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 876.295017][T14136] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2181'. [ 876.357001][ T29] audit: type=1400 audit(1785125643.453:1645): avc: denied { open } for pid=14134 comm="syz.5.2184" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 876.429107][ T29] audit: type=1400 audit(1785125643.473:1646): avc: denied { ioctl } for pid=14134 comm="syz.5.2184" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 876.502990][ T86] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 876.789897][ T86] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 876.803297][ T86] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 877.821273][T14159] overlayfs: failed to resolve './file0': -2 [ 878.322265][ T86] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 878.972614][ T86] usb 5-1: Using ep0 maxpacket: 32 [ 879.186008][ T86] usb 5-1: too many configurations: 88, using maximum allowed: 8 [ 879.293707][ T86] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 879.301807][ T86] usb 5-1: can't read configurations, error -61 [ 879.454137][ T86] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 879.632443][ T86] usb 5-1: Using ep0 maxpacket: 32 [ 879.655628][ T86] usb 5-1: too many configurations: 88, using maximum allowed: 8 [ 879.683424][ T86] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 879.698403][ T86] usb 5-1: can't read configurations, error -61 [ 879.738315][ T86] usb usb5-port1: attempt power cycle [ 879.923313][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 879.923330][ T29] audit: type=1400 audit(1785125647.103:1661): avc: denied { create } for pid=14198 comm="syz.5.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 879.996726][T14199] syzkaller0: entered promiscuous mode [ 880.027078][T14199] syzkaller0: entered allmulticast mode [ 880.116014][ T29] audit: type=1400 audit(1785125647.293:1662): avc: denied { setopt } for pid=14198 comm="syz.5.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 880.137534][ T86] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 880.229551][ T29] audit: type=1400 audit(1785125647.293:1663): avc: denied { write } for pid=14198 comm="syz.5.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 880.313351][ T29] audit: type=1400 audit(1785125647.333:1664): avc: denied { setopt } for pid=14198 comm="syz.5.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 880.482696][ T86] usb 5-1: Using ep0 maxpacket: 32 [ 880.491089][ T86] usb 5-1: too many configurations: 88, using maximum allowed: 8 [ 880.542606][ T86] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 880.567147][ T86] usb 5-1: can't read configurations, error -61 [ 880.593520][ T29] audit: type=1400 audit(1785125647.753:1665): avc: denied { open } for pid=14191 comm="syz.6.2194" path="/dev/ttyr0" dev="devtmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 880.669226][ T29] audit: type=1400 audit(1785125647.853:1666): avc: denied { map } for pid=14191 comm="syz.6.2194" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 880.920873][ T86] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 880.990233][ T29] audit: type=1400 audit(1785125647.853:1667): avc: denied { read write } for pid=14191 comm="syz.6.2194" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 881.342389][ T86] usb 5-1: device not accepting address 46, error -71 [ 881.375091][ T86] usb usb5-port1: unable to enumerate USB device [ 882.320101][T14222] EXT4-fs (loop6): unable to read superblock [ 882.326557][ T29] audit: type=1400 audit(1785125649.503:1668): avc: denied { mounton } for pid=14216 comm="syz.6.2200" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 883.579166][ T29] audit: type=1400 audit(1785125650.443:1669): avc: denied { mmap_zero } for pid=14219 comm="syz.5.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 883.601198][T14215] Cannot find map_set index 135 as target [ 883.629854][ T29] audit: type=1400 audit(1785125650.443:1670): avc: denied { create } for pid=14219 comm="syz.5.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 884.919212][T14245] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.929504][T14245] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.052177][T14245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.073018][T14245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 885.244361][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 885.244396][ T29] audit: type=1400 audit(1785125652.423:1677): avc: denied { mount } for pid=14247 comm="syz.5.2204" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 885.314654][T14250] i2c i2c-0: new_device: Can't parse I2C address [ 885.433641][ T35] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.505438][ T35] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.550507][ T35] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.591353][ T35] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.661317][ T29] audit: type=1400 audit(1785125652.843:1678): avc: denied { write } for pid=14226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 885.951651][ T29] audit: type=1400 audit(1785125653.133:1679): avc: denied { unmount } for pid=10648 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 886.333343][ T29] audit: type=1400 audit(1785125653.513:1680): avc: denied { write } for pid=14258 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 887.568544][T14271] ubi0: attaching mtd0 [ 887.630255][T14271] ubi0: scanning is finished [ 887.655099][T14274] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2210'. [ 887.656026][T14271] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 887.904284][ T86] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 888.029857][T14271] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 888.172370][ T86] usb 6-1: Using ep0 maxpacket: 16 [ 888.203079][ T86] usb 6-1: unable to get BOS descriptor or descriptor too short [ 888.244555][ T86] usb 6-1: config 1 interface 0 has no altsetting 0 [ 888.268291][ T86] usb 6-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 888.283361][ T86] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.293212][ T86] usb 6-1: Product: syz [ 888.297871][ T86] usb 6-1: Manufacturer: syz [ 888.303775][ T86] usb 6-1: SerialNumber: syz [ 888.820408][ T29] audit: type=1400 audit(1785125656.003:1681): avc: denied { write } for pid=14272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 888.960765][T14292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 888.967648][ T29] audit: type=1400 audit(1785125656.143:1682): avc: denied { connect } for pid=14273 comm="syz.5.2210" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 888.993365][T14291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.044353][T14291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.755902][ T29] audit: type=1400 audit(1785125656.943:1683): avc: denied { mount } for pid=14289 comm="syz.0.2213" name="/" dev="ramfs" ino=49972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 890.971291][T14297] ipvlan2: entered promiscuous mode [ 890.981661][ T29] audit: type=1400 audit(1785125658.163:1684): avc: denied { write } for pid=14295 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 891.045446][T14297] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 891.067202][T14297] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 891.146979][ T86] pwc: Sotec Afina Eye USB webcam detected. [ 891.170524][ T86] pwc: Failed to set LED on/off time (-71) [ 891.186918][ T86] pwc: send_video_command error -71 [ 891.194431][ T86] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 891.202634][ T86] Philips webcam 6-1:1.0: probe with driver Philips webcam failed with error -71 [ 891.224945][ T86] usb 6-1: USB disconnect, device number 16 [ 891.450748][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2215'. [ 893.097286][ T29] audit: type=1400 audit(1785125660.273:1685): avc: denied { write } for pid=14304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 893.528517][ T29] audit: type=1400 audit(1785125660.713:1686): avc: denied { write } for pid=14332 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 894.325289][ T29] audit: type=1400 audit(1785125661.473:1687): avc: denied { name_bind } for pid=14340 comm="syz.0.2220" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 895.056955][T11029] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 895.192638][ T29] audit: type=1400 audit(1785125662.373:1688): avc: denied { read } for pid=14354 comm="syz.5.2223" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 895.247525][T11029] usb 7-1: Using ep0 maxpacket: 8 [ 895.283311][T11029] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.305294][ T29] audit: type=1400 audit(1785125662.373:1689): avc: denied { open } for pid=14354 comm="syz.5.2223" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 895.339058][T11029] usb 7-1: config 0 has no interfaces? [ 895.360372][T11029] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 895.389997][T11029] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.409412][ T29] audit: type=1400 audit(1785125662.393:1690): avc: denied { ioctl } for pid=14354 comm="syz.5.2223" path="/dev/sg0" dev="devtmpfs" ino=744 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 895.456480][T11029] usb 7-1: config 0 descriptor?? [ 895.504398][ T805] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 895.577121][ T29] audit: type=1400 audit(1785125662.753:1691): avc: denied { write } for pid=14336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 895.702420][ T805] usb 6-1: Using ep0 maxpacket: 32 [ 895.730468][ T805] usb 6-1: unable to get BOS descriptor or descriptor too short [ 895.766034][ T805] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 895.806200][ T805] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 895.846635][ T805] usb 6-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 895.872367][ T805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.885576][ T805] usb 6-1: Product: syz [ 895.890754][ T805] usb 6-1: Manufacturer: syz [ 895.898013][ T805] usb 6-1: SerialNumber: syz [ 895.982098][ T805] usb 6-1: 0:1 : does not exist [ 896.007470][ T805] usb 6-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 896.168190][ T29] audit: type=1400 audit(1785125663.353:1692): avc: denied { write } for pid=14360 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 896.221601][T14362] geneve2: entered promiscuous mode [ 896.240389][T14362] geneve2: entered allmulticast mode [ 896.277346][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 896.294162][T14366] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 896.346139][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 896.385500][ T805] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 896.409480][ T47] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 896.465030][ T47] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 896.541610][ T29] audit: type=1400 audit(1785125663.723:1693): avc: denied { create } for pid=14344 comm="syz.6.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 896.601069][T13728] udevd[13728]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 896.774096][ T805] usb 6-1: USB disconnect, device number 17 [ 896.817134][ T29] audit: type=1400 audit(1785125664.003:1694): avc: denied { create } for pid=14344 comm="syz.6.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 897.212721][ T5709] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 897.351315][T14382] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 897.383027][ T5709] usb 5-1: Using ep0 maxpacket: 32 [ 897.407400][ T5709] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 897.432622][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.466045][ T5709] usb 5-1: Product: syz [ 897.484943][ T5709] usb 5-1: Manufacturer: syz [ 897.498846][ T5709] usb 5-1: SerialNumber: syz [ 897.516094][T14386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.551695][T14386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.572159][ T5709] usb 5-1: config 0 descriptor?? [ 898.611032][ T29] audit: type=1400 audit(1785125665.373:1695): avc: denied { read write } for pid=14383 comm="syz.0.2227" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 898.652927][ T5709] airspy 5-1:0.0: usb_control_msg() failed -110 request 09 [ 898.678818][ T5709] airspy 5-1:0.0: Could not detect board [ 898.686132][ T29] audit: type=1400 audit(1785125665.373:1696): avc: denied { open } for pid=14383 comm="syz.0.2227" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 898.858136][ T5709] airspy 5-1:0.0: probe with driver airspy failed with error -110 [ 898.991805][ T29] audit: type=1400 audit(1785125665.383:1697): avc: denied { ioctl } for pid=14383 comm="syz.0.2227" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 899.084068][ T86] usb 7-1: USB disconnect, device number 2 [ 899.092860][ T29] audit: type=1400 audit(1785125665.383:1698): avc: denied { bind } for pid=14383 comm="syz.0.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 899.392466][ T805] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 899.473095][T14395] Invalid logical block size (1275) [ 899.613507][ T805] usb 2-1: Using ep0 maxpacket: 8 [ 899.622122][ T805] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.635787][ T805] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 899.678829][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.728509][ T805] usb 2-1: config 0 descriptor?? [ 899.779339][ T805] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 899.793020][ T5709] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 899.974263][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.019462][ T5709] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 900.049404][ T5709] usb 6-1: New USB device found, idVendor=056a, idProduct=fe4f, bcdDevice= 0.00 [ 900.086331][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.121675][ T5709] usb 6-1: config 0 descriptor?? [ 900.225258][ T29] audit: type=1400 audit(1785125667.413:1699): avc: denied { mount } for pid=14389 comm="syz.1.2230" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 900.359769][T14403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.386496][T14403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.420713][T14403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.446439][T14403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.510774][ T86] usb 5-1: USB disconnect, device number 47 [ 900.559577][ T5709] wacom 0003:056A:FE4F.000A: unknown main item tag 0x0 [ 900.588182][ T5709] wacom 0003:056A:FE4F.000A: unknown main item tag 0x0 [ 900.609702][ T5709] wacom 0003:056A:FE4F.000A: unknown main item tag 0x0 [ 900.906600][T14395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.941536][T14395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.994470][ T86] usb 6-1: USB disconnect, device number 18 [ 901.231922][T14410] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2234'. [ 901.327485][ T5709] usb 2-1: USB disconnect, device number 47 [ 901.695774][ T5613] Bluetooth: hci5: command tx timeout [ 901.842774][ T29] audit: type=1400 audit(1785125668.953:1700): avc: denied { create } for pid=14414 comm="syz.0.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 902.153586][ T29] audit: type=1400 audit(1785125668.963:1701): avc: denied { bind } for pid=14414 comm="syz.0.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 902.218747][ T29] audit: type=1400 audit(1785125668.963:1702): avc: denied { ioctl } for pid=14414 comm="syz.0.2236" path="socket:[51210]" dev="sockfs" ino=51210 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 902.988547][ T29] audit: type=1400 audit(1785125670.173:1703): avc: denied { create } for pid=14422 comm="syz.5.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 903.119643][ T29] audit: type=1400 audit(1785125670.303:1704): avc: denied { sys_admin } for pid=14422 comm="syz.5.2240" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 903.241828][ T5613] Bluetooth: hci3: ISO packet for unknown connection handle 3840 [ 903.264483][T14435] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2242'. [ 903.291279][ T29] audit: type=1400 audit(1785125670.473:1705): avc: denied { read } for pid=14438 comm="syz.6.2243" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 903.297395][T14435] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 903.366123][ T29] audit: type=1400 audit(1785125670.473:1706): avc: denied { open } for pid=14438 comm="syz.6.2243" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 903.410895][T14435] 0ªî{X¹¦: entered allmulticast mode [ 903.439526][T14435] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 903.464261][ T29] audit: type=1400 audit(1785125670.523:1707): avc: denied { ioctl } for pid=14438 comm="syz.6.2243" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 903.534652][ T29] audit: type=1400 audit(1785125670.523:1708): avc: denied { set_context_mgr } for pid=14438 comm="syz.6.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 903.608499][ T29] audit: type=1400 audit(1785125670.533:1709): avc: denied { map } for pid=14438 comm="syz.6.2243" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 903.690674][T14448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2246'. [ 903.892595][ T5613] Bluetooth: hci5: command tx timeout [ 905.962864][ T5613] Bluetooth: hci5: command tx timeout [ 1010.962268][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1010.969256][ C0] rcu: 1-...!: (1 ticks this GP) idle=2f84/1/0x4000000000000000 softirq=91864/91864 fqs=1 [ 1010.980435][ C0] rcu: (detected by 0, t=10505 jiffies, g=94685, q=258 ncpus=2) [ 1010.988155][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1010.988192][ C1] NMI backtrace for cpu 1 [ 1010.988211][ C1] CPU: 1 UID: 0 PID: 14470 Comm: syz.4.2252 Tainted: G L syzkaller #0 PREEMPT(full) [ 1010.988239][ C1] Tainted: [L]=SOFTLOCKUP [ 1010.988246][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1010.988264][ C1] RIP: 0010:rcu_is_watching+0x80/0xc0 [ 1010.988300][ C1] Code: 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b 03 c1 e8 02 83 e0 01 65 ff 0d c0 db 75 12 <74> 07 5b 5d c3 cc cc cc cc e8 42 88 87 ff 5b 5d e9 db ec cf 09 48 [ 1010.988318][ C1] RSP: 0000:ffffc90000a08e80 EFLAGS: 00000082 [ 1010.988334][ C1] RAX: 0000000000000001 RBX: ffff8880b8533c68 RCX: ffffffff81f610a0 [ 1010.988347][ C1] RDX: 0000000000000000 RSI: ffffffff8c401500 RDI: ffffffff8e46d928 [ 1010.988360][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1010.988372][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888054687300 [ 1010.988384][ C1] R13: 0000000000000001 R14: ffff8880b8528540 R15: ffff8880b8528590 [ 1010.988396][ C1] FS: 00007ffb3acc56c0(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 1010.988415][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1010.988428][ C1] CR2: 000020000001c000 CR3: 00000000709a3000 CR4: 00000000003526f0 [ 1010.988440][ C1] DR0: 0000000000000013 DR1: 00000000000001f8 DR2: 0000000000000084 [ 1010.988452][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1010.988465][ C1] Call Trace: [ 1010.988472][ C1] [ 1010.988480][ C1] __hrtimer_run_queues+0x6fc/0x9c0 [ 1010.988514][ C1] ? rcu_is_watching+0x12/0xc0 [ 1010.988544][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1010.988568][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1010.988600][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1010.988622][ C1] [ 1010.988629][ C1] [ 1010.988636][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1010.988658][ C1] RIP: 0010:x2apic_send_IPI+0x9a/0xe0 [ 1010.988680][ C1] Code: 8b 13 0f ae f0 0f ae e8 b9 00 04 00 00 41 83 fc 02 44 89 e0 48 0f 44 c1 48 c1 e2 20 b9 30 08 00 00 48 09 d0 48 c1 ea 20 0f 30 <66> 90 5b 5d 41 5c c3 cc cc cc cc 5b 31 d2 5d 48 89 c6 bf 30 08 00 [ 1010.988698][ C1] RSP: 0000:ffffc9000548fa08 EFLAGS: 00000246 [ 1010.988713][ C1] RAX: 00000000000000fb RBX: ffff8880b84201dc RCX: 0000000000000830 [ 1010.988726][ C1] RDX: 0000000000000000 RSI: 00000000000000fb RDI: ffffffff8e46d920 [ 1010.988737][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1010.988749][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000000000fb [ 1010.988761][ C1] R13: 0000000000000000 R14: 1ffff92000a91f01 R15: 0000000000000000 [ 1010.988782][ C1] __smp_call_single_queue+0x39c/0x450 [ 1010.988808][ C1] ? __pfx___smp_call_single_queue+0x10/0x10 [ 1010.988834][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 1010.988858][ C1] generic_exec_single+0xb4/0x460 [ 1010.988882][ C1] smp_call_function_single_async+0x68/0xd0 [ 1010.988908][ C1] rdmsrq_safe_on_cpu+0x103/0x1b0 [ 1010.988931][ C1] ? __pfx_rdmsrq_safe_on_cpu+0x10/0x10 [ 1010.988955][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 1010.988989][ C1] msr_read+0x18e/0x240 [ 1010.989012][ C1] ? __pfx_msr_read+0x10/0x10 [ 1010.989032][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 1010.989062][ C1] ? security_file_permission+0x76/0x210 [ 1010.989081][ C1] ? rw_verify_area+0xce/0x6d0 [ 1010.989107][ C1] ? __pfx_msr_read+0x10/0x10 [ 1010.989128][ C1] vfs_read+0x1e4/0xb40 [ 1010.989158][ C1] ? __pfx_vfs_read+0x10/0x10 [ 1010.989184][ C1] ? find_held_lock+0x2b/0x80 [ 1010.989213][ C1] ? __fget_files+0x215/0x3d0 [ 1010.989232][ C1] ? __fget_files+0x215/0x3d0 [ 1010.989258][ C1] ? __fget_files+0x21f/0x3d0 [ 1010.989282][ C1] ksys_read+0x12a/0x250 [ 1010.989309][ C1] ? __pfx_ksys_read+0x10/0x10 [ 1010.989341][ C1] do_syscall_64+0x115/0x870 [ 1010.989362][ C1] ? clear_bhb_loop+0x40/0x90 [ 1010.989385][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.989405][ C1] RIP: 0033:0x7ffb39d9de99 [ 1010.989421][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.989440][ C1] RSP: 002b:00007ffb3acc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1010.989457][ C1] RAX: ffffffffffffffda RBX: 00007ffb3a025fa0 RCX: 00007ffb39d9de99 [ 1010.989471][ C1] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000004 [ 1010.989483][ C1] RBP: 00007ffb39e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1010.989495][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.989506][ C1] R13: 00007ffb3a026038 R14: 00007ffb3a025fa0 R15: 00007ffd54095208 [ 1010.989528][ C1] [ 1010.990188][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g94685 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1011.459917][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1011.469870][ C0] rcu: RCU grace-period kthread stack dump: [ 1011.475741][ C0] task:rcu_preempt state:R running task stack:28984 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1011.489252][ C0] Call Trace: [ 1011.492520][ C0] [ 1011.495444][ C0] __schedule+0x125c/0x6730 [ 1011.499961][ C0] ? __pfx___schedule+0x10/0x10 [ 1011.504801][ C0] ? find_held_lock+0x2b/0x80 [ 1011.509481][ C0] ? schedule+0x225/0x2c0 [ 1011.513804][ C0] schedule+0xdd/0x2c0 [ 1011.517868][ C0] schedule_timeout+0x127/0x280 [ 1011.522726][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1011.528097][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1011.533381][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1011.539181][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1011.544639][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1011.549401][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1011.554686][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1011.559627][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1011.564818][ C0] ? rcu_is_watching+0x12/0xc0 [ 1011.569584][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1011.575383][ C0] rcu_gp_kthread+0x179/0x230 [ 1011.580058][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1011.585248][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1011.591049][ C0] ? __kthread_parkme+0x18c/0x230 [ 1011.596077][ C0] ? kthread+0x13a/0x450 [ 1011.600308][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1011.605499][ C0] kthread+0x370/0x450 [ 1011.609559][ C0] ? __pfx_kthread+0x10/0x10 [ 1011.614141][ C0] ret_from_fork+0x72b/0xd50 [ 1011.618733][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1011.623848][ C0] ? __switch_to+0x800/0x10f0 [ 1011.628516][ C0] ? __pfx_kthread+0x10/0x10 [ 1011.633099][ C0] ret_from_fork_asm+0x1a/0x30 [ 1011.637879][ C0] [ 1011.640885][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1011.647195][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1011.657690][ C0] Tainted: [L]=SOFTLOCKUP [ 1011.662001][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1011.672052][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1011.677691][ C0] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1011.697292][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000242 [ 1011.703354][ C0] RAX: 0000000003a6bbe5 RBX: ffffffff8e891480 RCX: ffffffff8bbb22d5 [ 1011.711317][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a5b18 RDI: ffffffff8c401580 [ 1011.719283][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 1011.727252][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 1011.735218][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 1011.743180][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 1011.752103][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1011.758680][ C0] CR2: 00007f800d3eb580 CR3: 0000000072958000 CR4: 00000000003526f0 [ 1011.766649][ C0] Call Trace: [ 1011.769917][ C0] [ 1011.772834][ C0] default_idle+0x9/0x10 [ 1011.777078][ C0] default_idle_call+0x6c/0xb0 [ 1011.781838][ C0] do_idle+0x3a7/0x5b0 [ 1011.785914][ C0] ? __pfx_do_idle+0x10/0x10 [ 1011.790524][ C0] cpu_startup_entry+0x4f/0x60 [ 1011.795295][ C0] rest_init+0x251/0x260 [ 1011.799539][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1011.805085][ C0] start_kernel+0x48e/0x490 [ 1011.809590][ C0] x86_64_start_reservations+0x24/0x30 [ 1011.815051][ C0] x86_64_start_kernel+0x12b/0x130 [ 1011.820166][ C0] common_startup_64+0x13e/0x158 [ 1011.825131][ C0]