last executing test programs: 10.679805103s ago: executing program 3 (id=543): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010340)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@private, @in=@private}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000740)=0xe8) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000400)='!*:', 0x3) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7d9e, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x6c) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x4e2a80, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8200) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000300)={0x7, 0x8bf0000}) 9.667580019s ago: executing program 3 (id=547): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async, rerun: 32) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (rerun: 32) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x74, 0x21, 0xe0, 0x40, 0x16c0, 0x5df, 0xa276, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x5, 0xd0, 0x7f, "", [{{0x9, 0x4, 0x20, 0xc, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646, 0x20}}, 0x20}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) 8.482157869s ago: executing program 0 (id=551): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4890) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x6, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 8.188015979s ago: executing program 0 (id=552): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffcf1, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000010900010073797a31000000002400048020000180080001006c6f67001400028008000540ffffff080800064000000002"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8090) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) r4 = syz_open_procfs(r3, &(0x7f0000000000)='syscall\x00') socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0xa020480) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, 0x0) readv(r4, 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/23, 0x17, 0xc) 7.222975168s ago: executing program 2 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = syz_clone3(0x0, 0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'ip6gre0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040045) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000680)={0x0, [[0xff7ffffe, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0x1, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0x7, 0xffffffff, 0x3, 0x8, 0xffffffff], [0xffffffff, 0xfffffffe, 0x83, 0xffffffff, 0xffffffff, 0xfffffffb, 0x3, 0xfffffffc]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x7, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 7.21055563s ago: executing program 1 (id=554): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0xfffffffe, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}}, 0x80, 0x0}, 0x2000f761) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random='\b\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6.710938268s ago: executing program 0 (id=555): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000200)) r0 = syz_usb_connect$cdc_ncm(0x5, 0x83, &(0x7f0000000640)=ANY=[@ANYBLOB="12010003020000202505a1a440000102230109020d0000052406000505240006007302f006241a01010f156fe956fea317a88b045e4f01a607c0ffcb7e392a0905810340000701030904010000020d00000904010102020d640000000000000005270c09050302000209400700000000000000000000a766a11ae72ce090910d1d9f83b1f681ff"], &(0x7f0000000780)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7f, 0xd, 0xff, 0x40, 0x6}, 0xbd, &(0x7f00000003c0)={0x5, 0xf, 0xbd, 0x4, [@generic={0x96, 0x10, 0x1, "824b315014a17001dd2c679dd21ee9117420f99b0b3dbcdef2b25342d097d5e084b062226ff1cec4d1220ad276f854fa2adfeb8835709a410742b599ffea146a7764fcbf9ddc92368dfc6676927b224c26749e5a0b12db937837861f7cecc8255d6c53219e252c46f0af38a0ac7321f8a4f1742c61f68d716788969e51432ed6eb261237c855fd0e6d9804f029f99033f9bdf7"}, @ssp_cap={0x14, 0x10, 0xa, 0x9c, 0x2, 0x0, 0xf00f, 0x4, [0x60, 0xff000f]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x0, 0x3, 0x4, 0x7}]}, 0x5, [{0x52, &(0x7f00000028c0)=ANY=[@ANYBLOB="520334839037ee70dea71dd4bed67e7499d41088d8dc35ba805fcd890444e94d9cec090733ee2e9912a344380a8828a15683cd971e5e863785d129bc802159586ba8790c43756ed3f28f04b69e775e6a64313b6e9e1bf9"]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x416}}, {0x3c, &(0x7f00000005c0)=@string={0x3c, 0x3, "5301ab26078e6537b17c59facfccd8b37b44f16eb1fa23d2715a7a225f19213c827fb3e199294583d739397c9e6fbb49dd69a712b7b315d8cea1"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40a}}, {0x102, &(0x7f0000000cc0)=@string={0x102, 0x3, "b7e79de578588d9dffd7668f3ac29e759c25c3bf44439b905977080238acc74d1a734330be56d377de4bc6bd567d26b059c75f288e1ab586db78e6bfff9c470f40907339210aa6989551f194189bf614804fc9941e6d70e2d648526666e8766fb5ae74bf629913cc4ed53e048b1d495b6cdf5d613b5872cb6412a8d1555bfb1bf6fc7a80694028c2d8ceed64f06ff4169e30951a211748af566361b711cf81b6616d72054ce3d34b170f1af8ebbfed76fe901b512e96e02dca7ac732ca03819c6c2d7139de7ad9227e36273669abd16555658eaa962e0f2e386dd4b25cf2d4575f3892fc4cb575a5fe0a9fa84256a5ca0c9ef6b65567b2eac9ced764cdae60ce"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000940)={0x14, &(0x7f0000000880)=ANY=[], &(0x7f0000000900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x44, 0x0, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000a80)={0x20, 0x80, 0x1c, {0x5, 0x6, 0x9, 0x5, 0x15e, 0x0, 0x1, 0xe410, 0x7, 0x1, 0x4, 0x1}}, &(0x7f0000000ac0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000b00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000b40)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000b80)={0x20, 0x89, 0x2, 0x1}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) lseek(r1, 0x9, 0x3) mq_notify(r1, &(0x7f0000000300)={0x0, 0x23, 0x2, @thr={&(0x7f0000000180)="5bbf915054779b5d959b9c6e49659cd8430c4ca7045c3d03fc24acfe4d01ee298eee131bb0fb46811fb9f539981c9a28e88074d141b2db8d523e0a4e9ca3518cd3b1b8a364b1c40f184e292c8dc498c128e786278f9818c7cd0786", &(0x7f0000000280)}}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000004c0)={0x0, 0x1, 0xfd8b, 0x8000000000000000}) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xc, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000e00)=ANY=[@ANYRES64=r2, @ANYRES64=r2, @ANYBLOB="0f067bef8375b478f80389880936bcb228a8999e1b35cdcd03425fc9786de4df24171cd3864c866222cdd2942cb690cfbfb5e062f5e04b265eec9356db826b197b47856b645f35d207f8decc2f8fa310f5c8b7d249d9e38428a4a2b5dce97cae8a7863789e0e007ee873fd48a28387674e4f086c9502c979ea8634f4fbdc4566dce4165a363dd676b9f502afd4c6a49dc34a5e995a87c15d65be49aaaae2e74b1fe0378084054a7a3aeea5b289527d3b6fcd399c0101ca2a9eb5159615fc6c0019ee9cbf1875b0e4", @ANYRES64, @ANYRES8=r2, @ANYRES16, @ANYRESHEX=r0, @ANYRES16=r2, @ANYRES32], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x2, 0x10, 0x10, 0x10, 0x12, 0x10, 0x10, 0xdd, 0x10, 0x1, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) ftruncate(0xffffffffffffffff, 0x3) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) read$FUSE(r1, &(0x7f00000049c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x608480) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000100085060000000002000000000000", @ANYRESDEC=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800410006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4748f2df96bf00a35408676a1b71cfe0bc56800"/32, @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20008021) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r10, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, '\x00', @raw_data=[0x548c, 0x0, 0x6, 0x10000, 0x3, 0x5, 0xb, 0x65, 0x9, 0x4, 0x6feff919, 0x8, 0x0, 0x1ff, 0x8, 0x9, 0x5, 0x6, 0xd24f, 0x7a3f, 0x8, 0x87, 0x1ff5000, 0x2, 0x0, 0x1894, 0x7, 0xf29e, 0x810, 0x8, 0x1, 0x8]}) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x440c4}, 0x42) 6.508465824s ago: executing program 4 (id=557): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0x0}) ptrace(0x11, r0) r1 = mmap$IORING_OFF_SQES(0x0, 0x4, 0x2000001, 0x32, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x2, 0xfc7, 0x0, 0x0, 0x1000, 0x3, r0, 0x0, 0x104}}}, &(0x7f0000000140)) syz_io_uring_submit$UBLK(0x0, 0x0, r1, &(0x7f00000001c0)=@ublk_add_dev_sqe={0x2e, 0x50, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x1, 0x6, 0x0, 0x0, 0x1000, 0xffffffff, r0, 0x0, 0x52}}}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@d}]}, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x87, &(0x7f0000000340)=""/135, 0x41000, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x80ff, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r3, 0x1, 0x1], 0x0, 0x10, 0x9}, 0x94) fcntl$setpipe(r5, 0x407, 0x6f) r6 = syz_io_uring_complete(0x0, 0x0) inotify_add_watch(r6, &(0x7f0000000580)='./file0\x00', 0x80000000) r7 = openat$nci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) read$nci(r7, &(0x7f0000000600)=""/4096, 0x1000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001640)=@o_path={&(0x7f0000001600)='./file0\x00', r5, 0x4000, r4}, 0x18) r8 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000001680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r8, &(0x7f0000001940)={0x2c, &(0x7f00000016c0)={0x40, 0xc, 0x96, {0x96, 0x1, "1fe1077603926eba9f45f1934551db224c165d203c4dc271882fabe290063e34eb8177e4ade0f7ea359ab1c6aae13a70e4e0729fd08917880c0317a62275260e4253c9712defb387071731fa36fa18f4c9350805c5860432f3acfde56faa7d57e30ef4d027d4ff92a23888470ab43dc04db62aa70fb369a0dae38608cb535d6ec771d1cecdc2006515269d258c2f8d7e509a4025"}}, &(0x7f0000001780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f00000017c0)={0x0, 0xf, 0xbe, {0x5, 0xf, 0xbe, 0x5, [@wireless={0xb, 0x10, 0x1, 0x6, 0x0, 0x0, 0x8, 0x9, 0x7}, @generic={0x51, 0x10, 0x4, "4d05df6759a6abbc5d1c8958e0e93acb220ec1e6347083b590031897d86ec20958a40a113f6e0a4eb9397a0e4825575921f47adb09a3af05618938b004c691f401c8724a848c2b8bf856b144bfe8"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x6, 0x4, 0x8000}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x7, 0x101}, @generic={0x4b, 0x10, 0x2, "063acb62e6ce83822335efa6ef223ca6d6d656baa633208789a0397681181abb3b9b57e7911856fe1c67bd933b0542c0c5334683fd56bc95fe4265345746da4ed74b0788e198f178"}]}}, &(0x7f00000018c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0x6, 0x2, "cf108c3c", "5e955743"}}, &(0x7f0000001900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x80, 0x0, 0x1, 0xd4, 0xfff, 0x84d}}}, &(0x7f0000001e80)={0x84, &(0x7f0000001980)={0x40, 0x5, 0xfe, "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"}, &(0x7f0000001ac0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001b00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001b40)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001b80)={0x20, 0x0, 0x8, {0x100, 0x4, [0xffff]}}, &(0x7f0000001bc0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000001c00)={0x40, 0x9, 0x1, 0xf}, &(0x7f0000001c40)={0x40, 0xb, 0x2, "2fef"}, &(0x7f0000001c80)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001cc0)={0x40, 0x13, 0x6, @random="1b437b2158be"}, &(0x7f0000001d00)={0x40, 0x17, 0x6, @local}, &(0x7f0000001d40)={0x40, 0x19, 0x2, 'J,'}, &(0x7f0000001d80)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001dc0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001e00)={0x40, 0x1e, 0x1, 0x3d}, &(0x7f0000001e40)={0x40, 0x21, 0x1, 0x3}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000001f40)={0x0, 0xa4e, 0x9eb6}, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000001f80)={0x0, 0x1000, "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"}, &(0x7f0000002fc0)=0x1008) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000003000)={r9, 0x5}, &(0x7f0000003040)=0x8) r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000003080), 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r10, 0x9408, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000030c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01864c2, &(0x7f0000003100)={0x0, 0x1, r6}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000003140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01864c2, &(0x7f0000003180)={0x0, 0x1, r5}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r6, 0xc01064c5, &(0x7f0000003200)={&(0x7f00000031c0)=[r11, r12, r13, 0x0, r14], 0x5}) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000003340)={r5, &(0x7f0000003240)='/dev/virtual_nci\x00', 0x0, &(0x7f0000003280)={@_ha_fsid={[0x4, 0x1]}, {0x2, 0x7ff, 0x2, 0x2}}, 0xfffff4d7, &(0x7f00000032c0)={@_ha_fsid}, &(0x7f0000003300)=0x6}) sendmsg$NL80211_CMD_NEW_KEY(r15, &(0x7f0000003440)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x1c, 0x0, 0x12, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x6, 0xa, "aa06"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40895}, 0x800) ioctl$BLKRRPART(r6, 0x125f, 0x0) ioctl$IOMMU_IOAS_ALLOC(r15, 0x3b81, &(0x7f0000003480)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000034c0)={0x28, 0x4, r16, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0xf7a}) 6.41850931s ago: executing program 3 (id=558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010340)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@private, @in=@private}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000740)=0xe8) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000400)='!*:', 0x3) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7d9e, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x6c) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x4e2a80, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8200) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000300)={0x7, 0x8bf0000}) 5.914890364s ago: executing program 1 (id=559): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001100)={{0xffffffffffffffff, &(0x7f0000000000)=']\x00', 0x2ca81, &(0x7f0000000040)={@_ha_fsid={[0x80000000, 0x54]}, {0x85e9, 0x7, 0x7, 0x3}}, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x2}, {[0xcf5, 0x5fa5, 0x0, 0xff]}, 0x5, 0x1000, &(0x7f0000000100)=""/4096}) landlock_restrict_self(r0, 0x1) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000001180)={0x1}) landlock_restrict_self(r0, 0x4) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000011c0), 0x1, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x3c, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1e, 0xa9, @random="ab7fc6392fa0bd80a2dea26068376ae16adab12b80fdd4f5bc31"}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000001380)={0x80000000, 0x35cb, 0x8, 0xc51}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000018c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004041) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r3 = syz_clone(0x182000, 0x0, 0x0, &(0x7f00000019c0), &(0x7f0000001a00), &(0x7f0000001a40)="550868fcfe1521deff25760763bdf92c62bdc74dedf6b7b7a0edd198cab9426df5170e20aebba16c4c78c5315497d26cfac9cd9ddc433defdafdff79") writev(r1, &(0x7f0000001c00)=[{&(0x7f0000001a80)="a0bb8a7a6f31cfeb7ae0d6df4f545b23f405050610c08f0cb5358287340d53201d91af21d6e0660767c4cd896c2df5", 0x2f}, {&(0x7f0000001ac0)="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", 0xfb}, {&(0x7f0000001bc0)}], 0x3) syz_open_dev$cec(&(0x7f0000001c40), 0x0, 0x2000) fanotify_init(0x20, 0x80000) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001c80)) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x1, &(0x7f0000001cc0)) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000001d40)=""/230) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000001e80)={'veth0_to_bond\x00', 0x7}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), r4) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x15) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000001f00)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000020c0)={'gre0\x00', &(0x7f0000002000)={'syztnl1\x00', 0x0, 0x8, 0x700, 0x8, 0x2, {{0x1a, 0x4, 0x1, 0x3, 0x68, 0x67, 0x0, 0x93, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x7, 0xc7, [@dev={0xac, 0x14, 0x14, 0xb}]}, @rr={0x7, 0x3, 0xb1}, @noop, @lsrr={0x83, 0x1f, 0x8b, [@private=0xa010102, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xd6, 0x1, 0x3, [{@broadcast, 0x7}, {@local, 0x3}, {@multicast2, 0xffffffff}, {@private=0xa010100, 0x9}]}]}}}}}) syz_open_procfs(0x0, &(0x7f0000002100)='net/icmp\x00') syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000002140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x738, 0x1709, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x55, 0xc8, 0xf2, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x1ff, 0x1, 0x1, {0x22, 0x190}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x8, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x5, 0x1, 0x4f}}]}}}]}}]}}, &(0x7f0000002380)={0xa, &(0x7f0000002180)={0xa, 0x6, 0x110, 0x9, 0x2b, 0xf9, 0x40, 0x1}, 0x3f, &(0x7f00000021c0)={0x5, 0xf, 0x3f, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "02db5f21dd5d635ce6cd35f84a0751b7"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0xa, 0x0, 0x1, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x7, 0x2, 0x4}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x0, 0x2, 0x5, 0x8}]}, 0x2, [{0x4d, &(0x7f0000002200)=@string={0x4d, 0x3, "0f802590c47c978f7a650fe229510a2efb8403c4e25474f1ed7e82cdff5240faf7c9ba0787047fb279f70773ebbc93b1ffbabdde096df910fcec950fc758d366984f83fb5555327d5fbc77"}}, {0xf1, &(0x7f0000002280)=@string={0xf1, 0x3, "6cfff4d76cd253a2a80d2a08e9dc9875de463819c071036a0995e9e30e695b9ddd89275bd08e314f06838cc48e30b6b40932999f2013197f3ce9ca755ce6746f37e3f696888db123def39d5e3982373ac2d4282706acd64fa53623d9bb4dbdcd8dbe3d557e69611c38eafaf57b75893ff69a1ab51b884f559cfaa4c0603be6fd180e43c7457773630ef0db9728629dfec5f441f1eb6426ebeeac4890c46586f4001b118299cd973d840f25fe760b75f5c7b0c55e5e1aa8b79a502b8445c760103e21c626691d62eadc4889b0457b8d1ff3fb1b24b4126c8fcf353c0342596e65770f06d1a23aa846f7a17023bd9c1f"}}]}) 5.100111085s ago: executing program 2 (id=560): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x80, 0x7fffffff}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x3, 0x9}, {0x19, 0xb}, {0xffe0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x37, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x0, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000040)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x131600, 0x542b62ac61ca5d97) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) write$nci(r8, &(0x7f0000000880)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="41000153"], 0x4) write$nci(r8, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40055}, 0x40) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r13, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1000000000000222, 0x1) 4.166619968s ago: executing program 0 (id=561): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x3, 0x4010, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) set_mempolicy(0x3, 0x0, 0x40) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000300)={0x20000002}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)={0x800001f}) r5 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[@ANYRES64, @ANYRESDEC], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 3.942950645s ago: executing program 2 (id=562): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') openat(r2, 0x0, 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) socket(0x2, 0x2, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="cfa983afcbf229e0070000000000000000000000006f2bc908000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000000008000000000400000000b7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) socket$inet_sctp(0x2, 0x1, 0x84) io_setup(0x8, &(0x7f0000000600)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x4, 0x100000f, 0x9, 0x0, 0x1, 0x0, 0x101, 0xfffffffffffffffe, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0xffff, 0x6, 0x1, 0x407], 0x2000, 0x8052}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x4010, r2, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x100000001) write$char_usb(r4, &(0x7f0000000180)="c652ab5cc1e5", 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.915128833s ago: executing program 3 (id=563): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000000)='dctcp', 0x400300, &(0x7f0000000080)={@_ha_fsid={[0x3]}, {0x7f, 0x1000, 0x5, 0x6}}, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffff8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2, @ANYRES8=r2], 0x28}}, 0x4040804) pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_submit(0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0xfffd}, 'syz1\x00', 0x19}) gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @thr={&(0x7f0000000380)="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", &(0x7f0000000600)="6ca8884709341b9d16ebf71b5910407619bb765c6135596328f4dd2f40afbd1ab99940bbd193c173c87e466b0368bc2470b3d738633022e17e6b4827c67ada1592f6f456489cf3c799be0de395c0b07596a677f516846def032e00af84d9fc474d255572dc169321c3d00dfd8b514bfc822b1c5f0ac0d3a2b734e5cd1f26d0848466871e840d315d4cfb70e7cb21d31052276a1bc0600d703ad2f7c7190b0f7a45da7d50b881ac485d8dc91ee9ece159797f82343f31b05b1024ef69abbe27c7fc47924ef196e43a35584d"}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x1, 0x0, 0x3ed4, 0x7}) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000080)={0x65, "99858f2e1fc72405778505882cccddcd7c04cca26ca5e162e6409a69b3beb9415fc6fb045a3b8115c681db999cabf1bd0bfb3882c008b8e0cd39e67fde7c312736f04993b5dbd69b1d3a14e7fc7b70be2c83b1c8dbede53d2809d35527158065051df596f638f17bda8c94e7e03aeb1e1ec9d17f79728065b275a55d05eb3dcd"}) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) unshare(0x22020400) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x4800) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5ff29c160e2370321c6ba100b7c"}, 0xeb, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0xfffffffc, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0xffffffffffffffed, 0x3e, 0x3}]}, 0x20}}, 0x4004) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.806552869s ago: executing program 4 (id=564): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000a0000000010000008000500"/28, @ANYRES32=0x1, @ANYBLOB], 0x20}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900010000000000000000001d011f0005000d"], 0x34}}, 0x0) 2.801952436s ago: executing program 1 (id=565): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000104000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="000011000a0101000121cdaf905fbfae"], 0x28}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x8, 0x27, 0x2, 0x5, 0x1, 0x57, 0x48, 0xfffffffe, 0x2, 0x8008, 0xff, 0x9a, 0x45, [0x4]}}) r2 = socket$kcm(0x2d, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) setreuid(0x0, 0xee00) bind$xdp(r3, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) 2.703245304s ago: executing program 3 (id=566): syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed01020301090222000100", @ANYRES8], 0x0) 2.702858573s ago: executing program 2 (id=567): r0 = socket$nl_route(0x10, 0x3, 0x0) mknod(0x0, 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x3a9b5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ustat(0xf65, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_open_dev$usbmon(&(0x7f00000008c0), 0x5, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x4095, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r4) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000200)) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x10}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.538062565s ago: executing program 1 (id=568): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, r0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0xffffff7e}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x3}, [""]}, 0x14}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = mq_open(&(0x7f00000000c0)='!sinux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\xa1L\xb1\xef\x00\x00\x00\x00C\xb2\x8e9\xb8\xec\xf6&\x8f\xb8d\xe9\xf3\xf4Y+\xafp<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1e\x00\xe2U\xce\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3\xbfOS;\x85\xe0\x0fV\xf4\x8e1:\xd1^~\x13\x86\x17', 0x6e93ebbbcc0884f2, 0x6d, 0x0) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x80007, 0x4101, 0x4000000000000b, 0x1, 0x7, 0x400000400, 0x80000000000a, 0x5, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x81, 0x761c9023, 0x3ff, 0x0, 0x2, 0x8, 0x9, 0x8001, 0x7, 0x0, 0x3, 0x72a3, 0xe}) pwritev(r3, 0x0, 0x0, 0x0, 0x5) 2.532507569s ago: executing program 4 (id=569): r0 = memfd_create(&(0x7f0000000080)='\x02A\xbb\xcc\x96\x0eg\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00\xa8\'\x87\xdc\xbb\xb7~e\x126D\x88\xcfh,H2!zT\xdcV\xbc\x01\x00\x00\x00\x00\x00\x00\x00\xc1\xbb\xa5\x00/\xde?-\xa5\x1d\x86\xd8ZV+\xa3\xd14\xe4\xf9\xa8b\xd5\xf8U\xed\xd7\xec\x18\x83\xb0\v\x8de\x80\xd6\xb4Z^\xa17\xce\x90\xbaU[H\xc1\xe4j6\t\x882\x86\x91A\x1d&\xb4\x8bi\xfc\xc0}\xc3\x84\x1a\xbf,c \x1b\x01\\\xbd\vUC\x0e!\vNA\x8e}3\x14ei\x90\xf8\xf4\x1fg\xf9\xc3\xe7', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRESOCT=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x1, 0x1, 0x400}, 0x30, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 2.376920037s ago: executing program 4 (id=570): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x232000, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x8000, 0x6, 0xa, 0x4, 0x0, "f35be74a3a3ca715"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newvlan={0x4c, 0x70, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}]}, 0x4c}}, 0x8) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) prlimit64(r2, 0x7, &(0x7f0000000200)={0x7}, &(0x7f0000000240)) (async) r3 = socket$igmp(0x2, 0x3, 0x2) (async) readv(r0, &(0x7f0000001640)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000003c0)=""/198, 0xc6}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/91, 0x5b}, {&(0x7f0000001540)=""/91, 0x5b}, {&(0x7f00000015c0)=""/117, 0x75}], 0x7) (async) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(0xffffffffffffffff, 0xc040583f, &(0x7f00000017c0)={{@align=0x400, {0x92c, 0x5, 0x4, 0x599}}, {{[0x2, 0x0, 0x239, 0x1ff]}, 0x0, 0x0, 0x5, 0x0, &(0x7f00000016c0)=[{{@align=0x5, {0x8001, 0x0, 0x101, 0x3}}, 0x401, 0x0, '/dev/ttynull\x00'}, {{@align=0x3, {0x7, 0x1, 0x5, 0xd}}, 0x4, 0x0, ']\x00'}, {{@align=0x8, {0x7, 0x0, 0x14000000, 0x8}}, 0x5, 0x0, '/dev/ttynull\x00'}, {{@_ha_fsid={[0x1, 0xbf]}, {0x0, 0xe, 0x7, 0x2db4}}, 0x2, 0x0, '-[\x00'}, {{@align=0x6, {0x6f55, 0x8001, 0x4}}, 0x2, 0x0, '%\'..*&}(\x00'}]}}) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000001800)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001840), 0x22100, 0x0) (async) r5 = syz_open_dev$vivid(&(0x7f0000001880), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f00000018c0)={0x4, 0x1, 0x7, {0x10, 0x8001, 0x3, 0x7f}}) (async) syz_open_dev$sg(0xfffffffffffffffc, 0x5, 0x181) (async) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001900)={0x2, 0x64737664, 0x1, @stepwise={0x7c, 0x2, 0xff, 0x8, 0x10001, 0x5}}) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000001940)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000001980)={0x0, @in6={{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc}}}, &(0x7f0000001a40)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000001a80)={0x0, 0x7ff, 0x6, 0x1e, 0x3, 0x5, 0x9, 0x8, r6}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@bloom_filter={0x1e, 0xffffffff, 0x7f, 0x80000000, 0x400, r4, 0xffffffff, '\x00', 0x0, r4, 0x1, 0x2, 0x1, 0x3}, 0x50) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000001b40)) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c80)={&(0x7f0000001bc0)={0xb0, 0x453, 0x200, 0x70bd2d, 0x25dfdbfe, "c5bf7bf2071473ef970489c8b6e4d52efc934003c44ebff9ba917384ba36938695bd241fcb83a9b9a576e4de649a641c5fc1e9607e9129880c5b4b8c9b3b9e031b0ac485005cb0c825026d873c59a4af2c02b38949277b03eb3c17a0b416c15801e50ea42edd591d57d67884ec7c5320007a4095ed74a31fc165fe8d468fe487df4634668f172d3278887e7f656db938bd56c7e28ae2334b83f4ab97b51fd5", [""]}, 0xb0}, 0x1, 0x0, 0x0, 0x40811}, 0x1) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000001d00)={0x2, 0x4, 0x10, 0x0, 0x4}) (async) write(r3, &(0x7f0000001d40)="7fde4fdd03726c0be82dd5e59ab9c82a37b3a48f7998fda2daa614a050a29fade372881c0859520109791dee5a22e892766e145a0a27fc5b4a17aff2bc64e89e04b170d0e7f2ab8979d7011c5ba90320e138e719fdd97e8372f2225b0bf06ceeefdb466d827e34cafcc16f565c77d4878d2a0230dda14a8169f13ef4b46f444aacf4cb8e32dbe0c5cb9cc6aa5bb96e550939d2b6acce315054c195f3a02a6745f60416771f2ca049502e7fd8de4ca36a4e8ac589e0e44771d6b924775fd93b5a73be6000e5d6f8832861a3f1939becee987ffc8e0d8da562f610a273f995919fd9070a4eefc40ef561d557da", 0xec) (async) r7 = getpgid(r2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001f00)={r4, r4, 0x37, 0x0, @val=@uprobe_multi={&(0x7f0000001e40)='./file0\x00', &(0x7f0000001e80)=[0x5, 0x2], &(0x7f0000001ec0)=[0x5], 0x1000, 0x2, 0x1, r7}}, 0x40) ioctl$NILFS_IOCTL_RESIZE(r5, 0x40086e8b, &(0x7f0000001f40)=0x40) recvfrom$inet_nvme(r4, &(0x7f0000001f80)=""/100, 0x64, 0x101, &(0x7f0000002000)=@isdn={0x22, 0xc, 0x1, 0x2, 0x2}, 0x80) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000002080)={0x1ff, 0x0, 0x6, 0x8001, r6}, &(0x7f00000020c0)=0x10) (async) r8 = syz_open_dev$media(&(0x7f0000002100), 0x7, 0x121000) ioctl$MEDIA_IOC_G_TOPOLOGY(r8, 0xc0487c04, &(0x7f00000023c0)={0x0, 0x1, 0x0, &(0x7f0000002140)=[{}], 0x2, 0x0, &(0x7f00000021c0)=[{}, {}], 0x4, 0x0, &(0x7f00000022c0)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000002340)=[{}, {}]}) 2.31573814s ago: executing program 1 (id=571): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, &(0x7f0000000180)) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x204800, 0x48, 0x3}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x3, 0x4010, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) r2 = socket(0xa, 0x3, 0xff) socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x3, 0x0, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000340)="2ec799e24923e9ffdb8a4d2157ba27197a457579b5314b0d8a8c2e9b2e84fce348bcc69b8d5e4d61c2d3e3dcc5529fd3435bc6bd017357efe4c1e267e0dcd7f93aebf9c0deed9132b5f81a4770948d1dbef8ec5cb3a3c1555225fb996b7b027ed3eb875307bbb925e17600fc87afb97298fdeef11c70dbc63436231c6ff4a86a3daffd", 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000080)=0xc) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00140006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) 1.916371565s ago: executing program 4 (id=572): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(&(0x7f00000001c0), 0x3, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x28a40, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0403d11, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x14}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}}, 0x4840) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000002"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) eventfd(0xf7b2) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.633961518s ago: executing program 0 (id=573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010340)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@private, @in=@private}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000740)=0xe8) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000400)='!*:', 0x3) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7d9e, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x6c) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x4e2a80, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8200) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000300)={0x7, 0x8bf0000}) 1.326758287s ago: executing program 2 (id=574): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaef}, 0x7, 0x7}, [{0x8, 0xffbff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x4, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x80000001, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x219, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x84, 0x3, 0x8, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x9, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x6, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0x9, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x6}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x13, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0xffc, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x7, 0xfff, 0x9}, {0x0, 0xa908, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x3, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0x7, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8101, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x4000000, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x6, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x7fffffff, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xfffffffe, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x7}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ef}, {0x400, 0xfffffeff, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x200004, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81a}, {0x5, 0x8, 0xa, 0xd, 0x100006, 0x8}, {0x7f, 0xf, 0x0, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x9, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x9, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x8}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xf3, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0xff, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x3, 0xa, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x4, 0x8000, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x2, 0x0, 0x2, 0x31, 0x3}, {0xfffffffc, 0x4, 0x9, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0xed, 0x4, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x8000}], [{0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {0x3}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) (async) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xd) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x810, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,us', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) read$FUSE(r5, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0x0, r6, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) (async) write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0x0, r6, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000004380)="a6c574dd37ad5a06633d06f193c5b957758b45f2f4212a3ce6abbfded4461de98c0780332e9d3bfa72a53a1565605c551d53a1a3df7a15704f14493a1022fbcf144fe898338e9d3ea15101d7e179a6bfc093e7fb9ce3bb0854c64264cf2b2baeee72f52658949c8262186aa1582f932c471e68d5cfabd57f6abc46aa8052b942bac756f03e4a14f3ee3cc55d2aeec21d08ae0cd7a67ba70814ce161c6b7718e96055c1494f55f10673316179e99ce409c9cc18b80a020ea99be8bd3415d4420a9a4c74c9d16b8c6b58517f1380c44b8cee0d164eee6bfadada764eeac74f4c867b5e184dc0918d587bfc577836e9668f0fd44674f1310a910df2dc6e2342d47fbeb890b30d7183595996daa2e6f21fc1541ce0ed0686f2ca5536bfbc851a1ab1575502a19cbd990e954f12e9b7a0985d93c1ca66b268d4bdcdf7c75c17faa6d9b03c9f88fe6d31aaef35d2dc65bc74279983b0c6646475b83c1e01b6c8872d115aa72ae06a18e6d4120f551d2c35fae118d490c50867bf3f6cd2f950f22d6b0c7577e04697bee47b85c6144e2ecf45c4fd93ac1b51e44f98e38f9e9b93c3eb9160404d3a60f808836a8668604ffd8b317f91fd4dae384386c01f5fdebfa643907b5a07ad1423cb0d4a9a68aae6d2b5a912ba0b0789735e73d9a8ed8ae42c92f67f5c3a40e7df5575dd5e033f3bbfc443cfdde1685d9d5c05e8e9469bf7f546398a36cac008bc36520d0e08a4cee2a48ad2ab819524c9e2145f0d9d474acdb028b9cb8248a4d9df5bf6a1bfeea458fedbc039815ffe375cae1fb9be988916c20387318cde61c36b17eea13c176bb106d292728537032cdd79d7c8d48038a6b71aec0d61e774be6ad9f64210957c82dea29ca0991e019455cd7fd2ee2a64491e87e89807be62436132e5a6e75eb14f83885f161bc0c1ad2f3390cf0125712a9f5a14e62be0a9ef23f1eae46680143a83ab24483be91e1c015d4aadeb378c7aab79a474b755e14bbba59f2ac1b80d53d38baee42fd758e9a336ca9044e9fca0146f7168aa4a519e674daf9e061778a74a9ba48c34e1bc8ee86943f37b6fb653a82598902630bd4fa3cf374a622f38dcfe1006a3eed5c31766d13bcb431d7911ed3fd747755300b0343b65de201e0b95599f36cf1971b39fb3bad2448b863df0df7a3ad88741f08b90d7ab7632f481f0a6d1d8cea57d106b54790acb105f5a4030c48a232592a887863710b16abb7357670b36ccfa676d6689bf10b6ff95af963336f89f4136dc9ba2ea1c92bba5cafca6b248b2ffba2737012f29ac03ff59572833c4ff9e1a2ef2571e6962ab67e1e55138ddc4ac90441fa75f0feb9b2e07424bde534f28a50205f1136d9fca176d875bc44e3439c0bda08a2777987bb4e6795f48038f2ac7963d6528fddedf73b8416412031e84fb2ea1374adc4e3999db6339aadbf1c795dac51153f0ac54ca6d418427b696ded56900d663ef962822d67b6c7a6a0d5002f88e24b06ca47529f02ebbfffae34efec65f230de35368054a9d8bd9fc710f005008149019d683c7450234ae571b40e5de4c9178c1f1122aeac8293008a28ead3946bd6287126fdf42fecb03700cb9495b8a9be544aef8b489238020d7b9149f404dc17f61cfa4a3eeae72f46f79fe3f6d384ac2a4db2a45bc8c002ee4d491607e924fefd165c46fb15f2abba54a36a2460b6c2ee63de3e30e98ff3d453fab204eaef89ea21f8117b0e5e5e87eed6e2a3a58d270e65cc92f618b0e445d55f29c031fd36fce5ff62d036902bf5f1e4feb74c571f5f8fe03519d579c78f82efe2dea5192222f42ce4ed35f0f5df316dbe5b1db225b00dbe4e04518bb289c6eecbf2025a6758eb04f3675a9061b5e9ae5a9ec9bc5ee41b08d71c9059d2c68a42da09d2eacd3ace96be1ad943830663052cb8e3872588394453a1aee28cc3f7e4cfe34821cc8c323204a06e9d82fd4f67751c49f17f92dcb30e8f02f3ea24be55fbafa90c501c365cc0349e2c3b6f0f02ac83ff40793c4ed56e294ce28accdf6bbefcbfd0ff538d7cfab35635ed8fc8951a1ccd30b59bbe2c51eafe223b4dfcbdcde2acc437de051f9563b76a4360940a71986d86e0854a2b530ade41bdd87c0234ac5dd42ee03a102932b083e57f65c1019d4054efc1cd25f4f852b9cc6befd387ddecce4da58a466e536ee8f7a3ca5be424c92b1a20eca71d5901f3d62ac1bbcdeeaa2ef90fbcaf35168a1dc0a5cd52ea960ab4c1d0e0a6535afd5f209aa89617be651c4c2cd212445b32e17a04aeca05b42d4788921e5834744e63f13222dc52c90a08b6204d85fb27c9f15de631d53b5ff0ae50b5feb46f7c67363423d24f970e0e950839da3f42016ac2f38859ae4261a1e9da9552b6a17a1d5bcbf27fff17ad05384206948b49ce4c87c80c80edb9a3b5d76d1e64b01ba735f93667b8b378be78935936c2ac1071d7abb977cf01edfe7664858cfd8f846a4de20d98a56860091820f9fe7ca2de7be202b36222b88bd8eac23f41f62e14110afafe64210f4a07f894bfbcb183b87747e362cd5b9e8c50df1453053c18fe121bb7507bc501a46f736bd13d5ecc4fa54dd77e53a604f7232c8331b1b7c0537689fb1945128f975d6405747bcc0d172c19d4fa610cf481a8aacd5f7a7cbef3456a65443322afd137708b3fc8b3ee9b8a4cb38c7b14d4fdd74daa58074bcaf22bca1cc8ec2dd22cde60ba5d892342a14be25b4d897ddb23b8154c6f24a93c00c17acd90522ef7acb80b343ac08b4af83ce8a0c95bbfe140c0f1c572639f4079607a34b8f675cf3ddfc2bff83635f9d13b2375c1d317920530fc72fc774edf8dc4f653d72876c1ae61edc6edb1cbc2edbda7207cca6811175cb8f9205d8be99d81d217e0433ac7d298962b87db00128fff1f3d264c50dedd3ca4bccc8db1c1191c3ea226d351560024be65f4e85f577bf8f06d6528f7c73640cd579ac1677ee58255c1bcedc9670684737173037eddc55bc943b78524f617653a324319f6026b6a9b02cc9e3b58e8b661d5d7805723cc5c476e3b7f04ee7dbfe1af744f756313a2146a84224877cf93d1f27c28e7e21e4d29193d6384c3e9eb337cf67a5b45970c7ec3d5523847d0e7d56cc4f132f160851feeced284fb5a75c203fa6b1e01362ff6da0ebf8d852c90b1a026386253afe5c7a078ecd8c5663bee57b83200653bd2a5e6695a3cc5d466d2e65d81da058107d2422fc99875e95b772608e456471cbbfa2ee8795b45cacb1290563eb23bf534c7db5e47fbee4081013974ce9dac3301d6cd966255e22243c90fc55f4b421940c7e819e5d54f44869943e2f267e3b1b9eafdf61a9157c04e71b756076445ead7851923efa6454ff156b2c3793192fec046b7b7e8947efe0009e9ef049dae89b34dfdc0183cc7a9c7cac4eb13994535e803a7d9f070b95df12bb2ecc30bb518517982be2a274faaec1713a423f020089848326e5fe32c115de0b7f8c2876271a0d17924d246c9e08bb534d741b03646daea5411f1825632caf101ccae49a99b82e3735513947b6c6a4b09b76203547f79f2809c96bef593c6e64bd0eb84b1b11e3f136fe725607df9b3420af6cdead70bc572a44ec1453de49fa1f6843f5e74055cc37aa86a9c06cc8094f3f58f3bac7f7980c1d41729ce1331096fbab86ee7568798a0be045b132ec6c587143ed9071f949f0090b783a1324d76f5aec5559168da67c85e3bb8a48937a214d1f101d7ccff655c5eb778ddd61cde8dc39bb1920e0d7cf418b761ab92bcc677a0c5b6cab85574c1216e3cec682dbfad3a7b053e365578c0c1c7a70a1b48b6744441f1476e13366087913dd41e6d9a272301be9721dc0fc78355fa914b8033c1eec4f2cd0cb39e17603b2f7052619cb52e658c928e3925c326d00016146a754142115d4bafed77a5ad8b541f4e5cb732af4411a1a8833ff4215aa8e0d743ecc63c311bbe3fd21335a82f0648535688434df83e6fe6ea8455294a2bcafff88a0d0485657e7adf5b73083d873cc87ca6cd56593f11642fe27d9a998d55ac7af93b702fe4418d3ce0f2dd73d8c1f60524575119bfe0d961c468a906a0df2868465b5bf5d2018b97c2e11393f673b7199dd0c71df6469f984dbd484cf809ef1f919d1b7fcec368cb93ef49fae9b564a28225c2e2eef782a07f6aa660b2c385ac00a2151e3ccf29344b93621987f57bd29ecde89a2cc8dc87471606cce12f2ac1210358b5f08eddd983e86c02440a9b357f386f8d4ea61b0a73b64427e4e73b174ca05e63ab749626132643d02df141c757485cf729bec5229b91dced3640366200eb3beaacb9e9daf19fe74d7c06c18f3caf4d9ea2cc8fa906f58c620f91fd883dc9f3743f094a4b0c85d78f7ce6cc01c53856be10e861fe347f077399e187d22418c0aad8a913f4cc892c903d544be85be4b031d1028f70acd8184de1c28538001b153bf0bbb65c160339fe34856eca5eda8aaa79d76e4f126b4bbfaac2f44c0d936002ba75b0205a21c4720b0b3ae87f5c458a57254b017c51e3a51e087c3a29a654abe9fe9c21a100122a11f500fca1bf676aaf959980fca9cf1ace013d1de770ceea61e9c831d3a5dd8faab74bf95ee49f1a580e8c4add9cafddade6c761bd100e1658070b8fdba52481144d14fab4771b63a1e1ca1ef6d4edeada494a084bab8a5e4e97d1fb9313330ab144adc08933fcfa71ce95e9a274e5d1deb79705512b74306bbf702db06720abd251f38a4d6c3f8006cd42701e2355e7a5815131530749a409c0d5d993d20a6b82d84e4f14c36ce24c713c53e8edd3d571049838ae8815cbe000e492b645072e8635290d7b4e13439bd7964aa14f5d55b9347df8d7635ff028f4b6c9c21a98d2fc733fab1953ec9f142e95a29df4cb41d7b7863423ff7c39cbe4623bf449d5bc77040d90817ac0048cc360509a5a16c3094a6d57580db5497c3b3d5c62104dc58e851acafebe9eb531018215ff2bf2d58999d6ed966a646dddb0ca203a27978983128949878002ed1ddaa77aea7215e74499f9159cc9955822db1615a258fe65e0561be8c62435b7271b1f2911a9e01439ec15cec3e1f9fd795fa829c20e8729ec79fd064db0a8c2e676b9f3e3f49f05931d79303a9bdfeb04acf35596520383d8e758a889a00e7362cee3717b70cf30abb93a5f2a40ae099c265c2df3c02b4fdc4293d4e7fc26c8887fb9eb9832b716b083cd56d77ec2525ce622a2c088ceda4c753643212e2170e89ae2eb48d99e22c4844553b3ea0eb5383813522bca850896239fd228d4215d4c5b550f041c87b78efc4c1dbb96a6b0c03ab83c7ad4484b487804bc21d2b82f10da8a4fc7bddfe88882d1285e5eb1592ae121dc37b39e0de0c4825639ebf4cb8328c236721ddcb5820f4ca2efdc2bfcebaa0c588b0cac27dc5586aad5043434edcc6c02bf7173cc771d73f369951e97a0ef5cf2deff299adb75e564b3630c41fc059a75c661dc2510a3dbaa265bd700c9e20685991875a352a8083db7560f81cccecbfa3a744cedcd22efa444140e4d1b44ca8694ae7b80854989c393173b2fd8320ffea2d9a20a076357e5005c3c827808ad6a52b8de9968a41e0ac3170ed92f9f5630c62660746badb6894a6ad22b31be6486cd433520fb12c35a2720cc4b26749c0c4fff90060d3e5c4e5a3ea0116e20fe0b540b3b1dfca809b76bdeda4288667dc0b5b12a017fc660ec2f81d2e123c7a44c5a5080cc6bb82dea8c4afdc577c083bfc1030575b566f8a645b625b0afe554c68047ca43b99f9fce1dafe0b8c04c0a96b291cfb57239acdea88a4da0702b28de12fd36f24191e872a1f84a4f9922f54c1ec1c4b334a2637bdf17c0ea02c625d49d5dfb6f3799fd533a2948f4eb715ce107beffca4d4bcda4f74cae225cd2d47e5328ea2d43e90bb5d889cb25582a6dec2074c2a56c9b085da58d04b47f705bd20d2a038e74047995a5a91f130931fc916ee1ce71a6e1e448a692f2038612e4ec92d9aa496bb456303948ee34fa252fdff78c73d0ea3561edaad53a687172928fcc6b4f7c489113444a71073891181c863e1b11fb91ba0ed1362e313738bb094e59848b6686b609820a40f2bb7c06b2ed25f8834550a11be1d48af0260d8b22af8a560b9b995539118a7703621bf4f458d317ff594ff5ad5b54c460b0fbefb26e6afaed183d76f5deb150a96e8afa6ae08bf2e5cf7512ba46d153417530bb0f3d0fbccfa577b6f89d67c3d35402c50ca7e26a037d6e743ced3f562624aee7c9e7edb3e6dc1fc3e692b93b819bfec8e593efc6e5614ab7dc754ae7116c14b52d3cdb5a1fae2b420fcbb0a1df00ba19f61243e94f14324fbe9ff18cb9e9050fc795a9e4951119bf1fab9ea614cec2421d1f60dfb7776c5b689a443785f979c4abc48e730d091a63f8f504e605029a817135597e7556dfa086139077037f313e827f4f1ca48aafafc4c1f8350750c68eebdf64b9f8e7043d3f53fcdc7c3479d09d70305b197e68140b430290d6169a998762af1a6c18d9f5a383503a9861930a0058641e35ebf149bd092a3f16e91779b0782f850c6ceeae5325609431cd363f46c5411ccf4187a30d3681cf28b945b47ac0300522750c706d4e438d848339578b8cefbcbdcd0d0e325a9d201ee670a98e7c79bd695915bca29f1d06ec01b71797088126b936f3233a7e6d9536aa9f09f13bfea01d44508ecdded3819bd1c6efee93703f4886be2fa2e8c93a71955a61f0cf44a9aed26cd75416e83cd87191a6c060484b0cfb50780131141f6cee23e7a0dc395118699422b1ae82199a7482e6637e5f6d0cf95b59463bccbf9a1cb13ddff1510d9e4b6c83f87b54ea388d73bb7b8ea91ef354ab5a7d789ceb116659a9b094fca42bf3b3ca01a6183d0947993d1953ddfe86b4b9ed39ee0457632989bf804e638609c7a5f02ae3375b664f9420b809fcaafb8312f8306d76635fadd3e92c6cbdc4621ff29384d1c171f526446863f5264ba0bbda4591f7c556ef90883db06ea4df05fdc2ba59972efdd10ac63317e97756c596c01b9b63efc66576fc220822fb66e63e49bd6a0bd1af1a67659e36f0f8ce4594fb592c2592b6d59ea6c387c10d83bcb6fafb0ce23eef6f108d1449ee732b75bea6536a1d4279d8c73a873ab0273dbc47b33ced5c18358b719341148c3658ff43bb93ee7240511a549e7908a767ae713f3909f937b876989f2c78d379d5f62ea7fa8c2f872179b90adf80caec5e60965fa003f4c1b022d49b2b056e3f0809ad4667accf069c2d4f93d90a6272c2434566553ff0da6507d6a4680c2ecf6b0810a9777ab213283ebc2cde80001cb3e591ffc0524c2d49e297c98e71595cc7d742ca23fde6976297988fcfdbdb131f82547aa17dc8f2225db8829a8886147cdacaf7478fb383c645d6f87486ab377e83b3b4352330fbf82193aba642e7494fbaa86dd146f3fbcafa68502be06e76f62b43520568977fa3274a1ee63250778dbb50c9b53d559a025dd5dfca0b90c39bec748b7b48f277142e7b8feed18fcbd6d064af6aedbb4af14ed01a8b947d132c439d5fc28972b1f3dc32d1347d0c78d6b0253f5eebe2c2623a0be2f11d48281384c89b8f5e9317c3f9eb5ab19fe113376b5be6d7b13518e11d10f882dbd1a78020634169294b51202691c28a3c78c1dfcf4c90cf9b6bcd89ff2487e237fd8fdcf9438d3d7fe6170d50bc2fe85a0ea92bb74a4d5a4dcae9186b48f1733f165600e3daf69425a40ed47bdf21cce93fa901a6370e67eb5bdd59857742322ad6e9aa86a260f76262faef3c957b293c80a7e26a06d6ac6590a75f47df7784c2bfa51da1ca9b016628b56db020bcb88fd584b2a6e71d97a7505cc692b7c24ca690f54683b913741ed48487e358ac12d1f5082a618344a716bce24d899577a1f6f48b22bd0ebe6cd4f98cfa0bb645a8c28575d171d898a8feaf0578d97ad9a4cc4e0a0c8367202a5bce21a1c14a99073afbcb5399336efee97bd5819cc125d1fc401840e3a31f23b51d5d4e6c9ea449975817f08f742ee5479b9ba24a7b203b82d3e060510e85aab8c32434229e4100b5b1c3760b914e095d071790b65b9bb0a3466d19b206fa415f0f8b0bed0673f6e17e2e5fae3a42a3633c302c140fb82c2f5c01fc470c9c3e68b5c0d52039ef4e50fa31e1bb2019ebb9858b299b69740b2949449d8469d728f892da89e7115de8ee1f777c507bfe98e80d9b4d064fe0889392e5170711988b609972aa8f15525ad2bb1dc0117af0933792aaca6eebdd22ce19639bee25c877d802a503d1354bba99403435db2aeff550c0b477625bd22617398b9124d3edf1306e522cb2f8610bf533cbc55d4d1c5d7ff5d07f87a11494980e97a7c824beb7e16090040d2cbff761b826e8b5831dfcdf000eac2e771a48c6ba846b9ddf36a858099f77d51bbfad480bba9095905d618d7b355e40159f5e48ddd5583ea720ac9c74cb118c011d3ba1c67dc865a8eeab8667e0a81ce5894fd888fe4ec2ff936bfeb45c66cde689e4a4f13bd138e7dc27aa263fb009b81c274bd0d73b35385d99d1d082ebe5cb41de09d274fbd7c1c414f3d1ab45d2e8949cff34106b574710144cf6d2072c380cc9c83ca48b5e057973e73df30821c1478d21bc55a462727263062271d76fea1509b365fbdd92b4c23e088f61fce348ba0e7a3e5de600762c462e063e74981f14520babfc3278326b95419d24f4e4853507acea8a5f7e70c13b31f47dc3d823b3f699a029093b1ccbc564c3be29a974cea6fbecdae3f763fff2e65bfa1a52742fdcde3c9c0644267825576d7268e2bec08bfb52083df7b5bab93fbf2cf6a8d91cda5a04216e8b9d961a28720667d2a1d3098bba17517b74cc93b8e3b65d36c12f10a7e0898db2e1e4daf78a6696e1ee221cb885519cdfbe9284face6a525e4ac8d1d91f46d2dc8331ba90e9613947718bf51476ec3702c21313248edd984c46df760b2d83ce9599fa73508d12f606d4643c25ca38fb97fa43d229a8131332011fa87763ae10d48c5e2be8914c1d40d3e53e52f803804769edbac0e309590e4131982de1baae61ff0f1443b95344c488a7a7f4e0b3034400bddc2ec447a40a36d017b2caba9bda7f03f8cddcceecafa556820ffd3c072ef394a3d809d78f5ef53f57f72012b60ee76940b3aad36c76249a371669ddb0da3227b893b99a355143cab5cfc717658b14133aaf002ea497bd7db4d8f1bbf9934a55777ab886038492a934b1a2a2cce48971ab93c78fe4d45109e5db3c5c276cf99a3cd497023bb2a19b6a186325f72d2d202ff0201caa67ed9901afae678579fd3fce2f5bfaed4a54bd2dbb824f51dfe17d998b0526fa8dc596a80f097c46ce38f5e927ace3d0dc90b9092d619b71e36421fe0869681cdb5e385b794e9ed34932163ffc6b8d21e882b1ff00c7f3db420b8ee19c7c38ec3192de30dc3e5d01f572134c1b25b08f7cd1526fe4a97c1108cd84950a11dc697551b401c4186f2d1e4cd21a2b4fa43ec6c4af09f80bdadebbf121ad2339f6bac808f3a9964516132c3b3d8756f22f7b7b8a8695d3029c45e335c77945b8ae7eca964b77a04a1695d65c4f453f1cd3f6d85ba40764f02007165f1fba3b28d23f88534995119c869a20d48c67f79dd1d259042dd8226732905de52ee1aa570ff4fa732d86cc20a11dace7d65fdf1d26b58384b7f315d11cf3231007584025c3dd9f2d5e38d7c2e3bad6ac85267d31625dbbbce63e9898872f38a303fd638e43c5cefebd719e8efe6b2075f91cbc62cbb6579420016ac0216b667aecb7195da4c4a36477c665fcfef6ad551ea3606a1475230118d95e600cf2abeff563d92e1bc753d10d782a1d95140b5cafae4d2d350e7a84fa3b65723943a97c68cabb776ce502abf2f1f1fb8c1248a9bbf2903c9304fbf9a1219b40f378123b5f8130ba36f3f423327b869605d056a101f64d8d6ca8b59aae0e325ae5e114ea550d11fdf983ac2eedb404a10929eabaf2f7c402b82124c7bb30b5344295818a253012dafa47f6f34b4431f0180cc2859db29b349c6138b538fd4de3863c21c01285600dc1ce73013990e4c1daa03d78878200c639586038620fdb7a9fc844485818edfd2636aec5a2b16af4bff428d2dfe89475ca06776a68d5e4b4761b985095e94cd91d33a3f0a5dfbfc255ab5896491c03044aff1950823358b54edee81afea9b88764a24ac9b917e2cab6cb2ba1c91d10bd0ef8681cea3ad9c59f78882d4aa807a53a106ca2d0738a04457275cfac653638a94577c4ab03c9e5d6de1dc78b487ec918c4a7ca2a8d6ff852e8fa25776aa6f139a3c54693271502b71eaddb461c1819f6d20a79ac7226a177f42df6f4705cc62cc0484b28e5cfdf7fc52b0c582621bacd703a28714175db576ec0bf017c32424675d28d992e46de460b3289fee37b49b356f7842cd94764795c887115419234049a2a2708ae82efb8f10f5d22c2bae2f5c1abb9cd839c6214b0acc0b04fb6cfdf7f3adcadc5189d850dd957c47a4f946ac479a4e124f695d222f37ea07506638e90b86bf3bbb0ccb578bb6fee8941d6e1da1c77996a064c60157b6d417beb1ad5205f210851a079f9ef6e3faf3cab5482cdf7159e78b9d820cfee714a070ad35b91b49cb43b43bb7fbbfd5276b5c2eb0d4ca9ff9b10f0b8ec74233c7aebb2933e4bd5b0a388ed6ceafed8ef995098c2b88d74d2cebd44ba26c27b5d8983394d286156f4b501e45fe5217096b1bfe7b9bb3f6c3b4d2ad15bf1c86ed70ee852c4cfb979eb4a0c826953799a2030322669364aa905092fb45cbeacac44703c70d7e278f1a5926f242d459e36dd8e374f9bb7a0c907db1d4f8c1993ac0244f6d563041a8956ea82b7eef7a63ac200d32ab107d6728610efc530aa5783771a5fbedbf5a379b2923f088cd203e315f41072d83201a1f1fce87d8b7cf2f142e1ff5f8b2f52028e8764e49604b46dc3763f79015183f601e26346606e22c24e1833b2755afa285feb833d3ff3b910846a96e028070f925a6c640d9956c852367e89ca0dda26ad3c22f3c63f87c49f21e62363273579059ec88643943816a0a20caa0d97bb10aa5f1da882d422beefc5f59128636d851427783f1639d25af11d0bf7e8810f2304074f0710b82a1f8fea2f7da16b896783a468aa04e5524d9f118ae733501cfb913c3c2e327b7b5c87e250884667a9fcf29e27c9009c2173853b5ddafd7c6bfffbe1edaaecbf5134aff42876a192e34e32faa8605e1f5dc8553c3e43156126da540ba467be0b3bece1826a85a96232fd37a68bd9a381e96a74f857965477725c28aa908fc8367c7c4024059cd2454cdb0bd00213d70946b1751e133cff48809c6093c6fb00db7e477a86c857c81d39d49f1974d2191f52f737c0f9710a6eb8bf6b86161930b312123840cfc060abd7f69e36a6393036550321d09dc13e484794aa0de078f03d8396464feeb7fe8055b23638d7d780a394013039dd006484051211c862bbfa85e5cfbd77d2ced2f5ddb9229f183fcffd2c5d5bfac00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xffffffffffffeffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r7, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) (async) syz_fuse_handle_req(r5, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xffffffffffffeffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r7, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) syz_open_dev$mtd(&(0x7f0000000340), 0xa, 0x2001) (async) syz_open_dev$mtd(&(0x7f0000000340), 0xa, 0x2001) r8 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) close_range(r5, 0xffffffffffffffff, 0x0) write$binfmt_format(r8, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) syz_open_dev$tty1(0xc, 0x4, 0x1) 721.859288ms ago: executing program 3 (id=575): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001100)={{0xffffffffffffffff, &(0x7f0000000000)=']\x00', 0x2ca81, &(0x7f0000000040)={@_ha_fsid={[0x80000000, 0x54]}, {0x85e9, 0x7, 0x7, 0x3}}, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x2}, {[0xcf5, 0x5fa5, 0x0, 0xff]}, 0x5, 0x1000, &(0x7f0000000100)=""/4096}) landlock_restrict_self(r0, 0x1) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000001180)={0x1}) landlock_restrict_self(r0, 0x4) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000011c0), 0x1, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x3c, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1e, 0xa9, @random="ab7fc6392fa0bd80a2dea26068376ae16adab12b80fdd4f5bc31"}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000001380)={0x80000000, 0x35cb, 0x8, 0xc51}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000018c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004041) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r3 = syz_clone(0x182000, 0x0, 0x0, &(0x7f00000019c0), &(0x7f0000001a00), &(0x7f0000001a40)="550868fcfe1521deff25760763bdf92c62bdc74dedf6b7b7a0edd198cab9426df5170e20aebba16c4c78c5315497d26cfac9cd9ddc433defdafdff79") writev(r1, &(0x7f0000001c00)=[{&(0x7f0000001a80)="a0bb8a7a6f31cfeb7ae0d6df4f545b23f405050610c08f0cb5358287340d53201d91af21d6e0660767c4cd896c2df5", 0x2f}, {&(0x7f0000001ac0)="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", 0xfb}, {&(0x7f0000001bc0)}], 0x3) syz_open_dev$cec(&(0x7f0000001c40), 0x0, 0x2000) fanotify_init(0x20, 0x80000) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001c80)) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x1, &(0x7f0000001cc0)) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000001d40)=""/230) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000001e80)={'veth0_to_bond\x00', 0x7}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), r4) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x15) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000001f00)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000020c0)={'gre0\x00', &(0x7f0000002000)={'syztnl1\x00', 0x0, 0x8, 0x700, 0x8, 0x2, {{0x1a, 0x4, 0x1, 0x3, 0x68, 0x67, 0x0, 0x93, 0x4, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x7, 0xc7, [@dev={0xac, 0x14, 0x14, 0xb}]}, @rr={0x7, 0x3, 0xb1}, @noop, @lsrr={0x83, 0x1f, 0x8b, [@private=0xa010102, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xd6, 0x1, 0x3, [{@broadcast, 0x7}, {@local, 0x3}, {@multicast2, 0xffffffff}, {@private=0xa010100, 0x9}]}]}}}}}) syz_open_procfs(0x0, &(0x7f0000002100)='net/icmp\x00') syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000002140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x738, 0x1709, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x55, 0xc8, 0xf2, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x1ff, 0x1, 0x1, {0x22, 0x190}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x8, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x5, 0x1, 0x4f}}]}}}]}}]}}, &(0x7f0000002380)={0xa, &(0x7f0000002180)={0xa, 0x6, 0x110, 0x9, 0x2b, 0xf9, 0x40, 0x1}, 0x3f, &(0x7f00000021c0)={0x5, 0xf, 0x3f, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "02db5f21dd5d635ce6cd35f84a0751b7"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0xa, 0x0, 0x1, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x7, 0x2, 0x4}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x0, 0x2, 0x5, 0x8}]}, 0x2, [{0x4d, &(0x7f0000002200)=@string={0x4d, 0x3, "0f802590c47c978f7a650fe229510a2efb8403c4e25474f1ed7e82cdff5240faf7c9ba0787047fb279f70773ebbc93b1ffbabdde096df910fcec950fc758d366984f83fb5555327d5fbc77"}}, {0xf1, &(0x7f0000002280)=@string={0xf1, 0x3, "6cfff4d76cd253a2a80d2a08e9dc9875de463819c071036a0995e9e30e695b9ddd89275bd08e314f06838cc48e30b6b40932999f2013197f3ce9ca755ce6746f37e3f696888db123def39d5e3982373ac2d4282706acd64fa53623d9bb4dbdcd8dbe3d557e69611c38eafaf57b75893ff69a1ab51b884f559cfaa4c0603be6fd180e43c7457773630ef0db9728629dfec5f441f1eb6426ebeeac4890c46586f4001b118299cd973d840f25fe760b75f5c7b0c55e5e1aa8b79a502b8445c760103e21c626691d62eadc4889b0457b8d1ff3fb1b24b4126c8fcf353c0342596e65770f06d1a23aa846f7a17023bd9c1f"}}]}) 179.820132ms ago: executing program 4 (id=576): socket(0x1e, 0x5, 0xd) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x4) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x3ed1, 0x5, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) ptrace$peek(0x1, r4, &(0x7f0000000080)) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) getrlimit(0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000161ac000008003c000100000005002e00000000000000000000000000000000000000000076d8"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004841) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x4c04c3, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x5, 0x9}, 0x0, 0x0) 70.959053ms ago: executing program 0 (id=577): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000340)={'macvtap0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffc, 0x0, 0x0, 0x8}}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 70.503791ms ago: executing program 2 (id=578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x4, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r4, &(0x7f00000003c0), 0x100000000000022d) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x4, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') (async) preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) (async) writev(r4, &(0x7f00000003c0), 0x100000000000022d) (async) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) 0s ago: executing program 1 (id=579): r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0xea60}}, 0x0) setitimer(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$notify(0xffffffffffffffff, 0x402, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4, 0x0, 0x700}, [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0xb1, 0x0, 0x1, [@generic]}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x5d) kernel console output (not intermixed with test programs): 00000000000006 [ 232.620666][ T6989] RBP: 00007f5864a8b090 R08: 0000000000000000 R09: 0000000000000000 [ 232.620673][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.620679][ T6989] R13: 00007f5863e26128 R14: 00007f5863e26090 R15: 00007ffebdb665c8 [ 232.620695][ T6989] [ 232.620720][ T6989] kobject: kobject_add_internal failed for input12 (error: -12 parent: input) [ 232.622614][ T31] audit: type=1400 audit(1789944317.926:457): avc: denied { append } for pid=6985 comm="syz.3.280" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 233.230108][ T6974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.230365][ T6974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.262233][ T5698] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 233.302296][ T31] audit: type=1400 audit(1789944318.776:458): avc: denied { write } for pid=6992 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.460806][ T5698] usb 1-1: not running at top speed; connect to a high speed hub [ 233.460828][ T5698] usb 1-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 233.462976][ T5698] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.462995][ T5698] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 233.463033][ T5698] usb 1-1: config 1 interface 0 has no altsetting 0 [ 233.668032][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.668050][ T5698] usb 1-1: Product: syz [ 233.668058][ T5698] usb 1-1: Manufacturer: ｬퟴ퉬ꉓඨࠪ疘䛞ᤸ燀樃锉椎鵛觝嬧軐伱茆쒌ゎ뒶㈉龙ጠ缙痊潴零趈⎱庝船㨷퓂✨갆俖㚥䶻춽뺍唽楾ᱡ畻㾉髶딚蠛問煮삤㭠﷦ธ읃睅捳韛戨ﺝ擫곮遈旄ᬀ舑춙㶗྄︥୶냇廅ᩞ램傚萫읅ၠℾ⛆ᵩ䣜낉筅ᾍﯳ␛ኴ转㗏̼奂敮ཷ턆㪢䚨ꇷ⍰鲽 [ 233.668080][ T5698] usb 1-1: SerialNumber: syz [ 233.732578][ T6978] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 233.969053][ T5698] usbhid 1-1:1.0: can't add hid device: -71 [ 233.969111][ T5698] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 234.006264][ T5698] usb 1-1: USB disconnect, device number 14 [ 234.030968][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 234.031025][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 234.064681][ T9] usb 5-1: USB disconnect, device number 17 [ 234.303772][ T31] audit: type=1400 audit(1789944319.776:459): avc: denied { set_context_mgr } for pid=7014 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 234.460886][ T31] audit: type=1400 audit(1789944319.926:460): avc: denied { connect } for pid=7014 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.511784][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 234.661832][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 234.665442][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 234.667895][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 234.667911][ T9] usb 4-1: config 0 has no interface number 0 [ 234.695246][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.695261][ T9] usb 4-1: Product: syz [ 234.695270][ T9] usb 4-1: Manufacturer: syz [ 234.695278][ T9] usb 4-1: SerialNumber: syz [ 234.733756][ T9] usb 4-1: config 0 descriptor?? [ 234.803966][ T31] audit: type=1400 audit(1789944320.256:461): avc: denied { write } for pid=7021 comm="syz.1.297" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 234.803999][ T31] audit: type=1400 audit(1789944320.256:462): avc: denied { map } for pid=7021 comm="syz.1.297" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 234.865882][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 234.922162][ T7024] netlink: 'syz.0.298': attribute type 16 has an invalid length. [ 234.922176][ T7024] netlink: 156 bytes leftover after parsing attributes in process `syz.0.298'. [ 234.930424][ T7024] tmpfs: Unknown parameter '' [ 234.930521][ T31] audit: type=1400 audit(1789944320.396:463): avc: denied { mounton } for pid=7023 comm="syz.0.298" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 234.986000][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.986249][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.029515][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 235.051709][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 235.294517][ T7032] netlink: 272 bytes leftover after parsing attributes in process `syz.4.301'. [ 235.547590][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 235.549876][ T5718] usb 4-1: USB disconnect, device number 13 [ 235.709642][ T5718] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 235.778184][ T5718] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 235.807116][ T5718] quatech2 4-1:0.51: device disconnected [ 236.148893][ T31] audit: type=1400 audit(1789944321.616:464): avc: denied { mount } for pid=7040 comm="syz.4.304" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 236.226029][ T31] audit: type=1400 audit(1789944321.646:465): avc: denied { search } for pid=7040 comm="syz.4.304" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 236.226064][ T31] audit: type=1400 audit(1789944321.646:466): avc: denied { read write } for pid=7040 comm="syz.4.304" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 236.226087][ T31] audit: type=1400 audit(1789944321.646:467): avc: denied { open } for pid=7040 comm="syz.4.304" path="/61/nfsd/filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 236.386782][ T5619] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 236.550094][ T7049] loop0: detected capacity change from 0 to 1 [ 236.752602][ T7051] loop0: [ 236.752620][ T7051] loop0: partition table partially beyond EOD, truncated [ 237.024132][ T31] audit: type=1400 audit(1789944322.496:468): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 237.054714][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 237.111758][ T5718] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 237.191580][ T9] usb 3-1: device descriptor read/64, error -71 [ 237.280927][ T4976] loop0: [ 237.280944][ T4976] loop0: partition table partially beyond EOD, truncated [ 237.300087][ T5718] usb 4-1: not running at top speed; connect to a high speed hub [ 237.300107][ T5718] usb 4-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 237.300858][ T5718] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 237.300877][ T5718] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 237.300893][ T5718] usb 4-1: config 1 interface 0 has no altsetting 0 [ 237.320658][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.320673][ T5718] usb 4-1: Product: syz [ 237.320682][ T5718] usb 4-1: Manufacturer: ｬퟴ퉬ꉓඨࠪ疘䛞ᤸ燀樃锉椎鵛觝嬧軐伱茆쒌ゎ뒶㈉龙ጠ缙痊潴零趈⎱庝船㨷퓂✨갆俖㚥䶻춽뺍唽楾ᱡ畻㾉髶딚蠛問煮삤㭠﷦ธ읃睅捳韛戨ﺝ擫곮遈旄ᬀ舑춙㶗྄︥୶냇廅ᩞ램傚萫읅ၠℾ⛆ᵩ䣜낉筅ᾍﯳ␛ኴ转㗏̼奂敮ཷ턆㪢䚨ꇷ⍰鲽 [ 237.320704][ T5718] usb 4-1: SerialNumber: syz [ 237.412194][ T7056] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 237.462832][ T5698] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 237.480733][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 237.501329][ T4976] loop0: [ 237.501355][ T4976] loop0: partition table partially beyond EOD, truncated [ 237.604526][ T4976] loop0: [ 237.604552][ T4976] loop0: partition table partially beyond EOD, truncated [ 237.613150][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 237.625393][ T9] usb 3-1: device descriptor read/64, error -71 [ 237.645831][ T5698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 237.645859][ T5698] usb 5-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 237.647390][ T5698] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.647405][ T5698] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.691791][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.691812][ T5698] usb 5-1: Product: syz [ 237.691821][ T5698] usb 5-1: Manufacturer: syz [ 237.691830][ T5698] usb 5-1: SerialNumber: syz [ 237.734241][ T5718] usbhid 4-1:1.0: can't add hid device: -71 [ 237.734299][ T5718] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 237.736054][ T9] usb usb3-port1: attempt power cycle [ 237.768118][ T5718] usb 4-1: USB disconnect, device number 14 [ 237.799376][ T7067] netlink: 204 bytes leftover after parsing attributes in process `syz.0.313'. [ 237.846874][ T4976] loop0: [ 237.846889][ T4976] loop0: partition table partially beyond EOD, truncated [ 237.965971][ T5698] usb 5-1: 0:1 : does not exist [ 237.966035][ T5698] usb 5-1: unit 1 not found! [ 238.242671][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 238.261908][ T9] usb 3-1: device descriptor read/8, error -71 [ 238.298212][ T5698] usb 5-1: USB disconnect, device number 18 [ 238.358726][ T6609] udevd[6609]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.385139][ T4976] loop0: [ 238.385154][ T4976] loop0: partition table partially beyond EOD, truncated [ 238.492551][ T31] audit: type=1400 audit(1789944323.966:469): avc: denied { read write } for pid=7078 comm="syz.3.317" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 238.529053][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 238.542205][ T9] usb 3-1: device descriptor read/8, error -71 [ 238.583400][ T5718] wacom 0003:056A:003F.0004: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 238.652165][ T9] usb usb3-port1: unable to enumerate USB device [ 238.679033][ T7081] fido_id[7081]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 239.204094][ T5718] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 239.362673][ T5718] usb 5-1: Using ep0 maxpacket: 8 [ 239.365422][ T5718] usb 5-1: unable to get BOS descriptor or descriptor too short [ 239.365450][ T5718] usb 5-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 239.368525][ T5718] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.368552][ T5718] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.368566][ T5718] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 239.431741][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.431758][ T5718] usb 5-1: Product: syz [ 239.431767][ T5718] usb 5-1: Manufacturer: syz [ 239.431776][ T5718] usb 5-1: SerialNumber: syz [ 239.672936][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 239.672949][ T31] audit: type=1400 audit(1789944325.146:472): avc: denied { name_bind } for pid=7108 comm="syz.3.323" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 239.720839][ T5718] usb 5-1: can't set first interface for hiFace device. [ 239.720861][ T5718] snd-usb-hiface 5-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 239.752110][ T5718] usb 5-1: USB disconnect, device number 19 [ 239.806194][ T31] audit: type=1400 audit(1789944325.276:473): avc: denied { write } for pid=7095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.008944][ T31] audit: type=1400 audit(1789944325.476:474): avc: denied { create } for pid=7099 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.083764][ T31] audit: type=1400 audit(1789944325.556:475): avc: denied { write } for pid=7121 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.201617][ T5718] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 240.354058][ T5718] usb 5-1: Using ep0 maxpacket: 8 [ 240.355678][ T5718] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.355706][ T5718] usb 5-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 240.375205][ T5718] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.375231][ T5718] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 240.375244][ T5718] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 240.422774][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.422791][ T5718] usb 5-1: Product: syz [ 240.422800][ T5718] usb 5-1: Manufacturer: syz [ 240.422809][ T5718] usb 5-1: SerialNumber: syz [ 240.686320][ T31] audit: type=1400 audit(1789944326.156:476): avc: denied { create } for pid=7129 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 241.065372][ T31] audit: type=1400 audit(1789944326.536:477): avc: denied { validate_trans } for pid=7140 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 241.208041][ T31] audit: type=1400 audit(1789944326.676:478): avc: denied { write } for pid=7125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.411764][ T986] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 241.498603][ T31] audit: type=1400 audit(1789944326.966:479): avc: denied { write } for pid=7153 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.568661][ T986] usb 3-1: not running at top speed; connect to a high speed hub [ 241.568682][ T986] usb 3-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 241.570138][ T986] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 241.570158][ T986] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 241.570175][ T986] usb 3-1: config 1 interface 0 has no altsetting 0 [ 241.628779][ T986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.628797][ T986] usb 3-1: Product: syz [ 241.628806][ T986] usb 3-1: Manufacturer: ｬퟴ퉬ꉓඨࠪ疘䛞ᤸ燀樃锉椎鵛觝嬧軐伱茆쒌ゎ뒶㈉龙ጠ缙痊潴零趈⎱庝船㨷퓂✨갆俖㚥䶻춽뺍唽楾ᱡ畻㾉髶딚蠛問煮삤㭠﷦ธ읃睅捳韛戨ﺝ擫곮遈旄ᬀ舑춙㶗྄︥୶냇廅ᩞ램傚萫읅ၠℾ⛆ᵩ䣜낉筅ᾍﯳ␛ኴ转㗏̼奂敮ཷ턆㪢䚨ꇷ⍰鲽 [ 241.628827][ T986] usb 3-1: SerialNumber: syz [ 241.689575][ T7141] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 241.707634][ T31] audit: type=1400 audit(1789944327.176:480): avc: denied { read } for pid=7155 comm="syz.1.329" name="sg0" dev="devtmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 241.737127][ T31] audit: type=1400 audit(1789944327.206:481): avc: denied { open } for pid=7155 comm="syz.1.329" path="/dev/sg0" dev="devtmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 241.785329][ T5718] usb 5-1: USB disconnect, device number 20 [ 241.943002][ T986] usbhid 3-1:1.0: can't add hid device: -71 [ 241.943061][ T986] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 241.969969][ T986] usb 3-1: USB disconnect, device number 14 [ 242.762852][ T5718] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 242.793299][ T7174] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 243.008531][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 243.017921][ T5718] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 243.019896][ T5718] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.019911][ T5718] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 243.019934][ T5718] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 243.019955][ T5718] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 243.019975][ T5718] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.019988][ T5718] usb 5-1: config 1 interface 1 has no altsetting 0 [ 243.021570][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.021584][ T5718] usb 5-1: Product: syz [ 243.021593][ T5718] usb 5-1: Manufacturer: syz [ 243.021609][ T5718] usb 5-1: SerialNumber: syz [ 243.195880][ T7178] ip6t_srh: unknown srh invflags 7863 [ 243.534936][ T7164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.535190][ T7164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.584846][ T5718] usb 5-1: selecting invalid altsetting 0 [ 243.605092][ T5718] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 243.607128][ T5718] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 243.693211][ T5705] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 243.851095][ T5718] usb 5-1: USB disconnect, device number 21 [ 243.879034][ T5705] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 243.891288][ T5705] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 243.891308][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 243.917611][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.917627][ T5705] usb 3-1: Product: syz [ 243.917636][ T5705] usb 3-1: Manufacturer: syz [ 243.917645][ T5705] usb 3-1: SerialNumber: syz [ 243.972479][ T5705] usb 3-1: config 0 descriptor?? [ 243.981335][ T7037] udevd[7037]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.982704][ T5705] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 244.512161][ T5718] usb 3-1: USB disconnect, device number 15 [ 244.690395][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 244.690409][ T31] audit: type=1400 audit(1789944330.156:492): avc: denied { mounton } for pid=7191 comm="syz.0.342" path="/68/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 245.775388][ T31] audit: type=1400 audit(1789944331.246:493): avc: denied { map } for pid=7194 comm="syz.1.343" path="/proc/248/net" dev="proc" ino=15836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 245.775422][ T31] audit: type=1400 audit(1789944331.246:494): avc: denied { execute } for pid=7194 comm="syz.1.343" path="/proc/248/net" dev="proc" ino=15836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 246.084452][ T31] audit: type=1400 audit(1789944331.556:495): avc: denied { append } for pid=7208 comm="syz.1.348" name="comedi0" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 246.165986][ T7210] fuse: Bad value for 'fd' [ 246.525057][ T7218] ip6t_srh: unknown srh invflags 7863 [ 246.583133][ T5718] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 246.583222][ T5719] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 246.635355][ T7221] netlink: 2160 bytes leftover after parsing attributes in process `syz.1.352'. [ 246.635373][ T7221] netlink: 2160 bytes leftover after parsing attributes in process `syz.1.352'. [ 246.731951][ T5719] usb 1-1: Using ep0 maxpacket: 8 [ 246.732383][ T5718] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 246.732561][ T5719] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 246.734607][ T5719] usb 1-1: config index 0 descriptor too short (expected 41, got 27) [ 246.734623][ T5719] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.734634][ T5719] usb 1-1: config 0 has no interfaces? [ 246.734651][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.738023][ T5718] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 246.738856][ T5718] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 246.748132][ T5719] usb 1-1: config 0 descriptor?? [ 246.838583][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.838613][ T5718] usb 3-1: Product: syz [ 246.838622][ T5718] usb 3-1: Manufacturer: syz [ 246.838631][ T5718] usb 3-1: SerialNumber: syz [ 246.877680][ T5718] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 246.905194][ T5718] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 246.924107][ T5718] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 247.115572][ T31] audit: type=1400 audit(1789944332.576:496): avc: denied { read } for pid=7224 comm="syz.3.354" name="usbmon2" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 247.115608][ T31] audit: type=1400 audit(1789944332.576:497): avc: denied { open } for pid=7224 comm="syz.3.354" path="/dev/usbmon2" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 247.245638][ T7231] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 247.264319][ T5719] usb 1-1: string descriptor 0 read error: -71 [ 247.280688][ T5719] usb 1-1: USB disconnect, device number 15 [ 247.295155][ T31] audit: type=1400 audit(1789944332.766:498): avc: denied { write } for pid=7230 comm="syz.1.355" name="sg0" dev="devtmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 247.392844][ T7240] FAULT_INJECTION: forcing a failure. [ 247.392844][ T7240] name failslab, interval 1, probability 0, space 0, times 0 [ 247.392880][ T7240] CPU: 0 UID: 0 PID: 7240 Comm: syz.4.357 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.392897][ T7240] Tainted: [L]=SOFTLOCKUP [ 247.392901][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 247.392917][ T7240] Call Trace: [ 247.392922][ T7240] [ 247.392927][ T7240] dump_stack_lvl+0x100/0x190 [ 247.392948][ T7240] should_fail_ex.cold+0x5/0xa [ 247.392965][ T7240] should_failslab+0xc2/0x120 [ 247.392981][ T7240] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 247.392997][ T7240] ? lock_acquire+0x1d1/0x380 [ 247.393010][ T7240] ? security_netlbl_sid_to_secattr+0x94/0x4d0 [ 247.393027][ T7240] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 247.393047][ T7240] kstrdup+0x51/0xe0 [ 247.393066][ T7240] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 247.393085][ T7240] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 247.393099][ T7240] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 247.393115][ T7240] selinux_socket_post_create+0x368/0x7e0 [ 247.393135][ T7240] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 247.393155][ T7240] ? tcp_v4_init_sock+0x15/0xb0 [ 247.393170][ T7240] ? __pfx_tcp_v4_init_sock+0x10/0x10 [ 247.393185][ T7240] ? inet_create+0x962/0x1060 [ 247.393204][ T7240] security_socket_post_create+0xaf/0x270 [ 247.393224][ T7240] __sock_create+0x70b/0x860 [ 247.393245][ T7240] mptcp_subflow_create_socket+0xec/0xa30 [ 247.393262][ T7240] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 247.393275][ T7240] ? avc_has_perm_noaudit+0x145/0x3b0 [ 247.393291][ T7240] ? look_up_lock_class+0x55/0x120 [ 247.393311][ T7240] __mptcp_nmpc_sk+0x17f/0x880 [ 247.393326][ T7240] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 247.393338][ T7240] ? __lock_acquire+0x5c0/0x1f40 [ 247.393355][ T7240] mptcp_connect+0x7e/0xa20 [ 247.393373][ T7240] __inet_stream_connect+0x208/0xf90 [ 247.393392][ T7240] ? lock_acquire+0x1d1/0x380 [ 247.393404][ T7240] ? __pfx___inet_stream_connect+0x10/0x10 [ 247.393422][ T7240] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 247.393440][ T7240] ? __local_bh_enable_ip+0xa5/0x120 [ 247.393455][ T7240] inet_stream_connect+0x57/0xa0 [ 247.393473][ T7240] __sys_connect_file+0x146/0x1a0 [ 247.393488][ T7240] __sys_connect+0x141/0x170 [ 247.393500][ T7240] ? __pfx___sys_connect+0x10/0x10 [ 247.393511][ T7240] ? __fget_files+0x21f/0x3d0 [ 247.393532][ T7240] ? __pfx_ksys_write+0x10/0x10 [ 247.393547][ T7240] __x64_sys_connect+0x72/0xb0 [ 247.393559][ T7240] ? lockdep_hardirqs_on+0x7d/0x110 [ 247.393575][ T7240] do_syscall_64+0x123/0x790 [ 247.393593][ T7240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.393605][ T7240] RIP: 0033:0x7f17f379e159 [ 247.393615][ T7240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.393626][ T7240] RSP: 002b:00007f17f46aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 247.393638][ T7240] RAX: ffffffffffffffda RBX: 00007f17f3a25fa0 RCX: 00007f17f379e159 [ 247.393646][ T7240] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 247.393653][ T7240] RBP: 00007f17f46aa090 R08: 0000000000000000 R09: 0000000000000000 [ 247.393661][ T7240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.393668][ T7240] R13: 00007f17f3a26038 R14: 00007f17f3a25fa0 R15: 00007ffd106051c8 [ 247.393684][ T7240] [ 247.514927][ T5718] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 247.691358][ T5718] usb 4-1: Using ep0 maxpacket: 32 [ 247.742195][ T5718] usb 4-1: unable to get BOS descriptor or descriptor too short [ 247.742223][ T5718] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 247.806098][ T5718] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 247.806115][ T5718] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 247.806128][ T5718] usb 4-1: config 14 has no interface number 0 [ 247.806137][ T5718] usb 4-1: config 14 has no interface number 1 [ 247.806186][ T5718] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 247.806201][ T5718] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 247.806215][ T5718] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 247.806231][ T5718] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 247.806246][ T5718] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 247.806262][ T5718] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.806277][ T5718] usb 4-1: config 14 interface 57 has no altsetting 0 [ 247.806287][ T5718] usb 4-1: config 14 interface 228 has no altsetting 0 [ 247.878604][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.878621][ T5718] usb 4-1: Product: syz [ 247.878630][ T5718] usb 4-1: Manufacturer: syz [ 247.878639][ T5718] usb 4-1: SerialNumber: syz [ 248.006445][ T7214] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 249.152582][ T5619] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 249.174349][ T7248] netlink: 'syz.0.359': attribute type 49 has an invalid length. [ 249.226774][ T7253] netlink: 14 bytes leftover after parsing attributes in process `syz.1.360'. [ 249.440424][ T5718] legousbtower 4-1:14.57: interrupt endpoints not found [ 249.674096][ T31] audit: type=1400 audit(1789944335.146:499): avc: denied { setopt } for pid=7263 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 249.676664][ T5718] legousbtower 4-1:14.228: get version request failed: -71 [ 249.676750][ T5718] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 249.728993][ T5718] usb 4-1: USB disconnect, device number 15 [ 249.777541][ T986] logitech-hidpp-device 0005:046D:B012.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 249.819589][ T7264] TC_ACT_REPEAT abuse ? [ 249.907592][ T7267] fido_id[7267]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 250.033997][ T31] audit: type=1400 audit(1789944335.506:500): avc: denied { bind } for pid=7268 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 250.064325][ T7269] 9p: Bad value for 'rfdno' [ 250.093066][ T31] audit: type=1400 audit(1789944335.556:501): avc: denied { setopt } for pid=7271 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 250.134160][ T31] audit: type=1400 audit(1789944335.606:502): avc: denied { bind } for pid=7271 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 250.138001][ T31] audit: type=1400 audit(1789944335.606:503): avc: denied { map } for pid=7271 comm="syz.0.366" path="socket:[16108]" dev="sockfs" ino=16108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 250.138185][ T31] audit: type=1400 audit(1789944335.606:504): avc: denied { read write } for pid=7271 comm="syz.0.366" path="socket:[16108]" dev="sockfs" ino=16108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 250.273209][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.273243][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.614893][ T7278] ip6t_srh: unknown srh invflags 7863 [ 250.663147][ T31] audit: type=1400 audit(1789944336.136:505): avc: denied { setopt } for pid=7279 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 250.694691][ T5705] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 250.797704][ T31] audit: type=1400 audit(1789944336.266:506): avc: denied { mount } for pid=7281 comm="syz.3.369" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 250.852496][ T5705] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 250.854358][ T5705] usb 1-1: config index 0 descriptor too short (expected 69, got 51) [ 250.859254][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.859269][ T5705] usb 1-1: Product: syz [ 250.859278][ T5705] usb 1-1: Manufacturer: syz [ 250.859287][ T5705] usb 1-1: SerialNumber: syz [ 250.931301][ T5705] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 250.987375][ T31] audit: type=1400 audit(1789944336.456:507): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 251.035074][ T5719] usb 3-1: USB disconnect, device number 16 [ 251.069809][ T5719] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 251.102703][ T5719] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 251.103480][ T5705] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 251.107034][ T5719] ti_usb_3410_5052 3-1:2.0: device disconnected [ 251.354356][ T31] audit: type=1400 audit(1789944336.816:508): avc: denied { create } for pid=7289 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 251.415939][ T5705] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 251.698733][ T5705] usb 1-1: USB disconnect, device number 16 [ 252.043955][ T31] audit: type=1400 audit(1789944337.516:509): avc: denied { setopt } for pid=7293 comm="syz.3.373" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 252.139042][ T6609] udevd[6609]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.359494][ T7296] fuse: Bad value for 'fd' [ 252.621578][ T5705] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 252.721213][ T7307] 9p: Could not find request transport: virt [ 252.841604][ T5705] usb 4-1: Using ep0 maxpacket: 8 [ 252.843871][ T5705] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 252.845515][ T7312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.845656][ T5705] usb 4-1: config index 0 descriptor too short (expected 41, got 27) [ 252.845671][ T5705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.845682][ T5705] usb 4-1: config 0 has no interfaces? [ 252.845698][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.898500][ T5705] usb 4-1: config 0 descriptor?? [ 253.032681][ T7312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.111435][ T7314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.378'. [ 253.157663][ T5705] usb 4-1: string descriptor 0 read error: -71 [ 253.160395][ T5705] usb 4-1: USB disconnect, device number 16 [ 253.315113][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'. [ 253.456861][ T7324] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 254.283014][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 254.283031][ T7327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.381'. [ 254.647038][ T5719] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 254.714368][ T7336] FAULT_INJECTION: forcing a failure. [ 254.714368][ T7336] name failslab, interval 1, probability 0, space 0, times 0 [ 254.714391][ T7336] CPU: 0 UID: 0 PID: 7336 Comm: syz.1.383 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.714408][ T7336] Tainted: [L]=SOFTLOCKUP [ 254.714412][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 254.714420][ T7336] Call Trace: [ 254.714424][ T7336] [ 254.714429][ T7336] dump_stack_lvl+0x100/0x190 [ 254.714451][ T7336] should_fail_ex.cold+0x5/0xa [ 254.714468][ T7336] should_failslab+0xc2/0x120 [ 254.714483][ T7336] __kmalloc_cache_node_noprof+0x94/0x720 [ 254.714499][ T7336] ? sbitmap_queue_init_node+0x291/0x4a0 [ 254.714515][ T7336] sbitmap_queue_init_node+0x291/0x4a0 [ 254.714528][ T7336] blk_mq_init_tags+0x1ba/0x300 [ 254.714547][ T7336] blk_mq_alloc_map_and_rqs+0x244/0xe30 [ 254.714569][ T7336] blk_mq_alloc_sched_tags+0x1de/0x350 [ 254.714585][ T7336] blk_mq_alloc_sched_res+0x8e/0x250 [ 254.714600][ T7336] elevator_change+0x136/0x530 [ 254.714615][ T7336] elv_iosched_store+0x3be/0x460 [ 254.714627][ T7336] ? __pfx_elv_iosched_store+0x10/0x10 [ 254.714645][ T7336] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 254.714659][ T7336] ? __pfx_elv_iosched_store+0x10/0x10 [ 254.714672][ T7336] queue_attr_store+0x25f/0x2f0 [ 254.714689][ T7336] ? __pfx_queue_attr_store+0x10/0x10 [ 254.714706][ T7336] ? __lock_acquire+0x5c0/0x1f40 [ 254.714724][ T7336] ? lock_acquire+0x1d1/0x380 [ 254.714736][ T7336] ? sysfs_file_kobj+0x21/0x290 [ 254.714750][ T7336] ? find_held_lock+0x2b/0x80 [ 254.714765][ T7336] ? sysfs_file_kobj+0xe4/0x290 [ 254.714780][ T7336] ? sysfs_file_kobj+0xe4/0x290 [ 254.714796][ T7336] ? __pfx_queue_attr_store+0x10/0x10 [ 254.714812][ T7336] sysfs_kf_write+0xf2/0x150 [ 254.714827][ T7336] kernfs_fop_write_iter+0x3e0/0x5f0 [ 254.714839][ T7336] ? __pfx_sysfs_kf_write+0x10/0x10 [ 254.714854][ T7336] vfs_write+0x6af/0x1050 [ 254.714867][ T7336] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 254.714881][ T7336] ? __pfx_vfs_write+0x10/0x10 [ 254.714892][ T7336] ? find_held_lock+0x2b/0x80 [ 254.714918][ T7336] ksys_write+0x12a/0x250 [ 254.714930][ T7336] ? __pfx_ksys_write+0x10/0x10 [ 254.714947][ T7336] do_syscall_64+0x123/0x790 [ 254.714966][ T7336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.714978][ T7336] RIP: 0033:0x7fe981d9e159 [ 254.714989][ T7336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.715000][ T7336] RSP: 002b:00007fe982baa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.715012][ T7336] RAX: ffffffffffffffda RBX: 00007fe982025fa0 RCX: 00007fe981d9e159 [ 254.715019][ T7336] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000004 [ 254.715027][ T7336] RBP: 00007fe982baa090 R08: 0000000000000000 R09: 0000000000000000 [ 254.715034][ T7336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.715041][ T7336] R13: 00007fe982026038 R14: 00007fe982025fa0 R15: 00007ffe31415dc8 [ 254.715057][ T7336] [ 255.091099][ T5718] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 255.410281][ T7347] ip6t_srh: unknown srh invflags 7863 [ 255.411470][ T5718] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 256.475387][ T7323] ceph: No mds server is up or the cluster is laggy [ 256.481448][ T5705] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 256.924190][ T5619] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 256.945419][ T7369] netlink: 'syz.3.390': attribute type 49 has an invalid length. [ 257.061533][ T5718] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 257.500239][ T5718] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 257.527779][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 257.527800][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 257.527824][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.855854][ T5718] usb 5-1: config 0 descriptor?? [ 258.136968][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 258.136984][ T31] audit: type=1400 audit(1789944343.596:512): avc: denied { write } for pid=7332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.228824][ T7365] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 259.476314][ T5718] ath6kl: Failed to submit usb control message: -110 [ 259.476356][ T5718] ath6kl: unable to send the bmi data to the device: -110 [ 259.476365][ T5718] ath6kl: Unable to send get target info: -110 [ 259.493896][ T5718] ath6kl: Failed to init ath6kl core: -110 [ 259.494549][ T5718] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 259.674866][ T9] usb 5-1: USB disconnect, device number 22 [ 259.708637][ T31] audit: type=1400 audit(1789944345.176:513): avc: denied { checkpoint_restore } for pid=7385 comm="syz.0.392" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 260.635973][ T31] audit: type=1400 audit(1789944346.106:514): avc: denied { write } for pid=7387 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.735930][ T7391] binder: BINDER_SET_CONTEXT_MGR already set [ 260.735940][ T7391] binder: 7390:7391 ioctl 4018620d 2000000001c0 returned -16 [ 261.005993][ T7409] fuse: Bad value for 'fd' [ 261.204028][ T7412] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 261.238610][ T31] audit: type=1400 audit(1789944346.706:515): avc: denied { write } for pid=7413 comm="syz.1.397" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 261.322226][ T5719] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 261.380647][ T7418] netlink: 'syz.2.398': attribute type 49 has an invalid length. [ 261.471778][ T5719] usb 5-1: Using ep0 maxpacket: 8 [ 261.472203][ T5719] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 261.660086][ T5719] usb 5-1: config index 0 descriptor too short (expected 41, got 27) [ 261.660106][ T5719] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.660117][ T5719] usb 5-1: config 0 has no interfaces? [ 261.660134][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.906732][ T5719] usb 5-1: config 0 descriptor?? [ 262.082136][ T5718] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 262.293110][ T5718] usb 1-1: Using ep0 maxpacket: 8 [ 262.333646][ T5718] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 262.403612][ T5718] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 262.403632][ T5718] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 262.403644][ T5718] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 262.403656][ T5718] usb 1-1: config 250 has no interface number 0 [ 262.403685][ T5718] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 262.403702][ T5718] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 262.403731][ T5718] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 28261, setting to 1024 [ 262.403746][ T5718] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 262.403761][ T5718] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 262.403776][ T5718] usb 1-1: config 250 interface 228 has no altsetting 0 [ 262.594221][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 262.594239][ T5718] usb 1-1: Product: syz [ 262.594248][ T5718] usb 1-1: SerialNumber: syz [ 262.625543][ T5719] usb 5-1: string descriptor 0 read error: -71 [ 262.641614][ T5719] usb 5-1: USB disconnect, device number 23 [ 262.649725][ T5718] hub 1-1:250.228: bad descriptor, ignoring hub [ 262.649743][ T5718] hub 1-1:250.228: probe with driver hub failed with error -5 [ 263.748524][ T5718] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 264.983316][ T31] audit: type=1400 audit(1789944350.456:516): avc: denied { write } for pid=7406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.032656][ C0] usblp0: nonzero read bulk status received: -71 [ 265.295441][ T31] audit: type=1400 audit(1789944350.766:517): avc: denied { write } for pid=7446 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.324648][ T5718] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 265.397779][ T31] audit: type=1400 audit(1789944350.866:518): avc: denied { name_bind } for pid=7453 comm="syz.4.404" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 265.452543][ T31] audit: type=1400 audit(1789944350.916:519): avc: denied { mount } for pid=7448 comm="syz.1.403" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 265.502833][ T5718] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 265.507745][ T5718] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.507783][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.551001][ T5718] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 265.551134][ T5718] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 265.551170][ T5718] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 265.584025][ T5718] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 265.584072][ T5718] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 265.586811][ T5718] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 265.617351][ T5718] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 265.617396][ T5718] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 265.643505][ T5718] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 265.799553][ T7460] netlink: 96 bytes leftover after parsing attributes in process `syz.2.405'. [ 265.985455][ T5619] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 265.985874][ T7463] netlink: 'syz.2.407': attribute type 49 has an invalid length. [ 267.031726][ T5719] usb 1-1: USB disconnect, device number 17 [ 267.070204][ T5719] usblp0: removed [ 267.202755][ T5718] usb 4-1: USB disconnect, device number 17 [ 267.209973][ T5718] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 267.240445][ T5718] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 267.240777][ T5718] keyspan 4-1:1.0: device disconnected [ 267.300606][ T7471] fuse: Bad value for 'fd' [ 267.517513][ T5719] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 267.695664][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 268.191837][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 268.233299][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 268.365087][ T10] usb 2-1: config index 0 descriptor too short (expected 41, got 27) [ 268.365106][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.365118][ T10] usb 2-1: config 0 has no interfaces? [ 268.365141][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.409127][ T10] usb 2-1: config 0 descriptor?? [ 268.446705][ T5719] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 268.447547][ T5719] usb 1-1: config 64 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 268.447579][ T5719] usb 1-1: config 64 interface 0 has no altsetting 0 [ 268.449122][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.449136][ T5719] usb 1-1: Product: syz [ 268.449145][ T5719] usb 1-1: Manufacturer: syz [ 268.449153][ T5719] usb 1-1: SerialNumber: syz [ 268.526502][ T5719] snd_usb_toneport 1-1:64.0: Line 6 TonePort UX2 found [ 268.605697][ T7478] FAULT_INJECTION: forcing a failure. [ 268.605697][ T7478] name failslab, interval 1, probability 0, space 0, times 0 [ 268.605722][ T7478] CPU: 0 UID: 0 PID: 7478 Comm: syz.3.412 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.605739][ T7478] Tainted: [L]=SOFTLOCKUP [ 268.605749][ T7478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 268.605757][ T7478] Call Trace: [ 268.605761][ T7478] [ 268.605766][ T7478] dump_stack_lvl+0x100/0x190 [ 268.605789][ T7478] should_fail_ex.cold+0x5/0xa [ 268.605808][ T7478] should_failslab+0xc2/0x120 [ 268.605824][ T7478] __kmalloc_noprof+0xfc/0x840 [ 268.605837][ T7478] ? hash_ipmark4_add+0x1876/0x26a0 [ 268.605854][ T7478] hash_ipmark4_add+0x1876/0x26a0 [ 268.605870][ T7478] ? async_raid6_2data_recov+0x23e0/0x2d30 [ 268.605891][ T7478] ? __pfx_hash_ipmark4_add+0x10/0x10 [ 268.605904][ T7478] ? __lock_acquire+0x5c0/0x1f40 [ 268.605920][ T7478] hash_ipmark4_uadt+0x704/0x950 [ 268.605932][ T7478] ? __pfx_hash_ipmark4_add+0x10/0x10 [ 268.605947][ T7478] ? __pfx_hash_ipmark4_uadt+0x10/0x10 [ 268.605963][ T7478] ? find_held_lock+0x2b/0x80 [ 268.605978][ T7478] ? is_bpf_text_address+0x8a/0x1a0 [ 268.605993][ T7478] ? is_bpf_text_address+0x8a/0x1a0 [ 268.606010][ T7478] call_ad.isra.0+0x171/0x950 [ 268.606030][ T7478] ? __pfx_call_ad.isra.0+0x10/0x10 [ 268.606046][ T7478] ? __pfx___nla_validate_parse+0x10/0x10 [ 268.606070][ T7478] ? __nla_parse+0x40/0x60 [ 268.606088][ T7478] ip_set_ad.isra.0+0x3f1/0x8b0 [ 268.606108][ T7478] ? __pfx_ip_set_ad.isra.0+0x10/0x10 [ 268.606118][ T7478] ? trace_contention_end+0x126/0x160 [ 268.606144][ T7478] ? find_held_lock+0x2b/0x80 [ 268.606164][ T7478] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 268.606186][ T7478] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 268.606203][ T7478] ? __lock_acquire+0x5c0/0x1f40 [ 268.606234][ T7478] ? avc_has_perm_noaudit+0x145/0x3b0 [ 268.606255][ T7478] netlink_rcv_skb+0x159/0x420 [ 268.606269][ T7478] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 268.606286][ T7478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 268.606306][ T7478] ? ns_capable+0xd2/0xf0 [ 268.606320][ T7478] nfnetlink_rcv+0x1b3/0x440 [ 268.606336][ T7478] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 268.606351][ T7478] ? netlink_deliver_tap+0x1ae/0xcc0 [ 268.606366][ T7478] netlink_unicast+0x585/0x850 [ 268.606386][ T7478] ? __pfx_netlink_unicast+0x10/0x10 [ 268.606399][ T7478] ? __pfx_sock_has_perm+0x10/0x10 [ 268.606420][ T7478] netlink_sendmsg+0x8b0/0xda0 [ 268.606436][ T7478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.606450][ T7478] ? selinux_socket_sendmsg+0x198/0x2f0 [ 268.606465][ T7478] ____sys_sendmsg+0xa4d/0xbe0 [ 268.606482][ T7478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.606496][ T7478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.606516][ T7478] ? lock_acquire+0x1d1/0x380 [ 268.606532][ T7478] ? get_pid_task+0x2a/0x250 [ 268.606549][ T7478] ___sys_sendmsg+0x190/0x1e0 [ 268.606561][ T7478] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.606572][ T7478] ? get_pid_task+0x106/0x250 [ 268.606593][ T7478] ? find_held_lock+0x2b/0x80 [ 268.606618][ T7478] __sys_sendmsg+0x160/0x210 [ 268.606633][ T7478] ? __pfx___sys_sendmsg+0x10/0x10 [ 268.606656][ T7478] do_syscall_64+0x123/0x790 [ 268.606674][ T7478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.606687][ T7478] RIP: 0033:0x7f5863b9e159 [ 268.606697][ T7478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.606708][ T7478] RSP: 002b:00007f5864aac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.606720][ T7478] RAX: ffffffffffffffda RBX: 00007f5863e25fa0 RCX: 00007f5863b9e159 [ 268.606728][ T7478] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000003 [ 268.606735][ T7478] RBP: 00007f5864aac090 R08: 0000000000000000 R09: 0000000000000000 [ 268.606742][ T7478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.606749][ T7478] R13: 00007f5863e26038 R14: 00007f5863e25fa0 R15: 00007ffebdb665c8 [ 268.606765][ T7478] [ 269.074302][ T10] usb 2-1: string descriptor 0 read error: -71 [ 269.084889][ T10] usb 2-1: USB disconnect, device number 16 [ 269.180489][ T5719] snd_usb_toneport 1-1:64.0: Line 6 TonePort UX2 now disconnected [ 269.194514][ T5719] snd_usb_toneport 1-1:64.0: probe with driver snd_usb_toneport failed with error -22 [ 269.228495][ T7484] netlink: 'syz.3.415': attribute type 1 has an invalid length. [ 269.249919][ T31] audit: type=1400 audit(1789944354.716:520): avc: denied { read } for pid=7485 comm="syz.2.416" dev="sockfs" ino=16888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 269.292824][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 269.333662][ T7484] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.377127][ T10] usb 1-1: USB disconnect, device number 18 [ 269.453539][ T7484] bond3: (slave geneve2): making interface the new active one [ 269.454434][ T7484] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 269.697520][ T31] audit: type=1400 audit(1789944355.166:521): avc: denied { getopt } for pid=7500 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 269.928187][ T7501] pim6reg1: entered promiscuous mode [ 269.928203][ T7501] pim6reg1: entered allmulticast mode [ 270.607037][ T31] audit: type=1400 audit(1789944356.076:522): avc: denied { ioctl } for pid=7515 comm="syz.4.423" path="socket:[17140]" dev="sockfs" ino=17140 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 270.607227][ T7516] syzkaller1: entered promiscuous mode [ 270.607238][ T7516] syzkaller1: entered allmulticast mode [ 270.608820][ T7516] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 270.831584][ T10] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 271.223804][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 271.647389][ T10] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 271.647417][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.647429][ T10] usb 4-1: config 0 has no interface number 0 [ 271.869706][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.869725][ T10] usb 4-1: Product: syz [ 271.869734][ T10] usb 4-1: Manufacturer: syz [ 271.869743][ T10] usb 4-1: SerialNumber: syz [ 271.905177][ T10] usb 4-1: config 0 descriptor?? [ 271.907686][ T10] hub 4-1:0.31: bad descriptor, ignoring hub [ 271.907703][ T10] hub 4-1:0.31: probe with driver hub failed with error -5 [ 271.933190][ T10] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 271.933238][ T10] uvcvideo 4-1:0.31: Entity type for entity Output 32774 was not initialized! [ 271.933273][ T10] uvcvideo 4-1:0.31: Failed to create links for entity 32774 [ 271.933283][ T10] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 272.184716][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 272.223682][ T31] audit: type=1400 audit(1789944357.696:523): avc: denied { create } for pid=7528 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 272.256897][ T31] audit: type=1400 audit(1789944357.726:524): avc: denied { listen } for pid=7527 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.288494][ T5698] usb 4-1: USB disconnect, device number 18 [ 272.323122][ T7530] ip_tables: iptables: counters copy to user failed while replacing table [ 272.323555][ T31] audit: type=1400 audit(1789944357.796:525): avc: denied { write } for pid=7528 comm="syz.1.428" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 272.341536][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 272.402847][ T31] audit: type=1400 audit(1789944357.866:526): avc: denied { execute } for pid=7528 comm="syz.1.428" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 272.532636][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 272.533422][ T10] usb 3-1: config 0 has no interfaces? [ 272.533441][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.536406][ T10] usb 3-1: config 0 descriptor?? [ 272.603174][ T7536] fuse: Bad value for 'fd' [ 272.984372][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 273.473922][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 273.498781][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 273.650759][ T10] usb 5-1: config index 0 descriptor too short (expected 41, got 27) [ 273.650778][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.650790][ T10] usb 5-1: config 0 has no interfaces? [ 273.650807][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.688643][ T10] usb 5-1: config 0 descriptor?? [ 273.790929][ T5698] usb 3-1: USB disconnect, device number 17 [ 273.911623][ T10] usb 5-1: string descriptor 0 read error: -71 [ 273.913933][ T10] usb 5-1: USB disconnect, device number 24 [ 273.945624][ T31] audit: type=1400 audit(1789944359.416:527): avc: denied { read } for pid=7545 comm="syz.1.434" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 273.945837][ T31] audit: type=1400 audit(1789944359.416:528): avc: denied { open } for pid=7545 comm="syz.1.434" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 273.946320][ T7549] binder: 7541:7549 ioctl 400c620e 200000000080 returned -22 [ 273.948244][ T31] audit: type=1400 audit(1789944359.416:529): avc: denied { ioctl } for pid=7545 comm="syz.1.434" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 274.091831][ T31] audit: type=1400 audit(1789944359.566:530): avc: denied { ioctl } for pid=7545 comm="syz.1.434" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 274.627698][ T7556] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 274.685631][ T31] audit: type=1400 audit(1789944360.156:531): avc: denied { write } for pid=7557 comm="syz.4.437" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 275.951348][ T7566] TC_ACT_REPEAT abuse ? [ 277.561630][ T5698] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 277.711711][ T5698] usb 1-1: Using ep0 maxpacket: 16 [ 277.712196][ T5698] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 277.714724][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.714738][ T5698] usb 1-1: Product: syz [ 277.714747][ T5698] usb 1-1: Manufacturer: syz [ 277.714756][ T5698] usb 1-1: SerialNumber: syz [ 277.718966][ T5698] usb 1-1: config 0 descriptor?? [ 277.753478][ T5718] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 277.776197][ T5698] usb-storage 1-1:0.0: USB Mass Storage device detected [ 277.792979][ T5698] usb-storage 1-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 277.901623][ T5718] usb 3-1: device descriptor read/64, error -71 [ 278.141560][ T5718] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 278.141663][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 278.145849][ T7593] fuse: Bad value for 'fd' [ 278.243679][ T31] audit: type=1400 audit(1789944363.716:532): avc: denied { write } for pid=7595 comm="syz.4.448" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 278.244656][ T31] audit: type=1400 audit(1789944363.716:533): avc: denied { ioctl } for pid=7595 comm="syz.4.448" path="/97/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 278.276436][ T5718] usb 3-1: device descriptor read/64, error -71 [ 278.322990][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 278.324574][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 278.324590][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 278.324604][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.328943][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.328958][ T9] usb 4-1: Product: syz [ 278.328967][ T9] usb 4-1: Manufacturer: syz [ 278.328976][ T9] usb 4-1: SerialNumber: syz [ 278.385474][ T5718] usb usb3-port1: attempt power cycle [ 278.416102][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 278.416117][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 278.436778][ T5719] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 278.492605][ T7597] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 278.492639][ T7597] device-mapper: ioctl: error adding target to table [ 278.592647][ T5719] usb 2-1: Using ep0 maxpacket: 8 [ 278.593079][ T5719] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 278.593840][ T5719] usb 2-1: config index 0 descriptor too short (expected 41, got 27) [ 278.593855][ T5719] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.593880][ T5719] usb 2-1: config 0 has no interfaces? [ 278.593896][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.597460][ T5719] usb 2-1: config 0 descriptor?? [ 278.666096][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 278.742033][ T5718] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 278.763893][ T5718] usb 3-1: device descriptor read/8, error -71 [ 278.802257][ T5719] usb 2-1: string descriptor 0 read error: -71 [ 278.808624][ T5719] usb 2-1: USB disconnect, device number 17 [ 278.964534][ T9] usb 1-1: USB disconnect, device number 19 [ 279.021665][ T5718] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 279.041917][ T5718] usb 3-1: device descriptor read/8, error -71 [ 279.063110][ T5719] usb 4-1: USB disconnect, device number 19 [ 279.067731][ T5719] usblp0: removed [ 279.152654][ T5718] usb usb3-port1: unable to enumerate USB device [ 279.468722][ T7614] logitech-hidpp-device 0003:046D:C082.0006: received hid++ report of bad size (3) [ 279.491315][ T5719] logitech-hidpp-device 0003:046D:C082.0006: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 279.865475][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 279.918415][ T7616] fido_id[7616]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 281.541867][ T7643] FAULT_INJECTION: forcing a failure. [ 281.541867][ T7643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.541891][ T7643] CPU: 0 UID: 0 PID: 7643 Comm: syz.2.460 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.541907][ T7643] Tainted: [L]=SOFTLOCKUP [ 281.541912][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 281.541919][ T7643] Call Trace: [ 281.541924][ T7643] [ 281.541928][ T7643] dump_stack_lvl+0x100/0x190 [ 281.541950][ T7643] should_fail_ex.cold+0x5/0xa [ 281.541967][ T7643] _copy_from_user+0x2e/0xd0 [ 281.541981][ T7643] kstrtouint_from_user+0xd6/0x1d0 [ 281.541997][ T7643] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 281.542017][ T7643] ? lock_acquire+0x1d1/0x380 [ 281.542035][ T7643] proc_fail_nth_write+0x83/0x220 [ 281.542051][ T7643] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 281.542070][ T7643] vfs_write+0x2aa/0x1050 [ 281.542084][ T7643] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 281.542098][ T7643] ? lock_acquire+0x1d1/0x380 [ 281.542109][ T7643] ? __fget_files+0x34/0x3d0 [ 281.542123][ T7643] ? __pfx_vfs_write+0x10/0x10 [ 281.542141][ T7643] ? find_held_lock+0x2b/0x80 [ 281.542158][ T7643] ? __fget_files+0x215/0x3d0 [ 281.542174][ T7643] ? __fget_files+0x21f/0x3d0 [ 281.542193][ T7643] ksys_write+0x12a/0x250 [ 281.542205][ T7643] ? __pfx_ksys_write+0x10/0x10 [ 281.542221][ T7643] do_syscall_64+0x123/0x790 [ 281.542240][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.542253][ T7643] RIP: 0033:0x7feb0b55e98e [ 281.542263][ T7643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 281.542274][ T7643] RSP: 002b:00007feb0c449fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.542286][ T7643] RAX: ffffffffffffffda RBX: 00007feb0c44a6c0 RCX: 00007feb0b55e98e [ 281.542294][ T7643] RDX: 0000000000000001 RSI: 00007feb0c44a0a0 RDI: 0000000000000005 [ 281.542301][ T7643] RBP: 00007feb0c44a090 R08: 0000000000000000 R09: 0000000000000000 [ 281.542308][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.542315][ T7643] R13: 00007feb0b826038 R14: 00007feb0b825fa0 R15: 00007ffd85433598 [ 281.542331][ T7643] [ 281.634782][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 281.821552][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 281.822078][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 281.823308][ T9] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 281.823323][ T9] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 281.823336][ T9] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 281.823348][ T9] usb 2-1: config 250 has no interface number 0 [ 281.823370][ T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 281.823384][ T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 281.823399][ T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 28261, setting to 1024 [ 281.823414][ T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 281.823428][ T9] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 281.823444][ T9] usb 2-1: config 250 interface 228 has no altsetting 0 [ 281.828225][ T9] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 281.828240][ T9] usb 2-1: Product: syz [ 281.828249][ T9] usb 2-1: SerialNumber: syz [ 281.983457][ T9] hub 2-1:250.228: bad descriptor, ignoring hub [ 281.983475][ T9] hub 2-1:250.228: probe with driver hub failed with error -5 [ 282.232585][ T9] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 282.369832][ T7652] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 282.369947][ T7652] FAULT_INJECTION: forcing a failure. [ 282.369947][ T7652] name failslab, interval 1, probability 0, space 0, times 0 [ 282.369966][ T7652] CPU: 0 UID: 0 PID: 7652 Comm: syz.3.463 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.369983][ T7652] Tainted: [L]=SOFTLOCKUP [ 282.369988][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 282.369996][ T7652] Call Trace: [ 282.370001][ T7652] [ 282.370006][ T7652] dump_stack_lvl+0x100/0x190 [ 282.370028][ T7652] should_fail_ex.cold+0x5/0xa [ 282.370048][ T7652] should_failslab+0xc2/0x120 [ 282.370064][ T7652] __kvmalloc_node_noprof+0x113/0x9b0 [ 282.370088][ T7652] ? lock_acquire+0x1d1/0x380 [ 282.370102][ T7652] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 282.370120][ T7652] __nf_hook_entries_try_shrink+0x164/0x400 [ 282.370138][ T7652] __nf_unregister_net_hook+0x1d2/0x6a0 [ 282.370155][ T7652] nf_unregister_net_hooks+0x11b/0x170 [ 282.370169][ T7652] ? __pfx_socket_mt_destroy+0x10/0x10 [ 282.370186][ T7652] nf_defrag_ipv6_disable+0xa3/0xb0 [ 282.370202][ T7652] socket_mt_destroy+0xbe/0xf0 [ 282.370217][ T7652] cleanup_entry+0x1a2/0x3b0 [ 282.370232][ T7652] ? __pfx_cleanup_entry+0x10/0x10 [ 282.370247][ T7652] ? kasan_quarantine_put+0x104/0x240 [ 282.370263][ T7652] ? translate_table+0xbd8/0x1770 [ 282.370276][ T7652] ? kfree+0x22b/0x6d0 [ 282.370292][ T7652] ? xt_check_table_hooks+0x206/0x330 [ 282.370309][ T7652] translate_table+0xd53/0x1770 [ 282.370331][ T7652] ? __pfx_translate_table+0x10/0x10 [ 282.370350][ T7652] do_ip6t_set_ctl+0x689/0xd00 [ 282.370364][ T7652] ? nf_sockopt_find.isra.0+0x222/0x290 [ 282.370379][ T7652] ? nf_sockopt_find.isra.0+0x222/0x290 [ 282.370396][ T7652] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 282.370411][ T7652] ? __mutex_unlock_slowpath+0x35d/0x930 [ 282.370432][ T7652] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 282.370456][ T7652] ? nf_sockopt_find.isra.0+0x222/0x290 [ 282.370474][ T7652] nf_setsockopt+0x8d/0xf0 [ 282.370491][ T7652] ipv6_setsockopt+0x135/0x170 [ 282.370508][ T7652] rawv6_setsockopt+0xee/0x5a0 [ 282.370521][ T7652] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 282.370535][ T7652] ? selinux_socket_setsockopt+0x6a/0x80 [ 282.370547][ T7652] ? sock_common_setsockopt+0x2e/0xf0 [ 282.370565][ T7652] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 282.370583][ T7652] do_sock_setsockopt+0xf3/0x1d0 [ 282.370602][ T7652] __sys_setsockopt+0x195/0x220 [ 282.370620][ T7652] __x64_sys_setsockopt+0xbd/0x160 [ 282.370633][ T7652] ? do_syscall_64+0xae/0x790 [ 282.370650][ T7652] ? lockdep_hardirqs_on+0x7d/0x110 [ 282.370667][ T7652] do_syscall_64+0x123/0x790 [ 282.370685][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.370698][ T7652] RIP: 0033:0x7f5863b9e159 [ 282.370709][ T7652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.370720][ T7652] RSP: 002b:00007f5864aac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 282.370733][ T7652] RAX: ffffffffffffffda RBX: 00007f5863e25fa0 RCX: 00007f5863b9e159 [ 282.370741][ T7652] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000b [ 282.370748][ T7652] RBP: 00007f5863c3506b R08: 00000000000006d0 R09: 0000000000000000 [ 282.370755][ T7652] R10: 0000200000001480 R11: 0000000000000246 R12: 0000000000000000 [ 282.370763][ T7652] R13: 00007f5863e26038 R14: 00007f5863e25fa0 R15: 00007ffebdb665c8 [ 282.370780][ T7652] [ 283.061985][ C0] usblp0: nonzero read bulk status received: -71 [ 283.206330][ T9] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 283.331757][ T9] usb 4-1: device descriptor read/64, error -71 [ 283.591719][ T9] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 283.927722][ T7671] TC_ACT_REPEAT abuse ? [ 284.078744][ T9] usb 4-1: device descriptor read/64, error -71 [ 284.215437][ T9] usb usb4-port1: attempt power cycle [ 284.695148][ T9] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 284.875466][ T9] usb 4-1: device descriptor read/8, error -71 [ 285.437767][ T9] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 285.498105][ T9] usb 4-1: device descriptor read/8, error -71 [ 285.573278][ T31] audit: type=1400 audit(1789944371.046:534): avc: denied { write } for pid=7655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.580155][ T31] audit: type=1400 audit(1789944371.046:535): avc: denied { ioctl } for pid=7670 comm="syz.0.469" path="socket:[18100]" dev="sockfs" ino=18100 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 285.580406][ T31] audit: type=1400 audit(1789944371.046:536): avc: denied { connect } for pid=7670 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 285.632479][ T9] usb usb4-port1: unable to enumerate USB device [ 285.663705][ T31] audit: type=1804 audit(1789944371.126:537): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.470" name="/newroot/103/file0" dev="tmpfs" ino=570 res=1 errno=0 [ 286.007851][ T31] audit: type=1400 audit(1789944371.476:538): avc: denied { write } for pid=7692 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.142750][ T31] audit: type=1400 audit(1789944371.606:539): avc: denied { write } for pid=7694 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 287.199741][ T31] audit: type=1400 audit(1789944372.666:540): avc: denied { mount } for pid=7698 comm="syz.3.475" name="/" dev="rpc_pipefs" ino=18153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 287.312866][ T31] audit: type=1400 audit(1789944372.776:541): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 287.394119][ T9] usb 2-1: USB disconnect, device number 18 [ 287.411007][ T9] usblp0: removed [ 287.480719][ T7705] bridge0: port 3(wlan1) entered blocking state [ 287.494627][ T7705] bridge0: port 3(wlan1) entered disabled state [ 287.494848][ T7705] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 288.293560][ T7705] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 289.181548][ T5698] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 289.480271][ T5698] usb 1-1: device descriptor read/64, error -71 [ 289.609403][ T31] audit: type=1400 audit(1789944375.076:542): avc: denied { create } for pid=7739 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 289.661460][ T31] audit: type=1400 audit(1789944375.126:543): avc: denied { setopt } for pid=7739 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 289.789885][ T5698] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 290.213524][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 290.712464][ T7740] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 290.787290][ T31] audit: type=1400 audit(1789944376.256:544): avc: denied { write } for pid=7707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.942825][ T5698] usb 1-1: device descriptor read/64, error -71 [ 290.970034][ T7747] FAULT_INJECTION: forcing a failure. [ 290.970034][ T7747] name failslab, interval 1, probability 0, space 0, times 0 [ 290.970055][ T7747] CPU: 0 UID: 0 PID: 7747 Comm: syz.1.488 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.970072][ T7747] Tainted: [L]=SOFTLOCKUP [ 290.970077][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 290.970084][ T7747] Call Trace: [ 290.970088][ T7747] [ 290.970093][ T7747] dump_stack_lvl+0x100/0x190 [ 290.970114][ T7747] should_fail_ex.cold+0x5/0xa [ 290.970131][ T7747] should_failslab+0xc2/0x120 [ 290.970147][ T7747] __kmalloc_cache_noprof+0x91/0x6d0 [ 290.970165][ T7747] ? nf_tables_newtable+0xd0a/0x1a90 [ 290.970185][ T7747] nf_tables_newtable+0xd0a/0x1a90 [ 290.970205][ T7747] ? __pfx_nf_tables_newtable+0x10/0x10 [ 290.970219][ T7747] ? net_generic+0x25/0x2a0 [ 290.970238][ T7747] ? __nla_parse+0x40/0x60 [ 290.970258][ T7747] nfnetlink_rcv_batch+0x1410/0x2880 [ 290.970283][ T7747] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 290.970302][ T7747] ? lock_acquire+0x1d1/0x380 [ 290.970314][ T7747] ? avc_has_perm_noaudit+0x56/0x3b0 [ 290.970338][ T7747] ? avc_has_perm_noaudit+0x145/0x3b0 [ 290.970376][ T7747] ? __nla_parse+0x40/0x60 [ 290.970395][ T7747] nfnetlink_rcv+0x3bd/0x440 [ 290.970411][ T7747] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 290.970431][ T7747] netlink_unicast+0x585/0x850 [ 290.970447][ T7747] ? __pfx_netlink_unicast+0x10/0x10 [ 290.970465][ T7747] netlink_sendmsg+0x8b0/0xda0 [ 290.970483][ T7747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.970498][ T7747] ? selinux_socket_sendmsg+0x198/0x2f0 [ 290.970513][ T7747] ____sys_sendmsg+0xa4d/0xbe0 [ 290.970529][ T7747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.970544][ T7747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.970565][ T7747] ? lock_acquire+0x1d1/0x380 [ 290.970576][ T7747] ? get_pid_task+0x2a/0x250 [ 290.970594][ T7747] ___sys_sendmsg+0x190/0x1e0 [ 290.970606][ T7747] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.970617][ T7747] ? get_pid_task+0x106/0x250 [ 290.970638][ T7747] ? find_held_lock+0x2b/0x80 [ 290.970664][ T7747] __sys_sendmsg+0x160/0x210 [ 290.970680][ T7747] ? __pfx___sys_sendmsg+0x10/0x10 [ 290.970703][ T7747] do_syscall_64+0x123/0x790 [ 290.970721][ T7747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.970733][ T7747] RIP: 0033:0x7fe981d9e159 [ 290.970743][ T7747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.970754][ T7747] RSP: 002b:00007fe982baa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.970766][ T7747] RAX: ffffffffffffffda RBX: 00007fe982025fa0 RCX: 00007fe981d9e159 [ 290.970774][ T7747] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 290.970781][ T7747] RBP: 00007fe982baa090 R08: 0000000000000000 R09: 0000000000000000 [ 290.970788][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.970795][ T7747] R13: 00007fe982026038 R14: 00007fe982025fa0 R15: 00007ffe31415dc8 [ 290.970811][ T7747] [ 291.012686][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 291.054647][ T5698] usb usb1-port1: attempt power cycle [ 291.175714][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 291.186020][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 291.206284][ T9] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 291.206299][ T9] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 291.206311][ T9] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 291.206342][ T9] usb 5-1: config 250 has no interface number 0 [ 291.206369][ T9] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 291.206385][ T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 291.206400][ T9] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 28261, setting to 1024 [ 291.206415][ T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 291.206430][ T9] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 291.206446][ T9] usb 5-1: config 250 interface 228 has no altsetting 0 [ 291.276190][ T9] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 291.276207][ T9] usb 5-1: Product: syz [ 291.276216][ T9] usb 5-1: SerialNumber: syz [ 291.459551][ T9] hub 5-1:250.228: bad descriptor, ignoring hub [ 291.459567][ T9] hub 5-1:250.228: probe with driver hub failed with error -5 [ 291.536066][ T5698] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 291.556801][ T5698] usb 1-1: device descriptor read/8, error -71 [ 291.616861][ T31] audit: type=1400 audit(1789944377.086:545): avc: denied { write } for pid=7751 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.739218][ T7755] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 291.739361][ T7755] FAULT_INJECTION: forcing a failure. [ 291.739361][ T7755] name failslab, interval 1, probability 0, space 0, times 0 [ 291.739380][ T7755] CPU: 0 UID: 0 PID: 7755 Comm: syz.2.491 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.739397][ T7755] Tainted: [L]=SOFTLOCKUP [ 291.739401][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 291.739409][ T7755] Call Trace: [ 291.739413][ T7755] [ 291.739419][ T7755] dump_stack_lvl+0x100/0x190 [ 291.739441][ T7755] should_fail_ex.cold+0x5/0xa [ 291.739459][ T7755] should_failslab+0xc2/0x120 [ 291.739477][ T7755] __kvmalloc_node_noprof+0x113/0x9b0 [ 291.739492][ T7755] ? lock_acquire+0x1d1/0x380 [ 291.739505][ T7755] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 291.739522][ T7755] __nf_hook_entries_try_shrink+0x164/0x400 [ 291.739540][ T7755] __nf_unregister_net_hook+0x1d2/0x6a0 [ 291.739557][ T7755] nf_unregister_net_hooks+0x11b/0x170 [ 291.739571][ T7755] ? __pfx_socket_mt_destroy+0x10/0x10 [ 291.739587][ T7755] nf_defrag_ipv6_disable+0xa3/0xb0 [ 291.739604][ T7755] socket_mt_destroy+0xbe/0xf0 [ 291.739619][ T7755] cleanup_entry+0x1a2/0x3b0 [ 291.739634][ T7755] ? __pfx_cleanup_entry+0x10/0x10 [ 291.739649][ T7755] ? kasan_quarantine_put+0x104/0x240 [ 291.739665][ T7755] ? translate_table+0xbd8/0x1770 [ 291.739678][ T7755] ? kfree+0x22b/0x6d0 [ 291.739694][ T7755] ? xt_check_table_hooks+0x206/0x330 [ 291.739711][ T7755] translate_table+0xd53/0x1770 [ 291.739733][ T7755] ? __pfx_translate_table+0x10/0x10 [ 291.739752][ T7755] do_ip6t_set_ctl+0x689/0xd00 [ 291.739765][ T7755] ? nf_sockopt_find.isra.0+0x222/0x290 [ 291.739780][ T7755] ? nf_sockopt_find.isra.0+0x222/0x290 [ 291.739798][ T7755] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 291.739812][ T7755] ? __mutex_unlock_slowpath+0x35d/0x930 [ 291.739832][ T7755] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 291.739857][ T7755] ? nf_sockopt_find.isra.0+0x222/0x290 [ 291.739874][ T7755] nf_setsockopt+0x8d/0xf0 [ 291.739891][ T7755] ipv6_setsockopt+0x135/0x170 [ 291.739908][ T7755] rawv6_setsockopt+0xee/0x5a0 [ 291.739921][ T7755] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 291.739935][ T7755] ? selinux_socket_setsockopt+0x6a/0x80 [ 291.739947][ T7755] ? sock_common_setsockopt+0x2e/0xf0 [ 291.739964][ T7755] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 291.739983][ T7755] do_sock_setsockopt+0xf3/0x1d0 [ 291.740001][ T7755] __sys_setsockopt+0x195/0x220 [ 291.740019][ T7755] __x64_sys_setsockopt+0xbd/0x160 [ 291.740032][ T7755] ? do_syscall_64+0xae/0x790 [ 291.740049][ T7755] ? lockdep_hardirqs_on+0x7d/0x110 [ 291.740065][ T7755] do_syscall_64+0x123/0x790 [ 291.740084][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.740097][ T7755] RIP: 0033:0x7feb0b59e159 [ 291.740107][ T7755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.740119][ T7755] RSP: 002b:00007feb0c44a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 291.740131][ T7755] RAX: ffffffffffffffda RBX: 00007feb0b825fa0 RCX: 00007feb0b59e159 [ 291.740139][ T7755] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009 [ 291.740147][ T7755] RBP: 00007feb0b63506b R08: 00000000000006d0 R09: 0000000000000000 [ 291.740154][ T7755] R10: 0000200000001480 R11: 0000000000000246 R12: 0000000000000000 [ 291.740161][ T7755] R13: 00007feb0b826038 R14: 00007feb0b825fa0 R15: 00007ffd85433598 [ 291.740178][ T7755] [ 291.862728][ T5698] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 291.985880][ T5698] usb 1-1: device descriptor read/8, error -71 [ 292.155312][ T5698] usb usb1-port1: unable to enumerate USB device [ 292.199702][ T9] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 25 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 292.616871][ T31] audit: type=1400 audit(1789944378.086:546): avc: denied { setopt } for pid=7757 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 292.712180][ C0] usblp0: nonzero read bulk status received: -71 [ 292.951732][ T5698] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 293.082951][ T5698] usb 1-1: device descriptor read/64, error -71 [ 293.214452][ T986] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 293.322271][ T5698] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 293.325237][ T31] audit: type=1400 audit(1789944378.796:547): avc: denied { write } for pid=7785 comm="syz.2.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 293.365672][ T31] audit: type=1400 audit(1789944378.836:548): avc: denied { write } for pid=7762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.372118][ T986] usb 4-1: Using ep0 maxpacket: 16 [ 293.405755][ T986] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 293.408898][ T986] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 293.408918][ T986] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.408933][ T986] usb 4-1: config 0 interface 0 has no altsetting 0 [ 293.408950][ T986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.464430][ T5698] usb 1-1: device descriptor read/64, error -71 [ 293.477239][ T986] usb 4-1: config 0 descriptor?? [ 293.477689][ T7781] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 293.572226][ T5698] usb usb1-port1: attempt power cycle [ 293.755907][ T31] audit: type=1400 audit(1789944379.226:549): avc: denied { write } for pid=7791 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.734336][ T986] hid_parser_main: 668 callbacks suppressed [ 294.734352][ T986] samsung 0003:0419:0001.0007: unknown main item tag 0x0 [ 294.734370][ T986] samsung 0003:0419:0001.0007: unknown main item tag 0x0 [ 294.734385][ T986] samsung 0003:0419:0001.0007: unknown main item tag 0x0 [ 294.734401][ T986] samsung 0003:0419:0001.0007: unknown main item tag 0x0 [ 294.734416][ T986] samsung 0003:0419:0001.0007: unknown main item tag 0x0 [ 294.734430][ T986] samsung 0003:0419:0001.0007: unknown main item tag 0x0 [ 294.734445][ T986] samsung 0003:0419:0001.0007: unknown main item tag 0x0 [ 294.734459][ T986] samsung 0003:0419:0001.0007: unknown main item tag 0x0 [ 294.734474][ T986] samsung 0003:0419:0001.0007: unknown main item tag 0x0 [ 294.734488][ T986] samsung 0003:0419:0001.0007: unknown main item tag 0x0 [ 294.799711][ T5698] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 294.835910][ T5698] usb 1-1: device descriptor read/8, error -71 [ 294.855830][ T986] samsung 0003:0419:0001.0007: hidraw0: USB HID v7f.fd Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 294.963515][ T5718] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 295.046959][ T31] audit: type=1400 audit(1789944380.516:550): avc: denied { load_policy } for pid=7780 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 295.072960][ T5698] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 295.093250][ T5698] usb 1-1: device descriptor read/8, error -71 [ 295.111687][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 295.112150][ T5718] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 295.114683][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.114698][ T5718] usb 2-1: Product: syz [ 295.114707][ T5718] usb 2-1: Manufacturer: syz [ 295.114715][ T5718] usb 2-1: SerialNumber: syz [ 295.119341][ T5718] usb 2-1: config 0 descriptor?? [ 295.169009][ T5718] usb-storage 2-1:0.0: USB Mass Storage device detected [ 295.180412][ T5718] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 295.194715][ T7797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.194930][ T7797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.201933][ T5698] usb usb1-port1: unable to enumerate USB device [ 295.360684][ T31] audit: type=1400 audit(1789944380.826:551): avc: denied { ioctl } for pid=7780 comm="syz.3.481" path="socket:[18414]" dev="sockfs" ino=18414 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 295.361215][ T31] audit: type=1400 audit(1789944380.826:552): avc: denied { write } for pid=7780 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 295.422984][ T31] audit: type=1400 audit(1789944380.896:553): avc: denied { read } for pid=7780 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 295.572144][ T5718] usb 5-1: USB disconnect, device number 25 [ 295.585946][ T5718] usblp0: removed [ 295.676560][ T7781] SELinux: failed to load policy [ 295.753147][ T986] usb 4-1: USB disconnect, device number 24 [ 296.098931][ T5698] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 296.221922][ T5698] usb 5-1: device descriptor read/64, error -71 [ 296.375046][ T7816] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 296.375188][ T7816] FAULT_INJECTION: forcing a failure. [ 296.375188][ T7816] name failslab, interval 1, probability 0, space 0, times 0 [ 296.375207][ T7816] CPU: 0 UID: 0 PID: 7816 Comm: syz.2.505 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.375225][ T7816] Tainted: [L]=SOFTLOCKUP [ 296.375230][ T7816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 296.375238][ T7816] Call Trace: [ 296.375242][ T7816] [ 296.375248][ T7816] dump_stack_lvl+0x100/0x190 [ 296.375271][ T7816] should_fail_ex.cold+0x5/0xa [ 296.375290][ T7816] should_failslab+0xc2/0x120 [ 296.375307][ T7816] __kvmalloc_node_noprof+0x113/0x9b0 [ 296.375323][ T7816] ? lock_acquire+0x1d1/0x380 [ 296.375335][ T7816] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 296.375353][ T7816] __nf_hook_entries_try_shrink+0x164/0x400 [ 296.375371][ T7816] __nf_unregister_net_hook+0x1d2/0x6a0 [ 296.375387][ T7816] nf_unregister_net_hooks+0x11b/0x170 [ 296.375402][ T7816] ? __pfx_socket_mt_destroy+0x10/0x10 [ 296.375418][ T7816] nf_defrag_ipv6_disable+0xa3/0xb0 [ 296.375434][ T7816] socket_mt_destroy+0xbe/0xf0 [ 296.375449][ T7816] cleanup_entry+0x1a2/0x3b0 [ 296.375464][ T7816] ? __pfx_cleanup_entry+0x10/0x10 [ 296.375479][ T7816] ? kasan_quarantine_put+0x104/0x240 [ 296.375494][ T7816] ? translate_table+0xbd8/0x1770 [ 296.375508][ T7816] ? kfree+0x22b/0x6d0 [ 296.375524][ T7816] ? xt_check_table_hooks+0x206/0x330 [ 296.375542][ T7816] translate_table+0xd53/0x1770 [ 296.375563][ T7816] ? __pfx_translate_table+0x10/0x10 [ 296.375582][ T7816] do_ip6t_set_ctl+0x689/0xd00 [ 296.375596][ T7816] ? nf_sockopt_find.isra.0+0x222/0x290 [ 296.375611][ T7816] ? nf_sockopt_find.isra.0+0x222/0x290 [ 296.375628][ T7816] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 296.375643][ T7816] ? __mutex_unlock_slowpath+0x35d/0x930 [ 296.375664][ T7816] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 296.375688][ T7816] ? nf_sockopt_find.isra.0+0x222/0x290 [ 296.375705][ T7816] nf_setsockopt+0x8d/0xf0 [ 296.375722][ T7816] ipv6_setsockopt+0x135/0x170 [ 296.375739][ T7816] rawv6_setsockopt+0xee/0x5a0 [ 296.375752][ T7816] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 296.375765][ T7816] ? selinux_socket_setsockopt+0x6a/0x80 [ 296.375778][ T7816] ? sock_common_setsockopt+0x2e/0xf0 [ 296.375796][ T7816] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 296.375814][ T7816] do_sock_setsockopt+0xf3/0x1d0 [ 296.375833][ T7816] __sys_setsockopt+0x195/0x220 [ 296.375851][ T7816] __x64_sys_setsockopt+0xbd/0x160 [ 296.375865][ T7816] ? do_syscall_64+0xae/0x790 [ 296.375881][ T7816] ? lockdep_hardirqs_on+0x7d/0x110 [ 296.375898][ T7816] do_syscall_64+0x123/0x790 [ 296.375916][ T7816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.375929][ T7816] RIP: 0033:0x7feb0b59e159 [ 296.375948][ T7816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.375961][ T7816] RSP: 002b:00007feb0c44a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 296.375974][ T7816] RAX: ffffffffffffffda RBX: 00007feb0b825fa0 RCX: 00007feb0b59e159 [ 296.375982][ T7816] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009 [ 296.375991][ T7816] RBP: 00007feb0b63506b R08: 00000000000006d0 R09: 0000000000000000 [ 296.375998][ T7816] R10: 0000200000001480 R11: 0000000000000246 R12: 0000000000000000 [ 296.376006][ T7816] R13: 00007feb0b826038 R14: 00007feb0b825fa0 R15: 00007ffd85433598 [ 296.376023][ T7816] [ 296.511576][ T5698] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 296.809280][ T5705] usb 2-1: USB disconnect, device number 19 [ 296.846805][ T5698] usb 5-1: device descriptor read/64, error -71 [ 296.953369][ T5698] usb usb5-port1: attempt power cycle [ 296.967369][ T5619] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 296.967802][ T7822] netlink: 'syz.1.507': attribute type 49 has an invalid length. [ 297.534750][ T5698] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 297.647735][ T5698] usb 5-1: device descriptor read/8, error -71 [ 298.002276][ T5698] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 298.023485][ T5698] usb 5-1: device descriptor read/8, error -71 [ 298.132094][ T5698] usb usb5-port1: unable to enumerate USB device [ 298.937139][ T7843] netlink: 36 bytes leftover after parsing attributes in process `syz.3.513'. [ 299.082875][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 299.082888][ T31] audit: type=1400 audit(1789944384.556:557): avc: denied { append } for pid=7853 comm="syz.2.517" name="sg0" dev="devtmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 300.131736][ T7856] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 300.131857][ T7856] FAULT_INJECTION: forcing a failure. [ 300.131857][ T7856] name failslab, interval 1, probability 0, space 0, times 0 [ 300.131877][ T7856] CPU: 0 UID: 0 PID: 7856 Comm: syz.4.516 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.131895][ T7856] Tainted: [L]=SOFTLOCKUP [ 300.131900][ T7856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 300.131909][ T7856] Call Trace: [ 300.131914][ T7856] [ 300.131919][ T7856] dump_stack_lvl+0x100/0x190 [ 300.131943][ T7856] should_fail_ex.cold+0x5/0xa [ 300.131962][ T7856] should_failslab+0xc2/0x120 [ 300.131979][ T7856] __kvmalloc_node_noprof+0x113/0x9b0 [ 300.131994][ T7856] ? lock_acquire+0x1d1/0x380 [ 300.132006][ T7856] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 300.132024][ T7856] __nf_hook_entries_try_shrink+0x164/0x400 [ 300.132042][ T7856] __nf_unregister_net_hook+0x1d2/0x6a0 [ 300.132059][ T7856] nf_unregister_net_hooks+0x11b/0x170 [ 300.132074][ T7856] ? __pfx_socket_mt_destroy+0x10/0x10 [ 300.132089][ T7856] nf_defrag_ipv6_disable+0xa3/0xb0 [ 300.132106][ T7856] socket_mt_destroy+0xbe/0xf0 [ 300.132121][ T7856] cleanup_entry+0x1a2/0x3b0 [ 300.132136][ T7856] ? __pfx_cleanup_entry+0x10/0x10 [ 300.132150][ T7856] ? kasan_quarantine_put+0x104/0x240 [ 300.132166][ T7856] ? translate_table+0xbd8/0x1770 [ 300.132179][ T7856] ? kfree+0x22b/0x6d0 [ 300.132195][ T7856] ? xt_check_table_hooks+0x206/0x330 [ 300.132213][ T7856] translate_table+0xd53/0x1770 [ 300.132234][ T7856] ? __pfx_translate_table+0x10/0x10 [ 300.132253][ T7856] do_ip6t_set_ctl+0x689/0xd00 [ 300.132267][ T7856] ? nf_sockopt_find.isra.0+0x222/0x290 [ 300.132283][ T7856] ? nf_sockopt_find.isra.0+0x222/0x290 [ 300.132300][ T7856] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 300.132315][ T7856] ? __mutex_unlock_slowpath+0x35d/0x930 [ 300.132335][ T7856] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 300.132360][ T7856] ? nf_sockopt_find.isra.0+0x222/0x290 [ 300.132377][ T7856] nf_setsockopt+0x8d/0xf0 [ 300.132394][ T7856] ipv6_setsockopt+0x135/0x170 [ 300.132416][ T7856] rawv6_setsockopt+0xee/0x5a0 [ 300.132430][ T7856] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 300.132445][ T7856] ? selinux_socket_setsockopt+0x6a/0x80 [ 300.132458][ T7856] ? sock_common_setsockopt+0x2e/0xf0 [ 300.132476][ T7856] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 300.132495][ T7856] do_sock_setsockopt+0xf3/0x1d0 [ 300.132515][ T7856] __sys_setsockopt+0x195/0x220 [ 300.132533][ T7856] __x64_sys_setsockopt+0xbd/0x160 [ 300.132547][ T7856] ? do_syscall_64+0xae/0x790 [ 300.132564][ T7856] ? lockdep_hardirqs_on+0x7d/0x110 [ 300.132581][ T7856] do_syscall_64+0x123/0x790 [ 300.132599][ T7856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.132613][ T7856] RIP: 0033:0x7f17f379e159 [ 300.132624][ T7856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.132635][ T7856] RSP: 002b:00007f17f4689028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 300.132648][ T7856] RAX: ffffffffffffffda RBX: 00007f17f3a26090 RCX: 00007f17f379e159 [ 300.132657][ T7856] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000b [ 300.132664][ T7856] RBP: 00007f17f383506b R08: 00000000000006d0 R09: 0000000000000000 [ 300.132677][ T7856] R10: 0000200000001480 R11: 0000000000000246 R12: 0000000000000000 [ 300.132685][ T7856] R13: 00007f17f3a26128 R14: 00007f17f3a26090 R15: 00007ffd106051c8 [ 300.132703][ T7856] [ 301.226277][ T7868] TC_ACT_REPEAT abuse ? [ 301.321409][ T5619] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 301.463893][ T5719] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 301.590063][ T5705] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 301.648710][ T5719] usb 1-1: device descriptor read/64, error -71 [ 302.106194][ T5705] usb 5-1: not running at top speed; connect to a high speed hub [ 302.106216][ T5705] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 302.173102][ T5719] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 302.429335][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.429373][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.492163][ T5719] usb 1-1: device descriptor read/64, error -71 [ 302.602532][ T5719] usb usb1-port1: attempt power cycle [ 302.635968][ T5705] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 302.942537][ T5719] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 302.984806][ T5719] usb 1-1: device descriptor read/8, error -71 [ 303.021019][ T5705] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 303.031785][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 303.080374][ T5705] videodev: could not get a free minor [ 303.080386][ T5705] uvcvideo 5-1:1.1: Failed to register meta-cap device (-23). [ 303.161912][ T9] usb 3-1: device descriptor read/64, error -71 [ 303.221846][ T5719] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 303.242106][ T5719] usb 1-1: device descriptor read/8, error -71 [ 303.281119][ T7874] netlink: 5180 bytes leftover after parsing attributes in process `syz.4.523'. [ 303.352092][ T5719] usb usb1-port1: unable to enumerate USB device [ 303.402212][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 303.477338][ T5719] usb 5-1: USB disconnect, device number 30 [ 303.532636][ T9] usb 3-1: device descriptor read/64, error -71 [ 303.642568][ T9] usb usb3-port1: attempt power cycle [ 303.822178][ T986] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 303.972096][ T986] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 303.972854][ T986] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 303.972868][ T986] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.972880][ T986] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 303.972893][ T986] usb 4-1: config 1 has no interface number 1 [ 303.972914][ T986] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 303.972934][ T986] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.974418][ T986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.974432][ T986] usb 4-1: Product: syz [ 303.974440][ T986] usb 4-1: Manufacturer: syz [ 303.974449][ T986] usb 4-1: SerialNumber: syz [ 303.990749][ T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 304.025937][ T9] usb 3-1: device descriptor read/8, error -71 [ 304.341650][ T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 304.365413][ T9] usb 3-1: device descriptor read/8, error -71 [ 304.397153][ T986] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 304.397188][ T986] usb 4-1: MIDIStreaming interface descriptor not found [ 304.477570][ T9] usb usb3-port1: unable to enumerate USB device [ 304.607194][ T986] usb 4-1: USB disconnect, device number 25 [ 304.826459][ T6601] udevd[6601]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.256922][ T7910] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 305.257023][ T7910] FAULT_INJECTION: forcing a failure. [ 305.257023][ T7910] name failslab, interval 1, probability 0, space 0, times 0 [ 305.257043][ T7910] CPU: 0 UID: 0 PID: 7910 Comm: syz.3.533 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.257060][ T7910] Tainted: [L]=SOFTLOCKUP [ 305.257065][ T7910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 305.257073][ T7910] Call Trace: [ 305.257077][ T7910] [ 305.257082][ T7910] dump_stack_lvl+0x100/0x190 [ 305.257105][ T7910] should_fail_ex.cold+0x5/0xa [ 305.257123][ T7910] should_failslab+0xc2/0x120 [ 305.257140][ T7910] __kvmalloc_node_noprof+0x113/0x9b0 [ 305.257155][ T7910] ? lock_acquire+0x1d1/0x380 [ 305.257167][ T7910] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 305.257186][ T7910] __nf_hook_entries_try_shrink+0x164/0x400 [ 305.257204][ T7910] __nf_unregister_net_hook+0x1d2/0x6a0 [ 305.257220][ T7910] nf_unregister_net_hooks+0x11b/0x170 [ 305.257234][ T7910] ? __pfx_socket_mt_destroy+0x10/0x10 [ 305.257258][ T7910] nf_defrag_ipv6_disable+0xa3/0xb0 [ 305.257276][ T7910] socket_mt_destroy+0xbe/0xf0 [ 305.257293][ T7910] cleanup_entry+0x1a2/0x3b0 [ 305.257309][ T7910] ? __pfx_cleanup_entry+0x10/0x10 [ 305.257325][ T7910] ? kasan_quarantine_put+0x104/0x240 [ 305.257341][ T7910] ? translate_table+0xbd8/0x1770 [ 305.257354][ T7910] ? kfree+0x22b/0x6d0 [ 305.257370][ T7910] ? xt_check_table_hooks+0x206/0x330 [ 305.257388][ T7910] translate_table+0xd53/0x1770 [ 305.257409][ T7910] ? __pfx_translate_table+0x10/0x10 [ 305.257428][ T7910] do_ip6t_set_ctl+0x689/0xd00 [ 305.257442][ T7910] ? nf_sockopt_find.isra.0+0x222/0x290 [ 305.257457][ T7910] ? nf_sockopt_find.isra.0+0x222/0x290 [ 305.257475][ T7910] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 305.257489][ T7910] ? __mutex_unlock_slowpath+0x35d/0x930 [ 305.257509][ T7910] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 305.257534][ T7910] ? nf_sockopt_find.isra.0+0x222/0x290 [ 305.257551][ T7910] nf_setsockopt+0x8d/0xf0 [ 305.257568][ T7910] ipv6_setsockopt+0x135/0x170 [ 305.257585][ T7910] rawv6_setsockopt+0xee/0x5a0 [ 305.257598][ T7910] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 305.257612][ T7910] ? selinux_socket_setsockopt+0x6a/0x80 [ 305.257624][ T7910] ? sock_common_setsockopt+0x2e/0xf0 [ 305.257641][ T7910] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 305.257660][ T7910] do_sock_setsockopt+0xf3/0x1d0 [ 305.257678][ T7910] __sys_setsockopt+0x195/0x220 [ 305.257696][ T7910] __x64_sys_setsockopt+0xbd/0x160 [ 305.257710][ T7910] ? do_syscall_64+0xae/0x790 [ 305.257727][ T7910] ? lockdep_hardirqs_on+0x7d/0x110 [ 305.257744][ T7910] do_syscall_64+0x123/0x790 [ 305.257762][ T7910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.257775][ T7910] RIP: 0033:0x7f5863b9e159 [ 305.257785][ T7910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.257797][ T7910] RSP: 002b:00007f5864a8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 305.257809][ T7910] RAX: ffffffffffffffda RBX: 00007f5863e26090 RCX: 00007f5863b9e159 [ 305.257817][ T7910] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000b [ 305.257824][ T7910] RBP: 00007f5863c3506b R08: 00000000000006d0 R09: 0000000000000000 [ 305.257832][ T7910] R10: 0000200000001480 R11: 0000000000000246 R12: 0000000000000000 [ 305.257840][ T7910] R13: 00007f5863e26128 R14: 00007f5863e26090 R15: 00007ffebdb665c8 [ 305.257857][ T7910] [ 306.062593][ T7919] FAULT_INJECTION: forcing a failure. [ 306.062593][ T7919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.062614][ T7919] CPU: 0 UID: 0 PID: 7919 Comm: syz.1.537 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.062631][ T7919] Tainted: [L]=SOFTLOCKUP [ 306.062635][ T7919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 306.062642][ T7919] Call Trace: [ 306.062646][ T7919] [ 306.062651][ T7919] dump_stack_lvl+0x100/0x190 [ 306.062672][ T7919] should_fail_ex.cold+0x5/0xa [ 306.062689][ T7919] _copy_to_user+0x32/0xd0 [ 306.062703][ T7919] simple_read_from_buffer+0xcb/0x170 [ 306.062719][ T7919] proc_fail_nth_read+0x1af/0x230 [ 306.062734][ T7919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.062750][ T7919] ? rw_verify_area+0xce/0x6d0 [ 306.062767][ T7919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.062781][ T7919] vfs_read+0x1e4/0xb40 [ 306.062793][ T7919] ? lock_acquire+0x1d1/0x380 [ 306.062805][ T7919] ? __fget_files+0x34/0x3d0 [ 306.062819][ T7919] ? __pfx_vfs_read+0x10/0x10 [ 306.062829][ T7919] ? find_held_lock+0x2b/0x80 [ 306.062845][ T7919] ? __fget_files+0x215/0x3d0 [ 306.062862][ T7919] ? __fget_files+0x21f/0x3d0 [ 306.062880][ T7919] ksys_read+0x12a/0x250 [ 306.062891][ T7919] ? __pfx_ksys_read+0x10/0x10 [ 306.062907][ T7919] do_syscall_64+0x123/0x790 [ 306.062926][ T7919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.062938][ T7919] RIP: 0033:0x7fe981d5e98e [ 306.062948][ T7919] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 306.062958][ T7919] RSP: 002b:00007fe982ba9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.062970][ T7919] RAX: ffffffffffffffda RBX: 00007fe982baa6c0 RCX: 00007fe981d5e98e [ 306.062978][ T7919] RDX: 000000000000000f RSI: 00007fe982baa0a0 RDI: 0000000000000004 [ 306.062988][ T7919] RBP: 00007fe982baa090 R08: 0000000000000000 R09: 0000000000000000 [ 306.062995][ T7919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.063001][ T7919] R13: 00007fe982026038 R14: 00007fe982025fa0 R15: 00007ffe31415dc8 [ 306.063018][ T7919] [ 307.192397][ T31] audit: type=1400 audit(1789944392.646:558): avc: denied { read } for pid=7921 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 307.252402][ T5619] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 307.301115][ T31] audit: type=1400 audit(1789944392.766:559): avc: denied { cmd } for pid=7926 comm="iou-wrk-7927" path="socket:[19252]" dev="sockfs" ino=19252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 308.021298][ T7943] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 308.021415][ T7943] FAULT_INJECTION: forcing a failure. [ 308.021415][ T7943] name failslab, interval 1, probability 0, space 0, times 0 [ 308.021434][ T7943] CPU: 0 UID: 0 PID: 7943 Comm: syz.2.545 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.021453][ T7943] Tainted: [L]=SOFTLOCKUP [ 308.021457][ T7943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 308.021465][ T7943] Call Trace: [ 308.021470][ T7943] [ 308.021477][ T7943] dump_stack_lvl+0x100/0x190 [ 308.021501][ T7943] should_fail_ex.cold+0x5/0xa [ 308.021519][ T7943] should_failslab+0xc2/0x120 [ 308.021535][ T7943] __kvmalloc_node_noprof+0x113/0x9b0 [ 308.021550][ T7943] ? lock_acquire+0x1d1/0x380 [ 308.021563][ T7943] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 308.021581][ T7943] __nf_hook_entries_try_shrink+0x164/0x400 [ 308.021599][ T7943] __nf_unregister_net_hook+0x1d2/0x6a0 [ 308.021616][ T7943] nf_unregister_net_hooks+0x11b/0x170 [ 308.021630][ T7943] ? __pfx_socket_mt_destroy+0x10/0x10 [ 308.021646][ T7943] nf_defrag_ipv6_disable+0xa3/0xb0 [ 308.021663][ T7943] socket_mt_destroy+0xbe/0xf0 [ 308.021678][ T7943] cleanup_entry+0x1a2/0x3b0 [ 308.021693][ T7943] ? __pfx_cleanup_entry+0x10/0x10 [ 308.021708][ T7943] ? kasan_quarantine_put+0x104/0x240 [ 308.021723][ T7943] ? translate_table+0xbd8/0x1770 [ 308.021737][ T7943] ? kfree+0x22b/0x6d0 [ 308.021752][ T7943] ? xt_check_table_hooks+0x206/0x330 [ 308.021770][ T7943] translate_table+0xd53/0x1770 [ 308.021791][ T7943] ? __pfx_translate_table+0x10/0x10 [ 308.021810][ T7943] do_ip6t_set_ctl+0x689/0xd00 [ 308.021824][ T7943] ? nf_sockopt_find.isra.0+0x222/0x290 [ 308.021840][ T7943] ? nf_sockopt_find.isra.0+0x222/0x290 [ 308.021857][ T7943] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 308.021871][ T7943] ? __mutex_unlock_slowpath+0x35d/0x930 [ 308.021892][ T7943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 308.021916][ T7943] ? nf_sockopt_find.isra.0+0x222/0x290 [ 308.021934][ T7943] nf_setsockopt+0x8d/0xf0 [ 308.021951][ T7943] ipv6_setsockopt+0x135/0x170 [ 308.021968][ T7943] rawv6_setsockopt+0xee/0x5a0 [ 308.021982][ T7943] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 308.021995][ T7943] ? selinux_socket_setsockopt+0x6a/0x80 [ 308.022008][ T7943] ? sock_common_setsockopt+0x2e/0xf0 [ 308.022025][ T7943] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 308.022051][ T7943] do_sock_setsockopt+0xf3/0x1d0 [ 308.022072][ T7943] __sys_setsockopt+0x195/0x220 [ 308.022090][ T7943] __x64_sys_setsockopt+0xbd/0x160 [ 308.022105][ T7943] ? do_syscall_64+0xae/0x790 [ 308.022123][ T7943] ? lockdep_hardirqs_on+0x7d/0x110 [ 308.022141][ T7943] do_syscall_64+0x123/0x790 [ 308.022160][ T7943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.022172][ T7943] RIP: 0033:0x7feb0b59e159 [ 308.022183][ T7943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.022194][ T7943] RSP: 002b:00007feb0c429028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 308.022207][ T7943] RAX: ffffffffffffffda RBX: 00007feb0b826090 RCX: 00007feb0b59e159 [ 308.022215][ T7943] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000b [ 308.022223][ T7943] RBP: 00007feb0b63506b R08: 00000000000006d0 R09: 0000000000000000 [ 308.022231][ T7943] R10: 0000200000001480 R11: 0000000000000246 R12: 0000000000000000 [ 308.022238][ T7943] R13: 00007feb0b826128 R14: 00007feb0b826090 R15: 00007ffd85433598 [ 308.022256][ T7943] [ 308.677941][ T31] audit: type=1400 audit(1789944394.146:560): avc: denied { create } for pid=7950 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 308.722991][ T986] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 308.723704][ T31] audit: type=1400 audit(1789944394.196:561): avc: denied { setopt } for pid=7950 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 308.761706][ T31] audit: type=1400 audit(1789944394.236:562): avc: denied { write } for pid=7950 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 308.808812][ T31] audit: type=1400 audit(1789944394.276:563): avc: denied { setopt } for pid=7951 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 308.852571][ T986] usb 5-1: device descriptor read/64, error -71 [ 309.692205][ T986] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 309.697374][ T7948] Could not find key with description: [syz] [ 309.697382][ T7948] process_request_key_err: No key [ 309.697389][ T7948] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 309.697395][ T7948] One or more global auth toks could not properly register; rc = [-2] [ 309.697422][ T7948] Error validating options; rc = [-2] [ 309.823019][ T986] usb 5-1: device descriptor read/64, error -71 [ 309.931739][ T986] usb usb5-port1: attempt power cycle [ 310.601554][ T986] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 310.624688][ T986] usb 5-1: device descriptor read/8, error -71 [ 310.624841][ T31] audit: type=1400 audit(1789944396.096:564): avc: denied { append } for pid=7973 comm="syz.0.552" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 310.691216][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'. [ 310.871549][ T986] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 310.897415][ T986] usb 5-1: device descriptor read/8, error -71 [ 311.004900][ T986] usb usb5-port1: unable to enumerate USB device [ 311.720766][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.720800][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.801568][ T5718] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 311.838679][ T7982] FAULT_INJECTION: forcing a failure. [ 311.838679][ T7982] name failslab, interval 1, probability 0, space 0, times 0 [ 311.838713][ T7982] CPU: 0 UID: 0 PID: 7982 Comm: syz.1.554 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.838737][ T7982] Tainted: [L]=SOFTLOCKUP [ 311.838741][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 311.838749][ T7982] Call Trace: [ 311.838754][ T7982] [ 311.838759][ T7982] dump_stack_lvl+0x100/0x190 [ 311.838781][ T7982] should_fail_ex.cold+0x5/0xa [ 311.838799][ T7982] should_failslab+0xc2/0x120 [ 311.838815][ T7982] __kmalloc_cache_noprof+0x91/0x6d0 [ 311.838836][ T7982] ? proc_self_get_link+0x189/0x1f0 [ 311.838856][ T7982] proc_self_get_link+0x189/0x1f0 [ 311.838873][ T7982] pick_link+0xac2/0x13c0 [ 311.838884][ T7982] ? selinux_inode_permission+0x14a/0x1130 [ 311.838901][ T7982] ? __pfx_proc_self_get_link+0x10/0x10 [ 311.838920][ T7982] step_into_slowpath+0x9ba/0xf90 [ 311.838936][ T7982] ? __pfx_step_into_slowpath+0x10/0x10 [ 311.838952][ T7982] ? lookup_fast+0x2da/0x600 [ 311.838963][ T7982] ? inode_permission+0x374/0x620 [ 311.838983][ T7982] link_path_walk+0xf28/0x1cc0 [ 311.839003][ T7982] path_openat+0x1ac/0x2440 [ 311.839021][ T7982] ? __pfx_path_openat+0x10/0x10 [ 311.839040][ T7982] do_file_open+0x20e/0x430 [ 311.839057][ T7982] ? __pfx_do_file_open+0x10/0x10 [ 311.839082][ T7982] ? _raw_spin_unlock+0x28/0x50 [ 311.839098][ T7982] ? alloc_fd+0x471/0x7a0 [ 311.839117][ T7982] do_sys_openat2+0x10f/0x1e0 [ 311.839134][ T7982] ? __pfx_do_sys_openat2+0x10/0x10 [ 311.839150][ T7982] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 311.839174][ T7982] __x64_sys_openat+0x12d/0x210 [ 311.839191][ T7982] ? __pfx___x64_sys_openat+0x10/0x10 [ 311.839213][ T7982] do_syscall_64+0x123/0x790 [ 311.839232][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.839245][ T7982] RIP: 0033:0x7fe981d5e98e [ 311.839255][ T7982] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 311.839266][ T7982] RSP: 002b:00007fe982ba9f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 311.839279][ T7982] RAX: ffffffffffffffda RBX: 00007fe982baa6c0 RCX: 00007fe981d5e98e [ 311.839287][ T7982] RDX: 0000000000000000 RSI: 00007fe981e347a6 RDI: ffffffffffffff9c [ 311.839294][ T7982] RBP: 00007fe981e3506b R08: 0000000000000000 R09: 0000000000000000 [ 311.839301][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.839309][ T7982] R13: 00007fe982026038 R14: 00007fe982025fa0 R15: 00007ffe31415dc8 [ 311.839325][ T7982] [ 311.962653][ T5718] usb 1-1: Using ep0 maxpacket: 32 [ 312.118454][ T5718] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.136651][ T5718] usb 1-1: config 5 has an invalid descriptor of length 5, skipping remainder of the config [ 312.136665][ T5718] usb 1-1: config 5 has no interfaces? [ 312.160538][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 312.160554][ T5718] usb 1-1: Product: œ⚫踇㝥粱繁쳏돘䑻滱缾툣婱≺ᥟ㰡羂⦙荅㧗簹澞䦻槝ኧ뎷ꇎ [ 312.160565][ T5718] usb 1-1: Manufacturer: Ж [ 312.160575][ T5718] usb 1-1: SerialNumber: syz [ 313.241930][ T5718] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 313.297952][ T7976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.555'. [ 313.316105][ T5719] usb 1-1: USB disconnect, device number 32 [ 313.392005][ T5718] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 313.394401][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.394416][ T5718] usb 5-1: Product: syz [ 313.394424][ T5718] usb 5-1: Manufacturer: syz [ 313.394432][ T5718] usb 5-1: SerialNumber: syz [ 313.441752][ T986] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 313.595483][ T986] usb 2-1: not running at top speed; connect to a high speed hub [ 313.595504][ T986] usb 2-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 313.596270][ T986] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 313.596325][ T986] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 313.596342][ T986] usb 2-1: config 1 interface 0 has no altsetting 0 [ 313.599996][ T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.600011][ T986] usb 2-1: Product: syz [ 313.600020][ T986] usb 2-1: Manufacturer: ｬퟴ퉬ꉓඨࠪ疘䛞ᤸ燀樃锉椎鵛觝嬧軐伱茆쒌ゎ뒶㈉龙ጠ缙痊潴零趈⎱庝船㨷퓂✨갆俖㚥䶻춽뺍唽楾ᱡ畻㾉髶딚蠛問煮삤㭠﷦ธ읃睅捳韛戨ﺝ擫곮遈旄ᬀ舑춙㶗྄︥୶냇廅ᩞ램傚萫읅ၠℾ⛆ᵩ䣜낉筅ᾍﯳ␛ኴ转㗏̼奂敮ཷ턆㪢䚨ꇷ⍰鲽 [ 313.600043][ T986] usb 2-1: SerialNumber: syz [ 313.712487][ T7994] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 313.930163][ T986] usbhid 2-1:1.0: can't add hid device: -71 [ 313.930219][ T986] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 313.954659][ T986] usb 2-1: USB disconnect, device number 20 [ 314.092677][ T5718] rtl8150 5-1:1.0: couldn't reset the device [ 314.092830][ T5718] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 314.127996][ T5718] usb 5-1: USB disconnect, device number 35 [ 315.339238][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 315.494498][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'. [ 315.534482][ T31] audit: type=1400 audit(1789944401.006:565): avc: denied { ioctl } for pid=8016 comm="syz.1.565" path="socket:[19675]" dev="sockfs" ino=19675 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 315.540345][ T8019] netlink: 24 bytes leftover after parsing attributes in process `syz.4.564'. [ 315.567822][ T31] audit: type=1400 audit(1789944401.036:566): avc: denied { bind } for pid=8016 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 315.841605][ T986] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 315.904692][ T8034] FAULT_INJECTION: forcing a failure. [ 315.904692][ T8034] name fail_futex, interval 1, probability 0, space 0, times 1 [ 315.904717][ T8034] CPU: 0 UID: 60929 PID: 8034 Comm: syz.1.571 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.904734][ T8034] Tainted: [L]=SOFTLOCKUP [ 315.904739][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 315.904747][ T8034] Call Trace: [ 315.904752][ T8034] [ 315.904757][ T8034] dump_stack_lvl+0x100/0x190 [ 315.904779][ T8034] should_fail_ex.cold+0x5/0xa [ 315.904797][ T8034] get_futex_key+0x1d0/0x14f0 [ 315.904815][ T8034] ? __pfx_get_futex_key+0x10/0x10 [ 315.904836][ T8034] futex_wait_setup+0x91/0x540 [ 315.904854][ T8034] __futex_wait+0x19f/0x300 [ 315.904867][ T8034] ? __pfx___futex_wait+0x10/0x10 [ 315.904878][ T8034] ? __pfx_try_to_wake_up+0x10/0x10 [ 315.904893][ T8034] ? futex_hash+0x311/0x400 [ 315.904909][ T8034] ? __pfx_futex_wake_mark+0x10/0x10 [ 315.904930][ T8034] ? find_held_lock+0x2b/0x80 [ 315.904947][ T8034] ? futex_wake+0x4ea/0x5e0 [ 315.904968][ T8034] futex_wait+0xe6/0x370 [ 315.904980][ T8034] ? __pfx_futex_wait+0x10/0x10 [ 315.904999][ T8034] do_futex+0x265/0x440 [ 315.905016][ T8034] ? __pfx_do_futex+0x10/0x10 [ 315.905031][ T8034] ? iput+0x3a/0x40 [ 315.905048][ T8034] ? __sock_release+0x184/0x260 [ 315.905067][ T8034] __x64_sys_futex+0x34f/0x4d0 [ 315.905084][ T8034] ? __sys_socket+0xac/0x260 [ 315.905096][ T8034] ? __pfx___x64_sys_futex+0x10/0x10 [ 315.905118][ T8034] do_syscall_64+0x123/0x790 [ 315.905138][ T8034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.905150][ T8034] RIP: 0033:0x7fe981d9e159 [ 315.905161][ T8034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.905173][ T8034] RSP: 002b:00007fe982baa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 315.905185][ T8034] RAX: ffffffffffffffda RBX: 00007fe982025fa8 RCX: 00007fe981d9e159 [ 315.905193][ T8034] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe982025fa8 [ 315.905201][ T8034] RBP: 00007fe982025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 315.905208][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.905215][ T8034] R13: 00007fe982026038 R14: 00007ffe31415ce0 R15: 00007ffe31415dc8 [ 315.905231][ T8034] [ 315.995071][ T986] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 316.011944][ T986] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.011959][ T986] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.060618][ T986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.060634][ T986] usb 4-1: Product: syz [ 316.060643][ T986] usb 4-1: Manufacturer: syz [ 316.060651][ T986] usb 4-1: SerialNumber: syz [ 316.165276][ T986] usb 4-1: config 0 descriptor?? [ 316.369816][ T31] audit: type=1400 audit(1789944657.829:567): avc: denied { write } for pid=8036 comm="syz.4.572" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 316.418852][ T986] usb 4-1: USB disconnect, device number 26 [ 316.443681][ T8037] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.572'. [ 316.443703][ T8037] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.572'. [ 317.910908][ T8049] fuse: Unknown parameter 'us00000000000000000000' [ 317.919034][ T31] audit: type=1400 audit(1789944659.379:568): avc: denied { write } for pid=8048 comm="syz.2.574" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 317.919064][ T31] audit: type=1400 audit(1789944659.379:569): avc: denied { open } for pid=8048 comm="syz.2.574" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 318.178615][ T8059] netlink: 'syz.0.577': attribute type 1 has an invalid length. [ 423.218617][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 423.225577][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8060/1:b..l [ 423.233467][ C0] rcu: (detected by 0, t=10502 jiffies, g=51257, q=292 ncpus=1) [ 423.241148][ C0] task:syz.3.575 state:R running task stack:27752 pid:8060 tgid:8060 ppid:8055 task_flags:0x40004c flags:0x00080000 [ 423.254602][ C0] Call Trace: [ 423.257854][ C0] [ 423.260762][ C0] __schedule+0x1259/0x6920 [ 423.265247][ C0] ? mark_held_locks+0x40/0x70 [ 423.269984][ C0] ? __pfx___schedule+0x10/0x10 [ 423.274807][ C0] ? find_held_lock+0x2b/0x80 [ 423.279469][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 423.284815][ C0] preempt_schedule_common+0x3c/0xb0 [ 423.290077][ C0] preempt_schedule_thunk+0x16/0x40 [ 423.295248][ C0] _raw_spin_unlock+0x3e/0x50 [ 423.299895][ C0] __zap_vma_range+0x16b0/0x48e0 [ 423.304828][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 423.310095][ C0] ? mas_next_slot+0xc05/0x13a0 [ 423.314928][ C0] unmap_vmas+0x299/0x5f0 [ 423.319229][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 423.324049][ C0] ? mas_next_slot+0xc05/0x13a0 [ 423.328881][ C0] exit_mmap+0x1ef/0xa00 [ 423.333108][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 423.337876][ C0] ? rcu_is_watching+0x13/0xc0 [ 423.342631][ C0] ? uprobe_clear_state+0x49/0x250 [ 423.347725][ C0] ? find_held_lock+0x2b/0x80 [ 423.352385][ C0] ? uprobe_clear_state+0x5f/0x250 [ 423.357491][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 423.363129][ C0] __mmput+0x12a/0x410 [ 423.367172][ C0] mmput+0x67/0x80 [ 423.370863][ C0] do_exit+0x8b1/0x2ae0 [ 423.374997][ C0] ? do_raw_spin_lock+0x128/0x260 [ 423.379998][ C0] ? __pfx_do_exit+0x10/0x10 [ 423.384559][ C0] ? do_group_exit+0x1bd/0x2a0 [ 423.389298][ C0] ? rcu_is_watching+0x13/0xc0 [ 423.394037][ C0] do_group_exit+0xd5/0x2a0 [ 423.398524][ C0] __x64_sys_exit_group+0x3e/0x50 [ 423.403535][ C0] x64_sys_call+0x1567/0x1570 [ 423.408206][ C0] do_syscall_64+0x123/0x790 [ 423.412784][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.418655][ C0] RIP: 0033:0x7f5863b9e159 [ 423.423042][ C0] RSP: 002b:00007f5864aab238 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 423.431432][ C0] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f5863b9e159 [ 423.439373][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 423.447312][ C0] RBP: 00007f5863c3506b R08: 0000000000000000 R09: 000000000000000b [ 423.455251][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.463190][ C0] R13: 00007f5863e26038 R14: 00007f5863e25fa0 R15: 00007ffebdb665c8 [ 423.471140][ C0] [ 423.474142][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g51257 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 423.485124][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 423.495056][ C0] rcu: RCU grace-period kthread stack dump: [ 423.500906][ C0] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 423.514368][ C0] Call Trace: [ 423.517627][ C0] [ 423.520545][ C0] __schedule+0x1259/0x6920 [ 423.525037][ C0] ? irqentry_exit+0x24d/0xa10 [ 423.529778][ C0] ? __pfx___schedule+0x10/0x10 [ 423.534602][ C0] ? rcu_is_watching+0x13/0xc0 [ 423.539340][ C0] preempt_schedule_irq+0x4e/0x90 [ 423.544335][ C0] irqentry_exit+0x205/0xa10 [ 423.548902][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 423.554849][ C0] RIP: 0010:preempt_count_add+0x11/0x150 [ 423.560450][ C0] Code: 47 fa 09 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 ba 00 00 00 00 00 fc ff df 48 63 c7 <55> 53 48 89 c3 65 48 01 05 da 9d b5 12 48 c7 c0 c0 15 9a 9b 48 89 [ 423.580030][ C0] RSP: 0018:ffffc90000167b88 EFLAGS: 00000202 [ 423.586072][ C0] RAX: 0000000000000001 RBX: ffff88801f2d2580 RCX: 0000000000000000 [ 423.594012][ C0] RDX: dffffc0000000000 RSI: ffffffff8c623500 RDI: 0000000000000001 [ 423.601956][ C0] RBP: ffffed1003e5a4b0 R08: 0000000000000000 R09: fffffbfff228a84b [ 423.609907][ C0] R10: ffffffff9145425f R11: 0000000000000000 R12: ffff88801f2d25ac [ 423.617854][ C0] R13: 1ffffffff1d41e50 R14: ffff88801f2d2580 R15: dffffc0000000000 [ 423.625820][ C0] schedule+0xd6/0x2c0 [ 423.629868][ C0] schedule_timeout+0x127/0x280 [ 423.634690][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 423.640040][ C0] ? __pfx_process_timeout+0x10/0x10 [ 423.645309][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 423.651096][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 423.656536][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 423.661281][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 423.666540][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 423.671450][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 423.676617][ C0] ? rcu_is_watching+0x13/0xc0 [ 423.681354][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 423.687136][ C0] rcu_gp_kthread+0x17a/0x220 [ 423.691785][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 423.696953][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 423.702743][ C0] ? __kthread_parkme+0x18f/0x230 [ 423.707742][ C0] ? kthread+0x13a/0x450 [ 423.711962][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 423.717141][ C0] kthread+0x373/0x450 [ 423.721186][ C0] ? __pfx_kthread+0x10/0x10 [ 423.725751][ C0] ret_from_fork+0x730/0xd60 [ 423.730333][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 423.735419][ C0] ? __switch_to+0x800/0x10f0 [ 423.740072][ C0] ? __pfx_kthread+0x10/0x10 [ 423.744637][ C0] ret_from_fork_asm+0x1a/0x30 [ 423.749381][ C0] [ 423.752373][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 423.758672][ C0] CPU: 0 UID: 0 PID: 8063 Comm: syz.4.576 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.769399][ C0] Tainted: [L]=SOFTLOCKUP [ 423.773701][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 423.783739][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 423.789522][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 ba 0a 13 f6 48 89 df e8 42 61 13 f6 e8 8d 2c 40 f6 fb bf 01 00 00 00 a2 57 02 f6 65 48 83 3d 81 55 b8 08 00 74 06 5b c3 cc cc cc cc [ 423.809113][ C0] RSP: 0018:ffffc90004397c90 EFLAGS: 00000206 [ 423.815147][ C0] RAX: 0000000009c8f711 RBX: ffff88803376c0c0 RCX: 0000000000000000 [ 423.823087][ C0] RDX: 0000000000000001 RSI: ffffffff8e38c98a RDI: 0000000000000001 [ 423.831023][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 423.838973][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000021 [ 423.846909][ C0] R13: ffff88803376c4c0 R14: dffffc0000000000 R15: ffff888035082580 [ 423.854847][ C0] FS: 00007f17f46896c0(0000) GS:ffff888123b56000(0000) knlGS:0000000000000000 [ 423.863746][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.870298][ C0] CR2: 00007f17f37eb840 CR3: 000000007ca17000 CR4: 00000000003526f0 [ 423.878251][ C0] Call Trace: [ 423.881502][ C0] [ 423.884407][ C0] get_signal+0x195a/0x21e0 [ 423.888897][ C0] ? __pfx_get_signal+0x10/0x10 [ 423.893718][ C0] ? do_futex+0x190/0x440 [ 423.898021][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 423.903542][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 423.909677][ C0] exit_to_user_mode_loop+0x139/0x700 [ 423.915017][ C0] ? rcu_is_watching+0x13/0xc0 [ 423.919752][ C0] do_syscall_64+0x661/0x790 [ 423.924318][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.930181][ C0] RIP: 0033:0x7f17f379e159 [ 423.934569][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.954143][ C0] RSP: 002b:00007f17f46890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 423.962524][ C0] RAX: fffffffffffffe00 RBX: 00007f17f3a26098 RCX: 00007f17f379e159 [ 423.970472][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f17f3a26098 [ 423.978414][ C0] RBP: 00007f17f3a26090 R08: 0000000000000000 R09: 0000000000000000 [ 423.986353][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.994292][ C0] R13: 00007f17f3a26128 R14: 00007ffd106050e0 R15: 00007ffd106051c8 [ 424.002244][ C0] [ 424.216492][ T8059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.227060][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 424.227092][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=216 sent=0 n=-1 (errno 32: Broken pipe) [ 424.659176][ T986] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 425.895963][ T986] usb 3-1: device descriptor read/all, error -71 [ 426.045326][ T3657] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.045350][ T3657] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.121968][ T3657] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.121992][ T3657] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.162909][ T3657] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.162932][ T3657] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.212511][ T3657] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.212535][ T3657] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.350485][ T3657] bridge_slave_1: left allmulticast mode [ 426.350516][ T3657] bridge_slave_1: left promiscuous mode [ 426.351829][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.355165][ T3657] bridge_slave_0: left allmulticast mode [ 426.355179][ T3657] bridge_slave_0: left promiscuous mode [ 426.355279][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.619112][ T3657] bond2 (unregistering): (slave gretap1): Releasing active interface [ 426.654471][ T3657] bond3 (unregistering): (slave geneve2): Releasing active interface [ 426.722366][ T3657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.725356][ T3657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.727622][ T3657] bond0 (unregistering): Released all slaves [ 426.770229][ T3657] bond1 (unregistering): Released all slaves [ 426.786689][ T31] audit: type=1400 audit(1789944768.263:570): avc: denied { write } for pid=8077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.817182][ T3657] bond2 (unregistering): Released all slaves [ 426.840127][ T3657] bond3 (unregistering): Released all slaves [ 426.895267][ T3657] tipc: Left network mode [ 426.965067][ T31] audit: type=1400 audit(1789944768.443:571): avc: denied { write } for pid=8088 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.124052][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 427.274353][ T3657] hsr_slave_0: left promiscuous mode [ 427.274737][ T3657] hsr_slave_1: left promiscuous mode [ 427.275175][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.275196][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.277189][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.277200][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.362876][ T3657] veth1_macvtap: left promiscuous mode [ 427.362915][ T3657] veth0_macvtap: left promiscuous mode [ 427.362998][ T3657] veth1_vlan: left promiscuous mode [ 427.363046][ T3657] veth0_vlan: left promiscuous mode [ 427.599761][ T31] audit: type=1400 audit(1789944769.083:572): avc: denied { write } for pid=8091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.715637][ T3657] team0 (unregistering): Port device team_slave_1 removed [ 427.735588][ T31] audit: type=1400 audit(1789944769.213:573): avc: denied { write } for pid=8102 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.763571][ T3657] team0 (unregistering): Port device team_slave_0 removed [ 427.885636][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 428.200718][ T3657] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.292343][ T31] audit: type=1400 audit(1789944769.773:574): avc: denied { write } for pid=8105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.296920][ T3657] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.401630][ T3657] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.427156][ T31] audit: type=1400 audit(1789944769.903:575): avc: denied { write } for pid=8116 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.478907][ T3657] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.530387][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 428.740482][ T3657] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.810382][ T3657] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.876439][ T3657] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.945185][ T3657] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.973528][ T31] audit: type=1400 audit(1789944770.453:576): avc: denied { write } for pid=8119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.111580][ T31] audit: type=1400 audit(1789944770.593:577): avc: denied { write } for pid=8130 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.242672][ T3657] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.263264][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 429.321960][ T3657] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.380947][ T3657] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.461168][ T3657] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.724858][ T31] audit: type=1400 audit(1789944771.203:578): avc: denied { write } for pid=8134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.776107][ T3657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.849436][ T31] audit: type=1400 audit(1789944771.333:579): avc: denied { write } for pid=8145 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.854216][ T3657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.950596][ T3657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.956203][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 430.002562][ T3657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.192134][ T3657] bridge_slave_1: left allmulticast mode [ 430.192152][ T3657] bridge_slave_1: left promiscuous mode [ 430.192267][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.195142][ T3657] bridge_slave_0: left allmulticast mode [ 430.195156][ T3657] bridge_slave_0: left promiscuous mode [ 430.195257][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.237206][ T3657] wg2: left allmulticast mode [ 430.260450][ T3657] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 430.262010][ T3657] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 430.262163][ T3657] bridge0: port 3(wlan1) entered disabled state [ 430.266649][ T3657] bridge_slave_1: left allmulticast mode [ 430.266663][ T3657] bridge_slave_1: left promiscuous mode [ 430.266759][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.316354][ T3657] bridge_slave_0: left allmulticast mode [ 430.316371][ T3657] bridge_slave_0: left promiscuous mode [ 430.316489][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.346119][ T3657] bridge_slave_1: left allmulticast mode [ 430.346136][ T3657] bridge_slave_1: left promiscuous mode [ 430.346242][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.347376][ T3657] bridge_slave_0: left allmulticast mode [ 430.347397][ T3657] bridge_slave_0: left promiscuous mode [ 430.378956][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.735407][ T3657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.737590][ T3657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.762981][ T3657] bond0 (unregistering): Released all slaves [ 430.766278][ T3657] bond1 (unregistering): Released all slaves [ 430.874626][ T3657] bond0 (unregistering): Released all slaves [ 430.877612][ T3657] bond1 (unregistering): Released all slaves [ 430.900994][ T3657] bond2 (unregistering): Released all slaves [ 430.976981][ T3657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.990623][ T3657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.991363][ T3657] bond0 (unregistering): Released all slaves [ 430.995279][ T3657] bond1 (unregistering): Released all slaves [ 431.025830][ T3657] bond2 (unregistering): Released all slaves [ 431.119275][ T3657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.120444][ T3657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.121690][ T3657] bond0 (unregistering): Released all slaves [ 431.124891][ T3657] bond1 (unregistering): Released all slaves [ 431.162768][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 431.856513][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 431.856527][ T31] audit: type=1400 audit(1789944773.333:582): avc: denied { write } for pid=8164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.917408][ T3657] hsr_slave_0: left promiscuous mode [ 431.923174][ T3657] hsr_slave_1: left promiscuous mode [ 431.923610][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.923622][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.923941][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.923951][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.968377][ T3657] hsr_slave_0: left promiscuous mode [ 431.968708][ T3657] hsr_slave_1: left promiscuous mode [ 431.993842][ T3657] hsr_slave_0: left promiscuous mode [ 431.994196][ T3657] hsr_slave_1: left promiscuous mode [ 431.994586][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.994597][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.995255][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.995265][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.042234][ T3657] hsr_slave_0: left promiscuous mode [ 432.044398][ T3657] hsr_slave_1: left promiscuous mode [ 432.044825][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.044838][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.045163][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.045172][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.154097][ T3657] veth1_macvtap: left promiscuous mode [ 432.154136][ T3657] veth0_macvtap: left promiscuous mode [ 432.154201][ T3657] veth1_vlan: left promiscuous mode [ 432.154235][ T3657] veth0_vlan: left promiscuous mode [ 432.158362][ T3657] veth1_macvtap: left promiscuous mode [ 432.158384][ T3657] veth0_macvtap: left promiscuous mode [ 432.158434][ T3657] veth1_vlan: left promiscuous mode [ 432.158493][ T3657] veth0_vlan: left promiscuous mode [ 432.206280][ T3657] veth1_macvtap: left promiscuous mode [ 432.206304][ T3657] veth0_macvtap: left promiscuous mode [ 432.206361][ T3657] veth1_vlan: left promiscuous mode [ 432.206397][ T3657] veth0_vlan: left promiscuous mode [ 432.207172][ T3657] veth1_macvtap: left promiscuous mode [ 432.207188][ T3657] veth0_macvtap: left promiscuous mode [ 432.207294][ T3657] veth1_vlan: left promiscuous mode [ 432.207333][ T3657] veth0_vlan: left promiscuous mode [ 432.257432][ T31] audit: type=1400 audit(1789944773.733:583): avc: denied { write } for pid=8175 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.627041][ T3657] team0 (unregistering): Port device team_slave_1 removed [ 432.645078][ T3657] team0 (unregistering): Port device team_slave_0 removed [ 432.999632][ T3657] team0 (unregistering): Port device team_slave_1 removed [ 433.004669][ T3657] team0 (unregistering): Port device team_slave_0 removed [ 433.199007][ T3657] team0 (unregistering): Port device team_slave_1 removed [ 433.204107][ T3657] team0 (unregistering): Port device team_slave_0 removed