last executing test programs: 55.430553694s ago: executing program 3 (id=257): socket(0x3, 0x3, 0x64e) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r2, r2, 0x0, 0x9) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') fchdir(r2) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/162, 0xa2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x1bb3, 0x9, 0x0, &(0x7f00000000c0)) 53.238092445s ago: executing program 3 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r3, 0xc008644e, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r5, 0x400455c8, 0x1) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) socket$inet6(0xa, 0x2b3569ffd483801c, 0xfffffff8) shmctl$IPC_RMID(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 50.43889097s ago: executing program 3 (id=272): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0xffffffffffffffff, 0x4, 0x2, 0x8, 0x4, 0x3, 0x3, 0x1932be21, 0x4100000000, 0x4, 0x4], 0xeeee0000, 0x60600}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f00000023c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(0x0, 0x64842, 0x47) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x8080, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=unix,noxattr,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c23c17b6e25bf72e365a44a06d9df616d653d5d2c64697265637469"]) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) write$input_event(r5, &(0x7f0000000280)={{0x77359400}, 0x16, 0x0, 0x8000}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f00000014c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="11aa8e9c0e17e0125528e4514807b6e2c116dd107d8099a7e19814e750c9b615ebd12d8d0d0ae314cd11fe3c26d86bd61bc835f17e9d166497867283597dbbb5b1f99beb974f47fce50b84b41d9645111b747cf28afad1ccbe7fe586e6fa92ac71fab6dd33535222d51eeb459815187f41fb76b2e56cc11c851433bb81"]) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RCLUNK(r7, &(0x7f0000000240)={0x7, 0x79, 0x2}, 0x7) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x1, 0x0, 0x8, 0x0, 0x10, 0x0, 0x4, 0x80, 0x9, 0x80, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0xff, 0xff, 0x6, '\x00', 0x0, 0x1}) 48.728505364s ago: executing program 3 (id=275): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840), 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0xfffffffffffffdfd) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000240)={'wlan1\x00'}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r5, 0x0, 0x8, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, 0x0, 0x0) socket$inet(0x2, 0x6, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000180)) 48.160175332s ago: executing program 3 (id=279): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="44b447001040010421e985599a870c014db9ee72000000000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000240012800b00010067656e657665000014000280060005004e2300000500080003000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20048880) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x8, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe}, 0x94) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r1) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x4, 0x3}, 0x6c) bind$tipc(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x4001, 0x1}, 0x10) bind$tipc(r5, 0x0, 0x0) close(r5) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000197"], 0x1c}], 0x1}, 0x0) r7 = syz_io_uring_setup(0x5010, &(0x7f0000000080)={0x0, 0x20091c1, 0x100, 0x0, 0xd}, &(0x7f0000000440)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit$UBLK(r8, r9, r10, &(0x7f00000025c0)=@ublk_io_cmd_sqes={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, 0x8b1f, 0x0, 0x0, '\x00', @commit_and_fetch_cmd={0x1, 0x849, 0xc, 0x0}}) syz_io_uring_submit$UBLK(r8, r9, r10, &(0x7f0000000380)=@ublk_end_user_recovery_sqe) io_uring_enter(r7, 0x20, 0xd9db, 0x8, 0x0, 0x0) r11 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000300)=0xdb) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000340)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 47.816912635s ago: executing program 3 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x0, 0x25dfdbff, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r3, 0xc008644e, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r6, 0x400455c8, 0x1) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) socket$inet6(0xa, 0x2b3569ffd483801c, 0xfffffff8) shmctl$IPC_RMID(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 47.392695488s ago: executing program 32 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x0, 0x25dfdbff, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r3, 0xc008644e, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r6, 0x400455c8, 0x1) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) socket$inet6(0xa, 0x2b3569ffd483801c, 0xfffffff8) shmctl$IPC_RMID(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 15.011020448s ago: executing program 2 (id=344): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x314f9fb3272b80c2) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.max\x00', 0x2, 0x0) writev(r2, &(0x7f0000000ac0)=[{&(0x7f0000000600)}, {&(0x7f0000000640)="5a5194493ef19ee184def42f2f7ae879a6702938f9d14cdb8293d4fac8a76a42932bec7781a3afaa4f63bbad799e08b2bd8e344f81e04e185063f8c4e566e8f38376dfe67146c51ea6e4d6f445015572111f40e412d1f6fe7a5e237e114ccae808d8cbcc66344341fcf79f24ec85743990127aa3becf4d26b56c2292390ec2ccc0b9ad4f9aa06555d385658b1c9ce3c90a455f35f18f162e34b2471be51077b715201f8bfcdd60", 0xa7}, {&(0x7f0000000880)}, {0x0}, {0x0}], 0x5) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x89, @empty, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0xf0, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c00)=@newtaction={0x1124, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x1110, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x10000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x1074, 0x4, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7ff, 0x5, 0x5, 0xeb, 0x100}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x1004, 0x6, "235ebd02dcf44283f91fe555911b81dee94143f4a1e8664f4ff2d14cec4ff0da4b0576f7a9f5b0c2f6bcd438ceb02e4bf379400a4e98c30d287fde6e9b3b55ecd77992ced8c3762bbea074f79a88428a3bc46a4218e4e3e28e754cfa4816e3558f51d3db654f0624c9dab11578ebf5747dcaec7635c01df73bf48c18156b40b43f038bf44e42ddbb9ea28b8fca69272eaa01819f94bae7ca4eed88d9dc30faa7ec70d7351090be83ab88532e201b6557e827d8f459b3a3339545b4de64b4996d7c8330a1bdd01e8c641eb0f650ac86032694e10377ba52d556f2004624b42113f37f915a761cd12d29fb6a81fafc2c60be594dc088565d650eecda6f203b08a68abce6bf388b2763963c92ed1b2267dabf9d272674660f44ff68dae394a59c00950ef72783bfef3f1b43c8b39f3af7e90d53503ee7e4d98fd365cb75ef4e76c73627980a90fe4285a22f8fbf0583ed5b111bd57f464ffcd55abb32964b5b49d1dd695a322829d8196fed9b812c95cf4ca5a68a2300c829fc39ce463b48929be55fac2c8acda6b861ce323efc7929f222904121583e16c1e92255f0624ce989cf42459c740b3fe18ed00a9dab657940454ab4239b4adac8f7eac7cfeb7571a1f38103f5a12011c2e607e760bd8a80d1aaf9a17839836fef6d55b8aac083b5865246eec881150a8054b041bc1abee984bea493c47c7ac9ebde61724d7a9408c3add8004aad11098b0297a80ac383b0ae313a6842de23505d9be7fcd72ed92449bd214dc4791a1cb658958c0b4a22d63ea60d01a4bf675f4cd5cf4c4527cf001b2b43c7159e164c5e460d6e33eaada08c1aaf955fd7e9f2c9b8bac2da7ca28bf410bacf1db27389d2f6f43f10c4b1cc393313205efb1b8e79270c403987d11c701b521c9e3419b18a20b80e0615ec76dd8f5e9fb67b2291b4e1e0aca0d938ce16ca9c2310f91bb5427f8a964c8bea8e74c593ad87b459ee2170031c04e6c148cfcf961e9088eb50ff91d19cdc47d66ae61fbd6e792a613d08fdda93ff7628ca3410ad8495c67c602a8d10e0477429abe33154c88e5d3bfcd5cf42381b984ab890702e7cc9d50d384d9667b4a06d95f95facd4b0f5a460b53d20484b876f771c1d2ab46b0affae42ddc2ba98f228db6027705203513c336df20d4b95d32ffe44ea31269f5b1adc388d75d13acd3f23fc60d98590889ef574b16d32e8de5325b64716d79555976311555ff44caff59e0965b3aee2f5911883cdd15ecf23a5694ecccf410a48e2bb0acd946bd4f4d9c2c9057d6ea25a8518f2405d858383f663633e13b6f7aa477964175611706ca65d252a27e571a25649188a9c3bbc2d97e63460512feee0afde3107905d9f9e317c9095757621419050154d396018d824da724f45cbeaf847d11a9ed730189078a01bedc552cfdcd4dd3d4a4de30042935eb37a2676f13c9a9c1d8aa5dae0e380128bfeda25521813b0d62f385e369f16df37ece1b0ca5115b6239b4407a90911ef48c716cb2da48d6f9db0327a655976de62b36e5f1a846646b4c2a24e07b0911882028fc5eb1cd6e4c717eee81fb46248e7a939dacf3e9aa8807749163cab6103d4e7817f1a7478e8c1ad3d5bcc7b891ae8c78701725b10aecfdb625e6919467ca8f5dad1e6caaf4208e09de1b1fbc3d9ddf44845844171d177384eccb86e3096ef7eeda915cf9339421cd119ebec0e325135e4f6022316df1b0e7edc4c81df64206773728eeafb3e575913d19627704decabe79114555a42da350547672dc59bb701aee582651ad885fb7e84d1f2c847b6e589e862c9f88920bdd4e32f8b2d22d2790ed4fea59589be8d8ec2dfc6a5c9e25a95f8b5da0364af6801d43a7e7680c656aa4f29f4b352bf2175d8071f32dc2359749a61f420ee992bc013c2d98321c1930736ed77bf621c8304da6aa0fb4aa9f3310b8ec02a0e315e7ea3888d4a5ba8947ee9cf739f4fe5a1c0949dab237e21ff9bec891a23bbc58367d64ef556e94259198a52ae8f7da0dc26f83299188a66d91b792c00a6e8cf7eb1d7aff11fbf3ab679d9cd2336e683e46b36aa0c93e6dd065583ffac32a58ea2111ec8e18b179705e3c6ec933c99aded6d4e00f2ea2d30f0a97eba70a6060cecc5e8c56fe93952691a8aec9a6e4d8338ba89ca5d9028d9cbb8a58fc9df7fefdc0ceff0774fed71decafa8bb9121113bdf89111c772618323a9fcb4ad84c7914fea2d601042365e57d1b63a462b18b1e8c819ad5f58e9d00b21944870c6cef196518e6880bf4dc9e9ac447735d25e38e60fc1555638369be80af8738814ddedc15de4beeab2864884188323a270003e6abcb5429e6c81488944483be529c2eb2aa9699eae9b6b4538cbc8911789c06bf8fecd2fc4d3b89cb0b8340eb8f54340422b2ea8c3b29a8cf69f079602e46e00bd66d18b113906697390491768ccb75eccfaa7e20c1067ce5f8670f77795f452ccfedd9951fb74df1e065622fd410b74104cd768466e93220bc18f496ab2aee6a9cd76e48949c62e9aae9fcb5e6be586d10473f7fbf480a6c675cd742202229cc0f5f8dcfea9a12356d4cc1ea1982d1f929a4412f02b92c9f69537e7afebdc20a5208154d15d2ee246e9e50c9589054eb730304772fa10ea7ef1a3fa63484bc96f1a228031c7763352d20f0d70bff21b0dca3e4d83780ab0aabc089e0911d36a7c833cab64b495e1de7dce5e27072069403ff633b91f32d7f3d96d3dee38e8e36102b089d08abec5bad32cbdb20523ec2b0bc0a7b2e5954ca4e7a6acce1b11c7441d95cea40e5b8ebe012ec8c01116cc7e60ee5ed56de19be75d60bdb6b8b2591e619753058a32666a4c108a1a325b77baa24cd2ef3b3ecef8a95905b17ae2e79b087e7080d0d56c3e85ed90f053812d98807d670349847ca8747cc30245efcaf108af808be2d287fc49747aa7c891c4addebed9671641a7071dc1605a3a451b8de19a37fd1d5c82737550a78db6f8c8e58de6f13d0aaf97fdd0d6807be20c3e0941fb8ed79ad3dca224806dd9e33827d65f0b9ad01f3954fe4d5dc81f81d3b0139edb06bfe5fb2e59a671b622d0a22255aae44ded9a12edb294b7158940b909325aec558ba2ef3ef88821de03bd297f35ef6b31491e54a872fe4a628f103e0afced6016dfe9817e569d5a2ec0ab09d32529db80812a57dfa74224d138c150808834a38dcb57b66adf309846e779a3dc0288ff46ee71d06a3132dd2713db9e537587d111a6a8d8ee862db711fbf5ba2413cab142221a5dcb0c461bf0755e533f936a0c8ea00ab2f80df18be48fb9a3bcc599ebbb90f2b0320d6c41ec0f9b1a5ec38b780fd5dcf660ae5e3fbea266af55676549e0a69040674302beba5a3c9ca1965c71703a04384a469c9b34ec6169de437c39f682584199527098a370fc7ff91dcf3b094472428f28cb6cfe614da1664a58b0cb3152aef2c4908e21a2fef14743d7feb5aa1b7c59d698a14c9e8f8e713a62a15e4f9b8d6e309c8285274e86999a58709cf8bf51a67a810bbb21812b4bd43a3ae48eea992b3b5f3b63409416855762d43f34160b355c76a04bd9592a90c07f675dadfe2ea9444d6d877fd05d04dfb312cfd1ad378a3d5eef902d37c8ca5e352e84f73bf47dd52dd9862d0dbdff41a99855507ea91bcd3a0edc028b2bd2a082c8e2fc81a59a556eaf429c4113c21d5dedf146c2591a7e1df65b1f6a13d5000f5e674b13aaef090763f138844e4a5ee5d5c9b17bfd7fec3193af0ddb69352213c374b9bf81e1bfc2609d79db2c5ae7f2fcc4d855df3de3c6ea406b01c02dd8dba9a32086194aade92cc738a7682e47e590ade98ed4216714381bd79ac7d7d42ac83cc05ab37a29ac181d2fabce97b235f079f922773092b00a5c685f765df8a5f241bc321350f4d7492b3cf5323feab040fac98a18f2d2ac155e33e3b66b2f3bafc2da4703bdca138b2a8b92625cebacd4f2ff9d3d2731662c7044a94f92f44be45bee2556a98988c07ea06c41c4b7bf4b0d6d78b94b1a305c9a3136e0e2291d291a7fa75d505ef10b469d520cb3064310943ab2ec85caedb496bc401e154b1ca4db62162d8b4d5c450a37bebd885dd22104102302311cc1195ee6f3a961151027f8e40f4709c50822080d611bfc9f2fa2647f6cb78ed34ba7f0571d97f1f4d2ae8db78987eca925b3f9db866083b950eb7e7f16e6c7a8eca7ce2de7fcd09390c6363e29f5182426cf9257743b5e33469a0341f9a5f917c5e1047e98891113ec2c73d13abcc9a02b547a58e858942c33af37b3fec13c1b61d5aa79dd5b7d989b7c724c777cdc8360cdb75d252afa422ef159de57a0da556c602aba19049cbf8c0b248e8d0b6dc4b4eb53bfcb42e9ea65e7dd1a40ccd02a9443e200ccb716fff2a3daf806a4f4aa56939c2e47bb3844fe5c5e318bddbac6ff3de4a0c8e3cc326da0bd92685c30d3377534661945fdc95dec758999a16ae93dec7241ff881bbe8b56184005a0d85ff647466ca3f3ea0aae6678778d2b1444d3e424933833bb7f68129ee624060cfd828e43326bdfb54ee1c3f44f10a3060aa080d364ee5b619318b837922a05f0ce0bdee0537c325bb5695a78b23ba9e24ab7d5dd6ec1a95e72f7bb54c2c2da64bc77635be0aaf3700410b004c8b177a0908b6bbf7c1916306fd6d7d0bdcc486f2647280e51e20ca262284865002199e4f1bb7ca45125fcff240b6bb1b491d1ca876e8990d588b1b7d2af06044706bd9e1ece1054b236293b8fdda6a40f2e90c1a874c07fd8330ba2c640ec6c6510f976a0c0b5c780e5b3eb73f3c137a63548a7ce5229c9770325ce790760a05acf8f8e97ffa7baddb6ab3948aeb8db9bdf432af3aabc8dde83c43fdb0a99c490f950bb08bb90797c4c861d0734c8e620d4de89064f1a8277a0ec39ff8ffc4c51d2aad0fab1184a8350802ad1f2bc250b7d9bf0624fabb8912177b833b41dc85b955c22b1e76ac5d4fcdd476cdd623e87f9446eeb6cbfe33e89be498d145b3ac07950adaf6367bb78779be742b29d678e509e21c544844745dc9dd0805b5456e6a394f15cce1656f54eb29f33295e868ff639be0ac04ed4188d833046bf0eacaa598be88f697307285e9ac5a3fe22d73e04cf5ec97248683d0bca566f3e145aa2d16aac227e1e395d33b0a43d43b238e4e1ed7dd76e7812ecaadff619654d9f8e460f9e132e7ce4e37c9fe45b842cee2e653d5342825267851fa0969f308bd21b67b06dbf378dbd5a9699c3327ee591cb34eefb119c58bec13884ca1c6492fa71fd8fa4884334ba4b5a6c1fa7a04c8eb4ae037d0770e67f63c94e4a87be6846bface8852d4fc2edb7193d35448acc5dcdfc6dbb18f92dd669c8e7e8f6d355d9ccb20e8841cf91531b72453db29fb3415fc6864d303da69926582ceac806a6ed783157a8c24618e835a13d30e83892e781ec9462fd3aaf69d228aa68098da110c238d98375e09ebc95c2ebf6270114d06e85be4760f2c453b21bcf9ed55303eb89b6a460e93531c582533c3a2c460ed126eb4091f34b8c701b69d613cc85a9b3597ec6de385312c938e9aa0401851601306011970c9cbe516c94337293618873f4eb035b2153d7059dae5b2f7345d49a01ab2958e27fb765f066385f031eea4aa2c4ab8ebcc663d8a37423f8bedd9b382fbaa55df6b20cacbd7029e6270740a65e443d9a7caf2ac3360f0297f83f99032603d7db30eadda0707b59183fde4f5d571eb77676a872aa23efe5ee1cbeb975aeaa3c14d85b5208f408ac44ccaeec0514099680ff48"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1124}, 0x1, 0x0, 0x0, 0x4001}, 0x2400c800) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200"], 0x3c}}, 0x0) 13.575590799s ago: executing program 2 (id=345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x1c0, 0xc8, 0x8, 0x1c0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="06e05803d42952be"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xa0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x8, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000004700)={0x2, "e993ad649539089f9e92a4e943500b3ea342ebc95654ffc5a74dbbf589f6794eb4acaf1e6d0c0a04142ff656ab1f01c5dd19251633eda08a11358eb180420fe5", {0xa3e4, 0x5}}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000fcffffffffffffff00000000000a4c000000140a010300000000000000000a00000a08000340000000040900020073797a30000000000900021073797a320000000009000200737a30000000000c0006400000000000000005140000001100010000000000000000000300000aec728e9534f261e506fefeddbc2b32963f85816764c9015bd9d54c44e513b9987f291a5f5c911c90b597b9195e6dea8512b540c64ff77986b842d86df68fb1ebcfaf371b12ed4c360efad8f59c2de03d79a3af12887c3683a672aef91b1c9a8503ce1bd389530de2e838e7b7f6bb1c7102822711c77d579e8ba3f5b9b5b8c5714a22af6b4f7ae5ec6d6c4f4c11dbacfc3c28fe2a3834c1fe24125519414cdaad7e2d75f694cb989fc6a0f72f702cd16a4c5315d6f60eb614731c5497e5d36fd9f879509ff622d58a6fb47886680b611e5dd559b7e25e1821c61bd636494bc4561fd439fbf18e4280bbfa"], 0x74}, 0x1, 0x0, 0x0, 0x8001895}, 0x20000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a740000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000480003801c0000800c00018006000100d10300000c000440000000002df31abd240000800c00044000000000000000050800034000000002"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_clone(0x25809480, &(0x7f0000000000)="194e7c1e6b6b7c53ef1f60742d0de77da4e5bb0317729220cca808f9a83d55d969c7f5778dc3c38c21a53f220ef624eb33d0cb33d1d9f4075beb01929e5391012e7d7ea00684b2c1f6f28bd80f37be180ec1bde538f72b548422c16d7deeb0f406aaeec758dad601f469bb888b25ea647417d60e1426a1f14d67651343f6494ccc37681ad6f092b80907ac4ffd0a421a9238a88a1203bd15ffab25d6b848ae04fcd01594b4c0d0f601fee946407a805f77eaac182e364cc3796fdca02758f55ec72e287d57c0f4fc14d657d0a1fd78751fe4a7b4f8ce54645939840ec8cf7b7a7b047ea65d6cdc58f10cfd0d7b515c62fd4e0bca6991", 0xf6, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="875e7842722e0e55eabade895ea61acbe7fa61949ea7e1f0e2be4f7bc43c3cb41077608525b76af9f02b900808421b4bf7d0f504e8ec4ef77274f2c980092d90746c1e7e90599043d1d32dc651268ce179fc25024b08e463b0563663ed81730ad9d0791637b6ff6ab57fa6b0af9591fab863dc4efd") recvmmsg(r1, &(0x7f0000004500)=[{{&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000f80)=[{&(0x7f00000004c0)=""/91, 0x5b}, {&(0x7f0000000540)=""/123, 0x7b}, {&(0x7f0000000840)=""/219, 0xdb}, {&(0x7f0000000e00)=""/98, 0x62}, {&(0x7f0000000e80)=""/45, 0x2d}, {&(0x7f0000000ec0)=""/59, 0x3b}, {&(0x7f0000000f00)=""/90, 0x5a}], 0x7, &(0x7f0000001000)=""/117, 0x75}, 0x5}, {{&(0x7f0000001080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001100)=""/195, 0xc3}, {&(0x7f0000001200)=""/160, 0xa0}, {&(0x7f00000012c0)}], 0x3, &(0x7f0000001340)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/244, 0xf4}, {&(0x7f0000003440)=""/182, 0xb6}, {&(0x7f0000003500)=""/144, 0x90}, {&(0x7f00000035c0)=""/21, 0x15}, {&(0x7f0000003600)=""/108, 0x6c}, {&(0x7f0000003680)=""/103, 0x67}, {&(0x7f0000003700)=""/54, 0x36}, {&(0x7f0000003740)=""/130, 0x82}, {&(0x7f0000003800)=""/46, 0x2e}], 0xa, &(0x7f0000003900)=""/161, 0xa1}, 0x9}, {{&(0x7f00000039c0)=@qipcrtr, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003a40)=""/198, 0xc6}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/108, 0x6c}, {&(0x7f0000003cc0)=""/37, 0x25}, {&(0x7f0000003d00)=""/46, 0x2e}, {&(0x7f0000003d40)=""/26, 0x1a}], 0x6, &(0x7f0000003e00)=""/150, 0x96}, 0x9}, {{&(0x7f0000003ec0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000004300)=[{&(0x7f0000003f40)=""/168, 0xa8}, {&(0x7f0000004000)=""/218, 0xda}, {&(0x7f0000004100)=""/221, 0xdd}, {&(0x7f0000004200)=""/239, 0xef}], 0x4}, 0x3}, {{&(0x7f0000004340)=@sco, 0x80, &(0x7f0000004400)=[{&(0x7f00000043c0)=""/48, 0x30}], 0x1}, 0xdf}, {{0x0, 0x0, &(0x7f0000004480)=[{&(0x7f0000004440)=""/14, 0xe}], 0x1, &(0x7f00000044c0)=""/59, 0x3b}, 0x81}], 0x7, 0x0, &(0x7f00000046c0)={0x0, 0x989680}) 13.403195437s ago: executing program 1 (id=347): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() r1 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1) fsmount(r1, 0x0, 0x79) setrlimit(0xf, &(0x7f0000000080)={0x8e, 0x8}) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) socket(0x1d, 0x2, 0x6) munmap(&(0x7f0000cc9000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f64000/0x3000)=nil, 0x3000) munmap(&(0x7f0000569000/0x2000)=nil, 0x2000) munmap(&(0x7f0000c01000/0x1000)=nil, 0x1000) munmap(&(0x7f00006b0000/0x1000)=nil, 0x1000) 12.524212158s ago: executing program 2 (id=349): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x2, 0xffffffffffffff61, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x4b, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) capget(&(0x7f0000000100)={0x19980330, r3}, &(0x7f0000000240)={0x88, 0x401, 0x3, 0x2, 0x51e2, 0xa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$rtl8150(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r4, 0x0, 0x0) fanotify_init(0x40, 0x101000) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r5, 0x0) write$selinux_load(r1, 0x0, 0x2fde0) 12.279175779s ago: executing program 5 (id=351): socket(0x3, 0x3, 0x64e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r2, r2, 0x0, 0x9) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') fchdir(r2) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/162, 0xa2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x1bb3, 0x9, 0x0, &(0x7f00000000c0)) 12.211051405s ago: executing program 0 (id=352): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff038}, {0x6, 0x0, 0x2, 0xa1a}]}, 0x10) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setns(0xc9, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fe, 0xf6d, 0x0, 0x4000000000001, 0x7ffffffe, 0x0, 0x6, 0x200000000000000, 0x0, 0x104, 0x10cf2c, 0xfffffffffffffffa, 0x4000000009, 0x5, 0x70a8641a, 0x5, 0x2, 0xfffffffffffffffe, 0x1001000, 0x2000000000008, 0x4, 0x3, 0x4, 0x3, 0x0, 0x41}) 12.188714811s ago: executing program 4 (id=353): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x1, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=20000,proto=tcp']) syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102b4e98a401320480204eed500030109021d0002040718070904"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4d}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000003700010026bd700004000000010df30000000c0001800800198004000300"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r3 = socket$inet_tcp(0x2, 0x1, 0x6) listen(r3, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000002c0)={0xc069, r3}) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) write(r1, &(0x7f0000000240)="7f4faff4749af739b06e49ecdc790d298afb50407e36f23c1ed92c25fb1d8bc65fe5cf962fe8deff9885ba637431c95fb575fdb5dca1ccba78294089d09ec4d0f7fddace100b5d514cbc0bfc7c9ee46d8de6", 0x52) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r6}) 12.040272487s ago: executing program 0 (id=354): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @remote, 'gretap0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0x3, 0x2001) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mq_open(&(0x7f00000001c0)='..\x00', 0x840, 0x184, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)) close(0x3) write$ppp(0xffffffffffffffff, &(0x7f0000000b40)="7f4fef", 0x3) 11.986993857s ago: executing program 5 (id=355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x314f9fb3272b80c2) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.max\x00', 0x2, 0x0) writev(r2, &(0x7f0000000ac0)=[{&(0x7f0000000600)}, {&(0x7f0000000640)="5a5194493ef19ee184def42f2f7ae879a6702938f9d14cdb8293d4fac8a76a42932bec7781a3afaa4f63bbad799e08b2bd8e344f81e04e185063f8c4e566e8f38376dfe67146c51ea6e4d6f445015572111f40e412d1f6fe7a5e237e114ccae808d8cbcc66344341fcf79f24ec85743990127aa3becf4d26b56c2292390ec2ccc0b9ad4f9aa06555d385658b1c9ce3c90a455f35f18f162e34b2471be51077b715201f8bfcdd60", 0xa7}, {&(0x7f0000000880)}, {0x0}, {0x0}], 0x5) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x89, @empty, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0xf0, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c00)=@newtaction={0x1124, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x1110, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x10000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x1074, 0x4, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7ff, 0x5, 0x5, 0xeb, 0x100}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x1004, 0x6, "235ebd02dcf44283f91fe555911b81dee94143f4a1e8664f4ff2d14cec4ff0da4b0576f7a9f5b0c2f6bcd438ceb02e4bf379400a4e98c30d287fde6e9b3b55ecd77992ced8c3762bbea074f79a88428a3bc46a4218e4e3e28e754cfa4816e3558f51d3db654f0624c9dab11578ebf5747dcaec7635c01df73bf48c18156b40b43f038bf44e42ddbb9ea28b8fca69272eaa01819f94bae7ca4eed88d9dc30faa7ec70d7351090be83ab88532e201b6557e827d8f459b3a3339545b4de64b4996d7c8330a1bdd01e8c641eb0f650ac86032694e10377ba52d556f2004624b42113f37f915a761cd12d29fb6a81fafc2c60be594dc088565d650eecda6f203b08a68abce6bf388b2763963c92ed1b2267dabf9d272674660f44ff68dae394a59c00950ef72783bfef3f1b43c8b39f3af7e90d53503ee7e4d98fd365cb75ef4e76c73627980a90fe4285a22f8fbf0583ed5b111bd57f464ffcd55abb32964b5b49d1dd695a322829d8196fed9b812c95cf4ca5a68a2300c829fc39ce463b48929be55fac2c8acda6b861ce323efc7929f222904121583e16c1e92255f0624ce989cf42459c740b3fe18ed00a9dab657940454ab4239b4adac8f7eac7cfeb7571a1f38103f5a12011c2e607e760bd8a80d1aaf9a17839836fef6d55b8aac083b5865246eec881150a8054b041bc1abee984bea493c47c7ac9ebde61724d7a9408c3add8004aad11098b0297a80ac383b0ae313a6842de23505d9be7fcd72ed92449bd214dc4791a1cb658958c0b4a22d63ea60d01a4bf675f4cd5cf4c4527cf001b2b43c7159e164c5e460d6e33eaada08c1aaf955fd7e9f2c9b8bac2da7ca28bf410bacf1db27389d2f6f43f10c4b1cc393313205efb1b8e79270c403987d11c701b521c9e3419b18a20b80e0615ec76dd8f5e9fb67b2291b4e1e0aca0d938ce16ca9c2310f91bb5427f8a964c8bea8e74c593ad87b459ee2170031c04e6c148cfcf961e9088eb50ff91d19cdc47d66ae61fbd6e792a613d08fdda93ff7628ca3410ad8495c67c602a8d10e0477429abe33154c88e5d3bfcd5cf42381b984ab890702e7cc9d50d384d9667b4a06d95f95facd4b0f5a460b53d20484b876f771c1d2ab46b0affae42ddc2ba98f228db6027705203513c336df20d4b95d32ffe44ea31269f5b1adc388d75d13acd3f23fc60d98590889ef574b16d32e8de5325b64716d79555976311555ff44caff59e0965b3aee2f5911883cdd15ecf23a5694ecccf410a48e2bb0acd946bd4f4d9c2c9057d6ea25a8518f2405d858383f663633e13b6f7aa477964175611706ca65d252a27e571a25649188a9c3bbc2d97e63460512feee0afde3107905d9f9e317c9095757621419050154d396018d824da724f45cbeaf847d11a9ed730189078a01bedc552cfdcd4dd3d4a4de30042935eb37a2676f13c9a9c1d8aa5dae0e380128bfeda25521813b0d62f385e369f16df37ece1b0ca5115b6239b4407a90911ef48c716cb2da48d6f9db0327a655976de62b36e5f1a846646b4c2a24e07b0911882028fc5eb1cd6e4c717eee81fb46248e7a939dacf3e9aa8807749163cab6103d4e7817f1a7478e8c1ad3d5bcc7b891ae8c78701725b10aecfdb625e6919467ca8f5dad1e6caaf4208e09de1b1fbc3d9ddf44845844171d177384eccb86e3096ef7eeda915cf9339421cd119ebec0e325135e4f6022316df1b0e7edc4c81df64206773728eeafb3e575913d19627704decabe79114555a42da350547672dc59bb701aee582651ad885fb7e84d1f2c847b6e589e862c9f88920bdd4e32f8b2d22d2790ed4fea59589be8d8ec2dfc6a5c9e25a95f8b5da0364af6801d43a7e7680c656aa4f29f4b352bf2175d8071f32dc2359749a61f420ee992bc013c2d98321c1930736ed77bf621c8304da6aa0fb4aa9f3310b8ec02a0e315e7ea3888d4a5ba8947ee9cf739f4fe5a1c0949dab237e21ff9bec891a23bbc58367d64ef556e94259198a52ae8f7da0dc26f83299188a66d91b792c00a6e8cf7eb1d7aff11fbf3ab679d9cd2336e683e46b36aa0c93e6dd065583ffac32a58ea2111ec8e18b179705e3c6ec933c99aded6d4e00f2ea2d30f0a97eba70a6060cecc5e8c56fe93952691a8aec9a6e4d8338ba89ca5d9028d9cbb8a58fc9df7fefdc0ceff0774fed71decafa8bb9121113bdf89111c772618323a9fcb4ad84c7914fea2d601042365e57d1b63a462b18b1e8c819ad5f58e9d00b21944870c6cef196518e6880bf4dc9e9ac447735d25e38e60fc1555638369be80af8738814ddedc15de4beeab2864884188323a270003e6abcb5429e6c81488944483be529c2eb2aa9699eae9b6b4538cbc8911789c06bf8fecd2fc4d3b89cb0b8340eb8f54340422b2ea8c3b29a8cf69f079602e46e00bd66d18b113906697390491768ccb75eccfaa7e20c1067ce5f8670f77795f452ccfedd9951fb74df1e065622fd410b74104cd768466e93220bc18f496ab2aee6a9cd76e48949c62e9aae9fcb5e6be586d10473f7fbf480a6c675cd742202229cc0f5f8dcfea9a12356d4cc1ea1982d1f929a4412f02b92c9f69537e7afebdc20a5208154d15d2ee246e9e50c9589054eb730304772fa10ea7ef1a3fa63484bc96f1a228031c7763352d20f0d70bff21b0dca3e4d83780ab0aabc089e0911d36a7c833cab64b495e1de7dce5e27072069403ff633b91f32d7f3d96d3dee38e8e36102b089d08abec5bad32cbdb20523ec2b0bc0a7b2e5954ca4e7a6acce1b11c7441d95cea40e5b8ebe012ec8c01116cc7e60ee5ed56de19be75d60bdb6b8b2591e619753058a32666a4c108a1a325b77baa24cd2ef3b3ecef8a95905b17ae2e79b087e7080d0d56c3e85ed90f053812d98807d670349847ca8747cc30245efcaf108af808be2d287fc49747aa7c891c4addebed9671641a7071dc1605a3a451b8de19a37fd1d5c82737550a78db6f8c8e58de6f13d0aaf97fdd0d6807be20c3e0941fb8ed79ad3dca224806dd9e33827d65f0b9ad01f3954fe4d5dc81f81d3b0139edb06bfe5fb2e59a671b622d0a22255aae44ded9a12edb294b7158940b909325aec558ba2ef3ef88821de03bd297f35ef6b31491e54a872fe4a628f103e0afced6016dfe9817e569d5a2ec0ab09d32529db80812a57dfa74224d138c150808834a38dcb57b66adf309846e779a3dc0288ff46ee71d06a3132dd2713db9e537587d111a6a8d8ee862db711fbf5ba2413cab142221a5dcb0c461bf0755e533f936a0c8ea00ab2f80df18be48fb9a3bcc599ebbb90f2b0320d6c41ec0f9b1a5ec38b780fd5dcf660ae5e3fbea266af55676549e0a69040674302beba5a3c9ca1965c71703a04384a469c9b34ec6169de437c39f682584199527098a370fc7ff91dcf3b094472428f28cb6cfe614da1664a58b0cb3152aef2c4908e21a2fef14743d7feb5aa1b7c59d698a14c9e8f8e713a62a15e4f9b8d6e309c8285274e86999a58709cf8bf51a67a810bbb21812b4bd43a3ae48eea992b3b5f3b63409416855762d43f34160b355c76a04bd9592a90c07f675dadfe2ea9444d6d877fd05d04dfb312cfd1ad378a3d5eef902d37c8ca5e352e84f73bf47dd52dd9862d0dbdff41a99855507ea91bcd3a0edc028b2bd2a082c8e2fc81a59a556eaf429c4113c21d5dedf146c2591a7e1df65b1f6a13d5000f5e674b13aaef090763f138844e4a5ee5d5c9b17bfd7fec3193af0ddb69352213c374b9bf81e1bfc2609d79db2c5ae7f2fcc4d855df3de3c6ea406b01c02dd8dba9a32086194aade92cc738a7682e47e590ade98ed4216714381bd79ac7d7d42ac83cc05ab37a29ac181d2fabce97b235f079f922773092b00a5c685f765df8a5f241bc321350f4d7492b3cf5323feab040fac98a18f2d2ac155e33e3b66b2f3bafc2da4703bdca138b2a8b92625cebacd4f2ff9d3d2731662c7044a94f92f44be45bee2556a98988c07ea06c41c4b7bf4b0d6d78b94b1a305c9a3136e0e2291d291a7fa75d505ef10b469d520cb3064310943ab2ec85caedb496bc401e154b1ca4db62162d8b4d5c450a37bebd885dd22104102302311cc1195ee6f3a961151027f8e40f4709c50822080d611bfc9f2fa2647f6cb78ed34ba7f0571d97f1f4d2ae8db78987eca925b3f9db866083b950eb7e7f16e6c7a8eca7ce2de7fcd09390c6363e29f5182426cf9257743b5e33469a0341f9a5f917c5e1047e98891113ec2c73d13abcc9a02b547a58e858942c33af37b3fec13c1b61d5aa79dd5b7d989b7c724c777cdc8360cdb75d252afa422ef159de57a0da556c602aba19049cbf8c0b248e8d0b6dc4b4eb53bfcb42e9ea65e7dd1a40ccd02a9443e200ccb716fff2a3daf806a4f4aa56939c2e47bb3844fe5c5e318bddbac6ff3de4a0c8e3cc326da0bd92685c30d3377534661945fdc95dec758999a16ae93dec7241ff881bbe8b56184005a0d85ff647466ca3f3ea0aae6678778d2b1444d3e424933833bb7f68129ee624060cfd828e43326bdfb54ee1c3f44f10a3060aa080d364ee5b619318b837922a05f0ce0bdee0537c325bb5695a78b23ba9e24ab7d5dd6ec1a95e72f7bb54c2c2da64bc77635be0aaf3700410b004c8b177a0908b6bbf7c1916306fd6d7d0bdcc486f2647280e51e20ca262284865002199e4f1bb7ca45125fcff240b6bb1b491d1ca876e8990d588b1b7d2af06044706bd9e1ece1054b236293b8fdda6a40f2e90c1a874c07fd8330ba2c640ec6c6510f976a0c0b5c780e5b3eb73f3c137a63548a7ce5229c9770325ce790760a05acf8f8e97ffa7baddb6ab3948aeb8db9bdf432af3aabc8dde83c43fdb0a99c490f950bb08bb90797c4c861d0734c8e620d4de89064f1a8277a0ec39ff8ffc4c51d2aad0fab1184a8350802ad1f2bc250b7d9bf0624fabb8912177b833b41dc85b955c22b1e76ac5d4fcdd476cdd623e87f9446eeb6cbfe33e89be498d145b3ac07950adaf6367bb78779be742b29d678e509e21c544844745dc9dd0805b5456e6a394f15cce1656f54eb29f33295e868ff639be0ac04ed4188d833046bf0eacaa598be88f697307285e9ac5a3fe22d73e04cf5ec97248683d0bca566f3e145aa2d16aac227e1e395d33b0a43d43b238e4e1ed7dd76e7812ecaadff619654d9f8e460f9e132e7ce4e37c9fe45b842cee2e653d5342825267851fa0969f308bd21b67b06dbf378dbd5a9699c3327ee591cb34eefb119c58bec13884ca1c6492fa71fd8fa4884334ba4b5a6c1fa7a04c8eb4ae037d0770e67f63c94e4a87be6846bface8852d4fc2edb7193d35448acc5dcdfc6dbb18f92dd669c8e7e8f6d355d9ccb20e8841cf91531b72453db29fb3415fc6864d303da69926582ceac806a6ed783157a8c24618e835a13d30e83892e781ec9462fd3aaf69d228aa68098da110c238d98375e09ebc95c2ebf6270114d06e85be4760f2c453b21bcf9ed55303eb89b6a460e93531c582533c3a2c460ed126eb4091f34b8c701b69d613cc85a9b3597ec6de385312c938e9aa0401851601306011970c9cbe516c94337293618873f4eb035b2153d7059dae5b2f7345d49a01ab2958e27fb765f066385f031eea4aa2c4ab8ebcc663d8a37423f8bedd9b382fbaa55df6b20cacbd7029e6270740a65e443d9a7caf2ac3360f0297f83f99032603d7db30eadda0707b59183fde4f5d571eb77676a872aa23efe5ee1cbeb975aeaa3c14d85b5208f408ac44ccaeec0514099680ff48"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1124}, 0x1, 0x0, 0x0, 0x4001}, 0x2400c800) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200"], 0x3c}}, 0x0) 10.821546985s ago: executing program 0 (id=356): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000700000003"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000002800000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9.754185196s ago: executing program 5 (id=357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x314f9fb3272b80c2) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.max\x00', 0x2, 0x0) writev(r2, &(0x7f0000000ac0)=[{&(0x7f0000000500)="5ebf95dc853f3605b9b768bb8fb2dbcbb2406cdecd6e07ba35e4a46c2bfebdb66082eaefcf67a66e0c2bf2eb36f7ccfdaa870763d0f66604b3300edc1449cd71afe12409c4218937609b458c57532847260ed6780e411da6caa3ca1f45a8ec5b5a81c5bb98cc54931d302f5763eb6d89372c7c87defe0beb6ea226e0733f09963eb16b123684f0c5c4b254a2cb66e88be5630411cfa8144c995ec72ff11bc6ea57ac72608cdcc826259377e41a6491612159854c2bf1346ecdae63e25d85d8e20779d6213252feddc29f3250f2320d61bb", 0xd1}, {&(0x7f0000000600)="948c154fac6a0a40015dacb2a2", 0xd}, {&(0x7f0000000640)="5a5194493ef19ee184def42f2f7ae879a6702938f9d14cdb8293d4fac8a76a42932bec7781a3afaa4f63bbad799e08b2bd8e344f81e04e185063f8c4e566e8f38376dfe67146c51ea6e4d6f445015572111f40e412d1f6fe7a5e237e114ccae808d8cbcc66344341fcf79f24ec85743990127aa3becf4d26b56c2292390ec2ccc0b9ad4f9aa06555d385658b1c9ce3c90a455f35f18f162e34b2471be51077b715201f8bfcdd60c7b0dc13bc7b2a1ddb189b706066daf866c20421a4c0b94035c4a17ee7edd8ac776130058f885868915d37444fdd47fa982bd551d62ef98eba125c7d900e8abb", 0xe7}, {&(0x7f00000007c0)}, {&(0x7f0000000880)="fff9cc168f8d29bf6d4e67acc07989659f884ac9b427e763d2bb01f6e1b4227f37e32a171ecd2e34a983c9fde38161fa79c617345a278bdcd89038d5d2a6ed903bc774e2343e0d9053913bc60e078bb330b1b46c60e47a4c2500aff2a2ed7448ae7b25d3bc0ab974107d4ec29da033e2fda1d2d1fcac6650b9eb4c47b397324e76e147498bb8f7f11f4e8c5f104e13005eb1cb627f0d9f5d84985f8902ab816db81d47ec32356a2f1339fa9eea24e1cd97553a8a500a5db3d67de2819c5f149b8a", 0xc1}, {&(0x7f0000000980)="6bd5c8261559fc9aebf7", 0xa}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)="7e7a8eb21dc463f844c2e778209cbb586c3dae204ce2eb71e1d5e8dfb40663dd268bf44237e0d51b5684ad39135881df2825b8114e741b47f8ce651e1294430a072e6ead9e617e9726a8f22fd5c9c1439a01026af6a6b6ca9d4bf7b6aa235aacbace787d986531429cec331f88ae169815a9", 0x72}, {&(0x7f0000000a80)="d1551d3cbb9970061aaee529f95db3742a8680c7637a9cd37095c63d56e3f5ab487fc03e6cd57c207a478b08004bb66cb0a23a4712dac4f4784591a149d21cbc", 0x40}], 0x9) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x89, @empty, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x6eb0}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c00)=@newtaction={0x1134, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x1120, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x10000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x1084, 0x4, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7ff, 0x5, 0x5, 0xeb, 0x100}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x6}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1134}, 0x1, 0x0, 0x0, 0x4001}, 0x2400c800) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200"], 0x3c}}, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) 9.409073921s ago: executing program 1 (id=358): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x2, 0x6, 0x550, 0x168, 0x248, 0x168, 0x390, 0x248, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_hsr\x00', 'macvtap0\x00', {}, {}, 0x84, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0xff, 0xffffff00, 0x71b681034600913a], 'macsec0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x3b, 0x6, 0x4, 0x20}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x48000000}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz0\x00', {0x9b80000000}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) (fail_nth: 6) 7.755560115s ago: executing program 5 (id=359): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvfrom(r0, 0x0, 0xfffffffffffffe67, 0x300, 0x0, 0x22) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 7.755177834s ago: executing program 1 (id=360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x442d, 0x80000, 0x0, 0x60055}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000480)=@v2={0x5, 0x0, 0x8, 0x10001, 0xc6, "5da5155013beeadbc360be97c09da5f60d3c8d22c72f3abb1e6d5b272fe498c25466cba6695703e990d658c06f217a9493258296e1331820c05c12a598eaf6d29d7b78ac0ddbbdec2145ba77c92367fa0c7474a5cd3b7a57f2dfa352d4a9eb5e37462b67848316ae988e8fcb2f63522fa2b98b003f6bb1384d887183f9b3d3b4e23be6a5a7dee8fca47eb6bf12bb5d98230e29baed5233dc9681c9bc3dafd783d02876ac2c85363d4a3393f4f675f4836bc9b3c6d9a4fb188b704283af79762023e61aad67ff"}, 0xcf, 0x2ec41e86beec59b) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000100000850000002a00000018110000", @ANYRES32=r11, @ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r12, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 7.618073282s ago: executing program 2 (id=361): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002080)=""/108, 0x6c, 0x100000000000055) pselect6(0x40, &(0x7f0000000040)={0x8, 0x6, 0x0, 0x5, 0x6, 0x0, 0x5, 0x2}, &(0x7f0000000080)={0x8, 0x6, 0x100000000, 0x6, 0x1ff, 0x4, 0x4000000000, 0x9}, &(0x7f00000000c0)={0x7, 0x401, 0x2, 0x6, 0x6, 0xfffff00000000000, 0xd, 0x9}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="54ebb91ba3c01b00000002030300000000000000000000000003"], 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x20040800) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000380)=0x6f) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) unshare(0x400) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000300)={@remote, @private, 0x0}, &(0x7f0000000340)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 7.496512031s ago: executing program 1 (id=362): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) setpriority(0x0, 0x1, 0xa7a8) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r3, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}, 0xf3ce}], 0x1, 0x20, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYBLOB="c6491a7bf3f16858bbb2b068584f56a8cc84e6faa5fd88485982891b64aa953f28cf4b7d5e4960bb2fa27b930c74694a143ab219359db5b3e75bb9e332b85cc563d7246f6c49504e59e8be088795ddadb7696fbfb9756e72dac8035f826364b8d21e397457eeb63632159ff37f044f844433926f2b1ec5ca5e59b319124c83deb630069c211547e218a8a13741388acd11800a1903e0cb49f2bf194ffe9f7e3bf2ba5817d0d5272e3f2761a6c88e7e", @ANYBLOB="0600fd72b6e6ed656051acba02af82da0d1fc79d6ac0cfb76375b5702f13f5"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000400) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="4f47410444e1bf43617074754faa272ee28b4c2a388c5038387f8d736520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b455220274344204361707475b6aa"], 0xaf) close(r7) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@deltclass={0x3c, 0x29, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {0xc, 0xd}, {0xd, 0x17}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xf}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 7.372572957s ago: executing program 0 (id=363): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) prlimit64(0x0, 0x4, &(0x7f00000000c0)={0x8, 0x8e}, 0x0) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f00000001a0)='1', 0x1) 4.909545061s ago: executing program 4 (id=364): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff038}, {0x6, 0x0, 0x2, 0xa1a}]}, 0x10) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setns(0xc9, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fe, 0xf6d, 0x0, 0x4000000000001, 0x7ffffffe, 0x0, 0x6, 0x200000000000000, 0x0, 0x104, 0x10cf2c, 0xfffffffffffffffa, 0x4000000009, 0x5, 0x70a8641a, 0x5, 0x2, 0xfffffffffffffffe, 0x1001000, 0x2000000000008, 0x4, 0x3, 0x4, 0x3, 0x0, 0x41}) 4.76887835s ago: executing program 0 (id=365): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @remote, 'gretap0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0x3, 0x2001) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mq_open(&(0x7f00000001c0)='..\x00', 0x840, 0x184, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r6, 0x40047438, &(0x7f0000000040)) close(0x3) write$ppp(r6, &(0x7f0000000b40)="7f4fef", 0x3) 3.50137546s ago: executing program 0 (id=366): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f0000000c00)='./nfsd\x00', 0x2, 0x80) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @dev}, &(0x7f0000000100)=0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, r0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1d9) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf32(r3, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x1, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000c40)='y\x105\xfb\xf7u\x87%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\x00]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^j\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\x9d\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xcb\x16\xf5\x9cz\x10@\x10\x06\xc4\x8dJP\xceL~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x02\x00\x00\x00\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QV?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x01\x00\x00\x00\x00\x00\x00\x00\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x00\x00\x00\x00D\xa1\xb4\x8b\xe8*\x8f\xdf\x10\xf3\xb4n\v\r\xabq,$\xb4\x1b\xd7V\xb2z\x1e\x80co%\xf9\xd0\xf4\xe7\xde\x1b\xc3g\x0e\xa1\xfb\xacV\xe0[\xc8SE\x10?\x0f\xce\xeeg}W\x0f\xa32*\x8f\x94\x19c\xd0\xdd*\xb3\x12\x9dj\xcc\xc6\t\tK\xae\xd7\x1f\xb5\xb0\x0e\xff\xb5H\xef\xd1\x0f\x84\xfb\xd5\x89-\x9d\xf5=\x16\nP\xcds\xb0{Y\x9e\xdf&\xc6l`\xbe.\xc3\x1e\xe8\xc9\xc1\xd3\x84\x95=eJf;/\xf7Fw\b\xb0Vk\xf1K\xdc\xe3os\xac\xf3\xbc\xa2\x8a\'\xcf\xd4u3\xbc\xbe\xc1)qM\x17\xe2x\x9fi:^\a,\x9a\x1f\x12}y\xf1\x19\x18\xffS\x9a\x157z\xe0\ay\x98\x8a\xdd\xd9\x14q~\x80>\x97\xefB\xaa\x13\xd0\xff6\xe1\xdfl\a\x01D,\v\t.\x14\x9a\xaf\x84\xed\x1dcc\xc3\xa5g^J\x9bn\x03\x84G\xcci\x05\x995\xfa\xce\x93\xf7\xde\xc4\xd5\xdbA\xc2\xbb\xb78\xc8\xb3\xa3j\x01\xf8\xbffY\xe5c3xl\xb7\xfbD\x80\xfb', 0x2) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x1, 0x0, 0x2000}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x74, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) 3.479689249s ago: executing program 5 (id=367): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @remote, 'gretap0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0x3, 0x2001) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mq_open(&(0x7f00000001c0)='..\x00', 0x840, 0x184, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close(0x3) write$ppp(r7, &(0x7f0000000b40)="7f4fef", 0x3) 3.379465222s ago: executing program 4 (id=368): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}}, 0x20}}, 0x20000840) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (fail_nth: 7) 2.080808423s ago: executing program 5 (id=369): socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x20000811) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, 0x0) write$char_usb(r1, 0x0, 0x0) mkdir(&(0x7f0000000240)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x8) socket$nl_route(0x10, 0x3, 0x0) 1.949943116s ago: executing program 1 (id=370): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) ppoll(&(0x7f00000002c0)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x14) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000000)) 1.89368646s ago: executing program 2 (id=371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x442d, 0x80000, 0x0, 0x60055}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000480)=@v2={0x5, 0x0, 0x8, 0x10001, 0xc6, "5da5155013beeadbc360be97c09da5f60d3c8d22c72f3abb1e6d5b272fe498c25466cba6695703e990d658c06f217a9493258296e1331820c05c12a598eaf6d29d7b78ac0ddbbdec2145ba77c92367fa0c7474a5cd3b7a57f2dfa352d4a9eb5e37462b67848316ae988e8fcb2f63522fa2b98b003f6bb1384d887183f9b3d3b4e23be6a5a7dee8fca47eb6bf12bb5d98230e29baed5233dc9681c9bc3dafd783d02876ac2c85363d4a3393f4f675f4836bc9b3c6d9a4fb188b704283af79762023e61aad67ff"}, 0xcf, 0x2ec41e86beec59b) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000100000850000002a00000018110000", @ANYRES32=r11, @ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r12, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.554738384s ago: executing program 4 (id=372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x314f9fb3272b80c2) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.max\x00', 0x2, 0x0) writev(r2, &(0x7f0000000ac0)=[{&(0x7f0000000500)="5ebf95dc853f3605b9b768bb8fb2dbcbb2406cdecd6e07ba35e4a46c2bfebdb66082eaefcf67a66e0c2bf2eb36f7ccfdaa870763d0f66604b3300edc1449cd71afe12409c4218937609b458c57532847260ed6780e411da6caa3ca1f45a8ec5b5a81c5bb98cc54931d302f5763eb6d89372c7c87defe0beb6ea226e0733f09963eb16b123684f0c5c4b254a2cb66e88be5630411cfa8144c995ec72ff11bc6ea57ac72608cdcc826259377e41a6491612159854c2bf1346ecdae63e25d85d8e20779d6213252feddc29f3250f2320d61bb", 0xd1}, {&(0x7f0000000600)="948c154fac6a0a40015dacb2a2", 0xd}, {&(0x7f0000000640)="5a5194493ef19ee184def42f2f7ae879a6702938f9d14cdb8293d4fac8a76a42932bec7781a3afaa4f63bbad799e08b2bd8e344f81e04e185063f8c4e566e8f38376dfe67146c51ea6e4d6f445015572111f40e412d1f6fe7a5e237e114ccae808d8cbcc66344341fcf79f24ec85743990127aa3becf4d26b56c2292390ec2ccc0b9ad4f9aa06555d385658b1c9ce3c90a455f35f18f162e34b2471be51077b715201f8bfcdd60c7b0dc13bc7b2a1ddb189b706066daf866c20421a4c0b94035c4a17ee7edd8ac776130058f885868915d37444fdd47fa982bd551d62ef98eba125c7d900e8abb", 0xe7}, {&(0x7f00000007c0)="5f39b8cf97136475c69db5bae86f95569c395a03cce29396710d0e9834fa9212423e84a0e11a9b2f4deb02aa97b83301d6ea", 0x32}, {&(0x7f0000000880)="fff9cc168f8d29bf6d4e67acc07989659f884ac9b427e763d2bb01f6e1b4227f37e32a171ecd2e34a983c9fde38161fa79c617345a278bdcd89038d5d2a6ed903bc774e2343e0d9053913bc60e078bb330b1b46c60e47a4c2500aff2a2ed7448ae7b25d3bc0ab974107d4ec29da033e2fda1d2d1fcac6650b9eb4c47b397324e76e147498bb8f7f11f4e8c5f104e13005eb1cb627f0d9f5d84985f8902ab816db81d47ec32356a2f1339fa9eea24e1cd97553a8a500a5db3d67de2819c5f149b8a", 0xc1}, {&(0x7f0000000980)="6bd5c8261559fc9aebf7", 0xa}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)="7e7a8eb21dc463f844c2e778209cbb586c3dae204ce2eb71e1d5e8dfb40663dd268bf44237e0d51b5684ad39135881df2825b8114e741b47f8ce651e1294430a072e6ead9e617e9726a8f22fd5c9c1439a01026af6a6b6ca9d4bf7b6aa235aacbace787d986531429cec331f88ae169815a9", 0x72}, {&(0x7f0000000a80)="d1551d3cbb9970061aaee529f95db3742a8680c7637a9cd37095c63d56e3f5ab487fc03e6cd57c207a478b08004bb66cb0a23a4712dac4f4784591a149d21cbc", 0x40}], 0x9) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x89, @empty, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x6eb0}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c00)=@newtaction={0x1134, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x1120, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x10000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x1084, 0x4, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7ff, 0x5, 0x5, 0xeb, 0x100}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x6}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1134}, 0x1, 0x0, 0x0, 0x4001}, 0x2400c800) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200"], 0x3c}}, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) 439.680715ms ago: executing program 4 (id=373): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000700000003"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000002800000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 398.75396ms ago: executing program 1 (id=374): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x1, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mount$nfs4(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=20000,proto=tcp']) syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102b4e98a401320480204eed500030109021d0002040718070904"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4d}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000003700010026bd700004000000010df30000000c0001800800198004000300"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r3 = socket$inet_tcp(0x2, 0x1, 0x6) listen(r3, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000002c0)={0xc069, r3}) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) write(r1, &(0x7f0000000240)="7f4faff4749af739b06e49ecdc790d298afb50407e36f23c1ed92c25fb1d8bc65fe5cf962fe8deff9885ba637431c95fb575fdb5dca1ccba78294089d09ec4d0f7fddace100b5d514cbc0bfc7c9ee46d8de6", 0x52) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r6}) 395.313463ms ago: executing program 2 (id=375): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0x4, &(0x7f00000000c0)={0x8, 0x8e}, 0x0) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f00000001a0)='1', 0x1) 0s ago: executing program 4 (id=376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aec010000080a010200000000000000000000000a0c0003400000000000000005440005800800014000000033080001400000002108000140000000010800014000006007080001400000890d0800014000000029080001400000005c08000240000000030c00034000000000000000026801048020000180080001006f736600140002800800014000000011080003400000000105"], 0x848}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="05003300000000000000060088a8", 0x0, 0xb7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)=@arm64={0x0, 0x6, 0xff, '\x00', 0x3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x48000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000020c0)={&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000001340)=[@rdma_args={0x48, 0x114, 0x1, {{0x7, 0x4}, {0x0, 0xf7}, &(0x7f0000001300)=[{&(0x7f0000001200)=""/247, 0xf7}], 0x1, 0xc, 0x400}}], 0x48, 0x4008090}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x54, 0x42, 0x1, 0x70bd25, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x37, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00002c000111000001f500010244132403b1fd606412c3258e3d67aa5b00010000"}, @nested={0x4, 0x8003}]}, 0x54}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): r, different from the interface descriptor's value: 3 [ 129.957888][ T193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.964036][ T31] audit: type=1400 audit(1788012077.364:435): avc: denied { name_bind } for pid=6337 comm="syz.1.156" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 129.993837][ T5797] usb 5-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 130.002115][ T5797] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.002156][ T5797] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 130.002179][ T5797] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 130.002217][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.036413][ T5797] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 130.036480][ T5797] dvb_usb_af9035 5-1:1.0: probe with driver dvb_usb_af9035 failed with error -8 [ 130.183385][ T31] audit: type=1400 audit(1788012077.584:436): avc: denied { mount } for pid=6341 comm="syz.2.157" name="/" dev="ramfs" ino=11006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 130.208378][ T6342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.157'. [ 130.262409][ T989] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 130.312676][ T5723] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 130.463309][ T5723] usb 2-1: not running at top speed; connect to a high speed hub [ 130.463419][ T5723] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 130.489109][ T5723] usb 2-1: config 1 has an invalid interface number: 1 but max is 0 [ 130.489159][ T5723] usb 2-1: config 1 has no interface number 0 [ 130.489211][ T5723] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.824551][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.825906][ T5723] usb 2-1: Product: syz [ 130.825943][ T5723] usb 2-1: Manufacturer: syz [ 130.825962][ T5723] usb 2-1: SerialNumber: syz [ 130.926153][ T5723] usb 2-1: selecting invalid altsetting 1 [ 130.956618][ T5723] dvb_ttusb_budget: ttusb_init_controller: error [ 131.141966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.201960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.631972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.661961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.706262][ T989] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 131.706300][ T989] usb 4-1: too many configurations: 75, using maximum allowed: 8 [ 131.708163][ T989] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 131.708195][ T989] usb 4-1: can't read configurations, error -71 [ 131.790257][ T5723] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 131.920784][ T5723] DVB: Unable to find symbol cx22700_attach() [ 132.042009][ T5723] DVB: Unable to find symbol tda10046_attach() [ 132.050450][ T5723] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 132.132471][ T193] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-110 [ 132.132560][ T193] dvb_usb_af9035 1-1:1.0: probe with driver dvb_usb_af9035 failed with error -110 [ 132.559355][ T5717] usb 1-1: USB disconnect, device number 10 [ 132.609676][ T31] audit: type=1400 audit(1788012080.014:437): avc: denied { create } for pid=6352 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.806649][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.820580][ T31] audit: type=1400 audit(1788012080.224:438): avc: denied { read write } for pid=6356 comm="syz.0.161" name="vbi0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 132.820642][ T31] audit: type=1400 audit(1788012080.224:439): avc: denied { open } for pid=6356 comm="syz.0.161" path="/dev/vbi0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 132.868990][ T31] audit: type=1400 audit(1788012080.274:440): avc: denied { ioctl } for pid=6356 comm="syz.0.161" path="/dev/vbi0" dev="devtmpfs" ino=951 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 132.894021][ T6357] FAULT_INJECTION: forcing a failure. [ 132.894021][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 132.894068][ T6357] CPU: 1 UID: 0 PID: 6357 Comm: syz.0.161 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.894098][ T6357] Tainted: [L]=SOFTLOCKUP [ 132.894106][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 132.894119][ T6357] Call Trace: [ 132.894127][ T6357] [ 132.894136][ T6357] dump_stack_lvl+0x100/0x190 [ 132.894174][ T6357] should_fail_ex.cold+0x5/0xa [ 132.894203][ T6357] should_failslab+0xc2/0x120 [ 132.894230][ T6357] kmem_cache_alloc_noprof+0x92/0x6a0 [ 132.894251][ T6357] ? __pfx_map_id_range_down+0x10/0x10 [ 132.894274][ T6357] ? trace_kmem_cache_alloc+0xdd/0x100 [ 132.894299][ T6357] ? security_inode_alloc+0x3b/0x2c0 [ 132.894335][ T6357] security_inode_alloc+0x3b/0x2c0 [ 132.894366][ T6357] inode_init_always_gfp+0xc6f/0xfb0 [ 132.894395][ T6357] alloc_inode+0x8e/0x250 [ 132.894427][ T6357] new_inode+0x22/0x1c0 [ 132.894460][ T6357] hugetlbfs_get_inode+0x39a/0x700 [ 132.894487][ T6357] hugetlb_file_setup+0x15b/0x5b0 [ 132.894513][ T6357] ksys_mmap_pgoff+0x242/0x610 [ 132.894541][ T6357] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 132.894562][ T6357] ? fput+0x7c/0x100 [ 132.894586][ T6357] ? __pfx___x64_sys_futex+0x10/0x10 [ 132.894614][ T6357] ? ksys_write+0x1ac/0x250 [ 132.894633][ T6357] ? __pfx_ksys_write+0x10/0x10 [ 132.894655][ T6357] __x64_sys_mmap+0x125/0x190 [ 132.894691][ T6357] do_syscall_64+0x123/0x790 [ 132.894719][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.894743][ T6357] RIP: 0033:0x7fa1e479e159 [ 132.894761][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.894782][ T6357] RSP: 002b:00007fa1e55d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 132.894803][ T6357] RAX: ffffffffffffffda RBX: 00007fa1e4a25fa0 RCX: 00007fa1e479e159 [ 132.894818][ T6357] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 132.894832][ T6357] RBP: 00007fa1e4835024 R08: ffffffffffffffff R09: 0000000000000000 [ 132.894846][ T6357] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 132.894860][ T6357] R13: 00007fa1e4a26038 R14: 00007fa1e4a25fa0 R15: 00007ffd2f0fe968 [ 132.894890][ T6357] [ 132.983739][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 132.993966][ T25] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 133.066206][ T193] usb 2-1: USB disconnect, device number 9 [ 133.107041][ T5798] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 133.107224][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.107303][ T25] usb 3-1: Product: syz [ 133.107321][ T25] usb 3-1: Manufacturer: syz [ 133.107338][ T25] usb 3-1: SerialNumber: syz [ 133.183762][ T5717] usb 5-1: USB disconnect, device number 4 [ 133.196220][ T25] usb 3-1: config 0 descriptor?? [ 133.205979][ T25] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 133.213982][ T25] pctv452e: pctv452e_power_ctrl: 1 [ 133.213982][ T25] [ 133.222404][ T25] usb 3-1: selecting invalid altsetting 3 [ 133.228202][ T25] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 133.228202][ T25] [ 133.238522][ T25] dvb-usb: bulk message failed: -22 (5/0) [ 133.250690][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.260654][ T25] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 133.269439][ T25] usb 3-1: media controller created [ 133.276218][ T25] dvb-usb: bulk message failed: -22 (8/0) [ 133.276255][ T25] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 133.276307][ T25] dvb-usb: MAC address reading failed. [ 133.305838][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.323010][ T5798] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 133.334968][ T5798] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 133.345079][ T5798] usb 4-1: config 1 has no interface number 0 [ 133.356940][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.356978][ T5798] usb 4-1: Product: syz [ 133.357010][ T5798] usb 4-1: Manufacturer: syz [ 133.357030][ T5798] usb 4-1: SerialNumber: syz [ 133.393855][ T5798] usb 4-1: 3:1 : does not exist [ 133.402066][ T31] audit: type=1400 audit(1788012080.804:441): avc: denied { connect } for pid=6360 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.421686][ T31] audit: type=1400 audit(1788012080.814:442): avc: denied { ioctl } for pid=6360 comm="syz.0.162" path="socket:[14256]" dev="sockfs" ino=14256 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.446370][ T5798] usb 4-1: 3:2 : does not exist [ 133.497076][ T25] DVB: Unable to find symbol stb0899_attach() [ 133.497102][ T25] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 133.643812][ T25] rc_core: IR keymap rc-tt-1500 not found [ 133.643842][ T25] Registered IR keymap rc-empty [ 133.656445][ T25] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 133.666462][ T31] audit: type=1400 audit(1788012081.074:443): avc: denied { relabelfrom } for pid=6369 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 133.666509][ T31] audit: type=1400 audit(1788012081.074:444): avc: denied { relabelto } for pid=6369 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 133.682036][ T31] audit: type=1400 audit(1788012081.074:445): avc: denied { ioctl } for pid=6369 comm="syz.4.165" path="socket:[14284]" dev="sockfs" ino=14284 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.739773][ T25] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input16 [ 133.753682][ T25] dvb-usb: schedule remote query interval to 100 msecs. [ 133.753714][ T25] pctv452e: pctv452e_power_ctrl: 0 [ 133.753714][ T25] [ 133.753743][ T25] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 133.780963][ T25] usb 3-1: USB disconnect, device number 7 [ 133.834074][ T31] audit: type=1400 audit(1788012081.244:446): avc: denied { connect } for pid=6369 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.859334][ T25] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 133.872021][ T5717] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 134.025671][ T5717] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.026561][ T5717] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.026592][ T5717] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 134.026648][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.031773][ T6373] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 134.040857][ T5717] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.209683][ T5798] usb 4-1: USB disconnect, device number 11 [ 134.259651][ T31] audit: type=1400 audit(1788012081.664:447): avc: denied { write } for pid=6375 comm="syz.0.167" name="igmp" dev="proc" ino=4026533142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 134.285836][ T31] audit: type=1400 audit(1788012081.694:448): avc: denied { read } for pid=6371 comm="syz.1.166" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.285902][ T31] audit: type=1400 audit(1788012081.694:449): avc: denied { open } for pid=6371 comm="syz.1.166" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.305362][ T31] audit: type=1400 audit(1788012081.714:450): avc: denied { mounton } for pid=6375 comm="syz.0.167" path="/proc/95/task" dev="proc" ino=14295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 134.662075][ T25] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 135.985598][ T25] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 135.985654][ T25] usb 3-1: too many configurations: 75, using maximum allowed: 8 [ 135.986471][ T25] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 135.986504][ T25] usb 3-1: can't read configurations, error -71 [ 136.519383][ T5717] usb 2-1: USB disconnect, device number 10 [ 136.655738][ T6390] FAULT_INJECTION: forcing a failure. [ 136.655738][ T6390] name failslab, interval 1, probability 0, space 0, times 0 [ 136.655777][ T6390] CPU: 0 UID: 0 PID: 6390 Comm: syz.3.173 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.655795][ T6390] Tainted: [L]=SOFTLOCKUP [ 136.655799][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.655807][ T6390] Call Trace: [ 136.655812][ T6390] [ 136.655817][ T6390] dump_stack_lvl+0x100/0x190 [ 136.655839][ T6390] should_fail_ex.cold+0x5/0xa [ 136.655857][ T6390] should_failslab+0xc2/0x120 [ 136.655871][ T6390] kmem_cache_alloc_noprof+0x92/0x6a0 [ 136.655883][ T6390] ? __pfx_map_id_range_down+0x10/0x10 [ 136.655895][ T6390] ? trace_kmem_cache_alloc+0xdd/0x100 [ 136.655912][ T6390] ? security_inode_alloc+0x3b/0x2c0 [ 136.655932][ T6390] security_inode_alloc+0x3b/0x2c0 [ 136.655951][ T6390] inode_init_always_gfp+0xc6f/0xfb0 [ 136.655981][ T6390] alloc_inode+0x8e/0x250 [ 136.656013][ T6390] new_inode+0x22/0x1c0 [ 136.656047][ T6390] hugetlbfs_get_inode+0x39a/0x700 [ 136.656069][ T6390] hugetlb_file_setup+0x15b/0x5b0 [ 136.656083][ T6390] ksys_mmap_pgoff+0x242/0x610 [ 136.656098][ T6390] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 136.656110][ T6390] ? fput+0x7c/0x100 [ 136.656124][ T6390] ? __pfx___x64_sys_futex+0x10/0x10 [ 136.656140][ T6390] ? ksys_write+0x1ac/0x250 [ 136.656150][ T6390] ? __pfx_ksys_write+0x10/0x10 [ 136.656162][ T6390] __x64_sys_mmap+0x125/0x190 [ 136.656178][ T6390] do_syscall_64+0x123/0x790 [ 136.656193][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.656206][ T6390] RIP: 0033:0x7f3e4119e159 [ 136.656217][ T6390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.656229][ T6390] RSP: 002b:00007f3e420fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 136.656241][ T6390] RAX: ffffffffffffffda RBX: 00007f3e41425fa0 RCX: 00007f3e4119e159 [ 136.656248][ T6390] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 136.656256][ T6390] RBP: 00007f3e41235024 R08: ffffffffffffffff R09: 0000000000000000 [ 136.656263][ T6390] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 136.656271][ T6390] R13: 00007f3e41426038 R14: 00007f3e41425fa0 R15: 00007ffe3a02cbc8 [ 136.656287][ T6390] [ 136.865550][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.936933][ T6392] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 136.957456][ T6392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.172'. [ 137.070832][ T30] usb 5-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 137.261967][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.273734][ T30] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 137.287195][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.922040][ T5798] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 139.084928][ T5798] usb 3-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 139.095248][ T5798] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.105586][ T5798] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.119637][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.145673][ T5798] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 139.153312][ T5798] dvb_usb_af9035 3-1:1.0: probe with driver dvb_usb_af9035 failed with error -22 [ 139.328004][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 139.344957][ T5717] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 139.492142][ T30] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-110 [ 139.492256][ T30] dvb_usb_af9035 5-1:1.0: probe with driver dvb_usb_af9035 failed with error -110 [ 139.494251][ T10] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 139.494416][ T5717] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 139.495731][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 139.495759][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 139.495785][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 139.495812][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 139.495846][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.497103][ T5717] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 139.497129][ T5717] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 139.497165][ T5717] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 139.497191][ T5717] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 139.497223][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.580575][ T6405] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 139.580695][ T6405] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 139.668936][ T10] pl2303 1-1:1.0: pl2303 converter detected [ 139.671285][ T6402] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 139.671399][ T6402] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 139.699767][ T5717] pl2303 2-1:1.0: pl2303 converter detected [ 139.725208][ T5717] usb 2-1: pl2303 converter now attached to ttyUSB1 [ 139.736982][ T10] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 140.049090][ T5798] usb 5-1: USB disconnect, device number 5 [ 140.144810][ T6408] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 140.145124][ T6408] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 140.146884][ T6408] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 140.147559][ T6408] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 140.147607][ T6408] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 140.167258][ T6409] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -32 [ 140.167555][ T6409] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 140.170322][ T6409] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 140.170618][ T6409] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 140.170664][ T6409] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 140.225396][ T31] audit: type=1400 audit(1788012087.634:451): avc: denied { view } for pid=6412 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 140.713322][ T5798] usb 3-1: USB disconnect, device number 10 [ 140.791605][ T6419] batadv1: entered promiscuous mode [ 140.842629][ T31] audit: type=1400 audit(1788012088.244:452): avc: denied { execute } for pid=6418 comm="syz.2.179" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 141.366357][ T31] audit: type=1400 audit(1788012088.774:453): avc: denied { create } for pid=6427 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.386262][ T31] audit: type=1400 audit(1788012088.774:454): avc: denied { write } for pid=6427 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.531994][ T5798] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 141.572753][ T30] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 141.681989][ T5798] usb 4-1: Using ep0 maxpacket: 8 [ 141.687416][ T5798] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 141.697434][ T5798] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 141.706947][ T5798] usb 4-1: config 0 has no interface number 0 [ 141.706991][ T5798] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 141.707012][ T5798] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 141.707029][ T5798] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.707046][ T5798] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.707089][ T5798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.769898][ T5798] usb 4-1: config 0 descriptor?? [ 141.795422][ T5798] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 142.600392][ T30] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 142.600452][ T30] usb 5-1: too many configurations: 75, using maximum allowed: 8 [ 142.619867][ T30] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 142.627693][ T30] usb 5-1: can't read configurations, error -71 [ 142.654494][ T5798] usb 1-1: USB disconnect, device number 11 [ 142.670314][ T5798] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 142.679078][ T5798] pl2303 1-1:1.0: device disconnected [ 142.759787][ T31] audit: type=1400 audit(1788012090.164:455): avc: denied { watch } for pid=6425 comm="syz.3.181" path="/35" dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 142.775756][ T10] usb 2-1: USB disconnect, device number 11 [ 142.817503][ T10] pl2303 ttyUSB1: pl2303 converter now disconnected from ttyUSB1 [ 142.826127][ T10] pl2303 2-1:1.0: device disconnected [ 142.860693][ T6433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.902080][ T6433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.137960][ T6435] FAULT_INJECTION: forcing a failure. [ 143.137960][ T6435] name failslab, interval 1, probability 0, space 0, times 0 [ 143.138006][ T6435] CPU: 0 UID: 0 PID: 6435 Comm: syz.0.184 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.138039][ T6435] Tainted: [L]=SOFTLOCKUP [ 143.138048][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 143.138061][ T6435] Call Trace: [ 143.138068][ T6435] [ 143.138077][ T6435] dump_stack_lvl+0x100/0x190 [ 143.138111][ T6435] should_fail_ex.cold+0x5/0xa [ 143.138143][ T6435] should_failslab+0xc2/0x120 [ 143.138171][ T6435] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 143.138196][ T6435] ? __d_alloc+0x35/0xa50 [ 143.138226][ T6435] __d_alloc+0x35/0xa50 [ 143.138255][ T6435] d_alloc_pseudo+0x1c/0xc0 [ 143.138276][ T6435] alloc_file_pseudo+0x118/0x290 [ 143.138306][ T6435] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 143.138335][ T6435] ? hugetlbfs_get_inode+0x3f5/0x700 [ 143.138362][ T6435] hugetlb_file_setup+0x2a8/0x5b0 [ 143.138388][ T6435] ksys_mmap_pgoff+0x242/0x610 [ 143.138423][ T6435] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 143.138445][ T6435] ? fput+0x7c/0x100 [ 143.138469][ T6435] ? __pfx___x64_sys_futex+0x10/0x10 [ 143.138498][ T6435] ? ksys_write+0x1ac/0x250 [ 143.138518][ T6435] ? __pfx_ksys_write+0x10/0x10 [ 143.138542][ T6435] __x64_sys_mmap+0x125/0x190 [ 143.138569][ T6435] do_syscall_64+0x123/0x790 [ 143.138596][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.138619][ T6435] RIP: 0033:0x7fa1e479e159 [ 143.138638][ T6435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.138658][ T6435] RSP: 002b:00007fa1e55d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 143.138679][ T6435] RAX: ffffffffffffffda RBX: 00007fa1e4a25fa0 RCX: 00007fa1e479e159 [ 143.138694][ T6435] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 143.138708][ T6435] RBP: 00007fa1e4835024 R08: ffffffffffffffff R09: 0000000000000000 [ 143.138722][ T6435] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 143.138735][ T6435] R13: 00007fa1e4a26038 R14: 00007fa1e4a25fa0 R15: 00007ffd2f0fe968 [ 143.138764][ T6435] [ 143.285599][ T6437] netlink: 'syz.1.185': attribute type 58 has an invalid length. [ 143.285619][ T6437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.185'. [ 143.436872][ T31] audit: type=1400 audit(1788012090.844:456): avc: denied { write } for pid=6439 comm="syz.0.186" name="functions" dev="configfs" ino=8991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 144.277892][ T6443] 9pnet_fd: p9_fd_create_unix (6443): problem connecting socket: ./file0: -111 [ 144.288587][ T6443] 9p: Bad value for 'wfdno' [ 144.317344][ T31] audit: type=1400 audit(1788012091.694:457): avc: denied { ioctl } for pid=6445 comm="syz.0.189" path="socket:[15076]" dev="sockfs" ino=15076 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.332224][ T30] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 144.548012][ T30] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 144.571682][ T31] audit: type=1400 audit(1788012091.954:458): avc: denied { write } for pid=6445 comm="syz.0.189" name="ifname" dev="configfs" ino=15085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 144.571893][ T31] audit: type=1400 audit(1788012091.954:459): avc: denied { open } for pid=6445 comm="syz.0.189" path="/37/cfg/usb_gadget/g1/functions/eem.usb0/ifname" dev="configfs" ino=15085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 144.575488][ T5704] usb 4-1: USB disconnect, device number 12 [ 144.664490][ T30] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.664538][ T30] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.664561][ T30] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 144.664583][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.664624][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.673367][ T5704] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 145.182051][ T5704] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 145.285722][ T6444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.289491][ T6444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.305400][ T6444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.305816][ T6444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.322828][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 145.334701][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 145.343043][ T5704] usb 4-1: New USB device found, idVendor=0b57, idProduct=89b6, bcdDevice=c8.fb [ 145.348459][ T5704] usb 4-1: config 8 has an invalid interface number: 37 but max is 0 [ 145.348484][ T5704] usb 4-1: config 8 has no interface number 0 [ 145.348511][ T5704] usb 4-1: config 8 interface 37 has no altsetting 0 [ 145.350313][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.350337][ T5704] usb 4-1: Product: syz [ 145.350352][ T5704] usb 4-1: Manufacturer: syz [ 145.350368][ T5704] usb 4-1: SerialNumber: syz [ 145.716950][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 145.786622][ T5717] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 145.934192][ T31] audit: type=1400 audit(1788012093.334:460): avc: denied { mount } for pid=6442 comm="syz.1.188" name="/" dev="rpc_pipefs" ino=15767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 145.957801][ T10] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 145.962268][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 145.962298][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 145.962325][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 145.962371][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 145.962404][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.973022][ T6455] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 145.973191][ T6455] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 145.988849][ T10] pl2303 1-1:1.0: pl2303 converter detected [ 146.004104][ T10] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 146.012741][ T5717] usb 5-1: New USB device found, idVendor=066b, idProduct=2202, bcdDevice=9c.4a [ 146.017548][ T5717] usb 5-1: config 6 has an invalid interface number: 34 but max is 2 [ 146.017573][ T5717] usb 5-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 146.017593][ T5717] usb 5-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 146.017613][ T5717] usb 5-1: config 6 has an invalid interface number: 30 but max is 2 [ 146.017653][ T5717] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 146.017673][ T5717] usb 5-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 146.017694][ T5717] usb 5-1: config 6 has no interface number 0 [ 146.017710][ T5717] usb 5-1: config 6 has no interface number 1 [ 146.017754][ T5717] usb 5-1: config 6 interface 34 altsetting 42 has a duplicate endpoint with address 0xE, skipping [ 146.017797][ T5717] usb 5-1: config 6 interface 34 altsetting 42 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 146.017826][ T5717] usb 5-1: config 6 interface 34 altsetting 42 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 146.017854][ T5717] usb 5-1: config 6 interface 34 altsetting 42 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 146.017897][ T5717] usb 5-1: config 6 interface 30 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 146.017944][ T5717] usb 5-1: config 6 interface 34 has no altsetting 0 [ 146.017962][ T5717] usb 5-1: config 6 interface 30 has no altsetting 0 [ 146.029808][ T5717] usb 5-1: Dual-Role OTG device on HNP port [ 146.030086][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.030107][ T5717] usb 5-1: Product: í©ã´†ìª¸ã° [ 146.030123][ T5717] usb 5-1: Manufacturer: à°‰ [ 146.030139][ T5717] usb 5-1: SerialNumber:  [ 146.305655][ T30] gud 2-1:1.0: probe with driver gud failed with error -5 [ 146.381188][ T6462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.381673][ T6462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.489613][ T6457] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 146.516683][ T6457] bond1 (unregistering): Released all slaves [ 146.593288][ T6465] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 146.605544][ T6465] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 146.616836][ T6465] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 146.624033][ T6465] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 146.624097][ T6465] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 146.787763][ T5717] kaweth 5-1:6.34: couldn't find required endpoints [ 146.788731][ T5717] pegasus 5-1:6.34: Missing or invalid endpoints [ 146.816381][ T5717] kaweth 5-1:6.30: couldn't find required endpoints [ 146.816678][ T5717] pegasus 5-1:6.30: Missing or invalid endpoints [ 146.837396][ T5717] usb 5-1: USB disconnect, device number 8 [ 147.074367][ T5704] usbhid 4-1:8.37: couldn't find an input interrupt endpoint [ 147.076247][ T5704] usb 4-1: USB disconnect, device number 13 [ 147.331747][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.195'. [ 147.582123][ T30] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 147.684856][ T5704] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 147.733075][ T30] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 147.734023][ T30] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 147.734053][ T30] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 147.734078][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 147.734104][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 147.734136][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.737574][ T6474] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.737747][ T6474] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.741796][ T30] pl2303 5-1:1.0: pl2303 converter detected [ 147.751494][ T30] usb 5-1: pl2303 converter now attached to ttyUSB1 [ 147.912731][ T6477] 9pnet_fd: p9_fd_create_unix (6477): problem connecting socket: ./file0: -111 [ 148.414979][ T6474] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -32 [ 148.441380][ T6474] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 148.454734][ T6474] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 148.471514][ T6474] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 148.482494][ T6474] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 148.696188][ T10] usb 5-1: USB disconnect, device number 9 [ 148.905033][ T5723] usb 1-1: USB disconnect, device number 12 [ 149.136799][ T10] pl2303 ttyUSB1: pl2303 converter now disconnected from ttyUSB1 [ 149.137492][ T10] pl2303 5-1:1.0: device disconnected [ 149.139133][ T5717] usb 2-1: USB disconnect, device number 12 [ 149.190963][ T5723] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 149.191666][ T5723] pl2303 1-1:1.0: device disconnected [ 150.695006][ T5704] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 150.695062][ T5704] usb 3-1: too many configurations: 75, using maximum allowed: 8 [ 150.697349][ T5704] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 150.697381][ T5704] usb 3-1: can't read configurations, error -71 [ 150.825408][ T31] audit: type=1400 audit(1788012098.234:461): avc: denied { write } for pid=6490 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.305404][ T31] audit: type=1400 audit(1788012098.714:462): avc: denied { audit_read } for pid=6502 comm="syz.1.206" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 152.749627][ T6500] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 152.786291][ T6500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.205'. [ 153.197513][ T6517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.209'. [ 153.326772][ T6513] syzkaller0: entered promiscuous mode [ 153.326816][ T6513] syzkaller0: entered allmulticast mode [ 153.413907][ T6520] FAULT_INJECTION: forcing a failure. [ 153.413907][ T6520] name failslab, interval 1, probability 0, space 0, times 0 [ 153.413986][ T6520] CPU: 0 UID: 0 PID: 6520 Comm: syz.1.208 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.414021][ T6520] Tainted: [L]=SOFTLOCKUP [ 153.414031][ T6520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 153.414045][ T6520] Call Trace: [ 153.414053][ T6520] [ 153.414062][ T6520] dump_stack_lvl+0x100/0x190 [ 153.414100][ T6520] should_fail_ex.cold+0x5/0xa [ 153.414132][ T6520] should_failslab+0xc2/0x120 [ 153.414166][ T6520] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 153.414192][ T6520] ? __d_alloc+0x35/0xa50 [ 153.414226][ T6520] __d_alloc+0x35/0xa50 [ 153.414259][ T6520] d_alloc_pseudo+0x1c/0xc0 [ 153.414281][ T6520] alloc_file_pseudo+0x118/0x290 [ 153.414314][ T6520] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 153.414344][ T6520] ? hugetlbfs_get_inode+0x3f5/0x700 [ 153.414373][ T6520] hugetlb_file_setup+0x2a8/0x5b0 [ 153.414401][ T6520] ksys_mmap_pgoff+0x242/0x610 [ 153.414429][ T6520] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 153.414457][ T6520] ? xfd_validate_state+0x129/0x190 [ 153.414487][ T6520] __x64_sys_mmap+0x125/0x190 [ 153.414515][ T6520] do_syscall_64+0x123/0x790 [ 153.414544][ T6520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.414568][ T6520] RIP: 0033:0x7fb80e39e159 [ 153.414588][ T6520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.414611][ T6520] RSP: 002b:00007fb80f2e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 153.414635][ T6520] RAX: ffffffffffffffda RBX: 00007fb80e626180 RCX: 00007fb80e39e159 [ 153.414650][ T6520] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 153.414665][ T6520] RBP: 00007fb80e435024 R08: ffffffffffffffff R09: 0000000000000000 [ 153.414680][ T6520] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 153.414694][ T6520] R13: 00007fb80e626218 R14: 00007fb80e626180 R15: 00007ffcd3a1dbb8 [ 153.414726][ T6520] [ 153.912085][ T5704] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 154.113635][ T5704] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 154.134966][ T5704] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 154.135767][ T5704] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 154.135796][ T5704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 154.135822][ T5704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 154.135858][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.150119][ T6517] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.150263][ T6517] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.180328][ T6526] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 154.191124][ T5704] pl2303 5-1:1.0: pl2303 converter detected [ 154.227572][ T5704] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 154.386381][ T31] audit: type=1400 audit(1788012101.794:463): avc: denied { append } for pid=6527 comm="syz.1.211" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 154.564853][ T5797] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 154.605194][ T6518] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 154.605546][ T6518] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 154.605826][ T6518] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 154.606121][ T6518] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 154.606167][ T6518] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 154.722030][ T5797] usb 3-1: Using ep0 maxpacket: 8 [ 154.725245][ T5717] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 154.736511][ T5797] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 154.746823][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 154.746892][ T5797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.746933][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.782034][ T5797] usb 3-1: config 0 descriptor?? [ 154.798157][ T6543] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 154.882132][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 154.884152][ T5717] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 154.886818][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.886842][ T5717] usb 2-1: Product: syz [ 154.886859][ T5717] usb 2-1: Manufacturer: syz [ 154.886874][ T5717] usb 2-1: SerialNumber: syz [ 154.916149][ T5717] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 154.937854][ T6543] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 154.937936][ T6543] overlayfs: failed to look up (tracing) for ino (-66) [ 155.055271][ T5797] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 155.063998][ T5797] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 155.074224][ T5797] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 155.082108][ T5797] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 155.090683][ T5797] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 155.098648][ T5797] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 155.106556][ T5797] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 155.114323][ T5797] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 155.123138][ T5797] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 155.123168][ T5797] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 155.131041][ T5717] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 155.145551][ T5797] hid-multitouch 0003:1FD2:6007.0003: unbalanced collection at end of report description [ 155.156273][ T5797] hid-multitouch 0003:1FD2:6007.0003: probe with driver hid-multitouch failed with error -22 [ 155.244509][ T5717] usb 2-1: USB disconnect, device number 13 [ 155.255463][ T5797] usb 3-1: USB disconnect, device number 13 [ 155.414611][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.701765][ T31] audit: type=1400 audit(1788012103.104:464): avc: denied { name_connect } for pid=6546 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 155.754683][ T31] audit: type=1400 audit(1788012103.164:465): avc: denied { shutdown } for pid=6546 comm="syz.0.216" lport=56826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.811059][ T31] audit: type=1400 audit(1788012103.214:466): avc: denied { accept } for pid=6546 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 155.889193][ T31] audit: type=1400 audit(1788012103.294:467): avc: denied { getopt } for pid=6546 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.111235][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 156.124326][ T6552] bridge_slave_1: left allmulticast mode [ 156.124563][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.150991][ T6552] bridge_slave_0: left allmulticast mode [ 156.151019][ T6552] bridge_slave_0: left promiscuous mode [ 156.151199][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.252012][ T5717] usb 5-1: USB disconnect, device number 10 [ 156.274094][ T6553] tipc: Started in network mode [ 156.274130][ T6553] tipc: Node identity 4246, cluster identity 4711 [ 156.274142][ T6553] tipc: Node number set to 16966 [ 156.332385][ T5717] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 156.335873][ T5717] pl2303 5-1:1.0: device disconnected [ 156.444978][ T6561] syzkaller1: entered promiscuous mode [ 156.464879][ T6561] syzkaller1: entered allmulticast mode [ 156.807842][ T6568] FAULT_INJECTION: forcing a failure. [ 156.807842][ T6568] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 156.826455][ T6568] CPU: 0 UID: 0 PID: 6568 Comm: syz.2.224 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.826490][ T6568] Tainted: [L]=SOFTLOCKUP [ 156.826498][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 156.826516][ T6568] Call Trace: [ 156.826524][ T6568] [ 156.826533][ T6568] dump_stack_lvl+0x100/0x190 [ 156.826569][ T6568] should_fail_ex.cold+0x5/0xa [ 156.826599][ T6568] _copy_from_user+0x2e/0xd0 [ 156.826632][ T6568] copy_msghdr_from_user+0x9f/0x4c0 [ 156.826661][ T6568] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 156.826694][ T6568] ? rcu_is_watching+0x13/0xc0 [ 156.826720][ T6568] ? ___sys_sendmsg+0x19d/0x1e0 [ 156.826745][ T6568] ? kfree+0x1e5/0x6d0 [ 156.826777][ T6568] ___sys_sendmsg+0x106/0x1e0 [ 156.826807][ T6568] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.826845][ T6568] ? __fget_files+0x34/0x3d0 [ 156.826914][ T6568] ? __pfx___might_resched+0x10/0x10 [ 156.826941][ T6568] __sys_sendmmsg+0x20c/0x440 [ 156.826966][ T6568] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.826986][ T6568] ? ksys_write+0x190/0x250 [ 156.827027][ T6568] ? fput+0x7c/0x100 [ 156.827052][ T6568] ? ksys_write+0x1ac/0x250 [ 156.827071][ T6568] ? __pfx_ksys_write+0x10/0x10 [ 156.827096][ T6568] __x64_sys_sendmmsg+0x9c/0x100 [ 156.827117][ T6568] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.827141][ T6568] do_syscall_64+0x123/0x790 [ 156.827168][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.827190][ T6568] RIP: 0033:0x7f94fa59e159 [ 156.827208][ T6568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.827228][ T6568] RSP: 002b:00007f94fb52c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.827250][ T6568] RAX: ffffffffffffffda RBX: 00007f94fa825fa0 RCX: 00007f94fa59e159 [ 156.827264][ T6568] RDX: 0000000000000002 RSI: 0000200000002d80 RDI: 0000000000000004 [ 156.827278][ T6568] RBP: 00007f94fb52c090 R08: 0000000000000000 R09: 0000000000000000 [ 156.827291][ T6568] R10: 0000000040000004 R11: 0000000000000246 R12: 0000000000000001 [ 156.827305][ T6568] R13: 00007f94fa826038 R14: 00007f94fa825fa0 R15: 00007ffe0f440088 [ 156.827334][ T6568] [ 156.942538][ T5797] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 157.095000][ T5797] usb 5-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 157.105153][ T5797] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.105216][ T5797] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 157.105244][ T5797] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 157.105289][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.164125][ T5797] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 157.170598][ T5797] dvb_usb_af9035 5-1:1.0: probe with driver dvb_usb_af9035 failed with error -8 [ 157.348543][ T31] audit: type=1400 audit(1788012104.754:468): avc: denied { name_bind } for pid=6570 comm="syz.1.225" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 158.164537][ T6581] syzkaller0: entered promiscuous mode [ 158.164574][ T6581] syzkaller0: entered allmulticast mode [ 158.375032][ T31] audit: type=1400 audit(1788012105.784:469): avc: denied { mount } for pid=6583 comm="syz.2.228" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 158.400678][ T6584] overlayfs: missing 'lowerdir' [ 158.483188][ T31] audit: type=1400 audit(1788012105.894:470): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 159.529314][ T31] audit: type=1400 audit(1788012106.714:471): avc: denied { read write } for pid=6586 comm="syz.2.229" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 159.529388][ T31] audit: type=1400 audit(1788012106.714:472): avc: denied { open } for pid=6586 comm="syz.2.229" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 159.529449][ T31] audit: type=1400 audit(1788012106.804:473): avc: denied { ioctl } for pid=6586 comm="syz.2.229" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 159.602686][ T30] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 159.753041][ T30] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 159.765432][ T30] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 159.765471][ T30] usb 2-1: config 0 has no interface number 0 [ 159.765524][ T30] usb 2-1: config 0 interface 41 has no altsetting 0 [ 159.790837][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.790876][ T30] usb 2-1: Product: syz [ 159.790904][ T30] usb 2-1: Manufacturer: syz [ 159.790924][ T30] usb 2-1: SerialNumber: syz [ 159.812867][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 159.823673][ T5704] usb 5-1: USB disconnect, device number 11 [ 159.826274][ T6595] bridge_slave_1: left allmulticast mode [ 159.826298][ T6595] bridge_slave_1: left promiscuous mode [ 159.826478][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.848410][ T30] usb 2-1: config 0 descriptor?? [ 159.896947][ T6595] bridge_slave_0: left allmulticast mode [ 159.896996][ T6595] bridge_slave_0: left promiscuous mode [ 159.897203][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.952286][ T6596] tipc: Started in network mode [ 159.952326][ T6596] tipc: Node identity 4246, cluster identity 4711 [ 159.952339][ T6596] tipc: Node number set to 16966 [ 160.145285][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 160.392012][ T5704] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 160.549850][ T6606] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 161.140256][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'. [ 161.353129][ T30] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 161.365347][ T30] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 161.390814][ T30] usb 2-1: USB disconnect, device number 14 [ 161.435651][ T5704] usb 4-1: device descriptor read/64, error -71 [ 161.512035][ T5797] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 161.664458][ T5797] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 161.672035][ T5704] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 161.684172][ T5797] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 161.684216][ T5797] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 161.684255][ T5797] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 161.684286][ T5797] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 161.684326][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.780277][ T6608] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 161.787939][ T6608] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 161.799332][ T5797] pl2303 3-1:1.0: pl2303 converter detected [ 161.811455][ T5797] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 161.840351][ T6617] kvm [6615]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800 [ 161.856523][ T6617] kvm [6615]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 161.963778][ T5704] usb 4-1: device descriptor read/64, error -71 [ 162.012390][ T31] audit: type=1400 audit(1788012109.414:474): avc: denied { cmd } for pid=6619 comm="iou-wrk-6620" path="socket:[16721]" dev="sockfs" ino=16721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 162.073379][ T5704] usb usb4-port1: attempt power cycle [ 162.172801][ T6611] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 162.181257][ T6611] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 162.190491][ T6611] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 162.197943][ T6611] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 162.198006][ T6611] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 162.412037][ T5704] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 162.437696][ T5704] usb 4-1: device descriptor read/8, error -71 [ 162.448964][ T6617] kvm [6615]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800 [ 162.458831][ T6617] kvm [6615]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 162.614714][ T6634] jffs2: notice: (6634) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 162.673014][ T5704] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 162.694319][ T5704] usb 4-1: device descriptor read/8, error -71 [ 162.803501][ T5704] usb usb4-port1: unable to enumerate USB device [ 162.920309][ T31] audit: type=1400 audit(1788012110.324:475): avc: denied { create } for pid=6637 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.923808][ T31] audit: type=1400 audit(1788012110.334:476): avc: denied { write } for pid=6637 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.396574][ T6656] FAULT_INJECTION: forcing a failure. [ 163.396574][ T6656] name failslab, interval 1, probability 0, space 0, times 0 [ 163.396653][ T6656] CPU: 0 UID: 0 PID: 6656 Comm: syz.3.244 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.396689][ T6656] Tainted: [L]=SOFTLOCKUP [ 163.396698][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 163.396712][ T6656] Call Trace: [ 163.396720][ T6656] [ 163.396729][ T6656] dump_stack_lvl+0x100/0x190 [ 163.396766][ T6656] should_fail_ex.cold+0x5/0xa [ 163.396799][ T6656] should_failslab+0xc2/0x120 [ 163.396826][ T6656] __kmalloc_noprof+0xfc/0x840 [ 163.396850][ T6656] ? __memcg_list_lru_alloc+0x418/0x680 [ 163.396886][ T6656] __memcg_list_lru_alloc+0x418/0x680 [ 163.396916][ T6656] ? xa_load+0x149/0x2c0 [ 163.396957][ T6656] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 163.396996][ T6656] ? rcu_read_unlock+0x17/0x60 [ 163.397035][ T6656] memcg_list_lru_alloc+0xd3/0x100 [ 163.397072][ T6656] __memcg_slab_post_alloc_hook+0x27b/0x1270 [ 163.397115][ T6656] ? kasan_save_track+0x14/0x30 [ 163.397142][ T6656] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 163.397167][ T6656] ? __d_alloc+0x35/0xa50 [ 163.397201][ T6656] __d_alloc+0x35/0xa50 [ 163.397233][ T6656] d_alloc_pseudo+0x1c/0xc0 [ 163.397254][ T6656] alloc_file_pseudo+0x118/0x290 [ 163.397285][ T6656] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 163.397315][ T6656] ? hugetlbfs_get_inode+0x3f5/0x700 [ 163.397344][ T6656] hugetlb_file_setup+0x2a8/0x5b0 [ 163.397371][ T6656] ksys_mmap_pgoff+0x242/0x610 [ 163.397399][ T6656] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 163.397425][ T6656] ? xfd_validate_state+0x129/0x190 [ 163.397453][ T6656] __x64_sys_mmap+0x125/0x190 [ 163.397483][ T6656] do_syscall_64+0x123/0x790 [ 163.397510][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.397534][ T6656] RIP: 0033:0x7f3e4119e159 [ 163.397553][ T6656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.397576][ T6656] RSP: 002b:00007f3e420ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 163.397599][ T6656] RAX: ffffffffffffffda RBX: 00007f3e41426180 RCX: 00007f3e4119e159 [ 163.397615][ T6656] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 163.397629][ T6656] RBP: 00007f3e41235024 R08: ffffffffffffffff R09: 0000000000000000 [ 163.397644][ T6656] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 163.397659][ T6656] R13: 00007f3e41426218 R14: 00007f3e41426180 R15: 00007ffe3a02cbc8 [ 163.397690][ T6656] [ 163.400320][ T6654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.645954][ T6655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.646574][ T6655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.647385][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.647782][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.649582][ T6655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.649917][ T6655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.659237][ T6660] misc userio: Invalid payload size [ 163.661348][ T6655] misc userio: No port type given on /dev/userio [ 163.851597][ T5704] usb 3-1: USB disconnect, device number 14 [ 163.876787][ T5704] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 163.877459][ T5704] pl2303 3-1:1.0: device disconnected [ 164.007250][ T31] audit: type=1800 audit(1788012111.414:477): pid=6668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.249" name="(" dev="sda1" ino=2047 res=0 errno=0 [ 164.032338][ T5723] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 164.162007][ T5723] usb 2-1: device descriptor read/64, error -71 [ 164.191062][ T6673] 9p: Bad value for 'wfdno' [ 164.387331][ T5704] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 164.632755][ T989] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 164.662016][ T5723] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 164.762552][ T5704] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 164.802342][ T5704] usb 3-1: config 128 has too many interfaces: 254, using maximum allowed: 32 [ 164.802385][ T5704] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 164.802420][ T5704] usb 3-1: config 128 has 0 interfaces, different from the descriptor's value: 254 [ 164.914860][ T5723] usb 2-1: device descriptor read/64, error -71 [ 165.424798][ T5723] usb usb2-port1: attempt power cycle [ 165.475163][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.475212][ T5704] usb 3-1: Product: syz [ 165.475236][ T5704] usb 3-1: Manufacturer: syz [ 165.475256][ T5704] usb 3-1: SerialNumber: syz [ 166.069968][ T5723] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 166.145385][ T5723] usb 2-1: device descriptor read/8, error -71 [ 166.229449][ T6675] netlink: 'syz.4.253': attribute type 2 has an invalid length. [ 166.382033][ T5723] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 166.532031][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 166.532149][ T6683] bridge_slave_1: left allmulticast mode [ 166.532583][ T6683] bridge_slave_1: left promiscuous mode [ 167.013186][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.021901][ T6683] bridge_slave_0: left allmulticast mode [ 167.054216][ T6683] bridge_slave_0: left promiscuous mode [ 167.055852][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.082467][ T5723] usb 2-1: device descriptor read/8, error -71 [ 167.142359][ T6685] tipc: Started in network mode [ 167.142386][ T6685] tipc: Node identity 4246, cluster identity 4711 [ 167.142411][ T6685] tipc: Node number set to 16966 [ 167.181849][ T6687] block nbd1: not configured, cannot reconfigure [ 167.192228][ T5723] usb usb2-port1: unable to enumerate USB device [ 168.359916][ T31] audit: type=1400 audit(1788012115.514:478): avc: denied { remount } for pid=6688 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 168.457534][ T5717] usb 3-1: USB disconnect, device number 15 [ 168.595095][ T6699] 9pnet_fd: p9_fd_create_unix (6699): problem connecting socket: ./file0: -111 [ 168.613730][ T6699] 9p: Bad value for 'wfdno' [ 169.061746][ T989] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 169.061809][ T989] usb 1-1: too many configurations: 75, using maximum allowed: 8 [ 169.063076][ T989] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 169.063108][ T989] usb 1-1: can't read configurations, error -71 [ 169.149287][ T31] audit: type=1400 audit(1788012116.554:479): avc: denied { ioctl } for pid=6705 comm="syz.2.259" path="socket:[17696]" dev="sockfs" ino=17696 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.151340][ T31] audit: type=1400 audit(1788012116.554:480): avc: denied { bind } for pid=6705 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.153329][ T31] audit: type=1400 audit(1788012116.564:481): avc: denied { listen } for pid=6705 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.153735][ T31] audit: type=1400 audit(1788012116.564:482): avc: denied { connect } for pid=6705 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.254730][ T31] audit: type=1400 audit(1788012116.664:483): avc: denied { read } for pid=6705 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.438508][ T31] audit: type=1400 audit(1788012116.844:484): avc: denied { node_bind } for pid=6713 comm="syz.1.261" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 169.692228][ T6718] FAULT_INJECTION: forcing a failure. [ 169.692228][ T6718] name failslab, interval 1, probability 0, space 0, times 0 [ 169.692316][ T6718] CPU: 0 UID: 0 PID: 6718 Comm: syz.0.262 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.692351][ T6718] Tainted: [L]=SOFTLOCKUP [ 169.692360][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 169.692375][ T6718] Call Trace: [ 169.692383][ T6718] [ 169.692392][ T6718] dump_stack_lvl+0x100/0x190 [ 169.692430][ T6718] should_fail_ex.cold+0x5/0xa [ 169.692465][ T6718] should_failslab+0xc2/0x120 [ 169.692493][ T6718] kmem_cache_alloc_noprof+0x92/0x6a0 [ 169.692516][ T6718] ? d_instantiate+0x8a/0xb0 [ 169.692545][ T6718] ? alloc_empty_file+0x5b/0x1c0 [ 169.692579][ T6718] alloc_empty_file+0x5b/0x1c0 [ 169.692609][ T6718] alloc_file_pseudo+0x183/0x290 [ 169.692640][ T6718] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 169.692671][ T6718] ? hugetlbfs_get_inode+0x3f5/0x700 [ 169.692700][ T6718] hugetlb_file_setup+0x2a8/0x5b0 [ 169.692727][ T6718] ksys_mmap_pgoff+0x242/0x610 [ 169.692756][ T6718] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 169.692781][ T6718] ? xfd_validate_state+0x129/0x190 [ 169.692812][ T6718] __x64_sys_mmap+0x125/0x190 [ 169.692841][ T6718] do_syscall_64+0x123/0x790 [ 169.692869][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.692893][ T6718] RIP: 0033:0x7fa1e479e159 [ 169.692912][ T6718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.692934][ T6718] RSP: 002b:00007fa1e5592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 169.692958][ T6718] RAX: ffffffffffffffda RBX: 00007fa1e4a26180 RCX: 00007fa1e479e159 [ 169.692974][ T6718] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 169.692988][ T6718] RBP: 00007fa1e4835024 R08: ffffffffffffffff R09: 0000000000000000 [ 169.693003][ T6718] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 169.693017][ T6718] R13: 00007fa1e4a26218 R14: 00007fa1e4a26180 R15: 00007ffd2f0fe968 [ 169.693049][ T6718] [ 170.062609][ T31] audit: type=1400 audit(1788012117.304:485): avc: denied { write } for pid=6713 comm="syz.1.261" name="configs" dev="configfs" ino=8992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.062789][ T31] audit: type=1400 audit(1788012117.304:486): avc: denied { create } for pid=6713 comm="syz.1.261" name="c.1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 170.062892][ T31] audit: type=1400 audit(1788012117.314:487): avc: denied { write } for pid=6713 comm="syz.1.261" name="functions" dev="configfs" ino=8991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.071818][ T989] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 171.322335][ T989] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 171.333407][ T989] usb 1-1: Dual-Role OTG device on HNP port [ 171.339481][ T989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.364074][ T989] gspca_main: spca501-2.14.0 probing 0000:0000 [ 171.370788][ T989] gspca_spca501: reg write: error -32 [ 171.376292][ T989] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 171.383363][ T989] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 171.392444][ T989] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 171.483153][ T6741] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(855638020.0.4294901760), cmd(13) [ 171.842025][ T5717] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 171.842025][ T989] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 172.002518][ T989] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 172.002790][ T5717] usb 5-1: New USB device found, idVendor=0e41, idProduct=4151, bcdDevice= 0.40 [ 172.006010][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.006034][ T5717] usb 5-1: Product: syz [ 172.006050][ T5717] usb 5-1: Manufacturer: syz [ 172.006066][ T5717] usb 5-1: SerialNumber: syz [ 172.033742][ T989] usb 2-1: config 128 has too many interfaces: 254, using maximum allowed: 32 [ 172.033768][ T989] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 172.033789][ T989] usb 2-1: config 128 has 0 interfaces, different from the descriptor's value: 254 [ 172.074604][ T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.074641][ T989] usb 2-1: Product: syz [ 172.074673][ T989] usb 2-1: Manufacturer: syz [ 172.074690][ T989] usb 2-1: SerialNumber: syz [ 172.084467][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 172.132357][ T4922] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 172.235166][ T5717] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 172.244342][ T5717] usb 5-1: unit 4 not found! [ 172.252985][ T157] Bluetooth: Error in BCSP hdr checksum [ 172.311656][ T5717] usb 5-1: USB disconnect, device number 12 [ 172.318335][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 172.328503][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.338733][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 172.348468][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 172.348510][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.348558][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.495524][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 172.954879][ T3307] Bluetooth: Error in BCSP hdr checksum [ 173.065146][ T6750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.087304][ T6750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.108911][ T6754] 9pnet_fd: p9_fd_create_unix (6754): problem connecting socket: ./file0: -111 [ 173.128103][ T6750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.148358][ T6750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.189481][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'. [ 173.456816][ T6754] 9p: Bad value for 'wfdno' [ 173.522236][ T6760] FAULT_INJECTION: forcing a failure. [ 173.522236][ T6760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.522292][ T6760] CPU: 1 UID: 0 PID: 6760 Comm: syz.4.273 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.522319][ T6760] Tainted: [L]=SOFTLOCKUP [ 173.522325][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 173.522336][ T6760] Call Trace: [ 173.522345][ T6760] [ 173.522353][ T6760] dump_stack_lvl+0x100/0x190 [ 173.522389][ T6760] should_fail_ex.cold+0x5/0xa [ 173.522419][ T6760] _copy_to_user+0x32/0xd0 [ 173.522451][ T6760] simple_read_from_buffer+0xcb/0x170 [ 173.522478][ T6760] proc_fail_nth_read+0x1af/0x230 [ 173.522503][ T6760] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.522528][ T6760] ? rw_verify_area+0xce/0x6d0 [ 173.522558][ T6760] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.522581][ T6760] vfs_read+0x1e4/0xb40 [ 173.522612][ T6760] ? lock_acquire+0x1d1/0x380 [ 173.522632][ T6760] ? __fget_files+0x34/0x3d0 [ 173.522674][ T6760] ? __pfx_vfs_read+0x10/0x10 [ 173.522703][ T6760] ? find_held_lock+0x2b/0x80 [ 173.522731][ T6760] ? __fget_files+0x215/0x3d0 [ 173.522759][ T6760] ? __fget_files+0x21f/0x3d0 [ 173.522790][ T6760] ksys_read+0x12a/0x250 [ 173.522820][ T6760] ? __pfx_ksys_read+0x10/0x10 [ 173.522859][ T6760] do_syscall_64+0x123/0x790 [ 173.522885][ T6760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.522906][ T6760] RIP: 0033:0x7f9fe975e98e [ 173.522924][ T6760] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 173.522944][ T6760] RSP: 002b:00007f9fea617fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.522964][ T6760] RAX: ffffffffffffffda RBX: 00007f9fea6186c0 RCX: 00007f9fe975e98e [ 173.522978][ T6760] RDX: 000000000000000f RSI: 00007f9fea6180a0 RDI: 0000000000000003 [ 173.522991][ T6760] RBP: 00007f9fea618090 R08: 0000000000000000 R09: 0000000000000000 [ 173.523004][ T6760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.523017][ T6760] R13: 00007f9fe9a26128 R14: 00007f9fe9a26090 R15: 00007ffdc690e3f8 [ 173.523046][ T6760] [ 174.063722][ T5613] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 174.075394][ T10] gud 3-1:1.0: probe with driver gud failed with error -5 [ 174.189863][ T6767] syzkaller0: entered promiscuous mode [ 174.189892][ T6767] syzkaller0: entered allmulticast mode [ 174.470316][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 174.470711][ T31] audit: type=1400 audit(1788012121.874:496): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 174.638956][ T989] usb 2-1: USB disconnect, device number 19 [ 174.736402][ T6781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.736797][ T6781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.970596][ T3307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.992308][ T989] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 175.132954][ T31] audit: type=1400 audit(1788012122.534:497): avc: denied { write } for pid=6775 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 175.164611][ T989] usb 2-1: Using ep0 maxpacket: 32 [ 175.166264][ T989] usb 2-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 175.167433][ T989] usb 2-1: too many endpoints for config 0 interface 0 altsetting 4: 132, using maximum allowed: 30 [ 175.167473][ T989] usb 2-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 132 [ 175.167500][ T989] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.167531][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.171170][ T989] usb 2-1: config 0 descriptor?? [ 175.178884][ T3307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.252922][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 175.265725][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 175.305637][ T3307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.419272][ T3307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.447780][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.453386][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.454094][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.454897][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.455472][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.490025][ T31] audit: type=1400 audit(1788012122.894:498): avc: denied { accept } for pid=6778 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.533354][ T10] libceph: connect (1)[c::]:6789 error -101 [ 175.533557][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 175.663027][ T6793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=6793 comm=syz.4.284 [ 175.668475][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 175.687049][ T6793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=6793 comm=syz.4.284 [ 176.042985][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 176.043173][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 176.053523][ T6808] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 176.172269][ T6808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.285'. [ 176.732472][ T5704] usb 3-1: USB disconnect, device number 16 [ 177.077969][ T31] audit: type=1400 audit(1788012124.484:499): avc: denied { write } for pid=6804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.162467][ T31] audit: type=1400 audit(1788012124.564:500): avc: denied { write } for pid=6821 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.329152][ T3307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.346996][ T3307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.359309][ T3307] bond0 (unregistering): Released all slaves [ 177.396216][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 177.492139][ T4922] Bluetooth: hci1: command tx timeout [ 177.583481][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 177.585498][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 177.626642][ T3307] tipc: Left network mode [ 177.653083][ T6824] kvm [6823]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800 [ 177.666485][ T6824] kvm [6823]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 177.727489][ T6786] ceph: No mds server is up or the cluster is laggy [ 178.001206][ T10] usb 2-1: USB disconnect, device number 20 [ 178.305332][ T6845] rdma_op ffff88807b701238 conn xmit_rdma 0000000000000000 [ 178.582110][ T5797] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 179.165802][ T6790] lo speed is unknown, defaulting to 1000 [ 179.212625][ T5797] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 179.226418][ T5797] usb 2-1: config 128 has too many interfaces: 254, using maximum allowed: 32 [ 179.226478][ T5797] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 179.226502][ T5797] usb 2-1: config 128 has 0 interfaces, different from the descriptor's value: 254 [ 179.266329][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.266370][ T5797] usb 2-1: Product: syz [ 179.266401][ T5797] usb 2-1: Manufacturer: syz [ 179.266421][ T5797] usb 2-1: SerialNumber: syz [ 179.359200][ T5717] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 179.406187][ T31] audit: type=1400 audit(1788012126.814:501): avc: denied { write } for pid=6829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.572035][ T4922] Bluetooth: hci1: command tx timeout [ 179.621540][ T5717] usb 5-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 179.628056][ T5717] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.628125][ T5717] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 179.628149][ T5717] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 179.628188][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.655211][ T5717] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 179.655278][ T5717] dvb_usb_af9035 5-1:1.0: probe with driver dvb_usb_af9035 failed with error -8 [ 180.424283][ T31] audit: type=1400 audit(1788012127.834:502): avc: denied { write } for pid=6857 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.098887][ T31] audit: type=1400 audit(1788012128.504:503): avc: denied { write } for pid=6865 comm="syz.0.293" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 181.128590][ T31] audit: type=1400 audit(1788012128.534:504): avc: denied { open } for pid=6865 comm="syz.0.293" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 181.130063][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 181.191362][ T31] audit: type=1400 audit(1788012128.594:505): avc: denied { ioctl } for pid=6865 comm="syz.0.293" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 181.246838][ T6867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.257234][ T5717] usb 2-1: USB disconnect, device number 21 [ 181.332505][ T6867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.652021][ T4922] Bluetooth: hci1: command tx timeout [ 181.699151][ T6870] 9pnet_fd: p9_fd_create_unix (6870): problem connecting socket: ./file0: -111 [ 181.730008][ T6870] 9p: Bad value for 'wfdno' [ 183.486472][ T6872] smpboot: CPU 1 is now offline [ 183.662174][ T4922] Bluetooth: hci1: command tx timeout [ 183.715191][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.725175][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.794061][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.794291][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.838795][ T6875] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 183.977656][ T5717] usb 5-1: USB disconnect, device number 13 [ 185.672353][ T31] audit: type=1400 audit(1788012133.064:506): avc: denied { write } for pid=6874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.887683][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'. [ 185.985047][ T6890] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 186.049803][ T6891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.298'. [ 186.300101][ T3307] hsr_slave_0: left promiscuous mode [ 186.315867][ T3307] hsr_slave_1: left promiscuous mode [ 186.316839][ T3307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.316887][ T3307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.367923][ T3307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.367955][ T3307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.404136][ T31] audit: type=1400 audit(1788012133.814:507): avc: denied { write } for pid=6899 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.543093][ T3307] veth1_macvtap: left promiscuous mode [ 186.543648][ T3307] veth0_macvtap: left promiscuous mode [ 186.546269][ T3307] veth1_vlan: left promiscuous mode [ 186.552538][ T3307] veth0_vlan: left promiscuous mode [ 186.734672][ T5797] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 186.891391][ T5797] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 186.901297][ T5797] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.901368][ T5797] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 186.901391][ T5797] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 186.901415][ T5797] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.901462][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.491144][ T3307] team0 (unregistering): Port device team_slave_1 removed [ 187.544961][ T3307] team0 (unregistering): Port device team_slave_0 removed [ 187.590035][ T6903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.599853][ T6903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.625566][ T6903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.626008][ T6903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.632525][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.301'. [ 188.077389][ T6897] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 188.101525][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 188.469348][ T6916] ip_tables: iptables: counters copy to user failed while replacing table [ 188.490522][ T5797] [drm] Initialized gud 1.0.0 for 5-1:1.0 on minor 1 [ 188.530435][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.541573][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.627756][ T31] audit: type=1400 audit(1788012136.034:508): avc: denied { associate } for pid=6914 comm="syz.0.305" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 188.710737][ T31] audit: type=1400 audit(1788012136.114:509): avc: denied { getopt } for pid=6914 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.719580][ T31] audit: type=1400 audit(1788012136.114:510): avc: denied { write } for pid=6914 comm="syz.0.305" name="rt_acct" dev="proc" ino=4026533140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 188.861322][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.862528][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.029247][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.029360][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.032940][ T6790] bridge_slave_0: entered allmulticast mode [ 189.041889][ T6790] bridge_slave_0: entered promiscuous mode [ 189.063932][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.064065][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.064198][ T6790] bridge_slave_1: entered allmulticast mode [ 189.071119][ T6790] bridge_slave_1: entered promiscuous mode [ 189.198911][ T6932] FAULT_INJECTION: forcing a failure. [ 189.198911][ T6932] name failslab, interval 1, probability 0, space 0, times 0 [ 189.200280][ T6790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.213620][ T6932] CPU: 0 UID: 0 PID: 6932 Comm: syz.1.304 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.213654][ T6932] Tainted: [L]=SOFTLOCKUP [ 189.213662][ T6932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 189.213674][ T6932] Call Trace: [ 189.213681][ T6932] [ 189.213689][ T6932] dump_stack_lvl+0x100/0x190 [ 189.213726][ T6932] should_fail_ex.cold+0x5/0xa [ 189.213743][ T6932] should_failslab+0xc2/0x120 [ 189.213757][ T6932] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 189.213770][ T6932] ? sock_alloc_inode+0x26/0x2c0 [ 189.213793][ T6932] ? __pfx_sock_alloc_inode+0x10/0x10 [ 189.213818][ T6932] sock_alloc_inode+0x26/0x2c0 [ 189.213841][ T6932] ? __pfx_sock_alloc_inode+0x10/0x10 [ 189.213863][ T6932] alloc_inode+0x68/0x250 [ 189.213894][ T6932] sock_alloc+0x44/0x280 [ 189.213914][ T6932] ? security_socket_create+0x7f/0x250 [ 189.213946][ T6932] __sock_create+0xc2/0x860 [ 189.213980][ T6932] __sys_socketpair+0x1e4/0x5b0 [ 189.214007][ T6932] ? __pfx___sys_socketpair+0x10/0x10 [ 189.214022][ T6932] ? xfd_validate_state+0x129/0x190 [ 189.214039][ T6932] __x64_sys_socketpair+0x96/0x100 [ 189.214053][ T6932] ? lockdep_hardirqs_on+0x7d/0x110 [ 189.214069][ T6932] do_syscall_64+0x123/0x790 [ 189.214095][ T6932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.214118][ T6932] RIP: 0033:0x7fb80e39e159 [ 189.214137][ T6932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.214153][ T6932] RSP: 002b:00007fb80f301028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 189.214165][ T6932] RAX: ffffffffffffffda RBX: 00007fb80e626090 RCX: 00007fb80e39e159 [ 189.214173][ T6932] RDX: 0000000000000000 RSI: 0000000100000005 RDI: 0000000000000029 [ 189.214180][ T6932] RBP: 00007fb80f301090 R08: 0000000000000000 R09: 0000000000000000 [ 189.214187][ T6932] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.214194][ T6932] R13: 00007fb80e626128 R14: 00007fb80e626090 R15: 00007ffcd3a1dbb8 [ 189.214210][ T6932] [ 189.214372][ T6932] socket: no more sockets [ 189.225467][ T6790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.375350][ T6790] team0: Port device team_slave_0 added [ 189.389928][ T6790] team0: Port device team_slave_1 added [ 189.508860][ T31] audit: type=1400 audit(1788012136.914:511): avc: denied { write } for pid=6921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.517477][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.517493][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.517537][ T6790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.521016][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.521029][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.521053][ T6790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.779337][ T6790] hsr_slave_0: entered promiscuous mode [ 189.780454][ T6790] hsr_slave_1: entered promiscuous mode [ 189.781470][ T6790] debugfs: 'hsr0' already exists in 'hsr' [ 189.781489][ T6790] Cannot create hsr debugfs directory [ 189.851199][ T31] audit: type=1400 audit(1788012137.254:512): avc: denied { write } for pid=6939 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.021709][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4 [ 190.260114][ T6946] FAULT_INJECTION: forcing a failure. [ 190.260114][ T6946] name failslab, interval 1, probability 0, space 0, times 0 [ 190.260157][ T6946] CPU: 1 UID: 0 PID: 6946 Comm: syz.2.307 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.260184][ T6946] Tainted: [L]=SOFTLOCKUP [ 190.260191][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 190.260200][ T6946] Call Trace: [ 190.260207][ T6946] [ 190.260214][ T6946] dump_stack_lvl+0x100/0x190 [ 190.260252][ T6946] should_fail_ex.cold+0x5/0xa [ 190.260282][ T6946] should_failslab+0xc2/0x120 [ 190.260308][ T6946] __kmalloc_noprof+0xfc/0x840 [ 190.260327][ T6946] ? rcu_is_watching+0x13/0xc0 [ 190.260351][ T6946] ? tomoyo_realpath_from_path+0xb6/0x690 [ 190.260386][ T6946] tomoyo_realpath_from_path+0xb6/0x690 [ 190.260414][ T6946] tomoyo_path_number_perm+0x23c/0x580 [ 190.260443][ T6946] ? tomoyo_path_number_perm+0x22e/0x580 [ 190.260481][ T6946] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 190.260523][ T6946] ? __lock_acquire+0x4c5/0x1ec0 [ 190.260564][ T6946] ? __fget_files+0x34/0x3d0 [ 190.260589][ T6946] ? find_held_lock+0x2b/0x80 [ 190.260615][ T6946] ? hook_file_ioctl_common+0x140/0x440 [ 190.260661][ T6946] ? __fget_files+0x21f/0x3d0 [ 190.260694][ T6946] security_file_ioctl+0xd3/0x230 [ 190.260746][ T6946] __x64_sys_ioctl+0xb7/0x210 [ 190.260782][ T6946] do_syscall_64+0x123/0x790 [ 190.260808][ T6946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.260830][ T6946] RIP: 0033:0x7f94fa59e159 [ 190.260853][ T6946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.260880][ T6946] RSP: 002b:00007f94fb52c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.260904][ T6946] RAX: ffffffffffffffda RBX: 00007f94fa825fa0 RCX: 00007f94fa59e159 [ 190.260923][ T6946] RDX: 0000200000000000 RSI: 0000000040084d02 RDI: 0000000000000003 [ 190.260937][ T6946] RBP: 00007f94fb52c090 R08: 0000000000000000 R09: 0000000000000000 [ 190.260963][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.260976][ T6946] R13: 00007f94fa826038 R14: 00007f94fa825fa0 R15: 00007ffe0f440088 [ 190.261006][ T6946] [ 190.261056][ T6946] ERROR: Out of memory at tomoyo_realpath_from_path. [ 190.553600][ T31] audit: type=1400 audit(1788012137.964:513): avc: denied { create } for pid=6948 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 191.274972][ T5605] Bluetooth: hci4: command 0x0406 tx timeout [ 191.276297][ T5605] Bluetooth: hci2: command 0x0406 tx timeout [ 191.276332][ T5605] Bluetooth: hci3: command 0x0406 tx timeout [ 191.289208][ T6952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.308'. [ 191.298940][ T6952] netlink: 112 bytes leftover after parsing attributes in process `syz.2.308'. [ 191.954125][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.963598][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.978023][ T31] audit: type=1400 audit(1788012139.384:514): avc: denied { name_bind } for pid=6955 comm="syz.0.310" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 192.205258][ T6790] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 192.226270][ T6790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.227522][ T6790] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 192.263150][ T6790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.268326][ T6790] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 192.278476][ T6790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.282084][ T6790] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 192.293883][ T6790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.627218][ T6790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.677635][ T6790] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.700484][ T3390] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.700612][ T3390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.721775][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.723061][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.843988][ T31] audit: type=1400 audit(1788012140.254:515): avc: denied { create } for pid=6967 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 192.856110][ T31] audit: type=1400 audit(1788012140.254:516): avc: denied { write } for pid=6967 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 193.207719][ T6976] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 193.365686][ T6976] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 193.366700][ T6976] overlayfs: failed to look up (tracing) for ino (-66) [ 194.319743][ T5797] Console: switching to colour frame buffer device 128x48 [ 194.353391][ T5797] gud 5-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 194.401182][ T989] usb 5-1: USB disconnect, device number 14 [ 194.808992][ T6790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.943389][ T989] Console: switching to colour VGA+ 80x1 [ 195.099789][ T31] audit: type=1400 audit(1788012142.504:517): avc: denied { read } for pid=6967 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 195.189416][ T31] audit: type=1400 audit(1788012142.594:518): avc: denied { setopt } for pid=6967 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 195.542271][ T7006] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 195.642128][ T7006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.316'. [ 195.999725][ T7001] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 196.037076][ T7001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.314'. [ 196.845503][ T31] audit: type=1400 audit(1788012144.254:519): avc: denied { create } for pid=7016 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 196.848450][ T31] audit: type=1400 audit(1788012144.254:520): avc: denied { connect } for pid=7016 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 196.862581][ T31] audit: type=1400 audit(1788012144.254:521): avc: denied { write } for pid=7016 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 197.011775][ T6790] veth0_vlan: entered promiscuous mode [ 197.191183][ T6790] veth1_vlan: entered promiscuous mode [ 197.298267][ T6790] veth0_macvtap: entered promiscuous mode [ 197.322690][ T6790] veth1_macvtap: entered promiscuous mode [ 197.375576][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.397844][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.445719][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.447675][ T3390] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.447719][ T3390] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.447754][ T3390] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.543434][ T5704] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 197.619971][ T3356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.620012][ T3356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.713927][ T5704] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 197.728669][ T5704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.741004][ T5704] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 197.741033][ T5704] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 197.741058][ T5704] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.741100][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.756524][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.756542][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.885992][ T31] audit: type=1400 audit(1788012145.294:522): avc: denied { mounton } for pid=6790 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 197.889268][ T31] audit: type=1400 audit(1788012145.294:523): avc: denied { mount } for pid=6790 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 198.260929][ T7061] smpboot: CPU 1 is now offline [ 198.294831][ T31] audit: type=1400 audit(1788012145.704:524): avc: denied { watch_reads } for pid=7065 comm="syz.5.325" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 198.367851][ T7066] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 198.463581][ T7043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.488352][ T7043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.519189][ T7043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.519582][ T7043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.544187][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.321'. [ 198.745798][ T7078] syzkaller0: entered promiscuous mode [ 198.745822][ T7078] syzkaller0: entered allmulticast mode [ 200.280462][ T5704] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1 [ 200.550073][ T7084] syzkaller0: entered promiscuous mode [ 200.550124][ T7084] syzkaller0: entered allmulticast mode [ 200.577971][ T31] audit: type=1400 audit(1788012147.984:525): avc: denied { create } for pid=7072 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.981339][ T7102] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 201.042076][ T7103] netlink: 20 bytes leftover after parsing attributes in process `syz.4.332'. [ 203.016012][ T31] audit: type=1400 audit(1788012150.424:526): avc: denied { write } for pid=7092 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.136811][ T31] audit: type=1400 audit(1788012150.544:527): avc: denied { write } for pid=7109 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.202209][ T5606] Bluetooth: hci3: unexpected event for opcode 0x204e [ 203.359304][ T7118] syzkaller0: entered promiscuous mode [ 203.366221][ T7118] syzkaller0: entered allmulticast mode [ 203.519919][ T7113] kvm [7111]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 203.570890][ T7113] kvm [7111]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 203.601796][ T7113] kvm [7111]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 203.610959][ T7113] kvm [7111]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 203.649788][ T7113] kvm [7111]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 203.649886][ T7113] kvm [7111]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 203.685628][ T7113] kvm [7111]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 203.685746][ T7113] kvm [7111]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 203.721767][ T7113] kvm [7111]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 203.721893][ T7113] kvm [7111]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 204.023974][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'. [ 204.024006][ T7134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.337'. [ 204.141351][ T7134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.154620][ T31] audit: type=1400 audit(1788012151.564:528): avc: denied { accept } for pid=7127 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 204.580379][ T31] audit: type=1400 audit(1788012151.984:529): avc: denied { write } for pid=7126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.621996][ T30] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 204.743991][ T31] audit: type=1400 audit(1788012152.154:530): avc: denied { write } for pid=7151 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.782632][ T30] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 204.796207][ T30] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 204.796236][ T30] usb 6-1: config 0 has no interface number 0 [ 204.796272][ T30] usb 6-1: config 0 interface 41 has no altsetting 0 [ 204.822334][ T989] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 204.834358][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.842489][ T30] usb 6-1: Product: syz [ 204.842516][ T30] usb 6-1: Manufacturer: syz [ 204.842527][ T30] usb 6-1: SerialNumber: syz [ 204.863444][ T30] usb 6-1: config 0 descriptor?? [ 206.505979][ T989] usb 5-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 206.520755][ T989] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.520840][ T989] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 206.520900][ T989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.755877][ T5704] Console: switching to colour frame buffer device 128x48 [ 206.786026][ T5704] gud 3-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 206.811457][ T5704] usb 3-1: USB disconnect, device number 17 [ 206.822020][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 206.973983][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 206.981733][ T25] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 207.005607][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.005680][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.005718][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 207.005763][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.027210][ T5704] Console: switching to colour VGA+ 80x1 [ 207.071583][ T25] usb 2-1: config 0 descriptor?? [ 207.250328][ T31] audit: type=1400 audit(1788012154.654:531): avc: denied { write } for pid=7156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.537740][ T7172] FAULT_INJECTION: forcing a failure. [ 207.537740][ T7172] name failslab, interval 1, probability 0, space 0, times 0 [ 207.537789][ T7172] CPU: 1 UID: 0 PID: 7172 Comm: syz.2.343 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.537824][ T7172] Tainted: [L]=SOFTLOCKUP [ 207.537833][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 207.537846][ T7172] Call Trace: [ 207.537854][ T7172] [ 207.537863][ T7172] dump_stack_lvl+0x100/0x190 [ 207.537900][ T7172] should_fail_ex.cold+0x5/0xa [ 207.537930][ T7172] should_failslab+0xc2/0x120 [ 207.537958][ T7172] kmem_cache_alloc_noprof+0x92/0x6a0 [ 207.537980][ T7172] ? __pfx_map_id_range_down+0x10/0x10 [ 207.538004][ T7172] ? trace_kmem_cache_alloc+0xdd/0x100 [ 207.538030][ T7172] ? security_inode_alloc+0x3b/0x2c0 [ 207.538067][ T7172] security_inode_alloc+0x3b/0x2c0 [ 207.538106][ T7172] inode_init_always_gfp+0xc6f/0xfb0 [ 207.538135][ T7172] alloc_inode+0x8e/0x250 [ 207.538166][ T7172] new_inode+0x22/0x1c0 [ 207.538198][ T7172] hugetlbfs_get_inode+0x39a/0x700 [ 207.538226][ T7172] hugetlb_file_setup+0x15b/0x5b0 [ 207.538252][ T7172] ksys_mmap_pgoff+0x242/0x610 [ 207.538281][ T7172] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 207.538304][ T7172] ? fput+0x7c/0x100 [ 207.538328][ T7172] ? __pfx___x64_sys_futex+0x10/0x10 [ 207.538357][ T7172] ? ksys_write+0x1ac/0x250 [ 207.538377][ T7172] ? __pfx_ksys_write+0x10/0x10 [ 207.538401][ T7172] __x64_sys_mmap+0x125/0x190 [ 207.538430][ T7172] do_syscall_64+0x123/0x790 [ 207.538458][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.538481][ T7172] RIP: 0033:0x7f94fa59e159 [ 207.538500][ T7172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.538523][ T7172] RSP: 002b:00007f94fb52c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 207.538545][ T7172] RAX: ffffffffffffffda RBX: 00007f94fa825fa0 RCX: 00007f94fa59e159 [ 207.538559][ T7172] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 207.538572][ T7172] RBP: 00007f94fa635024 R08: ffffffffffffffff R09: 0000000000000000 [ 207.538586][ T7172] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 207.538599][ T7172] R13: 00007f94fa826038 R14: 00007f94fa825fa0 R15: 00007ffe0f440088 [ 207.538630][ T7172] [ 207.793314][ T25] hid_parser_main: 4 callbacks suppressed [ 207.799176][ T25] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 207.799217][ T25] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 207.799243][ T25] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 207.799297][ T25] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 207.799324][ T25] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 207.800117][ T31] audit: type=1400 audit(1788012155.204:532): avc: denied { write } for pid=7176 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.860087][ T25] input: HID 0955:7214 Haptics as /devices/virtual/input/input23 [ 207.874185][ T31] audit: type=1400 audit(1788012155.274:533): avc: denied { read } for pid=4958 comm="acpid" name="event4" dev="devtmpfs" ino=3130 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.874259][ T31] audit: type=1400 audit(1788012155.274:534): avc: denied { open } for pid=4958 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3130 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.874298][ T31] audit: type=1400 audit(1788012155.274:535): avc: denied { ioctl } for pid=4958 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3130 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.906081][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.906439][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.012141][ T25] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 208.020959][ T25] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 208.076029][ T30] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 208.089592][ T30] usb 6-1: USB disconnect, device number 2 [ 208.103914][ T5696] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 208.120639][ T25] usb 2-1: USB disconnect, device number 22 [ 208.127267][ T5696] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 208.138947][ T5696] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 208.151868][ T5696] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 208.208760][ T7182] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 208.348231][ T7183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.344'. [ 208.627355][ T989] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-110 [ 208.636563][ T989] dvb_usb_af9035 5-1:1.0: probe with driver dvb_usb_af9035 failed with error -110 [ 209.306080][ T7194] ip6t_rpfilter: unknown options [ 209.387012][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'. [ 209.405245][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'. [ 209.405397][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'. [ 209.488540][ T31] audit: type=1400 audit(1788012156.894:536): avc: denied { write } for pid=7185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.597194][ T31] audit: type=1400 audit(1788012157.004:537): avc: denied { write } for pid=7205 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.276744][ T989] usb 5-1: USB disconnect, device number 15 [ 210.320677][ T7216] smpboot: CPU 1 is now offline [ 210.381585][ T7217] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 210.702648][ T989] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 211.913201][ T5723] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 211.959494][ T7234] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 211.997151][ T7234] netlink: 20 bytes leftover after parsing attributes in process `syz.5.355'. [ 212.105286][ T5723] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 212.119934][ T5723] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.131663][ T5723] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 212.131695][ T5723] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 212.131720][ T5723] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.131843][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.060908][ T7226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.072239][ T7226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.074981][ T7226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.080090][ T7226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.083485][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'. [ 213.496279][ T7239] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 213.590649][ T7239] netlink: 20 bytes leftover after parsing attributes in process `syz.5.357'. [ 214.206292][ T7243] FAULT_INJECTION: forcing a failure. [ 214.206292][ T7243] name failslab, interval 1, probability 0, space 0, times 0 [ 214.230901][ T7243] CPU: 1 UID: 0 PID: 7243 Comm: syz.1.358 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.230937][ T7243] Tainted: [L]=SOFTLOCKUP [ 214.230946][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 214.230959][ T7243] Call Trace: [ 214.230967][ T7243] [ 214.230975][ T7243] dump_stack_lvl+0x100/0x190 [ 214.231013][ T7243] should_fail_ex.cold+0x5/0xa [ 214.231043][ T7243] should_failslab+0xc2/0x120 [ 214.231069][ T7243] kmem_cache_alloc_noprof+0x92/0x6a0 [ 214.231093][ T7243] ? ptlock_alloc+0x1f/0x70 [ 214.231132][ T7243] ptlock_alloc+0x1f/0x70 [ 214.231159][ T7243] pte_alloc_one+0x82/0x3d0 [ 214.231191][ T7243] __pte_alloc+0x6d/0x380 [ 214.231211][ T7243] ? __pfx___pte_alloc+0x10/0x10 [ 214.231239][ T7243] do_anonymous_page+0x1307/0x2050 [ 214.231270][ T7243] ? find_held_lock+0x2b/0x80 [ 214.231298][ T7243] ? __pmd_alloc+0x3f6/0x950 [ 214.231321][ T7243] ? __pmd_alloc+0x3f6/0x950 [ 214.231345][ T7243] ? __pfx_do_anonymous_page+0x10/0x10 [ 214.231373][ T7243] ? do_raw_spin_unlock+0x145/0x1e0 [ 214.231400][ T7243] ? _raw_spin_unlock+0x28/0x50 [ 214.231432][ T7243] ? __pmd_alloc+0x3fb/0x950 [ 214.231459][ T7243] __handle_mm_fault+0x1ff3/0x2f60 [ 214.231495][ T7243] ? __pfx___handle_mm_fault+0x10/0x10 [ 214.231522][ T7243] ? __pfx_mt_find+0x10/0x10 [ 214.231565][ T7243] ? find_vma+0xbf/0x140 [ 214.231586][ T7243] ? __pfx_find_vma+0x10/0x10 [ 214.231614][ T7243] handle_mm_fault+0x363/0xa20 [ 214.231649][ T7243] do_user_addr_fault+0x745/0x12f0 [ 214.231685][ T7243] exc_page_fault+0x6f/0xd0 [ 214.231710][ T7243] asm_exc_page_fault+0x26/0x30 [ 214.231732][ T7243] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 214.231763][ T7243] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 214.231784][ T7243] RSP: 0018:ffffc90004c07ae0 EFLAGS: 00050202 [ 214.231803][ T7243] RAX: 0000000000000001 RBX: 0000200000000740 RCX: 0000000000000004 [ 214.231816][ T7243] RDX: 0000000000000001 RSI: 0000200000000740 RDI: ffffc90004c07b80 [ 214.231831][ T7243] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000980f70 [ 214.231843][ T7243] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 214.231856][ T7243] R13: ffffc90004c07b80 R14: 0000000000000000 R15: ffff88807f7bbf12 [ 214.231885][ T7243] _copy_from_user+0x98/0xd0 [ 214.231916][ T7243] do_ipv6_setsockopt+0x73d/0x44a0 [ 214.231949][ T7243] ? avc_has_perm_noaudit+0x56/0x3b0 [ 214.231981][ T7243] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 214.232017][ T7243] ? avc_has_perm_noaudit+0x145/0x3b0 [ 214.232046][ T7243] ? avc_has_perm+0x135/0x1e0 [ 214.232075][ T7243] ? __pfx_avc_has_perm+0x10/0x10 [ 214.232098][ T7243] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 214.232140][ T7243] ? hrtimer_reprogram+0x165/0x6c0 [ 214.232173][ T7243] ? sock_has_perm+0x25a/0x2f0 [ 214.232202][ T7243] ? __pfx_sock_has_perm+0x10/0x10 [ 214.232228][ T7243] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 214.232254][ T7243] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 214.232290][ T7243] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 214.232333][ T7243] ? ipv6_setsockopt+0xcb/0x170 [ 214.232363][ T7243] ipv6_setsockopt+0xcb/0x170 [ 214.232399][ T7243] udpv6_setsockopt+0x64/0xb0 [ 214.232422][ T7243] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 214.232451][ T7243] do_sock_setsockopt+0xf3/0x1d0 [ 214.232480][ T7243] __sys_setsockopt+0x195/0x220 [ 214.232518][ T7243] __x64_sys_setsockopt+0xbd/0x160 [ 214.232549][ T7243] ? do_syscall_64+0xae/0x790 [ 214.232572][ T7243] ? lockdep_hardirqs_on+0x7d/0x110 [ 214.232594][ T7243] do_syscall_64+0x123/0x790 [ 214.232620][ T7243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.232642][ T7243] RIP: 0033:0x7fb80e39e159 [ 214.232660][ T7243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.232680][ T7243] RSP: 002b:00007fb80f322028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.232700][ T7243] RAX: ffffffffffffffda RBX: 00007fb80e625fa0 RCX: 00007fb80e39e159 [ 214.232715][ T7243] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 214.232728][ T7243] RBP: 00007fb80f322090 R08: 00000000000005b0 R09: 0000000000000000 [ 214.232742][ T7243] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 214.232755][ T7243] R13: 00007fb80e626038 R14: 00007fb80e625fa0 R15: 00007ffcd3a1dbb8 [ 214.232787][ T7243] [ 214.608242][ T5723] [drm] Initialized gud 1.0.0 for 5-1:1.0 on minor 1 [ 214.837011][ T989] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 214.837066][ T989] usb 3-1: too many configurations: 75, using maximum allowed: 8 [ 214.861579][ T989] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 214.861640][ T989] usb 3-1: can't read configurations, error -71 [ 215.060567][ T7245] syzkaller0: entered promiscuous mode [ 215.060604][ T7245] syzkaller0: entered allmulticast mode [ 215.225619][ T5723] Console: switching to colour frame buffer device 128x48 [ 215.396016][ T5723] gud 5-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 215.593625][ T5723] usb 5-1: USB disconnect, device number 16 [ 216.993243][ T5723] Console: switching to colour VGA+ 80x1 [ 217.837424][ T31] audit: type=1400 audit(1788012165.234:538): avc: denied { create } for pid=7253 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.861217][ T31] audit: type=1400 audit(1788012165.244:539): avc: denied { read } for pid=7253 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.944342][ T7257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.362'. [ 217.973832][ T7257] ALSA: mixer_oss: invalid OSS volume 'OGADá¿CaptuOª'.â‹L*8ŒP88se' [ 217.983016][ T7257] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 220.656358][ T31] audit: type=1400 audit(1788012168.064:540): avc: denied { create } for pid=7274 comm="syz.4.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.683651][ T31] audit: type=1400 audit(1788012168.094:541): avc: denied { connect } for pid=7274 comm="syz.4.368" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.748193][ T31] audit: type=1400 audit(1788012168.154:542): avc: denied { write } for pid=7274 comm="syz.4.368" laddr=fe80::13 lport=60 faddr=fe80::d fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.772698][ T7275] FAULT_INJECTION: forcing a failure. [ 220.772698][ T7275] name failslab, interval 1, probability 0, space 0, times 0 [ 220.772750][ T7275] CPU: 0 UID: 0 PID: 7275 Comm: syz.4.368 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.772780][ T7275] Tainted: [L]=SOFTLOCKUP [ 220.772788][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 220.772800][ T7275] Call Trace: [ 220.772807][ T7275] [ 220.772815][ T7275] dump_stack_lvl+0x100/0x190 [ 220.772849][ T7275] should_fail_ex.cold+0x5/0xa [ 220.772878][ T7275] should_failslab+0xc2/0x120 [ 220.772904][ T7275] kmem_cache_alloc_noprof+0x92/0x6a0 [ 220.772927][ T7275] ? lock_acquire+0x1d1/0x380 [ 220.772948][ T7275] ? dst_alloc+0x99/0x1a0 [ 220.772981][ T7275] ? __pfx_ip6_dst_gc+0x10/0x10 [ 220.773007][ T7275] dst_alloc+0x99/0x1a0 [ 220.773035][ T7275] ip6_pol_route+0x9fd/0x1310 [ 220.773058][ T7275] ? __pfx_ip6_pol_route+0x10/0x10 [ 220.773077][ T7275] ? stack_trace_save+0x8e/0xc0 [ 220.773104][ T7275] ? __pfx_stack_trace_save+0x10/0x10 [ 220.773132][ T7275] ? stack_depot_save_flags+0x27/0x9f0 [ 220.773157][ T7275] ? audit_log_end+0x1f/0x30 [ 220.773187][ T7275] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 220.773208][ T7275] fib6_rule_lookup+0x386/0x720 [ 220.773236][ T7275] ? security_socket_sendmsg+0xfb/0x230 [ 220.773265][ T7275] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 220.773293][ T7275] ? do_syscall_64+0x123/0x790 [ 220.773314][ T7275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.773340][ T7275] ? lock_acquire+0x1d1/0x380 [ 220.773360][ T7275] ? ip6_route_output_flags+0x3a/0x650 [ 220.773394][ T7275] ? dev_get_by_index_rcu+0x102/0x140 [ 220.773428][ T7275] ip6_route_output_flags+0x1d0/0x650 [ 220.773462][ T7275] ip6_dst_lookup_tail.constprop.0+0x116/0x2110 [ 220.773491][ T7275] ? lockdep_hardirqs_on+0x7d/0x110 [ 220.773514][ T7275] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 220.773538][ T7275] ? __lock_acquire+0x4c5/0x1ec0 [ 220.773560][ T7275] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 220.773594][ T7275] ? audit_log_end+0x24/0x30 [ 220.773623][ T7275] ? common_lsm_audit+0x251/0x2b0 [ 220.773647][ T7275] ip6_dst_lookup_flow+0x122/0x240 [ 220.773670][ T7275] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 220.773689][ T7275] ? find_held_lock+0x2b/0x80 [ 220.773716][ T7275] ? rawv6_sendmsg+0xb3c/0x4450 [ 220.773743][ T7275] ? rawv6_sendmsg+0xb3c/0x4450 [ 220.773776][ T7275] rawv6_sendmsg+0xe61/0x4450 [ 220.773816][ T7275] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 220.773845][ T7275] ? avc_has_perm+0x1b1/0x1e0 [ 220.773877][ T7275] ? is_bpf_text_address+0x94/0x1a0 [ 220.773904][ T7275] ? kernel_text_address+0x8d/0x100 [ 220.773942][ T7275] ? __pfx_sock_has_perm+0x10/0x10 [ 220.773991][ T7275] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 220.774020][ T7275] ? inet_sendmsg+0x11c/0x140 [ 220.774044][ T7275] inet_sendmsg+0x11c/0x140 [ 220.774070][ T7275] ____sys_sendmsg+0x9c9/0xbe0 [ 220.774093][ T7275] ? __pfx_inet_sendmsg+0x10/0x10 [ 220.774120][ T7275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.774152][ T7275] ? lock_acquire+0x1d1/0x380 [ 220.774172][ T7275] ? get_pid_task+0x2a/0x250 [ 220.774200][ T7275] ___sys_sendmsg+0x190/0x1e0 [ 220.774228][ T7275] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.774255][ T7275] ? get_pid_task+0x106/0x250 [ 220.774294][ T7275] ? find_held_lock+0x2b/0x80 [ 220.774341][ T7275] __sys_sendmsg+0x160/0x210 [ 220.774376][ T7275] ? __pfx___sys_sendmsg+0x10/0x10 [ 220.774422][ T7275] do_syscall_64+0x123/0x790 [ 220.774449][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.774472][ T7275] RIP: 0033:0x7f9fe979e159 [ 220.774489][ T7275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.774508][ T7275] RSP: 002b:00007f9fea639028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.774530][ T7275] RAX: ffffffffffffffda RBX: 00007f9fe9a25fa0 RCX: 00007f9fe979e159 [ 220.774544][ T7275] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 220.774557][ T7275] RBP: 00007f9fea639090 R08: 0000000000000000 R09: 0000000000000000 [ 220.774570][ T7275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.774591][ T7275] R13: 00007f9fe9a26038 R14: 00007f9fe9a25fa0 R15: 00007ffdc690e3f8 [ 220.774619][ T7275] [ 221.237367][ T7279] syzkaller0: entered promiscuous mode [ 221.237389][ T7279] syzkaller0: entered allmulticast mode [ 221.753360][ T7283] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 221.772439][ T7283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.372'. [ 222.583315][ T7289] smpboot: CPU 1 is now offline [ 222.691382][ T7293] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 222.706502][ T7240] ------------[ cut here ]------------ [ 222.706509][ T7240] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 222.706524][ T7240] WARNING: kernel/sched/sched.h:1666 at update_rq_clock+0x40a/0xd20, CPU#0: syz.5.357/7240 [ 222.729754][ T7240] Modules linked in: [ 222.733648][ T7240] CPU: 0 UID: 0 PID: 7240 Comm: syz.5.357 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.744407][ T7240] Tainted: [L]=SOFTLOCKUP [ 222.748726][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 222.758783][ T7240] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 222.764340][ T7240] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 222.783941][ T7240] RSP: 0018:ffffc900052ee850 EFLAGS: 00010046 [ 222.790002][ T7240] RAX: 0000000000000000 RBX: ffff8880b853bf00 RCX: 0000000000000001 [ 222.797958][ T7240] RDX: 0000000000000046 RSI: ffffffff8e3c46d0 RDI: ffffffff8c620c80 [ 222.805919][ T7240] RBP: ffffc900052ee9f0 R08: 0000000000000001 R09: 0000000000000001 [ 222.813876][ T7240] R10: ffff8880b843ca98 R11: 0000000000000000 R12: ffffffff91452704 [ 222.821833][ T7240] R13: ffff8880b853cde0 R14: ffff8880b853bf00 R15: 0000000000000001 [ 222.829790][ T7240] FS: 0000000000000000(0000) GS:ffff888123b64000(0000) knlGS:0000000000000000 [ 222.838706][ T7240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.845278][ T7240] CR2: 0000001b32f1eff8 CR3: 0000000051843000 CR4: 00000000003526f0 [ 222.853235][ T7240] Call Trace: [ 222.856502][ T7240] [ 222.859425][ T7240] __schedule+0x1c69/0x6920 [ 222.863936][ T7240] ? __pfx___schedule+0x10/0x10 [ 222.868788][ T7240] ? preempt_schedule_thunk+0x16/0x40 [ 222.874157][ T7240] preempt_schedule_common+0x3c/0xb0 [ 222.879432][ T7240] preempt_schedule_thunk+0x16/0x40 [ 222.884630][ T7240] _raw_spin_unlock_irq+0x44/0x50 [ 222.889656][ T7240] shmem_add_to_page_cache+0x874/0xcd0 [ 222.895118][ T7240] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 222.901108][ T7240] shmem_alloc_and_add_folio+0x558/0xd40 [ 222.906753][ T7240] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 222.912905][ T7240] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 222.918889][ T7240] shmem_get_folio_gfp+0x75b/0x1980 [ 222.924089][ T7240] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 222.929718][ T7240] ? vm_normal_page+0x1d1/0x380 [ 222.934558][ T7240] ? __pfx_vm_normal_page+0x10/0x10 [ 222.939750][ T7240] shmem_write_begin+0x1a4/0x420 [ 222.944696][ T7240] ? __pfx_shmem_write_begin+0x10/0x10 [ 222.950153][ T7240] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 222.957006][ T7240] generic_perform_write+0x292/0xa40 [ 222.962280][ T7240] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 222.968091][ T7240] ? __pfx_generic_perform_write+0x10/0x10 [ 222.973890][ T7240] ? file_update_time_flags+0x38c/0x520 [ 222.979435][ T7240] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 222.985238][ T7240] shmem_file_write_iter+0x10e/0x140 [ 222.990522][ T7240] __kernel_write_iter+0x2ac/0x930 [ 222.995636][ T7240] ? __pfx___kernel_write_iter+0x10/0x10 [ 223.001270][ T7240] ? __up_read+0x333/0x980 [ 223.005680][ T7240] ? dump_user_range+0x65e/0xad0 [ 223.010615][ T7240] ? copy_mc_enhanced_fast_string+0x6/0xf [ 223.016340][ T7240] dump_user_range+0x3f9/0xad0 [ 223.021106][ T7240] ? __pfx_dump_user_range+0x10/0x10 [ 223.026405][ T7240] ? __pfx_writenote+0x10/0x10 [ 223.031162][ T7240] elf_core_dump+0x2d68/0x3d20 [ 223.035931][ T7240] ? __pfx_elf_core_dump+0x10/0x10 [ 223.041035][ T7240] ? kasan_save_stack+0x3f/0x50 [ 223.045873][ T7240] ? kasan_save_stack+0x30/0x50 [ 223.050714][ T7240] ? kasan_save_track+0x14/0x30 [ 223.055553][ T7240] ? __kasan_kmalloc+0xaa/0xb0 [ 223.060304][ T7240] ? vfs_coredump+0x21f6/0x54a0 [ 223.065149][ T7240] ? get_signal+0x1f2a/0x21e0 [ 223.069814][ T7240] ? arch_do_signal_or_restart+0x91/0x7e0 [ 223.075535][ T7240] ? 0xffffffffff600000 [ 223.079712][ T7240] ? lock_acquire+0x1d1/0x380 [ 223.084378][ T7240] ? get_signal+0x1f2a/0x21e0 [ 223.089056][ T7240] ? vfs_coredump+0x281a/0x54a0 [ 223.093904][ T7240] vfs_coredump+0x281a/0x54a0 [ 223.098595][ T7240] ? __pfx_vfs_coredump+0x10/0x10 [ 223.103618][ T7240] ? __lock_acquire+0x4c5/0x1ec0 [ 223.108551][ T7240] ? __lock_acquire+0x4c5/0x1ec0 [ 223.113481][ T7240] ? lock_acquire+0x1d1/0x380 [ 223.118145][ T7240] ? unwind_next_frame+0xbd/0x2090 [ 223.123258][ T7240] ? lock_acquire+0x1d1/0x380 [ 223.127930][ T7240] ? bpf_ksym_find+0x128/0x1c0 [ 223.132704][ T7240] ? pick_eevdf+0x1ad/0x880 [ 223.137204][ T7240] ? arch_stack_walk+0xa6/0xf0 [ 223.141973][ T7240] ? pick_task_fair+0x142/0x1e00 [ 223.146909][ T7240] ? stack_depot_save_flags+0x27/0x9f0 [ 223.152364][ T7240] ? kvm_sched_clock_read+0x11/0x20 [ 223.157550][ T7240] ? sched_clock+0x3a/0x60 [ 223.161967][ T7240] ? sched_clock_cpu+0x6c/0x570 [ 223.166827][ T7240] ? find_held_lock+0x2b/0x80 [ 223.171500][ T7240] ? __schedule+0x315b/0x6920 [ 223.176162][ T7240] ? __schedule+0x315b/0x6920 [ 223.180827][ T7240] ? rcu_is_watching+0x13/0xc0 [ 223.185588][ T7240] ? trace_sched_exit_tp+0x120/0x160 [ 223.190867][ T7240] ? __schedule+0x126b/0x6920 [ 223.195547][ T7240] ? __pfx___schedule+0x10/0x10 [ 223.200387][ T7240] ? proc_coredump_connector+0x2d3/0x4f0 [ 223.206015][ T7240] ? __pfx_proc_coredump_connector+0x10/0x10 [ 223.212000][ T7240] get_signal+0x1f2a/0x21e0 [ 223.216508][ T7240] ? __pfx_get_signal+0x10/0x10 [ 223.221355][ T7240] arch_do_signal_or_restart+0x91/0x7e0 [ 223.226903][ T7240] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 223.233076][ T7240] irqentry_exit+0x402/0xa10 [ 223.237663][ T7240] asm_exc_page_fault+0x26/0x30 [ 223.242502][ T7240] RIP: 0033:0x7f5745853bd7 [ 223.246906][ T7240] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 223.266503][ T7240] RSP: 002b:00007f57467990e0 EFLAGS: 00010202 [ 223.272556][ T7240] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f574599e159 [ 223.280514][ T7240] RDX: 00007f5746799100 RSI: 00007f5746799230 RDI: 000000000000000b [ 223.288472][ T7240] RBP: 00007f5745a35024 R08: 0000000000000000 R09: 0000000000000058 [ 223.296428][ T7240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.304384][ T7240] R13: 00007f5745c26128 R14: 00007f5745c26090 R15: 00007ffc52a16248 [ 223.312359][ T7240] [ 223.315368][ T7240] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 223.322635][ T7240] CPU: 0 UID: 0 PID: 7240 Comm: syz.5.357 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.333384][ T7240] Tainted: [L]=SOFTLOCKUP [ 223.337692][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 223.347734][ T7240] Call Trace: [ 223.350999][ T7240] [ 223.353915][ T7240] dump_stack_lvl+0x100/0x190 [ 223.358598][ T7240] vpanic+0x553/0x970 [ 223.362568][ T7240] ? __pfx_vpanic+0x10/0x10 [ 223.367069][ T7240] panic+0xd1/0xe0 [ 223.370777][ T7240] ? __pfx_panic+0x10/0x10 [ 223.375194][ T7240] check_panic_on_warn.cold+0x19/0x34 [ 223.380558][ T7240] ? update_rq_clock+0x40a/0xd20 [ 223.385486][ T7240] __warn.cold+0x191/0x318 [ 223.389895][ T7240] __report_bug+0x30f/0x440 [ 223.394389][ T7240] ? update_rq_clock+0x40a/0xd20 [ 223.399320][ T7240] ? __pfx___report_bug+0x10/0x10 [ 223.404338][ T7240] ? rcu_is_watching+0x13/0xc0 [ 223.409096][ T7240] ? trace_contention_end.constprop.0+0x145/0x1a0 [ 223.415506][ T7240] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 223.421746][ T7240] ? update_rq_clock+0x40a/0xd20 [ 223.426674][ T7240] report_bug+0xb3/0x220 [ 223.430907][ T7240] ? update_rq_clock+0x40a/0xd20 [ 223.435842][ T7240] handle_bug+0x16a/0x2a0 [ 223.440168][ T7240] exc_invalid_op+0x17/0x50 [ 223.444666][ T7240] asm_exc_invalid_op+0x1a/0x20 [ 223.449506][ T7240] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 223.455045][ T7240] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 223.474640][ T7240] RSP: 0018:ffffc900052ee850 EFLAGS: 00010046 [ 223.480698][ T7240] RAX: 0000000000000000 RBX: ffff8880b853bf00 RCX: 0000000000000001 [ 223.488656][ T7240] RDX: 0000000000000046 RSI: ffffffff8e3c46d0 RDI: ffffffff8c620c80 [ 223.496616][ T7240] RBP: ffffc900052ee9f0 R08: 0000000000000001 R09: 0000000000000001 [ 223.504575][ T7240] R10: ffff8880b843ca98 R11: 0000000000000000 R12: ffffffff91452704 [ 223.512531][ T7240] R13: ffff8880b853cde0 R14: ffff8880b853bf00 R15: 0000000000000001 [ 223.520520][ T7240] __schedule+0x1c69/0x6920 [ 223.525044][ T7240] ? __pfx___schedule+0x10/0x10 [ 223.529890][ T7240] ? preempt_schedule_thunk+0x16/0x40 [ 223.535264][ T7240] preempt_schedule_common+0x3c/0xb0 [ 223.540543][ T7240] preempt_schedule_thunk+0x16/0x40 [ 223.545751][ T7240] _raw_spin_unlock_irq+0x44/0x50 [ 223.550781][ T7240] shmem_add_to_page_cache+0x874/0xcd0 [ 223.556247][ T7240] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 223.562239][ T7240] shmem_alloc_and_add_folio+0x558/0xd40 [ 223.567882][ T7240] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 223.574038][ T7240] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 223.580024][ T7240] shmem_get_folio_gfp+0x75b/0x1980 [ 223.585292][ T7240] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 223.590944][ T7240] ? vm_normal_page+0x1d1/0x380 [ 223.595800][ T7240] ? __pfx_vm_normal_page+0x10/0x10 [ 223.601009][ T7240] shmem_write_begin+0x1a4/0x420 [ 223.605950][ T7240] ? __pfx_shmem_write_begin+0x10/0x10 [ 223.611408][ T7240] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 223.618262][ T7240] generic_perform_write+0x292/0xa40 [ 223.623543][ T7240] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 223.629366][ T7240] ? __pfx_generic_perform_write+0x10/0x10 [ 223.635178][ T7240] ? file_update_time_flags+0x38c/0x520 [ 223.640733][ T7240] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 223.646545][ T7240] shmem_file_write_iter+0x10e/0x140 [ 223.651845][ T7240] __kernel_write_iter+0x2ac/0x930 [ 223.656963][ T7240] ? __pfx___kernel_write_iter+0x10/0x10 [ 223.662598][ T7240] ? __up_read+0x333/0x980 [ 223.667013][ T7240] ? dump_user_range+0x65e/0xad0 [ 223.671952][ T7240] ? copy_mc_enhanced_fast_string+0x6/0xf [ 223.677676][ T7240] dump_user_range+0x3f9/0xad0 [ 223.682445][ T7240] ? __pfx_dump_user_range+0x10/0x10 [ 223.687740][ T7240] ? __pfx_writenote+0x10/0x10 [ 223.692502][ T7240] elf_core_dump+0x2d68/0x3d20 [ 223.697276][ T7240] ? __pfx_elf_core_dump+0x10/0x10 [ 223.702381][ T7240] ? kasan_save_stack+0x3f/0x50 [ 223.707226][ T7240] ? kasan_save_stack+0x30/0x50 [ 223.712072][ T7240] ? kasan_save_track+0x14/0x30 [ 223.716917][ T7240] ? __kasan_kmalloc+0xaa/0xb0 [ 223.721674][ T7240] ? vfs_coredump+0x21f6/0x54a0 [ 223.726525][ T7240] ? get_signal+0x1f2a/0x21e0 [ 223.731195][ T7240] ? arch_do_signal_or_restart+0x91/0x7e0 [ 223.736920][ T7240] ? 0xffffffffff600000 [ 223.741109][ T7240] ? lock_acquire+0x1d1/0x380 [ 223.745778][ T7240] ? get_signal+0x1f2a/0x21e0 [ 223.750458][ T7240] ? vfs_coredump+0x281a/0x54a0 [ 223.755307][ T7240] vfs_coredump+0x281a/0x54a0 [ 223.759995][ T7240] ? __pfx_vfs_coredump+0x10/0x10 [ 223.765020][ T7240] ? __lock_acquire+0x4c5/0x1ec0 [ 223.769952][ T7240] ? __lock_acquire+0x4c5/0x1ec0 [ 223.774895][ T7240] ? lock_acquire+0x1d1/0x380 [ 223.779575][ T7240] ? unwind_next_frame+0xbd/0x2090 [ 223.784692][ T7240] ? lock_acquire+0x1d1/0x380 [ 223.789369][ T7240] ? bpf_ksym_find+0x128/0x1c0 [ 223.794144][ T7240] ? pick_eevdf+0x1ad/0x880 [ 223.798648][ T7240] ? arch_stack_walk+0xa6/0xf0 [ 223.803422][ T7240] ? pick_task_fair+0x142/0x1e00 [ 223.808362][ T7240] ? stack_depot_save_flags+0x27/0x9f0 [ 223.813821][ T7240] ? kvm_sched_clock_read+0x11/0x20 [ 223.819015][ T7240] ? sched_clock+0x3a/0x60 [ 223.823435][ T7240] ? sched_clock_cpu+0x6c/0x570 [ 223.828301][ T7240] ? find_held_lock+0x2b/0x80 [ 223.832982][ T7240] ? __schedule+0x315b/0x6920 [ 223.837653][ T7240] ? __schedule+0x315b/0x6920 [ 223.842324][ T7240] ? rcu_is_watching+0x13/0xc0 [ 223.847085][ T7240] ? trace_sched_exit_tp+0x120/0x160 [ 223.852368][ T7240] ? __schedule+0x126b/0x6920 [ 223.857056][ T7240] ? __pfx___schedule+0x10/0x10 [ 223.861907][ T7240] ? proc_coredump_connector+0x2d3/0x4f0 [ 223.867547][ T7240] ? __pfx_proc_coredump_connector+0x10/0x10 [ 223.873537][ T7240] get_signal+0x1f2a/0x21e0 [ 223.878045][ T7240] ? __pfx_get_signal+0x10/0x10 [ 223.882898][ T7240] arch_do_signal_or_restart+0x91/0x7e0 [ 223.888445][ T7240] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 223.894621][ T7240] irqentry_exit+0x402/0xa10 [ 223.899211][ T7240] asm_exc_page_fault+0x26/0x30 [ 223.904053][ T7240] RIP: 0033:0x7f5745853bd7 [ 223.908460][ T7240] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 223.928056][ T7240] RSP: 002b:00007f57467990e0 EFLAGS: 00010202 [ 223.934113][ T7240] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f574599e159 [ 223.942072][ T7240] RDX: 00007f5746799100 RSI: 00007f5746799230 RDI: 000000000000000b [ 223.950033][ T7240] RBP: 00007f5745a35024 R08: 0000000000000000 R09: 0000000000000058 [ 223.957995][ T7240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.965956][ T7240] R13: 00007f5745c26128 R14: 00007f5745c26090 R15: 00007ffc52a16248 [ 223.973931][ T7240] [ 223.977095][ T7240] Kernel Offset: disabled [ 223.981413][ T7240] Rebooting in 86400 seconds..