last executing test programs: 11m40.060156418s ago: executing program 0 (id=34): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net/ip6_tables_matches\x00') sendfile(r0, r1, 0x0, 0x80000000) setuid(0xee01) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240), 0x0}, 0x20) 11m37.742853941s ago: executing program 0 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') 11m36.845694276s ago: executing program 0 (id=45): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1e, 0x2, 0x7, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fspick(0xffffffffffffffff, 0x0, 0x1) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) 11m36.324840093s ago: executing program 0 (id=47): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net/ip6_tables_matches\x00') sendfile(r0, r1, 0x0, 0x80000000) setuid(0xee01) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240), 0x0}, 0x20) 11m34.814902463s ago: executing program 0 (id=49): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xffffffffffffff76, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000240)='proc\x00', 0xc000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 11m34.08098251s ago: executing program 0 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005000c0008"], 0x4a) 11m18.573066276s ago: executing program 32 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005000c0008"], 0x4a) 2m25.062620169s ago: executing program 4 (id=2029): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000040)={0x1, 0x80}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000c014) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4890) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) epoll_create1(0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x1, 0x0, 0xf, 0x0, 0x0, [{0x2, 0x2, 0x0, '\x00', 0xd}, {0x4e, 0x7d, 0x7, '\x00', 0x9}, {0x0, 0x9, 0xa, '\x00', 0x7}, {0x2, 0x81, 0x1, '\x00', 0x3}, {0x91, 0xb, 0x0, '\x00', 0x6}, {0x7, 0xd, 0x7, '\x00', 0x87}, {0x4, 0x8, 0xf6, '\x00', 0x4}, {0x1, 0xff, 0x8c, '\x00', 0x2}, {0x4, 0x4, 0x8, '\x00', 0x5}, {0x3, 0x6, 0x9, '\x00', 0x4}, {0x6e, 0xd, 0x3f, '\x00', 0x53}, {0x8, 0xf9, 0x5, '\x00', 0x7}, {0x7, 0x5, 0x0, '\x00', 0x80}, {0x5, 0x5, 0x0, '\x00', 0x1}, {0xff, 0x1, 0x2, '\x00', 0x80}, {0x1, 0xc, 0x67, '\x00', 0x7}, {0xfb, 0x4, 0x9, '\x00', 0x7}, {0x7, 0x5, 0xf, '\x00', 0x6}, {0x7, 0xfe, 0x1, '\x00', 0x7f}, {0x7f, 0x0, 0x8, '\x00', 0x2}, {0xf9, 0x7, 0xc, '\x00', 0x5}, {0xe0, 0xdd, 0x4, '\x00', 0x5e}, {0x2, 0x0, 0xee, '\x00', 0x1}, {0xf, 0x4d, 0xf7, '\x00', 0x8}]}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000680)={0x4, 0x0, &(0x7f0000000640)=[0xffffffffffffffff]}, 0x1) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x182, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) 2m23.754036495s ago: executing program 4 (id=2035): socket(0x18, 0x4, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000400)="09528ea55c3f22994fa8c0e26b663f28087de8a7c9af92db8d4ee9", 0x1b) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000100)={0x9}, 0x1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000240)=0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x2d, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0xafa, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x20005, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) poll(&(0x7f0000000080)=[{r4, 0x80}], 0x1, 0xc) write$char_usb(0xffffffffffffffff, &(0x7f0000000600)="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", 0x56b) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002500)={0x8, {"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", 0x1000}}, 0x1006) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000010000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000000300000000"], 0x48) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2m22.56850688s ago: executing program 4 (id=2041): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x4) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000740)=""/138, 0x8a, 0x4000000040) 2m21.906228389s ago: executing program 4 (id=2044): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m21.138231725s ago: executing program 4 (id=2046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_usb_connect(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x0) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x3}, 0x30, 0x0) landlock_restrict_self(r5, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r6, &(0x7f0000000140)='0', 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) write$sndseq(r6, &(0x7f00000002c0)=[{0x4, 0x40, 0x8, 0x8, @time={0x619, 0x745}, {0x9, 0xb}, {0x5, 0x9}, @time=@tick=0x62e2}, {0x5, 0x4, 0x6, 0x1, @tick=0x7, {0x5, 0xfe}, {0xe, 0x7}, @note={0x0, 0xf0, 0x62, 0x36, 0x7}}, {0xf9, 0xc, 0x4, 0x2, @tick=0x7fff, {0x81, 0xfd}, {0xa, 0x4}, @raw8={"68285c58e3a5086adefc8afb"}}, {0x3, 0x4f, 0xff, 0xfb, @time={0x400, 0xa71}, {0x0, 0x40}, {0x9, 0x80}, @quote={{0x1, 0x44}, 0x6, &(0x7f0000000280)={0x8, 0xff, 0x6, 0xb1, @tick=0x3, {0x4, 0x36}, {0xa0}, @raw32={[0x401, 0x910, 0x4]}}}}], 0x70) sched_setscheduler(r1, 0x2, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) 2m17.955683567s ago: executing program 4 (id=2055): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d1000014000010203"], 0x0) r1 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x6, 0x12000000) bind$inet6(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x4c80, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, 0xffffffffffffffff, 0x8000000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 2m6.654644471s ago: executing program 1 (id=2088): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) madvise(&(0x7f0000af4000/0x4000)=nil, 0x4000, 0x64) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x40000) write$binfmt_aout(r1, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2m6.294833408s ago: executing program 1 (id=2089): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) r1 = gettid() setpriority(0x1, r1, 0xffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0xffffffffffffffff, 0x8) syslog(0x3, &(0x7f0000000300)=""/121, 0x79) 2m5.4985161s ago: executing program 1 (id=2092): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0xfffff, 0xfffffffffffffffd) sendmsg$nl_route(r0, 0x0, 0x8044) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) lseek(0xffffffffffffffff, 0x289e0cb5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xd00, 0x0, 0x0, 0x1000, 0xffffffff, r5}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x1, 0x1000002, 0x1000091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe344, 0x2, 0x2, 0x253}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m1.925502779s ago: executing program 33 (id=2055): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d1000014000010203"], 0x0) r1 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x6, 0x12000000) bind$inet6(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x4c80, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, 0xffffffffffffffff, 0x8000000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 2m1.126093264s ago: executing program 1 (id=2103): r0 = socket$netlink(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x0) vmsplice(r2, &(0x7f0000000340)=[{&(0x7f00000000c0)="c479c7", 0x3}], 0x1, 0x7) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4f5944ab}]}]}], {0x14}}, 0xd4}}, 0x0) 2m0.84144134s ago: executing program 1 (id=2104): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) read$dsp(r0, &(0x7f0000000280)=""/189, 0xbd) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x250081, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x2, &(0x7f0000000340)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2d, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000000)={0x8300000000000000, 0xdddd0000, 0x4, 0xb, 0xb}) connect$netlink(r2, &(0x7f0000000140)=@unspec={0x2d, 0x0, 0xa00, 0x7000000}, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./proc\x00', 0x1f7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x358, 0x10002) ptrace$pokeuser(0x6, r7, 0x388, 0xffffffffffffff81) 1m58.875368384s ago: executing program 1 (id=2109): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x34, 0x18, 0x1, 0x70bd27, 0x25dfdbff, {0x1d, 0x1, 0x7}, [@CGW_CS_XOR={0x8, 0x5, {0xffffffffffffffff, 0x1, 0xf5, 0x2}}, @CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "0f538dcd0863c8ce"}, 0x1}}]}, 0x34}}, 0x240448c8) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x2, 0x0) write(r1, &(0x7f0000000040)='1', 0x1) write$cgroup_int(r1, &(0x7f0000000000), 0x12) 1m43.54442346s ago: executing program 34 (id=2109): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x34, 0x18, 0x1, 0x70bd27, 0x25dfdbff, {0x1d, 0x1, 0x7}, [@CGW_CS_XOR={0x8, 0x5, {0xffffffffffffffff, 0x1, 0xf5, 0x2}}, @CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "0f538dcd0863c8ce"}, 0x1}}]}, 0x34}}, 0x240448c8) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x2, 0x0) write(r1, &(0x7f0000000040)='1', 0x1) write$cgroup_int(r1, &(0x7f0000000000), 0x12) 17.837754814s ago: executing program 7 (id=2399): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4ea7, 0x1, @mcast1, 0xff7ffffd}}, {{0xa, 0xce47, 0x7fffffff, @empty, 0x4ed}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="03000000000000000a005e220000000cff0100000000000000000000000001010804000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r3 = socket$unix(0x1, 0x5, 0x0) socket(0x27, 0x800, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0xfffe, 0x0, 0x0, 0x8, 0xb, 0x5, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x38, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x34, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf723}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x918d}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000121, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905c926", @ANYRESHEX], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70ad27, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {0xe, 0x13}, {0x5, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 12.574509481s ago: executing program 6 (id=2414): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000480)=@urb_type_iso={0x0, {0x1, 0x1}, 0x449e, 0xc0, 0x0, 0x0, 0x3, 0x63f00, 0x1, 0x4, 0x6, 0x0, [{0x27a4, 0xa}]}) 11.842184705s ago: executing program 6 (id=2415): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000000280)={@multicast1, @loopback, r1}, 0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x68) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x101501, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x11) ioctl$TCSETS(r9, 0x8910, &(0x7f0000000100)={0x58de3435, 0x0, 0x0, 0xfffffffe, 0x0, "bb64ee00000000000300"}) setuid(0xee01) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="15", 0x1}], 0x1}}], 0x4, 0x220408d0) socket$unix(0x1, 0x2, 0x0) 11.280880301s ago: executing program 7 (id=2416): mount(&(0x7f0000000000)=@nullb, 0x0, 0x0, 0x208000, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d040ac200000000000109022400010000600009040000090300000009210200000122290009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.972592833s ago: executing program 2 (id=2419): socket(0x18, 0x4, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000400)="09528ea55c3f22994fa8c0e26b663f28087de8a7c9af92db8d4ee9", 0x1b) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000100)={0x9}, 0x1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000240)=0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x2d, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x20005, 0xfffffff8, 0x0, 0xff, 0xff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 10.798608024s ago: executing program 2 (id=2421): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000010b000/0x1000)=nil) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000024882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 10.445859827s ago: executing program 2 (id=2422): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0xd3, 0xcd, 0x8c, 0x10, 0x12d1, 0x726a, 0x53c6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x50, 0x8, "", [{{0x9, 0x4, 0xe6, 0xa, 0x0, 0xff, 0x2, 0x16, 0x1}}]}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x5, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x804) syz_emit_vhci(&(0x7f0000001b80)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x71, 0x4}, {0x1007, 0x800}}}}, 0x11) 8.674008449s ago: executing program 7 (id=2424): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "58090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}]}]}}}}}, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x40003) r6 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x27, 0x2, 0x207}]}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa}}, 0x1c}}, 0x0) sendto$packet(r6, 0x0, 0x0, 0x4044804, &(0x7f00000001c0)={0x11, 0x88a8, 0x0, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x68}}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000000014000100ce5d6201ffdbdf25"], 0x10}}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) 8.53928311s ago: executing program 2 (id=2425): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 8.520076494s ago: executing program 6 (id=2426): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x518, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x42, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x4}}}}}]}}]}}, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000004c00)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xf, 0x9}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r3, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) getpgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29) write(r7, &(0x7f0000000000)='7', 0x1) 7.012609306s ago: executing program 7 (id=2428): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a0000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000300), &(0x7f0000000700)}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000000)="4c00000011000f14001100", 0xb) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f00000000c0)=0x10000000005) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.456710877s ago: executing program 5 (id=2432): socket(0x18, 0x4, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000400)="09528ea55c3f22994fa8c0e26b663f28087de8a7c9af92db8d4ee9", 0x1b) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000100)={0x9}, 0x1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000240)=0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x2d, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x20005, 0xfffffff8, 0x0, 0xff, 0xff}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.380942661s ago: executing program 6 (id=2433): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1, r0}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) mount$fuse(0x0, 0x0, 0x0, 0x108b849, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 5.323954511s ago: executing program 2 (id=2434): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xfffffffd}, &(0x7f0000000080)=0x8) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000080)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg$unix(r2, &(0x7f00000085c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x2, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x7fff}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x3, 0xc4f, 0x1, 0x1}, 0x6d) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x17, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r4, 0xffffffff00000000}, 0x38) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xfc, 0x2f, 0x62, 0x40, 0x9c4, 0x11, 0x638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xf0, 0xe8, 0x2, 0xb5, 0x1c, 0x80, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000002300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18, 0x24}}], 0x1, 0x44080) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000180)=r3) 4.811706643s ago: executing program 5 (id=2435): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x1411, 0x300, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x26}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40800) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xca6e, 0x6, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x3, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x10b300, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) ioperm(0x1, 0xb2be, 0x163f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x28048048) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl(0xffffffffffffffff, 0x81, 0x0) r4 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r4, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x8000, 0x100001, 0x214}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x200, 0x4003c003, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x271, 0x0, r4}}], 0x1, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000000080)={{0xb, 0x209}, 0x20}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x17, &(0x7f0000001200)=0x8a4, 0x4) ioctl$TIOCMIWAIT(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) 4.76922818s ago: executing program 7 (id=2436): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0xd3, 0xcd, 0x8c, 0x10, 0x12d1, 0x726a, 0x53c6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x50, 0x8, "", [{{0x9, 0x4, 0xe6, 0xa, 0x0, 0xff, 0x2, 0x16, 0x1}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000001b80)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x71, 0x4}, {0x1007, 0x800}}}}, 0x11) 4.422904847s ago: executing program 6 (id=2437): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d27bf7020ffdbdf253100a5a5025405958f4467afb92c00000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c030) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0), r3) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000000004, &(0x7f00000001c0)=[{0x10, 0x3, 0xffffffffffffffff}, {0x5, 0x1000}], 0xc40065e19405b666, 0xbff, 0x7, 0x0, 0x2c, 0x5f}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) ptrace$getsig(0x4202, r6, 0x1000, &(0x7f00000001c0)) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="aba78274", @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf25010000000900010073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x180}, 0x4) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000440)=0x20000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x204000) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) 3.492618645s ago: executing program 5 (id=2439): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0xdb, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff08004b1200cd006600ac4436793b75bafc8c7844410000029078bbac14141fe00000020a0101007f000001ac14142944248293ac14140c00008000ac14140b00000004ffffffff00000081ac14143e00a00000863e00000000071245420c60e3b441c2480e63cc9d9d3999061241e383d179968848c26d06fa2cc09ce40505b78014050f2983e47c8b34fc62f0dd9b5bb8861800000002011286eb4af36d4368c17d2f25fd947de54c000000120d90787f0000017c1f5b787444742dffd8af6cb5017908008196830cb8b2e13a"], 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \t'], 0x23) close(r2) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:devicekit_power_exec_t:s0\x00', 0x2c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000940)=@newtfilter={0xb8, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x7}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x88, 0x2, [@TCA_BASIC_ACT={0x84, 0x3, [@m_nat={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffb29d, 0x8001, 0xd1ad045825a3ada6, 0x4, 0x7}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}]}, {0x30, 0x6, "84f6640d0835d27d537c7fe3c6ef90f265c28add2caa53598d93de0b849ce7a5e8d0602da6495a10faca123f"}, {0xc}, {0xc}}}]}]}}]}, 0xb8}}, 0x0) write$tun(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x10007198, 0x8, 0x0, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x100012, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x8, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x7fffffff, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0xffffff01, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0x7f, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8200, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfe, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0x0, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x9, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0xb, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x5, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x2, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x35, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x87, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x401, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0xc, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x8, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x3, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x0, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x9c, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x0, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) (fail_nth: 4) 3.418385044s ago: executing program 6 (id=2440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (fail_nth: 4) 2.458171612s ago: executing program 3 (id=2442): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580006001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.240394729s ago: executing program 2 (id=2443): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d00060905820200"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.842330456s ago: executing program 5 (id=2444): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002c80)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000320800040043000000a80016000a290040fcff0c3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a979832adbca28d9fb1ad28516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b0d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5f0cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9374e2501f7c82a89276a2e116214695", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x14) r1 = socket(0x10, 0x3, 0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)=0xfff, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x7, 0x5, 0x80, 0xfffffe00}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@deltaction={0x90, 0x31, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x400c012}, 0x8090) 1.801022924s ago: executing program 3 (id=2445): socket(0x18, 0x4, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$char_usb(0xffffffffffffffff, &(0x7f0000000400)="09528ea55c3f22994fa8c0e26b663f28087de8a7c9af92db8d4ee9", 0x1b) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000100)={0x9}, 0x1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000240)=0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x2d, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x20005, 0xfffffff8, 0x0, 0xff, 0xff}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.743135401s ago: executing program 5 (id=2446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) wait4(0x0, 0x0, 0x8, 0x0) syz_open_procfs$pagemap(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpid() (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) wait4(0x0, 0x0, 0x8, 0x0) (async) syz_open_procfs$pagemap(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 1.726966577s ago: executing program 3 (id=2447): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='ncpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x480002, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) epoll_create1(0x0) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) syz_emit_ethernet(0xdb, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r3, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x23) close(r3) r4 = socket(0x10, 0x800, 0x7) r5 = socket$unix(0x1, 0x1, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:devicekit_power_exec_t:s0\x00', 0x2c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@deltclass={0x44, 0x29, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0xd, 0x7}, {0xffff, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x5c, 0x4}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0x1, 0x10}}, @TCA_RATE={0x6, 0x5, {0xbc, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) 827.00702ms ago: executing program 3 (id=2448): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4044081) geteuid() lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0xfc30) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_ACT={0x30, 0x4, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500", @ANYRES64=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 630.030082ms ago: executing program 5 (id=2449): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000000080002000000000014000100ff010000000003000000000000000001"], 0x38}}, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000000c0)=0x8feb, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, 0x0, 0x12}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x9480}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r10, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r9, @ANYRESHEX=r6], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x4008000) fcntl$lock(r8, 0x6, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r12 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4044081) geteuid() lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0xfc30) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_ACT={0x30, 0x4, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500", @ANYRES64=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 76.190051ms ago: executing program 3 (id=2451): r0 = socket(0x1e, 0x5, 0x90) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x9f, 0x66, 0xf, 0x8, 0xb05, 0x17d0, 0xfc48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xae, 0x5, 0x40, 0x1, "", [{{0x9, 0x4, 0x6b, 0xc, 0x0, 0x59, 0xb, 0xa8, 0x4}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 7 (id=2452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket$packet(0x11, 0x2, 0x300) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='cgroup2\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$clear(0x7, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0xd}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000980)=@overlay={0x200, 0x1, 0x4, 0x4000, 0xdafd, {}, {0x3, 0x8, 0x5, 0x5, 0x1, 0x7, "79aa3692"}, 0x3, 0x3, {}, 0x7}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) kernel console output (not intermixed with test programs): m_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 927.445593][ T31] audit: type=1400 audit(1788866340.341:820): avc: denied { write } for pid=13175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 927.500532][T13199] misc userio: Invalid payload size [ 927.813340][T13207] FAULT_INJECTION: forcing a failure. [ 927.813340][T13207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.813747][T13207] CPU: 0 UID: 0 PID: 13207 Comm: syz.5.2138 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.813776][T13207] Tainted: [L]=SOFTLOCKUP [ 927.813783][T13207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 927.813795][T13207] Call Trace: [ 927.813802][T13207] [ 927.813810][T13207] dump_stack_lvl+0x100/0x190 [ 927.813848][T13207] should_fail_ex.cold+0x5/0xa [ 927.813876][T13207] _copy_from_user+0x2e/0xd0 [ 927.813912][T13207] memdup_user_nul+0x6c/0x120 [ 927.813943][T13207] subsystem_filter_write+0x6a/0x120 [ 927.813966][T13207] vfs_write+0x2aa/0x1050 [ 927.813987][T13207] ? __pfx_subsystem_filter_write+0x10/0x10 [ 927.814008][T13207] ? lock_acquire+0x1d1/0x380 [ 927.814028][T13207] ? __fget_files+0x34/0x3d0 [ 927.814050][T13207] ? __pfx_vfs_write+0x10/0x10 [ 927.814067][T13207] ? find_held_lock+0x2b/0x80 [ 927.814092][T13207] ? __fget_files+0x215/0x3d0 [ 927.814119][T13207] ? __fget_files+0x21f/0x3d0 [ 927.814148][T13207] ksys_write+0x12a/0x250 [ 927.814166][T13207] ? __pfx_ksys_write+0x10/0x10 [ 927.814185][T13207] ? trace_hardirqs_off+0x70/0x170 [ 927.814215][T13207] do_syscall_64+0x123/0x790 [ 927.814242][T13207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.814261][T13207] RIP: 0033:0x7f1be4d9e159 [ 927.814278][T13207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.814296][T13207] RSP: 002b:00007f1be5c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 927.814316][T13207] RAX: ffffffffffffffda RBX: 00007f1be5026180 RCX: 00007f1be4d9e159 [ 927.814329][T13207] RDX: 000000000000000e RSI: 0000200000000400 RDI: 0000000000000006 [ 927.814340][T13207] RBP: 00007f1be5c36090 R08: 0000000000000000 R09: 0000000000000000 [ 927.814352][T13207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.814363][T13207] R13: 00007f1be5026218 R14: 00007f1be5026180 R15: 00007ffeff52efd8 [ 927.814389][T13207] [ 928.021752][ T31] audit: type=1400 audit(1788866340.931:821): avc: denied { write } for pid=13206 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 928.107306][ T5739] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 928.151295][T12987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.163488][ T5264] 8021q: adding VLAN 0 to HW filter on device eth8 [ 928.773334][T12987] veth0_vlan: entered promiscuous mode [ 928.801890][T12987] veth1_vlan: entered promiscuous mode [ 928.919991][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 928.920029][ T31] audit: type=1400 audit(1788866341.821:823): avc: denied { append } for pid=13227 comm="syz.2.2137" name="uprobe_events" dev="tracefs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 928.920488][T12987] veth0_macvtap: entered promiscuous mode [ 928.929872][T12987] veth1_macvtap: entered promiscuous mode [ 928.961933][T12987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.971503][T13228] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2137'. [ 928.981813][T12987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.059730][ T31] audit: type=1400 audit(1788866341.961:824): avc: denied { ioctl } for pid=13227 comm="syz.2.2137" path="socket:[44470]" dev="sockfs" ino=44470 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 929.117776][ T5667] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.120073][ T6283] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.120791][ T6283] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.121200][ T6283] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.127010][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2137'. [ 929.173108][T13231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.173146][T13231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.251829][T13231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.251875][T13231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.443867][ T6229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.443900][ T6229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.629036][ T6283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.640263][ T6283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.667053][ T31] audit: type=1400 audit(1788866342.561:825): avc: denied { mounton } for pid=12987 comm="syz-executor" path="/root/syzkaller.8ipVuC/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 929.688103][ T31] audit: type=1400 audit(1788866342.571:826): avc: denied { mounton } for pid=12987 comm="syz-executor" path="/root/syzkaller.8ipVuC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 929.689862][ T31] audit: type=1400 audit(1788866342.571:827): avc: denied { mounton } for pid=12987 comm="syz-executor" path="/root/syzkaller.8ipVuC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=44679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 929.721583][ T31] audit: type=1400 audit(1788866342.631:828): avc: denied { mounton } for pid=12987 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 929.732329][ T31] audit: type=1400 audit(1788866342.631:829): avc: denied { mount } for pid=12987 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 929.734923][ T31] audit: type=1400 audit(1788866342.631:830): avc: denied { mounton } for pid=12987 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 929.834872][T13243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2142'. [ 930.482815][ T5739] usb 4-1: unable to get BOS descriptor or descriptor too short [ 930.482871][ T5739] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 930.482920][ T5739] usb 4-1: too many configurations: 180, using maximum allowed: 8 [ 930.486446][ T5739] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 930.486487][ T5739] usb 4-1: can't read configurations, error -71 [ 930.914513][ T31] audit: type=1400 audit(1788866343.811:831): avc: denied { unmount } for pid=6145 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 931.100991][T12519] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 931.131500][T12519] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 931.154366][T12519] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 931.156355][ T5739] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 931.177405][T12519] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 931.200470][T12519] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 931.247237][ T5746] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 931.292091][T13261] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 931.313629][ T5739] usb 4-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 931.314565][ T5739] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 931.314591][ T5739] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 931.314613][ T5739] usb 4-1: config 0 interface 0 has no altsetting 0 [ 931.314637][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.320709][ T5739] usb 4-1: config 0 descriptor?? [ 931.437392][ T5746] usb 3-1: Using ep0 maxpacket: 16 [ 931.499071][T12519] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 931.601789][ T5746] usb 3-1: unable to get BOS descriptor or descriptor too short [ 931.609636][ T5746] usb 3-1: New USB device found, idVendor=12d1, idProduct=726a, bcdDevice=53.c6 [ 931.619490][ T5746] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 931.629113][ T5746] usb 3-1: can't read configurations, error -71 [ 931.689511][T13267] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 931.712471][ T6283] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.761521][T12519] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 931.761638][T12519] Bluetooth: hci4: Injecting HCI hardware error event [ 931.763039][T11838] Bluetooth: hci4: hardware error 0x00 [ 932.694720][T13280] af_packet: tpacket_rcv: packet too big, clamped from 7 to 4294967272. macoff=96 [ 932.697062][ T6283] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.928390][ T6283] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.032807][T13288] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2153'. [ 933.241804][ T6283] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.260772][ T31] audit: type=1400 audit(1788866346.161:832): avc: denied { getopt } for pid=13292 comm="syz.5.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 933.261603][T13294] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2155'. [ 933.287839][T12519] Bluetooth: hci1: command tx timeout [ 933.320816][T13297] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2149'. [ 933.781424][ T5739] usbhid 4-1:0.0: can't add hid device: -71 [ 933.781521][ T5739] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 933.804201][ T5739] usb 4-1: USB disconnect, device number 72 [ 933.959252][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 933.965387][ T31] audit: type=1400 audit(1788866346.851:834): avc: denied { listen } for pid=13309 comm="syz.5.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 934.056337][T13313] overlayfs: missing 'lowerdir' [ 934.077203][T11838] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 934.787193][ T5739] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 934.938046][ T5739] usb 4-1: New USB device found, idVendor=6547, idProduct=0232, bcdDevice= 0.00 [ 934.940650][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.940672][ T5739] usb 4-1: Product: syz [ 934.940685][ T5739] usb 4-1: Manufacturer: syz [ 934.940697][ T5739] usb 4-1: SerialNumber: syz [ 935.102760][ T5739] ark3116 4-1:1.0: ark3116 converter detected [ 935.330468][ T31] audit: type=1400 audit(1788866348.231:835): avc: denied { getopt } for pid=13322 comm="syz.5.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 935.384021][T11838] Bluetooth: hci1: command tx timeout [ 935.568864][ T5739] ark3116 ttyUSB0: using RS232 mode [ 935.607490][ T5739] usb 4-1: ark3116 converter now attached to ttyUSB0 [ 935.637582][ T5739] usb 4-1: USB disconnect, device number 73 [ 935.651703][ T6283] bridge_slave_1: left allmulticast mode [ 935.651748][ T6283] bridge_slave_1: left promiscuous mode [ 935.651895][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.653750][ T5739] ark3116 ttyUSB0: ark3116 converter now disconnected from ttyUSB0 [ 935.657048][ T5739] ark3116 4-1:1.0: device disconnected [ 935.673914][ T6283] bridge_slave_0: left allmulticast mode [ 935.673936][ T6283] bridge_slave_0: left promiscuous mode [ 935.674085][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.870969][ T31] audit: type=1400 audit(1788866348.771:836): avc: denied { write } for pid=13321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.994235][ T31] audit: type=1400 audit(1788866348.891:837): avc: denied { write } for pid=13340 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.832806][T13351] FAULT_INJECTION: forcing a failure. [ 936.832806][T13351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.832845][T13351] CPU: 0 UID: 0 PID: 13351 Comm: syz.2.2164 Tainted: G L syzkaller #0 PREEMPT(full) [ 936.832862][T13351] Tainted: [L]=SOFTLOCKUP [ 936.832866][T13351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 936.832872][T13351] Call Trace: [ 936.832877][T13351] [ 936.832881][T13351] dump_stack_lvl+0x100/0x190 [ 936.832902][T13351] should_fail_ex.cold+0x5/0xa [ 936.832918][T13351] _copy_from_user+0x2e/0xd0 [ 936.832937][T13351] do_ipt_set_ctl+0xa09/0xcf0 [ 936.832953][T13351] ? nf_sockopt_find.isra.0+0x222/0x290 [ 936.832965][T13351] ? nf_sockopt_find.isra.0+0x222/0x290 [ 936.832980][T13351] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 936.832995][T13351] ? __mutex_unlock_slowpath+0x35d/0x930 [ 936.833010][T13351] ? sockopt_release_sock+0x5c/0x70 [ 936.833024][T13351] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 936.833043][T13351] ? nf_sockopt_find.isra.0+0x222/0x290 [ 936.833057][T13351] nf_setsockopt+0x8d/0xf0 [ 936.833071][T13351] ip_setsockopt+0xcb/0xf0 [ 936.833088][T13351] tcp_setsockopt+0xa7/0x100 [ 936.833105][T13351] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 936.833120][T13351] do_sock_setsockopt+0xf3/0x1d0 [ 936.833136][T13351] __sys_setsockopt+0x195/0x220 [ 936.833157][T13351] __x64_sys_setsockopt+0xbd/0x160 [ 936.833167][T13351] ? do_syscall_64+0xae/0x790 [ 936.833182][T13351] ? lockdep_hardirqs_on+0x7d/0x110 [ 936.833195][T13351] do_syscall_64+0x123/0x790 [ 936.833210][T13351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.833222][T13351] RIP: 0033:0x7f2bd599e159 [ 936.833232][T13351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.833243][T13351] RSP: 002b:00007f2bd3bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 936.833255][T13351] RAX: ffffffffffffffda RBX: 00007f2bd5c26090 RCX: 00007f2bd599e159 [ 936.833262][T13351] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 936.833269][T13351] RBP: 00007f2bd3bd5090 R08: 00000000000004b8 R09: 0000000000000000 [ 936.833276][T13351] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 936.833283][T13351] R13: 00007f2bd5c26128 R14: 00007f2bd5c26090 R15: 00007ffe40a85448 [ 936.833297][T13351] [ 937.437504][T11838] Bluetooth: hci1: command tx timeout [ 937.492055][ T6283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.539849][ T6283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.555662][ T6283] bond0 (unregistering): Released all slaves [ 937.578618][ T6283] bond1 (unregistering): Released all slaves [ 937.649435][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9 [ 937.896331][ T6283] tipc: Disabling bearer [ 937.904502][ T6283] tipc: Left network mode [ 937.914337][T13257] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.921930][T13257] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.929337][T13257] bridge_slave_0: entered allmulticast mode [ 937.940933][T13257] bridge_slave_0: entered promiscuous mode [ 937.950952][T13257] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.958314][T13257] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.965538][T13257] bridge_slave_1: entered allmulticast mode [ 937.973001][T13257] bridge_slave_1: entered promiscuous mode [ 938.010999][ T5746] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 938.112319][T13257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.125343][T13257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.195303][ T5746] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 938.197733][ T5746] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.197761][ T5746] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.197789][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.219016][ T5746] usb 6-1: config 0 descriptor?? [ 938.266237][ T31] audit: type=1400 audit(1788866351.161:838): avc: denied { recv } for pid=13374 comm="dhcpcd-run-hook" saddr=10.128.0.169 src=30006 daddr=10.128.1.110 dest=50932 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 938.495035][T13257] team0: Port device team_slave_0 added [ 938.507525][T13257] team0: Port device team_slave_1 added [ 938.577498][ T5746] usbhid 6-1:0.0: can't add hid device: -71 [ 938.577579][ T5746] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 938.582773][ T5746] usb 6-1: USB disconnect, device number 52 [ 938.624084][ T31] audit: type=1400 audit(1788866351.521:839): avc: denied { remount } for pid=13369 comm="syz.6.2169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 938.653642][T13257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.653669][T13257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.695887][T13257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.706998][T13257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.707015][T13257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.707036][T13257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.746755][ T31] audit: type=1400 audit(1788866351.651:840): avc: denied { write } for pid=13374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 938.891147][ T6283] hsr_slave_0: left promiscuous mode [ 938.897066][ T6283] hsr_slave_1: left promiscuous mode [ 938.898469][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.898485][ T6283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.904193][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.904209][ T6283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.945968][ T6283] veth1_vlan: left promiscuous mode [ 938.946057][ T6283] veth0_vlan: left promiscuous mode [ 938.981272][ T31] audit: type=1400 audit(1788866351.881:841): avc: denied { write } for pid=13396 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 939.517250][T11838] Bluetooth: hci1: command tx timeout [ 939.780335][ T6283] team0 (unregistering): Port device team_slave_1 removed [ 939.796226][ T6283] team0 (unregistering): Port device team_slave_0 removed [ 939.919309][ T5629] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 940.035097][ T5264] 8021q: adding VLAN 0 to HW filter on device eth10 [ 940.055502][T13257] hsr_slave_0: entered promiscuous mode [ 940.056232][T13257] hsr_slave_1: entered promiscuous mode [ 940.057747][T13257] debugfs: 'hsr0' already exists in 'hsr' [ 940.057763][T13257] Cannot create hsr debugfs directory [ 940.082668][ T31] audit: type=1400 audit(1788866352.991:842): avc: denied { egress } for pid=24 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 940.082865][ T31] audit: type=1400 audit(1788866352.991:843): avc: denied { sendto } for pid=24 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 940.106704][ T5629] usb 6-1: Using ep0 maxpacket: 16 [ 940.322927][ T31] audit: type=1400 audit(1788866353.221:844): avc: denied { read } for pid=13403 comm="syz.5.2174" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 940.353024][ T31] audit: type=1400 audit(1788866353.251:845): avc: denied { open } for pid=13403 comm="syz.5.2174" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 940.643550][ T31] audit: type=1400 audit(1788866353.451:846): avc: denied { mounton } for pid=13415 comm="syz.3.2178" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 942.440535][ T31] audit: type=1400 audit(1788866355.301:847): avc: denied { mounton } for pid=13423 comm="syz.2.2179" path="/467/file0" dev="tmpfs" ino=2573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 942.502183][T13431] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2181'. [ 942.703000][ T31] audit: type=1400 audit(1788866355.601:848): avc: denied { ioctl } for pid=13432 comm="syz.3.2180" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 942.856300][ T5629] usb 6-1: unable to get BOS descriptor or descriptor too short [ 942.856360][ T5629] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 942.856389][ T5629] usb 6-1: no configurations [ 942.856401][ T5629] usb 6-1: can't read configurations, error -22 [ 942.859937][T13438] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2182'. [ 943.076219][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2182'. [ 943.732754][T13438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.732787][T13438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.745064][T13438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.745085][T13438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.803608][ T31] audit: type=1400 audit(1788866356.701:849): avc: denied { write } for pid=13433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 943.924883][ T31] audit: type=1400 audit(1788866356.821:850): avc: denied { setopt } for pid=13450 comm="syz.2.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 944.236136][ T31] audit: type=1400 audit(1788866357.131:851): avc: denied { write } for pid=13458 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 944.275358][T13257] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 944.301889][T13257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 944.304223][T13257] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 944.340288][T13257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 944.345667][T13257] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 944.377065][ T31] audit: type=1400 audit(1788866357.271:852): avc: denied { write } for pid=13450 comm="syz.2.2183" name="cluster" dev="configfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 944.384484][T13257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 944.389928][T13257] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 944.423848][ T31] audit: type=1400 audit(1788866357.321:853): avc: denied { write } for pid=13450 comm="syz.2.2183" name="heartbeat" dev="configfs" ino=46432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 944.433825][T13257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 944.526381][ T5264] 8021q: adding VLAN 0 to HW filter on device eth11 [ 944.610811][T13257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.678247][T13257] 8021q: adding VLAN 0 to HW filter on device team0 [ 944.697771][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.697859][ T6283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.709814][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.709888][ T6283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.779916][ T31] audit: type=1400 audit(1788866357.681:854): avc: denied { write } for pid=13475 comm="syz.6.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 945.189629][T13491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2190'. [ 945.247417][ T31] audit: type=1400 audit(1788866358.141:855): avc: denied { mount } for pid=13486 comm="syz.6.2191" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 945.351289][ T31] audit: type=1400 audit(1788866358.251:856): avc: denied { write } for pid=13473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 945.505202][ T31] audit: type=1400 audit(1788866358.401:857): avc: denied { write } for pid=13499 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 945.564953][ T31] audit: type=1400 audit(1788866358.461:858): avc: denied { bind } for pid=13501 comm="syz.2.2192" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 945.565405][ T31] audit: type=1400 audit(1788866358.461:859): avc: denied { name_bind } for pid=13501 comm="syz.2.2192" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 945.567209][ T31] audit: type=1400 audit(1788866358.461:860): avc: denied { node_bind } for pid=13501 comm="syz.2.2192" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 946.431112][T13523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 946.639802][T13527] FAULT_INJECTION: forcing a failure. [ 946.639802][T13527] name failslab, interval 1, probability 0, space 0, times 0 [ 946.639836][T13527] CPU: 0 UID: 0 PID: 13527 Comm: syz.3.2186 Tainted: G L syzkaller #0 PREEMPT(full) [ 946.639853][T13527] Tainted: [L]=SOFTLOCKUP [ 946.639857][T13527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 946.639864][T13527] Call Trace: [ 946.639869][T13527] [ 946.639874][T13527] dump_stack_lvl+0x100/0x190 [ 946.639894][T13527] should_fail_ex.cold+0x5/0xa [ 946.639911][T13527] should_failslab+0xc2/0x120 [ 946.639928][T13527] __kmalloc_noprof+0xfc/0x840 [ 946.639939][T13527] ? rcu_is_watching+0x13/0xc0 [ 946.639955][T13527] ? tomoyo_realpath_from_path+0xb6/0x690 [ 946.639971][T13527] tomoyo_realpath_from_path+0xb6/0x690 [ 946.639987][T13527] tomoyo_path_number_perm+0x23c/0x580 [ 946.640004][T13527] ? tomoyo_path_number_perm+0x22e/0x580 [ 946.640022][T13527] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 946.640045][T13527] ? __lock_acquire+0x5c0/0x1f40 [ 946.640063][T13527] ? __fget_files+0x34/0x3d0 [ 946.640078][T13527] ? find_held_lock+0x2b/0x80 [ 946.640093][T13527] ? hook_file_ioctl_common+0x140/0x440 [ 946.640111][T13527] ? __fget_files+0x21f/0x3d0 [ 946.640126][T13527] security_file_ioctl+0xd3/0x230 [ 946.640139][T13527] __x64_sys_ioctl+0xb7/0x210 [ 946.640151][T13527] do_syscall_64+0x123/0x790 [ 946.640167][T13527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.640179][T13527] RIP: 0033:0x7f6bad59e159 [ 946.640190][T13527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.640203][T13527] RSP: 002b:00007f6bae468028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 946.640214][T13527] RAX: ffffffffffffffda RBX: 00007f6bad825fa0 RCX: 00007f6bad59e159 [ 946.640222][T13527] RDX: 0000000000000000 RSI: 0000000000007040 RDI: 0000000000000003 [ 946.640228][T13527] RBP: 00007f6bae468090 R08: 0000000000000000 R09: 0000000000000000 [ 946.640235][T13527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 946.640241][T13527] R13: 00007f6bad826038 R14: 00007f6bad825fa0 R15: 00007ffef45f9838 [ 946.640256][T13527] [ 946.640276][T13527] ERROR: Out of memory at tomoyo_realpath_from_path. [ 946.960474][T13257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.189324][T13547] ima: policy update completed [ 948.568640][T13257] veth0_vlan: entered promiscuous mode [ 948.606493][T13257] veth1_vlan: entered promiscuous mode [ 948.720095][T13257] veth0_macvtap: entered promiscuous mode [ 948.758202][T13257] veth1_macvtap: entered promiscuous mode [ 948.828549][T13257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.855623][T13257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.907373][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.910109][ T6755] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.910280][ T6755] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.915528][ T6755] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.924979][ T5746] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 949.089040][ T5746] usb 7-1: Using ep0 maxpacket: 16 [ 949.243350][T13577] program syz.3.2204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 949.280523][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 949.281738][ T31] audit: type=1400 audit(1788866362.181:873): avc: denied { ioctl } for pid=13557 comm="syz.6.2198" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 950.522025][ T31] audit: type=1400 audit(1788866363.351:874): avc: denied { write } for pid=13572 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 951.058836][T13233] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 951.338999][T13233] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 951.345696][T13233] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.345759][T13233] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 951.345798][T13233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.454119][T13233] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 951.469557][ T5884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.469596][ T5884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.618910][T13233] usb 3-1: USB disconnect, device number 54 [ 951.660399][T13233] idmouse 3-1:1.0: disconnected [ 951.957878][ T5793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.957912][ T5793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.260813][ T31] audit: type=1326 audit(1788866365.161:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bad59e159 code=0x7fc00000 [ 952.289450][ T31] audit: type=1326 audit(1788866365.161:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bad55e98e code=0x7fc00000 [ 952.290243][ T31] audit: type=1326 audit(1788866365.161:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bad59e159 code=0x7fc00000 [ 952.290286][ T31] audit: type=1326 audit(1788866365.161:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bad59e159 code=0x7fc00000 [ 952.290327][ T31] audit: type=1326 audit(1788866365.161:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bad59e159 code=0x7fc00000 [ 952.290387][ T31] audit: type=1326 audit(1788866365.161:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bad59e159 code=0x7fc00000 [ 952.290428][ T31] audit: type=1326 audit(1788866365.161:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bad59e159 code=0x7fc00000 [ 952.290471][ T31] audit: type=1326 audit(1788866365.161:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bad59e159 code=0x7fc00000 [ 952.666124][T13621] futex_wake_op: syz.7.2144 tries to shift op by -1; fix this program [ 952.764080][T13621] FAULT_INJECTION: forcing a failure. [ 952.764080][T13621] name failslab, interval 1, probability 0, space 0, times 0 [ 952.773096][T13622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2207'. [ 952.810506][T13621] CPU: 1 UID: 0 PID: 13621 Comm: syz.7.2144 Tainted: G L syzkaller #0 PREEMPT(full) [ 952.810539][T13621] Tainted: [L]=SOFTLOCKUP [ 952.810544][T13621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 952.810551][T13621] Call Trace: [ 952.810556][T13621] [ 952.810562][T13621] dump_stack_lvl+0x100/0x190 [ 952.810587][T13621] should_fail_ex.cold+0x5/0xa [ 952.810621][T13621] should_failslab+0xc2/0x120 [ 952.810644][T13621] kmem_cache_alloc_noprof+0x92/0x6a0 [ 952.810664][T13621] ? seq_open+0x55/0x170 [ 952.810678][T13621] seq_open+0x55/0x170 [ 952.810690][T13621] kernfs_fop_open+0x590/0xd50 [ 952.810709][T13621] do_dentry_open+0x6ab/0x14d0 [ 952.810720][T13621] ? __pfx_kernfs_fop_open+0x10/0x10 [ 952.810742][T13621] vfs_open+0x82/0x3f0 [ 952.810769][T13621] path_openat+0x19fa/0x2440 [ 952.810795][T13621] ? __pfx_path_openat+0x10/0x10 [ 952.810813][T13621] ? __pfx___up_read+0x10/0x10 [ 952.810826][T13621] ? do_user_addr_fault+0x7d7/0x12f0 [ 952.810841][T13621] ? do_user_addr_fault+0x7d7/0x12f0 [ 952.810858][T13621] do_file_open+0x20e/0x430 [ 952.810874][T13621] ? __pfx_do_file_open+0x10/0x10 [ 952.810895][T13621] ? lockdep_hardirqs_on+0x7d/0x110 [ 952.810934][T13621] ? _raw_spin_unlock+0x28/0x50 [ 952.810952][T13621] ? alloc_fd+0x471/0x7a0 [ 952.810971][T13621] do_sys_openat2+0x10f/0x1e0 [ 952.810990][T13621] ? __pfx_do_sys_openat2+0x10/0x10 [ 952.811010][T13621] __x64_sys_openat+0x12d/0x210 [ 952.811032][T13621] ? __pfx___x64_sys_openat+0x10/0x10 [ 952.811069][T13621] do_syscall_64+0x123/0x790 [ 952.811095][T13621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.811109][T13621] RIP: 0033:0x7fdd58b5e98e [ 952.811124][T13621] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 952.811135][T13621] RSP: 002b:00007fdd59aaa9b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 952.811147][T13621] RAX: ffffffffffffffda RBX: 00007fdd59aab6c0 RCX: 00007fdd58b5e98e [ 952.811155][T13621] RDX: 0000000000080001 RSI: 00007fdd58c09070 RDI: ffffffffffffff9c [ 952.811163][T13621] RBP: 00007fdd58c09070 R08: 0000000000000000 R09: 0000000000000000 [ 952.811174][T13621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 952.811185][T13621] R13: 00007fdd59aaaa90 R14: 00007fdd58e25fa0 R15: 00007ffd6833aed8 [ 952.811211][T13621] [ 952.902447][ T5746] usb 7-1: unable to get BOS descriptor or descriptor too short [ 952.902490][ T5746] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 952.902522][ T5746] usb 7-1: no configurations [ 952.902535][ T5746] usb 7-1: can't read configurations, error -22 [ 954.344100][ T5739] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 954.857651][ T5739] usb 4-1: unable to get BOS descriptor or descriptor too short [ 954.924796][T13642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 954.998683][ T5739] usb 4-1: not running at top speed; connect to a high speed hub [ 954.998725][ T5739] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 955.028389][ T5739] usb 4-1: config 1 has an invalid interface number: 93 but max is 0 [ 955.028413][ T5739] usb 4-1: config 1 has no interface number 0 [ 955.028447][ T5739] usb 4-1: config 1 interface 93 has no altsetting 0 [ 955.108765][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.108802][ T5739] usb 4-1: Product: syz [ 955.108833][ T5739] usb 4-1: Manufacturer: syz [ 955.108851][ T5739] usb 4-1: SerialNumber: syz [ 955.941664][T13648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 955.950697][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 955.950724][ T31] audit: type=1400 audit(1788866368.841:888): avc: denied { shutdown } for pid=13646 comm="syz.6.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 956.001769][ T31] audit: type=1400 audit(1788866368.891:889): avc: denied { write } for pid=13646 comm="syz.6.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 956.021665][ T31] audit: type=1400 audit(1788866368.891:890): avc: denied { connect } for pid=13646 comm="syz.6.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 956.042131][ T31] audit: type=1400 audit(1788866368.891:891): avc: denied { name_connect } for pid=13646 comm="syz.6.2212" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 956.069473][ T31] audit: type=1400 audit(1788866368.961:892): avc: denied { accept } for pid=13646 comm="syz.6.2212" lport=36500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 956.460565][ T5739] usb 4-1: USB disconnect, device number 74 [ 956.518761][T13641] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.687203][T10003] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 956.735966][ T31] audit: type=1400 audit(1788866369.631:893): avc: denied { write } for pid=13647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.742403][T13662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.847192][T10003] usb 6-1: Using ep0 maxpacket: 32 [ 956.853368][T10003] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 956.865519][T10003] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 956.873843][T10003] usb 6-1: config 0 has no interface number 0 [ 956.873905][T10003] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 956.873929][T10003] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 956.873954][T10003] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 956.873980][T10003] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 956.896314][ T31] audit: type=1400 audit(1788866369.791:894): avc: denied { write } for pid=13672 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.952532][T10003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.961236][T10003] usb 6-1: Product: syz [ 956.961643][T10003] usb 6-1: Manufacturer: syz [ 956.961661][T10003] usb 6-1: SerialNumber: syz [ 956.981353][T10003] usb 6-1: config 0 descriptor?? [ 956.993203][T10003] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input16 [ 957.012889][ C1] bcm5974 6-1:0.119: trackpad urb failed: -1 [ 957.106773][ T5264] 8021q: adding VLAN 0 to HW filter on device eth12 [ 957.231808][T13663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.241886][T13663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.254042][T10003] usb 6-1: USB disconnect, device number 55 [ 957.579673][ T31] audit: type=1400 audit(1788866370.481:895): avc: denied { connect } for pid=13692 comm="syz.3.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 957.751303][ T5739] hid-generic 0005:04F3:1010.0009: item fetching failed at offset 0/1 [ 957.767284][ T5739] hid-generic 0005:04F3:1010.0009: probe with driver hid-generic failed with error -22 [ 957.881471][ T31] audit: type=1400 audit(1788866370.781:896): avc: denied { write } for pid=13679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.032758][ T31] audit: type=1400 audit(1788866370.931:897): avc: denied { write } for pid=13704 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.149393][T13707] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2222'. [ 958.337310][ T2289] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 958.456137][ T5264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 958.489688][ T2289] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 958.502234][ T2289] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 958.502269][ T2289] usb 3-1: config 0 has no interface number 0 [ 958.502314][ T2289] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 5120, setting to 1024 [ 958.502342][ T2289] usb 3-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 958.502364][ T2289] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 958.502389][ T2289] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 958.502410][ T2289] usb 3-1: config 0 interface 11 has no altsetting 0 [ 958.502445][ T2289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.577467][ T2289] usb 3-1: config 0 descriptor?? [ 958.607848][ T2289] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 958.618413][ T2289] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 958.634155][ T2289] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 958.634245][ T2289] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 958.634303][ T2289] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 958.634360][ T2289] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 958.634422][ T2289] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 958.675625][ T2289] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 958.686640][ T2289] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 958.695519][ T2289] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 958.695607][ T2289] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 958.695667][ T2289] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 958.695727][ T2289] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 958.695784][ T2289] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 958.700240][T13724] syzkaller0: entered promiscuous mode [ 958.700259][T13724] syzkaller0: entered allmulticast mode [ 958.749659][ T2289] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 960.105029][T13733] FAULT_INJECTION: forcing a failure. [ 960.105029][T13733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.106401][T13733] CPU: 0 UID: 0 PID: 13733 Comm: syz.6.2220 Tainted: G L syzkaller #0 PREEMPT(full) [ 960.106432][T13733] Tainted: [L]=SOFTLOCKUP [ 960.106440][T13733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 960.106451][T13733] Call Trace: [ 960.106457][T13733] [ 960.106465][T13733] dump_stack_lvl+0x100/0x190 [ 960.106497][T13733] should_fail_ex.cold+0x5/0xa [ 960.106523][T13733] _copy_from_user+0x2e/0xd0 [ 960.106555][T13733] memdup_user_nul+0x6c/0x120 [ 960.106585][T13733] ima_write_policy+0x122/0x480 [ 960.106612][T13733] ? __pfx_ima_write_policy+0x10/0x10 [ 960.106635][T13733] ? ksys_write+0x12a/0x250 [ 960.106664][T13733] vfs_write+0x2aa/0x1050 [ 960.106684][T13733] ? __pfx_ima_write_policy+0x10/0x10 [ 960.106709][T13733] ? lock_acquire+0x1d1/0x380 [ 960.106729][T13733] ? __fget_files+0x34/0x3d0 [ 960.106751][T13733] ? __pfx_vfs_write+0x10/0x10 [ 960.106768][T13733] ? find_held_lock+0x2b/0x80 [ 960.106793][T13733] ? __fget_files+0x215/0x3d0 [ 960.106826][T13733] ? __fget_files+0x21f/0x3d0 [ 960.106855][T13733] ksys_write+0x12a/0x250 [ 960.106874][T13733] ? __pfx_ksys_write+0x10/0x10 [ 960.106900][T13733] do_syscall_64+0x123/0x790 [ 960.106927][T13733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.106947][T13733] RIP: 0033:0x7fd12f79e159 [ 960.106971][T13733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.106988][T13733] RSP: 002b:00007fd130642028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 960.107007][T13733] RAX: ffffffffffffffda RBX: 00007fd12fa26090 RCX: 00007fd12f79e159 [ 960.107020][T13733] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 960.107032][T13733] RBP: 00007fd130642090 R08: 0000000000000000 R09: 0000000000000000 [ 960.107042][T13733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.107053][T13733] R13: 00007fd12fa26128 R14: 00007fd12fa26090 R15: 00007ffe0294c1f8 [ 960.107080][T13733] [ 960.211345][T13727] ima: policy update failed [ 960.752662][T13737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13737 comm=syz.2.2223 [ 960.819354][ T2289] usb 3-1: USB disconnect, device number 55 [ 960.895098][ T2289] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 960.903319][ T2289] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 960.907547][ T2289] keyspan 3-1:0.11: device disconnected [ 961.201113][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 961.201149][ T31] audit: type=1400 audit(1788866374.101:900): avc: denied { bind } for pid=13744 comm="syz.5.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 961.232665][ T31] audit: type=1400 audit(1788866374.131:901): avc: denied { name_bind } for pid=13744 comm="syz.5.2234" src=12816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 961.255641][ T31] audit: type=1400 audit(1788866374.131:902): avc: denied { node_bind } for pid=13744 comm="syz.5.2234" saddr=172.20.0.1 src=12816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 961.307957][ T5629] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 961.457814][ T5629] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 961.468656][ T5629] usb 4-1: config index 0 descriptor too short (expected 69, got 51) [ 961.468714][ T5629] usb 4-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0x2F, changing to 0xF [ 961.468748][ T5629] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0xF has invalid maxpacket 30309, setting to 64 [ 961.508575][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.508611][ T5629] usb 4-1: Product: syz [ 961.508637][ T5629] usb 4-1: Manufacturer: syz [ 961.508654][ T5629] usb 4-1: SerialNumber: syz [ 961.575383][ T5629] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 962.366658][T13748] ima: policy update failed [ 962.372956][ T31] audit: type=1802 audit(1788866375.261:903): pid=13748 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.6.2230" res=0 errno=0 [ 962.581342][ T5629] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 962.643320][T13755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2236'. [ 962.674910][ T5629] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 962.691622][ T5629] usb 4-1: USB disconnect, device number 75 [ 962.704931][T13754] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 962.709430][T13754] rtrs_client L2095: : Failed to resolve address, err: -ENODEV [ 962.709711][T13754] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 962.803522][ T5660] udevd[5660]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 963.176431][T13772] syzkaller0: entered promiscuous mode [ 963.176481][T13772] syzkaller0: entered allmulticast mode [ 963.182379][ T5629] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 963.338030][ T5629] usb 6-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 963.350111][ T5629] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 963.350156][ T5629] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 963.350202][ T5629] usb 6-1: config 0 interface 0 has no altsetting 0 [ 963.350235][ T5629] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.394148][ T5629] usb 6-1: config 0 descriptor?? [ 965.126930][ T1220] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 965.277373][ T1220] usb 7-1: Using ep0 maxpacket: 16 [ 966.885335][ T5629] usbhid 6-1:0.0: can't add hid device: -71 [ 966.886283][ T5629] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 967.008113][ T5629] usb 6-1: USB disconnect, device number 56 [ 968.097228][ T5629] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 968.279173][ T5629] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 968.295721][ T5629] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.307858][ T5629] usb 6-1: config 0 interface 0 has no altsetting 0 [ 968.307886][ T5629] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.350569][ T5629] usb 6-1: config 0 descriptor?? [ 968.786424][ T1220] usb 7-1: unable to get BOS descriptor or descriptor too short [ 968.786476][ T1220] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 968.786770][ T1220] usb 7-1: no configurations [ 968.786792][ T1220] usb 7-1: can't read configurations, error -22 [ 968.838415][ T5629] bigben 0003:146B:0902.000A: unexpected rdesc, please submit for review [ 968.849100][ T5629] hid_parser_main: 5 callbacks suppressed [ 968.856425][ T5629] bigben 0003:146B:0902.000A: unknown main item tag 0x0 [ 968.864138][ T5629] bigben 0003:146B:0902.000A: unknown main item tag 0x0 [ 968.873262][ T5629] bigben 0003:146B:0902.000A: unknown main item tag 0x0 [ 968.880572][ T5629] bigben 0003:146B:0902.000A: unknown main item tag 0x0 [ 968.887629][ T5629] bigben 0003:146B:0902.000A: unknown main item tag 0x0 [ 968.896289][ T5629] bigben 0003:146B:0902.000A: unknown main item tag 0x0 [ 968.904953][ T5629] bigben 0003:146B:0902.000A: unknown main item tag 0x0 [ 968.912103][ T5629] bigben 0003:146B:0902.000A: unknown main item tag 0x0 [ 968.919263][ T5629] bigben 0003:146B:0902.000A: unknown main item tag 0x0 [ 968.926481][ T5629] bigben 0003:146B:0902.000A: unknown main item tag 0x0 [ 968.933569][ T5629] bigben 0003:146B:0902.000A: unbalanced collection at end of report description [ 968.943929][ T5629] bigben 0003:146B:0902.000A: parse failed [ 968.949942][ T5629] bigben 0003:146B:0902.000A: probe with driver bigben failed with error -22 [ 969.079247][T13813] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2247'. [ 969.128965][ T31] audit: type=1400 audit(1788866382.031:904): avc: denied { connect } for pid=13814 comm="syz.7.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 969.767419][ T5629] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 969.887715][ T31] audit: type=1400 audit(1788866382.781:905): avc: denied { write } for pid=13810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 969.927241][ T5629] usb 4-1: Using ep0 maxpacket: 16 [ 969.973169][T11838] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 969.989400][ T5629] usb 4-1: unable to get BOS descriptor or descriptor too short [ 970.002004][ T5629] usb 4-1: New USB device found, idVendor=12d1, idProduct=726a, bcdDevice=53.c6 [ 970.016697][ T5629] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 970.024443][ T5629] usb 4-1: can't read configurations, error -71 [ 970.092119][ T31] audit: type=1400 audit(1788866382.991:906): avc: denied { write } for pid=13836 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 970.245450][T13844] syzkaller0: entered promiscuous mode [ 970.251214][T13844] syzkaller0: entered allmulticast mode [ 970.481042][T13853] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2257'. [ 970.502456][T13853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 970.569921][ T1220] usb 6-1: USB disconnect, device number 57 [ 970.629120][ T5746] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 970.731379][T13858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13858 comm=syz.6.2261 [ 970.778007][ T5746] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 970.781146][ T5746] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.781172][ T5746] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.781191][ T5746] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 970.781223][ T5746] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.802564][ T5746] usb 8-1: config 0 descriptor?? [ 971.316864][ T5746] usbhid 8-1:0.0: can't add hid device: -71 [ 971.320097][ T5746] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 971.323110][ T5746] usb 8-1: USB disconnect, device number 2 [ 971.339739][ T31] audit: type=1400 audit(1788866384.241:907): avc: denied { wake_alarm } for pid=13857 comm="syz.6.2261" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 971.794508][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2266'. [ 971.873700][ T5746] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 972.017430][ T5746] usb 6-1: Using ep0 maxpacket: 32 [ 972.025283][ T5746] usb 6-1: New USB device found, idVendor=12d1, idProduct=1441, bcdDevice=46.21 [ 972.039339][ T5746] usb 6-1: config 5 has an invalid interface number: 164 but max is 0 [ 972.039446][ T5746] usb 6-1: config 5 has no interface number 0 [ 972.040962][ T5746] usb 6-1: config 5 interface 164 has no altsetting 0 [ 972.072970][ T5746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.082172][ T5746] usb 6-1: Product: syz [ 972.094904][ T5746] usb 6-1: Manufacturer: syz [ 972.104799][ T5746] usb 6-1: SerialNumber: syz [ 972.627786][ T5746] rndis_host 6-1:5.164: More than one union descriptor, skipping ... [ 972.627815][ T5746] rndis_host 6-1:5.164: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 972.628225][ T5746] option 6-1:5.164: GSM modem (1-port) converter detected [ 972.663885][ T5746] usb 6-1: USB disconnect, device number 58 [ 972.671609][ T5746] option 6-1:5.164: device disconnected [ 972.759394][T13883] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2268'. [ 972.759429][T13883] openvswitch: netlink: IPv4 frag type 21 is out of range max 2 [ 972.848240][T13888] syzkaller0: entered promiscuous mode [ 972.853937][T13888] syzkaller0: entered allmulticast mode [ 973.054118][ T31] audit: type=1400 audit(1788866385.951:908): avc: denied { ioctl } for pid=13899 comm="syz.3.2273" path="socket:[48557]" dev="sockfs" ino=48557 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 973.303647][ T31] audit: type=1400 audit(1788866386.201:909): avc: denied { write } for pid=13879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.378071][ T31] audit: type=1400 audit(1788866386.281:910): avc: denied { ioctl } for pid=13905 comm="syz.3.2274" path="/dev/sg0" dev="devtmpfs" ino=1152 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 973.539215][T13906] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 973.590584][ T31] audit: type=1400 audit(1788866386.491:911): avc: denied { write } for pid=13921 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.967538][ T5760] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 974.120720][ T5760] usb 3-1: Using ep0 maxpacket: 16 [ 974.122058][ T5760] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 974.123557][ T5760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.123593][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.132368][ T5760] usb 3-1: config 0 descriptor?? [ 974.524633][ T31] audit: type=1400 audit(1788866387.421:912): avc: denied { write } for pid=13931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.610938][ T5760] hid_parser_main: 4 callbacks suppressed [ 974.610991][ T5760] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 974.611024][ T5760] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 974.611040][ T5760] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 974.611057][ T5760] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 974.611075][ T5760] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 974.632046][ T5760] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 974.795637][ C1] usb 3-1: input irq status -75 received [ 974.971302][ T31] audit: type=1400 audit(1788866387.861:913): avc: denied { write } for pid=13953 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.085991][T13948] block device autoloading is deprecated and will be removed. [ 975.490132][T13969] syzkaller0: entered promiscuous mode [ 975.490174][T13969] syzkaller0: entered allmulticast mode [ 975.668760][ T31] audit: type=1400 audit(1788866388.561:914): avc: denied { read } for pid=13979 comm="syz.5.2288" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 975.668854][ T31] audit: type=1400 audit(1788866388.571:915): avc: denied { open } for pid=13979 comm="syz.5.2288" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 975.716773][ T31] audit: type=1400 audit(1788866388.601:916): avc: denied { ioctl } for pid=13979 comm="syz.5.2288" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 975.737407][ T31] audit: type=1400 audit(1788866388.621:917): avc: denied { map } for pid=13979 comm="syz.5.2288" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 975.737458][ T31] audit: type=1400 audit(1788866388.621:918): avc: denied { execute } for pid=13979 comm="syz.5.2288" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 975.839995][ T31] audit: type=1400 audit(1788866388.731:919): avc: denied { write } for pid=13962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.866784][ T5760] usb 3-1: USB disconnect, device number 56 [ 976.031850][ T31] audit: type=1400 audit(1788866388.931:920): avc: denied { write } for pid=13988 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.114423][ T31] audit: type=1400 audit(1788866389.011:921): avc: denied { write } for pid=13989 comm="syz.7.2291" name="usb_gadget" dev="configfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 976.479335][T14002] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2290'. [ 976.608464][ T5760] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 977.995258][T14029] FAULT_INJECTION: forcing a failure. [ 977.995258][T14029] name failslab, interval 1, probability 0, space 0, times 0 [ 977.995314][T14029] CPU: 1 UID: 0 PID: 14029 Comm: syz.6.2299 Tainted: G L syzkaller #0 PREEMPT(full) [ 977.995337][T14029] Tainted: [L]=SOFTLOCKUP [ 977.995343][T14029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 977.995352][T14029] Call Trace: [ 977.995357][T14029] [ 977.995364][T14029] dump_stack_lvl+0x100/0x190 [ 977.995394][T14029] should_fail_ex.cold+0x5/0xa [ 977.995418][T14029] should_failslab+0xc2/0x120 [ 977.995440][T14029] __kmalloc_noprof+0xfc/0x840 [ 977.995458][T14029] ? tomoyo_encode2+0xfb/0x3c0 [ 977.995480][T14029] tomoyo_encode2+0xfb/0x3c0 [ 977.995501][T14029] tomoyo_encode+0x29/0x50 [ 977.995517][T14029] tomoyo_realpath_from_path+0x18c/0x690 [ 977.995540][T14029] tomoyo_path_number_perm+0x23c/0x580 [ 977.995564][T14029] ? tomoyo_path_number_perm+0x22e/0x580 [ 977.995589][T14029] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 977.995622][T14029] ? __lock_acquire+0x5c0/0x1f40 [ 977.995650][T14029] ? __fget_files+0x34/0x3d0 [ 977.995669][T14029] ? find_held_lock+0x2b/0x80 [ 977.995690][T14029] ? hook_file_ioctl_common+0x140/0x440 [ 977.995715][T14029] ? __fget_files+0x21f/0x3d0 [ 977.995738][T14029] security_file_ioctl+0xd3/0x230 [ 977.995756][T14029] __x64_sys_ioctl+0xb7/0x210 [ 977.995774][T14029] do_syscall_64+0x123/0x790 [ 977.995796][T14029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.995813][T14029] RIP: 0033:0x7fd12f79e159 [ 977.995827][T14029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.995841][T14029] RSP: 002b:00007fd130663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 977.995858][T14029] RAX: ffffffffffffffda RBX: 00007fd12fa25fa0 RCX: 00007fd12f79e159 [ 977.995869][T14029] RDX: 0000000000000000 RSI: 0000000040086610 RDI: 0000000000000003 [ 977.995879][T14029] RBP: 00007fd130663090 R08: 0000000000000000 R09: 0000000000000000 [ 977.995889][T14029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.995899][T14029] R13: 00007fd12fa26038 R14: 00007fd12fa25fa0 R15: 00007ffe0294c1f8 [ 977.995922][T14029] [ 977.995952][T14029] ERROR: Out of memory at tomoyo_realpath_from_path. [ 977.995981][T14029] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks [ 977.995996][T14029] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 978.008815][T13233] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 978.174725][T13233] usb 8-1: device descriptor read/64, error -71 [ 978.412185][T13233] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 978.527265][T10003] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 978.548234][T13233] usb 8-1: device descriptor read/64, error -71 [ 978.657614][T13233] usb usb8-port1: attempt power cycle [ 978.677974][T10003] usb 7-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 978.688161][T10003] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.688222][T10003] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 978.688253][T10003] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 978.688275][T10003] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 978.737206][T10003] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.737252][T10003] usb 7-1: Product: syz [ 978.737277][T10003] usb 7-1: Manufacturer: syz [ 978.737294][T10003] usb 7-1: SerialNumber: syz [ 978.774428][T10003] ums-onetouch 7-1:1.0: USB Mass Storage device detected [ 978.997389][T13233] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 979.019659][T13233] usb 8-1: device descriptor read/8, error -71 [ 979.059408][T10003] usb 7-1: USB disconnect, device number 6 [ 979.257897][T13233] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 979.279140][T13233] usb 8-1: device descriptor read/8, error -71 [ 979.397478][T13233] usb usb8-port1: unable to enumerate USB device [ 979.936190][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 979.936231][ T31] audit: type=1400 audit(1788866392.831:933): avc: denied { name_bind } for pid=14065 comm="syz.6.2305" src=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 980.029079][ T31] audit: type=1400 audit(1788866392.931:934): avc: denied { write } for pid=14053 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 980.360776][ T31] audit: type=1400 audit(1788866393.251:935): avc: denied { read write } for pid=14075 comm="syz.6.2307" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 980.360992][ T31] audit: type=1400 audit(1788866393.251:936): avc: denied { open } for pid=14075 comm="syz.6.2307" path="/35/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 980.382906][ T31] audit: type=1400 audit(1788866393.261:937): avc: denied { write } for pid=14078 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 981.490894][T13233] hid-generic 0005:4C4A:1014.000C: unknown main item tag 0x0 [ 981.719097][T13233] hid-generic 0005:4C4A:1014.000C: item fetching failed at offset 13/85 [ 981.729067][T13233] hid-generic 0005:4C4A:1014.000C: probe with driver hid-generic failed with error -22 [ 981.984756][T14095] blkio.reset_stats is deprecated [ 982.051654][T14110] netlink: 'syz.5.2310': attribute type 1 has an invalid length. [ 982.292585][ T31] audit: type=1400 audit(1789390683.186:938): avc: denied { read } for pid=14116 comm="syz.2.2316" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 982.343311][ T31] audit: type=1400 audit(1789390683.234:939): avc: denied { read } for pid=14118 comm="syz.3.2318" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 982.344178][ T31] audit: type=1400 audit(1789390683.234:940): avc: denied { open } for pid=14118 comm="syz.3.2318" path="/457/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 982.493767][ T31] audit: type=1400 audit(1789390683.389:941): avc: denied { write } for pid=14091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 982.520852][ T5760] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 982.539285][T14130] FAULT_INJECTION: forcing a failure. [ 982.539285][T14130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.539345][T14130] CPU: 1 UID: 0 PID: 14130 Comm: syz.3.2319 Tainted: G L syzkaller #0 PREEMPT(full) [ 982.539369][T14130] Tainted: [L]=SOFTLOCKUP [ 982.539374][T14130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 982.539383][T14130] Call Trace: [ 982.539389][T14130] [ 982.539396][T14130] dump_stack_lvl+0x100/0x190 [ 982.539424][T14130] should_fail_ex.cold+0x5/0xa [ 982.539447][T14130] strncpy_from_user+0x3b/0x2d0 [ 982.539467][T14130] do_getname+0x78/0x390 [ 982.539492][T14130] do_sys_openat2+0xc7/0x1e0 [ 982.539514][T14130] ? __pfx_do_sys_openat2+0x10/0x10 [ 982.539533][T14130] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 982.539555][T14130] ? __fget_files+0x21f/0x3d0 [ 982.539580][T14130] __x64_sys_creat+0xcc/0x120 [ 982.539601][T14130] ? __pfx___x64_sys_creat+0x10/0x10 [ 982.539621][T14130] ? __pfx_ksys_write+0x10/0x10 [ 982.539641][T14130] ? do_syscall_64+0xae/0x790 [ 982.539661][T14130] do_syscall_64+0x123/0x790 [ 982.539682][T14130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.539699][T14130] RIP: 0033:0x7f6bad59e159 [ 982.539712][T14130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.539728][T14130] RSP: 002b:00007f6bae468028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 982.539744][T14130] RAX: ffffffffffffffda RBX: 00007f6bad825fa0 RCX: 00007f6bad59e159 [ 982.539755][T14130] RDX: 0000000000000000 RSI: 000000000000002b RDI: 0000200000000080 [ 982.539765][T14130] RBP: 00007f6bae468090 R08: 0000000000000000 R09: 0000000000000000 [ 982.539775][T14130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.539785][T14130] R13: 00007f6bad826038 R14: 00007f6bad825fa0 R15: 00007ffef45f9838 [ 982.539807][T14130] [ 982.697904][ T5760] usb 8-1: Using ep0 maxpacket: 16 [ 982.698596][ T31] audit: type=1326 audit(1789390683.583:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.5.2320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be4d9e159 code=0x7ffc0000 [ 983.593170][ T5652] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 983.749859][ T5652] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 983.773338][ T5652] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 983.785623][ T5652] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 983.797189][ T5652] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 984.355131][ T5652] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.355248][ T5652] usb 6-1: Product: syz [ 984.355329][ T5652] usb 6-1: Manufacturer: syz [ 984.355396][ T5652] usb 6-1: SerialNumber: syz [ 984.457242][ T5652] usb 6-1: config 0 descriptor?? [ 984.582985][ T5652] streamzap 6-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 985.050026][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 985.050074][ T31] audit: type=1326 audit(1789390685.865:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.5.2320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1be4d9e159 code=0x7ffc0000 [ 985.093994][ T31] audit: type=1326 audit(1789390685.904:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.5.2320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be4d9e159 code=0x7ffc0000 [ 985.125066][ T31] audit: type=1326 audit(1789390685.904:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.5.2320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be4d9e159 code=0x7ffc0000 [ 985.179825][ T31] audit: type=1326 audit(1789390685.991:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.5.2320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1be4d9e159 code=0x7ffc0000 [ 985.179893][ T31] audit: type=1326 audit(1789390685.991:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.5.2320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be4d9e159 code=0x7ffc0000 [ 985.179943][ T31] audit: type=1326 audit(1789390685.991:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.5.2320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be4d9e159 code=0x7ffc0000 [ 985.254812][ T31] audit: type=1326 audit(1789390686.050:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.5.2320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1be4d9e159 code=0x7ffc0000 [ 985.254873][ T31] audit: type=1326 audit(1789390686.050:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.5.2320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be4d9e159 code=0x7ffc0000 [ 985.254907][ T31] audit: type=1326 audit(1789390686.050:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.5.2320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be4d9e159 code=0x7ffc0000 [ 985.276401][ T31] audit: type=1326 audit(1789390686.079:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.5.2320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1be4d5e98e code=0x7ffc0000 [ 986.052599][ T5777] usb 6-1: USB disconnect, device number 59 [ 986.720636][T14182] FAULT_INJECTION: forcing a failure. [ 986.720636][T14182] name failslab, interval 1, probability 0, space 0, times 0 [ 986.720718][T14182] CPU: 0 UID: 0 PID: 14182 Comm: syz.5.2326 Tainted: G L syzkaller #0 PREEMPT(full) [ 986.720744][T14182] Tainted: [L]=SOFTLOCKUP [ 986.720751][T14182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 986.720761][T14182] Call Trace: [ 986.720767][T14182] [ 986.720774][T14182] dump_stack_lvl+0x100/0x190 [ 986.720803][T14182] should_fail_ex.cold+0x5/0xa [ 986.720823][T14182] should_failslab+0xc2/0x120 [ 986.720839][T14182] kmem_cache_alloc_noprof+0x92/0x6a0 [ 986.720852][T14182] ? posix_lock_inode+0x42a/0x2760 [ 986.720872][T14182] posix_lock_inode+0x42a/0x2760 [ 986.720897][T14182] ? inode_has_perm+0x16d/0x1d0 [ 986.720923][T14182] ? __file_has_perm+0x336/0x460 [ 986.720950][T14182] ? __pfx_posix_lock_inode+0x10/0x10 [ 986.720973][T14182] ? lockdep_init_map_type+0x5c/0x250 [ 986.720986][T14182] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 986.721001][T14182] vfs_lock_file+0xfb/0x150 [ 986.721018][T14182] fcntl_setlk+0x757/0xe20 [ 986.721044][T14182] ? __pfx_fcntl_setlk+0x10/0x10 [ 986.721067][T14182] ? lock_acquire+0x1d1/0x380 [ 986.721084][T14182] ? __might_fault+0xc5/0x140 [ 986.721107][T14182] ? __might_fault+0xc5/0x140 [ 986.721123][T14182] ? __might_fault+0xc5/0x140 [ 986.721144][T14182] do_fcntl+0xf39/0x1670 [ 986.721161][T14182] ? __pfx_do_fcntl+0x10/0x10 [ 986.721190][T14182] ? selinux_file_fcntl+0xea/0x170 [ 986.721226][T14182] __x64_sys_fcntl+0x163/0x200 [ 986.721251][T14182] do_syscall_64+0x123/0x790 [ 986.721266][T14182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.721278][T14182] RIP: 0033:0x7f1be4d9e159 [ 986.721288][T14182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.721299][T14182] RSP: 002b:00007f1be5c15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 986.721311][T14182] RAX: ffffffffffffffda RBX: 00007f1be5026270 RCX: 00007f1be4d9e159 [ 986.721323][T14182] RDX: 0000200000001140 RSI: 0000000000000007 RDI: 000000000000000a [ 986.721334][T14182] RBP: 00007f1be5c15090 R08: 0000000000000000 R09: 0000000000000000 [ 986.721344][T14182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.721354][T14182] R13: 00007f1be5026308 R14: 00007f1be5026270 R15: 00007ffeff52efd8 [ 986.721378][T14182] [ 987.232628][ T5760] usb 8-1: unable to get BOS descriptor or descriptor too short [ 987.232682][ T5760] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 987.232728][ T5760] usb 8-1: no configurations [ 987.232743][ T5760] usb 8-1: can't read configurations, error -22 [ 988.358965][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 989.093086][T14224] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 989.242371][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.354323][ T5777] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 989.530206][ T5777] usb 7-1: unable to get BOS descriptor or descriptor too short [ 989.530261][ T5777] usb 7-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 989.549018][ T5652] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 989.557524][ T5777] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.557550][ T5777] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 989.590466][ T5777] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.590506][ T5777] usb 7-1: Product: syz [ 989.590531][ T5777] usb 7-1: Manufacturer: syz [ 989.590549][ T5777] usb 7-1: SerialNumber: syz [ 989.856225][ T5777] usb 7-1: unit 115 not found! [ 989.861667][ T5777] usb 7-1: unit 255 not found! [ 989.952406][ T5777] usb 7-1: USB disconnect, device number 7 [ 990.047777][ T5660] udevd[5660]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 990.553666][T14247] geneve2: entered promiscuous mode [ 990.553702][T14247] geneve2: entered allmulticast mode [ 990.916099][T14242] input: syz0 as /devices/virtual/input/input18 [ 990.965178][ T5777] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 991.118652][ T5777] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 991.129081][ T5777] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.129134][ T5777] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 991.129159][ T5777] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 991.129184][ T5777] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 991.129222][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.768342][ T5777] gud 3-1:1.0: probe with driver gud failed with error -32 [ 991.914970][ T5777] usb 3-1: USB disconnect, device number 57 [ 995.091155][T10003] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 995.314893][T10003] usb 4-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 995.325100][T10003] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 995.340225][T10003] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 995.340278][T10003] usb 4-1: config 0 interface 0 has no altsetting 0 [ 995.340315][T10003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.378467][T10003] usb 4-1: config 0 descriptor?? [ 995.770392][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 995.770427][ T31] audit: type=1400 audit(1789390696.378:1021): avc: denied { read write } for pid=14288 comm="syz.7.2348" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 995.770479][ T31] audit: type=1400 audit(1789390696.378:1022): avc: denied { open } for pid=14288 comm="syz.7.2348" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 996.982764][ T31] audit: type=1400 audit(1789390697.533:1023): avc: denied { ioctl } for pid=14291 comm="syz.2.2354" path="socket:[49710]" dev="sockfs" ino=49710 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 998.159847][T14303] ipvlan2: entered promiscuous mode [ 998.162800][T14303] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 998.163207][T14303] team0: Device ipvlan2 is already an upper device of the team interface [ 998.211477][T10003] usbhid 4-1:0.0: can't add hid device: -71 [ 998.211578][T10003] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 998.241440][T10003] usb 4-1: USB disconnect, device number 79 [ 1001.568898][T14328] FAULT_INJECTION: forcing a failure. [ 1001.568898][T14328] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.568940][T14328] CPU: 1 UID: 0 PID: 14328 Comm: syz.7.2362 Tainted: G L syzkaller #0 PREEMPT(full) [ 1001.568969][T14328] Tainted: [L]=SOFTLOCKUP [ 1001.568977][T14328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1001.568989][T14328] Call Trace: [ 1001.568995][T14328] [ 1001.569002][T14328] dump_stack_lvl+0x100/0x190 [ 1001.569033][T14328] should_fail_ex.cold+0x5/0xa [ 1001.569058][T14328] should_failslab+0xc2/0x120 [ 1001.569080][T14328] __kmalloc_cache_noprof+0x91/0x6d0 [ 1001.569105][T14328] ? ioc_cpd_alloc+0x96/0x150 [ 1001.569128][T14328] ioc_cpd_alloc+0x96/0x150 [ 1001.569146][T14328] blkcg_css_alloc+0x273/0x8c0 [ 1001.569168][T14328] ? __pfx_ioc_cpd_alloc+0x10/0x10 [ 1001.569189][T14328] cgroup_apply_control_enable+0x602/0xdd0 [ 1001.569219][T14328] ? css_populate_dir+0x233/0x590 [ 1001.569244][T14328] cgroup_mkdir+0x57f/0x1330 [ 1001.569265][T14328] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1001.569284][T14328] kernfs_iop_mkdir+0x111/0x190 [ 1001.569308][T14328] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1001.569328][T14328] vfs_mkdir+0x364/0x850 [ 1001.569358][T14328] filename_mkdirat+0x48b/0x5e0 [ 1001.569382][T14328] ? __pfx_filename_mkdirat+0x10/0x10 [ 1001.569403][T14328] ? strncpy_from_user+0x19d/0x2d0 [ 1001.569429][T14328] ? do_getname+0x191/0x390 [ 1001.569455][T14328] __x64_sys_mkdirat+0x89/0xc0 [ 1001.569477][T14328] do_syscall_64+0x123/0x790 [ 1001.569504][T14328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.569522][T14328] RIP: 0033:0x7fdd58b9e159 [ 1001.569538][T14328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.569554][T14328] RSP: 002b:00007fdd59aab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1001.569571][T14328] RAX: ffffffffffffffda RBX: 00007fdd58e25fa0 RCX: 00007fdd58b9e159 [ 1001.569584][T14328] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1001.569596][T14328] RBP: 00007fdd58c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1001.569608][T14328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.569619][T14328] R13: 00007fdd58e26038 R14: 00007fdd58e25fa0 R15: 00007ffd6833aed8 [ 1001.569644][T14328] [ 1001.641779][ T31] audit: type=1400 audit(1789390702.183:1024): avc: denied { bind } for pid=14331 comm="syz.5.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1002.647842][T13245] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1002.816434][T13245] usb 6-1: Using ep0 maxpacket: 16 [ 1002.816919][T13245] usb 6-1: New USB device found, idVendor=0ace, idProduct=20ff, bcdDevice= 1.01 [ 1002.818711][T13245] usb 6-1: config 3 has an invalid interface number: 117 but max is 0 [ 1002.818733][T13245] usb 6-1: config 3 has no interface number 0 [ 1002.834542][T13245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.834566][T13245] usb 6-1: Product: syz [ 1002.834580][T13245] usb 6-1: Manufacturer: syz [ 1002.834593][T13245] usb 6-1: SerialNumber: syz [ 1003.252985][T14332] FAULT_INJECTION: forcing a failure. [ 1003.252985][T14332] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.273604][T14332] CPU: 0 UID: 0 PID: 14332 Comm: syz.5.2364 Tainted: G L syzkaller #0 PREEMPT(full) [ 1003.273642][T14332] Tainted: [L]=SOFTLOCKUP [ 1003.273650][T14332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1003.273664][T14332] Call Trace: [ 1003.273672][T14332] [ 1003.273681][T14332] dump_stack_lvl+0x100/0x190 [ 1003.273717][T14332] should_fail_ex.cold+0x5/0xa [ 1003.273746][T14332] should_failslab+0xc2/0x120 [ 1003.273768][T14332] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1003.273787][T14332] ? __asan_memcpy+0x3c/0x60 [ 1003.273802][T14332] ? __kernfs_new_node+0xd2/0xa10 [ 1003.273831][T14332] __kernfs_new_node+0xd2/0xa10 [ 1003.273860][T14332] ? __pfx___kernfs_new_node+0x10/0x10 [ 1003.273888][T14332] ? lock_acquire+0x1d1/0x380 [ 1003.273906][T14332] ? kernfs_root+0x23/0x2a0 [ 1003.273930][T14332] ? find_held_lock+0x2b/0x80 [ 1003.273951][T14332] ? kernfs_root+0xee/0x2a0 [ 1003.273972][T14332] ? kernfs_root+0xee/0x2a0 [ 1003.274000][T14332] kernfs_create_dir_ns+0xa6/0x2b0 [ 1003.274032][T14332] sysfs_create_dir_ns+0x13a/0x2b0 [ 1003.274056][T14332] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1003.274079][T14332] ? find_held_lock+0x2b/0x80 [ 1003.274101][T14332] ? kobject_add_internal+0x25f/0x930 [ 1003.274128][T14332] ? kobject_add_internal+0x25f/0x930 [ 1003.274155][T14332] ? do_raw_spin_unlock+0x145/0x1e0 [ 1003.274180][T14332] kobject_add_internal+0x2c8/0x930 [ 1003.274210][T14332] kobject_init_and_add+0x121/0x180 [ 1003.274238][T14332] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1003.274266][T14332] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 1003.274289][T14332] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1003.274311][T14332] ? ___sys_sendmsg+0x190/0x1e0 [ 1003.274335][T14332] ? __sys_sendmsg+0x160/0x210 [ 1003.274353][T14332] ? do_syscall_64+0x123/0x790 [ 1003.274375][T14332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.274405][T14332] net_rx_queue_update_kobjects+0x37e/0x760 [ 1003.274436][T14332] ? kset_register+0x1bb/0x290 [ 1003.274466][T14332] netdev_register_kobject+0x2c6/0x410 [ 1003.274497][T14332] register_netdevice+0x15b6/0x25a0 [ 1003.274526][T14332] ? __pfx_register_netdevice+0x10/0x10 [ 1003.274556][T14332] bond_newlink+0x6a/0x100 [ 1003.274576][T14332] ? __pfx_bond_newlink+0x10/0x10 [ 1003.274596][T14332] rtnl_newlink+0x1697/0x2620 [ 1003.274638][T14332] ? __pfx_rtnl_newlink+0x10/0x10 [ 1003.274662][T14332] ? avc_has_perm_noaudit+0x56/0x3b0 [ 1003.274690][T14332] ? find_held_lock+0x2b/0x80 [ 1003.274713][T14332] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1003.274735][T14332] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1003.274780][T14332] ? lock_acquire+0x1d1/0x380 [ 1003.274799][T14332] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 1003.274819][T14332] ? find_held_lock+0x2b/0x80 [ 1003.274843][T14332] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1003.274863][T14332] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1003.274886][T14332] ? __pfx_rtnl_newlink+0x10/0x10 [ 1003.274907][T14332] rtnetlink_rcv_msg+0x95e/0xe90 [ 1003.274932][T14332] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1003.274960][T14332] ? ref_tracker_free+0x37e/0x6c0 [ 1003.274986][T14332] netlink_rcv_skb+0x159/0x420 [ 1003.275005][T14332] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1003.275028][T14332] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1003.275054][T14332] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1003.275083][T14332] netlink_unicast+0x585/0x850 [ 1003.275103][T14332] ? __pfx_netlink_unicast+0x10/0x10 [ 1003.275125][T14332] netlink_sendmsg+0x8b0/0xda0 [ 1003.275144][T14332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.275164][T14332] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1003.275192][T14332] ____sys_sendmsg+0xa4d/0xbe0 [ 1003.275214][T14332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.275231][T14332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1003.275269][T14332] ___sys_sendmsg+0x190/0x1e0 [ 1003.275297][T14332] ? __pfx____sys_sendmsg+0x10/0x10 [ 1003.275322][T14332] ? futex_wait+0x11e/0x370 [ 1003.275359][T14332] ? find_held_lock+0x2b/0x80 [ 1003.275400][T14332] __sys_sendmsg+0x160/0x210 [ 1003.275422][T14332] ? __pfx___sys_sendmsg+0x10/0x10 [ 1003.275456][T14332] do_syscall_64+0x123/0x790 [ 1003.275492][T14332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.275513][T14332] RIP: 0033:0x7f1be4d9e159 [ 1003.275531][T14332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.275550][T14332] RSP: 002b:00007f1be5c78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1003.275570][T14332] RAX: ffffffffffffffda RBX: 00007f1be5025fa0 RCX: 00007f1be4d9e159 [ 1003.275582][T14332] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1003.275594][T14332] RBP: 00007f1be4e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1003.275612][T14332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1003.275624][T14332] R13: 00007f1be5026038 R14: 00007f1be5025fa0 R15: 00007ffeff52efd8 [ 1003.275652][T14332] [ 1003.431359][T14332] kobject: kobject_add_internal failed for rx-5 (error: -12 parent: queues) [ 1003.478771][T14332] bond3 (unregistered): Released all slaves [ 1004.708249][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2364'. [ 1005.278410][T13245] usb-storage 6-1:3.117: USB Mass Storage device detected [ 1005.312338][T13245] usb-storage 6-1:3.117: device ignored [ 1005.415109][T13245] usb 6-1: USB disconnect, device number 61 [ 1007.127808][ T5760] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1007.369382][ T5760] usb 6-1: Using ep0 maxpacket: 16 [ 1011.196113][ T5760] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1011.196152][ T5760] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1011.196186][ T5760] usb 6-1: no configurations [ 1011.196195][ T5760] usb 6-1: can't read configurations, error -22 [ 1013.572101][T13245] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1013.762428][T13245] usb 3-1: Using ep0 maxpacket: 16 [ 1013.818517][T11838] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1013.827408][T13245] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1013.827464][T13245] usb 3-1: New USB device found, idVendor=12d1, idProduct=726a, bcdDevice=53.c6 [ 1013.846978][T13245] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1013.847023][T13245] usb 3-1: can't read configurations, error -71 [ 1013.876158][ T31] audit: type=1400 audit(1789390714.346:1025): avc: denied { create } for pid=14417 comm="syz.3.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1013.877531][ T31] audit: type=1400 audit(1789390714.346:1026): avc: denied { setopt } for pid=14419 comm="syz.7.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1013.940308][ T31] audit: type=1400 audit(1789390714.405:1027): avc: denied { execute } for pid=14417 comm="syz.3.2391" path="/474/file0" dev="tmpfs" ino=2612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1015.938771][T14432] syzkaller0: entered promiscuous mode [ 1015.938811][T14432] syzkaller0: entered allmulticast mode [ 1017.918666][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2404'. [ 1017.918716][T14460] netlink: 'syz.2.2404': attribute type 5 has an invalid length. [ 1017.918728][T14460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2404'. [ 1019.177701][T14486] xt_hashlimit: size too large, truncated to 1048576 [ 1019.204439][ T5777] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1019.299904][T14490] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2406'. [ 1019.390340][ T5777] usb 3-1: Using ep0 maxpacket: 16 [ 1019.418236][T11838] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1019.428134][ T5777] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1019.428188][ T5777] usb 3-1: New USB device found, idVendor=12d1, idProduct=726a, bcdDevice=53.c6 [ 1019.447496][ T5777] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1019.447545][ T5777] usb 3-1: can't read configurations, error -71 [ 1019.503311][ T5652] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1020.515302][ T5652] usb 8-1: Using ep0 maxpacket: 8 [ 1020.516362][ T5652] usb 8-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1020.519285][ T5652] usb 8-1: config 0 has an invalid interface number: 151 but max is 1 [ 1020.519310][ T5652] usb 8-1: config 0 has no interface number 1 [ 1020.519346][ T5652] usb 8-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1020.519365][ T5652] usb 8-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1020.519387][ T5652] usb 8-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1020.519411][ T5652] usb 8-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1020.519430][ T5652] usb 8-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1020.519458][ T5652] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1020.519477][ T5652] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 30768, setting to 1024 [ 1020.519498][ T5652] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1020.524435][ T5652] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.524456][ T5652] usb 8-1: Product: syz [ 1020.524469][ T5652] usb 8-1: Manufacturer: syz [ 1020.524481][ T5652] usb 8-1: SerialNumber: syz [ 1020.547293][ T5652] usb 8-1: config 0 descriptor?? [ 1020.554015][T14488] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1020.567817][ T5652] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1020.580659][ T5652] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1020.837585][ T31] audit: type=1400 audit(1789390721.282:1028): avc: denied { setopt } for pid=14503 comm="syz.6.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1021.185072][ T5652] usb 8-1: USB disconnect, device number 9 [ 1021.292017][T14504] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1021.292068][T14504] block device autoloading is deprecated and will be removed. [ 1021.705815][ T31] audit: type=1400 audit(1789390722.150:1029): avc: denied { write } for pid=14517 comm="syz.6.2414" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1021.740195][T14518] usb usb7: usbfs: process 14518 (syz.6.2414) did not claim interface 0 before use [ 1021.838016][T14520] FAULT_INJECTION: forcing a failure. [ 1021.838016][T14520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1021.838079][T14520] CPU: 1 UID: 0 PID: 14520 Comm: syz.2.2413 Tainted: G L syzkaller #0 PREEMPT(full) [ 1021.838106][T14520] Tainted: [L]=SOFTLOCKUP [ 1021.838114][T14520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1021.838125][T14520] Call Trace: [ 1021.838132][T14520] [ 1021.838140][T14520] dump_stack_lvl+0x100/0x190 [ 1021.838172][T14520] should_fail_ex.cold+0x5/0xa [ 1021.838199][T14520] _copy_from_user+0x2e/0xd0 [ 1021.838230][T14520] move_addr_to_kernel+0x65/0x170 [ 1021.838257][T14520] copy_msghdr_from_user+0x3f0/0x4c0 [ 1021.838284][T14520] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1021.838309][T14520] ? do_raw_spin_lock+0x128/0x260 [ 1021.838335][T14520] ? __lock_acquire+0x5c0/0x1f40 [ 1021.838359][T14520] ___sys_sendmsg+0x106/0x1e0 [ 1021.838385][T14520] ? __pfx____sys_sendmsg+0x10/0x10 [ 1021.838421][T14520] ? __fget_files+0x34/0x3d0 [ 1021.838461][T14520] __sys_sendmmsg+0x20c/0x440 [ 1021.838485][T14520] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1021.838513][T14520] ? preempt_schedule_irq+0x79/0x90 [ 1021.838556][T14520] __x64_sys_sendmmsg+0x9c/0x100 [ 1021.838580][T14520] do_syscall_64+0x123/0x790 [ 1021.838602][T14520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.838619][T14520] RIP: 0033:0x7f2bd599e159 [ 1021.838633][T14520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.838649][T14520] RSP: 002b:00007f2bd3bb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1021.838667][T14520] RAX: ffffffffffffffda RBX: 00007f2bd5c26180 RCX: 00007f2bd599e159 [ 1021.838679][T14520] RDX: 3284b164842c97f7 RSI: 0000200000000c40 RDI: 000000000000000b [ 1021.838690][T14520] RBP: 00007f2bd3bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.838702][T14520] R10: 0000000000008014 R11: 0000000000000246 R12: 0000000000000001 [ 1021.838712][T14520] R13: 00007f2bd5c26218 R14: 00007f2bd5c26180 R15: 00007ffe40a85448 [ 1021.838737][T14520] [ 1023.169098][T14529] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2417'. [ 1023.191477][T14526] netlink: 'syz.6.2415': attribute type 1 has an invalid length. [ 1023.240341][T14526] bond1: entered promiscuous mode [ 1023.240639][T14526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1023.424556][ T5746] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1023.460140][T14526] can0: slcan on ptm0. [ 1023.511850][T14526] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1023.511893][T14526] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1023.515080][T14526] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1023.587679][ T5746] usb 8-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 1023.589933][ T5746] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.589959][ T5746] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.589975][ T5746] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1023.590006][ T5746] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.594529][ T5746] usb 8-1: config 0 descriptor?? [ 1023.969760][ T31] audit: type=1400 audit(1789390724.405:1030): avc: denied { write } for pid=14544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1024.003358][T14524] can0 (unregistered): slcan off ptm0. [ 1024.063844][ T5760] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1024.091691][ T31] audit: type=1400 audit(1789390724.525:1031): avc: denied { write } for pid=14554 comm="syz.3.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1024.308453][ T5760] usb 3-1: Using ep0 maxpacket: 16 [ 1024.446056][T11838] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1024.473985][ T5760] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1024.474201][ T5760] usb 3-1: New USB device found, idVendor=12d1, idProduct=726a, bcdDevice=53.c6 [ 1024.508666][ T5760] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1024.508709][ T5760] usb 3-1: can't read configurations, error -71 [ 1024.509600][ T5746] logitech 0003:046D:C20A.000D: unknown main item tag 0x0 [ 1024.509622][ T5746] logitech 0003:046D:C20A.000D: unknown main item tag 0x0 [ 1024.509640][ T5746] logitech 0003:046D:C20A.000D: unknown main item tag 0x0 [ 1024.509663][ T5746] logitech 0003:046D:C20A.000D: unknown main item tag 0x0 [ 1024.509681][ T5746] logitech 0003:046D:C20A.000D: unknown main item tag 0x0 [ 1024.509698][ T5746] logitech 0003:046D:C20A.000D: unknown main item tag 0x0 [ 1024.509716][ T5746] logitech 0003:046D:C20A.000D: unknown main item tag 0x0 [ 1024.509733][ T5746] logitech 0003:046D:C20A.000D: unknown main item tag 0x0 [ 1024.509750][ T5746] logitech 0003:046D:C20A.000D: unknown main item tag 0x0 [ 1024.509767][ T5746] logitech 0003:046D:C20A.000D: unknown main item tag 0x0 [ 1025.306479][ T31] audit: type=1400 audit(1789390725.732:1032): avc: denied { write } for pid=14560 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1025.566182][ T5746] logitech 0003:046D:C20A.000D: hidraw0: USB HID v0.02 Device [HID 046d:c20a] on usb-dummy_hcd.7-1/input0 [ 1025.566235][ T5746] logitech 0003:046D:C20A.000D: no inputs found [ 1025.570272][ T5746] usb 8-1: USB disconnect, device number 10 [ 1025.786603][T14564] fido_id[14564]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1026.123012][T14572] netlink: 'syz.7.2424': attribute type 12 has an invalid length. [ 1026.434363][ T5652] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1026.434489][ T5746] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1027.061067][ T31] audit: type=1400 audit(1789390727.040:1033): avc: denied { write } for pid=14571 comm="syz.7.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1027.190001][ T5746] usb 3-1: Using ep0 maxpacket: 32 [ 1027.190523][ T5652] usb 7-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 1027.198688][ T5746] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1027.202585][ T5652] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1027.202613][ T5652] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1027.202654][ T5652] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1027.202702][ T5652] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.206867][ T5746] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1027.206888][ T5746] usb 3-1: config 0 has no interface number 0 [ 1027.206919][ T5746] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1027.206938][ T5746] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1027.213694][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.213715][ T5746] usb 3-1: Product: syz [ 1027.213728][ T5746] usb 3-1: Manufacturer: syz [ 1027.213742][ T5746] usb 3-1: SerialNumber: syz [ 1027.230449][ T5652] usb 7-1: config 0 descriptor?? [ 1027.236598][ T5746] usb 3-1: config 0 descriptor?? [ 1027.295899][ T5746] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1027.296083][ T5746] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1027.390968][T14585] ip_tables: iptables: counters copy to user failed while replacing table [ 1027.524730][ T31] audit: type=1400 audit(1789390727.958:1034): avc: denied { write } for pid=14570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1027.525010][ T31] audit: type=1400 audit(1789390727.958:1035): avc: denied { getopt } for pid=14584 comm="syz.5.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1027.555861][ T31] audit: type=1400 audit(1789390727.988:1036): avc: denied { ioctl } for pid=14584 comm="syz.5.2429" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1027.612498][ T5746] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1027.675340][ T31] audit: type=1400 audit(1789390728.108:1037): avc: denied { write } for pid=14593 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1027.897866][ T5746] usb 4-1: Using ep0 maxpacket: 16 [ 1027.900096][ T5746] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1027.901926][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.901963][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.905261][ T5746] usb 4-1: config 0 descriptor?? [ 1028.419752][T14605] FAULT_INJECTION: forcing a failure. [ 1028.419752][T14605] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.442773][T14605] CPU: 1 UID: 0 PID: 14605 Comm: syz.5.2431 Tainted: G L syzkaller #0 PREEMPT(full) [ 1028.442806][T14605] Tainted: [L]=SOFTLOCKUP [ 1028.442825][T14605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1028.442836][T14605] Call Trace: [ 1028.442843][T14605] [ 1028.442852][T14605] dump_stack_lvl+0x100/0x190 [ 1028.442888][T14605] should_fail_ex.cold+0x5/0xa [ 1028.442915][T14605] should_failslab+0xc2/0x120 [ 1028.442940][T14605] __kvmalloc_node_noprof+0x113/0x9b0 [ 1028.442960][T14605] ? __might_fault+0xc5/0x140 [ 1028.442995][T14605] ? xt_alloc_table_info+0x44/0xa0 [ 1028.443022][T14605] xt_alloc_table_info+0x44/0xa0 [ 1028.443043][T14605] do_ipt_set_ctl+0x611/0xcf0 [ 1028.443070][T14605] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1028.443091][T14605] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1028.443128][T14605] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1028.443152][T14605] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1028.443184][T14605] ? sockopt_release_sock+0x5c/0x70 [ 1028.443206][T14605] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1028.443239][T14605] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1028.443263][T14605] nf_setsockopt+0x8d/0xf0 [ 1028.443287][T14605] ip_setsockopt+0xcb/0xf0 [ 1028.443315][T14605] tcp_setsockopt+0xa7/0x100 [ 1028.443343][T14605] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1028.443369][T14605] do_sock_setsockopt+0xf3/0x1d0 [ 1028.443394][T14605] __sys_setsockopt+0x195/0x220 [ 1028.443419][T14605] __x64_sys_setsockopt+0xbd/0x160 [ 1028.443436][T14605] ? do_syscall_64+0xae/0x790 [ 1028.443459][T14605] ? lockdep_hardirqs_on+0x7d/0x110 [ 1028.443482][T14605] do_syscall_64+0x123/0x790 [ 1028.443507][T14605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.443527][T14605] RIP: 0033:0x7f1be4d9e159 [ 1028.443544][T14605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.443561][T14605] RSP: 002b:00007f1be5c78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1028.443581][T14605] RAX: ffffffffffffffda RBX: 00007f1be5025fa0 RCX: 00007f1be4d9e159 [ 1028.443593][T14605] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1028.443604][T14605] RBP: 00007f1be5c78090 R08: 0000000000000520 R09: 0000000000000000 [ 1028.443615][T14605] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.443626][T14605] R13: 00007f1be5026038 R14: 00007f1be5025fa0 R15: 00007ffeff52efd8 [ 1028.443651][T14605] [ 1028.848764][ T5777] usb 3-1: USB disconnect, device number 64 [ 1028.921573][ T5652] usbhid 7-1:0.0: can't add hid device: -71 [ 1028.921668][ T5652] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1028.928206][ T5652] usb 7-1: USB disconnect, device number 8 [ 1028.929347][ T5746] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1028.929600][ C0] usb 4-1: input irq status -75 received [ 1029.323951][T14614] FAULT_INJECTION: forcing a failure. [ 1029.323951][T14614] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.323997][T14614] CPU: 1 UID: 0 PID: 14614 Comm: syz.6.2433 Tainted: G L syzkaller #0 PREEMPT(full) [ 1029.324024][T14614] Tainted: [L]=SOFTLOCKUP [ 1029.324032][T14614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1029.324044][T14614] Call Trace: [ 1029.324050][T14614] [ 1029.324059][T14614] dump_stack_lvl+0x100/0x190 [ 1029.324097][T14614] should_fail_ex.cold+0x5/0xa [ 1029.324133][T14614] should_failslab+0xc2/0x120 [ 1029.324158][T14614] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1029.324182][T14614] ? kstrdup_const+0x63/0x80 [ 1029.324216][T14614] kstrdup+0x51/0xe0 [ 1029.324244][T14614] kstrdup_const+0x63/0x80 [ 1029.324270][T14614] __kernfs_new_node+0x9b/0xa10 [ 1029.324300][T14614] ? __pfx___kernfs_new_node+0x10/0x10 [ 1029.324329][T14614] ? lock_acquire+0x1d1/0x380 [ 1029.324347][T14614] ? kernfs_root+0x23/0x2a0 [ 1029.324370][T14614] ? find_held_lock+0x2b/0x80 [ 1029.324395][T14614] ? kernfs_root+0xee/0x2a0 [ 1029.324417][T14614] ? kernfs_root+0xee/0x2a0 [ 1029.324445][T14614] kernfs_new_node+0x117/0x150 [ 1029.324479][T14614] __kernfs_create_file+0x53/0x350 [ 1029.324502][T14614] cgroup_addrm_files+0x4ef/0xdb0 [ 1029.324538][T14614] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 1029.324570][T14614] ? idr_replace+0xfa/0x170 [ 1029.324599][T14614] css_populate_dir+0x161/0x590 [ 1029.324625][T14614] cgroup_apply_control_enable+0x441/0xdd0 [ 1029.324664][T14614] cgroup_mkdir+0x57f/0x1330 [ 1029.324688][T14614] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1029.324708][T14614] kernfs_iop_mkdir+0x111/0x190 [ 1029.324734][T14614] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1029.324756][T14614] vfs_mkdir+0x364/0x850 [ 1029.324788][T14614] filename_mkdirat+0x48b/0x5e0 [ 1029.324814][T14614] ? __pfx_filename_mkdirat+0x10/0x10 [ 1029.324837][T14614] ? strncpy_from_user+0x19d/0x2d0 [ 1029.324860][T14614] ? do_getname+0x191/0x390 [ 1029.324888][T14614] __x64_sys_mkdirat+0x89/0xc0 [ 1029.324913][T14614] do_syscall_64+0x123/0x790 [ 1029.324938][T14614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.324958][T14614] RIP: 0033:0x7fd12f79e159 [ 1029.324974][T14614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.324991][T14614] RSP: 002b:00007fd130663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1029.325011][T14614] RAX: ffffffffffffffda RBX: 00007fd12fa25fa0 RCX: 00007fd12f79e159 [ 1029.325023][T14614] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1029.325034][T14614] RBP: 00007fd12f835024 R08: 0000000000000000 R09: 0000000000000000 [ 1029.325045][T14614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.325056][T14614] R13: 00007fd12fa26038 R14: 00007fd12fa25fa0 R15: 00007ffe0294c1f8 [ 1029.325083][T14614] [ 1029.411339][T14614] cgroup: cgroup_addrm_files: failed to add reset_stats, err=-12 [ 1029.784416][ T5652] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1030.012941][ T5652] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1030.013148][ T5652] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1030.021718][ T5652] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 1030.021745][ T5652] usb 3-1: config 114 has no interface number 0 [ 1030.021779][ T5652] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1030.021800][ T5652] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1030.021823][ T5652] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1030.021865][ T5652] usb 3-1: config 114 interface 240 has no altsetting 0 [ 1030.052171][ T5652] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.052228][ T5652] usb 3-1: Product: syz [ 1030.052339][ T5652] usb 3-1: Manufacturer: syz [ 1030.052427][ T5652] usb 3-1: SerialNumber: syz [ 1030.079534][T14616] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1030.079640][T14616] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1030.224178][ T5746] usb 4-1: USB disconnect, device number 80 [ 1030.505604][ T5652] ir_usb 3-1:114.240: IR Dongle converter detected [ 1030.514721][ T5652] usb 3-1: IRDA class descriptor not found, device not bound [ 1030.542033][ T5652] usb 3-1: USB disconnect, device number 65 [ 1030.570109][ T31] audit: type=1400 audit(1789390730.993:1038): avc: denied { bind } for pid=14623 comm="syz.3.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1030.570170][ T31] audit: type=1400 audit(1789390730.993:1039): avc: denied { setopt } for pid=14623 comm="syz.3.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1030.595601][T14622] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2437'. [ 1031.279069][T14633] netlink: 'syz.3.2441': attribute type 1 has an invalid length. [ 1031.644053][ T31] audit: type=1400 audit(1789390731.762:1040): avc: denied { write } for pid=14628 comm="syz.3.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1031.846773][T14636] FAULT_INJECTION: forcing a failure. [ 1031.846773][T14636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.860172][T14636] CPU: 0 UID: 0 PID: 14636 Comm: syz.5.2439 Tainted: G L syzkaller #0 PREEMPT(full) [ 1031.860205][T14636] Tainted: [L]=SOFTLOCKUP [ 1031.860212][T14636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1031.860223][T14636] Call Trace: [ 1031.860230][T14636] [ 1031.860238][T14636] dump_stack_lvl+0x100/0x190 [ 1031.860270][T14636] should_fail_ex.cold+0x5/0xa [ 1031.860297][T14636] _copy_from_iter+0x1f4/0x1690 [ 1031.860329][T14636] ? __asan_memset+0x23/0x50 [ 1031.860349][T14636] ? __pfx__copy_from_iter+0x10/0x10 [ 1031.860376][T14636] ? __pfx___alloc_skb+0x10/0x10 [ 1031.860394][T14636] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1031.860423][T14636] ? sock_has_perm+0x25a/0x2f0 [ 1031.860447][T14636] ? __pfx_sock_has_perm+0x10/0x10 [ 1031.860479][T14636] netlink_sendmsg+0x808/0xda0 [ 1031.860503][T14636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1031.860524][T14636] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1031.860557][T14636] ____sys_sendmsg+0xa4d/0xbe0 [ 1031.860581][T14636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1031.860600][T14636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1031.860630][T14636] ? lock_acquire+0x1d1/0x380 [ 1031.860649][T14636] ? get_pid_task+0x2a/0x250 [ 1031.860676][T14636] ___sys_sendmsg+0x190/0x1e0 [ 1031.860702][T14636] ? __pfx____sys_sendmsg+0x10/0x10 [ 1031.860728][T14636] ? get_pid_task+0x106/0x250 [ 1031.860761][T14636] ? find_held_lock+0x2b/0x80 [ 1031.860802][T14636] __sys_sendmsg+0x160/0x210 [ 1031.860822][T14636] ? __pfx___sys_sendmsg+0x10/0x10 [ 1031.860855][T14636] do_syscall_64+0x123/0x790 [ 1031.860881][T14636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.860900][T14636] RIP: 0033:0x7f1be4d9e159 [ 1031.860916][T14636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.860933][T14636] RSP: 002b:00007f1be5c78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1031.860951][T14636] RAX: ffffffffffffffda RBX: 00007f1be5025fa0 RCX: 00007f1be4d9e159 [ 1031.860963][T14636] RDX: 0000000024040084 RSI: 0000200000000700 RDI: 0000000000000005 [ 1031.860973][T14636] RBP: 00007f1be5c78090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.860984][T14636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.860996][T14636] R13: 00007f1be5026038 R14: 00007f1be5025fa0 R15: 00007ffeff52efd8 [ 1031.861022][T14636] [ 1031.999656][ T5739] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1032.148102][ T5739] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1032.148936][ T5739] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.148970][ T5739] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1032.148988][ T5739] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1032.149008][ T5739] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1032.149038][ T5739] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.367871][ T5652] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1032.411818][T14650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=14650 comm=syz.5.2444 [ 1032.517813][ T5652] usb 3-1: Using ep0 maxpacket: 32 [ 1032.523534][ T5652] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1032.535057][ T5652] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1032.535095][ T5652] usb 3-1: config 0 has no interface number 0 [ 1032.535131][ T5652] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1032.535151][ T5652] usb 3-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 1032.535172][ T5652] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1032.604549][T14659] ALSA: mixer_oss: invalid OSS volume '' [ 1032.626195][ T5652] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.626235][ T5652] usb 3-1: Product: syz [ 1032.626260][ T5652] usb 3-1: Manufacturer: syz [ 1032.626277][ T5652] usb 3-1: SerialNumber: syz [ 1032.639394][ T5777] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1032.663758][ T5652] usb 3-1: config 0 descriptor?? [ 1032.671283][ T5652] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1032.671471][ T5652] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1032.838301][ T5777] usb 8-1: Using ep0 maxpacket: 16 [ 1033.406820][T11838] Bluetooth: Wrong link type (-57) [ 1033.583281][ T5777] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1033.583358][ T5777] usb 8-1: New USB device found, idVendor=12d1, idProduct=726a, bcdDevice=53.c6 [ 1033.603311][T14686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2448'. [ 1033.615122][ T5777] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1033.615166][ T5777] usb 8-1: can't read configurations, error -71 [ 1033.676503][ T5739] [drm] Initialized gud 1.0.0 for 7-1:1.0 on minor 1 [ 1033.726663][T14689] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2449'. [ 1033.739712][ T31] audit: type=1400 audit(1789390734.169:1041): avc: denied { lock } for pid=14688 comm="syz.5.2449" path="socket:[52249]" dev="sockfs" ino=52249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1033.778315][T14689] loop8: detected capacity change from 0 to 16384 [ 1033.811480][T14689] loop8: detected capacity change from 16384 to 16383 [ 1033.857015][T14632] FAULT_INJECTION: forcing a failure. [ 1033.857015][T14632] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.857071][T14632] CPU: 0 UID: 0 PID: 14632 Comm: syz.6.2440 Tainted: G L syzkaller #0 PREEMPT(full) [ 1033.857094][T14632] Tainted: [L]=SOFTLOCKUP [ 1033.857100][T14632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1033.857109][T14632] Call Trace: [ 1033.857114][T14632] [ 1033.857121][T14632] dump_stack_lvl+0x100/0x190 [ 1033.857149][T14632] should_fail_ex.cold+0x5/0xa [ 1033.857172][T14632] should_failslab+0xc2/0x120 [ 1033.857193][T14632] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1033.857211][T14632] ? security_file_alloc+0x34/0x2c0 [ 1033.857233][T14632] security_file_alloc+0x34/0x2c0 [ 1033.857251][T14632] init_file+0x95/0x480 [ 1033.857272][T14632] alloc_empty_file+0x79/0x1c0 [ 1033.857295][T14632] path_openat+0xdb/0x2440 [ 1033.857317][T14632] ? __pfx_path_openat+0x10/0x10 [ 1033.857342][T14632] do_file_open+0x20e/0x430 [ 1033.857363][T14632] ? __pfx_do_file_open+0x10/0x10 [ 1033.857397][T14632] ? _raw_spin_unlock+0x28/0x50 [ 1033.857414][T14632] ? alloc_fd+0x471/0x7a0 [ 1033.857440][T14632] do_sys_openat2+0x10f/0x1e0 [ 1033.857461][T14632] ? __pfx_do_sys_openat2+0x10/0x10 [ 1033.857482][T14632] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1033.857503][T14632] ? __fget_files+0x21f/0x3d0 [ 1033.857525][T14632] __x64_sys_openat+0x12d/0x210 [ 1033.857546][T14632] ? __pfx___x64_sys_openat+0x10/0x10 [ 1033.857566][T14632] ? ksys_write+0x1ac/0x250 [ 1033.857589][T14632] do_syscall_64+0x123/0x790 [ 1033.857611][T14632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.857628][T14632] RIP: 0033:0x7fd12f75e98e [ 1033.857641][T14632] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1033.857657][T14632] RSP: 002b:00007fd130662b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1033.857673][T14632] RAX: ffffffffffffffda RBX: 00007fd1306636c0 RCX: 00007fd12f75e98e [ 1033.857684][T14632] RDX: 0000000000000000 RSI: 00007fd130662c00 RDI: ffffffffffffff9c [ 1033.857695][T14632] RBP: 00007fd130662c00 R08: 0000000000000000 R09: 0000000000000000 [ 1033.857705][T14632] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1033.857716][T14632] R13: 00007fd12fa26038 R14: 00007fd12fa25fa0 R15: 00007ffe0294c1f8 [ 1033.857738][T14632] [ 1033.877385][T14693] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1033.877420][T14693] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1033.877455][T14693] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1033.951577][T14693] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1033.990347][T14693] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 1034.007709][T14692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2450'. [ 1034.308009][ T5739] ================================================================== [ 1034.308026][ T5739] BUG: KASAN: use-after-free in fbcon_prepare_logo+0x94e/0xc60 [ 1034.308059][ T5739] Read of size 256 at addr ffff888053c03ff4 by task kworker/1:3/5739 [ 1034.308075][ T5739] [ 1034.308087][ T5739] CPU: 1 UID: 0 PID: 5739 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1034.308121][ T5739] Tainted: [L]=SOFTLOCKUP [ 1034.308129][ T5739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1034.308142][ T5739] Workqueue: usb_hub_wq hub_event [ 1034.308169][ T5739] Call Trace: [ 1034.308176][ T5739] [ 1034.308184][ T5739] dump_stack_lvl+0x100/0x190 [ 1034.308210][ T5739] print_report+0x13d/0x4b0 [ 1034.308236][ T5739] ? __virt_addr_valid+0x239/0x430 [ 1034.308255][ T5739] ? fbcon_prepare_logo+0x94e/0xc60 [ 1034.308275][ T5739] kasan_report+0xdf/0x1c0 [ 1034.308295][ T5739] ? fbcon_prepare_logo+0x94e/0xc60 [ 1034.308319][ T5739] kasan_check_range+0x10f/0x1e0 [ 1034.308342][ T5739] __asan_memcpy+0x23/0x60 [ 1034.308357][ T5739] fbcon_prepare_logo+0x94e/0xc60 [ 1034.308387][ T5739] fbcon_init+0x1065/0x1830 [ 1034.308407][ T5739] visual_init+0x320/0x620 [ 1034.308431][ T5739] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1034.308458][ T5739] do_take_over_console+0x501/0x5d0 [ 1034.308484][ T5739] do_fbcon_takeover+0xe9/0x210 [ 1034.308503][ T5739] fbcon_fb_registered+0x364/0x4b0 [ 1034.308526][ T5739] do_register_framebuffer+0x503/0x870 [ 1034.308548][ T5739] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1034.308572][ T5739] ? find_held_lock+0x2b/0x80 [ 1034.308600][ T5739] register_framebuffer+0x23/0x40 [ 1034.308618][ T5739] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1034.308645][ T5739] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1034.308670][ T5739] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1034.308696][ T5739] drm_fb_helper_initial_config+0x44/0x60 [ 1034.308721][ T5739] drm_fbdev_client_hotplug+0x19e/0x220 [ 1034.308743][ T5739] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 1034.308764][ T5739] drm_client_register+0x197/0x280 [ 1034.308786][ T5739] drm_fbdev_client_setup+0x155/0x480 [ 1034.308805][ T5739] drm_client_setup+0x160/0x1a0 [ 1034.308821][ T5739] gud_probe+0x186c/0x1c60 [ 1034.308842][ T5739] ? __pfx_gud_probe+0x10/0x10 [ 1034.308861][ T5739] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1034.308878][ T5739] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1034.308897][ T5739] ? __pm_runtime_set_status+0x13c/0x970 [ 1034.308921][ T5739] usb_probe_interface+0x386/0x9b0 [ 1034.308948][ T5739] ? __pfx_usb_probe_interface+0x10/0x10 [ 1034.308969][ T5739] ? kernfs_put+0x3f/0x60 [ 1034.308994][ T5739] ? sysfs_create_link+0x68/0xc0 [ 1034.309016][ T5739] ? __pfx_usb_probe_interface+0x10/0x10 [ 1034.309036][ T5739] really_probe+0x241/0xa60 [ 1034.309055][ T5739] __driver_probe_device+0x210/0x460 [ 1034.309070][ T5739] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1034.309090][ T5739] driver_probe_device+0x4a/0x140 [ 1034.309115][ T5739] __device_attach_driver+0x1df/0x320 [ 1034.309135][ T5739] ? __pfx___device_attach_driver+0x10/0x10 [ 1034.309153][ T5739] bus_for_each_drv+0x159/0x1e0 [ 1034.309177][ T5739] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1034.309201][ T5739] ? lockdep_hardirqs_on+0x7d/0x110 [ 1034.309221][ T5739] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1034.309241][ T5739] __device_attach+0x1e4/0x4d0 [ 1034.309259][ T5739] ? __pfx___device_attach+0x10/0x10 [ 1034.309277][ T5739] ? do_raw_spin_unlock+0x145/0x1e0 [ 1034.309301][ T5739] device_initial_probe+0xaf/0xd0 [ 1034.309321][ T5739] bus_probe_device+0x64/0x160 [ 1034.309349][ T5739] device_add+0x121d/0x1970 [ 1034.309371][ T5739] ? __pfx_device_add+0x10/0x10 [ 1034.309392][ T5739] ? mark_held_locks+0x40/0x70 [ 1034.309409][ T5739] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1034.309432][ T5739] usb_set_configuration+0xd97/0x1c60 [ 1034.309461][ T5739] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1034.309479][ T5739] usb_generic_driver_probe+0xa1/0xe0 [ 1034.309496][ T5739] usb_probe_device+0xef/0x400 [ 1034.309517][ T5739] ? __pfx_usb_probe_device+0x10/0x10 [ 1034.309539][ T5739] really_probe+0x241/0xa60 [ 1034.309556][ T5739] __driver_probe_device+0x210/0x460 [ 1034.309575][ T5739] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1034.309593][ T5739] driver_probe_device+0x4a/0x140 [ 1034.309610][ T5739] __device_attach_driver+0x1df/0x320 [ 1034.309630][ T5739] ? __pfx___device_attach_driver+0x10/0x10 [ 1034.309646][ T5739] bus_for_each_drv+0x159/0x1e0 [ 1034.309667][ T5739] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1034.309688][ T5739] ? lockdep_hardirqs_on+0x7d/0x110 [ 1034.309706][ T5739] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1034.309723][ T5739] __device_attach+0x1e4/0x4d0 [ 1034.309740][ T5739] ? __pfx___device_attach+0x10/0x10 [ 1034.309756][ T5739] ? do_raw_spin_unlock+0x145/0x1e0 [ 1034.309777][ T5739] device_initial_probe+0xaf/0xd0 [ 1034.309794][ T5739] bus_probe_device+0x64/0x160 [ 1034.309817][ T5739] device_add+0x121d/0x1970 [ 1034.309836][ T5739] ? __pfx_device_add+0x10/0x10 [ 1034.309853][ T5739] ? usb_detect_static_quirks+0x335/0x3e0 [ 1034.309872][ T5739] usb_new_device.part.0+0xcc2/0x1686 [ 1034.309896][ T5739] ? do_raw_spin_lock+0x128/0x260 [ 1034.309915][ T5739] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 1034.309938][ T5739] ? mark_held_locks+0x40/0x70 [ 1034.309955][ T5739] hub_event.cold+0x1e3/0xe90 [ 1034.309985][ T5739] ? __pfx_hub_event+0x10/0x10 [ 1034.310003][ T5739] ? check_prev_add+0x1b0/0xe60 [ 1034.310018][ T5739] ? lock_acquire+0x1d1/0x380 [ 1034.310033][ T5739] ? process_one_work+0xa2c/0x1b10 [ 1034.310057][ T5739] ? process_one_work+0x906/0x1b10 [ 1034.310078][ T5739] ? process_one_work+0x906/0x1b10 [ 1034.310100][ T5739] process_one_work+0xac7/0x1b10 [ 1034.310134][ T5739] ? __pfx_process_one_work+0x10/0x10 [ 1034.310157][ T5739] ? lock_acquire+0x1d1/0x380 [ 1034.310174][ T5739] ? __pfx_hub_event+0x10/0x10 [ 1034.310192][ T5739] worker_thread+0x5ef/0xe50 [ 1034.310215][ T5739] ? __pfx_worker_thread+0x10/0x10 [ 1034.310237][ T5739] ? kthread+0x13a/0x450 [ 1034.310256][ T5739] ? __pfx_worker_thread+0x10/0x10 [ 1034.310277][ T5739] kthread+0x373/0x450 [ 1034.310296][ T5739] ? __pfx_kthread+0x10/0x10 [ 1034.310315][ T5739] ret_from_fork+0x730/0xd60 [ 1034.310332][ T5739] ? __pfx_ret_from_fork+0x10/0x10 [ 1034.310348][ T5739] ? __switch_to+0x800/0x10f0 [ 1034.310368][ T5739] ? __pfx_kthread+0x10/0x10 [ 1034.310387][ T5739] ret_from_fork_asm+0x1a/0x30 [ 1034.310407][ T5739] [ 1034.310413][ T5739] [ 1034.310417][ T5739] The buggy address belongs to the physical page: [ 1034.310424][ T5739] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x53c03 [ 1034.310439][ T5739] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1034.310459][ T5739] raw: 00fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1034.310473][ T5739] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 1034.310482][ T5739] page dumped because: kasan: bad access detected [ 1034.310490][ T5739] page_owner tracks the page as freed [ 1034.310495][ T5739] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14025, tgid 14025 (cmp), ts 977919278902 [ 1034.310520][ T5739] post_alloc_hook+0xfd/0x120 [ 1034.310543][ T5739] get_page_from_freelist+0x110d/0x35d0 [ 1034.310565][ T5739] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1034.310587][ T5739] new_slab+0xa9/0x6e0 [ 1034.310607][ T5739] refill_objects+0xe3/0x410 [ 1034.310627][ T5739] __pcs_replace_empty_main+0x35e/0x650 [ 1034.310646][ T5739] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 1034.310662][ T5739] alloc_empty_file+0x5b/0x1c0 [ 1034.310680][ T5739] path_openat+0xdb/0x2440 [ 1034.310697][ T5739] do_file_open+0x20e/0x430 [ 1034.310714][ T5739] do_sys_openat2+0x10f/0x1e0 [ 1034.310734][ T5739] __x64_sys_openat+0x12d/0x210 [ 1034.310753][ T5739] do_syscall_64+0x123/0x790 [ 1034.310772][ T5739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.310790][ T5739] page last free pid 6145 tgid 6145 ts 992664505360 stack trace: [ 1034.310802][ T5739] __free_frozen_pages+0x79f/0x10f0 [ 1034.310824][ T5739] rcu_core+0x5f0/0x1260 [ 1034.310843][ T5739] handle_softirqs+0x1e6/0x9d0 [ 1034.310859][ T5739] __irq_exit_rcu+0x16a/0x210 [ 1034.310873][ T5739] irq_exit_rcu+0x9/0x30 [ 1034.310889][ T5739] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1034.310907][ T5739] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1034.310926][ T5739] [ 1034.310930][ T5739] Memory state around the buggy address: [ 1034.310939][ T5739] ffff888053c03e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1034.310951][ T5739] ffff888053c03f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1034.310963][ T5739] >ffff888053c03f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1034.310972][ T5739] ^ [ 1034.310982][ T5739] ffff888053c04000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.310995][ T5739] ffff888053c04080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.311004][ T5739] ================================================================== [ 1034.338124][ T31] audit: type=1400 audit(1789390734.759:1042): avc: denied { read } for pid=4951 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1034.340319][ T31] audit: type=1400 audit(1789390734.769:1043): avc: denied { search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1034.346533][ T31] audit: type=1400 audit(1789390734.769:1044): avc: denied { write search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1034.346584][ T31] audit: type=1400 audit(1789390734.769:1045): avc: denied { add_name } for pid=4951 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1034.348574][ T31] audit: type=1400 audit(1789390734.769:1046): avc: denied { create } for pid=4951 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1034.348618][ T31] audit: type=1400 audit(1789390734.769:1047): avc: denied { append open } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1034.348656][ T31] audit: type=1400 audit(1789390734.769:1048): avc: denied { getattr } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1034.476610][ T5739] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1035.457104][ T5739] CPU: 1 UID: 0 PID: 5739 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1035.468115][ T5739] Tainted: [L]=SOFTLOCKUP [ 1035.472425][ T5739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1035.482558][ T5739] Workqueue: usb_hub_wq hub_event [ 1035.487586][ T5739] Call Trace: [ 1035.490861][ T5739] [ 1035.493787][ T5739] dump_stack_lvl+0x100/0x190 [ 1035.498457][ T5739] vpanic+0x553/0x970 [ 1035.502435][ T5739] ? __pfx_vpanic+0x10/0x10 [ 1035.506920][ T5739] ? mark_held_locks+0x40/0x70 [ 1035.511670][ T5739] ? fbcon_prepare_logo+0x94e/0xc60 [ 1035.516856][ T5739] panic+0xd1/0xe0 [ 1035.520561][ T5739] ? __pfx_panic+0x10/0x10 [ 1035.524959][ T5739] ? fbcon_prepare_logo+0x94e/0xc60 [ 1035.530144][ T5739] ? preempt_schedule_common+0x3c/0xb0 [ 1035.535589][ T5739] check_panic_on_warn.cold+0x19/0x34 [ 1035.540958][ T5739] end_report.part.0+0x3a/0x90 [ 1035.545715][ T5739] kasan_report.cold+0xe/0x18 [ 1035.550388][ T5739] ? fbcon_prepare_logo+0x94e/0xc60 [ 1035.555588][ T5739] kasan_check_range+0x10f/0x1e0 [ 1035.560519][ T5739] __asan_memcpy+0x23/0x60 [ 1035.565048][ T5739] fbcon_prepare_logo+0x94e/0xc60 [ 1035.570089][ T5739] fbcon_init+0x1065/0x1830 [ 1035.574601][ T5739] visual_init+0x320/0x620 [ 1035.579019][ T5739] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1035.584647][ T5739] do_take_over_console+0x501/0x5d0 [ 1035.589846][ T5739] do_fbcon_takeover+0xe9/0x210 [ 1035.594684][ T5739] fbcon_fb_registered+0x364/0x4b0 [ 1035.599787][ T5739] do_register_framebuffer+0x503/0x870 [ 1035.605241][ T5739] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1035.611218][ T5739] ? find_held_lock+0x2b/0x80 [ 1035.615895][ T5739] register_framebuffer+0x23/0x40 [ 1035.620907][ T5739] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1035.628012][ T5739] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1035.635554][ T5739] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1035.641556][ T5739] drm_fb_helper_initial_config+0x44/0x60 [ 1035.647276][ T5739] drm_fbdev_client_hotplug+0x19e/0x220 [ 1035.652807][ T5739] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 1035.658858][ T5739] drm_client_register+0x197/0x280 [ 1035.663961][ T5739] drm_fbdev_client_setup+0x155/0x480 [ 1035.669320][ T5739] drm_client_setup+0x160/0x1a0 [ 1035.674165][ T5739] gud_probe+0x186c/0x1c60 [ 1035.678572][ T5739] ? __pfx_gud_probe+0x10/0x10 [ 1035.683423][ T5739] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1035.689242][ T5739] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1035.695033][ T5739] ? __pm_runtime_set_status+0x13c/0x970 [ 1035.700655][ T5739] usb_probe_interface+0x386/0x9b0 [ 1035.705763][ T5739] ? __pfx_usb_probe_interface+0x10/0x10 [ 1035.711387][ T5739] ? kernfs_put+0x3f/0x60 [ 1035.715709][ T5739] ? sysfs_create_link+0x68/0xc0 [ 1035.720633][ T5739] ? __pfx_usb_probe_interface+0x10/0x10 [ 1035.726253][ T5739] really_probe+0x241/0xa60 [ 1035.730744][ T5739] __driver_probe_device+0x210/0x460 [ 1035.736016][ T5739] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1035.741813][ T5739] driver_probe_device+0x4a/0x140 [ 1035.746822][ T5739] __device_attach_driver+0x1df/0x320 [ 1035.752180][ T5739] ? __pfx___device_attach_driver+0x10/0x10 [ 1035.758071][ T5739] bus_for_each_drv+0x159/0x1e0 [ 1035.762914][ T5739] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1035.768278][ T5739] ? lockdep_hardirqs_on+0x7d/0x110 [ 1035.773464][ T5739] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1035.779259][ T5739] __device_attach+0x1e4/0x4d0 [ 1035.784009][ T5739] ? __pfx___device_attach+0x10/0x10 [ 1035.789281][ T5739] ? do_raw_spin_unlock+0x145/0x1e0 [ 1035.794468][ T5739] device_initial_probe+0xaf/0xd0 [ 1035.799493][ T5739] bus_probe_device+0x64/0x160 [ 1035.804249][ T5739] device_add+0x121d/0x1970 [ 1035.808741][ T5739] ? __pfx_device_add+0x10/0x10 [ 1035.813577][ T5739] ? mark_held_locks+0x40/0x70 [ 1035.818338][ T5739] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1035.824236][ T5739] usb_set_configuration+0xd97/0x1c60 [ 1035.829616][ T5739] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1035.835680][ T5739] usb_generic_driver_probe+0xa1/0xe0 [ 1035.841037][ T5739] usb_probe_device+0xef/0x400 [ 1035.845891][ T5739] ? __pfx_usb_probe_device+0x10/0x10 [ 1035.851276][ T5739] really_probe+0x241/0xa60 [ 1035.855769][ T5739] __driver_probe_device+0x210/0x460 [ 1035.861046][ T5739] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1035.866841][ T5739] driver_probe_device+0x4a/0x140 [ 1035.871853][ T5739] __device_attach_driver+0x1df/0x320 [ 1035.877218][ T5739] ? __pfx___device_attach_driver+0x10/0x10 [ 1035.883098][ T5739] bus_for_each_drv+0x159/0x1e0 [ 1035.887951][ T5739] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1035.893337][ T5739] ? lockdep_hardirqs_on+0x7d/0x110 [ 1035.898533][ T5739] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1035.904328][ T5739] __device_attach+0x1e4/0x4d0 [ 1035.909079][ T5739] ? __pfx___device_attach+0x10/0x10 [ 1035.914347][ T5739] ? do_raw_spin_unlock+0x145/0x1e0 [ 1035.919538][ T5739] device_initial_probe+0xaf/0xd0 [ 1035.924559][ T5739] bus_probe_device+0x64/0x160 [ 1035.929329][ T5739] device_add+0x121d/0x1970 [ 1035.933824][ T5739] ? __pfx_device_add+0x10/0x10 [ 1035.938662][ T5739] ? usb_detect_static_quirks+0x335/0x3e0 [ 1035.944370][ T5739] usb_new_device.part.0+0xcc2/0x1686 [ 1035.949736][ T5739] ? do_raw_spin_lock+0x128/0x260 [ 1035.954753][ T5739] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 1035.960549][ T5739] ? mark_held_locks+0x40/0x70 [ 1035.965298][ T5739] hub_event.cold+0x1e3/0xe90 [ 1035.969974][ T5739] ? __pfx_hub_event+0x10/0x10 [ 1035.974735][ T5739] ? check_prev_add+0x1b0/0xe60 [ 1035.979570][ T5739] ? lock_acquire+0x1d1/0x380 [ 1035.984241][ T5739] ? process_one_work+0xa2c/0x1b10 [ 1035.989346][ T5739] ? process_one_work+0x906/0x1b10 [ 1035.994452][ T5739] ? process_one_work+0x906/0x1b10 [ 1035.999642][ T5739] process_one_work+0xac7/0x1b10 [ 1036.004577][ T5739] ? __pfx_process_one_work+0x10/0x10 [ 1036.009944][ T5739] ? lock_acquire+0x1d1/0x380 [ 1036.014611][ T5739] ? __pfx_hub_event+0x10/0x10 [ 1036.019366][ T5739] worker_thread+0x5ef/0xe50 [ 1036.023961][ T5739] ? __pfx_worker_thread+0x10/0x10 [ 1036.029089][ T5739] ? kthread+0x13a/0x450 [ 1036.033343][ T5739] ? __pfx_worker_thread+0x10/0x10 [ 1036.038453][ T5739] kthread+0x373/0x450 [ 1036.042518][ T5739] ? __pfx_kthread+0x10/0x10 [ 1036.047101][ T5739] ret_from_fork+0x730/0xd60 [ 1036.051677][ T5739] ? __pfx_ret_from_fork+0x10/0x10 [ 1036.056773][ T5739] ? __switch_to+0x800/0x10f0 [ 1036.061441][ T5739] ? __pfx_kthread+0x10/0x10 [ 1036.066039][ T5739] ret_from_fork_asm+0x1a/0x30 [ 1036.070800][ T5739] [ 1036.074010][ T5739] Kernel Offset: disabled [ 1036.078342][ T5739] Rebooting in 86400 seconds..