last executing test programs: 25.859765486s ago: executing program 3 (id=2841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x20802, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ee) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x7e8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}]}, &(0x7f0000000140)=0x10) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="cfe9ef6d6ee1d433ba73a5ddf753c74ac91bc34a934afa", 0x17}], 0x1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x2) 21.62837892s ago: executing program 3 (id=2853): mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xd8) r0 = socket$qrtr(0x2a, 0x2, 0x0) recvfrom(r0, &(0x7f0000000040)=""/177, 0xb1, 0x40000007, &(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000240)={0x5, 0x80000, r0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000440)={'wg1\x00', 0x0}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xe170eaf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x2e, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x7, 0x0, 0x4, 0x7, 0x6, 0x0, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000400)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x52, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x2, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000700)=[r5, r6, r7, r8], &(0x7f0000000740)=[{0x1, 0x3, 0xa, 0x6}], 0x10, 0x5}, 0x94) getsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000840)=""/1, &(0x7f0000000880)=0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000900), 0x232000, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r9, 0x403c6f2b, &(0x7f0000000940)={0x84f, {"da545642fa8009e9c38a7e877934dd52", "1bebf66021c35f0b8d0946a3522dc0e4", "8f7db03bc8d496153243f02a2bf0daf2"}, 0x200, 0x4}) ioctl$XFS_IOC_ERROR_INJECTION(r8, 0x40085874, &(0x7f0000000980)={r7, 0x1}) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f00000009c0)=0x0, &(0x7f0000000a00)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2b00, '\x00', r10, r9, 0x3, 0x1, 0x5}, 0x50) pwritev2(r7, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="fbf9db6a428d9f718b9822827083e1a725777232a124669df19882463d10b624c500b63d9fa84836d080ab83cc1a03a8547e3dc95713a156e9c781c9ae3c322cbd7c000bdbf3ea8e8cd6ce9b09719696c34f09692df9fa", 0x57}, {&(0x7f0000000b40)="b3887eccfe6cd475cb85084217064c611a4e68bf", 0x14}], 0x2, 0x80000000, 0x9d, 0x1) connect$l2tp6(r9, &(0x7f0000000bc0)={0xa, 0x0, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000000c00)={0x0, 0xfd4, [0x3, 0x6, 0x3, 0x2, 0x3, 0x6]}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000e00)={&(0x7f0000000c40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0xbc, r11, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xde}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x173}], @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7a9}]}, 0xbc}, 0x1, 0x0, 0x0, 0x34000040}, 0x4000) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000e40)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @mcast2, 0x0, 0xd, 0x0, 0x500, 0x765, 0x80, r10}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r0, 0x0, 0x2a, 0xaf, &(0x7f0000000ec0)="0923fb128922f587635eb478c78aa685de3ab3970492ee6bbd0630c15362419c36f968b64c5e477019ba", &(0x7f0000000f00)=""/175, 0x9, 0x0, 0x26, 0xb4, &(0x7f0000000fc0)="d429c8a52f4af31d67ceaaf4f502574211a307ae8dc1f9f285a25e7ef455bceed9e64c3c4759", &(0x7f0000001000)="0a725b373a1a7b154fbd6c1951dca0a9750810a9c68777e54c429e74f26265278288c4c87ca8fb9bd652c8d77e909cc007aa790c9150868f39894873a4b655ed917a747db4076d9cce548bba1e066323f8db5a9b519016e5cc95ded488ba0a678396915599d54cf82aca5027e82690f44820cb9b6959d9cb187fb1d256df9e725ebaffb1ae2b26bf09e47598c432dd1c3e24d92ab3ee9e564bb8b28b461aaf8b775a87db0c364b15c000d3e41855cc166d95ee81", 0x3, 0x0, 0xac6}, 0x50) r13 = syz_open_dev$loop(&(0x7f0000001140), 0x8000000000000000, 0x80000) ioctl$BLKTRACETEARDOWN(r13, 0x1276, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000001180)=0x5, 0x4) 20.772141945s ago: executing program 3 (id=2856): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000300000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 19.464574913s ago: executing program 3 (id=2858): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x24, 0x2d, 0x107, 0xffffff01, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 18.963920959s ago: executing program 3 (id=2860): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000010}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x4b4b, 0x10017) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SCSI_IOCTL_STOP_UNIT(r6, 0x6) epoll_pwait(r4, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) r7 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000340)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 17.081557762s ago: executing program 3 (id=2863): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014003f00b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000bf080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 11.259324756s ago: executing program 2 (id=2881): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.831845456s ago: executing program 0 (id=2883): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r5, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c054}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 10.55299959s ago: executing program 2 (id=2885): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x24, 0x2d, 0x107, 0xffffff01, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x10, 0x1409, 0x211, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r6, 0x0, r6}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @media='ib\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0xc091) 9.487709554s ago: executing program 4 (id=2888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000050) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000100)) landlock_create_ruleset(&(0x7f0000000140)={0x2000, 0x2, 0x3, 0xe200, 0x9, 0x3}, 0x30, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000180), 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000) sendmsg$nl_netfilter(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1c4, 0x6, 0x4, 0x101, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x9}, [@nested={0x20, 0xd3, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @u32}, @typed={0x14, 0xc0, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @typed={0x14, 0x101, 0x0, 0x0, @str='/dev/input/mice\x00'}, @nested={0x28, 0x14c, 0x0, 0x1, [@typed={0xc, 0x13d, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xe9}, @typed={0x14, 0xb0, 0x0, 0x0, @str='/dev/input/mice\x00'}]}, @nested={0xa4, 0xc6, 0x0, 0x1, [@generic="e5f2d64be39292ab6afeee6cd533bae683986b0e94193f3290fc120361048454955e772d6658f87c9ca017aa35b6e131df6055812b653f34320b6c2c37f79a878001e53e6416582e99a1757bf5d914561e12519eb4dac8e2868e4cdb457b54e84f69459812cf82b699ef7a951ad20ee71704b625a014cae9d7375e28fef834794cc8b60e87c31002abcbf6804852324143c61c535542902fbc78981405d1499a"]}, @typed={0x9e, 0x34, 0x0, 0x0, @binary="b90e24fe8ce13a445095a52adea206e58f3d89ef39e6071296acecd00a427bc1072a1c31603e1719f6cbc430983df82152f40e04a4fbbf7f6d656fb99f188d0b5120465ae9a8110c2ae06347209d3a247de436b6f22547514d95deecd23370c640736a2bbb34660214679a257669228a6694b4f120762642a030cf56899d942a5b86f3f6305c0cf64f9ac200ef23b59533fdb320284dd1b9552a"}, @typed={0x8, 0x10f, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0xc4, 0x0, 0x0, @ipv4=@local}]}, 0x1c4}}, 0x8000011) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x184, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xd75e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000801}, 0x10004080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa4, 0x4d}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004854) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000900)={@empty, @loopback, 0x0, "bdc2034c7bb4311b94a82917addf0d8b72e17b4838ddc65c53ff711ff6092553", 0x5, 0x0, 0x7, 0x5}, 0x3c) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x800}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x844}, 0x48c1) syz_open_dev$MSR(&(0x7f0000000bc0), 0x8, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000c00)=0x5, 0x4) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000c40)=0x80000001, 0x4) syz_clone(0x60c0000, &(0x7f0000000c80)="5f0df24f8b5dd7a11813efb5b86acd7f6a40b6f560a90964f1ba53b728127a30840498f32fa83f360bdbab6062", 0x2d, &(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)="6e894fe206daf9a5cb1221aa8326e9eff4daa0cae435000d69b598e6e123c6c26ee64ef78a621831670a4caff0beae1bcb36c323e015211bac604bbd55ae453819282b3029a73176596a21e7a91f8cab2d199b46f2045662af5880f7d583941cd84b5ad21658") accept4(r2, &(0x7f0000000dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000e40)=0x80, 0x80400) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x44000, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f0000001100)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f00)={0x184, 0x15, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xd6, 0x8, "c8be1461dbabf5a1abfeabbdac996aba76200b0d67b619203ecd1f2ad88ac0a3c97efd8c32ea1139a60fb2e88981f552467cbb184d3d476a8d3f84f6fe1ce281fd5f6b3dde92b9e4a9206ef7cb8daeb5aff63ea3aabaab24ad8ca915726020ff1e895aaba7081b8bd1c675b16f244473a4e3d1b6762b260dbc11ef89e6fbd83e239856de364d2cb8700d157a30da3927a54959ccf925e2c211c9fc45ed15dafb652ab27134faef3eb566448189ed48a6af86bed23a58cc844c1775b68e4be11fdac12d67ec8c0ef981d56ea793d5c179959c"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x7f, 0x8, "3d77307eb580a579502a6bf90382bacb192eb398fddec11ca7d4f11a7cb5163d8f2208aae139c21fdc835910b59a69c83b1f283a4f0a6c6a6a8d69151168fa9bc1dd3dbd0ae812c3d5c0dcb56b0b729dcb898c0415b7adedf9bbb4992d432d60a5ff693ef483eb7cd3271ffbff8a43f13863f9b5ea652abc02fd01"}]}, 0x184}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000044) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, r5, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) syz_open_dev$MSR(&(0x7f0000001240), 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, &(0x7f0000001280)={'filter\x00', 0x0, [0x3, 0x1, 0xffffff37, 0xa83d]}, &(0x7f0000001300)=0x54) syz_genetlink_get_family_id$l2tp(&(0x7f0000001340), 0xffffffffffffffff) 9.265620228s ago: executing program 4 (id=2889): openat$ppp(0xffffffffffffff9c, 0x0, 0x40302, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) migrate_pages(r0, 0x9, &(0x7f0000000180)=0x4, &(0x7f0000000280)=0xffffffffffffff86) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x39, 0x107, 0x70bd2c, 0x25dfdbfe, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c814) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x4, 0x8, 0x5, 0x7}]}) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x5000, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 7.546475714s ago: executing program 4 (id=2890): r0 = syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000840)={0x8e54676b6292e04f, 0x5}, 0x0, &(0x7f0000000940)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000a40)={0x20, 0x81, 0x2, "8b71"}, &(0x7f0000000a80)={0x20, 0x82, 0x1, "a9"}, 0x0, &(0x7f0000000b00)={0x20, 0x84, 0x4, "22ca59ea"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000800)={0x20, 0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf, 0xc28c2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f19000000000000000000ffff0000000000000000000000004e00", [0x7, 0xffffffff9673e35d]}}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000000c0)={0x1, 0x9a, &(0x7f0000000000)="775bf8f1f6849e175ca0244390c07357580c30e4c30fcab854826cd0e9019aee1b436402f75a31be75b8277ec7c38be9ef3b853b56ebfdcb9c5f872359ddcd218165201850c8bb26e82c748129693f85313c07e5df77be3732915ce55ac90dfeae5ed8a5f7281b68b641969679dc28af6609cdcde735ae4748759cdc13629bf84cc054182af5572fe091e239cf7b3bbe82099f45e768776ec6db"}) 7.311471428s ago: executing program 2 (id=2891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) (async) listen(r1, 0x100) r2 = dup(r1) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000000000000acae5c67cf27b89b513bad813b4b9aa4161414aa0000d900"], 0x18, 0x40854}, 0x8050) (async) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) (async) mkdir(0x0, 0x8) (async) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) (async) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax=always') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup.net/devices.allow\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f0000000380), 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0xc2070000, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="88010042903c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x129800, 0x0) (async) file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f0000000040), 0x18, 0x100) 7.289362052s ago: executing program 0 (id=2892): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0xffb0}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.509911873s ago: executing program 0 (id=2893): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000300)=""/112, 0x70, 0x0, &(0x7f0000000380)=""/141, 0x8d}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2d, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@call={0x85, 0x0, 0x0, 0xbe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x2, 0x3, 0x5, 0xa, 0x100, 0xfffffffffffffffb}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x8}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x93}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0xd, 0x9e, &(0x7f0000000680)=""/158, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000780)=[{0x4, 0x3, 0x10, 0x7}, {0x5, 0x3, 0x1, 0x9}, {0x2, 0x1, 0x3, 0x6}, {0x2, 0x5, 0x6, 0x3}], 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0x1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) (async) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) (async) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0xf, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f0000000140)='syzkaller\x00', 0x4c4f, 0xf1, &(0x7f0000000180)=""/241, 0x40f00, 0x4e, '\x00', 0x0, @fallback=0x14, r2, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, r3, r4, 0x0, &(0x7f00000009c0)=[r5, 0xffffffffffffffff, r6, r7], 0x0, 0x10, 0x6}, 0x94) (async) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40) syz_clone3(&(0x7f0000000d00)={0x1000000, &(0x7f0000000b00), &(0x7f0000000b40)=0x0, &(0x7f0000000b80)=0x0, {0x2f}, &(0x7f0000000bc0)=""/38, 0x26, &(0x7f0000000c00)=""/140, &(0x7f0000000cc0)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r7}}, 0x58) write$cgroup_pid(r8, &(0x7f0000000d80)=r9, 0x12) getgroups(0x5, &(0x7f0000000dc0)=[0xee00, 0x0, 0xee00, 0x0, 0xee00]) setgid(r13) (async) fstat(r1, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000e80)=[r11, r12, r11, r15, r13]) mount$9p_virtio(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), 0x12414, &(0x7f0000000f80)={'trans=virtio,', {[{@cache_loose}], [{@subj_role={'subj_role', 0x3d, '/selinux/avc/hash_stats\x00'}}, {@dont_appraise}, {@dont_appraise}, {@audit}, {@smackfsdef={'smackfsdef', 0x3d, '+.\\\''}}, {@flag='nomand'}, {@subj_user={'subj_user', 0x3d, '/dev/input/mice\x00'}}, {@fowner_eq={'fowner', 0x3d, r14}}]}}) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f0000001040)={'batadv_slave_1\x00', {0x2, 0x4e24, @broadcast}}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001080)={{0x1, 0x1, 0x18, r2, {0x8000}}, './file0\x00'}) (async) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r17, &(0x7f0000001100)=@file={0x1, './file0\x00'}, 0x6e) (async) socket$kcm(0x29, 0x0, 0x0) (async) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, &(0x7f0000001180)) (async) sched_setscheduler(r10, 0x5, &(0x7f0000001240)=0x7f) (async) sendmsg$IPSET_CMD_ADD(r16, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0xec, 0x9, 0x6, 0x202, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x38}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x63}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'tunl0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x200000d0) (async) r18 = ioctl$UDMABUF_CREATE_LIST(r16, 0x40087543, &(0x7f0000001440)={0x0, 0x1, [{r7, 0x0, 0x0, 0x1000000000000}]}) ioctl$BTRFS_IOC_SYNC(r18, 0x9408, 0x0) (async) getsockopt$inet6_mreq(r1, 0x29, 0xe, &(0x7f0000001480)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f00000014c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0xe, 0x200, 0x1, 0x2, 0x2000, r16, 0x10000, '\x00', r19, r2, 0x2, 0x4, 0x2}, 0x50) 6.079963999s ago: executing program 2 (id=2895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8, 0xffff, 0xc0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x2, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000c18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb702000008000000b704000000000000850000005900000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) 6.005955128s ago: executing program 2 (id=2896): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000001c0)={0x28, 0x4, 0x0, 0x0, 0x23b, 0x7ff, 0x6}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0), 0x44, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x0, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r3}, 0x0) close(r3) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) (async) r4 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r4, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e7af000000000000"]}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x54, &(0x7f0000000240)=ANY=[@ANYBLOB="400e020000000248"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r4, &(0x7f0000000100)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="000e06000000060a"], 0x0}, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) close(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x100, r5}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x100, r5}, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) close(r1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 5.952045371s ago: executing program 4 (id=2897): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x4000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, 0x0) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000202, r3, &(0x7f00000006c0)='./file0\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f00003ab000/0x1000)=nil, &(0x7f00003a3000/0xc00000)=nil, &(0x7f000084e000/0x3000)=nil, &(0x7f0000858000/0x3000)=nil, &(0x7f000056b000/0x2000)=nil, &(0x7f0000628000/0x2000)=nil, &(0x7f0000945000/0x2000)=nil, &(0x7f0000dcb000/0x2000)=nil, &(0x7f0000f6b000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000574000/0x3000)=nil, 0x0, 0x0, r5}, 0x68) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001c40), 0x100, 0x0) r8 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000001c80)) r9 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000001cc0)={0x0, 0x1, [{r0, 0x0, 0x4000, 0xfffffffffffff000}]}) sendmsg$netlink(r1, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000700)={0x1500, 0x13, 0x100, 0x70bd25, 0x25dfdbff, "", [@typed={0x14, 0x101, 0x0, 0x0, @ipv6=@mcast1}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x165, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x3f, 0x0, 0x0, @uid=r3}, @generic="28a3b19669a2eab2877b9a49e88fc68b557046e12a5d7baa7374134fae921fff13cd409f229372f3895361af03aa100681764918f5d9762d7004637806cc48b81dfbf980c51dbaf3953cf125be5f965360d30210ef0b918ea90ec073a06ee27f42022c067cc548265f16cb5cd7e1b6181a2f0a786f5963374d81a283c6f8329ca3f24e3254e15c238e", @nested={0x151, 0xfa, 0x0, 0x1, [@nested={0x4, 0xc8}, @typed={0xad, 0x55, 0x0, 0x0, @binary="bd3badb3e0535492f1152c1227c66787d7314a76672657d7a9105f505c04e897a3c82488e956de0c56d17afd6cd0923f54070b04eb59d204dd0880f3d3056b3e115a83d1d85e9efb767e2cc5799fa1312eb491183d42cadbc9f2c4c1181c1a04fc15643f225b7f581a763b7d9b7eb205d11ea504b9f2305934dc69fb5c58d5c462e39b69dbe476f502def3313961a7d276974e507176770bf5d3033d2a870461337849e01b239d6c10"}, @typed={0x8, 0xd5, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x73, 0x0, 0x0, @fd=r6}, @generic="e238ac9aac6e7c01446fe319528ffb7c7383380ac757f8d0d88fe5f90f391f7d536255b25d18328205a74fa3bf846ef3634443f0bf4e93a5e66df96326471508f0543cb58d9239ee6284bce9c35932c7edca10f0c1f8a352c01415fabd9fc601aca29c2741619f91eab4356a3974e66e26fb3c309b3a5ccd7bfa1ba4f066bd11eef464d200fb057388"]}, @typed={0x8, 0x4e, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="8ef50f42af18af2d1d1d7e6ef6cd2c6f19529f51c34c0abb12eb3fa6f461ce15822ea383339044a27399044fb3bf7a818769280a0bd0bba3635f717278955d78a3d772b4668f987cbf314c56e271a80bfb99cba590423eba9b8340a13b62ed30cd4f22b8a3cfad49637545ade998a5b277181861fc6a11984e4ddb86d6793ffc06ca43b01aef39964bc3fe74f2b473f337f9d70c3db897d6b78c70ca4fb5975c4646385ab4c3785429585b70e717084a76deb6730e49d037f1ebad8def31aff727cd072a62edb0c6a2bf8a7b04eb72a94e47275d46d92fe25b4a4276b25f", @typed={0x8, 0xb9, 0x0, 0x0, @fd=r0}, @nested={0x1118, 0xcf, 0x0, 0x1, [@typed={0x5, 0x13c, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x14f, 0x0, 0x0, @u64=0x1ff}, @generic="7a34591b49d69fe7034c00fa84f0baf88c5b4fbda3c83bf6c5cd6be4c2ffadd4ce91027659005d5799a6a7629997386d0b84b04797ff2c9b5e7f872944bbae026e46d37c0fed11fc049cc572df1cf5cb8fb4f414a11e3c7da31fd0c38c000f7705d22d88deafe3358a261adfeedad199e20a2b3d5b3e6ec79ea014b09f8b14a970c09a874931c96d1deaa4fbd23b1928e70c", @generic="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", @generic="8f5c8a6c879e675cf4214a5eeb6597f852267003a5acf2695d04472fe29345f846f06beff4bbd6ebf65d95ea417415eb1272d4cf5e66aabfca1e9b42516ff7895e09", @typed={0x8, 0xec, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x15f}, @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x7}, @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @generic="60c0c4105029508b126a5d1ba03ba27ca3bae319bcb50f2c7ca2f3b81de14eb45ca85ae692ba6f7639256dcff76e32e3c04966b4467d04fef5ae86259c7e3e00e4403d5d2725ee9b61993c72cf5cedb64a26a476a9b668d6c62be293148fafc8a0f28042c1925b74d580eee3e1548615a5d1dbb2c827d520034b112064caa13c764cf0ae67b91e8c8eb9abf1f5d05282b60137f619c8c7210a76b4233bd5aa2a035494b1d42ce4b2a9b48b7e21b5b0d0b1b45cd426357ccf4adabdd066fbf9a12dff2689f5e51b8d6692f0682747b143104ff9ba530532f7b2a81f1090508fedda9138b4"]}, 0x1500}], 0x1, &(0x7f0000001d00)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r7]}}, @rights={{0x24, 0x1, 0x1, [r0, r8, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r9]}}], 0x60, 0x4000000}, 0x40) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) r10 = socket(0x10, 0x803, 0x0) r11 = syz_io_uring_setup(0x6fd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0xf3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x20, r10, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2, 0x3ed763469f8f58cc}) io_uring_enter(r11, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 5.696507819s ago: executing program 1 (id=2898): socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x140e, 0x13, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x400c080}, 0x20044840) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x2], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x20200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x20000007, 0x1f, 0x404, 0x4, 0xe8, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x3ff, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0x37629267, 0x136, 0x6]}, 0x45c) (async) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) (async) readv(r8, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x18}], 0x1) (async) recvmmsg(r7, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10005, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) (async) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r12) (async) socket$can_raw(0x1d, 0x3, 0x1) 5.267777878s ago: executing program 1 (id=2899): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz1\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0x4f5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x4020, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x5, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x84dc, 0x80000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x800000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000e00)={'syz1\x00', {0x8, 0x2, 0x5, 0x5}, 0x6, [0x6, 0x8228, 0x400, 0xbd4, 0x82e09800, 0x100, 0x3, 0x40007, 0x3, 0xd, 0x100, 0x1, 0x5, 0x5, 0x2, 0xb78a, 0x5a, 0x150, 0x4, 0x1, 0x4, 0x9, 0x3, 0x7, 0x6, 0x7f, 0x8af4, 0x3, 0x2, 0x6, 0x4, 0x33a2, 0x200, 0xffff7b22, 0x4, 0xe0, 0x7, 0x3, 0xff, 0x800, 0x7f, 0xffffff81, 0x7f, 0x5, 0x80000, 0x7, 0x23e, 0x9, 0x67, 0x9, 0x10, 0xb, 0x2, 0xef, 0x5, 0x6, 0xb8e, 0x627, 0x8, 0x0, 0x9, 0x1, 0x10000004, 0x9], [0x3, 0x0, 0x1, 0x80000001, 0xffffffff, 0xff, 0x1, 0x3, 0x7, 0x9, 0xd502, 0x80000001, 0x4439, 0xffff, 0x7, 0x7, 0x80000000, 0x8, 0x4, 0x4, 0x1, 0x6, 0x0, 0x9, 0x1, 0x7, 0x7, 0x7, 0x10, 0xae, 0xa8d, 0x4605, 0xfffffffe, 0x7fff, 0x5, 0xffffffff, 0x3, 0x3, 0x7ff, 0x8, 0x10000, 0x4, 0xfffffe00, 0xfff, 0x106, 0x3, 0x8, 0xf0, 0x5, 0x6, 0x400, 0x7, 0x3, 0x8, 0x1000, 0x8, 0x31, 0x81, 0x8, 0x401, 0x3, 0x9a, 0x10, 0x7], [0x5, 0xfffffffe, 0x800006, 0x6, 0xb0fa, 0x4, 0x7ef, 0xc, 0x5, 0xb79a, 0x2, 0x5, 0x2, 0x34000, 0x0, 0x0, 0x6, 0x1, 0x0, 0x1, 0x1, 0x9, 0x101, 0x7, 0xfa, 0x5a17, 0x42d, 0x3, 0xe8, 0x3, 0x85e, 0x8, 0x2, 0x2, 0x7fffffff, 0x800, 0x1, 0xa, 0x0, 0xf, 0x6, 0x10000000, 0x40, 0x8, 0x6, 0x4ea, 0x6, 0x100, 0x1, 0x7f, 0xf7, 0xfc, 0x8, 0x0, 0x5, 0x6, 0x6, 0x5455, 0x2, 0x1001, 0x2, 0x400, 0xffffff7f, 0xd], [0x5, 0x3, 0x8, 0x2, 0x5043, 0x9, 0x2c, 0x3d, 0x400, 0xe, 0x3, 0x0, 0x8, 0x44a4e339, 0x499, 0x4, 0x2, 0x40, 0x9, 0xc, 0x9, 0x0, 0xe, 0xfffffff8, 0x4, 0x3, 0x10, 0x9, 0x9e92, 0x0, 0x9, 0x1000, 0x2, 0xc845, 0x5, 0x0, 0x6, 0x3, 0x800, 0x1d, 0x6b66fc9f, 0x5, 0x0, 0xfffffff7, 0x0, 0x945, 0xb7, 0x4, 0xffff, 0x9, 0x4, 0x80000000, 0xf2be, 0x7, 0x3, 0x7fff, 0x81, 0x1, 0x6, 0x3, 0x8, 0x2, 0x2, 0xfe]}, 0x45c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x275a, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) ioctl$FIBMAP(r1, 0x1, 0xfffffffffffffffd) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x1, 0x3}, 0x2}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="0001010000400066d7bf1ae46f42f2b9cf185f37c01535a77b89e6f51364f1152d7cc812caa0e4a10331df99b805e5d616a80707c42f6f10a97d6ffc6cdcdf0b", 0xffffff8a}, {&(0x7f0000000500)="259abc70cd0acb62e8325901e7ba9c9db2f69f0c7499acce68e5d39f68bc6279", 0x2}], 0x2}, 0x44005) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000180)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f00000001c0)={r9, r10, 0x3, 0x8, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r11, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_TDX_FINALIZE_VM(r1, 0xc008aeba, &(0x7f0000000200)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000bc0)={{0xfe, 0x5}, {0xd}, 0x2, 0xbf000007, 0x2e}) 4.999978711s ago: executing program 0 (id=2900): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x2001) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_kvm_add_vcpu$x86(0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400a40, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f00000007c0)=@svm={0x1, 0x1, 0x1080, {0x4000}, {"b9e11fa1501d763c82a9995f34484544017e775fdd537117bf9196b75d5d53f220d38d592d5a0fd47cc29e07057f764db7b7b6adc1e903ddcaad505e87fd01b2fc92a9b66d140f109810320cd913dbe4532acfbc50a635bc8b8ae8ff0506edc2489af111a16ed054a3d37228a3501b2627d5f73e8c513b3f700321657cdd5f5aa5cb0e8c96c3037fa8f88c0770c74d514d38647ad4ada1ec091a61b16aaeee743e46b4d151ad402c6301a71a404bb37d7af38a1677c360816fd1e10e7d4e7a16f1323be20f4000eff8ec7c8d88d7e7993127c5354e035088fb97378bb3de8a6fa23902f76c6e85bbcd4d89edad8b7c38646a720cac82d9b0b45e84897392533ec9ebb6161c2e3d4fc4c188c5607e46aac729142fa215d48616e60c18b59602ace25912ece8623935718a71fb3b30de1e78e82e045a1c5eaef8a064a5adf2ae5091fe3f42de25352ae62070660dfa34839856d4f5fde2bf60fbcdfed1ff7f14ee52f97c94f547675f18148f9e03109a2fb139c2d9263f7574e6405c7d9de58e9aa5884ad8ded0eb4e3924723d2491f84f62429df0b1b546c88be23bc2665df7278cecbbe2816a05ffbfa8a12f5cc942ff6634cc977c59e09172701342ff819ff99778cfea101e4c25815c04ad8200b13c3037fa05f5487ab6f423d102cbc796707cdbb9415b85da09f78801247b47cd365ba7b3ff5908ed703526e14c6fc4a3aa09813e483411af02556b947000f6afd95e71776e48346b1fcf555f61c579291c1db6f6fcde03529e0014ed8fd69e2a96301d336e601147e8b24860dd7e9aae641a8d7f4339b8a91dd3ecb3c4784c9df994cc6a2ed30afc5d5938b1c13e68f3ed64b7f72413741e4209942c331945c3166cc95859e7675f26f1aecbecfb5602ba033f92f0343513f137844861fc143346525b360cc2e1aeb6fc8a82fa3a2643f5e10cf80a05c1c5ded8bdee14d641424b525ca80b89b726918aa7a7a735498b8a9a57466d064cae8365e598b6931aa7c7cf8fb65c3b4b5ebd28a3c1808ae15a57083ec391c8f9c722ae802a41ca1918e4a8e0568eeffd72e32458396cd36abc0c7c0f7804ac9a355172dd41219823411e9e9398b50c95921ed4367a12bf7b0da00c995487ae4823630b4be3e839ad135b43e3ec44ff2e8b4e36379fa06d610dccd033149fdde6cd14363b360e68fbd212ce8c992cc613695d7b58762757cb8a67e44be3875d1159c01fe2fd113f8412ba1779e6993ae8fa342816ace2c91cf2a6707eb641bc209dd0b063aa061dd9757ba33144ed0d92e40c929b29f654ab65c545929e1431f80c94d66cf090f46ea9db4bb602f6edc421c0abd78eee94eb309444cef09e53f0173fa51945abb8cf783dc45d306cac7bc194c4c162369c22b54c501a67942d279a97e19be0e6118330bd99a62f75460ec25304ea43909ec141a5d063c3d7f8f4fc318cc58895361569224048a7f55e8c2ca8c1851f40a2371cd9966e7ea9d358ba147ad8e4fc1370b83dd8079f4ad028ff1786dd4eafafd01d8f36fd2548cada3882d6375c1be83b97697383326ea7ca57033b1788a6d30ca5dc940cd5ce3d7516bfc910c8761d06a5e8d85cb92bbbc83028157e43c38b68a130710d75c59d8d86fb4815a58381f3b322c3a3ed175303094f19114128a1cb3e8f0823757da6b6afb8f94560a242f1a4fa92b0c1721e2d5566cd882d2ef9e85c0e9243db156a0b062b55d80aa83357029c5e9c28d805b21608ee70064101ba8a7b7d574d65a1c06df9190d235f4bd06908a886262a76dbdd972164951b0c557812c992b135360ced9b10f3ff19d2e00c9302796f4c8e1e8587d9346dbedfc2a0047987b6ad420c10918d5a3bb35b4affec684ccabaf53215e3b83c596ede6dc7c07c9b986744984aae97b11e18c8c8b4c5708c8b14453cbe5cdb0fa42f85a5471478ec87df08dd1cc9e07c3820c9142b44702cc2e164d094eaf5442387f12ba7b2822de36774de2c3c73f8667d709fc4e5135d5275f428dbbc33e8b613e48fbf8355d742cafd20183f8b4f20aa2374de0c1ca24f3b9110142b106f6cb86dcc58894575371e8378ee7448ca9a6db30ca3738779dd15fd65402f4202bbd3c525fe721b14dde4f9a383c76c9877241b77362eadc1445bf786cdff944303770bb095ae9b469a58228270b40312f58a8ab631c4c9cb899efa58cc99729fe1930502755062f317c23ca65e2aa01fdf258e58ff6461aaf3632803a1d453f090d8d511974f06d0e1f7e290c9f77e98226bf10f2a6166ac11df7606eb4f98db42bdda0a6d842934648308426e4a2263a5da45efc7885d1fe1e66b3485dd4e00bcda58e6eec1b2eed6963a1fe40fc3d94036f8a9697fb92177b39073f5b319c2a8164d8e2efbe238a51d4f2dabb2f48f049f4f7cf833078746ea955424535714f5f3b7c9507219f1718db1a7cfde3cd9e58abe13b531e5fea1f2e7b4a103f38c8e26d6553d1481fd3f7aa284618945e8853cc77948c115082b31e703f29cd9aec119ef59063f52223fea12a63ec645f5e54669afaa275e5cb8b98577e83d3c3141ef72e6c4c407a4e1f4a9018422727d4815eb079fd3ed8acb1d7553ae4c9aa760e0e019d37cbbae0f952495fcbae27650dba83e193fd52dfa57d3bf27eb5c13b32fc06a21f4f417e247eb63a2fb4297f4149ee69d6ffe9980f3a28dc9477e9021849ce5f3411013cd23f27cc512378ab3172458d2560e7ca9cbc84f029c4b1c481fa4c06ae61b5289bc4cdb228d6538da70de01539f886d4cea5a0d8986c198bf89449791701f8f664ec7b11e04cf8f34bf08e20dc09fdbd3d55d4691c4225f61d7b666c5385fc96615d113f015fc5a09fec59a3a5071d47333a27e409471fcfc6acb87fd9d9957d2295200437eecf958e58dce6522e1a15dd0fb26d24f35b1ad5212c239ef9d967a3b3174eb3108d69ef4fb155a4c3de5b9df5ae931c7242d510e3be979bae8cb6fc5c0f81b1be412cb7b571747813e000a071cf19591fde5ee5b8c3eedb48570851cd943742bfe529e3de5f12eeabf7eb5dca0b8fd159b232bfa161437ff62165cbd9900b76a665db6afdc9c4a54eb0377f62693511802c8628928bba7d926f0748b5b914780356e873a2ecf22d0922c32ffc3372aba68a7f5b47a4c867dd3ecf1542cc858ace9677204790c20ee900175d2824c8e6c058c6a8da5f6a4bfaf75710df44255559e629659801fe57e59d77df789c7c70ad7a570578cf4951d8917f2c3604e303524759c4be7c3ba0425df42677e76539a93e2ec0faede407f14522e0f77ca040e281b3c6c65c8f41eee3e8962f0d278debd96fc7449392adc497d5f5c63bb7277afaa69188783ab8fc214fc57c8b395f4c9a52bbbd45e5699a37deb1cae5bb7da87e22b570b36664c113d290b94c280b05c3f411024a9b5368ea1725fdd24db6f92e3391601b6e7258a2e34d111484c5211c73e97c8b0190503fb999b8b234e338f53a30bc742fb7d062147474b837da494e99d48a450c316e874731e6365336c525dbb949b18bb851654e093e2f610d63d0bec0fea6d4d30025e24674f485fc6f6b9a38fe5784db23c5941395df6dea171e6813a19ea0601d1e393c9d2ab552c43b1154e59e0931d8bd5024cd1ead4f2cde3ffe1e27834da938c2d09189c7b2329c8a1f4f1bc9fe05ae8288c55098e266e8af2f3d22a0053e755545a76e1e77438c794c20f84899cb0bcb002daa450e473ab14359f842144e7953d4f570b3281ee228ab9893a81373b014de64280aaed8c34353e19442603e28c795b7f7ff48887fb333d267ff5f31b4880cc480febff9ce4f274007b70d0f1faf3f5ca2c643165dd4296ae103157060d02b58c21b54b187dae2f4ab4f780ed8b3d218abfae7bf632278239d33a83949e5113d6607acf907d58d2a8d3181e9b721179939a607733f3bbc8ab34c2383479544bfba060618e5942cc4a8c5174a3b0e49ccba577140ff921b0093cbb982d03e25600fc66bed33966909ae05d670a7c2a2f142997be5940e879ed0266c5db085eb056a70880af935546eb957c4e55ccf61cceaa5e2d8904e37212b8a95a2a644cde223debbe19a91e21b6a4a112b3a37f11500bd9745a10f7fbf95a89462429fdbbc5aba5c563db313997cab9968a6a11c5b0478fd308c8a19b060d6315416bee6a2ef75eb11e846f7d76505b3f717ba4e387bb869aa906fc79f7ab0a33e4ee51bca95f212ed6909917f404aad5d4f129b11044fb3c2e44d4ba66b00108be1696d2e40b700aba37434b2cef0ac92407fd2f38b2cf0db2c994598890f9a34dcf4322c2e0ec723e718a8479c53ac534cd15e06e49d3f0b53265090f46095795eaf8301f49490cfdad41c600cd52a30da12146bb3468b81c8ecd02a8566574bbea100d2524ffd4ca454fd2e63a326823ff70aef8b56eff3953223abe3848b9a797065413ad4cd0140b3efd5d19b97a3dbe2d1e8a77692f702ff877014ac22de8b5ef50fb25fda6585af1d9742e341cd35133165840cecf8e05d023f637aa137eb2f666ce3f6efd5dfabc73c607604a6b96c6644b156c9778b3467e0200ec0cfb217d7f87d7a0fa46be3c9cfe18eff1c9213da8c7dbe10f50614a2251763ce6d722d76c31bb3187716382edff8db4e39438721551d893f806ee7569ca22e32512a4d3463e23b16cf1a43d94d5f960ea9d40c50e4f2611514f81073895ab1c40d33783a2012495ec6d6462b0be06c7f7e2d30c82efcec43f3f24307b993b50e7425eb5f8a63603f935746176d6c17501e6cd64a4a7859c32c7850efb07a87366e2774a6c4e5917fd597b206dc70facec6a8c33d1f98bc15cc935bc483919b1e67d20142e1af0353d68d7c093575fb1cca913e5047992e357e740d3dfdcdbf30f25320289bd61c07e62e34bbbb9738500e075cfc4112d6cf801416dce2c6f618bafb774e9a237d4864196d4fd23a413a0af7b32ce8b604cfa0a3dba35f7875f131ac6dd02546ca145eb829ae1ed0b0cc650e8e787b4c08e3a5012fe89fb62a3f64f83a2a00cb089b17d766cecba266154a0b7885b02c4be5b73ee1e343fdf2d45d8eefc6e6e7054e8e2e898fc3d3f81f132fde893e6fc60c331421ec961c00e850e78a5f08d60d87f7782705c6aa40575ee3f8dedaa7643b6c2cacde906d064c2d02aef268493f7daa4520987c0416ea834f758b9b62249cc2fbf852fb3d16741d662bc531b4398bf090afbbc158cbcbf889e66d06383a951cb35da69e9bdd36db6b9200a287966ad9d3613b9190f43170f96e0fa3f2c61fad2851e0af4022c2d97e6c9e3725dfd81043f3ecbe8e5ea9f49ddd6fe600b6645b5390ed647e5d1fb569ecc2ef38807a455fc172e642ba432654edd3643233b2f4abba59018971f8b79474fb6c722beec340c86c4905cad0e8c16e7eeb678480265c3f56eeca7325d761e370f33a2be0519af8b1d4d2fd1f6671697c44a4f7fa5492c0bea7279255913096a1a4e1884d126b4301e5715a3a3be808ef7c92158df6eedec3b7e4ec9171ac286cc115be2355bff5ea3e267ba010395383e4d96e5475bac8a9f33dd8242dfb79959de4b0fb731926f44357bc94915e3e5ac21df82d7e33a8595f76674ff1e3d960d06667cdfc52dacb02a5fbeba3a1b5dc890c4ac2e33ac321a628d76268f5a032e535729ba75f3f3e61aa0ee96bacbb8c36f33bac6b7c08777e49acc68c05e0bf1ee9649cf1d76cc6636f9b17b0f3ba245c0d6e0eee528dbf309583bca6467d79b9703a19e1396775f039e98ff"}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x4a0, 0x4a0, 0x3b0, 0x3b0, 0x2e0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff, 0xffffffff, 0x0, 0x1fe000000], [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], 'ip6erspan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x11, 0x2, 0x4}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x4, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x8, @ipv6=@private1, 0x1d, 0x35}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000340)={0x6, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e20, @empty}}}, 0x108) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pressure(r0, &(0x7f0000000000)={'some', 0x20, 0x400, 0x20, 0x7fffffffffffffff}, 0x2f) 4.481532855s ago: executing program 1 (id=2901): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d893010203010902120001000000000904"], 0x0) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000002000)=""/4096, 0x1000}], 0x1}, 0x60}], 0x1, 0x22, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 4.291913492s ago: executing program 4 (id=2902): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0xffff}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.923240037s ago: executing program 4 (id=2903): socket(0x22, 0xa, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x320, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ppoll(&(0x7f0000000140)=[{r4}], 0x1, &(0x7f00000001c0), 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf2503000000080006006401010208000800ac1e0101060001004e200000050002000a00050003003a000000050004000300"/70], 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x4004000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x28, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) munlockall() 2.909505286s ago: executing program 2 (id=2904): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @val=@netfilter={0x2, 0x0, 0xa2, 0x1}}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_usb_connect$uac1(0x0, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902950003010000020904000000010100000a24010000030201021324a3cd4c047b55ce714b0600000600000000000000000a0000000009240300000000030009a4050007000000000924030007030404000824050402"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x6e, 0xfffffffffffffcd7, &(0x7f0000000600)="864c8104000000009c6b24ebc9c693b30000a5c6d453565a758d51860c7cbcc642a2722407df4c3bfbeb08d87a96f5962edb9d8631cbaf591441004b11600ffa72f8532836f4249a5f7466eb7a68e253bef5d4970a22dbc67489d3cbb671cd5e9b2dd04a20ac6f0c2f05841c4292", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r7 = signalfd(r3, &(0x7f0000000200)={[0x1ff]}, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000202907800000014e000000211009078e000000200000002001700ff0000000029e69e6c3f9867d5e1c4fa8479f093e683b90c2abaf384701cdaf73f94db3899ac6f9997186fa888ddf8dd7102f2de48d99b210dfcf081d54eb90a308bdbe12fd13c57c1fcedd8d935e10b5df08f9f6efec516065e0e28c66e553e78e4bafb52a9ec7c3968f14ae30bbc63bb52ccff03d09be8b02680e40b0ebbc72f47548a661fecc9a54992d1eedd72c9a7fc5062f93229c92f7903dc2a5f985f91bedd8645df424ec32eab8545422aba4d9cce"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffc0) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000300)={0x1, 'bond_slave_0\x00', 0x2}, 0x18) r10 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f0000000080)=0x2) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x5, 0x2}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xd}}, @TCA_U32_SEL={0x14, 0x5, {0xa, 0x1, 0x0, 0x7, 0x0, 0x7, 0x7, 0x8}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8849}, 0x20004844) sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xfffffffffffffe54, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="0c010000", @ANYRES16=0x0, @ANYBLOB="010b00000000fed3df2508000000580003800800010000000000000001000004fd05000a0101001400020076657468315f6d616376746170000000000008000000000005000800f3000000000003000400000008000500e00000020500080003000000700002800000090000fcffff14000100fe8000000000000000000000000000bb0000060009000000080008000100000006000f000200000014000100ff01000000000000000000000000000114000100fc00000000000000000000000000000105000d000100000005000d00000000000800060000020000080004000400000020001a80080003000a00000014000200"/262], 0x10c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000000) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000040)={0xc, 0x2, 0x7, {0x8, 0x23, 0x7, 0xfffffffe}}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0xfff2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) 2.135293137s ago: executing program 0 (id=2905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d00000004000000040000000c00000000000000", @ANYRES32=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000007000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.999600375s ago: executing program 0 (id=2906): ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xab46c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r7, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES32=r1, @ANYBLOB="402450b9bf4f9908d90910771f06063e4559d772239f6446da4206b6093102025960b27eba83c0def44e9dabb4f0970fece7a09192b3cbdbcc539d09ba2d93af0d2f53045d79dab36ff72a03b72b16f645c1b8cd1b6755acae073c8fb2c37fd38fae20a08f4d75e092eb64444cfc53825513fb3a69125553624b243aea0cdf867512ea3335c6511b640803ce14b371b30355f06a84e7fe5bb5beeab449b51d31d528de997f3d44bc5d48804f153c02680ef40cf8b2d19da83ba6a079ba3da6a51ab5d3b967666e"], 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r8, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc) 1.855269581s ago: executing program 1 (id=2907): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00"], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 1.166392262s ago: executing program 1 (id=2908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000180)="737e5e8ad67553519ea291651a96f82163a5a2b749301b2e8fc38f40c2e816d17065a5257f1662e971bb16144d60e946a8b6554ebe6fdcb5eb4569e1068c03a39b4a27d0bdb1994f3afc824ea95b52072d21fd441db468e9241ef47d1dba4b", 0x5f}, {&(0x7f0000000700)="07614fa32cb6ca68eaf5ad8459d66ba1ef5b9f3afe6e870fd2328a83c10b058012a33fb762068a0362ab19f30033b23b81db67db81ad0cc1610488ef55fa3dfbe8f66f709e6b4dd5f68a9420c6fc417effaae6d0a3e3a96238548d571fc23e2c131a42ba7adff9132ef9c91b4fcf975c344b58ab439d0d7aa3aaf86dadee6185d413c095481a95aced8bb16a3b5b4219b43239317fb8bce95b7dd93c9a3910eae5e69f1dfd0abc938dcfa54c28dd0a911abbf535f0a39ea95ffba477be7f3eae47adbc3b3c1a3f8de71d5765d5227ec4a827aabb44c6c2e533a9e71a796bcda8b80a7a84a91fe988cdccfaa54c1df466ba6ffb19fdb37894d7aa4b5c8b9b2df9aa2cc2974259d2d4411dee985e88d49d48e99694cc274d808df30cb94ae3b7034618dd955b8413570b8941148618384f15a432d692a92a05e1211dafec7cf269ab4c3496c3643d6076bad392facbfe6a1518fb1efd86e419689965e53d20d977723d52abe6f897c861d0bba8c4a435e7bf33708b90cb62dcc74422ad78186cf852ff49269a15aac359c721ea7802c6086292e895cdd06f9421e3d9f2a159ec60fb45a7d4a413ad2cb128a3a31acf987535cbed54ea5b2f6048a201978d7673d13e67a3328910b3d12f4d6c3763bbc68f38f247996bc9e7489981026dff6a3b5fcd4c1e88b016edff9345ccabf0e335d3b79be9eed25055811859565204c09c53f191e54f6b9c5509faf241437eee41cfb0f45dddc6d11d611404060469cfed7ac3c7fff87d3ee36494db54f6fff29a0c510587ba4a47ca7c38121644b821636020d255cb26cca6ac548b7c70b71a9ef0adc8009c7fe78331dd94751e5ed5ca05cc64bc28d4c7efce0e151ebfbca9c2c8d2127750196d076afaec537db3ca24488bffead3911bcec488e13722e02b53eed3b9dbcad4a7d60bc8e1b777e5b6feaefed20286001aa5651fb6039fefe2d8eb0be2154bb84d75e5813e7fc36658fcac9077866834e46f5e5911bd516625d3a81c9713e6cf968a567c28ba1a26c4419ba3f9878fb30076d5d34aec3ec84284f092067e9d416dff487d6c8167e501cd1ab956b9e7f98fe3e350bea67f2f0e51b70fe6c6d6f30945b4049f6a00c2bd9d897d6c2f99f7055f047e6c69db27e89495a16e8244be4023160d7cf6cd61cd9b5217cc8931d933cf974933b76362ad881dd01beb537f9e617e579fe8080ce513481d6f6043f652bbc54fcc2cd4a6337312ef62f8895022477cc21bce68a373ac09e1b0a7d2d42dc413f33b01d996ec1939ecbdd57d7dbb21b0e6a590249ed294ff3a07509e2f11074cc69b74b243e42013c7faf1000ce5340dff859c41c0c95a4a285d8dfc435015d7b53de644679c40bcdf0102173396c137a27cbe3569d31d25a766beadfb7a5ae41e9e13321dedcda42d8b8e545f229598b8ad3d8e97b5a3803539db22b0ee99b07020109b367d7602e6a7aaa34328f02b85525533f6a3e0901fb2194fe6a6da750171d7cdbb894cd57bc4069a63df4df88681d96946634761e2c0f6335aab40b65bd927e6b096a052ee00bb5c822eb5e7f1a085bc23fe0079afb56a56f0d4a75b7199e366f64db4c43c7a4c261513b3cfc955d096a394ad37daee5a76c73386dc571611ce5b3d80fe0e696af2199ea9fd250a80bafbf94d390c4289fb4a2368763b6315483f3dc341c73ba4d086b343e5e13bbad2870de9ec778322c5c8fbb442221d4458ea83922d5ca0aea7694aba10c409ba9a0e8ce4cbbbcad59433015b4918da9f9e61bdc1f1df82319254d28623c6d516f8e91b9bcb7730128f6f0488b44fbc4d2c7070a0ae624b84947026d31aeff0e377f43329077a6d0fdf88b2874a3d43a3bc59ca4bfc283299e9e671fc579ebc8cfd92fc24f0ce0354b99bdab4214373c0a2abca53d968615d38a05af3bd23dd410ce77eb15aa8a7e8b4eb661205a5971fb5cb75b60f60758b5d603689acfbdb99a52393d732316c14442c7418323c3330f87e372a4fa55d3318b6ea4993584ee3739bf69098cb989b4426e936f330dd6de26784171d55f8950999aba2c015236b212d5385e0b1287e9a22417893b10e0f6106fb20d94f700c72e81078765df186e7cc978c73dd047283d42e5dae4cc5e3518728c6d1899147525054b142efa9ff3e71f5bcfcf8302161a45b1f4cbe3a8759dd092e62c668301f75a3118739ebfe0ef5cbbac90cf047c7e586fd8958d6354b1334ef09097d84437649ea2ac6fc790d8f76f0f363e6df956341561bf5b1efa9ea5fa1517c5d57b3dc30726ccf800158574e4a891344830d263a0b64de3379788a5e809702534b2bdddb929758fbcb1658ab06d5c27ac571043bab8a1dd2a9542e706953f737067723796c9fb4159c765bc6980c0f9b908ec4f6a1a56d8034940a3c487e9986f41d73dbd02793b69990e167fec6d2c04f85dd41071359f889626fe217c25afe4e94aed61141e882a5b3f5b332fbc8aae7d3a66fecd08d6fc0e1244c969bdc48f78c227e2b83b8cc7fdf4ad461d213138d9276b8caeca505f13e7b343784379d00a714e8400087790d0f67c7f6a6e6e92ef81b2ae634a57e44e89187f81769ba97b112a097c192127144d7f8ffabd3de11b744d2930204669adacb5167d07595793467ea641cf00baad8c4862b18818eedc7b865e5c1281cac72c8f8fdacd597d8f433fa55fb55c2ab6dabb366fb051232d3dd6425cfdbfbb724e0a4a82e085b63ace300924a46a9d03c51536038564bf1a152d79baf1274b84840afa0016d6cd430e8b8b4c482ae8c1c12bb97f026813ae08385e176beb36b640698765f3c5d1eafbb66ed03eef29eadf64714482e6e437a08c6084d74197a24ea1f03d758fbc29dbeef02451e71e25cd8b5e46133778d1d7558715c6026afe76362f1b6cba91c273e1879e01011261e910014e8acb63823e98c7bf20f97da130b88a04617f25b160893a043262b6610801efbd61bdc3e6bdf6f4fe3877664f86c9dc9893d1b30610cf61482ab03a40cd0874d600097f61e9086362357786587e2f2e9f280b2ad636acaec1fad262ba23d83c10a9c1d5fbe7a3184add18a0dbea19bbd6f798955a91dc88eeccb5409479ad0970b15e7f1c7ee391b87fb3553bb9cf2a4dc96aeffcdd2c5446a3014cc0f978b39b345f17afa6bf31c92f8fb26167b9353994471ac17bc151d397289c9c40f0c6d38d901cf22ea67f10ad59847cd1d5f9a0b7f34e666f47565bd63118fd6ea832c1273e8898793609570c55305ec9820337ee8289400f8467f0412f9b6914e6129c4771a2ef968462bd3d999739600a9c26fe7fb4ae6f9face6374b44acfc73e8368f0fec60185f5642eb3e60d8b5d16b9d71f126860ea0bf308b00755aecdcd70dc9ccaada61ad7e3ba879d422041070c84fe013e0b06d087be9d6587cd4ed899cfdbaeaac88d50ff919df10fbd2a359a2ac534ce715e11f317c042cee5b6a147904d8a41997bb1cb9252662ed49902a00da18f1b58b152560c92a50e1741c70b266a8475b732b7866c87dc86940795380f4b1de5aef5c0ee7154a369d2cae18f58ab77458a7ce2e4f8352aadaa68b83b75943daeb3237cb238b4a6d499207d98f05670d6383e902578311b59d0858a849a7f4719713f4725171f517018a82f1159ff22081885dabd3db77e5ebd29c5c0652195caea60554919c677466add15f1f1dd2a7552ad0248437cefd835efca16dc63b39b84f1883a829f9542e5404278ed4fac30deb95b68532e60eeb811bf843b85b8f1ebbe94b7f3cbaebbd42156f0b93b3624279882c3965677789355ee1fb0c137c5b35c2e9425bd040290db250cb60603a0aee1aef57a8d243b3a82802a84ab7eec4e8f8f347696f772fe5ce662a1a498adabdfe876ae84f82cf00a2bba8bd818e7df821fd63493b37fc317c99fd42caadc60e0796dc0fc62620b6d875108e2002063520acfb04c3e72487bffc4515d85059ced3f04ad6e0761708cc4592e9e563ea8fd82fa558cfe2bf15bbf3ec98bfa4284655cda1d134668ebabfbc956cbab3ac52da2132fc781426ec996fe9a67f1b7b45252601eb10d4564ca78207125c3916ac813bfab540cc5c2b81bdd8ac4ed3a2fe587f9ffd6a581db0674c06015e3ac292538607a4ce4f13c1a3a83fb55b4b25931e967908d3f45bc7de4c5d7b4851d1e2266e6384aa04740d1d9560fae88394ba9c05c470cca8f60a695fc2bc96f648abad4b6a582e2d30908f35dc74e592407257249bb14d917b406686b60a2e2a3b47c66a714130cc57bc9a3fa953a83e0743081b07425a270a9f9b2f36409fb1b3b71d3902e03ca4719acb4189f93249a9b141d9d22167b120b4a1b0c65e079deb6ef434b97537c1fa33897ebc3b3140d716084ef82321293338693ce89e771a9374554ce2fc17c1833cd3a5474cd1135b6a7129b485a742baa26050c92d715a4da31048a15c585a765e1626877e2fcfccffaed8bf1c7aedd4b4d3cb55dd1de5f79770a9f185146bd2a0a18cdbf821efc3203e27618f8aba21a02db9fa5911f9f13af7a032d08d3a923d16fd5a3012ad8ca206aa9632723d5370ae7b5bac24a0c2bd3e443fcdc4fb0cfa21e824bd7f94e1de52227e406709be4c88d2ee27f3f44e39cdc66156ad0ad390af621a697c7093b3640fdfd8b8c9f1a69e854bcccff373da3c4a76e7828324bce0668fa67a9aafde9664e1d523f05ca99d739c31d7f722a2b4894341989796ef2adbdb1fd8e25bd9f66f2d08f806c2acef223c3db9af4909036b88235b1d6abfc2568fb33c3d189b1b315ca91238886ba1f423775ed7488c076c3e786ccbda6aaea566a18dcb1911935b2f91c26f6332a3a9107cd20a4f952f54317f0f29f390b8c0641571463c4d65128b25eba326925d36e996bbce42ad516123e993b196bb00076069748d4f1651099b43b4d37739bf2e0fa679294a0dde016fe6fede58d52e8717aa7fd79f2b2cce419a15e2ab643637f982f84227356459d74c9f7adb61e4c888497329976cd036df354af8c2b1dcfcdd52cb4e52ba21c78479dd3cc70f4c0f70344064ae0fd000cb4380788d9e0cb313269cb3365d29f0cd00025480dbdf69f871d4287979d7504a80d313d80d65d0e6093a043a224467a05dc54fb36cdc9875d46bc0f241141aade25a55bd05def8971f74fff425c41e11895d83c353bd2bed55b0f8989a55e99da6298d708c2b74f37e3f693a0d565cc05753cca2ecb15fe441bdb91057e4177752a832526cdda15edb2004ca819a480e92f76edffa47a483baaa0738c3d705e6cb3c5e63f71bd934d1b3b2305f6ef255e3ae3b319d60369c2f763628f8e68d2ddad4c3833ca084543580677f0fc51e5355f5f8835cf112302b72cb62656cd5d961f6b11af92bef11aa3364548f1d03175c7fed35e9af272cf00047e06964b7f9f6a730ad658a97bba4d51311ec440fce903e8d72bf86317092cb7e91987fa8312419c09119aebd91ec662252374038b6f78bb6a4776f804a5279ddc79e2214305917b6f651e2286545c7df9b2e9b8af220657f12ad6c6e9f11ba14de8a9ab5f33579aa3d60c7496db55ce39b4d23a92b263dc07c9b580684dc609b43306c8355b85e2669820eed8d9df0f6b223b36c4ad27012e214b35d549b1838afd5c2f6e110cb7fda81ee7b2bd291f2933030057e538706c902ac827ac2acdcd3d3ba8e942853016dd53670b36e39c5db484d280c2cf4d8644bfd0499c58bccb4d42240343f091c8ae093eab8ebf9b568b3c690bf7d239d7c2b008c488", 0x1000}, {&(0x7f0000001700)="aa588a856dc3ff726e517becd96294a55ce6ac4aef8d50015dbeca2322b8c643e3eba85a9e482d9f", 0x28}], 0x3, 0x0, 0x0, 0xc0}, 0x4040010) write$uinput_user_dev(r1, 0x0, 0x178) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ac) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530484c) write$binfmt_elf64(r6, &(0x7f0000000680)=ANY=[@ANYBLOB="7f454c46040d0702040000000000000003003e00f6ffffffda0300000000000040000000000000008b000000000000002d0d0000050038000100780007000400030000008008000004000000000000002800000000000000000100000000000002"], 0x78) close(r6) clock_gettime(0x8, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 0s ago: executing program 1 (id=2909): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) kernel console output (not intermixed with test programs): for pid=14056 comm="syz.1.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 790.254408][ T6814] usb 1-1: device descriptor read/8, error -71 [ 790.282021][T11885] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 790.323634][ T30] audit: type=1400 audit(1783550947.997:912): avc: denied { write } for pid=14056 comm="syz.1.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 790.443077][T11885] usb 3-1: Using ep0 maxpacket: 32 [ 790.460113][T11885] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 790.480368][T11885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.511907][ T6814] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 790.524579][T11885] usb 3-1: Product: syz [ 790.534605][T11885] usb 3-1: Manufacturer: syz [ 790.547799][T11885] usb 3-1: SerialNumber: syz [ 790.566742][ T6814] usb 1-1: device descriptor read/8, error -71 [ 790.579584][T11885] usb 3-1: config 0 descriptor?? [ 790.755290][ T6814] usb usb1-port1: unable to enumerate USB device [ 790.912225][T11885] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 790.924124][T11885] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 791.023708][T11885] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 791.064275][T11885] usb 3-1: USB disconnect, device number 58 [ 792.502745][T14103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.542665][T14103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.654189][T14107] UHID_CREATE from different security context by process 1454 (syz.0.2273), this is not allowed. [ 793.095351][ T6814] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 794.348634][ T6814] usb 1-1: device descriptor read/64, error -71 [ 794.792561][ T6814] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 795.032070][ T6814] usb 1-1: device descriptor read/64, error -71 [ 795.142321][ T6814] usb usb1-port1: attempt power cycle [ 795.522103][ T6814] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 795.554329][ T6814] usb 1-1: device descriptor read/8, error -71 [ 796.149967][ T6814] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 796.175265][ T6814] usb 1-1: device descriptor read/8, error -71 [ 796.307085][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2284'. [ 796.316542][ T6814] usb usb1-port1: unable to enumerate USB device [ 796.452762][ T30] audit: type=1400 audit(1783550954.227:913): avc: denied { ioctl } for pid=14143 comm="syz.3.2285" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 796.452801][T14145] binder: 14143:14145 ioctl c0306201 0 returned -14 [ 796.817737][ T30] audit: type=1400 audit(1783550954.587:914): avc: denied { connect } for pid=14147 comm="syz.0.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 797.289178][T14197] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5617] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[14197] [ 798.938812][T14213] dummy0: entered allmulticast mode [ 798.961790][T14212] dummy0: entered promiscuous mode [ 799.071937][ T5713] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 799.192173][T14208] dummy0: left promiscuous mode [ 799.240060][T14208] dummy0: left allmulticast mode [ 799.378596][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 799.398765][ T5713] usb 1-1: unable to get BOS descriptor or descriptor too short [ 799.430958][ T5713] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 799.475088][ T5713] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 799.509554][ T5713] usb 1-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 799.537497][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.550468][ T5713] usb 1-1: Product: syz [ 799.563656][ T5713] usb 1-1: Manufacturer: syz [ 799.577786][ T5713] usb 1-1: SerialNumber: syz [ 800.057398][ T5713] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 800.105607][ T5713] usb 1-1: USB disconnect, device number 74 [ 800.162916][ T9788] udevd[9788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 803.066702][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.075990][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.774763][T14260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=160 sclass=netlink_route_socket pid=14260 comm=syz.4.2310 [ 804.236549][ T30] audit: type=1400 audit(1783550961.987:915): avc: denied { create } for pid=14263 comm="syz.1.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 807.934218][T14326] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2327'. [ 807.950793][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2327'. [ 808.148696][T14332] raw-gadget.1 gadget.4: failed to queue resume event [ 808.271902][T11891] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 808.280523][T11885] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 808.353185][T14335] random: crng reseeded on system resumption [ 808.522017][T11891] usb 2-1: Using ep0 maxpacket: 32 [ 808.531074][T14330] raw-gadget.1 gadget.4: failed to queue suspend event [ 808.545627][T11885] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 808.557936][T11891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.570594][T11885] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 808.584372][T11891] usb 2-1: config 0 has no interfaces? [ 808.591126][T11891] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 808.601833][T11885] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 808.611986][T11891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.627953][T11891] usb 2-1: config 0 descriptor?? [ 808.924914][T11885] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 808.935310][T11885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.944016][T11885] usb 4-1: Product: syz [ 808.948380][T11885] usb 4-1: Manufacturer: syz [ 808.953391][T11885] usb 4-1: SerialNumber: syz [ 808.960568][T11885] usb 4-1: config 0 descriptor?? [ 808.966766][T14327] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 808.974832][T14327] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 808.984174][T11885] usb 4-1: ucan: probing device on interface #0 [ 808.992370][T14333] overlayfs: statfs failed on './file0' [ 808.999394][ T6814] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 809.175086][ T6814] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 809.495870][ T6814] usb 3-1: config 0 has no interface number 0 [ 809.503611][ T6814] usb 3-1: config 0 interface 41 has no altsetting 0 [ 809.515195][ T6814] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 809.527615][ T6814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.537781][ T6814] usb 3-1: Product: syz [ 809.542150][ T6814] usb 3-1: Manufacturer: syz [ 809.550185][ T6814] usb 3-1: SerialNumber: syz [ 809.558280][ T6814] usb 3-1: config 0 descriptor?? [ 809.649173][T11891] usb 2-1: USB disconnect, device number 61 [ 809.728973][T11885] usb 4-1: ucan: could not read protocol version, ret=-71 [ 809.818372][T14342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.849526][T14372] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=14372 comm=syz.1.2339 [ 809.865380][T14342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.892215][T11885] usb 4-1: ucan: probe failed; try to update the device firmware [ 809.893757][T14372] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.951478][ T6814] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 809.960279][ T30] audit: type=1400 audit(1783550967.717:916): avc: denied { mounton } for pid=14367 comm="syz.0.2340" path="/459/file0" dev="tmpfs" ino=2445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 810.084054][T11885] usb 4-1: USB disconnect, device number 66 [ 810.088729][ T6814] usb 3-1: USB disconnect, device number 59 [ 813.788586][T14438] Unsupported ieee802154 address type: 0 [ 813.788678][ T30] audit: type=1400 audit(1783550971.557:917): avc: denied { bind } for pid=14434 comm="syz.4.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 813.840983][T14438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.897871][T14438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.967385][ T30] audit: type=1400 audit(1783550971.737:918): avc: denied { map } for pid=14434 comm="syz.4.2357" path="socket:[46378]" dev="sockfs" ino=46378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 813.991073][ T30] audit: type=1400 audit(1783550971.737:919): avc: denied { read accept } for pid=14434 comm="syz.4.2357" path="socket:[46378]" dev="sockfs" ino=46378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 814.186798][T14448] fuse: Unknown parameter 'rootmode' [ 816.573136][T11883] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 817.766191][ T30] audit: type=1400 audit(1783550975.537:920): avc: denied { write } for pid=14467 comm="syz.2.2356" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 817.783789][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 817.952061][T11883] usb 4-1: Using ep0 maxpacket: 8 [ 817.959709][T11883] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 817.969254][T11883] usb 4-1: config 179 has no interface number 0 [ 817.976227][T11883] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 817.988758][T11883] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 818.001598][T11883] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 818.025971][T11883] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 818.047118][T11883] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 818.062883][T11883] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 818.156534][T11883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.174778][T14460] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 818.407532][T11883] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input38 [ 818.787046][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2370'. [ 818.829176][ T5713] usb 4-1: USB disconnect, device number 67 [ 818.829173][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 818.844056][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 818.973622][ T30] audit: type=1400 audit(1783550976.747:921): avc: denied { connect } for pid=14482 comm="syz.3.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 820.281741][T14508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.320221][T14508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.367156][T14512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 820.516812][ T6814] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 820.622288][T14516] IPv6: addrconf: prefix option has invalid lifetime [ 820.734743][T14519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.792378][T14519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.321082][T14505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2368'. [ 822.381243][T14505] bridge1: entered promiscuous mode [ 822.386945][T14505] bridge1: entered allmulticast mode [ 822.921899][ T6814] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 822.949457][ T30] audit: type=1400 audit(1783550980.707:922): avc: denied { getopt } for pid=14533 comm="syz.0.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 823.072018][ T6814] usb 4-1: Using ep0 maxpacket: 16 [ 823.088041][ T6814] usb 4-1: config 254 has an invalid interface number: 52 but max is 0 [ 823.096691][ T6814] usb 4-1: config 254 has no interface number 0 [ 823.104502][ T6814] usb 4-1: config 254 interface 52 has no altsetting 0 [ 823.134555][ T6814] usb 4-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 823.150933][ T6814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.171992][ T5713] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 823.182255][ T6814] usb 4-1: Product: syz [ 823.190944][ T6814] usb 4-1: Manufacturer: syz [ 823.204057][ T6814] usb 4-1: SerialNumber: syz [ 823.323300][ T5713] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 823.332372][ T5713] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 823.354385][ T5713] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 823.515155][ T5713] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 823.532105][ T5713] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 823.553167][ T5713] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 823.562312][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 823.570446][ T5713] usb 1-1: Product: syz [ 823.577203][ T5713] usb 1-1: Manufacturer: syz [ 823.591928][T11883] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 823.595931][ T5713] cdc_wdm 1-1:1.0: skipping garbage [ 823.640679][ T5713] cdc_wdm 1-1:1.0: skipping garbage [ 823.660482][ T5713] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 823.680603][ T5713] cdc_wdm 1-1:1.0: Unknown control protocol [ 824.040140][T11883] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 824.053092][T11883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.073180][T11883] usb 2-1: Product: syz [ 824.101750][T11883] usb 2-1: Manufacturer: syz [ 824.114089][T11883] usb 2-1: SerialNumber: syz [ 824.343137][T11883] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 824.363739][T11883] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 824.381912][T11883] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 824.406177][T11883] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 824.423677][T11883] usb 2-1: USB disconnect, device number 63 [ 824.651884][ T5713] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 825.001886][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 825.243384][ T5713] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 825.276873][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.307753][ T5713] usb 3-1: Product: syz [ 825.327249][ T5713] usb 3-1: Manufacturer: syz [ 825.353801][ T5713] usb 3-1: SerialNumber: syz [ 825.407762][ T5713] usb 3-1: config 0 descriptor?? [ 825.444259][ T5713] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 825.647319][ T6814] usb-storage 4-1:254.52: USB Mass Storage device detected [ 825.700005][ T6814] usb-storage 4-1:254.52: This device (04e6,000a,0200 S 00 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 825.700005][ T6814] Please send a copy of this message to and [ 825.734376][ T5713] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 825.850457][ T5713] usb 3-1: USB disconnect, device number 60 [ 825.877293][ T5713] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 825.904160][ T5713] visor 3-1:0.0: device disconnected [ 825.974338][ T6814] usb 4-1: USB disconnect, device number 68 [ 826.002704][T11880] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 826.152103][T11880] usb 2-1: device descriptor read/64, error -71 [ 826.346308][ T5713] usb 1-1: USB disconnect, device number 75 [ 826.403854][T11880] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 826.572335][T11880] usb 2-1: device descriptor read/64, error -71 [ 826.694482][T11880] usb usb2-port1: attempt power cycle [ 827.052441][T11880] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 827.103013][T11880] usb 2-1: device descriptor read/8, error -71 [ 827.363698][T11880] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 827.408121][T11880] usb 2-1: device descriptor read/8, error -71 [ 827.485267][T14572] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2395'. [ 827.532144][T11880] usb usb2-port1: unable to enumerate USB device [ 827.782903][T14577] cgroup: Name too long [ 828.579223][T14590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.620144][T14590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.648540][ T30] audit: type=1400 audit(1783550986.417:923): avc: denied { append } for pid=14591 comm="syz.0.2401" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 829.232080][T11885] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 829.374729][T11885] usb 3-1: device descriptor read/64, error -71 [ 829.638304][T11885] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 829.992094][T11885] usb 3-1: device descriptor read/64, error -71 [ 830.149802][T11885] usb usb3-port1: attempt power cycle [ 830.592291][T11885] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 830.621167][T14620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.630966][T11885] usb 3-1: device descriptor read/8, error -71 [ 830.660491][T14620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.746184][T14627] wlan0 speed is unknown, defaulting to 1000 [ 830.753092][T14627] wlan0 speed is unknown, defaulting to 1000 [ 830.760573][T14627] wlan0 speed is unknown, defaulting to 1000 [ 830.768394][T14627] smbdirect: ib_dev[syz]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 830.784194][T14627] smbdirect: ib_dev[syz]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 830.802380][T14627] smbdirect: ib_dev[syz]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 830.831153][T14627] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 831.060073][T14627] wlan0 speed is unknown, defaulting to 1000 [ 831.067772][T14627] wlan0 speed is unknown, defaulting to 1000 [ 831.075275][T14627] wlan0 speed is unknown, defaulting to 1000 [ 831.082673][T14627] wlan0 speed is unknown, defaulting to 1000 [ 831.089900][T14627] wlan0 speed is unknown, defaulting to 1000 [ 831.172209][T11885] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 831.203731][T11885] usb 3-1: device descriptor read/8, error -71 [ 831.335898][T14620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.352533][T11885] usb usb3-port1: unable to enumerate USB device [ 831.416864][T14620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.755411][T11885] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 831.922593][ T30] audit: type=1400 audit(1783550989.687:924): avc: denied { associate } for pid=14632 comm="syz.3.2413" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 832.270400][T11885] usb 1-1: Using ep0 maxpacket: 16 [ 832.437003][ T30] audit: type=1400 audit(1783550990.207:925): avc: denied { mount } for pid=14642 comm="syz.4.2415" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 832.452966][T14643] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 832.459326][ T30] audit: type=1400 audit(1783550990.227:926): avc: denied { mounton } for pid=14642 comm="syz.4.2415" path="/469/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 832.489220][T14643] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 832.512406][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.532287][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.544162][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.562325][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.582342][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.594237][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.612871][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.632833][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.640879][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.657254][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.673822][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.692557][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.704389][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.713696][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.720630][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.727532][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.734388][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.741236][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.748154][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.754992][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.761863][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.768734][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.775605][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.782493][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.789349][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.796221][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.803113][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.809941][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.830239][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.837143][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.844035][T14643] overlayfs: maximum fs stacking depth exceeded [ 832.933830][T11885] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 832.942032][T11885] usb 1-1: config 1 has no interface number 0 [ 832.948117][T11885] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 832.958025][T11885] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 832.968048][ T5734] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 832.978249][T11885] usb 1-1: config 1 interface 105 has no altsetting 0 [ 833.000257][ T30] audit: type=1400 audit(1783550990.767:927): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 833.061576][T14646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.070272][T14646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.079743][T14646] x_tables: duplicate underflow at hook 3 [ 833.091502][T14648] netlink: 'syz.3.2417': attribute type 1 has an invalid length. [ 833.113130][T14648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2417'. [ 833.126166][T14648] bond2: entered promiscuous mode [ 833.131256][T14648] bond2: entered allmulticast mode [ 833.137233][T14648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 833.460847][T11885] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 833.470620][T11885] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 833.479548][ T5734] usb 3-1: Using ep0 maxpacket: 16 [ 833.486299][T11885] usb 1-1: Product: syz [ 833.490799][T11885] usb 1-1: Manufacturer: syz [ 833.496193][T11885] usb 1-1: SerialNumber: syz [ 833.501420][ T5734] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.518568][ T5734] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 833.528415][T14631] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 833.536198][T14631] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 833.543738][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.552414][ T5734] usb 3-1: Product: syz [ 833.556845][ T5734] usb 3-1: Manufacturer: syz [ 833.563522][ T5734] usb 3-1: SerialNumber: syz [ 833.570674][ T5734] usb 3-1: config 0 descriptor?? [ 833.578492][ T5734] asix 3-1:0.0: probe with driver asix failed with error -22 [ 833.690277][ T5734] libceph: connect (1)[c::]:6789 error -101 [ 833.699356][ T5734] libceph: mon0 (1)[c::]:6789 connect error [ 833.708454][ T5734] libceph: connect (1)[c::]:6789 error -101 [ 833.714549][ T5734] libceph: mon0 (1)[c::]:6789 connect error [ 833.838125][T11880] usb 3-1: USB disconnect, device number 65 [ 833.871277][T14658] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2419'. [ 834.034618][T14631] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 834.035231][ T5734] libceph: connect (1)[c::]:6789 error -101 [ 834.204543][ T5734] libceph: mon0 (1)[c::]:6789 connect error [ 834.229588][T14631] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 834.245855][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2422'. [ 834.504494][T14652] ceph: No mds server is up or the cluster is laggy [ 834.542002][ T5734] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 834.685635][T14672] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2424'. [ 834.722634][ T5734] usb 4-1: Using ep0 maxpacket: 32 [ 834.733743][ T5734] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 834.743561][ T5734] usb 4-1: config 0 has no interface number 0 [ 834.750354][ T5734] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 834.752045][T14675] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2425'. [ 834.783384][ T5734] usb 4-1: config 0 interface 85 has no altsetting 0 [ 834.796889][T11885] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 834.802136][T14675] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2425'. [ 834.819204][T14676] netlink: 'syz.2.2424': attribute type 27 has an invalid length. [ 834.828844][ T5734] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 834.840499][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.851548][T14676] netlink: 'syz.2.2424': attribute type 3 has an invalid length. [ 834.861013][ T5734] usb 4-1: Product: syz [ 834.879632][ T5734] usb 4-1: Manufacturer: syz [ 834.887791][ T5734] usb 4-1: SerialNumber: syz [ 834.905999][ T5734] usb 4-1: config 0 descriptor?? [ 834.941759][T11885] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 2e:37:23:a4:d1:d9 [ 834.982066][T11885] usb 1-1: USB disconnect, device number 76 [ 834.998775][T11885] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 835.213359][T11885] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 835.223120][T11885] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 835.232907][T11885] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 835.262554][T11880] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 835.282425][ T30] audit: type=1400 audit(1783550993.037:928): avc: denied { write } for pid=14699 comm="syz.1.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 835.287179][T14700] input: syz1 as /devices/virtual/input/input40 [ 835.317122][ T30] audit: type=1400 audit(1783550993.087:929): avc: denied { map } for pid=14701 comm="syz.4.2435" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 835.377230][ T30] audit: type=1400 audit(1783550993.137:930): avc: denied { nlmsg_write } for pid=14699 comm="syz.1.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 835.404567][T14702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.427802][T14702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.453502][T11880] usb 3-1: No LPM exit latency info found, disabling LPM. [ 835.461534][T14702] openvswitch: netlink: Message has 4 unknown bytes. [ 835.468199][T14702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 835.479920][T11880] usb 3-1: config 16 has an invalid interface number: 3 but max is 2 [ 835.492672][T11880] usb 3-1: config 16 has an invalid interface number: 107 but max is 2 [ 835.512397][T11880] usb 3-1: config 16 has 2 interfaces, different from the descriptor's value: 3 [ 835.530692][T11880] usb 3-1: config 16 has no interface number 0 [ 835.569226][T11880] usb 3-1: config 16 has no interface number 1 [ 835.595161][T11880] usb 3-1: config 16 interface 3 has no altsetting 0 [ 835.617445][ T5734] appletouch 4-1:0.85: Geyser mode initialized. [ 835.634370][T11880] usb 3-1: config 16 interface 107 has no altsetting 0 [ 835.646481][ T5734] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input39 [ 835.665682][T11880] usb 3-1: string descriptor 0 read error: -22 [ 835.691558][T11880] usb 3-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=72.1e [ 835.736180][T11880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.802647][T11880] usb 3-1: unknown number of interfaces: 2 [ 835.859167][ T5734] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 835.875828][T14718] netlink: 'syz.1.2437': attribute type 27 has an invalid length. [ 835.891689][ T5734] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 835.900912][ T5734] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 835.909158][ T5734] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 835.917184][ T5734] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 835.925110][ T5734] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 835.932946][ T5734] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 835.940627][ T5734] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 835.948912][ T5734] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 835.957236][ T5734] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 835.969284][ T5734] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.04 Device [syz1] on syz1 [ 836.122423][T14721] fido_id[14721]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 836.567512][T14728] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 836.577056][T14728] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 836.586145][T14728] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 837.318939][T11880] usb 4-1: USB disconnect, device number 69 [ 837.350441][T11880] appletouch 4-1:0.85: input: appletouch disconnected [ 837.603295][ T30] audit: type=1400 audit(1783550995.367:931): avc: denied { audit_write } for pid=14746 comm="syz.1.2448" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 837.715726][ T5734] usb 3-1: USB disconnect, device number 66 [ 837.742947][T14749] netlink: 'syz.4.2449': attribute type 2 has an invalid length. [ 837.869423][T14754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.997538][T14754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.549830][T14754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.560225][T14754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.052109][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 841.121126][T14782] fuse: Bad value for 'fd' [ 841.140550][T14782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.183062][T14782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.602160][T11880] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 841.823382][T11880] usb 4-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 841.838605][ T5616] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 841.848206][T14787] input: syz1 as /devices/virtual/input/input41 [ 841.890821][T11880] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 841.924321][T11880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 841.941928][T11880] usb 4-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 841.951114][T11880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.967853][T11880] usb 4-1: config 0 descriptor?? [ 842.738049][T11880] hid_parser_main: 21 callbacks suppressed [ 842.738246][T11880] lg-g15 0003:046D:C22D.0018: unknown main item tag 0x0 [ 843.142330][T11880] lg-g15 0003:046D:C22D.0018: unknown main item tag 0x0 [ 843.149366][T11880] lg-g15 0003:046D:C22D.0018: unknown main item tag 0x0 [ 843.170363][T14801] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 843.192315][T11880] lg-g15 0003:046D:C22D.0018: unknown main item tag 0x0 [ 843.192343][T11880] lg-g15 0003:046D:C22D.0018: unknown main item tag 0x0 [ 843.192364][T11880] lg-g15 0003:046D:C22D.0018: unknown main item tag 0x0 [ 843.192385][T11880] lg-g15 0003:046D:C22D.0018: unknown main item tag 0x0 [ 843.192404][T11880] lg-g15 0003:046D:C22D.0018: unknown main item tag 0x0 [ 843.192425][T11880] lg-g15 0003:046D:C22D.0018: unknown main item tag 0x0 [ 843.192445][T11880] lg-g15 0003:046D:C22D.0018: unknown main item tag 0x0 [ 843.202246][T11880] lg-g15 0003:046D:C22D.0018: hidraw0: USB HID v0.0c Device [HID 046d:c22d] on usb-dummy_hcd.3-1/input0 [ 843.957134][T14819] raw-gadget.1 gadget.4: failed to queue resume event [ 844.196766][ T5616] Bluetooth: hci4: Malformed LE Event: 0x0d [ 844.198531][T14820] random: crng reseeded on system resumption [ 844.523229][T14818] raw-gadget.1 gadget.4: failed to queue suspend event [ 844.646249][ T30] audit: type=1326 audit(1783551002.417:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.4.2472" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31079de59 code=0x7ffc0000 [ 844.679339][ T30] audit: type=1326 audit(1783551002.447:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.4.2472" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31079de59 code=0x7ffc0000 [ 844.721983][ T30] audit: type=1326 audit(1783551002.447:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.4.2472" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31079de59 code=0x7ffc0000 [ 844.748880][ T30] audit: type=1326 audit(1783551002.477:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.4.2472" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31079de59 code=0x7ffc0000 [ 844.795736][ T30] audit: type=1326 audit(1783551002.477:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.4.2472" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd31079de59 code=0x7ffc0000 [ 844.845862][ T30] audit: type=1326 audit(1783551002.477:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.4.2472" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31079de59 code=0x7ffc0000 [ 844.875044][ T30] audit: type=1326 audit(1783551002.477:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.4.2472" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31079de59 code=0x7ffc0000 [ 844.881896][ T5713] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 844.904056][ T30] audit: type=1326 audit(1783551002.477:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.4.2472" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31079de59 code=0x7ffc0000 [ 844.939878][ T30] audit: type=1326 audit(1783551002.477:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.4.2472" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31079de59 code=0x7ffc0000 [ 845.003531][ T30] audit: type=1326 audit(1783551002.477:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14829 comm="syz.4.2472" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd31079de59 code=0x7ffc0000 [ 845.071238][T14830] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 845.109505][T14830] SET target dimension over the limit! [ 845.145924][T11885] usb 4-1: USB disconnect, device number 70 [ 845.171864][ T5713] usb 1-1: Using ep0 maxpacket: 8 [ 845.203399][ T5713] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 1023 [ 845.243611][ T5713] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 16 [ 845.281836][ T5713] usb 1-1: config 1 interface 0 has no altsetting 0 [ 845.315357][ T5713] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 845.366953][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.394180][ T5713] usb 1-1: Product: Ð… [ 845.408795][ T5713] usb 1-1: Manufacturer: ⊠[ 845.429025][ T5713] usb 1-1: SerialNumber: 䫄堧䬇䒷솠ꔺｻﺹӳâ¯ï‡¶ç•¥à°¹é¨—륦鼫é©ã´ç™†â©“▮稻೉ꖥ쳷䂴罋ㅈ譛謪ꨫ☑㫱í­ã“†ç°­ê™“黦춂ç¿ï“½ë “ᒘ裄諣뽗ì²ê©çƒ‹å°áµ¿ê—¼å¡áˆ†ï ±ìˆ‡â¶‘傉â©è©‚å¶ä „ìŸæ™ç›¾â·¬ä‰¤è©Žê¸‡ä‹¸á€®âŸî¯«áœ©æ´—èœæ‹ä ç½›á¯½ç·†æŽ¡ë¹£á¨§èº‡æ¶»à²·â†¥ëš¡éµ¦ëˆ«ì˜¿ç¯µç¶¸ë£šä’‹ì‚”ሾ⹸Ří䲥賓鑗ަç–î•‰á™ƒá„„á¹©á©°êƒ½î‡ [ 845.857987][T14828] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 845.870426][T14828] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 846.352127][T14828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.424502][T14828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.488014][T14828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.706123][T14828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.156853][ T5713] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 847.191452][ T5713] usb 1-1: USB disconnect, device number 77 [ 847.295191][T14861] netlink: 'syz.3.2481': attribute type 2 has an invalid length. [ 847.308642][T14861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2481'. [ 847.761483][T14870] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5609] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[14870] [ 847.853430][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.861365][ C0] bridge0: topology change detected, propagating [ 848.880622][T14875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.951232][T14875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.140003][ T3357] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 849.518883][T14885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.698754][T14885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.199674][T14910] »»»»»»: renamed from vlan0 [ 851.291960][ T5713] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 851.464878][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.503358][ T5713] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 851.530512][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.546167][ T5734] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 851.557138][ T5713] usb 4-1: config 0 descriptor?? [ 851.801771][ T5713] usbhid 4-1:0.0: can't add hid device: -71 [ 851.877742][ T5713] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 852.597594][T14927] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5619] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[14927] [ 852.683547][ T5734] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.795255][ T5734] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 852.933670][ T5734] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 852.997508][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 853.046860][ T5734] usb 2-1: SerialNumber: syz [ 853.398174][ T5734] usb 2-1: 0:2 : does not exist [ 853.520246][ T5713] usb 4-1: USB disconnect, device number 71 [ 853.759211][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 853.759226][ T30] audit: type=1400 audit(1783551011.527:1081): avc: denied { read write } for pid=14932 comm="syz.4.2500" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 853.832708][ T30] audit: type=1400 audit(1783551011.527:1082): avc: denied { open } for pid=14932 comm="syz.4.2500" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 853.858087][T11885] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 853.900430][ T5713] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 854.105683][T11885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 854.346562][T11885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 854.561013][T11885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 854.599615][T11885] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 854.609701][T11885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.626837][ T5713] usb 4-1: device descriptor read/all, error -71 [ 854.632144][T11885] usb 1-1: Product: syz [ 854.645975][T11885] usb 1-1: Manufacturer: syz [ 854.660291][T11883] usb 2-1: USB disconnect, device number 68 [ 854.690257][T11885] usb 1-1: SerialNumber: syz [ 854.728831][T11885] usb 1-1: config 0 descriptor?? [ 855.051932][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 855.072636][T11885] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 855.538143][T11885] usb 1-1: USB disconnect, device number 78 [ 856.016438][ T30] audit: type=1400 audit(1783551013.737:1083): avc: denied { read } for pid=14956 comm="syz.1.2505" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 856.099400][ T30] audit: type=1400 audit(1783551013.847:1084): avc: denied { open } for pid=14956 comm="syz.1.2505" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 856.192118][ T30] audit: type=1400 audit(1783551013.867:1085): avc: denied { ioctl } for pid=14956 comm="syz.1.2505" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 856.530172][ T5713] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 856.692111][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 857.537525][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.599551][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.634897][ T5713] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 857.668460][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.716648][ T5713] usb 3-1: config 0 descriptor?? [ 858.247396][T14989] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 858.368264][T14965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.428318][T14965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.504213][ T5713] usb 3-1: string descriptor 0 read error: -71 [ 858.562306][ T5713] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 858.592362][ T5713] letsketch 0003:6161:4D15.0019: probe with driver letsketch failed with error -32 [ 858.651356][ T5713] usb 3-1: USB disconnect, device number 67 [ 859.053147][T14995] netlink: 'syz.3.2515': attribute type 7 has an invalid length. [ 859.160394][T10158] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.189465][T10158] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.198204][T10158] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.207268][T10158] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.243163][T14992] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 859.251492][T14992] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 859.358921][T15004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.395370][T15004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.924754][T15004] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 861.002425][T15004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 861.018960][ T5713] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 861.181853][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 861.194287][T15004] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 861.225533][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 861.275800][ T5713] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 861.289456][T15038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 861.320709][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.374337][ T5713] usb 3-1: Product: syz [ 861.394591][ T5713] usb 3-1: Manufacturer: syz [ 861.423052][ T5713] usb 3-1: SerialNumber: syz [ 861.467792][ T5713] usb 3-1: config 0 descriptor?? [ 861.495195][ T5713] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 861.522238][ T5713] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 861.536058][ T30] audit: type=1400 audit(1783551019.307:1086): avc: denied { relabelfrom } for pid=15023 comm="syz.3.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 861.602032][ T30] audit: type=1400 audit(1783551019.307:1087): avc: denied { relabelto } for pid=15023 comm="syz.3.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 861.643318][ T5727] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 861.823575][ T5727] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 861.839226][ T5727] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.869540][T15043] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2523'. [ 861.874529][ T5727] usb 2-1: config 0 has no interface number 0 [ 861.951825][ T5727] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 861.983362][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.002771][T15044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.012645][ T5727] usb 2-1: Product: syz [ 862.023262][ T5727] usb 2-1: Manufacturer: syz [ 862.034031][ T5727] usb 2-1: SerialNumber: syz [ 862.059212][ T5727] usb 2-1: config 0 descriptor?? [ 862.078267][ T5727] hub 2-1:0.31: bad descriptor, ignoring hub [ 862.093714][ T5727] hub 2-1:0.31: probe with driver hub failed with error -5 [ 862.112737][T15044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.168662][ T5727] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 862.206409][T15046] overlayfs: workdir and upperdir must reside under the same mount [ 862.227628][ T5727] uvcvideo 2-1:0.31: No valid video chain found. [ 862.287218][ T5727] usb 2-1: USB disconnect, device number 69 [ 862.300684][ T30] audit: type=1400 audit(1783551020.067:1088): avc: denied { bind } for pid=15014 comm="syz.4.2523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 862.720088][ T30] audit: type=1400 audit(1783551020.487:1089): avc: denied { append } for pid=15049 comm="syz.0.2531" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 862.972864][ T5713] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 863.110513][ T5713] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 863.149343][ T5713] em28xx 3-1:0.0: board has no eeprom [ 863.283438][ T5713] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 863.299028][ T5713] em28xx 3-1:0.0: dvb set to bulk mode. [ 863.312345][ T5727] em28xx 3-1:0.0: Binding DVB extension [ 863.548197][ T6814] usb 3-1: USB disconnect, device number 68 [ 863.583762][ T6814] em28xx 3-1:0.0: Disconnecting em28xx [ 863.946642][ T5727] em28xx 3-1:0.0: Registering input extension [ 863.993031][ T6814] em28xx 3-1:0.0: Closing input extension [ 864.569471][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.731175][ T6814] em28xx 3-1:0.0: Freeing device [ 865.395914][T15079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.405821][T15079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.148817][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'. [ 868.042540][T15085] misc userio: Invalid payload size [ 870.955477][ T30] audit: type=1400 audit(1783551028.417:1090): avc: denied { bind } for pid=15090 comm="syz.3.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 871.061739][ T30] audit: type=1400 audit(1783551028.417:1091): avc: denied { setopt } for pid=15090 comm="syz.3.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 871.084450][ T30] audit: type=1400 audit(1783551028.817:1092): avc: denied { listen } for pid=15081 comm="syz.2.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 871.416058][T15110] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2546'. [ 871.484941][T15112] syzkaller1: entered promiscuous mode [ 871.493897][T15112] syzkaller1: entered allmulticast mode [ 871.562055][T11886] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 871.840759][T15112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2547'. [ 871.962751][T11886] usb 4-1: Using ep0 maxpacket: 32 [ 871.998540][T11886] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 872.017586][T11886] usb 4-1: config 0 has no interface number 0 [ 872.044571][T11886] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 872.055060][T11886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.094743][T11886] usb 4-1: config 0 descriptor?? [ 872.121262][T11886] as10x_usb: device has been detected [ 872.144712][T15130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2553'. [ 872.145216][T11886] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 872.154512][ T30] audit: type=1400 audit(1783551029.917:1093): avc: denied { write } for pid=15129 comm="syz.1.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 872.254521][T11886] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 872.298379][ T30] audit: type=1400 audit(1783551030.067:1094): avc: denied { mounton } for pid=15129 comm="syz.1.2553" path="/proc/1660/cgroup" dev="proc" ino=49650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 872.345911][T15135] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 872.376633][T11886] as10x_usb: error during firmware upload part1 [ 872.419598][T11886] Registered device nBox DVB-T Dongle [ 872.467106][T11886] usb 4-1: USB disconnect, device number 74 [ 872.871178][T11886] Unregistered device nBox DVB-T Dongle [ 872.876997][T11886] as10x_usb: device has been disconnected [ 873.942557][T15154] netlink: 'syz.3.2559': attribute type 21 has an invalid length. [ 873.951173][T15154] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2559'. [ 873.961600][T15154] netlink: 'syz.3.2559': attribute type 4 has an invalid length. [ 873.970056][T15154] netlink: 'syz.3.2559': attribute type 5 has an invalid length. [ 873.977792][T15154] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2559'. [ 875.642153][ T5727] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 875.817122][ T5727] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 875.842368][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.855370][ T5727] usb 4-1: Product: syz [ 875.859874][ T5727] usb 4-1: Manufacturer: syz [ 875.866459][ T5727] usb 4-1: SerialNumber: syz [ 875.903538][ T5727] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 875.926879][ T6814] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 877.154737][ T6814] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 877.162117][ T6814] ath9k_htc: Failed to initialize the device [ 877.239178][ T6814] usb 4-1: ath9k_htc: USB layer deinitialized [ 877.305240][ T5727] usb 4-1: USB disconnect, device number 75 [ 877.584756][T15186] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8 sclass=netlink_xfrm_socket pid=15186 comm=syz.4.2565 [ 877.639008][ T30] audit: type=1400 audit(1783551035.407:1095): avc: denied { bind } for pid=15204 comm="syz.1.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 877.662319][ T30] audit: type=1400 audit(1783551035.427:1096): avc: denied { connect } for pid=15204 comm="syz.1.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 877.706051][T15213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2573'. [ 877.715009][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2573'. [ 877.890205][T15216] misc userio: Invalid payload size [ 878.629142][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2578'. [ 879.476835][T15249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2585'. [ 879.489044][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2585'. [ 880.610198][T15272] netlink: 'syz.1.2593': attribute type 1 has an invalid length. [ 880.682570][T15272] 8021q: adding VLAN 0 to HW filter on device bond4 [ 880.780944][T15286] overlayfs: failed to resolve '/î8'‚¤—ZRÁ«›‹M³”]2': -2 [ 880.784958][ T30] audit: type=1400 audit(1783551038.547:1097): avc: denied { mounton } for pid=15285 comm="syz.2.2597" path="/527/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 880.853538][T15276] bond4: (slave veth5): Enslaving as an active interface with a down link [ 880.868975][T15288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.928297][T15288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.945173][T15288] openvswitch: netlink: Actions may not be safe on all matching packets [ 881.000566][T15272] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.008373][T15272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.031415][ T30] audit: type=1400 audit(1783551038.797:1098): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 881.090940][T15272] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 881.647130][T15297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 884.130626][T15276] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 884.528143][T15276] bond4: (slave batadv1): making interface the new active one [ 884.612027][ T5727] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 884.664380][T15276] batadv1: entered promiscuous mode [ 884.811524][T15276] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 884.852094][ T5727] usb 4-1: Using ep0 maxpacket: 32 [ 884.963781][ T5727] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.020876][ T5727] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 885.066860][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.098310][ T5727] usb 4-1: Product: syz [ 885.113753][ T5727] usb 4-1: Manufacturer: syz [ 885.136735][ T5727] usb 4-1: SerialNumber: syz [ 885.143604][T15324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=15324 comm=syz.1.2605 [ 885.159052][ T5727] usb 4-1: config 0 descriptor?? [ 886.523980][ T5727] ljca 4-1:0.0: bulk endpoints not found [ 886.574155][ T5727] usb 4-1: USB disconnect, device number 76 [ 888.277855][T15358] tipc: Started in network mode [ 888.282902][T15358] tipc: Node identity 2007ff, cluster identity 4711 [ 888.289599][T15358] tipc: Node number set to 2099199 [ 888.400720][T15366] wlan0 speed is unknown, defaulting to 1000 [ 888.721884][ T5727] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 888.832791][ T30] audit: type=1400 audit(1783551046.607:1099): avc: denied { connect } for pid=15388 comm="syz.4.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 888.932263][ T5727] usb 4-1: Using ep0 maxpacket: 32 [ 888.961282][ T30] audit: type=1400 audit(1783551046.637:1100): avc: denied { bind } for pid=15388 comm="syz.4.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 889.047703][ T5727] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 889.090723][ T5727] usb 4-1: config 0 has no interface number 0 [ 889.110380][ T5727] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.161009][ T5727] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.198970][ T5727] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 889.229635][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.272606][ T5727] usb 4-1: config 0 descriptor?? [ 889.278608][T15389] netlink: 'syz.4.2624': attribute type 39 has an invalid length. [ 889.301504][T15404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2627'. [ 889.337884][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2624'. [ 889.418484][T15404] hsr_slave_1 (unregistering): left promiscuous mode [ 889.442345][ T6814] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 889.611069][ T5727] usbhid 4-1:0.1: can't add hid device: -71 [ 889.623453][ T6814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.646347][ T5727] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 889.674741][ T6814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.701522][ T5727] usb 4-1: USB disconnect, device number 77 [ 889.723348][ T6814] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 889.775258][ T6814] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 889.833955][ T6814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.884921][ T6814] usb 2-1: config 0 descriptor?? [ 890.294484][ T5616] Bluetooth: hci4: unexpected event for opcode 0x1804 [ 890.470634][T15427] netlink: 'syz.3.2632': attribute type 10 has an invalid length. [ 890.524387][T15427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.558195][T15427] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 890.618723][T15427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 890.636249][ T30] audit: type=1400 audit(1783551048.407:1101): avc: denied { connect } for pid=15432 comm="syz.4.2633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 890.665388][T15433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.712002][ T30] audit: type=1400 audit(1783551048.467:1102): avc: denied { ioctl } for pid=15426 comm="syz.3.2632" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 890.752077][T15366] could not allocate digest TFM handle blake2s-160 [ 890.770261][T11880] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 890.790764][ T6814] usbhid 2-1:0.0: can't add hid device: -71 [ 890.797386][ T6814] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 890.810751][T15433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.819535][ T30] audit: type=1400 audit(1783551048.477:1103): avc: denied { mounton } for pid=15426 comm="syz.3.2632" path="/544/file0" dev="tmpfs" ino=2870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 890.852604][ T6814] usb 2-1: USB disconnect, device number 70 [ 890.921429][T15427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.935055][T11880] usb 3-1: Using ep0 maxpacket: 16 [ 890.946369][T11880] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 890.971685][T15427] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 890.981954][T11880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 891.017678][T15427] bond0 (unregistering): Released all slaves [ 891.023806][T11880] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 891.059086][T11880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 891.083950][T11880] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 891.105898][T11880] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 891.128679][T11880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.152865][T11880] usb 3-1: Product: syz [ 891.186316][T11880] usb 3-1: Manufacturer: syz [ 891.206633][T11880] usb 3-1: SerialNumber: syz [ 891.231331][T11880] usb 3-1: config 0 descriptor?? [ 891.253911][T11880] port100 3-1:0.0: NFC: Could not get supported command types [ 892.199851][T11880] usb 3-1: USB disconnect, device number 69 [ 892.495727][T15444] FAULT_INJECTION: forcing a failure. [ 892.495727][T15444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.508978][T15444] CPU: 1 UID: 0 PID: 15444 Comm: syz.3.2635 Tainted: G L syzkaller #0 PREEMPT(full) [ 892.509007][T15444] Tainted: [L]=SOFTLOCKUP [ 892.509013][T15444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 892.509023][T15444] Call Trace: [ 892.509028][T15444] [ 892.509040][T15444] dump_stack_lvl+0x100/0x190 [ 892.509066][T15444] should_fail_ex.cold+0x5/0xa [ 892.509088][T15444] _copy_from_user+0x2e/0xd0 [ 892.509110][T15444] copy_msghdr_from_user+0x9f/0x4c0 [ 892.509134][T15444] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 892.509168][T15444] ___sys_sendmsg+0x106/0x1e0 [ 892.509191][T15444] ? __pfx____sys_sendmsg+0x10/0x10 [ 892.509212][T15444] ? __lock_acquire+0x49f/0x1a40 [ 892.509232][T15444] ? get_pid_task+0x106/0x250 [ 892.509283][T15444] __sys_sendmsg+0x160/0x210 [ 892.509301][T15444] ? __pfx___sys_sendmsg+0x10/0x10 [ 892.509331][T15444] do_syscall_64+0x115/0x870 [ 892.509355][T15444] ? clear_bhb_loop+0x40/0x90 [ 892.509376][T15444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.509393][T15444] RIP: 0033:0x7f3ab739de59 [ 892.509408][T15444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.509423][T15444] RSP: 002b:00007f3ab55b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.509441][T15444] RAX: ffffffffffffffda RBX: 00007f3ab7626180 RCX: 00007f3ab739de59 [ 892.509452][T15444] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000007 [ 892.509462][T15444] RBP: 00007f3ab55b4090 R08: 0000000000000000 R09: 0000000000000000 [ 892.509473][T15444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.509482][T15444] R13: 00007f3ab7626218 R14: 00007f3ab7626180 R15: 00007ffcdd2433d8 [ 892.509506][T15444] [ 893.240863][T15449] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2636'. [ 893.539191][T11885] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 893.582802][T11880] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 893.765108][T11880] usb 3-1: Using ep0 maxpacket: 8 [ 893.792612][T11885] usb 4-1: Using ep0 maxpacket: 16 [ 893.939631][T11885] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 893.951864][T11885] usb 4-1: config 0 interface 0 has no altsetting 0 [ 893.961295][T11885] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 893.962629][T11880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.991924][T11885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.015273][T11885] usb 4-1: Product: syz [ 894.026861][T11885] usb 4-1: Manufacturer: syz [ 894.038064][T11885] usb 4-1: SerialNumber: syz [ 894.042636][T11880] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 894.047153][T11885] usb 4-1: config 0 descriptor?? [ 894.108700][T11880] usb 3-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 894.137650][T11880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.166408][T11880] usb 3-1: config 0 descriptor?? [ 894.417235][T15455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.482489][T15455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.514975][T15455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.542422][T15455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.310444][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 895.325076][T11885] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input45 [ 896.221699][T11880] usbhid 3-1:0.0: can't add hid device: -71 [ 896.235095][T11885] imon:send_packet: packet tx failed (-71) [ 896.251618][ T30] audit: type=1400 audit(1783551054.017:1104): avc: denied { write } for pid=15472 comm="syz.1.2646" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 896.275907][T11885] imon 4-1:0.0: panel buttons/knobs setup failed [ 896.317197][T11880] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 896.362309][T11880] usb 3-1: USB disconnect, device number 70 [ 896.422972][T11885] rc_core: IR keymap rc-imon-pad not found [ 896.429489][T11885] Registered IR keymap rc-empty [ 896.439641][T11885] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 896.464024][T11885] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 896.484251][T11885] imon:send_packet: packet tx failed (-71) [ 896.501941][T11885] imon 4-1:0.0: remote input dev register failed [ 896.509441][T11885] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 896.551914][ T5713] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 896.593672][T11885] imon 4-1:0.0: unable to initialize intf0, err 0 [ 896.601888][T11885] imon:imon_probe: failed to initialize context! [ 896.611200][T11885] imon 4-1:0.0: unable to register, err -19 [ 896.641691][T11885] usb 4-1: USB disconnect, device number 78 [ 896.737223][ T5713] usb 2-1: Using ep0 maxpacket: 32 [ 896.750304][ T5713] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 896.771727][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.792415][ T5713] usb 2-1: config 0 descriptor?? [ 896.798703][ T30] audit: type=1400 audit(1783551054.567:1105): avc: denied { ioctl } for pid=15491 comm="syz.2.2648" path="/dev/input/mice" dev="devtmpfs" ino=917 ioctlcmd=0x5407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 896.805938][ T5713] as10x_usb: device has been detected [ 896.925482][ T5713] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 896.964987][ T5713] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 897.001215][ T5713] as10x_usb: error during firmware upload part1 [ 897.018405][ T5713] Registered device nBox DVB-T Dongle [ 897.024055][T15500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.048218][ T5713] usb 2-1: USB disconnect, device number 71 [ 897.062941][T15500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.104888][T15502] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2652'. [ 897.115524][ T5713] Unregistered device nBox DVB-T Dongle [ 897.116472][ T5713] as10x_usb: device has been disconnected [ 897.271957][ T5734] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 897.306941][T15504] wlan0 speed is unknown, defaulting to 1000 [ 897.647638][ T5734] usb 3-1: config 1 has an invalid interface number: 93 but max is 0 [ 897.687289][ T5734] usb 3-1: config 1 has no interface number 0 [ 897.726578][ T5734] usb 3-1: config 1 interface 93 has no altsetting 0 [ 897.768907][ T5734] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 897.804995][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.158846][ T5734] usb 3-1: string descriptor 0 read error: -71 [ 898.190174][ T5734] gl620a 3-1:1.93: probe with driver gl620a failed with error -22 [ 898.227648][ T30] audit: type=1400 audit(1783551055.997:1106): avc: denied { mmap_zero } for pid=15520 comm="syz.3.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 898.253315][ T5734] usb 3-1: USB disconnect, device number 71 [ 898.414560][T15523] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=57 sclass=netlink_tcpdiag_socket pid=15523 comm=syz.4.2657 [ 898.863923][T15529] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 898.936286][T15523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2657'. [ 899.252178][ T3357] batadv1: left promiscuous mode [ 899.347013][T15545] loop6: detected capacity change from 0 to 2640 [ 899.465984][T15549] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 899.491357][T15552] loop6: detected capacity change from 2640 to 524288000 [ 899.576980][T15545] buffer_io_error: 341 callbacks suppressed [ 899.576999][T15545] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.646253][T15545] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.679401][T15545] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.689244][T15559] netlink: 'syz.4.2666': attribute type 1 has an invalid length. [ 899.697675][T15545] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.717306][T15545] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.749922][T15545] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.775039][T15559] 8021q: adding VLAN 0 to HW filter on device bond4 [ 899.775100][T15545] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.789534][T15559] bond3: (slave bond4): making interface the new active one [ 899.825654][T15545] Buffer I/O error on dev loop6, logical block 0, async page read [ 900.044098][T15545] ldm_validate_partition_table(): Disk read failed. [ 900.103362][T15545] Buffer I/O error on dev loop6, logical block 0, async page read [ 900.127587][T15545] Buffer I/O error on dev loop6, logical block 0, async page read [ 900.152902][T15559] bond3: (slave bond4): Enslaving as an active interface with an up link [ 900.167092][T15545] Dev loop6: unable to read RDB block 0 [ 900.182395][T15545] loop6: unable to read partition table [ 900.198541][T15545] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 900.287186][T15567] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 900.572069][T15576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.588604][T15576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.882263][ T5712] kworker/1:4 (5712) used greatest stack depth: 18448 bytes left [ 901.923429][T15587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 903.352565][T15616] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 903.377334][T15616] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 903.400950][T15616] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 903.562313][T15629] syz_tun: entered allmulticast mode [ 903.583663][ T30] audit: type=1400 audit(1783551061.357:1107): avc: denied { execute } for pid=15621 comm="syz.0.2684" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 903.629514][T15631] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 903.849077][T15643] fuse: Bad value for 'rootmode' [ 906.179377][T15667] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2694'. [ 906.371903][ T6814] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 906.874524][T15682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2699'. [ 906.892020][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2699'. [ 907.181906][T11886] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 907.341894][T11886] usb 4-1: device descriptor read/64, error -71 [ 907.573140][ T6814] usb 1-1: device descriptor read/64, error -71 [ 907.633149][T11886] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 907.802201][T11886] usb 4-1: device descriptor read/64, error -71 [ 907.843156][ T6814] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 907.932657][T11886] usb usb4-port1: attempt power cycle [ 908.153229][ T6814] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.163493][ T6814] usb 1-1: config 0 interface 0 has no altsetting 0 [ 908.181111][ T6814] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 908.201363][ T6814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.228390][ T6814] usb 1-1: Product: syz [ 908.246177][ T6814] usb 1-1: Manufacturer: syz [ 908.265644][ T6814] usb 1-1: SerialNumber: syz [ 908.317086][ T6814] usb 1-1: config 0 descriptor?? [ 908.358564][ T6814] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 908.472559][T11886] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 908.691512][T11886] usb 4-1: device descriptor read/8, error -71 [ 908.699382][ T6814] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 908.778535][ T6814] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 908.808480][ T6814] usb 1-1: media controller created [ 908.868033][ T6814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 908.931942][T11886] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 908.966638][T11886] usb 4-1: device descriptor read/8, error -71 [ 909.070366][ T6814] DVB: Unable to find symbol tda10046_attach() [ 909.093321][T11886] usb usb4-port1: unable to enumerate USB device [ 909.120688][ T6814] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 909.160502][ T6814] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 909.218663][ T6814] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 909.268697][ T6814] usb 1-1: USB disconnect, device number 80 [ 909.653315][ T30] audit: type=1400 audit(1783551067.417:1108): avc: denied { set_context_mgr } for pid=15721 comm="syz.4.2710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 909.708561][ T30] audit: type=1400 audit(1783551067.447:1109): avc: denied { map } for pid=15721 comm="syz.4.2710" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 909.820108][ T30] audit: type=1400 audit(1783551067.447:1110): avc: denied { call } for pid=15721 comm="syz.4.2710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 909.820791][T15725] IPv6: addrconf: prefix option has invalid lifetime [ 909.846989][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 910.642109][ T6814] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 910.879713][ T6814] usb 4-1: Using ep0 maxpacket: 32 [ 910.989260][ T6814] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 911.047336][ T6814] usb 4-1: config 0 has no interface number 0 [ 911.137572][ T6814] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 911.227089][ T6814] usb 4-1: config 0 interface 89 has no altsetting 0 [ 911.435483][ T6814] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 911.489062][ T6814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.551867][ T6814] usb 4-1: Product: syz [ 911.560702][ T6814] usb 4-1: Manufacturer: syz [ 911.607402][ T6814] usb 4-1: SerialNumber: syz [ 911.644220][ T6814] usb 4-1: config 0 descriptor?? [ 911.694062][ T6814] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 911.734332][ T6814] em28xx 4-1:0.89: Video interface 89 found: [ 912.297284][ T6814] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 913.675462][ T6814] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 913.747242][ T6814] em28xx 4-1:0.89: board has no eeprom [ 913.831533][T15764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.840634][T15764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.854515][ T6814] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 913.879181][ T6814] em28xx 4-1:0.89: analog set to bulk mode. [ 913.905824][ T5727] em28xx 4-1:0.89: Registering V4L2 extension [ 913.976166][ T6814] usb 4-1: USB disconnect, device number 83 [ 914.026772][ T6814] em28xx 4-1:0.89: Disconnecting em28xx [ 914.121035][T15773] netlink: 'syz.0.2725': attribute type 22 has an invalid length. [ 914.246968][ T5727] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 914.280053][ T5727] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 914.318048][ T5727] em28xx 4-1:0.89: No AC97 audio processor [ 914.902060][ T5727] usb 4-1: Decoder not found [ 914.914635][ T5727] em28xx 4-1:0.89: failed to create media graph [ 914.926833][ T5727] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 915.098959][ T5727] em28xx 4-1:0.89: Registering snapshot button... [ 915.315646][ T5727] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input47 [ 915.363065][T15795] netlink: 'syz.3.2729': attribute type 10 has an invalid length. [ 915.370942][T15795] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2729'. [ 916.347424][ T5727] em28xx 4-1:0.89: Remote control support is not available for this card. [ 916.395163][ T6814] em28xx 4-1:0.89: Closing input extension [ 916.441554][ T6814] em28xx 4-1:0.89: Deregistering snapshot button [ 917.623694][ T6814] em28xx 4-1:0.89: Freeing device [ 919.841867][ T5727] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 920.025492][ T5727] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 920.052817][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.081208][ T5727] usb 2-1: Product: syz [ 920.092141][ T5727] usb 2-1: Manufacturer: syz [ 920.100008][ T5727] usb 2-1: SerialNumber: syz [ 920.120665][ T5727] usb 2-1: config 0 descriptor?? [ 920.139326][ T5727] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 072 [ 920.391941][T11886] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 920.592366][T11886] usb 1-1: Using ep0 maxpacket: 8 [ 920.817808][T11886] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.847857][ T5727] i2c i2c-2: failure reading functionality [ 920.850354][T11886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 920.869742][T11886] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 920.880768][ T5727] i2c i2c-2: connected i2c-tiny-usb device [ 920.882699][T11886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.917037][T11886] usb 1-1: config 0 descriptor?? [ 920.922343][ T5727] usb 2-1: USB disconnect, device number 72 [ 921.236022][T15858] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 921.252164][T15858] SELinux: failed to load policy [ 921.465226][T11886] hid_parser_main: 30 callbacks suppressed [ 921.465252][T11886] lua 0003:1E7D:2C2E.001A: unknown main item tag 0x7 [ 921.491370][T11886] lua 0003:1E7D:2C2E.001A: unknown global tag 0xe [ 921.578339][T11886] lua 0003:1E7D:2C2E.001A: item 0 4 1 14 parsing failed [ 921.632125][T11886] lua 0003:1E7D:2C2E.001A: parse failed [ 921.667612][T11886] lua 0003:1E7D:2C2E.001A: probe with driver lua failed with error -22 [ 921.685487][T15848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2746'. [ 921.796451][T15848] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 921.899732][ T5727] usb 1-1: USB disconnect, device number 81 [ 922.251092][T15873] tipc: New replicast peer: 255.255.255.255 [ 922.326239][T15873] tipc: Enabled bearer , priority 10 [ 922.798915][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2754'. [ 922.807929][T15885] openvswitch: netlink: Flow actions attr not present in new flow. [ 924.071430][T15884] overlayfs: failed to resolve './file2': -2 [ 924.498317][T15884] netlink: 'syz.0.2755': attribute type 49 has an invalid length. [ 924.899152][T15884] bond_slave_0: entered promiscuous mode [ 924.905515][T15884] bond_slave_0: entered allmulticast mode [ 925.103504][T11880] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 925.462173][T11880] usb 1-1: Using ep0 maxpacket: 8 [ 925.480647][T11880] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 48, changing to 7 [ 925.517505][T11880] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 925.545070][T11880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.571572][T11880] usb 1-1: Product: syz [ 925.589209][T11880] usb 1-1: Manufacturer: syz [ 925.616529][T11880] usb 1-1: SerialNumber: syz [ 925.831632][T11880] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 925.873692][T11880] usb 1-1: found format II with max.bitrate = 1025, frame size=32767 [ 925.922808][T11880] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 925.938023][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.528023][T15926] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 926.579918][T11880] usb 1-1: USB disconnect, device number 82 [ 926.695438][ T6033] udevd[6033]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 926.704571][ T30] audit: type=1400 audit(1783551084.437:1111): avc: denied { write } for pid=15900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 926.773435][T15914] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5623] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[15914] [ 927.014890][ T30] audit: type=1400 audit(1783551084.737:1112): avc: denied { write } for pid=15944 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 927.571617][T15952] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5609] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[15952] [ 927.875959][T11883] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 928.050956][T11885] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 928.091723][T15955] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2773'. [ 928.091766][T15956] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2773'. [ 928.337504][T11885] usb 2-1: Using ep0 maxpacket: 8 [ 928.348195][T11883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.403244][T11885] usb 2-1: config 195 has an invalid interface number: 112 but max is 1 [ 928.524391][T11883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.558272][T11885] usb 2-1: config 195 has an invalid interface number: 112 but max is 1 [ 928.649601][T11883] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 928.664777][T11885] usb 2-1: config 195 has 1 interface, different from the descriptor's value: 2 [ 928.737670][T11883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.809992][T11885] usb 2-1: config 195 has no interface number 0 [ 928.833774][T11883] usb 1-1: config 0 descriptor?? [ 928.848134][T11885] usb 2-1: config 195 interface 112 has no altsetting 0 [ 928.886084][T11885] usb 2-1: config 195 interface 112 has no altsetting 1 [ 929.240125][T11885] usb 2-1: New USB device found, idVendor=055d, idProduct=2020, bcdDevice= 1.3f [ 929.281051][T11885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.366516][T11885] usb 2-1: Product: syz [ 929.456531][T11885] usb 2-1: Manufacturer: syz [ 929.461155][T11885] usb 2-1: SerialNumber: syz [ 930.291918][ T6814] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 930.352953][T11885] usb-storage 2-1:195.112: USB Mass Storage device detected [ 930.374147][T15974] input: syz1 as /devices/virtual/input/input48 [ 930.380267][T11885] usb-storage 2-1:195.112: Quirks match for vid 055d pid 2020: 1 [ 930.453582][ T6814] usb 3-1: device descriptor read/64, error -71 [ 930.487373][T11885] usb 2-1: USB disconnect, device number 73 [ 930.752558][ T6814] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 930.777551][T11883] usbhid 1-1:0.0: can't add hid device: -71 [ 930.790949][T11883] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 930.837621][T11883] usb 1-1: USB disconnect, device number 83 [ 930.954825][ T6814] usb 3-1: device descriptor read/64, error -71 [ 931.035395][ T30] audit: type=1400 audit(1783551088.807:1113): avc: denied { write } for pid=15963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 931.052064][T11885] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 931.089240][ T6814] usb usb3-port1: attempt power cycle [ 931.314661][T11885] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 931.349137][T11885] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 931.351667][ T30] audit: type=1400 audit(1783551089.097:1114): avc: denied { write } for pid=15992 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 931.358994][T11885] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 931.359019][T11885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.501874][ T6814] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 931.539145][T15980] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 931.573663][ T6814] usb 3-1: device descriptor read/8, error -71 [ 931.576093][T11885] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 931.830291][T16001] tipc: Enabling of bearer rejected, failed to enable media [ 931.860688][T11885] usb 2-1: USB disconnect, device number 74 [ 931.872808][ T6814] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 931.924287][ T6814] usb 3-1: device descriptor read/8, error -71 [ 932.123975][ T6814] usb usb3-port1: unable to enumerate USB device [ 934.927051][T16025] ipt_ECN: cannot use operation on non-tcp rule [ 935.161829][ T30] audit: type=1400 audit(1783551092.907:1115): avc: denied { write } for pid=16005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.291032][ T30] audit: type=1400 audit(1783551093.057:1116): avc: denied { write } for pid=16044 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.372321][T11886] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 935.535602][T11886] usb 4-1: Using ep0 maxpacket: 32 [ 935.555300][T11886] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 935.586721][T11886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.624307][T11886] usb 4-1: config 0 descriptor?? [ 936.019277][ T30] audit: type=1400 audit(1783551093.747:1117): avc: denied { remount } for pid=16036 comm="syz.3.2790" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 938.596005][ T30] audit: type=1400 audit(1783551096.367:1118): avc: denied { create } for pid=16074 comm="syz.4.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 940.604120][T11886] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 940.658342][T11886] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 940.688069][T11886] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 941.772211][T16094] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 942.031306][T16094] wlan0 speed is unknown, defaulting to 1000 [ 942.093116][T16099] SELinux: failed to load policy [ 942.831971][T11883] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 943.001857][T11883] usb 3-1: Using ep0 maxpacket: 8 [ 943.024688][T11883] usb 3-1: config index 0 descriptor too short (expected 110, got 45) [ 943.043313][T11883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.072057][T11883] usb 3-1: config 0 has no interfaces? [ 943.078214][T11883] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 943.088457][T11883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.108916][T11883] usb 3-1: config 0 descriptor?? [ 944.026532][ T5727] usb 3-1: USB disconnect, device number 76 [ 944.074355][ T30] audit: type=1400 audit(1783551101.847:1119): avc: denied { write } for pid=16103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 944.305066][ T30] audit: type=1400 audit(1783551102.077:1120): avc: denied { write } for pid=16127 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 944.931039][T16140] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2807'. [ 944.993622][T16141] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5619] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16141] [ 945.041461][T16143] raw-gadget.1 gadget.4: failed to queue resume event [ 945.292069][ T5727] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 945.426584][ T5727] usb 3-1: device descriptor read/64, error -71 [ 946.042812][ T5727] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 946.071973][T16101] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 946.095749][T16143] random: crng reseeded on system resumption [ 946.149153][T16142] raw-gadget.1 gadget.4: failed to queue suspend event [ 946.221944][ T5727] usb 3-1: device descriptor read/64, error -71 [ 946.234307][T16101] usb 1-1: config 0 has no interfaces? [ 946.244602][T16101] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 946.264375][T16101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.280117][T16101] usb 1-1: config 0 descriptor?? [ 946.363616][T16174] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2816'. [ 946.385523][ T5727] usb usb3-port1: attempt power cycle [ 946.594970][ T30] audit: type=1400 audit(1783551104.357:1121): avc: denied { read } for pid=16178 comm="syz.4.2817" path="socket:[52790]" dev="sockfs" ino=52790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 946.741876][ T5727] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 946.769370][T16177] netlink: 'syz.1.2815': attribute type 10 has an invalid length. [ 946.795074][ T5727] usb 3-1: device descriptor read/8, error -71 [ 946.818170][T16182] netlink: 'syz.1.2815': attribute type 10 has an invalid length. [ 946.855433][T16187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.875481][T16177] bond0: (slave netdevsim1): Releasing backup interface [ 946.882909][T16187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.979389][T16177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 947.052058][ T5727] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 947.093178][ T5727] usb 3-1: device descriptor read/8, error -71 [ 947.109097][T16177] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 947.146999][T16177] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 947.222687][ T5727] usb usb3-port1: unable to enumerate USB device [ 947.245508][T16177] team0: Port device netdevsim1 added [ 947.254742][T16182] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 947.281083][T16182] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 947.360496][T16182] team0: Port device netdevsim1 removed [ 947.425204][T16182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 947.516557][T16182] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 948.559058][T11880] usb 1-1: USB disconnect, device number 85 [ 948.817562][T16203] SELinux: Context system_u:object_r:mtrr_device_t:s0 is not valid (left unmapped). [ 949.004158][T16203] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2823'. [ 949.375824][ T30] audit: type=1400 audit(1783551106.587:1122): avc: denied { relabelfrom } for pid=16199 comm="syz.3.2823" name="PPPOL2TP" dev="sockfs" ino=53661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 950.081811][ T30] audit: type=1400 audit(1783551106.597:1123): avc: denied { relabelto } for pid=16199 comm="syz.3.2823" name="PPPOL2TP" dev="sockfs" ino=53661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=pppox_socket permissive=1 trawcon="system_u:object_r:mtrr_device_t:s0" [ 950.124706][T16207] FAULT_INJECTION: forcing a failure. [ 950.124706][T16207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.232187][T16207] CPU: 0 UID: 0 PID: 16207 Comm: syz.4.2826 Tainted: G L syzkaller #0 PREEMPT(full) [ 950.232220][T16207] Tainted: [L]=SOFTLOCKUP [ 950.232226][T16207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 950.232237][T16207] Call Trace: [ 950.232243][T16207] [ 950.232250][T16207] dump_stack_lvl+0x100/0x190 [ 950.232278][T16207] should_fail_ex.cold+0x5/0xa [ 950.232301][T16207] _copy_from_user+0x2e/0xd0 [ 950.232323][T16207] copy_msghdr_from_user+0x9f/0x4c0 [ 950.232348][T16207] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 950.232383][T16207] ___sys_sendmsg+0x106/0x1e0 [ 950.232408][T16207] ? __pfx____sys_sendmsg+0x10/0x10 [ 950.232430][T16207] ? __lock_acquire+0x49f/0x1a40 [ 950.232449][T16207] ? get_pid_task+0x106/0x250 [ 950.232502][T16207] __sys_sendmsg+0x160/0x210 [ 950.232521][T16207] ? __pfx___sys_sendmsg+0x10/0x10 [ 950.232552][T16207] do_syscall_64+0x115/0x870 [ 950.232576][T16207] ? clear_bhb_loop+0x40/0x90 [ 950.232598][T16207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.232616][T16207] RIP: 0033:0x7fd31079de59 [ 950.232631][T16207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.232648][T16207] RSP: 002b:00007fd3116df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.232666][T16207] RAX: ffffffffffffffda RBX: 00007fd310a25fa0 RCX: 00007fd31079de59 [ 950.232677][T16207] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000005 [ 950.232687][T16207] RBP: 00007fd3116df090 R08: 0000000000000000 R09: 0000000000000000 [ 950.232697][T16207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.232707][T16207] R13: 00007fd310a26038 R14: 00007fd310a25fa0 R15: 00007ffd7f2bfdf8 [ 950.232732][T16207] [ 950.861050][ T30] audit: type=1400 audit(1783551108.627:1124): avc: denied { setopt } for pid=16216 comm="syz.0.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 951.004529][T16217] syzkaller1: entered promiscuous mode [ 951.040515][T16217] syzkaller1: entered allmulticast mode [ 951.209223][ T30] audit: type=1326 audit(1783551108.977:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16222 comm="syz.3.2830" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab739de59 code=0x7ffc0000 [ 951.323345][ T30] audit: type=1326 audit(1783551109.017:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16222 comm="syz.3.2830" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f3ab739de59 code=0x7ffc0000 [ 951.477283][ T30] audit: type=1400 audit(1783551109.027:1127): avc: denied { kexec_image_load } for pid=16222 comm="syz.3.2830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 951.567393][ T30] audit: type=1326 audit(1783551109.027:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16222 comm="syz.3.2830" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab739de59 code=0x7ffc0000 [ 951.680604][ T30] audit: type=1326 audit(1783551109.027:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16222 comm="syz.3.2830" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab739de59 code=0x7ffc0000 [ 951.818567][ T30] audit: type=1326 audit(1783551109.027:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16222 comm="syz.3.2830" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f3ab739de59 code=0x7ffc0000 [ 951.922008][ T30] audit: type=1326 audit(1783551109.027:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16222 comm="syz.3.2830" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab739de59 code=0x7ffc0000 [ 952.704222][T11880] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 952.871837][T11880] usb 2-1: Using ep0 maxpacket: 32 [ 953.010106][ T6815] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 953.039880][T11880] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 953.059341][T11880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.223394][T11880] usb 2-1: config 0 descriptor?? [ 953.242635][ T6815] usb 1-1: Using ep0 maxpacket: 32 [ 953.248037][T11880] as10x_usb: device has been detected [ 953.269448][ T6815] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 953.279907][T11880] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 953.315402][ T6815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.336021][T11880] usb 2-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 953.365777][ T6815] usb 1-1: config 0 descriptor?? [ 953.393873][T11880] as10x_usb: error during firmware upload part1 [ 953.410301][ T6815] as10x_usb: device has been detected [ 953.429211][T11880] Registered device nBox DVB-T Dongle [ 954.048390][ T6815] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 954.273411][T16276] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5609] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16276] [ 954.338061][T11880] usb 2-1: USB disconnect, device number 75 [ 955.102976][ T6815] usb 1-1: DVB: registering adapter 3 frontend 0 (nBox DVB-T Dongle)... [ 955.180078][ T6815] as10x_usb: error during firmware upload part1 [ 955.297673][T11880] Unregistered device nBox DVB-T Dongle [ 955.299426][ T6815] Registered device nBox DVB-T Dongle [ 955.320142][T11880] as10x_usb: device has been disconnected [ 955.343709][ T6815] usb 1-1: USB disconnect, device number 86 [ 955.444983][ T6815] Unregistered device nBox DVB-T Dongle [ 955.454978][ T6815] as10x_usb: device has been disconnected [ 955.532080][T16284] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 955.730117][T16297] raw-gadget.1 gadget.4: failed to queue resume event [ 955.747957][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 955.747973][ T30] audit: type=1400 audit(1783551113.517:1147): avc: denied { write } for pid=16249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.128029][T16302] random: crng reseeded on system resumption [ 956.347210][ T30] audit: type=1400 audit(1783551114.117:1148): avc: denied { write } for pid=16300 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 957.579369][T16296] raw-gadget.1 gadget.4: failed to queue suspend event [ 957.625562][T16319] fuse: Bad value for 'user_id' [ 957.640331][T16319] fuse: Bad value for 'user_id' [ 960.018181][ T30] audit: type=1400 audit(1783551117.787:1149): avc: denied { read } for pid=16342 comm="syz.3.2853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 960.165722][T16345] x_tables: duplicate underflow at hook 1 [ 960.270827][T16345] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5617] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16345] [ 961.864203][ T30] audit: type=1400 audit(1783551117.997:1150): avc: denied { ioctl } for pid=16342 comm="syz.3.2853" path="socket:[54296]" dev="sockfs" ino=54296 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 962.554053][T16363] netlink: 'syz.3.2858': attribute type 1 has an invalid length. [ 962.631709][T16365] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2859'. [ 963.472587][T16374] program syz.3.2860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 963.482175][T16374] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 963.500099][ T30] audit: type=1400 audit(1783551121.207:1151): avc: denied { block_suspend } for pid=16369 comm="syz.3.2860" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 963.556457][T16375] netlink: 'syz.3.2860': attribute type 39 has an invalid length. [ 964.907997][T16385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16385 comm=syz.2.2846 [ 965.283930][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 965.300615][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 965.310680][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 965.318377][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 965.326929][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 966.006242][ T30] audit: type=1400 audit(1783551123.777:1152): avc: denied { getopt } for pid=16406 comm="syz.0.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 966.011026][T16409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2872'. [ 966.036044][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2872'. [ 966.136715][T16412] netlink: 'syz.1.2871': attribute type 1 has an invalid length. [ 966.562431][T16419] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2873'. [ 966.747239][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2875'. [ 966.930581][T14188] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.965918][T14188] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.021909][ T6815] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 967.092461][ T5727] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 967.215625][ T6815] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 967.229750][T16390] wlan0 speed is unknown, defaulting to 1000 [ 967.262632][ T5727] usb 3-1: Using ep0 maxpacket: 16 [ 967.456724][ T5615] Bluetooth: hci5: command tx timeout [ 967.549498][ T5727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.576214][ T6815] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 967.637258][ T5727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.658714][ T6815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.690481][T14188] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.701374][T14188] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.717800][ T6815] usb 2-1: Product: syz [ 967.730206][ T5727] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 967.765285][ T6815] usb 2-1: Manufacturer: syz [ 967.795609][ T6815] usb 2-1: SerialNumber: syz [ 967.811629][ T5727] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 967.868018][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.934379][ T5727] usb 3-1: config 0 descriptor?? [ 967.991858][T11880] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 968.074539][T14188] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.102105][T14188] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.151621][ T6815] comedi comedi5: Wrong number of endpoints [ 968.175377][T11880] usb 1-1: Using ep0 maxpacket: 16 [ 968.188862][ T6815] ni6501 2-1:5.0: driver 'ni6501' failed to auto-configure device. [ 968.216265][T11880] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 968.235447][T11880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.256214][ T6815] usb 2-1: USB disconnect, device number 76 [ 968.285317][T11880] usb 1-1: Product: syz [ 968.320959][T11880] usb 1-1: Manufacturer: syz [ 968.347015][T11880] usb 1-1: SerialNumber: syz [ 968.381153][T11880] usb 1-1: config 0 descriptor?? [ 968.392239][T14188] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.419150][T11880] gspca_main: spca508-2.14.0 probing 041e:4018 [ 968.446721][T14188] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.701728][ T5727] usbhid 3-1:0.0: can't add hid device: -71 [ 968.784747][ T5727] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 968.786001][T16390] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.816766][T16390] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.826345][T16390] bridge_slave_0: entered allmulticast mode [ 969.683878][T11880] gspca_spca508: reg_read err -110 [ 969.689085][ T5615] Bluetooth: hci5: command tx timeout [ 969.703848][T11880] gspca_spca508: reg_read err -32 [ 969.767429][T11880] gspca_spca508: reg_read err -32 [ 969.786171][ T5727] usb 3-1: USB disconnect, device number 81 [ 969.793645][T11880] gspca_spca508: reg_read err -32 [ 969.806358][T11880] gspca_spca508: reg write: error -32 [ 969.834096][T11880] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 970.074281][T16390] bridge_slave_0: entered promiscuous mode [ 970.086210][T16390] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.101406][T16390] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.109621][T16390] bridge_slave_1: entered allmulticast mode [ 970.113366][T11880] usb 1-1: USB disconnect, device number 87 [ 970.195160][T16390] bridge_slave_1: entered promiscuous mode [ 970.611570][T16390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.644527][T16390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.895349][ T30] audit: type=1400 audit(1783551128.647:1153): avc: denied { append } for pid=16462 comm="syz.1.2884" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 970.930468][T16390] team0: Port device team_slave_0 added [ 970.949175][T16390] team0: Port device team_slave_1 added [ 971.034369][T14188] bridge_slave_1: left allmulticast mode [ 971.108590][T14188] bridge_slave_1: left promiscuous mode [ 971.127158][T14188] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.163119][T14188] bridge_slave_0: left allmulticast mode [ 971.166364][T16471] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2886'. [ 971.178847][T14188] bridge_slave_0: left promiscuous mode [ 971.179826][T16472] netlink: 'syz.2.2885': attribute type 1 has an invalid length. [ 971.199226][T14188] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.283230][ T30] audit: type=1400 audit(1783551129.037:1154): avc: denied { write } for pid=16457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.315237][T11880] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 971.559200][T11880] usb 2-1: unable to get BOS descriptor or descriptor too short [ 971.608422][T11880] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 971.679566][T11880] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 971.767559][T11880] usb 2-1: string descriptor 0 read error: -22 [ 971.774214][ T5615] Bluetooth: hci5: command tx timeout [ 971.793204][T11880] usb 2-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 971.832104][ T30] audit: type=1400 audit(1783551129.557:1155): avc: denied { write } for pid=16479 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.849253][T11880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.093937][T16483] netlink: 'syz.0.2883': attribute type 1 has an invalid length. [ 972.104676][T14188] bond1 (unregistering): (slave geneve3): Releasing active interface [ 972.412930][T14188] bond1 (unregistering): Released all slaves [ 972.434335][T14188] bond2 (unregistering): Released all slaves [ 972.442038][T16491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16491 comm=syz.0.2883 [ 972.608880][T16390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.615932][T16390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.643158][T16390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.660312][T16493] netlink: 'syz.0.2883': attribute type 21 has an invalid length. [ 972.680176][T16493] IPv6: NLM_F_CREATE should be specified when creating new route [ 972.690202][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 972.715161][T16390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.722290][T16390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.748309][T16390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.710590][T16462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 973.853545][ T5615] Bluetooth: hci5: command tx timeout [ 973.945909][T11880] usb 2-1: Can't get UAC3 power state for id 10 [ 973.990356][T11880] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 974.015241][T16491] bond3: (slave geneve2): making interface the new active one [ 974.037472][T16497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.061156][T16491] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 974.071562][T11880] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 974.090171][T11880] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 974.109947][T11880] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 974.118074][T16497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.220570][T11880] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 974.293087][T11880] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 974.331564][T14178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 974.340406][T14188] tipc: Disabling bearer [ 974.363119][T14188] tipc: Left network mode [ 975.013424][T11880] usb 2-1: USB disconnect, device number 77 [ 975.082281][T16390] hsr_slave_0: entered promiscuous mode [ 975.135534][T16390] hsr_slave_1: entered promiscuous mode [ 975.154876][T16390] debugfs: 'hsr0' already exists in 'hsr' [ 975.184880][T16390] Cannot create hsr debugfs directory [ 975.220506][T10155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 975.239395][T10155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 975.291871][ T30] audit: type=1400 audit(1783551133.017:1156): avc: denied { create } for pid=16514 comm="syz.1.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 975.566765][ T30] audit: type=1400 audit(1783551133.327:1157): avc: denied { write } for pid=16499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.628122][T16531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.637583][T16531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.697771][ T30] audit: type=1400 audit(1783551133.447:1158): avc: denied { write } for pid=16533 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.744176][T10155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 975.786116][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 975.943939][T16101] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 976.088871][T14186] smbdirect: ib_dev[syz] removed [ 976.403842][T16556] input: syz1 as /devices/virtual/input/input49 [ 976.418427][T14188] hsr_slave_0: left promiscuous mode [ 976.454146][T16101] usb 3-1: Using ep0 maxpacket: 16 [ 976.473216][T16101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 976.483953][T14188] hsr_slave_1: left promiscuous mode [ 976.491166][T14188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.497214][T16101] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.537156][T16101] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 976.550534][T16101] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 976.587302][T14188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.626663][T16101] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 976.636247][T16101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.660806][T16101] usb 3-1: Product: syz [ 976.948722][T16101] usb 3-1: Manufacturer: syz [ 976.969703][T16101] usb 3-1: SerialNumber: syz [ 977.070366][T16565] SET target dimension over the limit! [ 977.121232][ T30] audit: type=1400 audit(1783551134.887:1159): avc: denied { write } for pid=16544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 977.233594][T16101] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 977.269833][T16101] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 978.484857][T11880] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 978.499913][T16101] usb 3-1: USB disconnect, device number 82 [ 978.677725][ T30] audit: type=1400 audit(1783551136.447:1160): avc: denied { write } for pid=16573 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 978.723027][ T9788] udevd[9788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 978.772531][T11880] usb 2-1: Using ep0 maxpacket: 32 [ 978.780785][T11880] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 978.797685][T11880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.814430][T11880] usb 2-1: Product: syz [ 978.822855][T11880] usb 2-1: Manufacturer: syz [ 978.827577][T11880] usb 2-1: SerialNumber: syz [ 978.885457][T11880] usb 2-1: config 0 descriptor?? [ 978.930831][T14178] smbdirect: ib_dev[syz1] removed [ 979.120026][ T5727] usb 2-1: USB disconnect, device number 78 [ 979.143615][ T5713] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 979.154762][T14188] team0 (unregistering): Port device team_slave_1 removed [ 979.205191][T14188] team0 (unregistering): Port device team_slave_0 removed [ 979.422816][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 979.435757][ T5713] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.451787][ T5713] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 979.453283][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 979.472734][ T5713] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 979.494146][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.518869][ T5713] usb 3-1: Product: syz [ 979.532072][ T5713] usb 3-1: Manufacturer: syz [ 979.552317][ T5713] usb 3-1: SerialNumber: syz [ 979.586013][ T30] audit: type=1400 audit(1783551137.307:1161): avc: denied { create } for pid=16589 comm="syz.4.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 979.634584][ T5713] usb 3-1: 0:2 : does not exist [ 979.756576][T16597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2907'. [ 979.818718][T16597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'. [ 980.029348][T16601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2906'. [ 980.128334][ T30] audit: type=1400 audit(1783551137.887:1162): avc: denied { write } for pid=16588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 980.232803][ T30] audit: type=1400 audit(1783551138.007:1163): avc: denied { write } for pid=16608 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 980.322405][ T5713] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 980.334379][T16578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2904'. [ 980.482776][T16613] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 2, id = 0 [ 980.494078][T16609] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2904'. [ 980.519863][T16101] usb 3-1: USB disconnect, device number 83 [ 980.533654][ T5713] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 980.577020][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 981.066230][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 981.079567][ T5713] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 981.114967][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.142895][ T5713] usb 1-1: Product: syz [ 981.151795][T14188] IPVS: stop unused estimator thread 0... [ 981.171786][ T5713] usb 1-1: Manufacturer: syz [ 981.215083][ T5713] usb 1-1: SerialNumber: syz [ 981.246731][ T5713] usb 1-1: config 0 descriptor?? [ 981.284243][ T5713] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 981.388840][ T30] audit: type=1400 audit(1783551139.147:1164): avc: denied { write } for pid=16611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 981.581487][T16630] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 981.614698][ T30] audit: type=1400 audit(1784075427.389:1165): avc: denied { write } for pid=16628 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1087.036669][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1087.036688][ C1] rcu: 0-...!: (1 GPs behind) idle=9d14/1/0x4000000000000000 softirq=85953/85953 fqs=59 [ 1087.037485][ C1] rcu: (detected by 1, t=10505 jiffies, g=90513, q=413 ncpus=2) [ 1087.037504][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1087.037529][ C0] NMI backtrace for cpu 0 [ 1087.037542][ C0] CPU: 0 UID: 0 PID: 30 Comm: kauditd Tainted: G L syzkaller #0 PREEMPT(full) [ 1087.037561][ C0] Tainted: [L]=SOFTLOCKUP [ 1087.037566][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1087.037574][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2a/0x70 [ 1087.037592][ C0] Code: f3 0f 1e fa 65 8b 05 e5 6f 59 12 48 8b 34 24 65 48 8b 15 c1 6f 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 cc cc cc cc 8b 82 24 17 00 00 85 c0 74 f1 8b 82 f8 16 00 00 83 [ 1087.037605][ C0] RSP: 0018:ffffc90000007e90 EFLAGS: 00000046 [ 1087.037618][ C0] RAX: 0000000000010001 RBX: dffffc0000000000 RCX: ffffc90000007dac [ 1087.037627][ C0] RDX: ffff88801f2dca80 RSI: ffffffff81f57f07 RDI: ffff88801f2dcf44 [ 1087.037636][ C0] RBP: ffff88801f2dd608 R08: 0000000000000001 R09: 0000000000000000 [ 1087.037644][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880748a0300 [ 1087.037653][ C0] R13: 0000000000000001 R14: ffff8880b8428540 R15: ffff8880b8428590 [ 1087.037662][ C0] FS: 0000000000000000(0000) GS:ffff888123dec000(0000) knlGS:0000000000000000 [ 1087.037676][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1087.037685][ C0] CR2: 000000110c3730fb CR3: 0000000075e6a000 CR4: 00000000003526f0 [ 1087.037694][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1087.037703][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1087.037712][ C0] Call Trace: [ 1087.037717][ C0] [ 1087.037722][ C0] __hrtimer_run_queues+0x147/0x9c0 [ 1087.037745][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1087.037769][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1087.037788][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1087.037807][ C0] [ 1087.037812][ C0] [ 1087.037817][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1087.037832][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 1087.037852][ C0] Code: 00 e8 11 26 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 1f d2 21 00 48 85 ed 0f 85 d7 01 00 00 e8 71 d7 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 1087.037863][ C0] RSP: 0018:ffffc90000a67980 EFLAGS: 00000293 [ 1087.037874][ C0] RAX: ffffffff8f9a9d58 RBX: ffffffff8f9a9d00 RCX: ffffffff81e7f8c1 [ 1087.037883][ C0] RDX: ffff88801f2dca80 RSI: ffffffff81e7f8cf RDI: ffff88801f2dca80 [ 1087.037892][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1087.037900][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000002067 [ 1087.037908][ C0] R13: ffffffff8f9a9d58 R14: ffffc90000a67a00 R15: dffffc0000000000 [ 1087.037920][ C0] ? console_flush_one_record+0xab1/0xe50 [ 1087.037937][ C0] ? console_flush_one_record+0xabf/0xe50 [ 1087.037959][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1087.037979][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1087.038000][ C0] console_unlock+0x103/0x260 [ 1087.038029][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1087.038049][ C0] ? _printk+0xcf/0x110 [ 1087.038064][ C0] vprintk_emit+0x407/0x6b0 [ 1087.038082][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1087.038099][ C0] ? find_held_lock+0x2b/0x80 [ 1087.038118][ C0] ? ___ratelimit+0x77b/0xae0 [ 1087.038136][ C0] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 1087.038154][ C0] _printk+0xcf/0x110 [ 1087.038165][ C0] ? __pfx__printk+0x10/0x10 [ 1087.038177][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1087.038196][ C0] ? __pfx____ratelimit+0x10/0x10 [ 1087.038212][ C0] ? kauditd_hold_skb+0x1c7/0x210 [ 1087.038231][ C0] kauditd_hold_skb.cold+0x3f/0x4e [ 1087.038245][ C0] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 1087.038263][ C0] kauditd_send_queue+0x232/0x2e0 [ 1087.038281][ C0] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 1087.038304][ C0] kauditd_thread+0x645/0xb30 [ 1087.038322][ C0] ? __pfx_kauditd_thread+0x10/0x10 [ 1087.038339][ C0] ? rcu_is_watching+0x12/0xc0 [ 1087.038356][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1087.038378][ C0] ? __kthread_parkme+0x18c/0x230 [ 1087.038396][ C0] ? kthread+0x13a/0x450 [ 1087.038414][ C0] ? __pfx_kauditd_thread+0x10/0x10 [ 1087.038431][ C0] kthread+0x370/0x450 [ 1087.038450][ C0] ? __pfx_kthread+0x10/0x10 [ 1087.038469][ C0] ret_from_fork+0x72b/0xd50 [ 1087.038486][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1087.038503][ C0] ? __switch_to+0x800/0x10f0 [ 1087.038522][ C0] ? __pfx_kthread+0x10/0x10 [ 1087.038541][ C0] ret_from_fork_asm+0x1a/0x30 [ 1087.038565][ C0] [ 1087.039525][ C1] rcu: rcu_preempt kthread starved for 10210 jiffies! g90513 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1087.039545][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1087.039553][ C1] rcu: RCU grace-period kthread stack dump: [ 1087.039560][ C1] task:rcu_preempt state:R running task stack:28808 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1087.039619][ C1] Call Trace: [ 1087.039625][ C1] [ 1087.039636][ C1] __schedule+0x125c/0x6730 [ 1087.039674][ C1] ? __pfx___schedule+0x10/0x10 [ 1087.039694][ C1] ? find_held_lock+0x2b/0x80 [ 1087.039719][ C1] ? schedule+0x225/0x2c0 [ 1087.039744][ C1] schedule+0xdd/0x2c0 [ 1087.039766][ C1] schedule_timeout+0x127/0x280 [ 1087.039785][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1087.039811][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1087.039841][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1087.039863][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1087.039886][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1087.039906][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1087.039928][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1087.039950][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1087.039967][ C1] ? rcu_is_watching+0x12/0xc0 [ 1087.039990][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1087.040015][ C1] rcu_gp_kthread+0x179/0x230 [ 1087.040034][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1087.040052][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1087.040076][ C1] ? __kthread_parkme+0x18c/0x230 [ 1087.040102][ C1] ? kthread+0x13a/0x450 [ 1087.040125][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1087.040142][ C1] kthread+0x370/0x450 [ 1087.040166][ C1] ? __pfx_kthread+0x10/0x10 [ 1087.040193][ C1] ret_from_fork+0x72b/0xd50 [ 1087.040215][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1087.040238][ C1] ? __switch_to+0x800/0x10f0 [ 1087.040264][ C1] ? __pfx_kthread+0x10/0x10 [ 1087.040290][ C1] ret_from_fork_asm+0x1a/0x30 [ 1087.040325][ C1] [ 1087.040332][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1087.040343][ C1] CPU: 1 UID: 0 PID: 5628 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1087.040365][ C1] Tainted: [L]=SOFTLOCKUP [ 1087.040372][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1087.040381][ C1] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0 [ 1087.040400][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 a9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 [ 1087.040416][ C1] RSP: 0018:ffffc90002ef75f0 EFLAGS: 00000293 [ 1087.040430][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd3abd [ 1087.040440][ C1] RDX: ffff88807e772540 RSI: ffffffff81fd3a97 RDI: ffff88807e772540 [ 1087.040452][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 1087.040462][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1087.040472][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 1087.040484][ C1] FS: 00007fee7027b880(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 1087.040502][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1087.040514][ C1] CR2: 000055e6c882cff0 CR3: 0000000059ef4000 CR4: 00000000003526f0 [ 1087.040525][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1087.040536][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1087.040548][ C1] Call Trace: [ 1087.040554][ C1] [ 1087.040564][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1087.040590][ C1] ? free_pgd_range+0x2a0/0x10d0 [ 1087.040609][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1087.040638][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1087.040660][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1087.040681][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 1087.040706][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 1087.040726][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1087.040753][ C1] tlb_finish_mmu+0x3fe/0x810 [ 1087.040779][ C1] unmap_region+0x2d9/0x3b0 [ 1087.040808][ C1] ? __pfx_unmap_region+0x10/0x10 [ 1087.040842][ C1] ? mas_store_gfp+0xfb6/0x1350 [ 1087.040866][ C1] vms_complete_munmap_vmas+0xa4b/0xdd0 [ 1087.040898][ C1] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 1087.040930][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 1087.040953][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 1087.040982][ C1] do_vmi_align_munmap+0x44f/0x5f0 [ 1087.041010][ C1] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1087.041070][ C1] do_vmi_munmap+0x1f8/0x3e0 [ 1087.041098][ C1] __vm_munmap+0x196/0x390 [ 1087.041116][ C1] ? __pfx___vm_munmap+0x10/0x10 [ 1087.041148][ C1] __x64_sys_munmap+0x59/0x80 [ 1087.041169][ C1] do_syscall_64+0x115/0x870 [ 1087.041192][ C1] ? clear_bhb_loop+0x40/0x90 [ 1087.041213][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.041230][ C1] RIP: 0033:0x7fee6fb1e097 [ 1087.041246][ C1] Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48 [ 1087.041262][ C1] RSP: 002b:00007ffd6dab9f98 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1087.041278][ C1] RAX: ffffffffffffffda RBX: 000055e6c8600f90 RCX: 00007fee6fb1e097 [ 1087.041290][ C1] RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007fee6ee00000 [ 1087.041300][ C1] RBP: 000055e6c85fe2c0 R08: 000055e6c883e660 R09: 0000000000000006 [ 1087.041311][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000055e688684588 [ 1087.041322][ C1] R13: 00007ffd6daba020 R14: 0000000000000000 R15: 0000000000000000 [ 1087.041346][ C1] [ 1233.850899][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 247s! [udevd:5628] [ 1233.850921][ C1] Modules linked in: [ 1233.850931][ C1] irq event stamp: 1756238 [ 1233.850938][ C1] hardirqs last enabled at (1756237): [] irqentry_exit+0x24d/0xa00 [ 1233.850968][ C1] hardirqs last disabled at (1756238): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 1233.850992][ C1] softirqs last enabled at (1756232): [] __irq_exit_rcu+0x162/0x210 [ 1233.851014][ C1] softirqs last disabled at (1756167): [] __irq_exit_rcu+0x162/0x210 [ 1233.851042][ C1] CPU: 1 UID: 0 PID: 5628 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1233.851064][ C1] Tainted: [L]=SOFTLOCKUP [ 1233.851071][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1233.851080][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 1233.851098][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 0b 99 b9 f5 cc [ 1233.851114][ C1] RSP: 0018:ffffc90002ef75e8 EFLAGS: 00000293 [ 1233.851127][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd3abd [ 1233.851138][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88807e772540 [ 1233.851148][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 1233.851159][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1233.851169][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 1233.851180][ C1] FS: 00007fee7027b880(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 1233.851198][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1233.851208][ C1] CR2: 000055e6c882cff0 CR3: 0000000059ef4000 CR4: 00000000003526f0 [ 1233.851219][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1233.851229][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1233.851239][ C1] Call Trace: [ 1233.851245][ C1] [ 1233.851252][ C1] smp_call_function_many_cond+0x5ad/0x16c0 [ 1233.851275][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1233.851300][ C1] ? free_pgd_range+0x2a0/0x10d0 [ 1233.851319][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1233.851347][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1233.851368][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1233.851388][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 1233.851412][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 1233.851432][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1233.851458][ C1] tlb_finish_mmu+0x3fe/0x810 [ 1233.851483][ C1] unmap_region+0x2d9/0x3b0 [ 1233.851512][ C1] ? __pfx_unmap_region+0x10/0x10 [ 1233.851543][ C1] ? mas_store_gfp+0xfb6/0x1350 [ 1233.851565][ C1] vms_complete_munmap_vmas+0xa4b/0xdd0 [ 1233.851596][ C1] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 1233.851626][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 1233.851649][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 1233.851677][ C1] do_vmi_align_munmap+0x44f/0x5f0 [ 1233.851704][ C1] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1233.851762][ C1] do_vmi_munmap+0x1f8/0x3e0 [ 1233.851789][ C1] __vm_munmap+0x196/0x390 [ 1233.851807][ C1] ? __pfx___vm_munmap+0x10/0x10 [ 1233.851839][ C1] __x64_sys_munmap+0x59/0x80 [ 1233.851858][ C1] do_syscall_64+0x115/0x870 [ 1233.851880][ C1] ? clear_bhb_loop+0x40/0x90 [ 1233.851901][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.851918][ C1] RIP: 0033:0x7fee6fb1e097 [ 1233.851933][ C1] Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48 [ 1233.851947][ C1] RSP: 002b:00007ffd6dab9f98 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1233.851962][ C1] RAX: ffffffffffffffda RBX: 000055e6c8600f90 RCX: 00007fee6fb1e097 [ 1233.851972][ C1] RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007fee6ee00000 [ 1233.851982][ C1] RBP: 000055e6c85fe2c0 R08: 000055e6c883e660 R09: 0000000000000006 [ 1233.851991][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000055e688684588 [ 1233.852001][ C1] R13: 00007ffd6daba020 R14: 0000000000000000 R15: 0000000000000000 [ 1233.852025][ C1] [ 1233.852033][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1233.852058][ C0] NMI backtrace for cpu 0 [ 1233.852068][ C0] CPU: 0 UID: 0 PID: 30 Comm: kauditd Tainted: G L syzkaller #0 PREEMPT(full) [ 1233.852086][ C0] Tainted: [L]=SOFTLOCKUP [ 1233.852090][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1233.852098][ C0] RIP: 0010:kasan_check_range+0x6e/0x1e0 [ 1233.852116][ C0] Code: 4c 8d 54 37 ff 48 89 fd 48 b8 00 00 00 00 00 fc ff df 4d 89 d1 48 c1 ed 03 49 c1 e9 03 48 01 c5 49 01 c1 48 89 e8 49 8d 59 01 <48> 89 da 48 29 ea 48 83 fa 10 0f 8e db 00 00 00 41 89 eb 41 83 e3 [ 1233.852128][ C0] RSP: 0018:ffffc90000007c98 EFLAGS: 00000086 [ 1233.852138][ C0] RAX: fffff52000000f9c RBX: fffff52000000f9d RCX: ffffffff81e5b2e8 [ 1233.852147][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000007ce0 [ 1233.852155][ C0] RBP: fffff52000000f9c R08: 0000000000000001 R09: fffff52000000f9c [ 1233.852164][ C0] R10: ffffc90000007ce3 R11: 0000000000000000 R12: 1ffff92000000f98 [ 1233.852173][ C0] R13: ffffffff9b9bdc68 R14: 0000000000000001 R15: 1ffff92000000fb2 [ 1233.852182][ C0] FS: 0000000000000000(0000) GS:ffff888123dec000(0000) knlGS:0000000000000000 [ 1233.852197][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1233.852205][ C0] CR2: 000000110c3730fb CR3: 0000000075e6a000 CR4: 00000000003526f0 [ 1233.852214][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1233.852222][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1233.852231][ C0] Call Trace: [ 1233.852235][ C0] [ 1233.852241][ C0] do_raw_spin_lock+0x128/0x260 [ 1233.852259][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1233.852275][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 1233.852293][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 1233.852309][ C0] ? debug_object_activate+0x144/0x4b0 [ 1233.852324][ C0] debug_object_activate+0x144/0x4b0 [ 1233.852339][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1233.852356][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1233.852374][ C0] enqueue_hrtimer+0x75/0x2f0 [ 1233.852393][ C0] __hrtimer_run_queues+0x6ed/0x9c0 [ 1233.852414][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1233.852438][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1233.852458][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1233.852476][ C0] [ 1233.852480][ C0] [ 1233.852485][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1233.852500][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 1233.852519][ C0] Code: 00 e8 11 26 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 1f d2 21 00 48 85 ed 0f 85 d7 01 00 00 e8 71 d7 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 1233.852531][ C0] RSP: 0018:ffffc90000a67980 EFLAGS: 00000293 [ 1233.852541][ C0] RAX: ffffffff8f9a9d58 RBX: ffffffff8f9a9d00 RCX: ffffffff81e7f8c1 [ 1233.852550][ C0] RDX: ffff88801f2dca80 RSI: ffffffff81e7f8cf RDI: ffff88801f2dca80 [ 1233.852559][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1233.852568][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000002067 [ 1233.852576][ C0] R13: ffffffff8f9a9d58 R14: ffffc90000a67a00 R15: dffffc0000000000 [ 1233.852588][ C0] ? console_flush_one_record+0xab1/0xe50 [ 1233.852606][ C0] ? console_flush_one_record+0xabf/0xe50 [ 1233.852628][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1233.852648][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1233.852669][ C0] console_unlock+0x103/0x260 [ 1233.852686][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1233.852705][ C0] ? _printk+0xcf/0x110 [ 1233.852720][ C0] vprintk_emit+0x407/0x6b0 [ 1233.852737][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1233.852755][ C0] ? find_held_lock+0x2b/0x80 [ 1233.852773][ C0] ? ___ratelimit+0x77b/0xae0 [ 1233.852790][ C0] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 1233.852809][ C0] _printk+0xcf/0x110 [ 1233.852822][ C0] ? __pfx__printk+0x10/0x10 [ 1233.852834][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1233.852852][ C0] ? __pfx____ratelimit+0x10/0x10 [ 1233.852869][ C0] ? kauditd_hold_skb+0x1c7/0x210 [ 1233.852888][ C0] kauditd_hold_skb.cold+0x3f/0x4e [ 1233.852902][ C0] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 1233.852920][ C0] kauditd_send_queue+0x232/0x2e0 [ 1233.852938][ C0] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 1233.852957][ C0] kauditd_thread+0x645/0xb30 [ 1233.852975][ C0] ? __pfx_kauditd_thread+0x10/0x10 [ 1233.852998][ C0] ? rcu_is_watching+0x12/0xc0 [ 1233.853015][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1233.853036][ C0] ? __kthread_parkme+0x18c/0x230 [ 1233.853054][ C0] ? kthread+0x13a/0x450 [ 1233.853071][ C0] ? __pfx_kauditd_thread+0x10/0x10 [ 1233.853088][ C0] kthread+0x370/0x450 [ 1233.853106][ C0] ? __pfx_kthread+0x10/0x10 [ 1233.853124][ C0] ret_from_fork+0x72b/0xd50 [ 1233.853141][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1233.853158][ C0] ? __switch_to+0x800/0x10f0 [ 1233.853177][ C0] ? __pfx_kthread+0x10/0x10 [ 1233.853196][ C0] ret_from_fork_asm+0x1a/0x30 [ 1233.853218][ C0] [ 1233.854056][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 1233.854069][ C1] CPU: 1 UID: 0 PID: 5628 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1233.854090][ C1] Tainted: [L]=SOFTLOCKUP [ 1233.854097][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1233.854106][ C1] Call Trace: [ 1233.854113][ C1] [ 1233.854120][ C1] dump_stack_lvl+0x100/0x190 [ 1233.854141][ C1] vpanic+0x552/0x970 [ 1233.854159][ C1] ? __pfx_vpanic+0x10/0x10 [ 1233.854178][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1233.854203][ C1] panic+0xd1/0xe0 [ 1233.854220][ C1] ? __pfx_panic+0x10/0x10 [ 1233.854237][ C1] ? __pfx_printk_trigger_flush+0x10/0x10 [ 1233.854263][ C1] ? wq_watchdog_touch+0xec/0x1a0 [ 1233.854287][ C1] ? watchdog_timer_fn.cold+0x5/0x25 [ 1233.854305][ C1] ? watchdog_timer_fn+0x702/0x7a0 [ 1233.854326][ C1] watchdog_timer_fn.cold+0x16/0x25 [ 1233.854346][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 1233.854365][ C1] __hrtimer_run_queues+0x13f/0x9c0 [ 1233.854397][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1233.854432][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1233.854457][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1233.854479][ C1] [ 1233.854485][ C1] [ 1233.854497][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1233.854516][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 1233.854533][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 0b 99 b9 f5 cc [ 1233.854547][ C1] RSP: 0018:ffffc90002ef75e8 EFLAGS: 00000293 [ 1233.854560][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd3abd [ 1233.854571][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88807e772540 [ 1233.854582][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 1233.854593][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1233.854603][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 1233.854621][ C1] ? smp_call_function_many_cond+0x5ad/0x16c0 [ 1233.854645][ C1] smp_call_function_many_cond+0x5ad/0x16c0 [ 1233.854666][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1233.854692][ C1] ? free_pgd_range+0x2a0/0x10d0 [ 1233.854710][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1233.854739][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1233.854760][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1233.854781][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 1233.854805][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 1233.854826][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1233.854852][ C1] tlb_finish_mmu+0x3fe/0x810 [ 1233.854879][ C1] unmap_region+0x2d9/0x3b0 [ 1233.854902][ C1] ? __pfx_unmap_region+0x10/0x10 [ 1233.854934][ C1] ? mas_store_gfp+0xfb6/0x1350 [ 1233.854957][ C1] vms_complete_munmap_vmas+0xa4b/0xdd0 [ 1233.854989][ C1] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 1233.855020][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 1233.855044][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 1233.855073][ C1] do_vmi_align_munmap+0x44f/0x5f0 [ 1233.855101][ C1] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1233.855161][ C1] do_vmi_munmap+0x1f8/0x3e0 [ 1233.855189][ C1] __vm_munmap+0x196/0x390 [ 1233.855207][ C1] ? __pfx___vm_munmap+0x10/0x10 [ 1233.855239][ C1] __x64_sys_munmap+0x59/0x80 [ 1233.855259][ C1] do_syscall_64+0x115/0x870 [ 1233.855281][ C1] ? clear_bhb_loop+0x40/0x90 [ 1233.855302][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.855319][ C1] RIP: 0033:0x7fee6fb1e097 [ 1233.855332][ C1] Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48 [ 1233.855348][ C1] RSP: 002b:00007ffd6dab9f98 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1233.855363][ C1] RAX: ffffffffffffffda RBX: 000055e6c8600f90 RCX: 00007fee6fb1e097 [ 1233.855375][ C1] RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007fee6ee00000 [ 1233.855386][ C1] RBP: 000055e6c85fe2c0 R08: 000055e6c883e660 R09: 0000000000000006 [ 1233.855397][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000055e688684588 [ 1233.855407][ C1] R13: 00007ffd6daba020 R14: 0000000000000000 R15: 0000000000000000 [ 1233.855432][ C1] [ 1234.951929][ C1] Shutting down cpus with NMI [ 1234.952139][ C1] Kernel Offset: disabled