last executing test programs: 5m35.853124479s ago: executing program 4 (id=1167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$vga_arbiter(r1, &(0x7f0000000280), 0xf) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) 5m34.521395458s ago: executing program 4 (id=1168): ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc1}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) socket(0x29, 0xa, 0x6) mq_unlink(0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) close(r5) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x7, 0x5, 0x5, 0x10001, 0x7, 0x7}, {0x4, 0x2, 0xffffffffffffffff, 0x200, 0x5, 0x1}], ['\x00']}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0xffd, 0x3a}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast1, 0x4a7a}, 0x1c) r7 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) r10 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r10, 0x40085112, 0x0) getdents(r9, &(0x7f0000000080)=""/43, 0x2b) 5m32.205363628s ago: executing program 4 (id=1176): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x3, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x1, 0x2}, {}]}, @union]}, {0x0, [0x61]}}, 0x0, 0x4b, 0x0, 0x1}, 0x20) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 5m30.605524655s ago: executing program 4 (id=1181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x1) accept4(r1, 0x0, 0x0, 0x80800) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x100000008, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) write$P9_RGETLOCK(r2, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) io_setup(0x8f0, &(0x7f0000002400)) syz_emit_ethernet(0xf6, &(0x7f00000003c0)={@local, @link_local, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xe4, 0x66, 0x80, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x3}, {"507949c5d9a64e2b246e18b9f27dc952937860e194e0b3a6352048a15613c9c6868c609b5c7f5c0882401cddfbc659b0612a7054eecbb3d80ee113ebea2a52db5e04b691d83ba17d0b58c6e44c4047d80e197cfa14a69275f9f3e1f4fb54c9bbdd95f932d7ab5e547d4be84684f83b4bfb703e96d8b066767e07f551f4187086f4fe5acd649a0719ecba6c2755af4d557cd6d1c0aebc25415d276dca13b633a551525b9d8ee7f77b9d964cdb0a06a3b9aaddb421a4c69a7bfd6081eb"}}}}}}, 0x0) 5m27.517319503s ago: executing program 4 (id=1189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000140)=0x1, 0x0, 0x4) socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x2, 0xfffffdffffffffff, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x20, 0x3, "8d6880"}}) sched_setattr(r4, &(0x7f00000002c0)={0x38, 0x3, 0x41, 0x2, 0xfffffffa, 0x8, 0x1, 0x6, 0x243, 0x8}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000380)=r6) syz_io_uring_setup(0x4ad9, &(0x7f0000000300)={0x0, 0x9731, 0x4000, 0x3, 0x162}, &(0x7f00000003c0), 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r8, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0xfffffffffffffffe, 0xfffffffffefffffc, 0x9]}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$sw_sync(0xffffff9c, &(0x7f0000000100), 0x46140, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r9, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) 5m27.375950075s ago: executing program 4 (id=1191): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) setrlimit(0xf, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd29, 0xfffffffc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="2e0f01c866b9800000c00f326635000400000f300f20e06635800000000f22e0360fc77df3ff9e0000f2d99806000fa7c0b800008ed866db440026da02", 0x3d}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xdddd1000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) r9 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x141102) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) 5m26.867194492s ago: executing program 32 (id=1191): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) setrlimit(0xf, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd29, 0xfffffffc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="2e0f01c866b9800000c00f326635000400000f300f20e06635800000000f22e0360fc77df3ff9e0000f2d99806000fa7c0b800008ed866db440026da02", 0x3d}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xdddd1000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) r9 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x141102) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) 54.239329832s ago: executing program 5 (id=2102): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) r2 = epoll_create(0x3ff) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001480)={0x40000002}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0xd80}, 0x1, 0x0, 0x0, 0x40c0}, 0xc000) accept4$tipc(r5, 0x0, 0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x10}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) lsetxattr$security_capability(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x29e}, {0x1, 0x2}]}, 0x18, 0x1) 51.952957421s ago: executing program 5 (id=2108): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0xfffd, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2, 0x0, 0x0, 0x2d9}}}}}}, 0x0) 51.736791057s ago: executing program 5 (id=2111): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = mq_open(&(0x7f00005a1ffb)='et\x938G', 0x42, 0x0, 0x0) mq_notify(r2, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) 47.776767001s ago: executing program 5 (id=2122): openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi4\x00', 0x401, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xd1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020002000003be8c5ee17688a8002b00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) r2 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@private=0xa110102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e23, 0x202, 0x2, 0x20, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0x4d5, 0x32}, @in=@multicast1, {0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'aegis128-generic\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000c, 0x12, r2, 0xbf63a000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x6f4828047ea17aca}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)={0x8c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0xbab58032ce08cbfd, {{0x42}}}, 0x10) fstat(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) r8 = dup(r7) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x800038, 0x7, 0x3, 0x180, 0x6, 0x10, 0xf1, 0x100000001, 0x1, 0xca0, 0xffffffffffffffff, 0x2000000002c, 0x4, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x7ff, 0xa7c, 0x68ff, 0x7, 0x100008000000006, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0xff, 0x42, 0x9, 0x75, 0x6, 0x36, 0x0, 0x2, 0xbc}, {0x100000, 0x58000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x4, 0x1, 0xa2, 0x5, 0x5}, {0x200000, 0xeeee0000, 0x9, 0x7, 0x5, 0x7, 0xb, 0xff, 0x8, 0x7, 0xc, 0x7}, {0xf000, 0x30000, 0xf, 0x3, 0x16, 0x7, 0xe, 0xb, 0xc, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x6, 0xa0, 0xb, 0x8, 0x1, 0xa0, 0x82, 0x2, 0x1, 0x7}, {0x60000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x3, 0x3, 0x8, 0x0, 0x40, 0x74}, {0xdddd0000, 0x25000, 0x0, 0x5, 0xcd, 0x8, 0x1, 0x9, 0x2, 0xc, 0xb0, 0xa1}, {0xeeee0000, 0x30}, {0x40000, 0x7}, 0xa0000039, 0x0, 0x0, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) setns(r8, 0x10000000) quotactl_fd$Q_SETINFO(r8, 0xffffffff80000602, r5, 0x0) 47.453218579s ago: executing program 5 (id=2126): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x3ffff, 0x1, 0x2000007}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000008c0), 0x2000006c, r2}, 0x38) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)='B', 0x5ea}], 0x100000000000004b) 46.856088947s ago: executing program 5 (id=2130): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) r7 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') read$msr(r9, &(0x7f0000000000)=""/57, 0x39) 46.101239461s ago: executing program 33 (id=2130): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) r7 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') read$msr(r9, &(0x7f0000000000)=""/57, 0x39) 29.396671234s ago: executing program 0 (id=2178): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xf}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xdc0, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) dup(r3) close_range(r0, 0xffffffffffffffff, 0x0) 28.853988814s ago: executing program 0 (id=2179): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000200)={@remote, @private, @empty}, &(0x7f00000002c0)=0xc) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14ff06000000e60de6b319f99bf1dde9cc545752311193dc50f96e89cfd81d6b4dc267ce39e46843dc16a43a232038eeae72c10a7bb997d41102b12bc11c15e7de643606d57bc426ddaff7b1294e8b9e28502183911b443446a0be16da97795fb5ce7b00"/112], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x189900, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x891}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r5, &(0x7f0000000340)=""/232, 0xe8, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) 26.851756271s ago: executing program 0 (id=2186): r0 = socket$nl_generic(0x10, 0x3, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x2000, 0x502) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/138, 0x8a}], 0x1, 0xbc, 0xfffffffb) read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) r2 = syz_genetlink_get_family_id$batadv(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000640)=[@in6={0xa, 0x4e23, 0x6, @loopback, 0x2ed}], 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x303, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 25.245398368s ago: executing program 0 (id=2191): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900010027bd7000fddbdf2500", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x20, 0x2, 0x41}, 0x2c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_TMR_START(r3, 0x5402) ioctl$SNDCTL_TMR_STOP(r3, 0x5403) r4 = socket$kcm(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000480)={{}, 0x0, 0x0, @unused=[0x0, 0x9, 0x4, 0xffff], @name="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"}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000100)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0xe000000000000000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 25.049564073s ago: executing program 0 (id=2192): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010818"], 0x0, 0x3b, 0x0, 0x0, 0x9}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000000000000000000300000000030000000200000000000000000000000000000105f4cc7480000000020000000000000c0400000000002e"], 0x0, 0x50}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000700)=0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000006c0)=@filename='./file0\x00', r2, &(0x7f0000000740)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) sched_setscheduler(0x0, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) socket$netlink(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000080)=0x1, 0xff79) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@private2, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000600)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r7, &(0x7f0000000640)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x1008, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) preadv(r5, &(0x7f0000003900)=[{&(0x7f00000003c0)=""/124, 0x7c}], 0x1, 0x2f, 0x7ff) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000380)) 23.695438187s ago: executing program 0 (id=2198): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$kcm(0x11, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000000", @ANYRESDEC=r0, @ANYBLOB='\x00'/20, @ANYRES16=r0, @ANYRES32, @ANYBLOB="00000000030000000000000000000000000000720000000000000000"], 0x50) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4a173eaa) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000002680), 0x2, 0x2) syz_open_procfs(0x0, 0x0) socket(0x10, 0x803, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) 13.092176982s ago: executing program 1 (id=2223): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0xffff, {"2ac7d502ff049538909f874a88417c00", "f97700000a000000000000000300", "47010b1889b9ff01ffff470300"}, 0x4, 0x4}) 12.820117839s ago: executing program 1 (id=2227): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x40, 0x9, 0x56, {0x56, 0x5, "454cd1c023c331d5d6ad79f3e548cac21a41bd3d10f58430f7cdb37f035aea9120b8521e5d98b8ed99f35b13d336b9225f954fe536c1339caec1b9abb47aecfc94645d009d7f4d5c8d93985d4d9c521190df5784"}}, &(0x7f0000000080)={0x0, 0x3, 0xcd, @string={0xcd, 0x3, "3980f611bc5f1b925d31791a045ee2e969d11e1d2396ebccb94eb759836f6b57986a11b95e5820768e3d865bedc0ad1f0f741d070c5fd43e4211de36b547f31a4709c063309b80d2d9dca4318f75c6716c4708b3095bd504c5905ae19c3c2da195c120bccebe1eb655cce33b29721d09303c76f85be75edbfe713990636769529b69efacc50d93c196b6a90f4e47d3f36d9deaf20971bc558df20fa6e081a062906a8205dfa0a9e7189c7ce03ca83ffaa5396b69c3cb084f9cde0225aeff9361f7ad0b5ad88fb5678e862a"}}}, &(0x7f0000000400)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="00007d00000054076618c0847b306fd994c442421f360ee5781a4479550ae7c083d866881bd915793df6a0aee62b7a1e11c4a25deffedc8ede646d555fb964a83054c80d80a841accd1b4b349005372435cf264af38f74f0cc9ba30e2672c84ddd941b8476a351bda5ab02833cc35ed51cf389e6cec0c70e73ec6006574a9f840947ba06f7c9932134402f"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x7}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "1592230c084fbb139dd95fe56d41f995bb75a16c6749fb0f4d9ffd4165b4309999dadcf86ef8d8e11dbd6016087f4e"}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(0x0, 0x8, 0x0) r1 = open(0x0, 0x6c842, 0x157) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfff8, 0x7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r2, 0x4b30, 0x8000000000000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x80, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x140, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r3}, 0xc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0xd4c, 0x8004, 0x7f, 0xc6ce, 0xfd, "00000807000000f6150000000100", 0x240000, 0x1fd}) ioctl$TIOCSTI(r6, 0x5412, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4c) 10.641242612s ago: executing program 1 (id=2235): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) setrlimit(0xf, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd29, 0xfffffffc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000850) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="2e0f01c866b9800000c00f326635000400000f300f20e06635800000000f22e0360fc77df3ff9e0000f2d99806000fa7c0b800008ed866db440026da02", 0x3d}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xdddd1000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) r9 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x141102) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) 8.51157406s ago: executing program 34 (id=2198): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$kcm(0x11, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000000", @ANYRESDEC=r0, @ANYBLOB='\x00'/20, @ANYRES16=r0, @ANYRES32, @ANYBLOB="00000000030000000000000000000000000000720000000000000000"], 0x50) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4a173eaa) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000002680), 0x2, 0x2) syz_open_procfs(0x0, 0x0) socket(0x10, 0x803, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) 7.928590009s ago: executing program 2 (id=2243): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd41, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x8, 0x0, 0x0}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000a00030091abc12404cf0000140000001100010000000000000000000000000aab0e51b74836dfb02a7e55"], 0x74}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="93", 0x1}], 0x1}}], 0x1, 0x4c000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}]}, 0x30}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000080)) sendmmsg(r7, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 7.881922923s ago: executing program 3 (id=2244): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) (fail_nth: 14) 7.694931471s ago: executing program 1 (id=2245): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB], 0xd0}}, 0x0) ioperm(0x1, 0x9, 0x4) prctl$PR_SET_SECCOMP(0x16, 0xe7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xe) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='ac', @ANYRESHEX=r3]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) 7.641403562s ago: executing program 3 (id=2246): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = mq_open(&(0x7f00005a1ffb)='et\x938G', 0x42, 0x0, 0x0) mq_notify(r3, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) 6.317846187s ago: executing program 3 (id=2247): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = mq_open(&(0x7f00005a1ffb)='et\x938G', 0x42, 0x0, 0x0) mq_notify(r3, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) 6.302966073s ago: executing program 1 (id=2248): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) semctl$SETALL(0x0, 0x0, 0x11, 0x0) rmdir(&(0x7f0000000240)='./file1\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x6}]}) setpriority(0x2, 0xffffffffffffffff, 0x7fff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x40f, &(0x7f0000000000)={0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0x200, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0xfff2, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) 5.370275717s ago: executing program 3 (id=2249): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB='\f\x00'/12], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = io_uring_setup(0x514e, &(0x7f0000000640)={0x0, 0xdbf6, 0x20000, 0x1, 0x1be}) io_uring_setup(0x1052, &(0x7f00000006c0)={0x0, 0xe130, 0x400, 0x0, 0x35f, 0x0, r7}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004679100000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x50) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000", @ANYRES32=r9, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd0000200627269646765"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x298}, 0x1, 0x0, 0x0, 0x40000}, 0x40000080) 4.981502997s ago: executing program 2 (id=2250): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(0x3) 4.636538512s ago: executing program 2 (id=2253): r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'virt_wifi0\x00', {'netpci0\x00'}, 0x1000}) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0xc06c4124, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x8) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) chmod(&(0x7f0000000080)='./file1\x00', 0x1258bab1c8332e9a) creat(&(0x7f00000000c0)='./file1\x00', 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) gettid() r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) geteuid() sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="a40000003300000428bd7000fcdbdf250000000008006800", @ANYRES32=r7, @ANYBLOB="0400678029005e8004008a8004000680dc75e713f97cb6058c8362b710eeae449cd00b7a74c436c3ce32b952070000000c00a58004004c8004008c8049003d8008003e00ac1414aa040029805a913f15d8295f605845ac8b36f3b3af440e4d86822d0fd20d7fb30b5ef095db3e086d7f1146f2c3d6caeb0bb233133098f0a3b4c931b9f298000000532d95842e87b62eeebaed1a888718dfd305ad77b29707a5b9ed2837e839884db641aeb933a5aad59876c25e05126db4a8b4ced57c2236b4958163680efd5f21f99f34622b485a8bd7de34bf28f602960a9109dd815041caf8625070848dc0aba720f27497e785df59421dea67a638bc5becd05977a51eba1b6171fa82d592dee9f1d92d12dea571892e"], 0xa4}, 0x1, 0x0, 0x0, 0x24040001}, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) 4.038346053s ago: executing program 6 (id=2254): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800b00010067656e65766500000c00028005000c000100000008000a00", @ANYRES32=r2, @ANYBLOB="65424b2b7f115535a26a49a9ffb4992278cbcfdc6a4651b2434e0e3404ee3c7c02576105396b403ef42315f54aaa9a0e0b938749bef2bb7bf266b232314b5db259d7b0f2467ef47d3c86b8356294a3ca07936243f028407a9af7ce0ddcd9c9cc64a206f3135f373dd77375b1a9f317a50b99a1a5920fb531eff6496f4c2079cba92d126d0d198003007e7183c30b51636aa75f560356d82fa680f83aaf182cadd23d80e898bf4f4e2d804db457f2c8ea6f0544422ead1b360f7680f984e0bed68745c8e3e743dbedb5049fc69842fa95bc6ea86758db8f367a72c53ac5d0a03e41594612e85eba4e36752b536620fe8c9010afb0ccc266b5d8d443989c47d994229a1b5ade5de15cff0021b4882dbd29f253173948cb2316841e9e4d66a7addd7e6e7558ccb1a9badffe28e049c348b75df961f301760ca125fe264f00f8c2bb25efb1bc0225c3893e3907a3437f8c0bae2e9771f08644c613f326febde2419d78d1336736c26c96ef1d8ab1281118cbb0b251b63da76403dc4c1ae7a94808851a42689e0c6f7c30faf2532043c1bc0b5064593cf05cec0fbdc52df60a06fd4ec46b131af663c9e6b363980fd75c581b1d0c844a953a52abcdb7a56e5816198c4d0a6a2468c4a1ef5b3560d0c6cddb91481712f93e1e50f6b49732c745451bbaf5eeba848d73853e5e6d5b7974e7237598e4cba317ad8f24c907797c45141d1066eaee2388b815a492759b778014afd3c04adab7ea1be93970bdf68790437689071edd7bf6871b88d16ee6e2dba2ce95acc349ee70a533869c6945a5f2f6258b7b41bdb44243ee3a3644e7b3afc16502d95cacb605d67fadc6debdf17ca6a5f5748042154b8704f74d81dc6df5495c816c06a4fab112fbe6031904e86ff392a3375e063a50f5fd03574820d36e0420fa0285b66433eafd85eb5b284acc35b6db226834e91e65348c9bde88cb9f57e18cbefd3ab5696b0d4c0c02cebae15bc9345530711885288b6d24e63624a4ea9d52c5dcbf26c923b3c1ef980b34ee377ca486d4b3afde046b09236f0838e4654d28cd729fbca3953eaca75a4b9d9b8d4efa504c415f2d57f8fd1cee8de921fb10394ee344ded9ef3e0a3abd9ff1b0ec8978b2163d9979a81a15617e9692a765344a85988d860ded0d1abf0460ff0c5e233511a2d8cf201b969f43ee5cebcd1571d8b4b91912a477da1b5a9d4c1345659e5924146acd4df4be0567021f2dcb9f15ada756e25f081b074f7a0320d685edacbb29e7964a4696f7425a"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.76961038s ago: executing program 6 (id=2255): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800b00010067656e65766500000c00028005000c000100000008000a00", @ANYRES32=r2, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.542547188s ago: executing program 3 (id=2256): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB], 0xd0}}, 0x0) ioperm(0x1, 0x9, 0x4) prctl$PR_SET_SECCOMP(0x16, 0xe7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xe) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='ac', @ANYRESHEX=r3]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) 3.539660583s ago: executing program 6 (id=2257): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405668, &(0x7f00000000c0)={0x4, 0x3, 0x40, "0000087aba10fdfffffb05001400", 0x32314742}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xa8402, 0x0) syz_emit_ethernet(0x109, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @random="d638579628ac", @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x6, 0x1, 0x1}}, {@generic={0x8863, "8ac88aedd2a507d7f22a769b5fde0d9d2a6eb709dd894cabb04e7f75c7f18bc5fdc975b577c858a6a80e5d53cebdf09780f32bbaae0b9bcf5ba30de85fe3f51871f6ff0228052be1644a900a7965ff7cefb6110e379143499cc93dbb16b2513df5530eb1c2d768f52712309a090e4e29186e7c07eed9f75967a74b5cf7eeac7f4c52b3cd4f1a7bc19b37f9788e067bd7978298712ba283f4dd12ca009ed913dc3a0ee6cf7deb7f2a276b176adf133f23b0827b42f36f4ecca623445117378d2dc7ef0b7c8430f4ad8bc95c4b57d3a33987a68df7356614ae157ce532a182bf08f6d7cfc31e085272cddae3115f14d5e12391db"}}}, 0x0) close(0x3) 2.715319572s ago: executing program 3 (id=2258): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @mcast1, 0x4}, 0x1c) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r4, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) 2.585559239s ago: executing program 6 (id=2259): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = mq_open(&(0x7f00005a1ffb)='et\x938G', 0x42, 0x0, 0x0) mq_notify(r3, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) 1.66592992s ago: executing program 6 (id=2260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='tracefs\x00', 0x10a000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "0000100000000000000000004000"}) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) read$FUSE(r4, &(0x7f000000a380)={0x2020}, 0x2020) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f0000000300)=0x18) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x0, '\x00', @p_u32=0x0}}) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="28bba7", 0x3}], 0x1, 0x7, 0x96) close_range(r5, 0xffffffffffffffff, 0x0) 1.665391575s ago: executing program 2 (id=2261): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x40000000000408a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x2000002, 0x4000010, 0xffffffffffffffff, 0x9446c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000600)={0x14000000, &(0x7f0000000180), &(0x7f0000000280), &(0x7f0000000300), {0x28}, &(0x7f0000000340)=""/206, 0xce, &(0x7f0000000480)=""/245, &(0x7f0000000580)=[r0, r0], 0x2}, 0x58) connect$unix(r1, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x70, 0x0, 0xffffffffffffff7e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x80000000004, 0x2, 0x80, 0x25, 0x1, 0x7f, 0x44235, 0x0, 0x1, 0x9c1, 0x7ffe, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xf000, 0xae200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x2b, 0x0, 0x1}, 0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB="29d4", @ANYRES16, @ANYBLOB="01030000000000000000050000000800", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) 1.158761605s ago: executing program 6 (id=2262): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r2, @ANYRESHEX=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000fa45ce1b7e050000000000000000000000000000083eb63813d347fcc9121808b98930c6d5bd4ef600cb0bc4e293ff10569ebe401ab6de24c64b50ed2129ef81cce7f01fef1ab3932791ce16e0b71fe71752d97b5a7923bb"], 0x48) memfd_create(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r3, &(0x7f0000000040), 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x30}}, 0x4000800) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=r7, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r9 = accept4$unix(r1, 0x0, &(0x7f0000000080), 0x800) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) 1.016824971s ago: executing program 1 (id=2263): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xf7fffe0000000001, 0xfa11, 0xff800001}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) r2 = epoll_create(0x3ff) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001480)={0x40000002}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0xd80}, 0x1, 0x0, 0x0, 0x40c0}, 0xc000) accept4$tipc(r5, 0x0, 0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x10}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) lsetxattr$security_capability(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x29e}, {0x1, 0x2}]}, 0x18, 0x1) 1.016014257s ago: executing program 2 (id=2264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x3, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f000018a000/0x2000)=nil, 0x2000, 0xc, 0x10010, r0, 0xe6e70000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000000)={0x645d, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x3, 0x5}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010014b04000000a57100000000007a00f000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) pipe2(&(0x7f0000001040), 0x0) 0s ago: executing program 2 (id=2265): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800b00010067656e65766500000c00028005000c000100000008000a00", @ANYRES32=r2, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): -010 DVB-T USB2.0 error while loading driver (-19) [ 581.294825][ T792] dvb_usb_umt_010 2-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 581.314882][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 581.321603][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 581.335522][ T10] usb 1-1: config 1 has no interface number 1 [ 581.339600][ T792] usb 2-1: USB disconnect, device number 46 [ 581.361871][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 581.419352][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.434491][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.464333][ T10] usb 1-1: Product: syz [ 581.468530][ T10] usb 1-1: Manufacturer: syz [ 581.489375][ T10] usb 1-1: SerialNumber: syz [ 581.876913][T12457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1661'. [ 582.006626][T12456] fuse: Unknown parameter 'euid<00000000000000000000' [ 582.116575][ T30] audit: type=1400 audit(1771919256.848:1081): avc: denied { name_bind } for pid=12450 comm="syz.2.1663" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 582.333027][ T30] audit: type=1326 audit(1771919256.848:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b419c629 code=0x7ffc0000 [ 582.420089][ T30] audit: type=1326 audit(1771919256.848:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2b419c629 code=0x7ffc0000 [ 582.483664][T12468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1665'. [ 582.572280][ T30] audit: type=1326 audit(1771919256.848:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b419c629 code=0x7ffc0000 [ 582.693030][ T30] audit: type=1326 audit(1771919256.848:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2b419c629 code=0x7ffc0000 [ 582.730288][ T30] audit: type=1326 audit(1771919256.848:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b419c629 code=0x7ffc0000 [ 582.824030][ T30] audit: type=1326 audit(1771919256.848:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.2.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b419c629 code=0x7ffc0000 [ 583.376300][ T10] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 583.389178][ T10] usb 1-1: 2:1 : invalid channels 0 [ 583.922755][ T10] usb 1-1: USB disconnect, device number 45 [ 584.437382][ T792] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 584.783193][ T792] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 584.801619][ T792] usb 1-1: config 0 has no interface number 0 [ 584.821893][ T792] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 584.848845][ T792] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 584.872198][ T792] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 584.900342][ T792] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 584.923658][ T792] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 584.947063][ T792] usb 1-1: Product: syz [ 584.952221][ T792] usb 1-1: SerialNumber: syz [ 584.975509][T12499] FAULT_INJECTION: forcing a failure. [ 584.975509][T12499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.988958][T12499] CPU: 0 UID: 0 PID: 12499 Comm: syz.5.1674 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.988985][T12499] Tainted: [L]=SOFTLOCKUP [ 584.988991][T12499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 584.989000][T12499] Call Trace: [ 584.989005][T12499] [ 584.989011][T12499] dump_stack_lvl+0x100/0x190 [ 584.989043][T12499] should_fail_ex.cold+0x5/0xa [ 584.989064][T12499] _copy_from_iter+0x1f4/0x1690 [ 584.989092][T12499] ? _copy_from_iter+0x270/0x1690 [ 584.989116][T12499] ? __pfx__copy_from_iter+0x10/0x10 [ 584.989142][T12499] ? __pfx__copy_from_iter+0x10/0x10 [ 584.989170][T12499] copy_page_from_iter+0xde/0x180 [ 584.989196][T12499] skb_copy_datagram_from_iter+0x399/0x720 [ 584.989227][T12499] unix_stream_sendmsg+0x536/0x1310 [ 584.989254][T12499] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 584.989275][T12499] ? __might_fault+0x20/0x140 [ 584.989303][T12499] ____sys_sendmsg+0xa54/0xc30 [ 584.989325][T12499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 584.989356][T12499] ___sys_sendmsg+0x190/0x1e0 [ 584.989378][T12499] ? __pfx____sys_sendmsg+0x10/0x10 [ 584.989425][T12499] __sys_sendmsg+0x170/0x220 [ 584.989441][T12499] ? __pfx___sys_sendmsg+0x10/0x10 [ 584.989471][T12499] do_syscall_64+0x106/0xf80 [ 584.989486][T12499] ? clear_bhb_loop+0x40/0x90 [ 584.989505][T12499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.989528][T12499] RIP: 0033:0x7fad8ef9c629 [ 584.989543][T12499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.989558][T12499] RSP: 002b:00007fad8fde2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.989574][T12499] RAX: ffffffffffffffda RBX: 00007fad8f216090 RCX: 00007fad8ef9c629 [ 584.989585][T12499] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000004 [ 584.989594][T12499] RBP: 00007fad8fde2090 R08: 0000000000000000 R09: 0000000000000000 [ 584.989603][T12499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.989613][T12499] R13: 00007fad8f216128 R14: 00007fad8f216090 R15: 00007fff08538738 [ 584.989635][T12499] [ 584.989753][ T792] usb 1-1: config 0 descriptor?? [ 585.346919][T12500] qnx4: no qnx4 filesystem (no root dir). [ 585.353873][ T30] audit: type=1400 audit(1771919260.160:1088): avc: denied { mounton } for pid=12488 comm="syz.2.1671" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 585.416450][ T792] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 585.458324][ T30] audit: type=1326 audit(1771919260.250:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12488 comm="syz.2.1671" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2b419c629 code=0x0 [ 585.484521][ T792] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input25 [ 585.666535][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 585.722984][T12506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1676'. [ 585.734383][T12510] overlayfs: failed to clone lowerpath [ 585.798661][T12510] 9p: Could not find request transport: fd?N [ 586.340878][T12484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.356848][T12484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.522030][ T5963] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 586.532853][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 586.595853][T12527] netlink: 'syz.2.1682': attribute type 1 has an invalid length. [ 586.676060][T12527] bond3: entered promiscuous mode [ 586.681163][T12527] bond3: entered allmulticast mode [ 586.690145][T12527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 587.693881][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 587.694253][ T8136] usb 1-1: USB disconnect, device number 46 [ 587.700857][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 587.778624][ T8136] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 587.836959][T12548] sch_fq: defrate 6 ignored. [ 590.485870][ T5963] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 591.178596][ T30] audit: type=1400 audit(1771919265.983:1090): avc: denied { lock } for pid=12583 comm="syz.5.1700" path="socket:[38184]" dev="sockfs" ino=38184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 591.764487][ T5963] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 591.774030][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.784440][T12585] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 591.792689][T12585] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 591.802608][T12585] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 591.812852][ T30] audit: type=1400 audit(1771919266.633:1091): avc: denied { firmware_load } for pid=12582 comm="syz.3.1699" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 592.189331][ T5963] usb 2-1: Product: syz [ 592.196044][ T5963] usb 2-1: Manufacturer: syz [ 592.201071][ T5963] usb 2-1: SerialNumber: syz [ 592.208647][ T5963] usb 2-1: config 0 descriptor?? [ 592.216578][ T30] audit: type=1400 audit(1771919267.033:1092): avc: denied { mount } for pid=12582 comm="syz.3.1699" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 592.344943][T12592] FAULT_INJECTION: forcing a failure. [ 592.344943][T12592] name failslab, interval 1, probability 0, space 0, times 0 [ 592.358262][T12592] CPU: 0 UID: 0 PID: 12592 Comm: syz.5.1702 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.358289][T12592] Tainted: [L]=SOFTLOCKUP [ 592.358294][T12592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 592.358302][T12592] Call Trace: [ 592.358309][T12592] [ 592.358316][T12592] dump_stack_lvl+0x100/0x190 [ 592.358350][T12592] should_fail_ex.cold+0x5/0xa [ 592.358374][T12592] should_failslab+0xc2/0x120 [ 592.358401][T12592] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 592.358425][T12592] ? proc_alloc_inode+0x25/0x200 [ 592.358453][T12592] ? lockdep_hardirqs_on+0x78/0x100 [ 592.358469][T12592] ? irqentry_exit+0x180/0x670 [ 592.358486][T12592] ? __pfx_proc_alloc_inode+0x10/0x10 [ 592.358513][T12592] proc_alloc_inode+0x25/0x200 [ 592.358538][T12592] alloc_inode+0x68/0x250 [ 592.358562][T12592] new_inode+0x22/0x1c0 [ 592.358587][T12592] proc_pid_make_inode+0x22/0x160 [ 592.358611][T12592] ? memcmp+0x99/0x1d0 [ 592.358630][T12592] proc_pident_instantiate+0x85/0x310 [ 592.358659][T12592] proc_pident_lookup+0x1e3/0x270 [ 592.358690][T12592] __lookup_slow+0x251/0x460 [ 592.358712][T12592] ? __pfx___lookup_slow+0x10/0x10 [ 592.358743][T12592] ? irq_entries_start+0xd0/0xcb0 [ 592.358767][T12592] ? irq_entries_start+0xd0/0xcb0 [ 592.358791][T12592] lookup_slow+0x50/0x70 [ 592.358810][T12592] link_path_walk+0x1377/0x1cc0 [ 592.358841][T12592] path_openat+0x1be/0x31a0 [ 592.358856][T12592] ? find_held_lock+0x2b/0x80 [ 592.358876][T12592] ? __schedule+0x2fa6/0x60e0 [ 592.358898][T12592] ? __schedule+0x2fa6/0x60e0 [ 592.358921][T12592] ? rcu_is_watching+0x12/0xc0 [ 592.358939][T12592] ? trace_sched_exit_tp+0x13a/0x180 [ 592.358963][T12592] ? __pfx_path_openat+0x10/0x10 [ 592.358989][T12592] do_file_open+0x20e/0x430 [ 592.359008][T12592] ? __pfx_do_file_open+0x10/0x10 [ 592.359024][T12592] ? __pfx___schedule+0x10/0x10 [ 592.359057][T12592] ? __pfx_kfree_link+0x10/0x10 [ 592.359088][T12592] ? alloc_fd+0x476/0x790 [ 592.359107][T12592] ? do_getname+0x191/0x390 [ 592.359128][T12592] do_sys_openat2+0x10d/0x1e0 [ 592.359149][T12592] ? __pfx_do_sys_openat2+0x10/0x10 [ 592.359167][T12592] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 592.359188][T12592] ? __fget_files+0x21f/0x3d0 [ 592.359209][T12592] __x64_sys_openat+0x12d/0x210 [ 592.359230][T12592] ? __pfx___x64_sys_openat+0x10/0x10 [ 592.359250][T12592] ? ksys_write+0x1ac/0x250 [ 592.359283][T12592] do_syscall_64+0x106/0xf80 [ 592.359300][T12592] ? clear_bhb_loop+0x40/0x90 [ 592.359321][T12592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.359339][T12592] RIP: 0033:0x7fad8ef5cece [ 592.359354][T12592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 592.359370][T12592] RSP: 002b:00007fad8fde1ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 592.359388][T12592] RAX: ffffffffffffffda RBX: 00007fad8fde26c0 RCX: 00007fad8ef5cece [ 592.359398][T12592] RDX: 0000000000000002 RSI: 00007fad8fde1f90 RDI: ffffffffffffff9c [ 592.359408][T12592] RBP: 00007fad8fde2090 R08: 0000000000000000 R09: 0000000000000000 [ 592.359418][T12592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.359427][T12592] R13: 00007fad8f216128 R14: 00007fad8f216090 R15: 00007fff08538738 [ 592.359452][T12592] [ 592.818772][ T5963] usb 2-1: USB disconnect, device number 47 [ 592.841022][ T6085] udevd[6085]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.084035][ T30] audit: type=1400 audit(1771919267.853:1093): avc: denied { create } for pid=12567 comm="syz.1.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 593.469822][ T30] audit: type=1400 audit(1771919267.863:1094): avc: denied { write } for pid=12567 comm="syz.1.1693" path="socket:[39324]" dev="sockfs" ino=39324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 594.166910][T12610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1701'. [ 595.135680][T12149] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 595.346818][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 596.166317][T12647] netlink: 'syz.2.1712': attribute type 1 has an invalid length. [ 596.228035][T12647] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1712'. [ 596.253447][ T5963] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 596.583607][T12654] vxcan1 speed is unknown, defaulting to 1000 [ 597.469773][ T5875] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0 [ 597.653564][ T5875] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0 [ 597.742743][ T5875] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0 [ 597.774896][ T5875] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0 [ 597.811259][ T5875] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0 [ 597.848119][ T5875] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0 [ 597.883617][ T5875] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0 [ 597.902622][ T5875] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0 [ 597.932610][ T5875] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0 [ 597.969883][ T5875] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0 [ 597.988937][T12654] lo speed is unknown, defaulting to 1000 [ 598.028435][ T5875] hid-generic 0000:0000:0004.0019: hidraw0: HID v0.03 Device [syz1] on syz0 [ 598.076962][T12654] lo speed is unknown, defaulting to 1000 [ 598.431803][T12670] fido_id[12670]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 598.689278][T12682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1717'. [ 598.957818][T12685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=12685 comm=syz.5.1722 [ 598.986611][T12685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12685 comm=syz.5.1722 [ 600.667695][ T30] audit: type=1400 audit(1771919275.487:1095): avc: denied { lock } for pid=12704 comm="syz.3.1726" path="socket:[39604]" dev="sockfs" ino=39604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 601.230176][T12709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.794702][T12734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1734'. [ 603.351926][T12736] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1735'. [ 603.880694][T12753] Set syz0 is full, maxelem 0 reached [ 603.978398][ T30] audit: type=1400 audit(1771919278.659:1096): avc: denied { ioctl } for pid=12743 comm="syz.3.1733" path="socket:[39862]" dev="sockfs" ino=39862 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 604.164526][T12755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1736'. [ 605.824542][ T5868] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 605.836844][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 605.853477][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 606.114902][T12778] FAULT_INJECTION: forcing a failure. [ 606.114902][T12778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.162017][T12778] CPU: 1 UID: 0 PID: 12778 Comm: syz.2.1744 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.162044][T12778] Tainted: [L]=SOFTLOCKUP [ 606.162048][T12778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 606.162054][T12778] Call Trace: [ 606.162059][T12778] [ 606.162064][T12778] dump_stack_lvl+0x100/0x190 [ 606.162089][T12778] should_fail_ex.cold+0x5/0xa [ 606.162104][T12778] _copy_from_user+0x2e/0xd0 [ 606.162121][T12778] kstrtouint_from_user+0xd6/0x1d0 [ 606.162132][T12778] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 606.162142][T12778] ? __lock_acquire+0x4a5/0x2630 [ 606.162160][T12778] ? lock_acquire+0x1cf/0x380 [ 606.162180][T12778] proc_fail_nth_write+0x83/0x220 [ 606.162194][T12778] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 606.162212][T12778] vfs_write+0x2aa/0x1070 [ 606.162228][T12778] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 606.162243][T12778] ? __pfx_vfs_write+0x10/0x10 [ 606.162258][T12778] ? __fget_files+0x215/0x3d0 [ 606.162271][T12778] ? __fget_files+0x21f/0x3d0 [ 606.162284][T12778] ksys_write+0x12a/0x250 [ 606.162299][T12778] ? __pfx_ksys_write+0x10/0x10 [ 606.162318][T12778] do_syscall_64+0x106/0xf80 [ 606.162329][T12778] ? clear_bhb_loop+0x40/0x90 [ 606.162342][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.162352][T12778] RIP: 0033:0x7fe2b415cece [ 606.162362][T12778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 606.162372][T12778] RSP: 002b:00007fe2b5066fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 606.162382][T12778] RAX: ffffffffffffffda RBX: 00007fe2b50676c0 RCX: 00007fe2b415cece [ 606.162389][T12778] RDX: 0000000000000001 RSI: 00007fe2b50670a0 RDI: 0000000000000003 [ 606.162395][T12778] RBP: 00007fe2b5067090 R08: 0000000000000000 R09: 0000000000000000 [ 606.162401][T12778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.162406][T12778] R13: 00007fe2b4416038 R14: 00007fe2b4415fa0 R15: 00007fff7cba01b8 [ 606.162420][T12778] [ 607.246325][T12790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 608.645821][T12818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1754'. [ 611.857925][ T7686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.933134][ T30] audit: type=1400 audit(1771919286.763:1097): avc: denied { map } for pid=12849 comm="syz.0.1764" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 612.216409][T12857] overlayfs: failed to clone upperpath [ 615.108290][T12890] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1773'. [ 615.495847][ T30] audit: type=1400 audit(1771919289.965:1098): avc: denied { ioctl } for pid=12883 comm="syz.1.1773" path="socket:[40155]" dev="sockfs" ino=40155 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 615.908666][T12885] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1771'. [ 616.159813][T12904] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1776'. [ 616.181901][T12904] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1776'. [ 617.239514][T12564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 617.454689][T12917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1780'. [ 617.510075][T12917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1780'. [ 618.586950][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.667568][T12952] tipc: Enabling of bearer rejected, failed to enable media [ 619.676342][ T30] audit: type=1400 audit(1771919294.357:1099): avc: denied { write } for pid=12947 comm="syz.1.1789" lport=49333 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 619.725487][ T30] audit: type=1400 audit(1771919294.547:1100): avc: denied { getopt } for pid=12947 comm="syz.1.1789" lport=49333 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 620.085155][ T8136] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 620.251986][ T8136] usb 2-1: Using ep0 maxpacket: 16 [ 620.290431][T12958] vxcan1: entered promiscuous mode [ 620.417879][ T8136] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 620.569968][ T8136] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 620.578879][ T8136] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 620.587379][ T8136] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 620.669745][ T8136] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 620.690053][ T8136] usb 2-1: config 0 has no interface number 0 [ 620.709707][ T8136] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 620.752548][ T8136] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 620.776109][T12964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1792'. [ 620.801683][ T8136] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 620.834742][ T8136] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 620.865796][ T8136] usb 2-1: config 0 interface 125 has no altsetting 2 [ 620.882132][ T8136] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 620.891592][ T8136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.917035][ T8136] usb 2-1: Product: syz [ 620.928084][ T8136] usb 2-1: Manufacturer: syz [ 620.957068][ T8136] usb 2-1: SerialNumber: syz [ 620.990948][ T8136] usb 2-1: config 0 descriptor?? [ 621.008162][ T8136] usb 2-1: selecting invalid altsetting 2 [ 621.216136][ T5963] usb 2-1: USB disconnect, device number 48 [ 622.138358][ T30] audit: type=1400 audit(1771919296.888:1101): avc: denied { append } for pid=12974 comm="syz.5.1795" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 622.416464][T12984] netlink: 'syz.1.1800': attribute type 4 has an invalid length. [ 622.424544][T12984] FAULT_INJECTION: forcing a failure. [ 622.424544][T12984] name failslab, interval 1, probability 0, space 0, times 0 [ 622.437310][T12984] CPU: 0 UID: 0 PID: 12984 Comm: syz.1.1800 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.437344][T12984] Tainted: [L]=SOFTLOCKUP [ 622.437350][T12984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 622.437360][T12984] Call Trace: [ 622.437365][T12984] [ 622.437372][T12984] dump_stack_lvl+0x100/0x190 [ 622.437403][T12984] should_fail_ex.cold+0x5/0xa [ 622.437426][T12984] should_failslab+0xc2/0x120 [ 622.437453][T12984] __kvmalloc_node_noprof+0xfa/0xa00 [ 622.437477][T12984] ? alloc_netdev_mqs+0xeb8/0x14f0 [ 622.437501][T12984] alloc_netdev_mqs+0xeb8/0x14f0 [ 622.437525][T12984] rtnl_create_link+0xc13/0xf80 [ 622.437556][T12984] rtnl_newlink+0x13b8/0x2380 [ 622.437583][T12984] ? __pfx_rtnl_newlink+0x10/0x10 [ 622.437597][T12984] ? find_held_lock+0x2b/0x80 [ 622.437619][T12984] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 622.437643][T12984] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 622.437671][T12984] ? avc_has_perm_noaudit+0x145/0x3b0 [ 622.437716][T12984] ? find_held_lock+0x2b/0x80 [ 622.437737][T12984] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 622.437752][T12984] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 622.437771][T12984] ? __pfx_rtnl_newlink+0x10/0x10 [ 622.437788][T12984] rtnetlink_rcv_msg+0x95e/0xe90 [ 622.437808][T12984] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 622.437833][T12984] ? ref_tracker_free+0x37e/0x6c0 [ 622.437863][T12984] netlink_rcv_skb+0x159/0x420 [ 622.437883][T12984] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 622.437902][T12984] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 622.437931][T12984] ? netlink_deliver_tap+0x1ae/0xcc0 [ 622.437955][T12984] netlink_unicast+0x5aa/0x870 [ 622.437978][T12984] ? __pfx_netlink_unicast+0x10/0x10 [ 622.438007][T12984] netlink_sendmsg+0x8b0/0xda0 [ 622.438031][T12984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.438049][T12984] ? __might_fault+0x20/0x140 [ 622.438080][T12984] ____sys_sendmsg+0xa54/0xc30 [ 622.438103][T12984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 622.438135][T12984] ___sys_sendmsg+0x190/0x1e0 [ 622.438157][T12984] ? __pfx____sys_sendmsg+0x10/0x10 [ 622.438207][T12984] __sys_sendmsg+0x170/0x220 [ 622.438227][T12984] ? __pfx___sys_sendmsg+0x10/0x10 [ 622.438261][T12984] do_syscall_64+0x106/0xf80 [ 622.438278][T12984] ? clear_bhb_loop+0x40/0x90 [ 622.438300][T12984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.438318][T12984] RIP: 0033:0x7fe96079c629 [ 622.438335][T12984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.438355][T12984] RSP: 002b:00007fe961719028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.438371][T12984] RAX: ffffffffffffffda RBX: 00007fe960a15fa0 RCX: 00007fe96079c629 [ 622.438383][T12984] RDX: 0000000000040800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 622.438393][T12984] RBP: 00007fe961719090 R08: 0000000000000000 R09: 0000000000000000 [ 622.438402][T12984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 622.438412][T12984] R13: 00007fe960a16038 R14: 00007fe960a15fa0 R15: 00007ffce57ad9b8 [ 622.438436][T12984] [ 622.769253][ T30] audit: type=1400 audit(1771919297.598:1102): avc: denied { append } for pid=12985 comm="syz.2.1801" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 622.916260][T12990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 623.019475][ T7679] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 623.170893][T12990] vlan2: entered allmulticast mode [ 623.235746][T12990] team0: entered allmulticast mode [ 623.329601][T12990] team_slave_0: entered allmulticast mode [ 623.337372][T12990] team_slave_1: entered allmulticast mode [ 624.130233][T13011] usb usb8: usbfs: process 13011 (syz.0.1807) did not claim interface 0 before use [ 624.146302][T13011] trusted_key: encrypted_key: master key parameter 'ser: D000000000000004096' is invalid [ 624.532822][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 624.768003][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 624.777508][ T10] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 625.083498][ T5811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 625.117700][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 625.134436][ T10] usb 1-1: config 220 has no interface number 2 [ 625.140823][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 625.146510][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1811'. [ 625.170190][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 625.181815][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 625.221762][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 625.245066][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 625.265662][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.280631][ T10] usb 1-1: Product: syz [ 625.288209][ T10] usb 1-1: Manufacturer: syz [ 625.293303][ T10] usb 1-1: SerialNumber: syz [ 625.395759][T13037] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 625.705662][T13011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.734260][T13011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.132007][ T5811] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 626.179977][ T10] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 626.203507][ T10] uvcvideo 1-1:220.0: No valid video chain found. [ 626.234076][ T10] usb 1-1: selecting invalid altsetting 0 [ 626.313391][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.334037][ T10] usb 1-1: selecting invalid altsetting 0 [ 626.346081][ T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 626.356409][ T5811] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 626.384098][ T10] usb 1-1: USB disconnect, device number 47 [ 626.412640][ T5811] usb 6-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 626.445089][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.463230][ T5811] usb 6-1: config 0 descriptor?? [ 626.884182][ T5811] ryos 0003:1E7D:31CE.001A: hidraw0: USB HID v0.06 Device [HID 1e7d:31ce] on usb-dummy_hcd.5-1/input0 [ 628.520479][T13063] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1819'. [ 628.794500][ T7686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 629.083254][ T5811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 629.170569][ T5876] usb 6-1: USB disconnect, device number 16 [ 629.539006][T13095] tmpfs: Invalid uid '0x00000000ffffffff' [ 629.545658][ T30] audit: type=1400 audit(1771919304.372:1103): avc: denied { getopt } for pid=13092 comm="syz.5.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 629.945052][T13103] binder: BINDER_SET_CONTEXT_MGR already set [ 629.951102][T13103] binder: 13100:13103 ioctl 4018620d 200000004a80 returned -16 [ 629.961555][T13103] binder: 13100:13103 ioctl c0306201 2000000002c0 returned -22 [ 629.976644][T13105] binder: 13104:13105 unknown command 0 [ 629.981611][T13107] Set syz0 is full, maxelem 0 reached [ 630.009702][T13105] binder: 13104:13105 ioctl c0306201 2000000001c0 returned -22 [ 630.098178][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1834'. [ 632.366810][ T30] audit: type=1400 audit(1771919307.143:1104): avc: denied { read } for pid=13134 comm="syz.1.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 634.556538][T12542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 635.241593][ T30] audit: type=1400 audit(1771919310.085:1105): avc: denied { mounton } for pid=13181 comm="syz.3.1855" path="/440/file0" dev="tmpfs" ino=2389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 635.241707][T13182] 9pnet_fd: Insufficient options for proto=fd [ 637.347416][T13206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 638.206122][ T8136] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 638.428394][T13209] netlink: 'syz.0.1862': attribute type 1 has an invalid length. [ 638.436208][T13209] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1862'. [ 638.492090][ T8136] usb 3-1: Using ep0 maxpacket: 32 [ 638.547122][ T8136] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 638.596335][ T8136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.639688][ T8136] usb 3-1: config 0 descriptor?? [ 638.690943][ T8136] gspca_main: sq930x-2.14.0 probing 041e:403c [ 639.779666][T13211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.789043][T13211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.027455][ T8136] gspca_sq930x: ucbus_write failed -71 [ 640.039712][ T8136] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 640.080634][ T8136] usb 3-1: USB disconnect, device number 49 [ 640.265319][T12542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.439754][T13233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1868'. [ 640.765992][T13236] netlink: 'syz.0.1869': attribute type 29 has an invalid length. [ 640.968014][T13236] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1869'. [ 641.814184][ T30] audit: type=1400 audit(1771919316.658:1106): avc: denied { listen } for pid=13249 comm="syz.0.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 642.253546][T13255] /dev/nullb0: Can't open blockdev [ 642.683735][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 642.711384][T13260] FAULT_INJECTION: forcing a failure. [ 642.711384][T13260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.776647][T13260] CPU: 0 UID: 0 PID: 13260 Comm: syz.1.1876 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.776676][T13260] Tainted: [L]=SOFTLOCKUP [ 642.776681][T13260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 642.776691][T13260] Call Trace: [ 642.776697][T13260] [ 642.776705][T13260] dump_stack_lvl+0x100/0x190 [ 642.776735][T13260] should_fail_ex.cold+0x5/0xa [ 642.776757][T13260] _copy_from_user+0x2e/0xd0 [ 642.776782][T13260] kvm_arch_dev_ioctl+0x1f8/0x770 [ 642.776803][T13260] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 642.776829][T13260] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 642.776855][T13260] ? do_vfs_ioctl+0x226/0x13e0 [ 642.776882][T13260] kvm_dev_ioctl+0x73a/0x1a50 [ 642.776909][T13260] ? __fget_files+0x215/0x3d0 [ 642.776925][T13260] ? hook_file_ioctl_common+0x146/0x410 [ 642.776949][T13260] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 642.776975][T13260] ? selinux_file_ioctl+0x139/0x290 [ 642.776994][T13260] ? selinux_file_ioctl+0xb4/0x290 [ 642.777015][T13260] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 642.777037][T13260] __x64_sys_ioctl+0x18e/0x210 [ 642.777064][T13260] do_syscall_64+0x106/0xf80 [ 642.777081][T13260] ? clear_bhb_loop+0x40/0x90 [ 642.777103][T13260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.777122][T13260] RIP: 0033:0x7fe96079c629 [ 642.777137][T13260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.777168][T13260] RSP: 002b:00007fe961719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.777186][T13260] RAX: ffffffffffffffda RBX: 00007fe960a15fa0 RCX: 00007fe96079c629 [ 642.777198][T13260] RDX: 0000200000000080 RSI: 000000004018aee2 RDI: 0000000000000003 [ 642.777208][T13260] RBP: 00007fe961719090 R08: 0000000000000000 R09: 0000000000000000 [ 642.777218][T13260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.777227][T13260] R13: 00007fe960a16038 R14: 00007fe960a15fa0 R15: 00007ffce57ad9b8 [ 642.777251][T13260] [ 643.173589][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 643.180038][ T9] usb 6-1: config 0 has an invalid descriptor of length 247, skipping remainder of the config [ 643.190454][ T9] usb 6-1: config 0 interface 0 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 643.203532][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 643.215743][T13266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1877'. [ 643.273804][T13276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1878'. [ 643.304014][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 643.322031][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=12 [ 643.354916][ T9] usb 6-1: SerialNumber: syz [ 643.385979][ T9] usb 6-1: config 0 descriptor?? [ 643.605015][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 643.624597][ T9] usb 6-1: USB disconnect, device number 17 [ 643.845953][ T8136] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 644.143168][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.413071][ T8136] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 644.482892][ T8136] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 644.522962][ T8136] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 644.558417][T13293] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1885'. [ 644.661063][ T8136] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 644.704191][ T8136] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 644.744539][ T8136] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 645.345122][ T8136] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 645.402556][ T8136] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 645.425857][ T8136] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 645.442539][ T8136] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 645.443378][ T8136] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 645.462227][ T8136] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 645.529635][ T8136] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 645.565881][ T8136] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 645.648641][ T8136] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 645.662964][ T8136] usb 3-1: string descriptor 0 read error: -22 [ 645.675104][ T8136] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 645.685130][ T8136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.768354][ T8136] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 646.012334][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 646.242293][ T5811] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 646.487469][ T5811] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 646.498130][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.532044][T13328] Set syz0 is full, maxelem 0 reached [ 646.858212][ T5811] usb 1-1: config 0 descriptor?? [ 647.338178][ T5811] elan 0003:04F3:0755.001B: item fetching failed at offset 0/5 [ 647.346384][ T5811] elan 0003:04F3:0755.001B: Hid Parse failed [ 647.437464][ T5811] elan 0003:04F3:0755.001B: probe with driver elan failed with error -22 [ 647.521302][ T8136] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 647.555980][T13345] netlink: 'syz.3.1900': attribute type 1 has an invalid length. [ 647.556151][T13321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.599200][T13345] 8021q: adding VLAN 0 to HW filter on device bond2 [ 647.606319][T13321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.652018][T13345] bond2: (slave ip6gretap1): making interface the new active one [ 647.672063][T13345] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 647.740394][ T30] audit: type=1400 audit(1771919322.591:1107): avc: denied { setopt } for pid=13349 comm="syz.1.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 647.799194][ T8136] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.810230][ T8136] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 647.913743][ T8136] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 648.380438][ T5876] usb 3-1: USB disconnect, device number 50 [ 648.394283][ T24] usb 1-1: USB disconnect, device number 48 [ 648.433672][ T8136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.452673][ T8136] usb 6-1: config 0 descriptor?? [ 649.866267][T13382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.521723][ T8136] usb 6-1: USB disconnect, device number 18 [ 651.770161][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 651.859156][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 651.880632][T13415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1920'. [ 651.890568][T13415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1920'. [ 651.942362][ T30] audit: type=1400 audit(1771919326.753:1108): avc: denied { write } for pid=13408 comm="syz.2.1920" name="binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 652.128994][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 652.178324][T13423] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1922'. [ 652.193966][T13424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1923'. [ 652.312710][ T9] usb 6-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 652.356887][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 652.374247][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 652.385868][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 652.401699][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 652.420208][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 652.434663][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 652.443161][ T9] usb 6-1: Manufacturer: syz [ 652.452655][ T9] usb 6-1: config 0 descriptor?? [ 653.968353][T13437] block nbd2: shutting down sockets [ 654.896239][ T30] audit: type=1400 audit(1771919329.744:1109): avc: denied { execute } for pid=13456 comm="syz.5.1930" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=43160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 655.057527][ T9] rc_core: IR keymap rc-hauppauge not found [ 655.217754][ T5876] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 655.363531][ T9] Registered IR keymap rc-empty [ 655.391089][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 655.417355][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 655.447821][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 655.480155][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input27 [ 655.542191][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 655.551817][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.614046][ T5876] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 655.628385][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 655.644374][ T5876] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 655.657251][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 655.677969][ T5876] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 655.687420][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 655.688118][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.713516][T13459] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 655.723464][ T5876] hub 1-1:1.0: bad descriptor, ignoring hub [ 655.744106][ T5876] hub 1-1:1.0: probe with driver hub failed with error -5 [ 655.744127][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 655.759148][ T5876] cdc_wdm 1-1:1.0: skipping garbage [ 655.843485][ T5876] cdc_wdm 1-1:1.0: skipping garbage [ 655.872005][ T5876] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 655.895471][ T5876] cdc_wdm 1-1:1.0: Unknown control protocol [ 655.907967][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 656.026135][T13475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12057 sclass=netlink_route_socket pid=13475 comm=syz.5.1934 [ 656.334815][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 656.366424][ T5876] usb 1-1: USB disconnect, device number 49 [ 656.366922][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 656.409933][T13476] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1935'. [ 656.441824][ T30] audit: type=1400 audit(1771919331.295:1110): avc: denied { accept } for pid=13474 comm="syz.2.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 656.462317][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 656.497125][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 656.870720][ T9] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 656.906503][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 656.957156][ T9] usb 6-1: USB disconnect, device number 19 [ 657.598170][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 659.755484][ T30] audit: type=1400 audit(1771919334.567:1111): avc: denied { map } for pid=13523 comm="syz.5.1945" path="socket:[43249]" dev="sockfs" ino=43249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 659.916321][ T30] audit: type=1400 audit(1771919334.567:1112): avc: denied { accept } for pid=13523 comm="syz.5.1945" path="socket:[43249]" dev="sockfs" ino=43249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 660.002934][T13534] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1948'. [ 660.025191][ T5876] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 660.105192][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 660.164984][ T5876] usb 6-1: device descriptor read/64, error -71 [ 660.254935][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 660.261544][ T24] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 660.270174][ T24] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 660.279415][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 660.292930][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 660.320432][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 660.347881][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 660.409564][ T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 660.431936][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.440091][ T5876] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 660.578543][ T24] usb 3-1: config 0 descriptor?? [ 661.115203][ T5876] usb 6-1: device descriptor read/64, error -71 [ 661.124115][ T24] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 661.137939][ T24] usb 3-1: USB disconnect, device number 51 [ 661.224918][ T5876] usb usb6-port1: attempt power cycle [ 661.240018][ T24] usblp0: removed [ 661.784224][ T5876] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 661.810829][T13539] netlink: 'syz.0.1946': attribute type 1 has an invalid length. [ 661.818626][T13539] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1946'. [ 661.834644][ T5876] usb 6-1: device descriptor read/8, error -71 [ 662.094197][ T5876] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 662.174122][T13557] xt_TPROXY: Can be used only with -p tcp or -p udp [ 662.594647][ T5876] usb 6-1: device descriptor read/8, error -71 [ 662.763878][T12542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 663.976216][T12542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 664.033317][ T5876] usb usb6-port1: unable to enumerate USB device [ 665.218215][T13586] FAULT_INJECTION: forcing a failure. [ 665.218215][T13586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.231292][T13586] CPU: 0 UID: 0 PID: 13586 Comm: syz.2.1963 Tainted: G L syzkaller #0 PREEMPT(full) [ 665.231312][T13586] Tainted: [L]=SOFTLOCKUP [ 665.231316][T13586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 665.231322][T13586] Call Trace: [ 665.231327][T13586] [ 665.231331][T13586] dump_stack_lvl+0x100/0x190 [ 665.231352][T13586] should_fail_ex.cold+0x5/0xa [ 665.231366][T13586] _copy_to_user+0x32/0xd0 [ 665.231383][T13586] simple_read_from_buffer+0xcb/0x170 [ 665.231402][T13586] proc_fail_nth_read+0x1af/0x230 [ 665.231417][T13586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 665.231432][T13586] ? rw_verify_area+0xce/0x6d0 [ 665.231446][T13586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 665.231459][T13586] vfs_read+0x1e4/0xb30 [ 665.231476][T13586] ? __pfx_vfs_read+0x10/0x10 [ 665.231491][T13586] ? __fget_files+0x215/0x3d0 [ 665.231505][T13586] ? __fget_files+0x21f/0x3d0 [ 665.231523][T13586] ksys_read+0x12a/0x250 [ 665.231539][T13586] ? __pfx_ksys_read+0x10/0x10 [ 665.231558][T13586] do_syscall_64+0x106/0xf80 [ 665.231569][T13586] ? clear_bhb_loop+0x40/0x90 [ 665.231582][T13586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.231593][T13586] RIP: 0033:0x7fe2b415cece [ 665.231603][T13586] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 665.231613][T13586] RSP: 002b:00007fe2b5066fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 665.231624][T13586] RAX: ffffffffffffffda RBX: 00007fe2b50676c0 RCX: 00007fe2b415cece [ 665.231631][T13586] RDX: 000000000000000f RSI: 00007fe2b50670a0 RDI: 0000000000000008 [ 665.231637][T13586] RBP: 00007fe2b5067090 R08: 0000000000000000 R09: 0000000000000000 [ 665.231643][T13586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.231649][T13586] R13: 00007fe2b4416038 R14: 00007fe2b4415fa0 R15: 00007fff7cba01b8 [ 665.231663][T13586] [ 665.937662][T13598] Set syz0 is full, maxelem 0 reached [ 666.427129][ T30] audit: type=1400 audit(1771919341.280:1113): avc: denied { setattr } for pid=13600 comm="syz.0.1967" name="anycast6" dev="proc" ino=4026533367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 666.687739][ T30] audit: type=1400 audit(1771919341.550:1114): avc: denied { connect } for pid=13609 comm="syz.3.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 667.838373][T13589] dlm: plock device version mismatch: kernel (1.2.0), user (4.2048.0) [ 668.338315][ T8136] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 668.401354][ T7683] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 668.511150][ T8136] usb 3-1: Using ep0 maxpacket: 16 [ 668.544194][ T8136] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 668.554076][ T8136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.572305][ T30] audit: type=1400 audit(1771919343.431:1115): avc: denied { mount } for pid=13630 comm="syz.1.1975" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 668.594542][ T8136] usb 3-1: Product: syz [ 668.613345][ T8136] usb 3-1: Manufacturer: syz [ 668.624654][ T8136] usb 3-1: SerialNumber: syz [ 669.342510][ T8136] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 669.473867][ T8136] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 669.565947][ T8136] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 669.565996][ T8136] usb 3-1: media controller created [ 670.149384][T13648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1978'. [ 670.514515][T13646] vivid-003: kernel_thread() failed [ 670.564735][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 670.685926][ T8136] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 671.013443][ T8136] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 671.228754][ T8136] usb 3-1: USB disconnect, device number 52 [ 672.874515][T13662] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1983'. [ 673.518531][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 673.859341][T13679] netdevsim netdevsim5: Firmware load for './file0/file0/..' refused, path contains '..' component [ 673.994081][T13679] vxcan1 speed is unknown, defaulting to 1000 [ 674.922524][T13693] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1989'. [ 675.048071][T13688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 675.782132][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1990'. [ 676.236587][T13490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 677.178007][T13708] netlink: 'syz.1.1992': attribute type 1 has an invalid length. [ 677.185770][T13708] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1992'. [ 678.352023][T13717] vxcan1 speed is unknown, defaulting to 1000 [ 678.431933][T13717] lo speed is unknown, defaulting to 1000 [ 678.438428][T13717] lo speed is unknown, defaulting to 1000 [ 678.564402][T13679] lo speed is unknown, defaulting to 1000 [ 678.612817][T13679] lo speed is unknown, defaulting to 1000 [ 679.289026][ T7686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 679.485782][ T30] audit: type=1400 audit(1771919610.334:1116): avc: denied { mounton } for pid=13730 comm="syz.0.1998" path="/380/file0" dev="tmpfs" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 679.566567][T13737] netlink: 'syz.0.1998': attribute type 8 has an invalid length. [ 679.929386][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.155117][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 680.316083][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 680.341032][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 680.358175][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 680.396506][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 680.426939][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 680.460485][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 680.519674][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 680.569047][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.580533][ T30] audit: type=1400 audit(1771919611.445:1117): avc: denied { read } for pid=13748 comm="syz.2.2001" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 680.649737][ T30] audit: type=1400 audit(1771919611.445:1118): avc: denied { open } for pid=13748 comm="syz.2.2001" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 680.718014][ T30] audit: type=1400 audit(1771919611.445:1119): avc: denied { ioctl } for pid=13748 comm="syz.2.2001" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 680.803252][T13757] FAULT_INJECTION: forcing a failure. [ 680.803252][T13757] name failslab, interval 1, probability 0, space 0, times 0 [ 680.944609][T13757] CPU: 1 UID: 0 PID: 13757 Comm: syz.5.2004 Tainted: G L syzkaller #0 PREEMPT(full) [ 680.944640][T13757] Tainted: [L]=SOFTLOCKUP [ 680.944646][T13757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 680.944656][T13757] Call Trace: [ 680.944663][T13757] [ 680.944670][T13757] dump_stack_lvl+0x100/0x190 [ 680.944703][T13757] should_fail_ex.cold+0x5/0xa [ 680.944727][T13757] should_failslab+0xc2/0x120 [ 680.944755][T13757] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 680.944779][T13757] ? __alloc_skb+0x140/0x710 [ 680.944813][T13757] __alloc_skb+0x140/0x710 [ 680.944837][T13757] ? __alloc_skb+0x5b7/0x710 [ 680.944862][T13757] ? __pfx___alloc_skb+0x10/0x10 [ 680.944890][T13757] ? __might_fault+0x20/0x140 [ 680.944915][T13757] pfkey_sendmsg+0x161/0x840 [ 680.944948][T13757] ____sys_sendmsg+0xa54/0xc30 [ 680.944972][T13757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 680.945003][T13757] ___sys_sendmsg+0x190/0x1e0 [ 680.945028][T13757] ? __pfx____sys_sendmsg+0x10/0x10 [ 680.945082][T13757] __sys_sendmsg+0x170/0x220 [ 680.945100][T13757] ? __pfx___sys_sendmsg+0x10/0x10 [ 680.945134][T13757] do_syscall_64+0x106/0xf80 [ 680.945151][T13757] ? clear_bhb_loop+0x40/0x90 [ 680.945174][T13757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.945192][T13757] RIP: 0033:0x7fad8ef9c629 [ 680.945206][T13757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.945222][T13757] RSP: 002b:00007fad8fe03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.945241][T13757] RAX: ffffffffffffffda RBX: 00007fad8f215fa0 RCX: 00007fad8ef9c629 [ 680.945252][T13757] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003 [ 680.945262][T13757] RBP: 00007fad8fe03090 R08: 0000000000000000 R09: 0000000000000000 [ 680.945273][T13757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.945283][T13757] R13: 00007fad8f216038 R14: 00007fad8f215fa0 R15: 00007fff08538738 [ 680.945307][T13757] [ 681.149243][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 681.154792][ T9] usbtmc 1-1:16.0: can't read capabilities [ 681.227545][T13768] netlink: 'syz.1.1999': attribute type 39 has an invalid length. [ 681.368061][T13731] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 681.521919][T13775] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2006'. [ 682.014319][T13490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 682.868689][ T5868] usb 1-1: USB disconnect, device number 50 [ 685.033153][T13490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 687.591679][T12564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 688.192914][T13850] Set syz0 is full, maxelem 0 reached [ 689.538959][T13859] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2029'. [ 689.772394][ T30] audit: type=1400 audit(1771919876.615:1120): avc: denied { mounton } for pid=13863 comm="syz.2.2030" path="/file0" dev="ramfs" ino=44278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 689.812920][T13870] fuse: Bad value for 'fd' [ 690.203031][T13871] nfs: Unknown parameter 'ac0x0000000000000005' [ 690.775938][ T30] audit: type=1400 audit(1771919876.685:1121): avc: denied { getopt } for pid=13863 comm="syz.2.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 690.805907][T12564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 691.427002][T13875] vxcan1 speed is unknown, defaulting to 1000 [ 692.978523][T13887] nfs: Unknown parameter 'ac0x0000000000000005' [ 693.525037][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 693.825528][T13875] lo speed is unknown, defaulting to 1000 [ 693.841459][T13875] lo speed is unknown, defaulting to 1000 [ 695.646212][T13930] nfs: Unknown parameter 'ac0x0000000000000005' [ 696.452012][T13934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2047'. [ 696.547885][T12564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 696.686770][T13936] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2048'. [ 697.701079][ T30] audit: type=1400 audit(1771919884.579:1122): avc: denied { allowed } for pid=13950 comm="syz.5.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 697.825542][ T30] audit: type=1400 audit(1771919884.579:1123): avc: denied { create } for pid=13950 comm="syz.5.2053" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 697.886679][ T30] audit: type=1400 audit(1771919884.579:1124): avc: denied { map } for pid=13950 comm="syz.5.2053" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 697.960535][ T30] audit: type=1400 audit(1771919884.579:1125): avc: denied { read write } for pid=13950 comm="syz.5.2053" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 698.052049][ T30] audit: type=1400 audit(1771919884.689:1126): avc: denied { create } for pid=13944 comm="syz.0.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 698.093479][ T30] audit: type=1400 audit(1771919884.689:1127): avc: denied { write } for pid=13944 comm="syz.0.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 698.138987][ T30] audit: type=1400 audit(1771919884.689:1128): avc: denied { read } for pid=13944 comm="syz.0.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 698.224667][T13959] overlayfs: failed to clone upperpath [ 698.315559][ T30] audit: type=1400 audit(1771919884.699:1129): avc: denied { setopt } for pid=13944 comm="syz.0.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 698.414210][ T30] audit: type=1400 audit(1771919884.699:1130): avc: denied { ioctl } for pid=13944 comm="syz.0.2051" path="socket:[44447]" dev="sockfs" ino=44447 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 698.526874][ T30] audit: type=1400 audit(1771919884.839:1131): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.132 dest=56360 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 699.112547][T12564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 700.992121][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 701.003343][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 701.159953][T13996] ceph: No mds server is up or the cluster is laggy [ 701.286946][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 701.293809][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 702.335852][T12564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 702.821025][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 702.821043][ T30] audit: type=1400 audit(1771919889.692:1197): avc: denied { perfmon } for pid=14027 comm="syz.1.2070" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 702.874045][ T30] audit: type=1400 audit(1771919889.732:1198): avc: denied { prog_run } for pid=14027 comm="syz.1.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 702.964190][ T30] audit: type=1400 audit(1771919889.842:1199): avc: denied { create } for pid=14032 comm="syz.1.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 703.162255][ T30] audit: type=1400 audit(1771919889.872:1200): avc: denied { listen } for pid=14032 comm="syz.1.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 703.218626][ T30] audit: type=1400 audit(1771919889.872:1201): avc: denied { setopt } for pid=14032 comm="syz.1.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 703.292146][ T30] audit: type=1400 audit(1771919889.872:1202): avc: denied { mount } for pid=14032 comm="syz.1.2072" name="/" dev="autofs" ino=44581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 703.357236][ T30] audit: type=1400 audit(1771919889.872:1203): avc: denied { create } for pid=14032 comm="syz.1.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 703.928965][ T30] audit: type=1400 audit(1771919890.002:1204): avc: denied { name_bind } for pid=14032 comm="syz.1.2072" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 703.981070][ T30] audit: type=1400 audit(1771919890.732:1205): avc: denied { ioctl } for pid=14028 comm="syz.2.2071" path="socket:[45518]" dev="sockfs" ino=45518 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 704.612308][ T30] audit: type=1400 audit(1771919890.742:1206): avc: denied { create } for pid=14028 comm="syz.2.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 705.610488][T12564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 706.443812][T14058] FAULT_INJECTION: forcing a failure. [ 706.443812][T14058] name failslab, interval 1, probability 0, space 0, times 0 [ 706.456519][T14058] CPU: 1 UID: 0 PID: 14058 Comm: syz.2.2073 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.456547][T14058] Tainted: [L]=SOFTLOCKUP [ 706.456553][T14058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 706.456562][T14058] Call Trace: [ 706.456569][T14058] [ 706.456576][T14058] dump_stack_lvl+0x100/0x190 [ 706.456607][T14058] should_fail_ex.cold+0x5/0xa [ 706.456629][T14058] should_failslab+0xc2/0x120 [ 706.456648][T14058] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 706.456662][T14058] ? skb_clone+0x190/0x400 [ 706.456675][T14058] skb_clone+0x190/0x400 [ 706.456686][T14058] netlink_deliver_tap+0xaed/0xcc0 [ 706.456700][T14058] netlink_unicast+0x70c/0x870 [ 706.456714][T14058] ? __pfx_netlink_unicast+0x10/0x10 [ 706.456726][T14058] ? __alloc_skb+0x5b7/0x710 [ 706.456746][T14058] netlink_ack+0x655/0xb80 [ 706.456762][T14058] netlink_rcv_skb+0x333/0x420 [ 706.456774][T14058] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 706.456790][T14058] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 706.456808][T14058] ? ns_capable+0xd2/0xf0 [ 706.456823][T14058] nfnetlink_rcv+0x1b3/0x440 [ 706.456838][T14058] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 706.456853][T14058] ? netlink_deliver_tap+0x1ae/0xcc0 [ 706.456866][T14058] netlink_unicast+0x5aa/0x870 [ 706.456880][T14058] ? __pfx_netlink_unicast+0x10/0x10 [ 706.456897][T14058] netlink_sendmsg+0x8b0/0xda0 [ 706.456911][T14058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 706.456922][T14058] ? __might_fault+0x20/0x140 [ 706.456940][T14058] ____sys_sendmsg+0xa54/0xc30 [ 706.456955][T14058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 706.456974][T14058] ___sys_sendmsg+0x190/0x1e0 [ 706.456989][T14058] ? __pfx____sys_sendmsg+0x10/0x10 [ 706.457029][T14058] __sys_sendmsg+0x170/0x220 [ 706.457040][T14058] ? __pfx___sys_sendmsg+0x10/0x10 [ 706.457059][T14058] do_syscall_64+0x106/0xf80 [ 706.457070][T14058] ? clear_bhb_loop+0x40/0x90 [ 706.457083][T14058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.457094][T14058] RIP: 0033:0x7fe2b419c629 [ 706.457104][T14058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.457114][T14058] RSP: 002b:00007fe2b5067028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.457126][T14058] RAX: ffffffffffffffda RBX: 00007fe2b4415fa0 RCX: 00007fe2b419c629 [ 706.457133][T14058] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000005 [ 706.457139][T14058] RBP: 00007fe2b5067090 R08: 0000000000000000 R09: 0000000000000000 [ 706.457145][T14058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.457151][T14058] R13: 00007fe2b4416038 R14: 00007fe2b4415fa0 R15: 00007fff7cba01b8 [ 706.457166][T14058] [ 707.698964][T14079] overlayfs: failed to clone upperpath [ 707.827523][T14081] overlayfs: failed to resolve './file0': -2 [ 708.395747][ T232] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 708.468651][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 708.468667][ T30] audit: type=1400 audit(1771920151.342:1223): avc: denied { bind } for pid=14065 comm="syz.1.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 708.549924][ T30] audit: type=1400 audit(1771920151.422:1224): avc: denied { append } for pid=14085 comm="syz.0.2085" name="video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 709.536533][ T30] audit: type=1400 audit(1771920151.992:1225): avc: denied { write } for pid=14091 comm="syz.0.2087" name="fib_trie" dev="proc" ino=4026533050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 710.406384][T14115] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2088'. [ 710.801877][ T30] audit: type=1400 audit(1771920153.313:1226): avc: denied { write } for pid=14102 comm="syz.0.2088" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 710.916357][T14119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2091'. [ 711.260001][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 711.381008][ T30] audit: type=1400 audit(1771920154.233:1227): avc: denied { ioctl } for pid=14124 comm="syz.1.2092" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 711.472006][T14128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'. [ 711.520949][ T30] audit: type=1400 audit(1771920154.343:1228): avc: denied { write } for pid=14124 comm="syz.1.2092" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 711.896054][T14136] /dev/nullb0: Can't open blockdev [ 711.939547][ T30] audit: type=1400 audit(1771920154.773:1229): avc: denied { mounton } for pid=14133 comm="syz.5.2095" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 712.299302][ T30] audit: type=1400 audit(1771920155.174:1230): avc: denied { read } for pid=14131 comm="syz.0.2094" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 712.456046][ T30] audit: type=1400 audit(1771920155.174:1231): avc: denied { open } for pid=14131 comm="syz.0.2094" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 712.752242][T14138] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 712.796344][T14138] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 713.076383][ T30] audit: type=1400 audit(1771920155.684:1232): avc: denied { create } for pid=14142 comm="syz.5.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 713.145540][T14138] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 713.499795][T14138] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 713.505771][T14138] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 713.744298][T14138] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 713.750991][T14138] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 713.815542][T14138] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 713.835472][ T232] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 713.858334][T14138] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 713.870383][T14138] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 713.881480][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 713.881495][ T30] audit: type=1400 audit(1771920156.734:1235): avc: denied { write } for pid=14157 comm="syz.3.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 713.976290][T14138] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 714.008116][ T30] audit: type=1400 audit(1771920156.734:1236): avc: denied { nlmsg_write } for pid=14157 comm="syz.3.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 714.105597][ T30] audit: type=1400 audit(1771920156.985:1237): avc: denied { create } for pid=14164 comm="syz.2.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 714.186760][ T30] audit: type=1400 audit(1771920156.985:1238): avc: denied { connect } for pid=14164 comm="syz.2.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 714.459140][T12149] Bluetooth: hci1: command 0x0406 tx timeout [ 714.817622][ T30] audit: type=1400 audit(1771920157.335:1239): avc: denied { write } for pid=14164 comm="syz.2.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 715.577455][T12149] Bluetooth: hci2: command 0x0406 tx timeout [ 715.927058][T12149] Bluetooth: hci4: command 0x0406 tx timeout [ 715.933172][T12149] Bluetooth: hci3: command 0x0406 tx timeout [ 715.937167][ T5819] Bluetooth: hci0: command 0x0c1a tx timeout [ 716.251766][ T30] audit: type=1400 audit(1771920159.126:1240): avc: denied { ioctl } for pid=14180 comm="syz.0.2105" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 716.433753][ T30] audit: type=1400 audit(1771920159.316:1241): avc: denied { write } for pid=14190 comm="syz.1.2109" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 716.461714][T14191] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 716.476902][ T30] audit: type=1400 audit(1771920159.346:1242): avc: denied { mounton } for pid=14190 comm="syz.1.2109" path="/syzcgroup/unified/syz1" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 716.518342][ T5875] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 716.538494][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 716.696784][ T5875] usb 1-1: Invalid ep0 maxpacket: 64 [ 717.404456][T12564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 717.664435][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 717.726815][ T5875] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 717.886149][ T30] audit: type=1400 audit(1771920160.736:1243): avc: denied { read } for pid=14201 comm="syz.1.2112" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 717.976196][ T5815] Bluetooth: hci0: command 0x0c1a tx timeout [ 717.986145][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 717.992286][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 717.998889][ T5875] usb 1-1: Invalid ep0 maxpacket: 64 [ 718.006359][ T5875] usb usb1-port1: attempt power cycle [ 718.358810][ T30] audit: type=1400 audit(1771920160.736:1244): avc: denied { open } for pid=14201 comm="syz.1.2112" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 718.449380][ T5875] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 718.616398][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 718.727534][ T5875] usb 1-1: device not accepting address 53, error -71 [ 719.600186][ T7686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 719.876291][T14228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2118'. [ 720.115094][ T30] audit: type=1400 audit(1771920162.958:1245): avc: denied { create } for pid=14230 comm="syz.2.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 720.179618][ T30] audit: type=1400 audit(1771920162.958:1246): avc: denied { read write } for pid=14230 comm="syz.2.2121" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 720.305062][ T30] audit: type=1400 audit(1771920162.958:1247): avc: denied { open } for pid=14230 comm="syz.2.2121" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 720.328872][ T30] audit: type=1400 audit(1771920163.028:1248): avc: denied { firmware_load } for pid=14230 comm="syz.2.2121" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 720.453996][ T30] audit: type=1400 audit(1771920163.028:1249): avc: denied { create } for pid=14230 comm="syz.2.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 720.494760][ T30] audit: type=1400 audit(1771920163.028:1250): avc: denied { setopt } for pid=14230 comm="syz.2.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 720.581883][ T30] audit: type=1400 audit(1771920163.378:1251): avc: denied { mount } for pid=14235 comm="syz.5.2122" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 721.008528][ T30] audit: type=1400 audit(1771920163.378:1252): avc: denied { map } for pid=14235 comm="syz.5.2122" path="socket:[45956]" dev="sockfs" ino=45956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 721.404962][T14252] FAULT_INJECTION: forcing a failure. [ 721.404962][T14252] name failslab, interval 1, probability 0, space 0, times 0 [ 721.444424][ T30] audit: type=1400 audit(1771920163.378:1253): avc: denied { read accept } for pid=14235 comm="syz.5.2122" path="socket:[45956]" dev="sockfs" ino=45956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 721.613323][T14252] CPU: 1 UID: 0 PID: 14252 Comm: syz.0.2129 Tainted: G L syzkaller #0 PREEMPT(full) [ 721.613350][T14252] Tainted: [L]=SOFTLOCKUP [ 721.613362][T14252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 721.613373][T14252] Call Trace: [ 721.613379][T14252] [ 721.613386][T14252] dump_stack_lvl+0x100/0x190 [ 721.613418][T14252] should_fail_ex.cold+0x5/0xa [ 721.613440][T14252] should_failslab+0xc2/0x120 [ 721.613468][T14252] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 721.613489][T14252] ? __alloc_skb+0x140/0x710 [ 721.613517][T14252] __alloc_skb+0x140/0x710 [ 721.613538][T14252] ? __alloc_skb+0x5b7/0x710 [ 721.613560][T14252] ? __pfx___alloc_skb+0x10/0x10 [ 721.613580][T14252] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 721.613605][T14252] sock_wmalloc+0xd4/0x120 [ 721.613629][T14252] l2tp_ip_sendmsg+0x1b6/0x1920 [ 721.613651][T14252] ? __might_fault+0x20/0x140 [ 721.613670][T14252] ? __might_fault+0xc5/0x140 [ 721.613690][T14252] ? __pfx_l2tp_ip_sendmsg+0x10/0x10 [ 721.613713][T14252] inet_sendmsg+0x11c/0x140 [ 721.613735][T14252] ____sys_sendmsg+0x9ad/0xc30 [ 721.613758][T14252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 721.613781][T14252] ? __pfx__kstrtoull+0x10/0x10 [ 721.613802][T14252] ___sys_sendmsg+0x190/0x1e0 [ 721.613823][T14252] ? __pfx____sys_sendmsg+0x10/0x10 [ 721.613854][T14252] ? find_held_lock+0x2b/0x80 [ 721.613888][T14252] __sys_sendmmsg+0x205/0x430 [ 721.613907][T14252] ? __pfx___sys_sendmmsg+0x10/0x10 [ 721.613930][T14252] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 721.613960][T14252] ? fput+0x79/0x100 [ 721.613977][T14252] ? ksys_write+0x1ac/0x250 [ 721.613999][T14252] ? __pfx_ksys_write+0x10/0x10 [ 721.614024][T14252] __x64_sys_sendmmsg+0x9c/0x100 [ 721.614039][T14252] ? lockdep_hardirqs_on+0x78/0x100 [ 721.614054][T14252] do_syscall_64+0x106/0xf80 [ 721.614069][T14252] ? clear_bhb_loop+0x40/0x90 [ 721.614089][T14252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.614104][T14252] RIP: 0033:0x7fbb2b19c629 [ 721.614116][T14252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.614131][T14252] RSP: 002b:00007fbb2c09d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 721.614147][T14252] RAX: ffffffffffffffda RBX: 00007fbb2b416090 RCX: 00007fbb2b19c629 [ 721.614157][T14252] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000003 [ 721.614166][T14252] RBP: 00007fbb2c09d090 R08: 0000000000000000 R09: 0000000000000000 [ 721.614176][T14252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.614185][T14252] R13: 00007fbb2b416128 R14: 00007fbb2b416090 R15: 00007fffeb07db58 [ 721.614208][T14252] [ 721.635599][ T30] audit: type=1400 audit(1771920163.708:1254): avc: denied { mount } for pid=14240 comm="syz.2.2124" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 721.956019][T14257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2132'. [ 722.019638][ T7686] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.157376][ T7686] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.434937][ T7686] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.777202][T13490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 722.885267][T14273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2136'. [ 723.645430][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 723.667730][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 723.680093][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 723.697996][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 723.711795][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 723.744624][ T7686] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.840261][T14283] vxcan1 speed is unknown, defaulting to 1000 [ 724.123179][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 724.308615][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 724.330061][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 724.345018][ T10] usb 2-1: can't read configurations, error -61 [ 724.512791][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 724.532418][ T7686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.583226][ T7686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.604834][ T7686] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 724.619808][ T7686] bond0 (unregistering): Released all slaves [ 724.634282][T14283] lo speed is unknown, defaulting to 1000 [ 724.652134][T14283] lo speed is unknown, defaulting to 1000 [ 724.672719][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 724.679766][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 724.711038][ T10] usb 2-1: can't read configurations, error -61 [ 724.721256][ T10] usb usb2-port1: attempt power cycle [ 725.322470][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 725.352990][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 725.374729][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 725.392277][ T10] usb 2-1: can't read configurations, error -61 [ 725.399872][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 725.399883][ T30] audit: type=1400 audit(1771920168.290:1275): avc: denied { read open } for pid=14303 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.458681][ T30] audit: type=1400 audit(1771920168.320:1276): avc: denied { getattr } for pid=14303 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.572354][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 725.593062][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 725.600564][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 725.622355][ T10] usb 2-1: can't read configurations, error -61 [ 725.647527][ T10] usb usb2-port1: unable to enumerate USB device [ 725.812153][ T5815] Bluetooth: hci0: command tx timeout [ 725.938886][ T30] audit: type=1400 audit(1771920168.820:1277): avc: denied { write } for pid=14311 comm="syz.0.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 726.059647][ T30] audit: type=1400 audit(1771920168.830:1278): avc: denied { add_name } for pid=14299 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.233293][ T30] audit: type=1400 audit(1771920168.830:1279): avc: denied { create } for pid=14299 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 726.406893][ T30] audit: type=1400 audit(1771920168.830:1280): avc: denied { write } for pid=14299 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=9915 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 726.503532][ T30] audit: type=1400 audit(1771920168.830:1281): avc: denied { append } for pid=14299 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=9915 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 726.657534][ T30] audit: type=1400 audit(1771920168.951:1282): avc: denied { write } for pid=14311 comm="syz.0.2144" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 726.687050][ T30] audit: type=1400 audit(1771920169.041:1283): avc: denied { open } for pid=14311 comm="syz.0.2144" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 726.741708][ T30] audit: type=1400 audit(1771920169.161:1284): avc: denied { read } for pid=14311 comm="syz.0.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 726.771215][ T7686] hsr_slave_0: left promiscuous mode [ 726.778088][ T7686] hsr_slave_1: left promiscuous mode [ 726.791299][ T7686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.808110][ T7686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.839162][ T7686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.855043][ T7686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.876924][ T7686] veth1_macvtap: left promiscuous mode [ 726.887267][ T7686] veth0_macvtap: left promiscuous mode [ 726.899027][ T7686] veth1_vlan: left promiscuous mode [ 726.909513][ T7686] veth0_vlan: left promiscuous mode [ 727.659747][T14339] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2147'. [ 727.892156][ T5815] Bluetooth: hci0: command tx timeout [ 727.943046][ T7686] team0 (unregistering): Port device team_slave_1 removed [ 727.955983][ T7686] team0 (unregistering): Port device team_slave_0 removed [ 728.174153][T14283] chnl_net:caif_netlink_parms(): no params data found [ 728.241401][T14349] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2149'. [ 728.504653][T14356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2151'. [ 728.541279][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 728.888805][T14283] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.939656][T14283] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.982631][T14283] bridge_slave_0: entered allmulticast mode [ 729.001501][T14283] bridge_slave_0: entered promiscuous mode [ 729.164584][T14283] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.190594][T14283] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.225293][T14283] bridge_slave_1: entered allmulticast mode [ 729.299664][T14283] bridge_slave_1: entered promiscuous mode [ 729.486405][T14283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.527835][T14283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.690833][T14283] team0: Port device team_slave_0 added [ 729.701517][T14283] team0: Port device team_slave_1 added [ 729.970349][ T5815] Bluetooth: hci0: command tx timeout [ 730.079692][T14283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.089344][T14283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.171839][T14283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.211601][T14283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.229968][T14283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.318397][T14283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.798616][T14397] nfs: Unknown parameter 'ac0x0000000000000005' [ 731.401490][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 731.401508][ T30] audit: type=1326 audit(1771920173.713:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14394 comm="syz.0.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2b19c629 code=0x7ffc0000 [ 731.429449][T14283] hsr_slave_0: entered promiscuous mode [ 731.437595][T14283] hsr_slave_1: entered promiscuous mode [ 731.550814][ T30] audit: type=1326 audit(1771920173.713:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14394 comm="syz.0.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb2b19c629 code=0x7ffc0000 [ 731.633409][ T30] audit: type=1400 audit(1771920174.523:1289): avc: denied { map } for pid=14399 comm="syz.1.2161" path="socket:[47278]" dev="sockfs" ino=47278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 731.711199][ T30] audit: type=1400 audit(1771920174.523:1290): avc: denied { mount } for pid=14399 comm="syz.1.2161" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 731.800243][ T30] audit: type=1400 audit(1771920174.683:1291): avc: denied { read write } for pid=14399 comm="syz.1.2161" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 731.885048][ T30] audit: type=1400 audit(1771920174.683:1292): avc: denied { open } for pid=14399 comm="syz.1.2161" path="/421/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 732.049964][ T5815] Bluetooth: hci0: command tx timeout [ 732.251803][T14283] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 732.283533][T14283] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 732.334159][T14283] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 732.382883][T14283] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 732.543409][T14283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.602964][ T5875] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 732.893780][T14283] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.937943][T12564] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.945156][T12564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.996615][T13490] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.003719][T13490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.020676][ T30] audit: type=1400 audit(1771920175.914:1293): avc: denied { egress } for pid=9 comm="kworker/0:0" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 733.056531][ T30] audit: type=1400 audit(1771920175.914:1294): avc: denied { sendto } for pid=9 comm="kworker/0:0" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 733.068533][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 733.169046][ T5875] usb 3-1: unable to get BOS descriptor or descriptor too short [ 733.199922][ T5875] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 733.228304][ T5875] usb 3-1: config 12 descriptor has 1 excess byte, ignoring [ 733.531554][ T5875] usb 3-1: config 12 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 733.531941][ T30] audit: type=1400 audit(1771920176.424:1295): avc: denied { sys_module } for pid=14283 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 733.684542][ T5875] usb 3-1: config 12 interface 0 has no altsetting 0 [ 733.737905][ T5875] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 733.765699][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.795956][ T5875] usb 3-1: Product: syz [ 733.815304][ T5875] usb 3-1: Manufacturer: syz [ 733.838159][ T5875] usb 3-1: SerialNumber: syz [ 733.921195][T14283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.086736][ T5875] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 734.106954][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2166'. [ 734.121829][ T5875] usb 3-1: selecting invalid altsetting 0 [ 734.288646][T13490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 734.306056][ T30] audit: type=1400 audit(1771920177.195:1296): avc: denied { create } for pid=14443 comm="syz.3.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 734.341949][T14450] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 734.365682][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 734.443823][T14450] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 734.457941][ T5875] snd-usb-audio 3-1:12.0: probe with driver snd-usb-audio failed with error -2 [ 734.526440][ T5875] usb 3-1: USB disconnect, device number 53 [ 734.593923][T14452] syzkaller0: mtu greater than device maximum [ 734.660637][ T6056] udevd[6056]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.868971][T14283] veth0_vlan: entered promiscuous mode [ 736.205944][T14283] veth1_vlan: entered promiscuous mode [ 736.309266][T14283] veth0_macvtap: entered promiscuous mode [ 736.340819][T14283] veth1_macvtap: entered promiscuous mode [ 736.908387][T14283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.958066][T14283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.980395][ T232] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.236280][ T232] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.286795][ T232] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.350660][ T232] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.482984][ T7683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.515727][ T7683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.607049][ T232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.614882][ T232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.683334][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 738.683350][ T30] audit: type=1400 audit(1771920181.577:1305): avc: denied { mounton } for pid=14283 comm="syz-executor" path="/root/syzkaller.i80j3D/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 738.825616][ T30] audit: type=1400 audit(1771920181.617:1306): avc: denied { mount } for pid=14283 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 738.924152][ T30] audit: type=1400 audit(1771920181.617:1307): avc: denied { mounton } for pid=14283 comm="syz-executor" path="/root/syzkaller.i80j3D/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 739.025598][ T30] audit: type=1400 audit(1771920181.617:1308): avc: denied { mounton } for pid=14283 comm="syz-executor" path="/root/syzkaller.i80j3D/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=47704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 739.078616][ T30] audit: type=1400 audit(1771920181.667:1309): avc: denied { mounton } for pid=14283 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 739.107910][ T30] audit: type=1400 audit(1771920181.677:1310): avc: denied { mount } for pid=14283 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 739.359876][ T30] audit: type=1400 audit(1771920181.677:1311): avc: denied { mounton } for pid=14283 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 739.612114][T12542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 739.639448][ T30] audit: type=1400 audit(1771920181.897:1312): avc: denied { ioctl } for pid=14515 comm="syz.2.2177" path="socket:[46837]" dev="sockfs" ino=46837 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 739.732262][ T30] audit: type=1400 audit(1771920181.907:1313): avc: denied { ioctl } for pid=14515 comm="syz.2.2177" path="socket:[46840]" dev="sockfs" ino=46840 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 739.798857][ T30] audit: type=1400 audit(1771920181.977:1314): avc: denied { append } for pid=14519 comm="syz.0.2178" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 739.860571][T14541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2180'. [ 741.327842][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.351416][T14560] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2183'. [ 741.619677][T14567] vxcan1 speed is unknown, defaulting to 1000 [ 742.757008][T14567] lo speed is unknown, defaulting to 1000 [ 742.854789][T14567] lo speed is unknown, defaulting to 1000 [ 743.206805][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 743.687937][ T9] IPVS: starting estimator thread 0... [ 743.845425][T14586] IPVS: using max 48 ests per chain, 115200 per kthread [ 744.043007][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 744.113621][ T10] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 744.209824][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.321458][ T10] usb 7-1: config 0 descriptor?? [ 744.448802][T14611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2195'. [ 744.625121][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 744.738559][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 744.738579][ T30] audit: type=1400 audit(1771920187.580:1323): avc: denied { create } for pid=14609 comm="syz.1.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 744.779488][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 745.361891][ T30] audit: type=1400 audit(1771920187.590:1324): avc: denied { connect } for pid=14609 comm="syz.1.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 745.440377][ T30] audit: type=1400 audit(1771920187.590:1325): avc: denied { ioctl } for pid=14609 comm="syz.1.2197" path="socket:[47050]" dev="sockfs" ino=47050 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 745.465850][ T30] audit: type=1400 audit(1771920187.590:1326): avc: denied { write } for pid=14609 comm="syz.1.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 745.486425][ T7682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 745.610810][ T30] audit: type=1400 audit(1771920188.420:1327): avc: denied { read write } for pid=14575 comm="syz.6.2188" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 745.639457][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 745.646612][ T10] usb 7-1: media controller created [ 746.086428][ T9] hid_parser_main: 91 callbacks suppressed [ 746.086452][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 746.110994][ T30] audit: type=1400 audit(1771920188.420:1328): avc: denied { open } for pid=14575 comm="syz.6.2188" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 746.136533][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 746.149048][ T9] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 747.119515][ T10] az6027: usb out operation failed. (-71) [ 747.186088][ T10] az6027: usb out operation failed. (-71) [ 747.207508][ T10] stb0899_attach: Driver disabled by Kconfig [ 747.223733][ T10] az6027: no front-end attached [ 747.223733][ T10] [ 747.249612][ T10] az6027: usb out operation failed. (-71) [ 747.267845][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 747.301420][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input28 [ 747.335443][ T30] audit: type=1400 audit(1771920190.241:1329): avc: denied { read } for pid=5161 comm="acpid" name="event4" dev="devtmpfs" ino=3521 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 747.336259][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 747.397859][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 747.414335][ T30] audit: type=1400 audit(1771920190.241:1330): avc: denied { open } for pid=5161 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3521 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 747.454642][ T10] usb 7-1: USB disconnect, device number 2 [ 747.518832][T14635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2200'. [ 747.611002][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 747.628361][ T30] audit: type=1400 audit(1771920190.241:1331): avc: denied { ioctl } for pid=5161 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3521 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 747.801130][ T8136] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 747.909842][ T30] audit: type=1400 audit(1771920190.811:1332): avc: denied { append } for pid=14642 comm="syz.6.2204" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 747.952666][ T8136] usb 3-1: Using ep0 maxpacket: 32 [ 747.987696][ T8136] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 747.997044][ T8136] usb 3-1: config 0 has no interface number 0 [ 748.007184][ T8136] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 748.019101][ T8136] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 748.028376][ T8136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.101377][ T8136] usb 3-1: Product: syz [ 748.110235][ T8136] usb 3-1: Manufacturer: syz [ 748.121790][ T8136] usb 3-1: SerialNumber: syz [ 748.139188][ T8136] usb 3-1: config 0 descriptor?? [ 748.153012][T14634] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 748.220920][ T792] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 748.370882][T14634] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 748.382587][ T792] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 748.395098][ T792] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 748.417523][ T792] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 748.431322][ T792] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 748.445857][ T792] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 748.478727][ T792] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 748.488021][ T792] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 748.506242][ T792] usb 7-1: Product: syz [ 748.517371][ T792] usb 7-1: Manufacturer: syz [ 748.554210][ T792] cdc_wdm 7-1:1.0: skipping garbage [ 748.559473][ T792] cdc_wdm 7-1:1.0: skipping garbage [ 748.593334][ T8136] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 748.608791][ T8136] asix 3-1:0.188: probe with driver asix failed with error -61 [ 748.641745][ T792] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 748.670992][ T792] cdc_wdm 7-1:1.0: Unknown control protocol [ 749.214022][ T10] usb 7-1: USB disconnect, device number 3 [ 749.719717][T14668] nfs: Unknown parameter 'ac0xffffffffffffffff' [ 750.336700][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 750.336717][ T30] audit: type=1326 audit(1771920192.662:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14666 comm="syz.6.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd0f9c629 code=0x7ffc0000 [ 750.409538][ T30] audit: type=1326 audit(1771920192.662:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14666 comm="syz.6.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd0f9c629 code=0x7ffc0000 [ 750.954583][T14679] netlink: 'syz.1.2209': attribute type 1 has an invalid length. [ 750.978741][T12564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 751.026135][T14682] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 751.276093][ T30] audit: type=1400 audit(1771920194.073:1338): avc: denied { getopt } for pid=14670 comm="syz.1.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 751.769418][ T8136] usb 3-1: USB disconnect, device number 54 [ 752.187620][ T30] audit: type=1400 audit(1771920195.084:1339): avc: denied { read } for pid=14698 comm="syz.1.2216" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 752.276220][ T30] audit: type=1400 audit(1771920195.164:1340): avc: denied { open } for pid=14698 comm="syz.1.2216" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 752.658313][ T30] audit: type=1400 audit(1771920195.534:1341): avc: denied { execute } for pid=14698 comm="syz.1.2216" path="/428/cpu.stat" dev="tmpfs" ino=2348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 753.236914][ T30] audit: type=1400 audit(1771920196.134:1342): avc: denied { ioctl } for pid=14698 comm="syz.1.2216" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 753.988549][ T30] audit: type=1400 audit(1771920196.804:1343): avc: denied { sqpoll } for pid=14722 comm="syz.3.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 755.315013][T14749] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 755.343204][T14749] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 755.817195][ T8136] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 755.978753][ T8136] usb 2-1: config 0 interface 0 has no altsetting 0 [ 755.993176][ T8136] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 756.039740][ T8136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.083632][ T8136] usb 2-1: config 0 descriptor?? [ 756.420021][ T30] audit: type=1400 audit(1771920199.326:1344): avc: denied { ioctl } for pid=14780 comm="syz.3.2229" path="socket:[48374]" dev="sockfs" ino=48374 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 756.700560][T14791] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 756.987522][ T8136] video4linux radio48: keene_cmd_main failed (-71) [ 756.994511][ T8136] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 757.032546][ T8136] usb 2-1: USB disconnect, device number 53 [ 757.322595][T13490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 759.415496][T14833] netlink: 'syz.6.2238': attribute type 8 has an invalid length. [ 759.425055][T14833] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.433384][T14833] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.814880][T14833] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 760.022166][T14842] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 760.264016][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 760.274578][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 760.284690][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 760.298702][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 760.308251][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 760.365082][ T30] audit: type=1400 audit(1771920203.268:1345): avc: denied { setopt } for pid=14846 comm="syz.6.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 760.368229][T14847] vxcan1 speed is unknown, defaulting to 1000 [ 760.423937][ T30] audit: type=1400 audit(1771920203.298:1346): avc: denied { ioctl } for pid=14846 comm="syz.6.2242" path="socket:[49727]" dev="sockfs" ino=49727 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 760.616418][ T30] audit: type=1400 audit(1771920203.298:1347): avc: denied { ioctl } for pid=14846 comm="syz.6.2242" path="socket:[49726]" dev="sockfs" ino=49726 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 761.405022][T14862] nfs: Unknown parameter 'ac0x0000000000000004' [ 761.934026][ T30] audit: type=1326 audit(1771920204.448:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14859 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe96079c629 code=0x7ffc0000 [ 761.994068][ T30] audit: type=1326 audit(1771920204.448:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14859 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe96079c629 code=0x7ffc0000 [ 762.639588][ T5819] Bluetooth: hci5: command tx timeout [ 762.706485][T14847] lo speed is unknown, defaulting to 1000 [ 762.730659][T14847] lo speed is unknown, defaulting to 1000 [ 763.110024][T14872] netlink: 592 bytes leftover after parsing attributes in process `syz.3.2249'. [ 763.119788][T14872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=14872 comm=syz.3.2249 [ 763.133041][ T232] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 763.145784][T14872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=14872 comm=syz.3.2249 [ 763.203650][T14872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=14872 comm=syz.3.2249 [ 763.283665][T14872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=14872 comm=syz.3.2249 [ 763.413504][T14872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=14872 comm=syz.3.2249 [ 763.479165][ T30] audit: type=1400 audit(1771920206.389:1350): avc: denied { bind } for pid=14877 comm="syz.6.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 763.593423][ T30] audit: type=1400 audit(1771920206.429:1351): avc: denied { name_bind } for pid=14877 comm="syz.6.2251" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 763.597775][T14847] chnl_net:caif_netlink_parms(): no params data found [ 763.656448][ T30] audit: type=1400 audit(1771920206.429:1352): avc: denied { node_bind } for pid=14877 comm="syz.6.2251" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 763.844975][T14847] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.862094][T14847] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.873432][ T5811] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 763.922451][T14847] bridge_slave_0: entered allmulticast mode [ 763.994008][T14847] bridge_slave_0: entered promiscuous mode [ 764.093095][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 764.111629][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.122745][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.132511][ T5811] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 764.151208][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.211677][T14847] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.218839][ T5811] usb 2-1: config 0 descriptor?? [ 764.242700][ T5811] hub 2-1:0.0: USB hub found [ 764.272942][T14847] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.293180][T14847] bridge_slave_1: entered allmulticast mode [ 764.302237][T14847] bridge_slave_1: entered promiscuous mode [ 764.320633][T14894] netlink: 'syz.6.2254': attribute type 1 has an invalid length. [ 764.412130][T14847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.435074][T14847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.437150][ T5811] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 764.523482][T14847] team0: Port device team_slave_0 added [ 764.547986][T14896] netlink: 'syz.6.2255': attribute type 1 has an invalid length. [ 764.557023][T14847] team0: Port device team_slave_1 added [ 764.572881][ T8136] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 764.638488][T14847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.653834][T14847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.684832][ T5815] Bluetooth: hci5: command tx timeout [ 764.691532][T14847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.708456][T14847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.716892][T14847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.762897][T14847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.772996][ T8136] usb 3-1: Using ep0 maxpacket: 8 [ 764.784343][ T8136] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 764.808569][ T8136] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 764.816696][T14847] hsr_slave_0: entered promiscuous mode [ 764.825453][T14847] hsr_slave_1: entered promiscuous mode [ 764.831810][T14847] debugfs: 'hsr0' already exists in 'hsr' [ 765.212749][T14899] nfs: Unknown parameter 'ac0x0000000000000003' [ 765.532246][ T8136] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 765.542057][ T8136] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 765.552879][ T30] audit: type=1326 audit(1771920208.390:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349b99c629 code=0x7ffc0000 [ 765.556468][ T8136] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 765.580981][ T5811] hid-generic 0003:046D:C31C.001D: unknown main item tag 0x0 [ 765.591887][ T8136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 765.606333][ T8136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.607969][T14847] Cannot create hsr debugfs directory [ 765.638082][ T30] audit: type=1326 audit(1771920208.390:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14898 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349b99c629 code=0x7ffc0000 [ 765.694396][ T5811] hid-generic 0003:046D:C31C.001D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 765.843613][ T30] audit: type=1326 audit(1771920208.760:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14882 comm="syz.1.2248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe96079c629 code=0x0 [ 765.923776][ T8136] usb 3-1: usb_control_msg returned -71 [ 765.946430][ T8136] usbtmc 3-1:16.0: can't read capabilities [ 765.960956][ T30] audit: type=1326 audit(1771920208.820:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14882 comm="syz.1.2248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe96079c629 code=0x0 [ 766.124561][ T8136] usb 3-1: USB disconnect, device number 55 [ 766.292401][ T30] audit: type=1400 audit(1771920208.830:1357): avc: denied { create } for pid=14885 comm="syz.2.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 766.503413][T14847] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 766.519975][T14847] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 766.534823][T14847] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 766.554511][T14847] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 766.761914][ T5815] Bluetooth: hci5: command tx timeout [ 767.092845][T14847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.162693][T14847] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.186017][ T7683] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.193438][ T7683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.244003][T13490] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.251091][T13490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.351774][ T9] usb 2-1: USB disconnect, device number 54 [ 767.552276][T14930] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 767.559590][T14930] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 767.570140][T14930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=14930 comm=syz.2.2264 [ 768.315448][T14847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 768.357375][T14847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 768.676239][T14847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.729057][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 768.729075][ T30] audit: type=1400 audit(1771920211.632:1359): avc: denied { accept } for pid=14924 comm="syz.6.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 768.767166][ C1] [ 768.769515][ C1] ================================ [ 768.774612][ C1] WARNING: inconsistent lock state [ 768.779700][ C1] syzkaller #0 Tainted: G L [ 768.785651][ C1] -------------------------------- [ 768.790730][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 768.797547][ C1] kworker/u8:1/13 [HC0[0]:SC1[3]:HE1:SE0] takes: [ 768.803848][ C1] ffff888052a43760 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: inet6_getname+0x1a2/0x860 [ 768.813131][ C1] {SOFTIRQ-ON-W} state was registered at: [ 768.818818][ C1] lock_acquire+0x1cf/0x380 [ 768.823396][ C1] lock_sock_nested+0x41/0xf0 [ 768.828144][ C1] tcp_sock_set_nodelay+0x1c/0x120 [ 768.833320][ C1] rds_tcp_listen_init+0x157/0x4e0 [ 768.838502][ C1] rds_tcp_init_net+0x16d/0x310 [ 768.843423][ C1] ops_init+0x1e2/0x5f0 [ 768.847641][ C1] register_pernet_operations+0x3cb/0x740 [ 768.853423][ C1] register_pernet_device+0x29/0x80 [ 768.858685][ C1] rds_tcp_init+0x85/0x110 [ 768.863165][ C1] do_one_initcall+0x11d/0x760 [ 768.867993][ C1] kernel_init_freeable+0x6e5/0x7a0 [ 768.873258][ C1] kernel_init+0x1f/0x1e0 [ 768.877658][ C1] ret_from_fork+0x754/0xd80 [ 768.882312][ C1] ret_from_fork_asm+0x1a/0x30 [ 768.887140][ C1] irq event stamp: 3004112 [ 768.891525][ C1] hardirqs last enabled at (3004112): [] _raw_spin_unlock_irqrestore+0x52/0x80 [ 768.902092][ C1] hardirqs last disabled at (3004111): [] _raw_spin_lock_irqsave+0x52/0x60 [ 768.912224][ C1] softirqs last enabled at (3004056): [] __dev_queue_xmit+0x7dc/0x4750 [ 768.922097][ C1] softirqs last disabled at (3004057): [] do_softirq+0xac/0xe0 [ 768.931186][ C1] [ 768.931186][ C1] other info that might help us debug this: [ 768.939217][ C1] Possible unsafe locking scenario: [ 768.939217][ C1] [ 768.946638][ C1] CPU0 [ 768.949894][ C1] ---- [ 768.953153][ C1] lock(k-sk_lock-AF_INET6); [ 768.957808][ C1] [ 768.961236][ C1] lock(k-sk_lock-AF_INET6); [ 768.966067][ C1] [ 768.966067][ C1] *** DEADLOCK *** [ 768.966067][ C1] [ 768.974184][ C1] 10 locks held by kworker/u8:1/13: [ 768.979354][ C1] #0: ffff88802b84f948 ((wq_completion)krds_cp_wq#2/0){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 768.990464][ C1] #1: ffffc90000127d08 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 769.002613][ C1] #2: ffff888052a451e0 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: tcp_sock_set_cork+0x1c/0xc0 [ 769.012506][ C1] #3: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: inet6_csk_xmit+0x136/0x760 [ 769.021885][ C1] #4: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: ip6_xmit+0x2dc/0x26e0 [ 769.030824][ C1] #5: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x135/0xa60 [ 769.039845][ C1] #6: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x32a/0x1580 [ 769.049408][ C1] #7: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x29/0x2f0 [ 769.058265][ C1] #8: ffff888052a436e0 (k-slock-AF_INET6/1){+.-.}-{3:3}, at: tcp_v6_rcv+0x285b/0x42c0 [ 769.067905][ C1] #9: ffff888052a43908 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x90/0x790 [ 769.077816][ C1] [ 769.077816][ C1] stack backtrace: [ 769.083683][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.083704][ C1] Tainted: [L]=SOFTLOCKUP [ 769.083710][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 769.083720][ C1] Workqueue: krds_cp_wq#2/0 rds_send_worker [ 769.083738][ C1] Call Trace: [ 769.083743][ C1] [ 769.083748][ C1] dump_stack_lvl+0x100/0x190 [ 769.083771][ C1] print_usage_bug.part.0+0x257/0x340 [ 769.083794][ C1] mark_lock+0x74a/0xa20 [ 769.083815][ C1] ? lock_acquire+0x1cf/0x380 [ 769.083837][ C1] __lock_acquire+0x103a/0x2630 [ 769.083859][ C1] ? unwind_next_frame+0x3be/0x1ea0 [ 769.083875][ C1] ? unwind_next_frame+0x3be/0x1ea0 [ 769.083894][ C1] lock_acquire+0x1cf/0x380 [ 769.083914][ C1] ? inet6_getname+0x1a2/0x860 [ 769.083928][ C1] ? arch_stack_walk+0x94/0xf0 [ 769.083945][ C1] lock_sock_nested+0x41/0xf0 [ 769.083966][ C1] ? inet6_getname+0x1a2/0x860 [ 769.083979][ C1] inet6_getname+0x1a2/0x860 [ 769.083993][ C1] rds_tcp_get_peer_sport+0x7c/0x110 [ 769.084015][ C1] ? __pfx_rds_tcp_get_peer_sport+0x10/0x10 [ 769.084039][ C1] ? find_held_lock+0x2b/0x80 [ 769.084056][ C1] ? rds_addr_cmp+0x10d/0x150 [ 769.084072][ C1] rds_tcp_conn_slots_available+0x279/0x390 [ 769.084094][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 769.084116][ C1] rds_recv_hs_exthdrs+0x5cb/0x7e0 [ 769.084130][ C1] ? ip6_output+0x2aa/0xa60 [ 769.084145][ C1] ? ip6_xmit+0xf31/0x26e0 [ 769.084162][ C1] ? __tcp_sock_set_cork.part.0+0x105/0x140 [ 769.084178][ C1] ? tcp_sock_set_cork+0x9b/0xc0 [ 769.084193][ C1] ? rds_send_xmit+0x17cb/0x2950 [ 769.084208][ C1] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 769.084221][ C1] ? kthread+0x370/0x450 [ 769.084233][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 769.084252][ C1] rds_recv_incoming+0xdbf/0x1150 [ 769.084271][ C1] ? __pfx_rds_recv_incoming+0x10/0x10 [ 769.084286][ C1] ? skb_copy_bits+0x5c8/0x8d0 [ 769.084308][ C1] rds_tcp_data_recv+0x278/0xce0 [ 769.084333][ C1] __tcp_read_sock+0x204/0x8d0 [ 769.084351][ C1] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 769.084373][ C1] ? __pfx___tcp_read_sock+0x10/0x10 [ 769.084390][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 769.084414][ C1] ? __mod_timer+0x40e/0xca0 [ 769.084437][ C1] rds_tcp_read_sock+0x12e/0x280 [ 769.084458][ C1] ? __pfx_rds_tcp_read_sock+0x10/0x10 [ 769.084479][ C1] ? lock_acquire+0x1cf/0x380 [ 769.084502][ C1] ? __pfx_sock_def_readable+0x10/0x10 [ 769.084522][ C1] rds_tcp_data_ready+0x1c9/0x790 [ 769.084545][ C1] tcp_data_ready+0x114/0x5a0 [ 769.084564][ C1] tcp_rcv_established+0x29f0/0x3980 [ 769.084584][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 769.084602][ C1] ? lock_acquire+0x1cf/0x380 [ 769.084624][ C1] tcp_v6_do_rcv+0x118b/0x1dd0 [ 769.084641][ C1] tcp_v6_rcv+0x2b03/0x42c0 [ 769.084661][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 769.084676][ C1] ? raw6_local_deliver+0x3f3/0xa80 [ 769.084692][ C1] ? raw6_local_deliver+0x3fd/0xa80 [ 769.084706][ C1] ? nf_hook.constprop.0+0x2d9/0x750 [ 769.084725][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 769.084740][ C1] ip6_protocol_deliver_rcu+0x188/0x1500 [ 769.084762][ C1] ip6_input_finish+0x1e4/0x4a0 [ 769.084781][ C1] ip6_input+0x105/0x2f0 [ 769.084798][ C1] ipv6_rcv+0x261/0x610 [ 769.084815][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 769.084832][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 769.084852][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 769.084872][ C1] ? lock_acquire+0x1cf/0x380 [ 769.084893][ C1] ? process_backlog+0x32a/0x1580 [ 769.084912][ C1] ? process_backlog+0x32a/0x1580 [ 769.084930][ C1] __netif_receive_skb+0x1f/0x120 [ 769.084949][ C1] process_backlog+0x37a/0x1580 [ 769.084969][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 769.084989][ C1] net_rx_action+0xa40/0xf20 [ 769.085009][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 769.085028][ C1] ? lock_acquire+0x140/0x380 [ 769.085049][ C1] ? find_held_lock+0x2b/0x80 [ 769.085065][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 769.085087][ C1] ? sched_clock+0x38/0x60 [ 769.085107][ C1] ? sched_clock_cpu+0x6c/0x570 [ 769.085130][ C1] ? mark_held_locks+0x40/0x70 [ 769.085152][ C1] handle_softirqs+0x1eb/0x9e0 [ 769.085170][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 769.085186][ C1] ? irqtime_account_irq+0x176/0x2d0 [ 769.085207][ C1] ? __dev_queue_xmit+0x7dc/0x4750 [ 769.085226][ C1] do_softirq+0xac/0xe0 [ 769.085241][ C1] [ 769.085246][ C1] [ 769.085251][ C1] __local_bh_enable_ip+0xf8/0x120 [ 769.085271][ C1] ? __dev_queue_xmit+0x7dc/0x4750 [ 769.085289][ C1] __dev_queue_xmit+0x7f1/0x4750 [ 769.085308][ C1] ? avc_has_perm_noaudit+0x145/0x3b0 [ 769.085329][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 769.085346][ C1] ? avc_has_perm_noaudit+0x300/0x3b0 [ 769.085366][ C1] ? __lock_acquire+0x4a5/0x2630 [ 769.085393][ C1] ip6_finish_output2+0xfd4/0x1ce0 [ 769.085412][ C1] __ip6_finish_output+0x357/0x1080 [ 769.085430][ C1] ip6_output+0x2aa/0xa60 [ 769.085447][ C1] ? __pfx_ip6_output+0x10/0x10 [ 769.085464][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 769.085484][ C1] ip6_xmit+0x1002/0x26e0 [ 769.085500][ C1] ? __lock_acquire+0x4a5/0x2630 [ 769.085523][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 769.085539][ C1] ? __lock_acquire+0x4a5/0x2630 [ 769.085559][ C1] ? ip6_dst_check+0x343/0x950 [ 769.085574][ C1] ? __pfx_dst_output+0x10/0x10 [ 769.085595][ C1] inet6_csk_xmit+0x387/0x760 [ 769.085617][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 769.085637][ C1] __tcp_transmit_skb+0x1dd1/0x4b50 [ 769.085661][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 769.085684][ C1] ? ktime_get+0x200/0x300 [ 769.085702][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 769.085717][ C1] tcp_write_xmit+0x12a2/0x8980 [ 769.085743][ C1] __tcp_push_pending_frames+0xaf/0x3b0 [ 769.085764][ C1] __tcp_sock_set_cork.part.0+0x105/0x140 [ 769.085781][ C1] tcp_sock_set_cork+0x9b/0xc0 [ 769.085796][ C1] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 769.085809][ C1] rds_send_xmit+0x17cb/0x2950 [ 769.085827][ C1] ? try_to_wake_up+0x160/0x1a80 [ 769.085846][ C1] ? __pfx_rds_send_xmit+0x10/0x10 [ 769.085864][ C1] rds_send_worker+0x94/0x320 [ 769.085880][ C1] process_one_work+0x9d7/0x1920 [ 769.085898][ C1] ? __pfx_process_one_work+0x10/0x10 [ 769.085914][ C1] ? __pfx_rds_send_worker+0x10/0x10 [ 769.085932][ C1] worker_thread+0x5da/0xe40 [ 769.085948][ C1] ? kthread+0x13a/0x450 [ 769.085960][ C1] ? __pfx_worker_thread+0x10/0x10 [ 769.085973][ C1] kthread+0x370/0x450 [ 769.085985][ C1] ? __pfx_kthread+0x10/0x10 [ 769.085998][ C1] ret_from_fork+0x754/0xd80 [ 769.086012][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 769.086025][ C1] ? __switch_to+0x7b4/0x1120 [ 769.086043][ C1] ? __pfx_kthread+0x10/0x10 [ 769.086056][ C1] ret_from_fork_asm+0x1a/0x30 [ 769.086076][ C1] [ 769.751109][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 769.751236][ T30] audit: type=1400 audit(1771920212.002:1360): avc: denied { write } for pid=5785 comm="syz-executor" path="pipe:[4836]" dev="pipefs" ino=4836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 769.759876][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 13, name: kworker/u8:1 [ 769.791956][ C1] preempt_count: 303, expected: 0 [ 769.796970][ C1] RCU nest depth: 5, expected: 0 [ 769.801906][ C1] INFO: lockdep is turned off. [ 769.806756][ C1] Preemption disabled at: [ 769.806764][ C1] [] __dev_queue_xmit+0x27c/0x4750 [ 769.817762][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.817789][ C1] Tainted: [L]=SOFTLOCKUP [ 769.817796][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 769.817809][ C1] Workqueue: krds_cp_wq#2/0 rds_send_worker [ 769.817833][ C1] Call Trace: [ 769.817842][ C1] [ 769.817850][ C1] dump_stack_lvl+0x100/0x190 [ 769.817877][ C1] __might_resched.cold+0x1ec/0x232 [ 769.817901][ C1] ? __pfx___might_resched+0x10/0x10 [ 769.817921][ C1] ? arch_stack_walk+0x94/0xf0 [ 769.817943][ C1] lock_sock_nested+0x52/0xf0 [ 769.817969][ C1] ? inet6_getname+0x1a2/0x860 [ 769.817988][ C1] inet6_getname+0x1a2/0x860 [ 769.818007][ C1] rds_tcp_get_peer_sport+0x7c/0x110 [ 769.818034][ C1] ? __pfx_rds_tcp_get_peer_sport+0x10/0x10 [ 769.818065][ C1] ? find_held_lock+0x2b/0x80 [ 769.818087][ C1] ? rds_addr_cmp+0x10d/0x150 [ 769.818108][ C1] rds_tcp_conn_slots_available+0x279/0x390 [ 769.818136][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 769.818164][ C1] rds_recv_hs_exthdrs+0x5cb/0x7e0 [ 769.818183][ C1] ? ip6_output+0x2aa/0xa60 [ 769.818203][ C1] ? ip6_xmit+0xf31/0x26e0 [ 769.818224][ C1] ? __tcp_sock_set_cork.part.0+0x105/0x140 [ 769.818245][ C1] ? tcp_sock_set_cork+0x9b/0xc0 [ 769.818264][ C1] ? rds_send_xmit+0x17cb/0x2950 [ 769.818284][ C1] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 769.818303][ C1] ? kthread+0x370/0x450 [ 769.818324][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 769.818349][ C1] rds_recv_incoming+0xdbf/0x1150 [ 769.818370][ C1] ? __pfx_rds_recv_incoming+0x10/0x10 [ 769.818389][ C1] ? skb_copy_bits+0x5c8/0x8d0 [ 769.818418][ C1] rds_tcp_data_recv+0x278/0xce0 [ 769.818450][ C1] __tcp_read_sock+0x204/0x8d0 [ 769.818474][ C1] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 769.818501][ C1] ? __pfx___tcp_read_sock+0x10/0x10 [ 769.818524][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 769.818551][ C1] ? __mod_timer+0x40e/0xca0 [ 769.818579][ C1] rds_tcp_read_sock+0x12e/0x280 [ 769.818606][ C1] ? __pfx_rds_tcp_read_sock+0x10/0x10 [ 769.818632][ C1] ? lock_acquire+0x1cf/0x380 [ 769.818663][ C1] ? __pfx_sock_def_readable+0x10/0x10 [ 769.818689][ C1] rds_tcp_data_ready+0x1c9/0x790 [ 769.818717][ C1] tcp_data_ready+0x114/0x5a0 [ 769.818741][ C1] tcp_rcv_established+0x29f0/0x3980 [ 769.818767][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 769.818789][ C1] ? lock_acquire+0x1cf/0x380 [ 769.818818][ C1] tcp_v6_do_rcv+0x118b/0x1dd0 [ 769.818841][ C1] tcp_v6_rcv+0x2b03/0x42c0 [ 769.818867][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 769.818886][ C1] ? raw6_local_deliver+0x3f3/0xa80 [ 769.818908][ C1] ? raw6_local_deliver+0x3fd/0xa80 [ 769.818926][ C1] ? nf_hook.constprop.0+0x2d9/0x750 [ 769.818951][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 769.818975][ C1] ip6_protocol_deliver_rcu+0x188/0x1500 [ 769.819004][ C1] ip6_input_finish+0x1e4/0x4a0 [ 769.819029][ C1] ip6_input+0x105/0x2f0 [ 769.819052][ C1] ipv6_rcv+0x261/0x610 [ 769.819074][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 769.819096][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 769.819122][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 769.819148][ C1] ? lock_acquire+0x1cf/0x380 [ 769.819175][ C1] ? process_backlog+0x32a/0x1580 [ 769.819200][ C1] ? process_backlog+0x32a/0x1580 [ 769.819223][ C1] __netif_receive_skb+0x1f/0x120 [ 769.819247][ C1] process_backlog+0x37a/0x1580 [ 769.819273][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 769.819298][ C1] net_rx_action+0xa40/0xf20 [ 769.819329][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 769.819353][ C1] ? lock_acquire+0x140/0x380 [ 769.819379][ C1] ? find_held_lock+0x2b/0x80 [ 769.819400][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 769.819427][ C1] ? sched_clock+0x38/0x60 [ 769.819453][ C1] ? sched_clock_cpu+0x6c/0x570 [ 769.819483][ C1] ? mark_held_locks+0x40/0x70 [ 769.819510][ C1] handle_softirqs+0x1eb/0x9e0 [ 769.819533][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 769.819554][ C1] ? irqtime_account_irq+0x176/0x2d0 [ 769.819580][ C1] ? __dev_queue_xmit+0x7dc/0x4750 [ 769.819603][ C1] do_softirq+0xac/0xe0 [ 769.819623][ C1] [ 769.819630][ C1] [ 769.819636][ C1] __local_bh_enable_ip+0xf8/0x120 [ 769.819657][ C1] ? __dev_queue_xmit+0x7dc/0x4750 [ 769.819679][ C1] __dev_queue_xmit+0x7f1/0x4750 [ 769.819704][ C1] ? avc_has_perm_noaudit+0x145/0x3b0 [ 769.819729][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 769.819753][ C1] ? avc_has_perm_noaudit+0x300/0x3b0 [ 769.819778][ C1] ? __lock_acquire+0x4a5/0x2630 [ 769.819812][ C1] ip6_finish_output2+0xfd4/0x1ce0 [ 769.819838][ C1] __ip6_finish_output+0x357/0x1080 [ 769.819861][ C1] ip6_output+0x2aa/0xa60 [ 769.819883][ C1] ? __pfx_ip6_output+0x10/0x10 [ 769.819906][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 769.819931][ C1] ip6_xmit+0x1002/0x26e0 [ 769.819953][ C1] ? __lock_acquire+0x4a5/0x2630 [ 769.819983][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 769.820003][ C1] ? __lock_acquire+0x4a5/0x2630 [ 769.820032][ C1] ? ip6_dst_check+0x343/0x950 [ 769.820052][ C1] ? __pfx_dst_output+0x10/0x10 [ 769.820078][ C1] inet6_csk_xmit+0x387/0x760 [ 769.820105][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 769.820131][ C1] __tcp_transmit_skb+0x1dd1/0x4b50 [ 769.820161][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 769.820192][ C1] ? ktime_get+0x200/0x300 [ 769.820214][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 769.820233][ C1] tcp_write_xmit+0x12a2/0x8980 [ 769.820266][ C1] __tcp_push_pending_frames+0xaf/0x3b0 [ 769.820294][ C1] __tcp_sock_set_cork.part.0+0x105/0x140 [ 769.820320][ C1] tcp_sock_set_cork+0x9b/0xc0 [ 769.820339][ C1] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 769.820357][ C1] rds_send_xmit+0x17cb/0x2950 [ 769.820380][ C1] ? try_to_wake_up+0x160/0x1a80 [ 769.820404][ C1] ? __pfx_rds_send_xmit+0x10/0x10 [ 769.820427][ C1] rds_send_worker+0x94/0x320 [ 769.820449][ C1] process_one_work+0x9d7/0x1920 [ 769.820472][ C1] ? __pfx_process_one_work+0x10/0x10 [ 769.820494][ C1] ? __pfx_rds_send_worker+0x10/0x10 [ 769.820517][ C1] worker_thread+0x5da/0xe40 [ 769.820540][ C1] ? kthread+0x13a/0x450 [ 769.820556][ C1] ? __pfx_worker_thread+0x10/0x10 [ 769.820573][ C1] kthread+0x370/0x450 [ 769.820589][ C1] ? __pfx_kthread+0x10/0x10 [ 769.820607][ C1] ret_from_fork+0x754/0xd80 [ 769.820625][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 769.820644][ C1] ? __switch_to+0x7b4/0x1120 [ 769.820665][ C1] ? __pfx_kthread+0x10/0x10 [ 769.820682][ C1] ret_from_fork_asm+0x1a/0x30 [ 769.820708][ C1] [ 770.457824][ T30] audit: type=1400 audit(1771920212.702:1361): avc: denied { recv } for pid=14939 comm="syz.1.2263" saddr=10.128.0.169 src=47744 daddr=10.128.0.132 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1