last executing test programs: 5m11.710915945s ago: executing program 2 (id=220): r0 = eventfd2(0x6, 0x80801) (async, rerun: 32) io_setup(0x3ff, &(0x7f0000000500)=0x0) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f00007af000/0x3000)=nil, &(0x7f0000b45000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000e43000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) (async) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x200, r0, 0x0, 0x0, 0x4, 0x0, 0x1, r0}]) 5m11.560076142s ago: executing program 2 (id=222): getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000180)={0x1, 0x2, 0x8, 0xffffffffffffff80, r0}) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x181240) write$sndseq(r4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x131}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r5, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x30) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x4f, 0x7, 0xff, 0x10000, 0x9c5a}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r9, 0x6d432db5}, 0x8) sched_setscheduler(0x0, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 5m9.205986044s ago: executing program 2 (id=228): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0xffffffffffffffdd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000623000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002680), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000e40)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0xa, &(0x7f00000000c0)=[{0xd, 0x1, 0xe0, 0x50}, {0x6, 0xf7, 0x6, 0x3}, {0x87f, 0x6, 0x7f, 0x221846c3}, {0x2, 0xa, 0x0, 0xcb3}, {0x4, 0xc, 0x5, 0xab}, {0x7, 0x6, 0x2}, {0x5, 0x0, 0x1, 0xd}, {0xfff9, 0xff, 0x81, 0x5}, {0x2, 0x8, 0x81, 0x4}, {0x9, 0xff, 0x4, 0x2}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x7, @empty, 0x5}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 5m7.98252995s ago: executing program 2 (id=232): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x40004580, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r4 = memfd_secret(0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) msgctl$IPC_STAT(0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x50, r7, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x50}}, 0x40000) unshare(0x40020000) 5m2.37158195s ago: executing program 2 (id=248): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$NS_GET_PARENT(r1, 0x8008b70d, 0x0) 5m0.613243903s ago: executing program 2 (id=251): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7}, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x7b9c, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000240)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0x3, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) r8 = socket$inet(0x2, 0x2000000080002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xca5d, 0x5179}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}, 0x1d6) socket$kcm(0x29, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 4m45.076897498s ago: executing program 32 (id=251): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7}, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x7b9c, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000240)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0x3, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) r8 = socket$inet(0x2, 0x2000000080002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xca5d, 0x5179}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000000000000000000000800000000000000000000006234f2237c7111493dcebf28214e13000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000006be73ee9bdf3545400000000738700000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000002a6416577f36fb393667b73ce962fbe736430e9e60d4f83d8132fdfe539f2a0f8de9496e83a5f91a1c20a9aa4ddb44ca320f6cbe3b9b72c90045524cb9f0f8cbac9121228f17067bcd116b1872ad67fa1d89db93ff107e75c45e3de826deb74f9cf45574464849d82da8840818a19d0d5afce9e905e31df88dbfa926718fe44ca3600e4d77b1d22a15f0fa93e97dd9d64808175df61b457262e08aae45866085783d4c6883fbc66534a21dfb9ab1578aca69716dc4bc98a191bd08864c9fa3"]}, 0x1d6) socket$kcm(0x29, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 4m15.086739283s ago: executing program 1 (id=405): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4m11.22131764s ago: executing program 1 (id=420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095000000000000007325d7dfbbdd9d8de9fc698b83bb7ca5b4063be8ff7754f19672768d72624c31fe98ee23d62b62796032028257bce87ae6680e5fabd44876799b75ed169ac2ca641e60f514abdb18a962196b239887ae15482cb080f7e24ae4ea12801f273a589d2b53080745aa9a66ea9d642a781efac79d32f89b6d8c8cbd01e392850c68521955eb37"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0x13c, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT={0xd4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xd0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r4, @ANYBLOB="20000280", @ANYRES32=r3, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) 4m11.006017947s ago: executing program 1 (id=423): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x1, &(0x7f0000000000)="ee10fb59e9557b83e55b1ebac483bfd2eb3273836d37") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000100)) 4m8.178568278s ago: executing program 1 (id=430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mq_open(&(0x7f0000000000)='\xb9]^%-,\\\x00', 0x40, 0x37, &(0x7f00000000c0)={0x4, 0x4, 0x58, 0x2}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffff9c, 0x0, &(0x7f00000003c0)={0x100100, 0x8, 0x7d}, 0x18) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x13c, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xf0, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000180)) 4m3.497199595s ago: executing program 1 (id=450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = dup2(r1, r1) io_uring_setup(0x4656, &(0x7f0000000380)={0x0, 0x2a22, 0x0, 0x1, 0x175, 0x0, r2}) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000130a010100000000000000000200fffe090001"], 0x20}, 0x1, 0x0, 0x0, 0xc085}, 0x40000c0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x11, r3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r4 = socket$inet(0x2, 0x1, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000240)) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo\x00') ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, 0x0) sendmsg$SOCK_DESTROY(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x1318, 0x15, 0x10, 0x70bd2a, 0x25dfdbfc, {0x0, 0xed}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "f52b55ad28d842c75183d18c1c3d61b3fecd"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "a38e61b13677d0baa0474ffe488338f15629eb89049a80a502e40dd8a71721691086d3aa14defc99f5f9a834ec7b5daba25384f649ebbcb16202e7fcef4b6f727037491d43cc51cb879d4f1122f0157e6ba615477a6722098f4ce9868463359f063906e41896375ac4c5441f6e61bcbcb4de0b837653dda5c73576c98036ecc237b910605def84803d36692d47a721224845483acc115652ad4dee196ae7cc24431026a95001f9"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "6d1d4b13579d72f8a9db3f487fab9cae3cddc7dfa684f6fbc523262dd26f89d567836b4ec20e7eb26f054310704bb0194c0a"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "202a30e83dcec0cd6ee16e07ff570a22faebaf59f3215658c0df1af21ded2343659f1b45ed978bcc17e1c3fcf8a9371ba0439921f36c1fb7cee33a4d4ada3b674c8f9860181cace6d7c468cc48ab9d1a4d5c1384c5053386f5e10a397d043a03e786a31680dbf355bd31a963da3f5e24ed65e8e6d8fa5f55320c4da8c94d5378ee96c8a808a24e74193ff3625cbd98e650c282b7bee97ffb7ddec0ac459f45427ff2519cc38e50aa36732783902c6fb15b350b55059843da15731e576e3c1d0e1efa1fca83ec6d68b371e8ed2826ef3ba152071f655cca774fbd00f84100f4b70646edd4bfef76b58c6882c38b"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "786e07c9d88d87fb57f7b5e7b594d811efbaa3c4bea0555760d9de5a2735db7eb32fad3e7478861fef171d4460ea8c30a3d3814971a3ea076dda7a4f3a3d07c72bf83766dc9ecf0249c71002ff8718a419238bf50032844d44e6ff77af9ceadad27dc353d3cb318776ef5f84e0285f513eda722e0cc8bd338e0b092177649b84709146742c0565d538c48b75d5f4a7062f35d643e38d236376945251eef89498acb6e1496595824f7a3506d277e3eab77b5ff3d6fb59288014313be931ff31555383c07d9b19a9e35ecdad703b0226bda8a416ba34f094de"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "288a6cb30970d09e537822f40c3e8673fc16cd6385cb2b330b72df04c5764795ab0d224b886faca14ea03bd3eb5cda63"}]}, 0x1318}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r7 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x800) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x6, 'veth1_to_team\x00'}) 4m2.901736581s ago: executing program 1 (id=451): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x29, 0x0, &(0x7f0000000040)=0xa203805183b779d6) 3m47.637985651s ago: executing program 33 (id=451): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x29, 0x0, &(0x7f0000000040)=0xa203805183b779d6) 14.646656634s ago: executing program 6 (id=1234): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) 14.354002721s ago: executing program 3 (id=1236): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) 13.092701265s ago: executing program 3 (id=1237): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) r3 = syz_clone(0x1000680, &(0x7f0000000300)="7121683db3acfd3c1a074dfeab919fc43a1b14f31c11ac9d6e88863307755ef8a987bafb8151c28606452e9831f32b1e1069039cac4d8efe50877b38d73966362fcccc32e2d83555244ddf85491afb9b5e6817470ffae6c6fdba17428c96fc08166aaea35523c58762df2ec835bd81cc1df9aa9e0f1b95443c44d953edd3e7c24a8baf0490593e09baf6011bd58cda40971a4ac32a20ba56ae8f33abf9756bf566034e86dd7c21a657e80b56473c5511a41d67f1ac898e7eb52e0f95cfad8759f583ae33d756a868cf719f332f266febabc79def14df9c1a4ad50b85638975", 0xdf, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="9e13f42e19d5caa03bbf717e4f276c4842f36d9e5ae3855404710caa9eab6b454da5686f2c70b1411d5448407f9f10d6baafdc39ff7f2d80ddbd08b07cb70392167d06ec6207c2869868223d1113a329a2695e4b57f155c69c0f9c5296298e34246e72e6a67f097d9ad981075475a2808111b06d2bfd3bfd3c10bb1d16ddb97d378a213ecd2194694f") r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f000001b000)={0x0}, &(0x7f000001b040)=0xc) timer_create(0x0, &(0x7f000001b080)={0x0, 0x29, 0x4, @tid=r5}, &(0x7f000001b0c0)) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000005c0)={0x80000400, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x6}, &(0x7f0000000180)=""/188, 0xbc, &(0x7f0000000240)=""/36, &(0x7f0000000540)=[r0, r1, r2, r3, r5, r6], 0x6, {r7}}, 0x58) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x7003, [0x7, 0x8004000a, 0x129, 0x1007, 0x3]}, &(0x7f0000000000)=0x54) 11.369153355s ago: executing program 3 (id=1240): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x5) inotify_init1(0x800) rmdir(&(0x7f0000000100)='./control\x00') sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200"/14], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000000) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x80d0) r7 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r7) gettimeofday(0x0, 0x0) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x4, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40000}}], 0x18}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x4000000}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001040)="3282db78e0", 0x5}], 0x1}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000003ac0)="64cc6b5202c982ff0a81a278e1b077370865ae826cb9b310da57a2e603c961eae203ec4afaa7e8ee3ac8458f2212bcaf22915823e179c366038e8adce42d00d9ef32c8d1808045bec24d4d7659ec187b3381fb0b1758dcf748a0288626031d2e678fb0611050c266305806e351ec1dc596caec0dea83f3adfce51150cee103cfe7a518c0ea14e742c79412861ef1cbefb48db58bfd754c4f58c142b162c4f4cb41a1f43697e770f2b9196eb9d90acc6a0be65d88ee49ba5ce33f7cd57cb0d5858b6da32f5242061bc4d54846311340c4a9d6731424f330786e178fcdf3dced9499003d7faa789044782ddfe5cccbf4ee5fc55f3c964e5aafb4a383bc39b1ac657c76a7ef0c0c632208794aff003789a4e87edd4492ea9cefdaaa6e0b79e821d9cdd0408d7c9d2f443eaf6876e4003acff3202cd9a84d44332d8c770d2b3e149e19b5ce8fb0ec9d9822c009422951f564720452dbda170615a662260c36656122bf34e182076fd9ef31055d13ecb3a0492262577939100c6e22efba699fb9d275cb2defca2897263b073812066a379a4746087e961b4f6e8b2746f8975223d63f24b56a7c25f922e76bb858da8bc4ba32db49070eaa97f83f9b919b776bca12cdf36d52442aa9812076db2bcaaaa036a1176fd4806f743d9cd4201719bfb232c5c3865cd9ea93b2b3006e5af56f35b62db77985a16c793cc19036fbd7b4fd2816bf5ac5d16374d79b83f02c59e40b3f04f3e3c4838d76ea0018db6c12877d70ae7aac2755e7e98a30f52f9462517563d5824e7e6b4b977fc4aa2f049329bb3bf3cd66b7d4f484cab34cb6fba54d3c2a8f49e72cd5a9c30a2bd166d92b21945d5a31de5755a55c17109749db08bcae9c69876eb74e3cba7fb346d4ec61dc4e9e824c0fac512122ff4636687edc7c5c68f5072451d143ecfd2ac99115f7346a1089790fdafe16600d31d975bc51846a9f0ac01fc182d501f16a88943e7edda9f322c28caa175e6dfe2997a174ec63888fa998e07a3dc71d567d06872bf9acae701e47302fbe9557b60530e7a7350b8ba1e7527911594e37e30a74421fbcba6301f8ceacb01c88dc6cf6dbfeefd5e1806733fd1de3b31b1dd0bbda00c5a909ba91ca71971317c69492afd561219e25c8421985edc04b481862f94784fd873e3f09fcd5c0cd29e4dcdcf8f28914d05e1eaa9bb82ca24e224e337e56d0723457faa1a706f1d738e10ce612a51b65d962ab3846d80f22e940414bf1bb065455f0dd886a39c8fc33ec6cffbe63ae4ad062171d91a278e8549e65552cd3ad76aa1b91fa82aad5b301bde18420ebd3d43f482acf828eccebb4151c76b494ff82f3b7e58d5f3ea2a2c8f1aff1226fe6a72b327ef215841905e4286bdb2119520b14a636fe5bd788aaa3d4ee585eb6188d953046f5b726c5c64a0d04e2de4b297ef959e1cac69cbdf63752701f4ec3cd1cab807596dc41d6ba5ab4811c078777765a9ff44e5ba14f610d5c9c3e479605cb6f4a405ba9394517828b033066d0ed7ae150588d06a0e1c6abdefacb6267a17a6dbdf56cc1765b613aa2209e6c2eed61c8cd87346af57dfe05c2fae9b76f8329574097fe958aca7464afcc0cfeee122ded57d259b3f200640ad3cb7241214f68a5ca54b30ab8b83448ca6b30a9ed6742738c9d0aeaf85a4cdcd86919a2e2ce53c3e64620446ad6ab5cc5c80d5686c4fef6d4a6840060e52291112c2d0dfd6f073ea2534f15cdf5f1df83716337f65b478479d0003f25306b260727b2118a982f87700e2b057f2859ee8fd21921f0cb0fc20041d06ec600c3ddab1b36bc53087a0364f8eb8be65d40cc3943dba7e2014cfa5473975968ecee19c8b3abb4a9fc64dae32f9de63b1b8d292bb31945cec2ff771dba5ea2da6904adda4208604e7723856cf23fe07fb23b15e2c1053fa5865e34d1beed3b6d2777ea160e16796b1dc2434935ba3187d930192393b6c3b7342d3311d262702c9ee13af8427be26010b053b599ecdfa1b34bad2236c4bac51ed7a6e5d45189cb85e11824a76322330238a1923638c2", 0x5b0}], 0x1}, 0x0) 10.276001036s ago: executing program 6 (id=1242): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x1f, 0x6, 0x650, 0x328, 0x328, 0x4d0, 0x238, 0x3c0, 0x5b8, 0x5b8, 0x5b8, 0x5b8, 0x5b8, 0x6, &(0x7f0000000240), {[{{@ip={@rand_addr=0x64010102, @private=0xa010102, 0xffffff00, 0xffffff00, 'ip6gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x5}, 0x0, 0x1d8, 0x238, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e22, 0x4e22], [0x4e20, 0x4e20], [0x3, 0x7, 0x9, 0x7, 0x6, 0x4, 0xe, 0x7, 0x8, 0x1, 0x5, 0x3, 0x2, 0x74c, 0x8, 0x7, 0x3, 0x9, 0xdc, 0x100, 0x8, 0x800, 0x80000001, 0x1, 0x1, 0x5, 0x400, 0x9eab, 0x8, 0x9, 0x7, 0x2, 0xf0000000, 0x2, 0x8, 0x7, 0x4, 0x7, 0x4, 0x2, 0x8001, 0x2, 0x4, 0x3, 0x449, 0x4, 0x2, 0x8000, 0x7, 0x5, 0x7, 0x7, 0x3, 0x800, 0x4, 0x100, 0x8, 0x2, 0x4, 0x6eaf9452, 0x4, 0xc0000000, 0x2, 0xfffffffc], 0x5, [{0x5, 0x5, 0x6}, {0xff, 0x1, 0x4}, {0x1, 0x4c, 0x1}, {0x1, 0xff, 0x2e}], 0x2, 0x0, 0x4}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x5, 0x2, 0x1, 0x0, 0x1], 0x6, 0x2}, {0x4, [0x0, 0x8, 0x1, 0x4], 0xfa, 0x2}}}}, {{@ip={@remote, @broadcast, 0xff000000, 0xffffff00, 'ip6_vti0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x2, 0x8}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1000, 0x3, @multicast1, 0x4e22}}}, {{@ip={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0xff, 'veth0_to_hsr\x00', 'pimreg0\x00', {0xff}, {}, 0x2f, 0x2, 0x1}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x56}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffff00, 0xffffff00, 'geneve0\x00', 'dvmrp0\x00', {0xff}, {0xff}, 0x4, 0x1}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x2}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x9}}}, {{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2f}, 0xff000000, 0xff, 'veth0_macvtap\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x1, 0x47}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6b0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000002008010000000000477875640a00fc003a2a5e247b00000004001b80"], 0x20}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(0x0, r8) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd70027100c1582100000018"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x101000, 0x10) 10.034183397s ago: executing program 0 (id=1243): iopl(0x3) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r3 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005a00)=ANY=[@ANYBLOB="8c3c00004600070128bd700000000000017c0000783c04"], 0x3c8c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x80400, 0x1) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) accept$ax25(r0, 0x0, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000d80)={{0x8, 0x4, 0xfffffbdb, 0x4, 'syz0\x00', 0xfffff801}, 0x0, [0x9, 0xd, 0x2, 0x10001, 0x8c08, 0x9, 0x10000, 0x202, 0xf0f3, 0xffff, 0x87, 0x4, 0x6c2b, 0xfffffffffffffffe, 0x98f2, 0x4b05, 0x3ff, 0x400000004, 0x3, 0x8000000000000000, 0x1, 0x8, 0x109, 0x1ff, 0x40000000000001, 0x8, 0x6, 0x8, 0x6, 0x5, 0x1, 0xfff, 0x3, 0x4, 0x7, 0x8000000000000000, 0x3, 0x4000000000000000, 0x2, 0x1ff, 0x2, 0x0, 0xdb4, 0x5, 0x16, 0x9, 0xe, 0x5, 0xc, 0x6, 0x2, 0x3b7, 0x5, 0x0, 0xfffffffffffffff9, 0x4, 0x7fd, 0x5, 0x0, 0x8000, 0x5, 0x34b, 0x7, 0x7, 0x4, 0x15af, 0xb79, 0x8, 0xfff, 0x81, 0x9, 0x83, 0x7, 0xf8, 0x0, 0x6, 0x4, 0x5, 0x80, 0x0, 0xd, 0x8, 0xb, 0x8000000000000001, 0x12, 0x5, 0x2, 0x6, 0x7fffffff, 0x1, 0x4, 0x10000, 0xe72, 0x10000000000003ff, 0x7, 0xc08b, 0x410, 0x80000001, 0x40, 0x1, 0x200000100000000, 0x100000001, 0x42, 0x3, 0x9, 0xc5, 0x0, 0x2, 0x3, 0x33, 0x2f6f, 0x7, 0x5a73, 0xfffffffffffffff9, 0x7fffffff, 0x8, 0xa, 0x4, 0xde, 0x6, 0x800000000, 0xfffffffffffffffe, 0x2, 0x105ba93c, 0x4000000000004, 0x7, 0xfffffffffffffff7, 0x10]}) read$FUSE(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.02651589s ago: executing program 3 (id=1244): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000280)={0x500, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x401}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8500, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x3, 0x2, 0x4, 0x200, 0x7, {0x77359400}, {0x3, 0x0, 0x7, 0x2, 0x2, 0x5, "5e8febf4"}, 0x400, 0x4, {}, 0x6}) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800800"], 0xd0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$rds(0x15, 0x5, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r11, 0x47fa, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r14 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r14, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x22, &(0x7f00000001c0)="74f2f0b618c985b53cb668ea6161e5001843c87830126f22589ce4a218ee4d7526e6"}, {0x8, 0x2a19, 0x0, 0x0}], 0x2}) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r10, 0x0, 0x0, 0x0, 0x44040001, 0x1}) setsockopt$RDS_CANCEL_SENT_TO(r9, 0x114, 0x1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r6, 0x1, 0x70bd24, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x24}, 0x1, 0x0, 0x0, 0x898}, 0x0) 9.723993185s ago: executing program 6 (id=1246): syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x70bd25, 0x3, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x40}}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)=@multiplanar_fd={0x6, 0x7, 0x4, 0x4, 0x800, {0x0, 0xea60}, {0x1, 0xc, 0xe, 0x3, 0x6, 0x4a, "c46990e1"}, 0xfb, 0x4, {0x0}, 0x5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect$uac1(0x5, 0xd8, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0xf5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb4, 0x29}, [@selector_unit={0xb, 0x24, 0x5, 0x6, 0xfa, "595247ea0615"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x7, "e6d47dbe0126"}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0x5, '\'*'}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x5, 0x5, [0xa, 0x4, 0x8, 0x7, 0x7], 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x301, 0x3, 0x4, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x1, 0xce, 0x2}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1, 0x5, "f375ad"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x1, 0x83, 0xbd, "2be5b7913b6b87"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x81, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x0, 0xe, {0x7, 0x25, 0x1, 0x2, 0x4, 0xfff8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x9, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x7f7, 0x63, 0x2, 0x0, {0x7, 0x25, 0x1, 0x80, 0x5, 0x5}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xf4, 0x4, 0x0, 0x0, 0x4}, 0x5c, &(0x7f0000000240)=ANY=[@ANYBLOB="050f5c00051410040435fd4854ff459c21597d5fc06e7aaae9141004096cdb00b5930aee4f8a0c5b810a0000761410040953aaa78622577306e8e9ab45b2e985ca03100b18100a02c30100000000ffff00ff00000f00000000ff0000"], 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x41f}}]}) 9.087824902s ago: executing program 0 (id=1248): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="042ffd02"], 0x200) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) 7.644240339s ago: executing program 0 (id=1249): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc00000009"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000340)={@empty, @loopback, @local}, 0xc) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x42403) 7.64285274s ago: executing program 4 (id=1250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() (async) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000010a306cd0c000000000001090224000100000004090400000103000100092183000b0122050009055ba41000010000"], 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) (async) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8, [0x8]}}]}, 0x158}}, 0x24000058) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @rand_addr=0x64010101, 0x4e24, 0x3, 'lc\x00', 0x4, 0x3237, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) (async) recvmsg(0xffffffffffffffff, 0x0, 0x2000) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000002c0)={0x3, 0x8000, 0xfffffffb, 0x6}, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 7.321873191s ago: executing program 6 (id=1251): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000340)={@empty, @loopback, @local}, 0xc) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x42403) 7.260237259s ago: executing program 4 (id=1252): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000", 0x17}], 0x1}, 0x0) 7.13068032s ago: executing program 4 (id=1254): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x5) inotify_init1(0x800) rmdir(&(0x7f0000000100)='./control\x00') sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200"/14], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000000) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x80d0) r7 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r7) gettimeofday(0x0, 0x0) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x4, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40000}}], 0x18}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x4000000}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001040)="3282db78e0", 0x5}], 0x1}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000003ac0)="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", 0x5b0}], 0x1}, 0x0) 6.870119247s ago: executing program 5 (id=1255): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x28, r1, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 6.585053752s ago: executing program 5 (id=1256): r0 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000340)={@empty, @loopback, @local}, 0xc) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x42403) 4.819824444s ago: executing program 4 (id=1257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) io_setup(0x2c58, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x800000000000067, 0x200000b0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) chdir(&(0x7f0000000680)='./file0\x00') sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0x18, &(0x7f0000000580)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x3, 0x0, 0xb, 0x2, 0x100, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @generic={0x9, 0x0, 0x5, 0x0, 0x6}], &(0x7f0000000640)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x8, 0x5, 0x8}, 0x10, 0xffffffffffffffff, r0, 0x2, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff], &(0x7f0000000880)=[{0x3, 0x4, 0x3}, {0x3, 0x5, 0xc, 0x7}], 0x10, 0xfff}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110007"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="face8c7a6539e0e0f1d538d383e474ea6c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000400003803c0000803800018031000100600ef39be70a7829f2d2ed77afeaf150c3e2b7"], 0x6c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x26, 0x80}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 4.667097507s ago: executing program 3 (id=1258): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) 3.714273305s ago: executing program 6 (id=1259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x7}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x8000000, 0xe0000, 0x9, 0x3, 0x0, [{0x2, 0x3, 0x5, '\x00', 0x7}, {0xd, 0x7, 0x96, '\x00', 0x3}, {0xfe, 0xf2, 0x3, '\x00', 0xaf}, {0x17, 0xf8, 0x8, '\x00', 0xf4}, {0x6, 0xd, 0x4, '\x00', 0x9}, {0x5b, 0xc, 0xb, '\x00', 0x8}, {0xb0, 0x1, 0x2, '\x00', 0xc9}, {0x7, 0x1, 0x93, '\x00', 0xfd}, {0xfd, 0x1, 0x5}, {0x75, 0x81, 0xd, '\x00', 0x7}, {0x0, 0x6, 0xb, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x9}, {0x6, 0x26, 0x7b, '\x00', 0xb}, {0xb, 0x6, 0x3}, {0x5, 0x10, 0x22, '\x00', 0xc}, {0xe, 0x1, 0x8, '\x00', 0x82}, {0x5, 0x12, 0xa6, '\x00', 0x9}, {0xf, 0xd, 0x9, '\x00', 0x68}, {0x8, 0x45, 0xf2, '\x00', 0x1}, {0x5, 0x8, 0x1, '\x00', 0x3}, {0xc, 0x7, 0x0, '\x00', 0xf}, {0x2, 0xa1, 0x4, '\x00', 0xfc}, {0xf9, 0x70, 0xe, '\x00', 0x1c}, {0x76, 0x1, 0xff, '\x00', 0x10}]}}) 2.773021843s ago: executing program 0 (id=1260): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="042ffd02"], 0x200) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) 1.684966201s ago: executing program 0 (id=1261): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x28cf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r1, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r1, 0x80000001, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000000f00)=0x1000000, 0x2) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000140)={r1}) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000001c0)="99a5f995f8b2652ece9297def742bc05fd6b43", 0x13) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 1.683895703s ago: executing program 5 (id=1262): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x28, r1, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 1.680393234s ago: executing program 4 (id=1263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x8000000, 0xe0000, 0x9, 0x3, 0x0, [{0x2, 0x3, 0x5, '\x00', 0x7}, {0xd, 0x7, 0x96, '\x00', 0x3}, {0xfe, 0xf2, 0x3, '\x00', 0xaf}, {0x17, 0xf8, 0x4, '\x00', 0xf4}, {0x6, 0xd, 0x4, '\x00', 0x9}, {0x5b, 0xc, 0xb, '\x00', 0x8}, {0xb0, 0x1, 0x3, '\x00', 0xc9}, {0x7, 0x1, 0x93, '\x00', 0xfd}, {0xfd, 0x1, 0x5}, {0x75, 0x81, 0xd, '\x00', 0x7}, {0x0, 0x6, 0xb, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x9}, {0x2, 0x26, 0x7b, '\x00', 0xb}, {0xb, 0x6, 0x3}, {0x5, 0x10, 0x22, '\x00', 0xc}, {0xe, 0x1, 0x8, '\x00', 0x82}, {0x5, 0x2, 0xa6, '\x00', 0x9}, {0xf, 0xd, 0x9, '\x00', 0x68}, {0x8, 0x45, 0xf2, '\x00', 0x1}, {0x5, 0x8, 0x1, '\x00', 0x3}, {0xc, 0x7, 0x0, '\x00', 0xf}, {0x2, 0xa1, 0x4}, {0xf9, 0x70, 0xe, '\x00', 0x1c}, {0x76, 0x1, 0xff, '\x00', 0x10}]}}) 1.566395149s ago: executing program 6 (id=1264): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = getpgid(0x0) sched_setscheduler(r2, 0x6, &(0x7f0000000000)=0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r4, 0x3514, 0x9141, 0x69, 0x0, 0x0) 1.542438084s ago: executing program 5 (id=1265): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f00000002c0)) 1.430181518s ago: executing program 0 (id=1266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}}, 0x44014) r5 = inotify_init1(0x80800) r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800) inotify_rm_watch(r5, r6) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x599, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x7fff, 0x5, 0x2, 0x5f, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mq_unlink(0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0xe6126c0601df8c54, 0x2e]}}, &(0x7f00000000c0)=""/129, 0x1c, 0x81, 0x0, 0x6}, 0x28) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, &(0x7f0000000280)) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xdddd1000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xd000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x8, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x84, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x6c}, {0xdddd0000, 0x4000, 0xe, 0x5, 0xcd, 0x2, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x30000, 0x30}, {0x8000000, 0x7}, 0xe0000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) 1.401217447s ago: executing program 5 (id=1267): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x5) inotify_init1(0x800) rmdir(&(0x7f0000000100)='./control\x00') sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200"/14], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x41) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x80d0) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5) gettimeofday(0x0, 0x0) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x4, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40000}}], 0x18}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x4000000}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001040)="3282db78e0", 0x5}], 0x1}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000003ac0)="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", 0x5b0}], 0x1}, 0x0) 1.123820706s ago: executing program 4 (id=1268): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f00000001c0)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) setitimer(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x1ff, 0x754}}, './file1\x00'}) ioctl$UI_SET_PROPBIT(r7, 0x4004556e, 0x1c) recvmmsg(r5, &(0x7f00000036c0)=[{{&(0x7f00000002c0)=@phonet, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/22, 0x16}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f0000000640)=""/249, 0xf9}], 0x4}, 0x81}, {{&(0x7f0000000740)=@rc={0x1f, @none}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/247, 0xf7}], 0x1, &(0x7f0000000900)=""/119, 0x77}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000000980)=""/119, 0x77}, {&(0x7f0000000a00)=""/19, 0x13}], 0x3, &(0x7f0000000a80)=""/242, 0xf2}, 0x8000}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b80)=""/249, 0xf9}, {&(0x7f0000000c80)=""/30, 0x1e}, {&(0x7f0000000d00)=""/12, 0xc}, {&(0x7f0000003800)=""/239, 0xef}, {&(0x7f0000000e00)=""/2, 0x2}, {&(0x7f0000000e40)=""/75, 0x4b}], 0x6, &(0x7f0000000f40)=""/164, 0xa4}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000003100)=""/235, 0xeb}, {&(0x7f0000003200)=""/195, 0xc3}, {&(0x7f0000003300)=""/198, 0xc6}, {&(0x7f0000003400)=""/205, 0xcd}, {&(0x7f0000001000)=""/11, 0xb}, {&(0x7f0000003500)=""/22, 0x16}], 0x6, &(0x7f00000035c0)=""/226, 0xe2}, 0x80000000}], 0x5, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r8, 0x79f, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r9, 0x8800000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c00000000000000000000000000000002000000200004801c000180090001006c617374000000000c0002800800014004000000010073797a3900000000099b2200020063797a3200000000140000001100010000000000000000000000000a9a40b64e606cba8bf3fb69ca1f5cce8cf74c42a0972b4c7a0267b5370460130000"], 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 120.573486ms ago: executing program 3 (id=1269): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = getpgid(0x0) sched_setscheduler(r2, 0x6, &(0x7f0000000000)=0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000009b80)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r4, 0x3514, 0x9141, 0x69, 0x0, 0x0) 0s ago: executing program 5 (id=1270): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xa00, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x8, r3}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x1) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000000a06010100000000000000000300000608000940800000010900020073797a31000000080500010007000000100008800c0007800800094000000094"], 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4c040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) fcntl$setlease(r6, 0x400, 0x1) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) sched_setattr(r7, &(0x7f0000000000)={0x38, 0x5, 0x10000021, 0x4ce8, 0x4, 0x8, 0xd7, 0xe, 0x8e1, 0x1}, 0x0) socket(0x10, 0x3, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r10 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) fremovexattr(r10, &(0x7f0000000080)=@known='system.posix_acl_default\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): socket option. [ 291.491682][ T9306] Use struct sctp_assoc_value instead [ 291.506980][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 291.522274][ T2327] pvrusb2: Device being rendered inoperable [ 291.529158][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 291.536569][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 291.553968][ T2327] pvrusb2: Attached sub-driver cx25840 [ 291.560013][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 291.570369][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 291.747209][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.824'. [ 291.993606][ T9318] netlink: 'syz.5.829': attribute type 10 has an invalid length. [ 292.240204][ T10] usb 4-1: USB disconnect, device number 17 [ 292.361931][ T5814] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 293.041141][ T5814] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 293.197935][ T9338] netlink: 'syz.0.834': attribute type 1 has an invalid length. [ 293.377131][ T9337] gre1: entered promiscuous mode [ 293.668476][ T9338] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 294.230060][ T9363] veth5: entered allmulticast mode [ 295.047819][ T9372] netlink: 'syz.4.841': attribute type 10 has an invalid length. [ 295.572206][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.840'. [ 295.591202][ T5877] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 295.910185][ T5877] usb 7-1: Using ep0 maxpacket: 8 [ 296.920971][ T5877] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 296.930742][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.880911][ T5877] pvrusb2: Hardware description: Terratec Grabster AV400 [ 297.887986][ T5877] pvrusb2: ********** [ 297.921021][ T5877] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 297.946285][ T5877] pvrusb2: Important functionality might not be entirely working. [ 297.960072][ T5877] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 297.985447][ T5877] pvrusb2: ********** [ 298.097111][ T5814] Bluetooth: hci5: unexpected event for opcode 0x0c25 [ 298.109362][ T2327] pvrusb2: Invalid write control endpoint [ 298.178322][ T2327] pvrusb2: Invalid write control endpoint [ 298.184300][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 298.193764][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 298.255176][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 298.266370][ T2327] pvrusb2: Device being rendered inoperable [ 298.272603][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 298.279659][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 298.289002][ T2327] pvrusb2: Attached sub-driver cx25840 [ 298.295658][ T9394] netlink: 'syz.3.849': attribute type 1 has an invalid length. [ 298.424036][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 298.450489][ T9394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.588654][ T9404] netlink: 'syz.6.842': attribute type 4 has an invalid length. [ 298.851448][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 298.910938][ T9398] FAULT_INJECTION: forcing a failure. [ 298.910938][ T9398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.961652][ T9392] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 298.974075][ T9398] CPU: 0 UID: 0 PID: 9398 Comm: syz.5.848 Not tainted syzkaller #0 PREEMPT(full) [ 298.974101][ T9398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 298.974112][ T9398] Call Trace: [ 298.974118][ T9398] [ 298.974125][ T9398] dump_stack_lvl+0x100/0x190 [ 298.974154][ T9398] should_fail_ex.cold+0x5/0xa [ 298.974186][ T9398] _copy_from_iter+0x1f4/0x1690 [ 298.974215][ T9398] ? alloc_pages_mpol+0x25a/0x550 [ 298.974239][ T9398] ? __pfx__copy_from_iter+0x10/0x10 [ 298.974264][ T9398] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 298.974297][ T9398] copy_page_from_iter+0xde/0x180 [ 298.974325][ T9398] tun_build_skb.constprop.0+0x2ea/0x15d0 [ 298.974358][ T9398] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 298.974400][ T9398] ? _kstrtoull+0x13c/0x1f0 [ 298.974417][ T9398] ? __pfx__kstrtoull+0x10/0x10 [ 298.974436][ T9398] tun_get_user+0x16d0/0x3e10 [ 298.974471][ T9398] ? __pfx_tun_get_user+0x10/0x10 [ 298.974498][ T9398] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 298.974536][ T9398] ? find_held_lock+0x2b/0x80 [ 298.974560][ T9398] ? tun_get+0x191/0x370 [ 298.974582][ T9398] ? tun_get+0x191/0x370 [ 298.974610][ T9398] tun_chr_write_iter+0xdc/0x200 [ 298.974638][ T9398] vfs_write+0x6ac/0x1070 [ 298.974658][ T9398] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 298.974685][ T9398] ? __pfx_vfs_write+0x10/0x10 [ 298.974701][ T9398] ? find_held_lock+0x2b/0x80 [ 298.974739][ T9398] ksys_write+0x12a/0x250 [ 298.974758][ T9398] ? __pfx_ksys_write+0x10/0x10 [ 298.974784][ T9398] do_syscall_64+0xc9/0xf80 [ 298.974806][ T9398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.974825][ T9398] RIP: 0033:0x7fce3175b58e [ 298.974839][ T9398] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 298.974857][ T9398] RSP: 002b:00007fce3264efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.974875][ T9398] RAX: ffffffffffffffda RBX: 00007fce3264f6c0 RCX: 00007fce3175b58e [ 298.974887][ T9398] RDX: 0000000000000036 RSI: 0000200000001800 RDI: 00000000000000c8 [ 298.974897][ T9398] RBP: 00007fce3264f090 R08: 0000000000000000 R09: 0000000000000000 [ 298.974908][ T9398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.974918][ T9398] R13: 00007fce31a16128 R14: 00007fce31a16090 R15: 00007ffedd13acc8 [ 298.974943][ T9398] [ 299.213497][ T9392] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 299.976973][ T9] usb 7-1: USB disconnect, device number 5 [ 300.648793][ T9] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 300.659369][ T9441] veth3: entered allmulticast mode [ 300.973966][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 300.982399][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 301.012026][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.077519][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.119985][ T9] usb 7-1: string descriptor 0 read error: -22 [ 301.127000][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.153413][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.216094][ T9] usb 7-1: 0:2 : does not exist [ 301.260316][ T9458] netlink: 'syz.3.862': attribute type 12 has an invalid length. [ 301.278339][ T9458] netlink: 'syz.3.862': attribute type 29 has an invalid length. [ 301.300272][ T9458] netlink: 148 bytes leftover after parsing attributes in process `syz.3.862'. [ 301.519862][ T30] kauditd_printk_skb: 2748 callbacks suppressed [ 301.519879][ T30] audit: type=1400 audit(1769308991.960:890): avc: denied { append } for pid=9455 comm="syz.3.862" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 301.623922][ T30] audit: type=1400 audit(1769308992.110:891): avc: denied { setopt } for pid=9460 comm="syz.0.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 302.479790][ T43] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 302.526538][ T9473] FAULT_INJECTION: forcing a failure. [ 302.526538][ T9473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.570504][ T9473] CPU: 1 UID: 0 PID: 9473 Comm: syz.3.868 Not tainted syzkaller #0 PREEMPT(full) [ 302.570530][ T9473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 302.570540][ T9473] Call Trace: [ 302.570546][ T9473] [ 302.570552][ T9473] dump_stack_lvl+0x100/0x190 [ 302.570580][ T9473] should_fail_ex.cold+0x5/0xa [ 302.570612][ T9473] _copy_to_user+0x32/0xd0 [ 302.570637][ T9473] simple_read_from_buffer+0xcb/0x170 [ 302.570660][ T9473] proc_fail_nth_read+0x1af/0x230 [ 302.570686][ T9473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.570711][ T9473] ? rw_verify_area+0xce/0x6d0 [ 302.570728][ T9473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.570756][ T9473] vfs_read+0x1e4/0xb30 [ 302.570778][ T9473] ? __pfx_vfs_read+0x10/0x10 [ 302.570793][ T9473] ? find_held_lock+0x2b/0x80 [ 302.570817][ T9473] ? __fget_files+0x215/0x3d0 [ 302.570841][ T9473] ? __fget_files+0x21f/0x3d0 [ 302.570869][ T9473] ksys_read+0x12a/0x250 [ 302.570886][ T9473] ? __pfx_ksys_read+0x10/0x10 [ 302.570913][ T9473] do_syscall_64+0xc9/0xf80 [ 302.570933][ T9473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.570951][ T9473] RIP: 0033:0x7f5fc695b58e [ 302.570964][ T9473] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 302.570981][ T9473] RSP: 002b:00007f5fc793cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 302.570998][ T9473] RAX: ffffffffffffffda RBX: 00007f5fc793d6c0 RCX: 00007f5fc695b58e [ 302.571009][ T9473] RDX: 000000000000000f RSI: 00007f5fc793d0a0 RDI: 0000000000000004 [ 302.571020][ T9473] RBP: 00007f5fc793d090 R08: 0000000000000000 R09: 0000000000000000 [ 302.571029][ T9473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.571040][ T9473] R13: 00007f5fc6c16038 R14: 00007f5fc6c15fa0 R15: 00007ffccd561628 [ 302.571063][ T9473] [ 302.938704][ T30] audit: type=1400 audit(1769308993.270:892): avc: denied { connect } for pid=9466 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 302.949881][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 302.991700][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 303.003330][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.097871][ T43] pvrusb2: Hardware description: Terratec Grabster AV400 [ 303.150103][ T43] pvrusb2: ********** [ 303.157307][ T43] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 303.239896][ T9] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 303.267735][ T9] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 303.280908][ T43] pvrusb2: Important functionality might not be entirely working. [ 303.281604][ T9] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 303.328875][ T43] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 303.349896][ T9] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 303.359470][ T43] pvrusb2: ********** [ 303.369184][ T9] usb 7-1: USB disconnect, device number 6 [ 303.385607][ T2327] pvrusb2: Invalid write control endpoint [ 303.537156][ T2327] pvrusb2: Invalid write control endpoint [ 303.817897][ T9495] netlink: 'syz.0.867': attribute type 4 has an invalid length. [ 304.552915][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 304.576209][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 304.583863][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 304.594020][ T2327] pvrusb2: Device being rendered inoperable [ 304.600024][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 304.607277][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 304.615559][ T2327] pvrusb2: Attached sub-driver cx25840 [ 305.254915][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 305.295788][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 305.341924][ T5814] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 305.513404][ T9500] comedi: No check for data length of config insn id -1 is implemented [ 305.532192][ T9500] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 305.552712][ T9500] comedi: Assuming n=40593 is correct [ 305.739552][ T9505] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 306.522510][ T10] usb 1-1: USB disconnect, device number 29 [ 306.598856][ T9514] netlink: 16 bytes leftover after parsing attributes in process `syz.6.879'. [ 306.693651][ T9515] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 306.769853][ T9517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.898756][ T9523] tipc: Started in network mode [ 306.913648][ T9523] tipc: Node identity bac0435cfebb, cluster identity 4711 [ 306.938911][ T9523] tipc: Enabled bearer , priority 0 [ 306.960865][ T9529] syzkaller0: entered promiscuous mode [ 306.969017][ T9529] syzkaller0: entered allmulticast mode [ 307.014160][ T9523] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 307.090389][ T9523] FAULT_INJECTION: forcing a failure. [ 307.090389][ T9523] name failslab, interval 1, probability 0, space 0, times 0 [ 307.103932][ T9523] CPU: 1 UID: 0 PID: 9523 Comm: syz.6.883 Not tainted syzkaller #0 PREEMPT(full) [ 307.103958][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 307.103968][ T9523] Call Trace: [ 307.103974][ T9523] [ 307.103981][ T9523] dump_stack_lvl+0x100/0x190 [ 307.104010][ T9523] should_fail_ex.cold+0x5/0xa [ 307.104042][ T9523] should_failslab+0xc2/0x120 [ 307.104065][ T9523] ? tomoyo_encode2+0xfb/0x3c0 [ 307.104085][ T9523] __kmalloc_noprof+0xf6/0x9c0 [ 307.104110][ T9523] ? tomoyo_encode2+0xfb/0x3c0 [ 307.104127][ T9523] tomoyo_encode2+0xfb/0x3c0 [ 307.104150][ T9523] tomoyo_encode+0x29/0x50 [ 307.104168][ T9523] tomoyo_realpath_from_path+0x18c/0x690 [ 307.104194][ T9523] tomoyo_path_number_perm+0x23c/0x580 [ 307.104221][ T9523] ? tomoyo_path_number_perm+0x22e/0x580 [ 307.104250][ T9523] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 307.104303][ T9523] ? find_held_lock+0x2b/0x80 [ 307.104327][ T9523] ? hook_file_ioctl_common+0x146/0x410 [ 307.104349][ T9523] ? __fget_files+0x215/0x3d0 [ 307.104375][ T9523] ? __fget_files+0x21f/0x3d0 [ 307.104398][ T9523] security_file_ioctl+0xd3/0x230 [ 307.104418][ T9523] __x64_sys_ioctl+0xb7/0x210 [ 307.104437][ T9523] do_syscall_64+0xc9/0xf80 [ 307.104459][ T9523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.104477][ T9523] RIP: 0033:0x7f9fccf9acb9 [ 307.104491][ T9523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.104508][ T9523] RSP: 002b:00007f9fcb1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.104525][ T9523] RAX: ffffffffffffffda RBX: 00007f9fcd215fa0 RCX: 00007f9fccf9acb9 [ 307.104537][ T9523] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 307.104548][ T9523] RBP: 00007f9fcb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 307.104559][ T9523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.104568][ T9523] R13: 00007f9fcd216038 R14: 00007f9fcd215fa0 R15: 00007ffe24a52398 [ 307.104594][ T9523] [ 307.104611][ T9523] ERROR: Out of memory at tomoyo_realpath_from_path. [ 307.339872][ T5814] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 307.362741][ T9523] tipc: Resetting bearer [ 307.533482][ T9522] tipc: Resetting bearer [ 307.644625][ T9544] openvswitch: netlink: Flow key attr not present in new flow. [ 307.744118][ T9522] tipc: Disabling bearer [ 307.927365][ T9541] SELinux: ebitmap: truncated map [ 308.086795][ T9541] SELinux: failed to load policy [ 308.479886][ T9562] netlink: 'syz.0.890': attribute type 10 has an invalid length. [ 309.458265][ T9578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.741405][ T9586] netlink: 'syz.3.897': attribute type 1 has an invalid length. [ 309.836226][ T9589] x_tables: duplicate underflow at hook 1 [ 309.876647][ T9586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 310.074313][ T9591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=9591 comm=syz.6.898 [ 310.391591][ T5918] IPVS: starting estimator thread 0... [ 310.404717][ T9590] bond1: (slave wlan0): Releasing active interface [ 310.442211][ T9590] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 310.559786][ T9592] IPVS: using max 46 ests per chain, 110400 per kthread [ 311.701826][ T89] libceph: connect (1)[c::]:6789 error -101 [ 311.702758][ T89] libceph: mon0 (1)[c::]:6789 connect error [ 311.996182][ T30] audit: type=1400 audit(1769309002.100:893): avc: denied { shutdown } for pid=9604 comm="syz.5.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 312.004436][ T89] libceph: connect (1)[c::]:6789 error -101 [ 312.033415][ T89] libceph: mon0 (1)[c::]:6789 connect error [ 312.219257][ T9610] ceph: No mds server is up or the cluster is laggy [ 312.411700][ T9608] veth3: entered allmulticast mode [ 312.457477][ T9626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.901'. [ 314.389943][ T30] audit: type=1400 audit(1769309004.820:894): avc: denied { read } for pid=9639 comm="syz.0.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 314.530620][ T30] audit: type=1400 audit(1769309005.040:895): avc: denied { ioctl } for pid=9639 comm="syz.0.911" path="socket:[26980]" dev="sockfs" ino=26980 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 314.626204][ T30] audit: type=1400 audit(1769309005.040:896): avc: denied { write } for pid=9639 comm="syz.0.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 314.917265][ T9654] FAULT_INJECTION: forcing a failure. [ 314.917265][ T9654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.946638][ T9654] CPU: 1 UID: 0 PID: 9654 Comm: syz.3.912 Not tainted syzkaller #0 PREEMPT(full) [ 314.946655][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 314.946662][ T9654] Call Trace: [ 314.946665][ T9654] [ 314.946669][ T9654] dump_stack_lvl+0x100/0x190 [ 314.946687][ T9654] should_fail_ex.cold+0x5/0xa [ 314.946706][ T9654] _copy_to_user+0x32/0xd0 [ 314.946722][ T9654] sg_read+0x646/0x17e0 [ 314.946742][ T9654] ? __pfx_sg_read+0x10/0x10 [ 314.946755][ T9654] ? avc_policy_seqno+0x9/0x20 [ 314.946769][ T9654] ? selinux_file_permission+0x70/0x6d0 [ 314.946780][ T9654] ? __pfx_autoremove_wake_function+0x10/0x10 [ 314.946798][ T9654] ? bpf_lsm_file_permission+0x9/0x10 [ 314.946811][ T9654] ? security_file_permission+0x76/0x210 [ 314.946824][ T9654] ? rw_verify_area+0xce/0x6d0 [ 314.946834][ T9654] ? __pfx_sg_read+0x10/0x10 [ 314.946849][ T9654] vfs_read+0x1e4/0xb30 [ 314.946862][ T9654] ? __pfx_vfs_read+0x10/0x10 [ 314.946872][ T9654] ? find_held_lock+0x2b/0x80 [ 314.946886][ T9654] ? __fget_files+0x215/0x3d0 [ 314.946899][ T9654] ? __fget_files+0x215/0x3d0 [ 314.946913][ T9654] ? __fget_files+0x21f/0x3d0 [ 314.946929][ T9654] ksys_read+0x12a/0x250 [ 314.946941][ T9654] ? __pfx_ksys_read+0x10/0x10 [ 314.946956][ T9654] do_syscall_64+0xc9/0xf80 [ 314.946969][ T9654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.946979][ T9654] RIP: 0033:0x7f5fc699acb9 [ 314.946988][ T9654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.946999][ T9654] RSP: 002b:00007f5fc793d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 314.947010][ T9654] RAX: ffffffffffffffda RBX: 00007f5fc6c15fa0 RCX: 00007f5fc699acb9 [ 314.947016][ T9654] RDX: 0000000000002020 RSI: 0000200000001200 RDI: 0000000000000004 [ 314.947022][ T9654] RBP: 00007f5fc793d090 R08: 0000000000000000 R09: 0000000000000000 [ 314.947028][ T9654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.947034][ T9654] R13: 00007f5fc6c16038 R14: 00007f5fc6c15fa0 R15: 00007ffccd561628 [ 314.947048][ T9654] [ 315.343709][ T9661] x_tables: duplicate underflow at hook 1 [ 315.430054][ T9664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=9664 comm=syz.4.914 [ 315.654849][ T9665] x_tables: duplicate underflow at hook 1 [ 315.772513][ T9667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=9667 comm=syz.3.915 [ 316.369406][ T9681] comedi: No check for data length of config insn id -1 is implemented [ 316.447292][ T9681] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 316.503086][ T5918] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 316.642319][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.648636][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.710196][ T9681] comedi: Assuming n=40590 is correct [ 316.771182][ T5918] usb 4-1: device descriptor read/64, error -71 [ 316.800372][ T9686] veth7: entered allmulticast mode [ 317.040231][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.924'. [ 317.269629][ T5918] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 317.499827][ T5918] usb 4-1: device descriptor read/64, error -71 [ 317.619797][ T9] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 317.627499][ T5918] usb usb4-port1: attempt power cycle [ 317.859017][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 317.920153][ T9] usb 6-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 317.962982][ T9] usb 6-1: config 1 interface 0 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 317.979806][ T5918] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 318.019126][ T5918] usb 4-1: device descriptor read/8, error -71 [ 318.037301][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 318.073696][ T9] usb 6-1: string descriptor 0 read error: -22 [ 318.084189][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.108050][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.155809][ T9675] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 318.165062][ T9675] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 318.215566][ T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 318.290007][ T5918] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 318.320478][ T5918] usb 4-1: device descriptor read/8, error -71 [ 318.460526][ T5918] usb usb4-port1: unable to enumerate USB device [ 318.490771][ T9701] x_tables: duplicate underflow at hook 1 [ 318.966669][ T9701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=9701 comm=syz.6.925 [ 319.101914][ T9709] FAULT_INJECTION: forcing a failure. [ 319.101914][ T9709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.152772][ T9709] CPU: 0 UID: 0 PID: 9709 Comm: syz.4.928 Not tainted syzkaller #0 PREEMPT(full) [ 319.152796][ T9709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 319.152805][ T9709] Call Trace: [ 319.152810][ T9709] [ 319.152816][ T9709] dump_stack_lvl+0x100/0x190 [ 319.152836][ T9709] should_fail_ex.cold+0x5/0xa [ 319.152855][ T9709] strncpy_from_user+0x3b/0x2d0 [ 319.152871][ T9709] getname_flags.part.0+0x8f/0x540 [ 319.152890][ T9709] __x64_sys_renameat2+0x156/0x2a0 [ 319.152907][ T9709] do_syscall_64+0xc9/0xf80 [ 319.152919][ T9709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.152930][ T9709] RIP: 0033:0x7f0dfc59acb9 [ 319.152940][ T9709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.152950][ T9709] RSP: 002b:00007f0dfd3ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 319.152961][ T9709] RAX: ffffffffffffffda RBX: 00007f0dfc815fa0 RCX: 00007f0dfc59acb9 [ 319.152968][ T9709] RDX: ffffffffffffff9c RSI: 0000200000000440 RDI: ffffffffffffff9c [ 319.152974][ T9709] RBP: 00007f0dfd3ea090 R08: 0000000000000004 R09: 0000000000000000 [ 319.152981][ T9709] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.152987][ T9709] R13: 00007f0dfc816038 R14: 00007f0dfc815fa0 R15: 00007ffe7d24d1a8 [ 319.153001][ T9709] [ 319.516514][ T9713] FAULT_INJECTION: forcing a failure. [ 319.516514][ T9713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.571194][ T9713] CPU: 1 UID: 0 PID: 9713 Comm: syz.0.929 Not tainted syzkaller #0 PREEMPT(full) [ 319.571219][ T9713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 319.571229][ T9713] Call Trace: [ 319.571235][ T9713] [ 319.571241][ T9713] dump_stack_lvl+0x100/0x190 [ 319.571268][ T9713] should_fail_ex.cold+0x5/0xa [ 319.571299][ T9713] _copy_to_user+0x32/0xd0 [ 319.571324][ T9713] simple_read_from_buffer+0xcb/0x170 [ 319.571348][ T9713] proc_fail_nth_read+0x1af/0x230 [ 319.571373][ T9713] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.571399][ T9713] ? rw_verify_area+0xce/0x6d0 [ 319.571415][ T9713] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.571438][ T9713] vfs_read+0x1e4/0xb30 [ 319.571460][ T9713] ? __pfx_vfs_read+0x10/0x10 [ 319.571476][ T9713] ? find_held_lock+0x2b/0x80 [ 319.571500][ T9713] ? __fget_files+0x215/0x3d0 [ 319.571526][ T9713] ? __fget_files+0x21f/0x3d0 [ 319.571554][ T9713] ksys_read+0x12a/0x250 [ 319.571572][ T9713] ? __pfx_ksys_read+0x10/0x10 [ 319.571599][ T9713] do_syscall_64+0xc9/0xf80 [ 319.571621][ T9713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.571640][ T9713] RIP: 0033:0x7fd97a35b58e [ 319.571655][ T9713] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 319.571672][ T9713] RSP: 002b:00007fd97b307fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.571690][ T9713] RAX: ffffffffffffffda RBX: 00007fd97b3086c0 RCX: 00007fd97a35b58e [ 319.571702][ T9713] RDX: 000000000000000f RSI: 00007fd97b3080a0 RDI: 0000000000000004 [ 319.571713][ T9713] RBP: 00007fd97b308090 R08: 0000000000000000 R09: 0000000000000000 [ 319.571723][ T9713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.571734][ T9713] R13: 00007fd97a616038 R14: 00007fd97a615fa0 R15: 00007ffd3989a858 [ 319.571759][ T9713] [ 320.262668][ T5822] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 320.279356][ T5814] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 320.513690][ T43] usb 6-1: USB disconnect, device number 10 [ 320.730065][ T9736] openvswitch: netlink: Flow key attr not present in new flow. [ 321.240462][ T9751] openvswitch: netlink: Flow key attr not present in new flow. [ 321.271757][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 321.969998][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 321.975322][ T5814] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 322.299943][ T9] usb 1-1: no configurations [ 322.335875][ T9] usb 1-1: can't read configurations, error -22 [ 322.580306][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 322.772986][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 322.822775][ T9] usb 1-1: no configurations [ 322.827428][ T9] usb 1-1: can't read configurations, error -22 [ 322.877915][ T9] usb usb1-port1: attempt power cycle [ 323.286537][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 323.448270][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 323.558907][ T9] usb 1-1: no configurations [ 323.565350][ T9] usb 1-1: can't read configurations, error -22 [ 323.801655][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 323.922627][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 323.928781][ T9] usb 1-1: no configurations [ 323.933920][ T9] usb 1-1: can't read configurations, error -22 [ 323.945078][ T9] usb usb1-port1: unable to enumerate USB device [ 324.127601][ T5814] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 324.683661][ T9788] binder: 9787:9788 ioctl 4068aea3 200000000000 returned -22 [ 326.085674][ T9797] netlink: 'syz.0.953': attribute type 10 has an invalid length. [ 326.550672][ T9788] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 326.562854][ T9788] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 326.570942][ T9788] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 326.717579][ T30] audit: type=1400 audit(1769309017.220:897): avc: denied { write } for pid=9802 comm="syz.4.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 326.846107][ T9788] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 326.982028][ T9788] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 327.004520][ T9809] comedi: No check for data length of config insn id -1 is implemented [ 327.028514][ T9809] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 327.059900][ T9809] comedi: Assuming n=40587 is correct [ 327.259775][ T89] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 327.277346][ T9818] openvswitch: netlink: Flow key attr not present in new flow. [ 327.339960][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 327.419790][ T89] usb 6-1: Using ep0 maxpacket: 32 [ 327.428353][ T89] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 98, changing to 10 [ 327.442939][ T89] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid maxpacket 26222, setting to 1024 [ 327.499882][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 327.509970][ T89] usb 6-1: config 0 interface 0 has no altsetting 0 [ 327.516593][ T89] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 327.526052][ T24] usb 7-1: no configurations [ 327.533844][ T24] usb 7-1: can't read configurations, error -22 [ 327.543077][ T89] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.558855][ T89] usb 6-1: config 0 descriptor?? [ 327.569044][ T9792] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 327.624397][ T9823] x_tables: duplicate underflow at hook 1 [ 327.670078][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 327.692718][ T9824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=9824 comm=syz.4.961 [ 327.953515][ T30] audit: type=1400 audit(1769309018.460:898): avc: denied { bind } for pid=9790 comm="syz.5.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 328.004814][ T30] audit: type=1400 audit(1769309018.510:899): avc: denied { setopt } for pid=9790 comm="syz.5.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 328.024568][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 328.031877][ T24] usb 7-1: no configurations [ 328.037284][ T89] usbhid 6-1:0.0: can't add hid device: -71 [ 328.044063][ T24] usb 7-1: can't read configurations, error -22 [ 328.050937][ T89] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 328.071324][ T24] usb usb7-port1: attempt power cycle [ 328.138747][ T9826] FAULT_INJECTION: forcing a failure. [ 328.138747][ T9826] name failslab, interval 1, probability 0, space 0, times 0 [ 328.173459][ T89] usb 6-1: USB disconnect, device number 11 [ 328.179979][ T9826] CPU: 1 UID: 0 PID: 9826 Comm: syz.3.962 Not tainted syzkaller #0 PREEMPT(full) [ 328.180003][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 328.180014][ T9826] Call Trace: [ 328.180019][ T9826] [ 328.180026][ T9826] dump_stack_lvl+0x100/0x190 [ 328.180061][ T9826] should_fail_ex.cold+0x5/0xa [ 328.180092][ T9826] should_failslab+0xc2/0x120 [ 328.180115][ T9826] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 328.180139][ T9826] ? __alloc_skb+0x156/0x410 [ 328.180158][ T9826] ? __alloc_skb+0x35d/0x410 [ 328.180181][ T9826] ? __alloc_skb+0x156/0x410 [ 328.180200][ T9826] __alloc_skb+0x156/0x410 [ 328.180218][ T9826] ? __alloc_skb+0x35d/0x410 [ 328.180238][ T9826] ? __pfx___alloc_skb+0x10/0x10 [ 328.180261][ T9826] ? netlink_autobind.isra.0+0x60/0x370 [ 328.180293][ T9826] netlink_alloc_large_skb+0x69/0x150 [ 328.180318][ T9826] netlink_sendmsg+0x680/0xda0 [ 328.180347][ T9826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.180370][ T9826] ? __might_fault+0x30/0x140 [ 328.180398][ T9826] ____sys_sendmsg+0xa54/0xc30 [ 328.180418][ T9826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.180445][ T9826] ___sys_sendmsg+0x190/0x1e0 [ 328.180464][ T9826] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.180493][ T9826] ? find_held_lock+0x2b/0x80 [ 328.180532][ T9826] __sys_sendmsg+0x170/0x220 [ 328.180555][ T9826] ? __pfx___sys_sendmsg+0x10/0x10 [ 328.180591][ T9826] do_syscall_64+0xc9/0xf80 [ 328.180612][ T9826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.180630][ T9826] RIP: 0033:0x7f5fc699acb9 [ 328.180644][ T9826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.180661][ T9826] RSP: 002b:00007f5fc793d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.180678][ T9826] RAX: ffffffffffffffda RBX: 00007f5fc6c15fa0 RCX: 00007f5fc699acb9 [ 328.180689][ T9826] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 328.180699][ T9826] RBP: 00007f5fc793d090 R08: 0000000000000000 R09: 0000000000000000 [ 328.180710][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.180720][ T9826] R13: 00007f5fc6c16038 R14: 00007f5fc6c15fa0 R15: 00007ffccd561628 [ 328.180743][ T9826] [ 328.582880][ T9831] netlink: 68 bytes leftover after parsing attributes in process `syz.3.964'. [ 328.610495][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 328.610507][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 328.610532][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 328.634568][ T9833] netlink: 68 bytes leftover after parsing attributes in process `syz.3.964'. [ 328.720617][ T5918] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 328.750419][ T9836] xt_hashlimit: max too large, truncated to 1048576 [ 328.761788][ T9836] xt_hashlimit: overflow, rate too high: 0 [ 328.769808][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 328.797818][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 328.803745][ T24] usb 7-1: no configurations [ 328.808354][ T24] usb 7-1: can't read configurations, error -22 [ 328.851157][ T5822] Bluetooth: hci5: command 0x0c1a tx timeout [ 328.882338][ T5918] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 328.939857][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 328.981660][ T5918] usb 5-1: config 0 has no interface number 0 [ 328.988026][ T5918] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 329.002022][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.010623][ T5822] Bluetooth: hci6: command 0x040f tx timeout [ 329.030012][ T5918] usb 5-1: config 0 descriptor?? [ 329.043898][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 329.049444][ T24] usb 7-1: no configurations [ 329.054222][ T24] usb 7-1: can't read configurations, error -22 [ 329.056974][ T5918] usb 5-1: selecting invalid altsetting 1 [ 329.060866][ T24] usb usb7-port1: unable to enumerate USB device [ 329.101617][ T5918] dvb_ttusb_budget: ttusb_init_controller: error [ 329.118172][ T5918] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 329.292545][ T5918] DVB: Unable to find symbol cx22700_attach() [ 329.509713][ T5918] DVB: Unable to find symbol tda10046_attach() [ 329.516222][ T5918] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 330.130594][ T9848] netlink: 'syz.5.967': attribute type 10 has an invalid length. [ 332.243067][ T9860] x_tables: duplicate underflow at hook 1 [ 332.531986][ T24] usb 5-1: USB disconnect, device number 16 [ 332.772495][ T9860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=9860 comm=syz.6.971 [ 333.655307][ T30] audit: type=1326 audit(1769309024.160:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.0.975" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd97a39acb9 code=0x0 [ 333.824190][ T9881] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.975'. [ 333.834232][ T9879] x_tables: duplicate underflow at hook 1 [ 334.359223][ T9884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=9884 comm=syz.6.976 [ 334.778492][ T9887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.974'. [ 335.035676][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.982'. [ 335.067857][ T9901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9901 comm=syz.6.982 [ 335.093320][ T5918] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 335.269913][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 335.276514][ T5918] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 335.287552][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.307980][ T5918] pvrusb2: Hardware description: Terratec Grabster AV400 [ 335.316445][ T5918] pvrusb2: ********** [ 335.320854][ T5918] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 335.364911][ T5918] pvrusb2: Important functionality might not be entirely working. [ 335.381269][ T5918] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 335.399099][ T5918] pvrusb2: ********** [ 335.506961][ T2327] pvrusb2: Invalid write control endpoint [ 335.555237][ T2327] pvrusb2: Invalid write control endpoint [ 335.592689][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 335.602227][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 335.612808][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 335.623123][ T2327] pvrusb2: Device being rendered inoperable [ 335.629094][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 335.659857][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 335.673453][ T2327] pvrusb2: Attached sub-driver cx25840 [ 335.679453][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 335.770042][ T5918] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 335.794207][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 336.725879][ T9911] netlink: 'syz.5.984': attribute type 4 has an invalid length. [ 337.049813][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 337.059451][ T5918] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 337.070908][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.100326][ T5918] pvrusb2: Hardware description: Terratec Grabster AV400 [ 337.107569][ T5918] pvrusb2: ********** [ 337.112717][ T9921] openvswitch: netlink: Flow key attr not present in new flow. [ 337.134533][ T5918] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 337.147683][ T5918] pvrusb2: Important functionality might not be entirely working. [ 337.166828][ T5918] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 337.189340][ T5918] pvrusb2: ********** [ 337.307890][ T2327] pvrusb2: Invalid write control endpoint [ 337.309770][ T89] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 337.362899][ T2327] pvrusb2: Invalid write control endpoint [ 337.372083][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 337.408101][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 337.416407][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 337.428891][ T2327] pvrusb2: Device being rendered inoperable [ 337.446564][ T2327] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 337.457775][ T2327] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 337.473266][ T2327] pvrusb2: Attached sub-driver cx25840 [ 337.482759][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 337.490584][ T89] usb 1-1: Invalid ep0 maxpacket: 64 [ 337.500135][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 337.639827][ T89] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 338.239243][ T24] usb 4-1: USB disconnect, device number 22 [ 338.250152][ T89] usb 1-1: Invalid ep0 maxpacket: 64 [ 338.255678][ T89] usb usb1-port1: attempt power cycle [ 338.531656][ T30] audit: type=1400 audit(1769309029.040:901): avc: denied { read } for pid=9933 comm="syz.6.990" name="mouse0" dev="devtmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 338.617067][ T9935] FAULT_INJECTION: forcing a failure. [ 338.617067][ T9935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.630383][ T9935] CPU: 0 UID: 0 PID: 9935 Comm: syz.6.990 Not tainted syzkaller #0 PREEMPT(full) [ 338.630403][ T9935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 338.630412][ T9935] Call Trace: [ 338.630418][ T9935] [ 338.630425][ T9935] dump_stack_lvl+0x100/0x190 [ 338.630452][ T9935] should_fail_ex.cold+0x5/0xa [ 338.630474][ T9935] _copy_to_user+0x32/0xd0 [ 338.630490][ T9935] simple_read_from_buffer+0xcb/0x170 [ 338.630503][ T9935] proc_fail_nth_read+0x1af/0x230 [ 338.630518][ T9935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.630534][ T9935] ? rw_verify_area+0xce/0x6d0 [ 338.630544][ T9935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.630558][ T9935] vfs_read+0x1e4/0xb30 [ 338.630571][ T9935] ? __pfx_vfs_read+0x10/0x10 [ 338.630581][ T9935] ? find_held_lock+0x2b/0x80 [ 338.630595][ T9935] ? __fget_files+0x215/0x3d0 [ 338.630611][ T9935] ? __fget_files+0x21f/0x3d0 [ 338.630627][ T9935] ksys_read+0x12a/0x250 [ 338.630638][ T9935] ? __pfx_ksys_read+0x10/0x10 [ 338.630653][ T9935] do_syscall_64+0xc9/0xf80 [ 338.630666][ T9935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.630677][ T9935] RIP: 0033:0x7f9fccf5b58e [ 338.630686][ T9935] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 338.630696][ T9935] RSP: 002b:00007f9fcb1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 338.630707][ T9935] RAX: ffffffffffffffda RBX: 00007f9fcb1f66c0 RCX: 00007f9fccf5b58e [ 338.630714][ T9935] RDX: 000000000000000f RSI: 00007f9fcb1f60a0 RDI: 0000000000000004 [ 338.630720][ T9935] RBP: 00007f9fcb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 338.630726][ T9935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.630732][ T9935] R13: 00007f9fcd216038 R14: 00007f9fcd215fa0 R15: 00007ffe24a52398 [ 338.630746][ T9935] [ 338.649769][ T89] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 338.931860][ T89] usb 1-1: Invalid ep0 maxpacket: 64 [ 339.072798][ T89] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 339.100607][ T89] usb 1-1: Invalid ep0 maxpacket: 64 [ 339.113829][ T89] usb usb1-port1: unable to enumerate USB device [ 339.278687][ T5918] usb 5-1: USB disconnect, device number 17 [ 339.360172][ T5822] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 339.573219][ T9946] IPVS: stopping master sync thread 9947 ... [ 339.581446][ T9947] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 340.230463][ T5822] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 341.459760][ T5918] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 341.709778][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 341.720559][ T9974] openvswitch: netlink: Flow key attr not present in new flow. [ 341.792810][ T5918] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 341.802179][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.817757][ T5918] pvrusb2: Hardware description: Terratec Grabster AV400 [ 341.827763][ T5918] pvrusb2: ********** [ 341.833467][ T5918] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 341.851204][ T5918] pvrusb2: Important functionality might not be entirely working. [ 341.871403][ T5918] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 341.894524][ T5918] pvrusb2: ********** [ 342.099894][ T2327] pvrusb2: Invalid write control endpoint [ 342.241104][ T30] audit: type=1400 audit(1769309032.740:902): avc: denied { create } for pid=9980 comm="syz.5.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 342.524243][ T9979] openvswitch: netlink: Flow key attr not present in new flow. [ 343.437908][ T2327] pvrusb2: Invalid write control endpoint [ 343.444723][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 343.542480][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 343.570091][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 343.587801][ T2327] pvrusb2: Device being rendered inoperable [ 343.595728][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 343.630346][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 343.662256][ T2327] pvrusb2: Attached sub-driver cx25840 [ 343.675032][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 343.702540][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 343.742802][T10003] x_tables: duplicate underflow at hook 1 [ 343.889363][T10000] usb usb8: usbfs: process 10000 (syz.6.1004) did not claim interface 0 before use [ 343.942906][T10005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=10005 comm=syz.5.1006 [ 344.170354][ T89] usb 1-1: USB disconnect, device number 38 [ 344.492487][ T30] audit: type=1400 audit(1769309034.950:903): avc: denied { append } for pid=10004 comm="syz.3.1005" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 344.777820][ T30] audit: type=1400 audit(1769309034.950:904): avc: denied { ioctl } for pid=10004 comm="syz.3.1005" path="socket:[28699]" dev="sockfs" ino=28699 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 344.985793][T10015] evm: overlay not supported [ 344.998280][ T30] audit: type=1400 audit(1769309035.030:905): avc: denied { read } for pid=10004 comm="syz.3.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 345.229906][T10024] FAULT_INJECTION: forcing a failure. [ 345.229906][T10024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.259955][T10024] CPU: 1 UID: 0 PID: 10024 Comm: syz.5.1012 Not tainted syzkaller #0 PREEMPT(full) [ 345.259980][T10024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 345.259991][T10024] Call Trace: [ 345.259996][T10024] [ 345.260002][T10024] dump_stack_lvl+0x100/0x190 [ 345.260032][T10024] should_fail_ex.cold+0x5/0xa [ 345.260064][T10024] _copy_to_user+0x32/0xd0 [ 345.260090][T10024] simple_read_from_buffer+0xcb/0x170 [ 345.260113][T10024] proc_fail_nth_read+0x1af/0x230 [ 345.260139][T10024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.260165][T10024] ? rw_verify_area+0xce/0x6d0 [ 345.260181][T10024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.260204][T10024] vfs_read+0x1e4/0xb30 [ 345.260227][T10024] ? __pfx_vfs_read+0x10/0x10 [ 345.260243][T10024] ? find_held_lock+0x2b/0x80 [ 345.260267][T10024] ? __fget_files+0x215/0x3d0 [ 345.260292][T10024] ? __fget_files+0x21f/0x3d0 [ 345.260320][T10024] ksys_read+0x12a/0x250 [ 345.260339][T10024] ? __pfx_ksys_read+0x10/0x10 [ 345.260365][T10024] do_syscall_64+0xc9/0xf80 [ 345.260387][T10024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.260404][T10024] RIP: 0033:0x7fce3175b58e [ 345.260419][T10024] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 345.260435][T10024] RSP: 002b:00007fce3266ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 345.260454][T10024] RAX: ffffffffffffffda RBX: 00007fce326706c0 RCX: 00007fce3175b58e [ 345.260465][T10024] RDX: 000000000000000f RSI: 00007fce326700a0 RDI: 0000000000000004 [ 345.260476][T10024] RBP: 00007fce32670090 R08: 0000000000000000 R09: 0000000000000000 [ 345.260486][T10024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.260495][T10024] R13: 00007fce31a16038 R14: 00007fce31a15fa0 R15: 00007ffedd13acc8 [ 345.260521][T10024] [ 345.575154][T10029] FAULT_INJECTION: forcing a failure. [ 345.575154][T10029] name failslab, interval 1, probability 0, space 0, times 0 [ 345.602092][T10029] CPU: 0 UID: 0 PID: 10029 Comm: syz.5.1014 Not tainted syzkaller #0 PREEMPT(full) [ 345.602116][T10029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 345.602126][T10029] Call Trace: [ 345.602132][T10029] [ 345.602138][T10029] dump_stack_lvl+0x100/0x190 [ 345.602166][T10029] should_fail_ex.cold+0x5/0xa [ 345.602194][T10029] should_failslab+0xc2/0x120 [ 345.602219][T10029] ? tomoyo_encode2+0xfb/0x3c0 [ 345.602235][T10029] __kmalloc_noprof+0xf6/0x9c0 [ 345.602256][T10029] ? tomoyo_encode2+0xfb/0x3c0 [ 345.602271][T10029] tomoyo_encode2+0xfb/0x3c0 [ 345.602291][T10029] tomoyo_encode+0x29/0x50 [ 345.602306][T10029] tomoyo_realpath_from_path+0x18c/0x690 [ 345.602327][T10029] tomoyo_path_number_perm+0x23c/0x580 [ 345.602348][T10029] ? tomoyo_path_number_perm+0x22e/0x580 [ 345.602372][T10029] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 345.602421][T10029] ? find_held_lock+0x2b/0x80 [ 345.602442][T10029] ? hook_file_ioctl_common+0x146/0x410 [ 345.602462][T10029] ? __fget_files+0x215/0x3d0 [ 345.602485][T10029] ? __fget_files+0x21f/0x3d0 [ 345.602508][T10029] security_file_ioctl+0xd3/0x230 [ 345.602526][T10029] __x64_sys_ioctl+0xb7/0x210 [ 345.602543][T10029] do_syscall_64+0xc9/0xf80 [ 345.602565][T10029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.602581][T10029] RIP: 0033:0x7fce3179acb9 [ 345.602594][T10029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.602609][T10029] RSP: 002b:00007fce32670028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.602625][T10029] RAX: ffffffffffffffda RBX: 00007fce31a15fa0 RCX: 00007fce3179acb9 [ 345.602636][T10029] RDX: 0000200000000540 RSI: 00000000000007a8 RDI: 0000000000000003 [ 345.602645][T10029] RBP: 00007fce32670090 R08: 0000000000000000 R09: 0000000000000000 [ 345.602654][T10029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.602664][T10029] R13: 00007fce31a16038 R14: 00007fce31a15fa0 R15: 00007ffedd13acc8 [ 345.602687][T10029] [ 345.602702][T10029] ERROR: Out of memory at tomoyo_realpath_from_path. [ 345.832156][T10032] x_tables: duplicate underflow at hook 1 [ 346.009481][T10033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=10033 comm=syz.0.1015 [ 346.054353][ T9] IPVS: starting estimator thread 0... [ 346.193631][T10034] IPVS: using max 47 ests per chain, 112800 per kthread [ 346.271465][T10038] comedi: No check for data length of config insn id -1 is implemented [ 346.279889][T10038] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 346.289159][T10038] comedi: Assuming n=40581 is correct [ 346.360430][T10040] openvswitch: netlink: Flow key attr not present in new flow. [ 347.585720][T10054] netlink: 'syz.0.1019': attribute type 4 has an invalid length. [ 348.698270][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 349.044017][T10071] comedi: No check for data length of config insn id -1 is implemented [ 349.059823][T10071] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 349.106244][T10071] comedi: Assuming n=40584 is correct [ 349.149877][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 349.309786][ T5877] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 349.321301][ T9] usb 5-1: config index 0 descriptor too short (expected 93, got 72) [ 349.353522][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 349.383458][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.407066][ T9] usb 5-1: Product: syz [ 349.421963][ T9] usb 5-1: Manufacturer: syz [ 349.439772][ T89] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 349.535708][ T9] usb 5-1: SerialNumber: syz [ 349.537811][ T5877] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 349.635079][ T89] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 349.666368][ T5877] usb 6-1: config 0 has no interface number 0 [ 349.698472][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 349.706952][ T5877] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 349.781142][ T89] usb 4-1: config 0 has no interface number 0 [ 349.790011][ T89] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 349.810151][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.854719][ T5918] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 349.866740][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.870748][ T89] usb 4-1: config 0 descriptor?? [ 349.907709][ T5877] usb 6-1: config 0 descriptor?? [ 349.910547][ T89] usb 4-1: selecting invalid altsetting 1 [ 349.934146][ T5877] usb 6-1: selecting invalid altsetting 1 [ 349.946955][ T89] dvb_ttusb_budget: ttusb_init_controller: error [ 349.956383][ T5877] dvb_ttusb_budget: ttusb_init_controller: error [ 349.962674][ T89] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 349.991553][ T5877] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 350.185281][ T89] DVB: Unable to find symbol cx22700_attach() [ 350.205099][ T5877] DVB: Unable to find symbol cx22700_attach() [ 350.278562][ T89] DVB: Unable to find symbol tda10046_attach() [ 350.386454][ T89] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 350.418222][ T89] usb 4-1: USB disconnect, device number 23 [ 350.440711][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1029'. [ 350.449574][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1029'. [ 350.455044][ T5877] DVB: Unable to find symbol tda10046_attach() [ 350.561403][ T9] usb 5-1: USB disconnect, device number 18 [ 350.574760][ T5877] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 350.583674][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1029'. [ 350.598529][T10094] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1029'. [ 350.610338][ T5877] usb 6-1: USB disconnect, device number 12 [ 350.670415][ T8731] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.679254][ T8731] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.688448][ T8731] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.720533][ T8729] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.767375][T10091] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1029'. [ 350.935752][ T5918] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 350.960049][ T5918] ath9k_htc: Failed to initialize the device [ 350.975817][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 351.190658][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1031'. [ 353.905794][T10131] x_tables: duplicate underflow at hook 1 [ 353.990417][T10133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=10133 comm=syz.3.1039 [ 354.202310][T10132] openvswitch: netlink: Flow key attr not present in new flow. [ 354.522818][ T30] audit: type=1326 audit(1769309045.030:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10136 comm="syz.4.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dfc59acb9 code=0x7fc00000 [ 354.976523][ T30] audit: type=1326 audit(1769309045.480:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10136 comm="syz.4.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0dfc59acb9 code=0x7fc00000 [ 355.133100][ T30] audit: type=1326 audit(1769309045.640:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10136 comm="syz.4.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dfc59acb9 code=0x7fc00000 [ 355.336332][ T5918] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 355.509838][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 355.866155][ T5918] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 355.883235][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.904766][ T5918] pvrusb2: Hardware description: Terratec Grabster AV400 [ 355.914546][ T5918] pvrusb2: ********** [ 355.919811][ T5918] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 355.932637][ T5918] pvrusb2: Important functionality might not be entirely working. [ 355.943576][ T5918] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 355.947894][ T30] audit: type=1400 audit(1769309046.450:909): avc: denied { listen } for pid=10154 comm="syz.4.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 356.051623][ T89] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 356.055744][ T5918] pvrusb2: ********** [ 356.180672][ T2327] pvrusb2: Invalid write control endpoint [ 356.257355][ T2327] pvrusb2: Invalid write control endpoint [ 356.319959][ T89] usb 4-1: Using ep0 maxpacket: 8 [ 356.410563][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 356.441492][ T89] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 356.515832][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 356.567509][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.588013][ T5918] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 356.591992][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 356.705878][ T2327] pvrusb2: Device being rendered inoperable [ 356.721383][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 356.731170][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 357.187364][ T89] pvrusb2: Hardware description: Terratec Grabster AV400 [ 357.212010][ T89] pvrusb2: ********** [ 357.219172][ T89] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 357.231204][ T2327] pvrusb2: Attached sub-driver cx25840 [ 357.238700][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 357.249759][ T89] pvrusb2: Important functionality might not be entirely working. [ 357.257651][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 357.267729][ T89] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 357.296081][ T89] pvrusb2: ********** [ 357.359233][ T5918] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 357.369491][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.391033][ T5918] usb 6-1: Product: syz [ 357.405800][ T5918] usb 6-1: Manufacturer: syz [ 357.417200][ T5918] usb 6-1: SerialNumber: syz [ 357.418775][ T2327] pvrusb2: Invalid write control endpoint [ 357.536319][ T2327] pvrusb2: Invalid write control endpoint [ 357.555232][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 357.584174][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 357.601635][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 357.636136][ T2327] pvrusb2: Device being rendered inoperable [ 357.651717][ T2327] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 357.677118][ T2327] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 357.837889][ T2327] pvrusb2: Attached sub-driver cx25840 [ 357.843481][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 357.853606][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 357.878906][ T5918] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 358.773625][ T5884] usb 1-1: USB disconnect, device number 39 [ 358.785427][T10185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.798216][ T5918] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 358.850753][T10185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.249992][ T5884] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 359.399799][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 359.409015][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.421478][ T5884] usb 5-1: config 0 has no interfaces? [ 359.427075][ T5884] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 359.441851][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.461788][ T5884] usb 5-1: config 0 descriptor?? [ 359.830111][ T5884] usb 4-1: USB disconnect, device number 24 [ 360.380276][T10206] netlink: 'syz.4.1050': attribute type 4 has an invalid length. [ 360.751281][ T5918] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 360.772403][ T5918] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 360.876695][ T5918] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 360.935734][ T5918] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 360.954359][ T5918] usb 6-1: USB disconnect, device number 13 [ 361.678497][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'. [ 361.780986][ T5884] usb 5-1: USB disconnect, device number 19 [ 362.067067][T10228] openvswitch: netlink: Flow key attr not present in new flow. [ 362.519771][ T5884] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 362.692319][ T5884] usb 7-1: Using ep0 maxpacket: 8 [ 362.704360][ T5884] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 362.763226][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.804019][T10236] usb usb8: usbfs: process 10236 (syz.0.1058) did not claim interface 0 before use [ 362.814237][ T89] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 362.851254][ T5884] pvrusb2: Hardware description: Terratec Grabster AV400 [ 362.866260][ T5884] pvrusb2: ********** [ 362.870829][ T5884] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 362.924180][ T5884] pvrusb2: Important functionality might not be entirely working. [ 363.030303][ T89] usb 4-1: Using ep0 maxpacket: 16 [ 363.068816][ T89] usb 4-1: too many endpoints for config 0 interface 0 altsetting 198: 238, using maximum allowed: 30 [ 363.089619][ T5884] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 363.144085][ T89] usb 4-1: config 0 interface 0 altsetting 198 has 0 endpoint descriptors, different from the interface descriptor's value: 238 [ 363.188078][ T5884] pvrusb2: ********** [ 363.219851][ T2327] pvrusb2: Invalid write control endpoint [ 363.226188][ T89] usb 4-1: config 0 interface 0 has no altsetting 0 [ 363.317437][ T89] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 363.338607][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.372183][ T89] usb 4-1: Product: syz [ 363.389220][ T2327] pvrusb2: Invalid write control endpoint [ 363.402867][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 363.497230][ T89] usb 4-1: Manufacturer: syz [ 363.511801][ T89] usb 4-1: SerialNumber: syz [ 363.522048][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 363.532762][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 363.722191][ T2327] pvrusb2: Device being rendered inoperable [ 363.723355][ T89] usb 4-1: config 0 descriptor?? [ 363.743609][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 363.757283][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 363.780520][ T2327] pvrusb2: Attached sub-driver cx25840 [ 363.798888][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 363.883936][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 363.921601][T10253] x_tables: duplicate underflow at hook 1 [ 363.975342][ T89] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 364.000029][T10250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=10250 comm=syz.4.1063 [ 364.330312][ T89] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 364.702700][ T5822] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 365.309041][ T89] usb 7-1: USB disconnect, device number 11 [ 365.536013][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 366.217085][T10288] openvswitch: netlink: Flow key attr not present in new flow. [ 366.628225][ T5918] usb 4-1: USB disconnect, device number 25 [ 366.716477][T10296] comedi: No check for data length of config insn id -1 is implemented [ 366.725833][T10296] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 366.735439][T10296] comedi: Assuming n=40576 is correct [ 367.109761][T10303] FAULT_INJECTION: forcing a failure. [ 367.109761][T10303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.207043][T10303] CPU: 1 UID: 0 PID: 10303 Comm: syz.6.1078 Not tainted syzkaller #0 PREEMPT(full) [ 367.207061][T10303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 367.207068][T10303] Call Trace: [ 367.207072][T10303] [ 367.207076][T10303] dump_stack_lvl+0x100/0x190 [ 367.207095][T10303] should_fail_ex.cold+0x5/0xa [ 367.207115][T10303] _copy_to_user+0x32/0xd0 [ 367.207131][T10303] copy_siginfo_to_user+0x27/0xc0 [ 367.207149][T10303] x64_setup_rt_frame+0xa03/0xce0 [ 367.207168][T10303] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 367.207184][T10303] ? __pfx_vfs_read+0x10/0x10 [ 367.207195][T10303] ? find_held_lock+0x2b/0x80 [ 367.207209][T10303] ? __fget_files+0x215/0x3d0 [ 367.207224][T10303] arch_do_signal_or_restart+0x59e/0x7a0 [ 367.207241][T10303] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 367.207265][T10303] ? ksys_read+0x1ac/0x250 [ 367.207279][T10303] exit_to_user_mode_loop+0x86/0x4b0 [ 367.207291][T10303] ? rcu_is_watching+0x12/0xc0 [ 367.207306][T10303] do_syscall_64+0x4fe/0xf80 [ 367.207319][T10303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.207330][T10303] RIP: 0033:0x7f9fccf9acb7 [ 367.207339][T10303] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 367.207349][T10303] RSP: 002b:00007f9fcb1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 367.207360][T10303] RAX: 0000000000000000 RBX: 00007f9fcd215fa0 RCX: 00007f9fccf9acb9 [ 367.207367][T10303] RDX: 0000000000002020 RSI: 0000200000001200 RDI: 0000000000000004 [ 367.207373][T10303] RBP: 00007f9fcb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 367.207380][T10303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.207385][T10303] R13: 00007f9fcd216038 R14: 00007f9fcd215fa0 R15: 00007ffe24a52398 [ 367.207399][T10303] [ 367.768768][T10319] x_tables: duplicate underflow at hook 1 [ 368.238641][ T30] audit: type=1400 audit(1769309058.510:910): avc: denied { read open } for pid=10315 comm="syz.4.1082" path="/245/file0" dev="configfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 369.207905][T10321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=10321 comm=syz.0.1084 [ 370.027611][T10346] openvswitch: netlink: Flow key attr not present in new flow. [ 370.163613][T10349] openvswitch: netlink: Flow key attr not present in new flow. [ 370.697482][T10356] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1089'. [ 371.185581][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1094'. [ 371.194519][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1094'. [ 372.899829][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 373.069743][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 373.083543][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 373.093460][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 373.103416][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 373.113392][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.130925][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 373.140036][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.378218][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 373.429801][ T9] usbtmc 1-1:16.0: can't read capabilities [ 373.585963][T10388] veth0: entered promiscuous mode [ 373.593387][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1104'. [ 373.623045][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.632877][ T30] audit: type=1400 audit(1769309064.140:911): avc: denied { listen } for pid=10387 comm="syz.6.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 373.650053][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.686788][ T9] usb 1-1: USB disconnect, device number 40 [ 373.869216][T10401] FAULT_INJECTION: forcing a failure. [ 373.869216][T10401] name failslab, interval 1, probability 0, space 0, times 0 [ 373.879759][ T30] audit: type=1400 audit(1769309064.330:912): avc: denied { execute } for pid=10384 comm="syz.3.1102" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 373.896677][T10403] x_tables: duplicate underflow at hook 1 [ 373.907982][ T30] audit: type=1400 audit(1769309064.370:913): avc: denied { map } for pid=10399 comm="syz.6.1106" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 373.937099][T10401] CPU: 0 UID: 0 PID: 10401 Comm: syz.6.1106 Not tainted syzkaller #0 PREEMPT(full) [ 373.937122][T10401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 373.937133][T10401] Call Trace: [ 373.937139][T10401] [ 373.937145][T10401] dump_stack_lvl+0x100/0x190 [ 373.937173][T10401] should_fail_ex.cold+0x5/0xa [ 373.937204][T10401] should_failslab+0xc2/0x120 [ 373.937227][T10401] kmem_cache_alloc_noprof+0x83/0x780 [ 373.937248][T10401] ? mas_alloc_nodes+0x280/0x390 [ 373.937278][T10401] ? mas_alloc_nodes+0x280/0x390 [ 373.937301][T10401] mas_alloc_nodes+0x280/0x390 [ 373.937330][T10401] mas_preallocate+0x39c/0xf10 [ 373.937355][T10401] ? __pfx_mas_preallocate+0x10/0x10 [ 373.937382][T10401] ? anon_vma_name+0x81/0x2c0 [ 373.937412][T10401] __split_vma+0x33d/0xe30 [ 373.937433][T10401] ? __pfx___split_vma+0x10/0x10 [ 373.937457][T10401] ? __pfx_mas_prev+0x10/0x10 [ 373.937483][T10401] vms_gather_munmap_vmas+0x3aa/0x1320 [ 373.937507][T10401] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 373.937529][T10401] ? mas_walk+0x6ef/0x9b0 [ 373.937554][T10401] __mmap_region+0x46e/0x2820 [ 373.937576][T10401] ? __pfx___mmap_region+0x10/0x10 [ 373.937609][T10401] ? find_held_lock+0x2b/0x80 [ 373.937631][T10401] ? is_bpf_text_address+0x8a/0x1a0 [ 373.937657][T10401] ? is_bpf_text_address+0x8a/0x1a0 [ 373.937686][T10401] ? bpf_ksym_find+0x128/0x1c0 [ 373.937704][T10401] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 373.937731][T10401] ? is_bpf_text_address+0x94/0x1a0 [ 373.937801][T10401] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 373.937834][T10401] mmap_region+0x180/0x3e0 [ 373.937858][T10401] do_mmap+0xc63/0x12f0 [ 373.937887][T10401] ? __pfx_do_mmap+0x10/0x10 [ 373.937912][T10401] ? __pfx_down_write_killable+0x10/0x10 [ 373.937939][T10401] vm_mmap_pgoff+0x29e/0x470 [ 373.937969][T10401] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 373.937996][T10401] ? __fget_files+0x21f/0x3d0 [ 373.938024][T10401] ksys_mmap_pgoff+0x7d/0x5b0 [ 373.938054][T10401] ? __pfx_ksys_write+0x10/0x10 [ 373.938075][T10401] __x64_sys_mmap+0x125/0x190 [ 373.938098][T10401] do_syscall_64+0xc9/0xf80 [ 373.938119][T10401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.938136][T10401] RIP: 0033:0x7f9fccf9acb9 [ 373.938150][T10401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.938166][T10401] RSP: 002b:00007f9fcb1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 373.938181][T10401] RAX: ffffffffffffffda RBX: 00007f9fcd215fa0 RCX: 00007f9fccf9acb9 [ 373.938192][T10401] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 373.938202][T10401] RBP: 00007f9fcb1f6090 R08: ffffffffffffffff R09: 0000000000000000 [ 373.938211][T10401] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 373.938221][T10401] R13: 00007f9fcd216038 R14: 00007f9fcd215fa0 R15: 00007ffe24a52398 [ 373.938244][T10401] [ 374.039418][T10405] netlink: 'syz.4.1105': attribute type 4 has an invalid length. [ 374.399967][T10412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=10412 comm=syz.5.1107 [ 374.510923][T10413] usb usb8: usbfs: process 10413 (syz.6.1108) did not claim interface 0 before use [ 375.132426][T10416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1109'. [ 375.965848][ T5822] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 376.414724][T10427] veth9: entered allmulticast mode [ 376.662374][T10434] openvswitch: netlink: Flow key attr not present in new flow. [ 377.939740][ T30] audit: type=1400 audit(1769309068.440:914): avc: denied { ioctl } for pid=10445 comm="syz.3.1117" path="socket:[29356]" dev="sockfs" ino=29356 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 378.052808][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.059108][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.401503][T10456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1115'. [ 379.517398][T10460] netlink: 'syz.0.1120': attribute type 1 has an invalid length. [ 380.739627][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1119'. [ 381.135636][T10467] netlink: 'syz.0.1122': attribute type 4 has an invalid length. [ 382.222178][T10489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.210568][T10499] openvswitch: netlink: Flow key attr not present in new flow. [ 383.518716][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 383.757505][T10511] openvswitch: netlink: Flow key attr not present in new flow. [ 383.796617][T10512] x_tables: duplicate underflow at hook 1 [ 384.061502][T10517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=10517 comm=syz.3.1134 [ 385.640538][T10530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.972234][T10532] 9p: Bad value for 'wfdno' [ 386.203633][ T5822] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260 [ 387.418653][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1145'. [ 388.086818][ T30] audit: type=1400 audit(1769309078.590:915): avc: denied { attach_queue } for pid=10552 comm="syz.4.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 388.450122][ T5918] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 388.782090][ T5918] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.904720][ T89] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 388.924445][T10572] veth7: entered allmulticast mode [ 388.929638][ T5918] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 388.956880][ T5918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 389.861756][ T5918] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 389.897476][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.950064][ T89] usb 1-1: Using ep0 maxpacket: 8 [ 390.069780][ T89] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 390.078198][ T89] usb 1-1: config 179 has no interface number 0 [ 390.089860][ T89] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 390.116901][T10561] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 390.200430][ T5918] hub 5-1:1.0: bad descriptor, ignoring hub [ 390.211287][ T5918] hub 5-1:1.0: probe with driver hub failed with error -5 [ 390.211550][ T89] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 390.218766][ T5918] cdc_wdm 5-1:1.0: skipping garbage [ 390.266409][ T89] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 390.324397][ T89] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 390.324440][ T5918] cdc_wdm 5-1:1.0: skipping garbage [ 390.350115][ T89] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 390.496149][ T5918] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 390.502967][ T5918] cdc_wdm 5-1:1.0: Unknown control protocol [ 390.526311][ T89] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 390.596548][ T5822] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 391.005184][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.044319][T10567] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 391.489811][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 391.543514][ T5932] usb 5-1: USB disconnect, device number 20 [ 391.693227][T10594] lo speed is unknown, defaulting to 1000 [ 391.699302][T10594] lo speed is unknown, defaulting to 1000 [ 391.701122][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 391.711379][T10594] lo speed is unknown, defaulting to 1000 [ 391.723331][T10594] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 391.737132][ T9] usb 6-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 391.741190][T10594] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 391.757067][ T9] usb 6-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 391.791809][T10594] lo speed is unknown, defaulting to 1000 [ 391.800804][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 391.800861][T10594] lo speed is unknown, defaulting to 1000 [ 391.817812][T10594] lo speed is unknown, defaulting to 1000 [ 391.824551][T10594] lo speed is unknown, defaulting to 1000 [ 391.831301][T10594] lo speed is unknown, defaulting to 1000 [ 391.899753][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.432302][T10603] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.1150'. [ 392.452957][T10603] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.1150'. [ 392.881850][T10608] netlink: 'syz.5.1155': attribute type 4 has an invalid length. [ 393.730161][ T5918] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 393.790428][ T5932] usb 1-1: USB disconnect, device number 41 [ 393.790465][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 393.805245][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 393.809717][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 393.901104][ T5918] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 393.909982][ T5918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.919050][ T5918] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.930312][ T5918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.938095][ T5918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.947412][ T5918] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.980856][ T5918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.988595][ T5918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.997850][ T5918] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.008807][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 394.014486][ T5918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 394.022301][ T5918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.031442][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 394.040575][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.049724][ T5918] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.747574][ T5918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 395.081272][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 395.098623][ T9] pvrusb2: ********** [ 395.108138][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 395.119051][ T5918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.139275][ T5932] usb 6-1: USB disconnect, device number 14 [ 395.151623][ T5918] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 395.172690][ T9] pvrusb2: Important functionality might not be entirely working. [ 395.210590][ T5918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 395.217463][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 395.248247][ T9] pvrusb2: ********** [ 395.252562][ T5918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.269731][ T5918] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 395.308784][ T2327] pvrusb2: Invalid write control endpoint [ 395.335370][ T5918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 395.355246][ T5918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.369208][ T5918] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 395.381282][ T5918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 395.390960][ T5918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.400192][ T5918] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 395.412209][ T2327] pvrusb2: Invalid write control endpoint [ 395.417953][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 395.435942][ T5918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 395.442879][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 395.461781][ T5918] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 395.577101][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 395.588161][ T5918] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 395.599498][ T30] audit: type=1400 audit(1769309086.050:916): avc: denied { create } for pid=10623 comm="syz.0.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 395.623488][ T5918] usb 5-1: Product: syz [ 395.630530][ T2327] pvrusb2: Device being rendered inoperable [ 395.642288][ T5918] usb 5-1: Manufacturer: syz [ 395.646856][ T5918] usb 5-1: SerialNumber: syz [ 395.654066][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 395.746581][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 395.755372][ T5918] usb 5-1: config 0 descriptor?? [ 395.761008][ T2327] pvrusb2: Attached sub-driver cx25840 [ 395.766464][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 395.782197][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 395.797248][ T5918] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 396.210957][ T30] audit: type=1400 audit(1769309086.060:917): avc: denied { execmem } for pid=10623 comm="syz.0.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 396.236231][ T30] audit: type=1400 audit(1769309086.060:918): avc: denied { create } for pid=10623 comm="syz.0.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 396.255991][ T30] audit: type=1400 audit(1769309086.060:919): avc: denied { getopt } for pid=10623 comm="syz.0.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 396.344664][ T30] audit: type=1400 audit(1769309086.060:920): avc: denied { create } for pid=10623 comm="syz.0.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 396.643771][ T30] audit: type=1400 audit(1769309086.060:921): avc: denied { create } for pid=10623 comm="syz.0.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 396.646877][ T5918] usb 5-1: USB disconnect, device number 21 [ 396.664888][ T30] audit: type=1400 audit(1769309086.060:922): avc: denied { write } for pid=10623 comm="syz.0.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 396.692940][ T30] audit: type=1400 audit(1769309086.060:923): avc: denied { module_request } for pid=10623 comm="syz.0.1165" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 396.723268][ T30] audit: type=1400 audit(1769309086.290:924): avc: denied { ioctl } for pid=10611 comm="syz.4.1162" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 396.827928][ T5918] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 396.850626][ T30] audit: type=1400 audit(1769309086.390:925): avc: denied { prog_load } for pid=10613 comm="syz.3.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 397.285653][ T5918] usb 4-1: USB disconnect, device number 26 [ 397.635731][T10654] x_tables: duplicate underflow at hook 1 [ 397.877747][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1170'. [ 398.274701][T10658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=10658 comm=syz.0.1171 [ 399.101606][T10669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10669 comm=syz.4.1174 [ 400.438177][ T5822] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 402.087394][ T5822] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 402.455212][T10689] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 402.550788][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 402.550841][ T30] audit: type=1400 audit(1769309093.050:992): avc: denied { unmount } for pid=7963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 403.623447][ T30] audit: type=1400 audit(1769309093.830:993): avc: denied { write } for pid=10693 comm="syz.5.1182" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 403.799504][T10689] 8021q: adding VLAN 0 to HW filter on device bond2 [ 404.253686][ T30] audit: type=1400 audit(1769309094.760:994): avc: denied { read write } for pid=10706 comm="syz.5.1184" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 404.290491][T10711] openvswitch: netlink: Flow key attr not present in new flow. [ 404.420010][ T30] audit: type=1400 audit(1769309094.790:995): avc: denied { open } for pid=10706 comm="syz.5.1184" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 404.478796][T10717] FAULT_INJECTION: forcing a failure. [ 404.478796][T10717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.491880][T10717] CPU: 0 UID: 0 PID: 10717 Comm: syz.4.1185 Not tainted syzkaller #0 PREEMPT(full) [ 404.491903][T10717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 404.491914][T10717] Call Trace: [ 404.491920][T10717] [ 404.491927][T10717] dump_stack_lvl+0x100/0x190 [ 404.491955][T10717] should_fail_ex.cold+0x5/0xa [ 404.491986][T10717] _copy_from_user+0x2e/0xd0 [ 404.492010][T10717] __sys_bpf+0x243/0x5050 [ 404.492035][T10717] ? __pfx___sys_bpf+0x10/0x10 [ 404.492052][T10717] ? proc_fail_nth_write+0x9f/0x220 [ 404.492076][T10717] ? find_held_lock+0x2b/0x80 [ 404.492104][T10717] ? find_held_lock+0x2b/0x80 [ 404.492126][T10717] ? ksys_write+0x190/0x250 [ 404.492151][T10717] ? __mutex_unlock_slowpath+0x15c/0x790 [ 404.492187][T10717] ? fput+0x79/0x100 [ 404.492210][T10717] ? ksys_write+0x1ac/0x250 [ 404.492228][T10717] ? __pfx_ksys_write+0x10/0x10 [ 404.492250][T10717] __x64_sys_bpf+0x7b/0xc0 [ 404.492270][T10717] ? lockdep_hardirqs_on+0x78/0x100 [ 404.492290][T10717] do_syscall_64+0xc9/0xf80 [ 404.492310][T10717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.492328][T10717] RIP: 0033:0x7f0dfc59acb9 [ 404.492341][T10717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.492358][T10717] RSP: 002b:00007f0dfd3a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.492376][T10717] RAX: ffffffffffffffda RBX: 00007f0dfc816180 RCX: 00007f0dfc59acb9 [ 404.492388][T10717] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 404.492399][T10717] RBP: 00007f0dfd3a8090 R08: 0000000000000000 R09: 0000000000000000 [ 404.492409][T10717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.492419][T10717] R13: 00007f0dfc816218 R14: 00007f0dfc816180 R15: 00007ffe7d24d1a8 [ 404.492444][T10717] [ 404.724277][ T30] audit: type=1400 audit(1769309094.790:996): avc: denied { lock } for pid=10706 comm="syz.5.1184" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 404.952117][ T30] audit: type=1400 audit(1769309094.790:997): avc: denied { map } for pid=10706 comm="syz.5.1184" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 404.999769][ T89] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 405.028898][ T30] audit: type=1400 audit(1769309094.790:998): avc: denied { execute } for pid=10706 comm="syz.5.1184" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 405.412241][ T89] usb 5-1: Using ep0 maxpacket: 16 [ 405.450988][ T89] usb 5-1: unable to get BOS descriptor or descriptor too short [ 405.467126][ T30] audit: type=1400 audit(1769309094.830:999): avc: denied { create } for pid=10707 comm="syz.4.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 405.517717][ T89] usb 5-1: config 9 has an invalid interface number: 7 but max is 3 [ 405.592329][ T89] usb 5-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 405.608588][ T30] audit: type=1400 audit(1769309094.830:1000): avc: denied { create } for pid=10706 comm="syz.5.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 405.629731][ T89] usb 5-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 405.643368][ T89] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 4 [ 405.663720][ T30] audit: type=1400 audit(1769309095.000:1001): avc: denied { connect } for pid=10707 comm="syz.4.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 405.693687][ T89] usb 5-1: config 9 has no interface number 0 [ 405.714053][ T89] usb 5-1: config 9 interface 7 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 405.731775][ T89] usb 5-1: config 9 interface 7 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 405.804965][ T89] usb 5-1: config 9 interface 7 altsetting 2 has an endpoint descriptor with address 0x76, changing to 0x6 [ 405.850191][ T89] usb 5-1: config 9 interface 7 altsetting 2 endpoint 0x6 has an invalid bInterval 233, changing to 7 [ 405.977817][ T89] usb 5-1: config 9 interface 7 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 406.097781][ T89] usb 5-1: config 9 interface 7 has no altsetting 0 [ 406.746578][ T89] usb 5-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=3f.bd [ 406.756250][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.766911][ T89] usb 5-1: Product: syz [ 406.777022][ T89] usb 5-1: Manufacturer: ఊ [ 406.823190][ T89] usb 5-1: SerialNumber: syz [ 406.939762][ T5884] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 407.099745][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 407.153039][ T5884] usb 4-1: unable to get BOS descriptor or descriptor too short [ 407.174429][ T5884] usb 4-1: config 9 has an invalid interface number: 7 but max is 3 [ 407.194499][ T5884] usb 4-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 407.210385][ T5884] usb 4-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 407.244231][ T5884] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 4 [ 407.281378][ T5884] usb 4-1: config 9 has no interface number 0 [ 407.287480][ T5884] usb 4-1: config 9 interface 7 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 407.342114][ T5884] usb 4-1: config 9 interface 7 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 407.389725][ T5884] usb 4-1: config 9 interface 7 altsetting 2 has an endpoint descriptor with address 0x76, changing to 0x6 [ 407.432442][ T5884] usb 4-1: config 9 interface 7 altsetting 2 endpoint 0x6 has an invalid bInterval 233, changing to 7 [ 407.452070][ T5884] usb 4-1: config 9 interface 7 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 407.490313][ T5884] usb 4-1: config 9 interface 7 has no altsetting 0 [ 407.511189][ T5884] usb 4-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=3f.bd [ 407.529794][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.537822][ T5884] usb 4-1: Product: syz [ 407.547474][ T5884] usb 4-1: Manufacturer: ఊ [ 407.556236][ T5884] usb 4-1: SerialNumber: syz [ 407.681037][T10751] openvswitch: netlink: Flow key attr not present in new flow. [ 409.756547][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 409.756559][ T30] audit: type=1400 audit(1769309100.170:1012): avc: denied { create } for pid=10753 comm="syz.6.1195" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 409.839402][ T30] audit: type=1400 audit(1769309100.170:1013): avc: denied { mounton } for pid=10753 comm="syz.6.1195" path="/127/file0" dev="tmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 409.913608][ T5884] usb 4-1: Error in usbnet_get_endpoints (-22) [ 410.005705][ T89] usb 5-1: Error in usbnet_get_endpoints (-22) [ 410.036583][ T30] audit: type=1400 audit(1769309100.180:1014): avc: denied { mount } for pid=10753 comm="syz.6.1195" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 410.061208][ T5884] usb 4-1: USB disconnect, device number 27 [ 410.069224][ T89] usb 5-1: USB disconnect, device number 22 [ 410.228455][ T30] audit: type=1400 audit(1769309100.480:1015): avc: denied { unmount } for pid=7963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 410.361713][T10765] netlink: 'syz.0.1196': attribute type 4 has an invalid length. [ 410.786882][ T30] audit: type=1400 audit(1769309100.540:1016): avc: denied { unlink } for pid=7963 comm="syz-executor" name="file0" dev="tmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 411.347813][ T30] audit: type=1400 audit(1769309101.800:1017): avc: denied { read write } for pid=10768 comm="syz.4.1200" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 411.674251][T10773] input: syz0 as /devices/virtual/input/input16 [ 411.688909][ T30] audit: type=1400 audit(1769309101.830:1018): avc: denied { open } for pid=10768 comm="syz.4.1200" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 411.755754][ T30] audit: type=1400 audit(1769309101.840:1019): avc: denied { connect } for pid=10768 comm="syz.4.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 411.810164][ T30] audit: type=1400 audit(1769309101.910:1020): avc: denied { ioctl } for pid=10768 comm="syz.4.1200" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 411.905393][T10774] SET target dimension over the limit! [ 411.930100][ T30] audit: type=1400 audit(1769309102.430:1021): avc: denied { read } for pid=5164 comm="acpid" name="event4" dev="devtmpfs" ino=3257 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 412.422634][T10788] FAULT_INJECTION: forcing a failure. [ 412.422634][T10788] name failslab, interval 1, probability 0, space 0, times 0 [ 412.435828][T10788] CPU: 0 UID: 0 PID: 10788 Comm: syz.5.1202 Not tainted syzkaller #0 PREEMPT(full) [ 412.435853][T10788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 412.435864][T10788] Call Trace: [ 412.435870][T10788] [ 412.435877][T10788] dump_stack_lvl+0x100/0x190 [ 412.435906][T10788] should_fail_ex.cold+0x5/0xa [ 412.435938][T10788] should_failslab+0xc2/0x120 [ 412.435962][T10788] ? bpf_test_init.isra.0+0x88/0x100 [ 412.435983][T10788] __kmalloc_noprof+0xf6/0x9c0 [ 412.436008][T10788] ? bpf_test_init.isra.0+0x88/0x100 [ 412.436027][T10788] bpf_test_init.isra.0+0x88/0x100 [ 412.436051][T10788] bpf_prog_test_run_xdp+0x57e/0x1670 [ 412.436084][T10788] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 412.436117][T10788] ? fput+0x79/0x100 [ 412.436141][T10788] ? __bpf_prog_get+0x97/0x2a0 [ 412.436167][T10788] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 412.436191][T10788] __sys_bpf+0x1e56/0x5050 [ 412.436215][T10788] ? __pfx___sys_bpf+0x10/0x10 [ 412.436233][T10788] ? proc_fail_nth_write+0x9f/0x220 [ 412.436257][T10788] ? find_held_lock+0x2b/0x80 [ 412.436285][T10788] ? find_held_lock+0x2b/0x80 [ 412.436308][T10788] ? ksys_write+0x190/0x250 [ 412.436333][T10788] ? __mutex_unlock_slowpath+0x15c/0x790 [ 412.436369][T10788] ? fput+0x79/0x100 [ 412.436391][T10788] ? ksys_write+0x1ac/0x250 [ 412.436410][T10788] ? __pfx_ksys_write+0x10/0x10 [ 412.436433][T10788] __x64_sys_bpf+0x7b/0xc0 [ 412.436452][T10788] ? lockdep_hardirqs_on+0x78/0x100 [ 412.436471][T10788] do_syscall_64+0xc9/0xf80 [ 412.436491][T10788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.436509][T10788] RIP: 0033:0x7fce3179acb9 [ 412.436525][T10788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.436541][T10788] RSP: 002b:00007fce32670028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 412.436560][T10788] RAX: ffffffffffffffda RBX: 00007fce31a15fa0 RCX: 00007fce3179acb9 [ 412.436572][T10788] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 412.436582][T10788] RBP: 00007fce32670090 R08: 0000000000000000 R09: 0000000000000000 [ 412.436593][T10788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.436603][T10788] R13: 00007fce31a16038 R14: 00007fce31a15fa0 R15: 00007ffedd13acc8 [ 412.436636][T10788] [ 412.684992][T10790] input: syz0 as /devices/virtual/input/input17 [ 412.970068][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'. [ 413.109549][T10793] SET target dimension over the limit! [ 413.361755][T10795] usb usb8: usbfs: process 10795 (syz.4.1203) did not claim interface 0 before use [ 413.744359][ T5822] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 414.529125][T10816] openvswitch: netlink: Flow key attr not present in new flow. [ 414.872998][T10819] usb usb8: usbfs: process 10819 (syz.0.1205) did not claim interface 0 before use [ 415.219991][ T5877] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 415.439819][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 415.446124][ T5877] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 415.459134][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.484994][ T5877] pvrusb2: Hardware description: Terratec Grabster AV400 [ 415.504327][ T5877] pvrusb2: ********** [ 415.508402][ T5877] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 415.585056][ T5877] pvrusb2: Important functionality might not be entirely working. [ 415.605857][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 415.605867][ T30] audit: type=1400 audit(1769309106.110:1027): avc: denied { create } for pid=10825 comm="syz.6.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 415.699690][ T5877] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 415.721437][ T5877] pvrusb2: ********** [ 415.741777][ T2327] pvrusb2: Invalid write control endpoint [ 415.904827][ T2327] pvrusb2: Invalid write control endpoint [ 415.923883][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 416.023987][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 416.052749][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 416.077727][ T2327] pvrusb2: Device being rendered inoperable [ 416.085027][ T30] audit: type=1400 audit(1769309106.590:1028): avc: denied { ioctl } for pid=10830 comm="syz.5.1214" path="socket:[31355]" dev="sockfs" ino=31355 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 416.088554][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 416.118684][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 416.136208][ T2327] pvrusb2: Attached sub-driver cx25840 [ 416.144087][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 416.154621][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 416.165615][ T30] audit: type=1400 audit(1769309106.620:1029): avc: denied { bind } for pid=10830 comm="syz.5.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 416.245579][T10841] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1212'. [ 416.279969][ T30] audit: type=1400 audit(1769309106.630:1030): avc: denied { write } for pid=10830 comm="syz.5.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 416.429932][ T30] audit: type=1400 audit(1769309106.630:1031): avc: denied { read } for pid=10830 comm="syz.5.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 416.460770][T10837] openvswitch: netlink: Flow key attr not present in new flow. [ 416.496143][ T30] audit: type=1400 audit(1769309106.670:1032): avc: denied { append } for pid=10832 comm="syz.3.1215" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 416.521777][ T30] audit: type=1400 audit(1769309106.670:1033): avc: denied { create } for pid=10832 comm="syz.3.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 416.558402][ T30] audit: type=1400 audit(1769309106.670:1034): avc: denied { bind } for pid=10832 comm="syz.3.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 416.589900][ T30] audit: type=1400 audit(1769309106.750:1035): avc: denied { bind } for pid=10825 comm="syz.6.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 416.621127][ T30] audit: type=1400 audit(1769309106.750:1036): avc: denied { write } for pid=10825 comm="syz.6.1212" path="socket:[31369]" dev="sockfs" ino=31369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 416.722244][T10844] netlink: 'syz.4.1210': attribute type 4 has an invalid length. [ 417.202961][T10852] netlink: 'syz.5.1216': attribute type 4 has an invalid length. [ 418.345786][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1220'. [ 418.845491][ T24] usb 5-1: USB disconnect, device number 23 [ 419.012283][T10868] usb usb8: usbfs: process 10868 (syz.0.1221) did not claim interface 0 before use [ 419.203775][T10879] FAULT_INJECTION: forcing a failure. [ 419.203775][T10879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.219287][T10879] CPU: 0 UID: 0 PID: 10879 Comm: syz.6.1225 Not tainted syzkaller #0 PREEMPT(full) [ 419.219312][T10879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 419.219323][T10879] Call Trace: [ 419.219329][T10879] [ 419.219336][T10879] dump_stack_lvl+0x100/0x190 [ 419.219364][T10879] should_fail_ex.cold+0x5/0xa [ 419.219403][T10879] _copy_from_user+0x2e/0xd0 [ 419.219430][T10879] copy_msghdr_from_user+0x9f/0x4f0 [ 419.219449][T10879] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 419.219479][T10879] ___sys_sendmsg+0x106/0x1e0 [ 419.219498][T10879] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.219528][T10879] ? find_held_lock+0x2b/0x80 [ 419.219569][T10879] __sys_sendmsg+0x170/0x220 [ 419.219593][T10879] ? __pfx___sys_sendmsg+0x10/0x10 [ 419.219632][T10879] do_syscall_64+0xc9/0xf80 [ 419.219657][T10879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.219673][T10879] RIP: 0033:0x7f9fccf9acb9 [ 419.219687][T10879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.219703][T10879] RSP: 002b:00007f9fcb1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.219722][T10879] RAX: ffffffffffffffda RBX: 00007f9fcd215fa0 RCX: 00007f9fccf9acb9 [ 419.219734][T10879] RDX: 000000000c000810 RSI: 0000200000001100 RDI: 0000000000000004 [ 419.219744][T10879] RBP: 00007f9fcb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 419.219754][T10879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.219764][T10879] R13: 00007f9fcd216038 R14: 00007f9fcd215fa0 R15: 00007ffe24a52398 [ 419.219788][T10879] [ 419.722003][T10888] netlink: 'syz.3.1226': attribute type 4 has an invalid length. [ 421.070649][T10903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.100462][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 421.132546][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1228'. [ 421.430548][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 421.561467][T10914] openvswitch: netlink: Flow key attr not present in new flow. [ 421.619742][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 421.653328][ T24] usb 1-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 421.678309][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 421.738535][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.270010][ T5918] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 422.484729][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 422.529766][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 422.616421][T10929] netlink: 'syz.0.1230': attribute type 4 has an invalid length. [ 423.374271][ T5918] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 423.379753][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 423.392124][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 423.403644][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.407934][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.437408][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 423.461982][ T24] pvrusb2: ********** [ 423.466118][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 423.478149][ T24] pvrusb2: Important functionality might not be entirely working. [ 423.479273][ T5918] pvrusb2: Hardware description: Terratec Grabster AV400 [ 423.487280][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 423.487293][ T24] pvrusb2: ********** [ 423.527237][T10935] lo speed is unknown, defaulting to 1000 [ 423.543911][ T5918] pvrusb2: ********** [ 423.552729][ T5918] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 423.594266][ T5918] pvrusb2: Important functionality might not be entirely working. [ 423.612529][ T5918] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 423.631806][ T2327] pvrusb2: Invalid write control endpoint [ 423.644207][ T5918] pvrusb2: ********** [ 423.729720][ T2327] pvrusb2: Invalid write control endpoint [ 423.749529][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 423.789698][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 423.818151][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 423.829424][ T2327] pvrusb2: Device being rendered inoperable [ 423.837825][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 423.846078][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 423.917737][T10942] netlink: 'syz.4.1238': attribute type 4 has an invalid length. [ 424.318069][ T2327] pvrusb2: Attached sub-driver cx25840 [ 424.323759][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 424.334049][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 424.349718][ T2327] pvrusb2: Invalid write control endpoint [ 424.396389][ T2327] pvrusb2: Invalid write control endpoint [ 424.403130][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 424.412972][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 424.425953][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 424.459753][ T2327] pvrusb2: Device being rendered inoperable [ 424.468752][ T5918] usb 1-1: USB disconnect, device number 42 [ 424.495442][ T2327] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 424.517041][ T2327] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 424.573341][ T2327] pvrusb2: Attached sub-driver cx25840 [ 424.586009][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 424.596469][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 425.179542][ T24] usb 6-1: USB disconnect, device number 15 [ 426.214480][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1239'. [ 426.415135][ T5918] usb 7-1: USB disconnect, device number 12 [ 426.679750][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 426.679765][ T30] audit: type=1400 audit(1769309117.180:1040): avc: denied { setopt } for pid=10966 comm="syz.3.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 426.739796][T10970] x_tables: duplicate underflow at hook 1 [ 426.872982][T10970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=10970 comm=syz.6.1242 [ 427.190213][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 427.264437][ T5918] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 427.429786][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 427.440094][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.471885][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 427.509770][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 427.535955][ T24] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 427.549770][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.558150][ T5918] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 427.558453][ T24] usb 7-1: Product: syz [ 427.579802][ T5918] usb 4-1: config 0 has no interface number 0 [ 427.588385][ T5918] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 427.589769][ T24] usb 7-1: Manufacturer: syz [ 427.607650][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.619259][ T24] usb 7-1: SerialNumber: syz [ 427.631835][ T5918] usb 4-1: config 0 descriptor?? [ 427.734668][ T24] usb 7-1: config 0 descriptor?? [ 427.743936][ T24] streamzap 7-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 427.751044][ T5918] usb 4-1: selecting invalid altsetting 1 [ 427.788715][T10982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1245'. [ 427.800391][ T5918] dvb_ttusb_budget: ttusb_init_controller: error [ 427.806769][ T5918] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 427.890157][ T5822] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 428.236800][ T30] audit: type=1400 audit(1769309118.740:1041): avc: denied { setopt } for pid=10966 comm="syz.3.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 428.603193][ T5918] DVB: Unable to find symbol cx22700_attach() [ 428.640542][T10976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.730754][T10976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.746992][ T5918] DVB: Unable to find symbol tda10046_attach() [ 428.753495][ T5918] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 428.765803][ T5877] usb 7-1: USB disconnect, device number 13 [ 428.919752][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 429.082805][ T89] usb 4-1: USB disconnect, device number 28 [ 429.090508][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 429.120172][ T24] usb 1-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 429.129297][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 429.166498][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.219730][ T5877] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 429.466515][T11003] FAULT_INJECTION: forcing a failure. [ 429.466515][T11003] name failslab, interval 1, probability 0, space 0, times 0 [ 429.514999][T11003] CPU: 0 UID: 0 PID: 11003 Comm: syz.5.1253 Not tainted syzkaller #0 PREEMPT(full) [ 429.515025][T11003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 429.515036][T11003] Call Trace: [ 429.515042][T11003] [ 429.515048][T11003] dump_stack_lvl+0x100/0x190 [ 429.515077][T11003] should_fail_ex.cold+0x5/0xa [ 429.515108][T11003] should_failslab+0xc2/0x120 [ 429.515132][T11003] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 429.515157][T11003] ? __alloc_skb+0x156/0x410 [ 429.515176][T11003] ? __alloc_skb+0x35d/0x410 [ 429.515200][T11003] ? __alloc_skb+0x156/0x410 [ 429.515218][T11003] __alloc_skb+0x156/0x410 [ 429.515237][T11003] ? __alloc_skb+0x35d/0x410 [ 429.515257][T11003] ? __pfx___alloc_skb+0x10/0x10 [ 429.515278][T11003] ? netlink_autobind.isra.0+0x60/0x370 [ 429.515310][T11003] netlink_alloc_large_skb+0x69/0x150 [ 429.515337][T11003] netlink_sendmsg+0x680/0xda0 [ 429.515367][T11003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.515391][T11003] ? __might_fault+0x30/0x140 [ 429.515418][T11003] ____sys_sendmsg+0xa54/0xc30 [ 429.515438][T11003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.515466][T11003] ___sys_sendmsg+0x190/0x1e0 [ 429.515486][T11003] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.515515][T11003] ? find_held_lock+0x2b/0x80 [ 429.515555][T11003] __sys_sendmsg+0x170/0x220 [ 429.515579][T11003] ? __pfx___sys_sendmsg+0x10/0x10 [ 429.515617][T11003] do_syscall_64+0xc9/0xf80 [ 429.515639][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.515657][T11003] RIP: 0033:0x7fce3179acb9 [ 429.515672][T11003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.515688][T11003] RSP: 002b:00007fce32670028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.515706][T11003] RAX: ffffffffffffffda RBX: 00007fce31a15fa0 RCX: 00007fce3179acb9 [ 429.515717][T11003] RDX: 0000000000000840 RSI: 0000200000000900 RDI: 0000000000000005 [ 429.515727][T11003] RBP: 00007fce32670090 R08: 0000000000000000 R09: 0000000000000000 [ 429.515737][T11003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.515747][T11003] R13: 00007fce31a16038 R14: 00007fce31a15fa0 R15: 00007ffedd13acc8 [ 429.515771][T11003] [ 429.659744][ T89] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 429.903732][ T30] audit: type=1400 audit(1769309120.410:1042): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 431.167515][ T30] audit: type=1400 audit(1769309121.650:1043): avc: denied { search } for pid=5474 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.520051][T11013] netlink: 'syz.0.1249': attribute type 4 has an invalid length. [ 431.810658][ T30] audit: type=1400 audit(1769309121.660:1044): avc: denied { search } for pid=5474 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.865702][ T30] audit: type=1400 audit(1769309121.660:1045): avc: denied { search } for pid=5474 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.887810][ T30] audit: type=1400 audit(1769309121.660:1046): avc: denied { read } for pid=5474 comm="dhcpcd" name="n110" dev="tmpfs" ino=6713 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 431.994813][ T30] audit: type=1400 audit(1769309121.670:1047): avc: denied { open } for pid=5474 comm="dhcpcd" path="/run/udev/data/n110" dev="tmpfs" ino=6713 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 432.093917][ T30] audit: type=1400 audit(1769309121.670:1048): avc: denied { getattr } for pid=5474 comm="dhcpcd" path="/run/udev/data/n110" dev="tmpfs" ino=6713 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 432.366410][T11023] netlink: 'syz.5.1256': attribute type 4 has an invalid length. [ 433.233372][ T89] usb 7-1: device not accepting address 14, error -71 [ 433.379734][ T5918] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 433.442297][ T30] audit: type=1400 audit(1769309123.950:1049): avc: denied { write } for pid=11028 comm="syz.6.1259" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 433.530922][ T5877] usb 1-1: USB disconnect, device number 43 [ 433.545424][T11030] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1259'. [ 433.569758][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 433.598986][ T5918] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 433.653244][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.724868][ T5918] pvrusb2: Hardware description: Terratec Grabster AV400 [ 433.775017][ T5918] pvrusb2: ********** [ 433.800281][ T5918] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 433.863852][ T5918] pvrusb2: Important functionality might not be entirely working. [ 433.911687][ T5918] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 433.972696][ T5918] pvrusb2: ********** [ 434.007549][ T2327] pvrusb2: Invalid write control endpoint [ 434.194922][ T2327] pvrusb2: Invalid write control endpoint [ 434.207801][ T5822] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 434.218251][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 434.264195][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 434.288937][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 434.318414][ T2327] pvrusb2: Device being rendered inoperable [ 434.325311][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 434.343906][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 434.358479][ T2327] pvrusb2: Attached sub-driver cx25840 [ 434.374584][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 434.390501][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 435.625409][ T30] audit: type=1400 audit(1769309126.130:1050): avc: denied { ioctl } for pid=11059 comm="syz.4.1268" path="socket:[33080]" dev="sockfs" ino=33080 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 436.623540][ T5918] usb 4-1: USB disconnect, device number 29 [ 541.689630][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 541.696593][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7097/1:b..l P10084/1:b..l [ 541.706140][ C1] rcu: (detected by 1, t=10502 jiffies, g=40349, q=176 ncpus=2) [ 541.713842][ C1] task:udevd state:R running task stack:24888 pid:10084 tgid:10084 ppid:5179 task_flags:0x400140 flags:0x00080000 [ 541.728198][ C1] Call Trace: [ 541.731476][ C1] [ 541.734400][ C1] ? __schedule+0xf65/0x5e10 [ 541.738984][ C1] __schedule+0xfe4/0x5e10 [ 541.743402][ C1] ? __pfx___schedule+0x10/0x10 [ 541.748244][ C1] ? mark_held_locks+0x40/0x70 [ 541.752998][ C1] preempt_schedule_irq+0x50/0x90 [ 541.758012][ C1] irqentry_exit+0x17b/0x670 [ 541.762595][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 541.768566][ C1] RIP: 0010:unwind_next_frame+0x3c3/0x1ea0 [ 541.774370][ C1] Code: 41 c7 45 00 00 00 00 00 31 ed e8 38 04 c0 09 85 c0 0f 85 90 03 00 00 48 c7 c7 e0 32 5e 8e 48 8d 35 00 00 00 00 e8 dd 7e 2c 00 d8 f8 35 00 e9 73 fc ff ff 49 81 ff 00 f0 38 92 72 0d 49 81 ff [ 541.793965][ C1] RSP: 0018:ffffc9000417f480 EFLAGS: 00000296 [ 541.800028][ C1] RAX: 0000000000000000 RBX: ffffc9000417f5e0 RCX: ffffc9000417f444 [ 541.808002][ C1] RDX: 0000000000000003 RSI: ffffffff8dc1f48b RDI: ffffffff8bfa35a0 [ 541.815971][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007 [ 541.823937][ C1] R10: 0000000000000200 R11: 000000000000adb1 R12: ffffc9000417f590 [ 541.831907][ C1] R13: ffffc9000417f540 R14: ffffc9000417f5e0 R15: ffffc9000417f574 [ 541.839889][ C1] ? arch_stack_walk+0x73/0xf0 [ 541.844658][ C1] __unwind_start+0x3d1/0x7f0 [ 541.849330][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 541.855480][ C1] arch_stack_walk+0x73/0xf0 [ 541.860068][ C1] ? stack_trace_save+0x8e/0xc0 [ 541.864921][ C1] stack_trace_save+0x8e/0xc0 [ 541.869598][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 541.874970][ C1] ? __lock_acquire+0x4a5/0x2630 [ 541.879900][ C1] ? tomoyo_encode+0x29/0x50 [ 541.884478][ C1] ? tomoyo_realpath_from_path+0x18c/0x690 [ 541.890272][ C1] ? tomoyo_path2_perm+0x366/0x700 [ 541.895381][ C1] kasan_save_stack+0x30/0x50 [ 541.900179][ C1] kasan_save_track+0x14/0x30 [ 541.904849][ C1] kasan_save_free_info+0x3b/0x70 [ 541.909874][ C1] __kasan_slab_free+0x5f/0x80 [ 541.914631][ C1] kfree+0x1c7/0x690 [ 541.918516][ C1] ? tomoyo_realpath_from_path+0x19c/0x690 [ 541.924320][ C1] ? tomoyo_realpath_from_path+0x19c/0x690 [ 541.930121][ C1] ? tomoyo_encode+0x31/0x50 [ 541.934699][ C1] tomoyo_realpath_from_path+0x19c/0x690 [ 541.940330][ C1] tomoyo_path2_perm+0x366/0x700 [ 541.945267][ C1] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 541.950758][ C1] tomoyo_path_rename+0xfc/0x1a0 [ 541.955687][ C1] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 541.961224][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 541.966426][ C1] security_path_rename+0x18e/0x3c0 [ 541.971634][ C1] do_renameat2+0x741/0xa10 [ 541.976164][ C1] ? __pfx_do_renameat2+0x10/0x10 [ 541.981197][ C1] ? __might_fault+0xc5/0x140 [ 541.985883][ C1] ? getname_flags.part.0+0x1c5/0x540 [ 541.991255][ C1] __x64_sys_rename+0x17f/0x210 [ 541.996110][ C1] do_syscall_64+0xc9/0xf80 [ 542.000607][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.006490][ C1] RIP: 0033:0x7f7dc767acc7 [ 542.010890][ C1] RSP: 002b:00007ffecaf3c708 EFLAGS: 00000206 ORIG_RAX: 0000000000000052 [ 542.019289][ C1] RAX: ffffffffffffffda RBX: 000055cc71c4f1e0 RCX: 00007f7dc767acc7 [ 542.027251][ C1] RDX: 000055cc719fd010 RSI: 00007ffecaf3c720 RDI: 00007ffecaf3cb20 [ 542.035216][ C1] RBP: 000055cc71c3f0c0 R08: 00000000000001e0 R09: 0000000000000000 [ 542.043181][ C1] R10: 00000000000001b6 R11: 0000000000000206 R12: 00007ffecaf3c720 [ 542.051139][ C1] R13: 00007ffecaf3cb20 R14: 000055cc4e886100 R15: 000055cc4e886140 [ 542.059111][ C1] [ 542.062118][ C1] task:syz-executor state:R running task stack:23352 pid:7097 tgid:7097 ppid:7092 task_flags:0x400140 flags:0x00080000 [ 542.075592][ C1] Call Trace: [ 542.078858][ C1] [ 542.081779][ C1] ? __schedule+0xf65/0x5e10 [ 542.086356][ C1] __schedule+0xfe4/0x5e10 [ 542.090770][ C1] ? page_table_check_set+0x49a/0xa10 [ 542.096138][ C1] ? __pfx___schedule+0x10/0x10 [ 542.100979][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 542.106344][ C1] preempt_schedule_common+0x42/0xc0 [ 542.111621][ C1] preempt_schedule_thunk+0x16/0x30 [ 542.116816][ C1] _raw_spin_unlock+0x3e/0x50 [ 542.121487][ C1] copy_page_range+0x1ddc/0x6ba0 [ 542.126444][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 542.131738][ C1] ? __pfx___might_resched+0x10/0x10 [ 542.137027][ C1] ? up_write+0x290/0x4f0 [ 542.141353][ C1] dup_mmap+0xbea/0x1e20 [ 542.145599][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 542.150287][ C1] copy_process+0x7451/0x7890 [ 542.154970][ C1] ? __pfx_copy_process+0x10/0x10 [ 542.159990][ C1] ? do_raw_spin_lock+0x128/0x260 [ 542.165018][ C1] kernel_clone+0xfc/0x930 [ 542.169433][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 542.174453][ C1] ? __lock_acquire+0x4a5/0x2630 [ 542.179384][ C1] ? find_held_lock+0x2b/0x80 [ 542.184053][ C1] ? __might_fault+0xc5/0x140 [ 542.188722][ C1] __do_sys_clone+0xd9/0x120 [ 542.193314][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 542.198520][ C1] ? do_user_addr_fault+0x8d6/0x12f0 [ 542.203801][ C1] do_syscall_64+0xc9/0xf80 [ 542.208295][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.214175][ C1] RIP: 0033:0x7fce317c3752 [ 542.218580][ C1] RSP: 002b:00007ffedd13aee0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 542.226978][ C1] RAX: ffffffffffffffda RBX: 00007ffedd13aee0 RCX: 00007fce317c3752 [ 542.234940][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 542.242900][ C1] RBP: 00007ffedd13b06c R08: 0000000000000000 R09: 0000000000000001 [ 542.250857][ C1] R10: 00005555754c67d0 R11: 0000000000000246 R12: 0000000000000001 [ 542.258818][ C1] R13: 00000000000927c0 R14: 000000000006a90e R15: 00007ffedd13b0c0 [ 542.266792][ C1] [ 542.269798][ C1] rcu: rcu_preempt kthread starved for 10558 jiffies! g40349 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 542.280977][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 542.290929][ C1] rcu: RCU grace-period kthread stack dump: [ 542.296797][ C1] task:rcu_preempt state:R running task stack:28264 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 542.310275][ C1] Call Trace: [ 542.313541][ C1] [ 542.316460][ C1] ? __schedule+0xf65/0x5e10 [ 542.321038][ C1] __schedule+0xfe4/0x5e10 [ 542.325443][ C1] ? __lock_acquire+0x4a5/0x2630 [ 542.330382][ C1] ? __pfx___schedule+0x10/0x10 [ 542.335219][ C1] ? find_held_lock+0x2b/0x80 [ 542.339892][ C1] ? schedule+0x2bf/0x390 [ 542.344213][ C1] schedule+0xdd/0x390 [ 542.348269][ C1] schedule_timeout+0x127/0x280 [ 542.353113][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 542.358483][ C1] ? __pfx_process_timeout+0x10/0x10 [ 542.363765][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 542.369556][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 542.375007][ C1] rcu_gp_fqs_loop+0x1a9/0xb00 [ 542.379758][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 542.385031][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 542.389960][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 542.395150][ C1] rcu_gp_kthread+0x21e/0x320 [ 542.399814][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 542.404998][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 542.410798][ C1] ? __kthread_parkme+0x18c/0x230 [ 542.415821][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 542.421004][ C1] kthread+0x3b3/0x730 [ 542.425064][ C1] ? __pfx_kthread+0x10/0x10 [ 542.429639][ C1] ? ret_from_fork+0x79/0xaf0 [ 542.434313][ C1] ? ret_from_fork+0x79/0xaf0 [ 542.438986][ C1] ? rcu_is_watching+0x12/0xc0 [ 542.443746][ C1] ? __pfx_kthread+0x10/0x10 [ 542.448329][ C1] ret_from_fork+0x754/0xaf0 [ 542.452909][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 542.458012][ C1] ? __switch_to+0x7b9/0x10c0 [ 542.462685][ C1] ? __pfx_kthread+0x10/0x10 [ 542.467270][ C1] ret_from_fork_asm+0x1a/0x30 [ 542.472034][ C1] [ 542.475037][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 542.481343][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 542.490264][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 542.500307][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 542.505930][ C1] Code: 76 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 cc 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 542.525521][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 542.531571][ C1] RAX: 000000000249dd73 RBX: ffff88801e2aa4c0 RCX: ffffffff8b76b4b5 [ 542.539515][ C1] RDX: 0000000000000000 RSI: ffffffff8dc45476 RDI: ffffffff8bfa35a0 [ 542.547473][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a673d [ 542.555414][ C1] R10: ffff8880b85339eb R11: 0000000000000000 R12: ffffed1003c55498 [ 542.563376][ C1] R13: 0000000000000001 R14: ffffffff90b736d0 R15: 0000000000000000 [ 542.571325][ C1] FS: 0000000000000000(0000) GS:ffff8881246dc000(0000) knlGS:0000000000000000 [ 542.580247][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.586822][ C1] CR2: 00007fd97a384380 CR3: 00000000791b0000 CR4: 00000000003526f0 [ 542.594782][ C1] Call Trace: [ 542.598049][ C1] [ 542.600965][ C1] default_idle+0x9/0x10 [ 542.605203][ C1] default_idle_call+0x6c/0xb0 [ 542.609963][ C1] do_idle+0x35b/0x4b0 [ 542.614027][ C1] ? __pfx_do_idle+0x10/0x10 [ 542.618613][ C1] cpu_startup_entry+0x4f/0x60 [ 542.623368][ C1] start_secondary+0x21d/0x2d0 [ 542.628123][ C1] ? __pfx_start_secondary+0x10/0x10 [ 542.633400][ C1] common_startup_64+0x13e/0x148 [ 542.638343][ C1] [ 543.748924][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 543.769301][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 543.778876][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 543.790601][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 544.329720][ T30] audit: type=1400 audit(1769309234.570:1051): avc: denied { execute } for pid=11067 comm="syz.5.1270" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=33176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 SYZFAIL: failed to send rpc fd=3 want=10208 sent=0 n=-1 (errno 32: Broken pipe) [ 544.487298][ T30] audit: type=1400 audit(1769309234.690:1052): avc: denied { setattr } for pid=11067 comm="syz.5.1270" name="dmmidi2" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 544.835024][ T30] audit: type=1400 audit(1769309234.990:1053): avc: denied { write } for pid=5792 comm="syz-executor" path="pipe:[4797]" dev="pipefs" ino=4797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 545.661689][ T8385] syz_tun (unregistering): left allmulticast mode [ 546.103363][ T1154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.247599][ T1154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.313876][ T1154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.359458][ T1154] team0: Port device netdevsim0 removed [ 546.366209][ T1154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.498392][ T1154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.532904][ T30] audit: type=1400 audit(1769309237.040:1054): avc: denied { read open } for pid=11081 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.559584][ T30] audit: type=1400 audit(1769309237.040:1055): avc: denied { getattr } for pid=11081 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.622444][ T1154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.681183][ T1154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.717741][ T30] audit: type=1400 audit(1769309237.220:1056): avc: denied { add_name } for pid=11080 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.757149][ T30] audit: type=1400 audit(1769309237.220:1057): avc: denied { create } for pid=11080 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 546.784564][ T1154] team0: Port device netdevsim0 removed [ 546.794049][ T1154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.807657][ T30] audit: type=1400 audit(1769309237.220:1058): avc: denied { write } for pid=11080 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth9.link" dev="tmpfs" ino=6787 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 546.834231][ T30] audit: type=1400 audit(1769309237.220:1059): avc: denied { append } for pid=11080 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" dev="tmpfs" ino=6787 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 546.868025][ T30] audit: type=1400 audit(1769309237.280:1060): avc: denied { remove_name } for pid=11091 comm="rm" name="resolv.conf.eth9.link" dev="tmpfs" ino=6787 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.987133][ T1154] bridge_slave_1: left allmulticast mode [ 546.993219][ T1154] bridge_slave_1: left promiscuous mode [ 546.998870][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.008125][ T1154] bridge_slave_0: left allmulticast mode [ 547.021768][ T1154] bridge_slave_0: left promiscuous mode [ 547.029112][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.044608][ T1154] bridge_slave_1: left allmulticast mode [ 547.053010][ T1154] bridge_slave_1: left promiscuous mode [ 547.058719][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.069097][ T1154] bridge_slave_0: left allmulticast mode [ 547.074920][ T1154] bridge_slave_0: left promiscuous mode [ 547.081068][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.421926][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.432270][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.441694][ T1154] bond0 (unregistering): Released all slaves [ 547.610778][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.620617][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.630065][ T1154] bond0 (unregistering): Released all slaves [ 547.698727][ T1154] bond1 (unregistering): Released all slaves [ 547.768837][ T1154] bond2 (unregistering): (slave wlan0): Releasing active interface [ 547.779410][ T1154] bond2 (unregistering): Released all slaves [ 548.381166][ T1154] hsr_slave_0: left promiscuous mode [ 548.387162][ T1154] hsr_slave_1: left promiscuous mode [ 548.396722][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.404452][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.413844][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.421478][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.435067][ T1154] hsr_slave_0: left promiscuous mode [ 548.442640][ T1154] hsr_slave_1: left promiscuous mode [ 548.448559][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.456400][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.465299][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.473348][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.481215][ T1154] batman_adv: batadv0: Interface deactivated: macvtap1 [ 548.488060][ T1154] batman_adv: batadv0: Removing interface: macvtap1 [ 548.509033][ T1154] veth1_macvtap: left promiscuous mode [ 548.514643][ T1154] veth0_macvtap: left promiscuous mode [ 548.520331][ T1154] veth1_vlan: left promiscuous mode [ 548.526172][ T1154] batadv_slave_0: left promiscuous mode [ 548.531875][ T1154] veth1_macvtap: left promiscuous mode [ 548.537347][ T1154] veth0_macvtap: left promiscuous mode [ 548.543609][ T1154] veth1_vlan: left promiscuous mode [ 548.548851][ T1154] veth0_vlan: left promiscuous mode [ 548.886243][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 548.918787][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 549.399305][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 549.428766][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 550.060011][ T1154] IPVS: stop unused estimator thread 0... [ 550.073542][ T1154] IPVS: stop unused estimator thread 0... [ 550.217433][ T1154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.299261][ T1154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.406006][ T1154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.487128][ T1154] team0: Port device netdevsim0 removed [ 550.498938][ T1154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.664479][ T1154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.676094][ T1154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.734442][ T1154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.744901][ T1154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.797196][ T1154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.807673][ T1154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.877922][ T1154] team0: Port device netdevsim0 removed [ 550.885209][ T1154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.895761][ T1154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.985681][ T1154] gretap0: left allmulticast mode [ 550.993387][ T1154] gretap0: left promiscuous mode [ 550.998496][ T1154] bridge0: port 1(gretap0) entered disabled state [ 551.010434][ T1154] bridge_slave_1: left allmulticast mode [ 551.016088][ T1154] bridge_slave_1: left promiscuous mode [ 551.022175][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.035445][ T1154] bridge_slave_0: left allmulticast mode [ 551.042513][ T1154] bridge_slave_0: left promiscuous mode [ 551.048210][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.413635][ T1154] bond0 (unregistering): Released all slaves [ 551.422024][ T1154] bond1 (unregistering): Released all slaves [ 551.493614][ T1154] bond2 (unregistering): Released all slaves [ 551.660432][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.670733][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.680382][ T1154] bond0 (unregistering): Released all slaves