last executing test programs: 1m57.548451444s ago: executing program 3 (id=190): mremap(&(0x7f0000df0000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) creat(0x0, 0xc2) io_setup(0x7f, &(0x7f0000000100)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000240)={0x0, 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000001c0)={0x0, 0x4f424752, 0x0, @discrete={0xfffffffc}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="0500"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000041549ed07508ef72f5b7e9846eaf7fa180c6ec01a077ab10e8fa1707c7ea4c036cf61088b787e6704fc1c2f1c4766c9443ec9ba4650289a8b4c2a14ee249fc1d3de955f0228074579e2b45a856"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x6c, r4, 0x1000000000000}, 0x38) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 1m55.490958728s ago: executing program 3 (id=198): r0 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 1m54.825440048s ago: executing program 3 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1m53.603680546s ago: executing program 3 (id=202): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012720dcfe14c639a502ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 1m52.493130485s ago: executing program 3 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="60000000020601080000000000000000000000000900020073797a320000000005000400000000001400078005001500080000000800114000000002050005000a000000050001000600000011000300686173683a69702c6d61726b"], 0x60}}, 0x84000) 1m51.567645152s ago: executing program 3 (id=212): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x341, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) symlinkat(&(0x7f0000000280)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000580)={[{@xino_on}, {@metacopy_off}, {@uuid_off}]}) prlimit64(0x0, 0x3, &(0x7f00000002c0)={0x9, 0xd6}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000300)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "d4dfeb1ceb40eeefe68d6cf265b68e88a8bb314f3c0f82df67e25dad70d6b31e036f9f20b70c42a4dc5b21aa28f606af1557115f56805a217afe6b467cb413b3", 0x15}, 0x48, 0xffffffffffffffff) keyctl$negate(0x4, r5, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r5, &(0x7f0000000480)="9299091084b6d5ca01b4f119259ae5d108f249d2213c978d13205d3b5e19ad0ad30d8401c75eb0fd0e490cee1e2cb6288f42bbd12b5ec5dbe8f99ad04dc822334caa8ec4f4a4b1bac273a94eac28fbe59da003487f20504b2ae3660b245e6bb4cdb1c7810c2efd0eb4f341298f7feef2ae9936d4926ba118abf9d585cf4c9b26080c9ca95be2b770ad1748c10467361a096a6efccd6ce9bb627841530585a61da0e351d61fdc7d60879f2e3dc41f390c2ab2b4063889b7e5d69f2673257e1e0f8543cbc15704d8dcd8b1232c129f17057d0e8bab71f8f970717475", 0xdb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='sched_switch\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000180)=[{0x0, 0x3, 0x5, 0x6}, {0x7, 0x6, 0x67, 0x173}, {0x14e, 0x4, 0xd, 0x78}, {0x7, 0x6, 0x0, 0x2}, {0x8000, 0x3, 0x40, 0x9}, {0x9bd, 0x4, 0x7, 0xd96}]}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000380)='./file0\x00') 1m43.124329592s ago: executing program 0 (id=247): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, &(0x7f0000000600)}) 1m42.608679539s ago: executing program 0 (id=248): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) r1 = inotify_init() r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000200)={0xf474, r1, 'id1\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_SYNC(r3, 0xffffffff80000101, 0x0, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580), 0x4) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x82) fchdir(r7) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r0, 0x5, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfdb}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x71, &(0x7f00000004c0)=""/113, 0x41000, 0x22, '\x00', 0x0, @fallback=0x30, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, &(0x7f0000000640)=[r7, r8], 0x0, 0x10, 0x3ff}, 0x94) inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 1m41.747539487s ago: executing program 0 (id=249): mount$overlay(0x0, 0x0, 0x0, 0x240004, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000bc0)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x9, 0x0, 0x0, 0x0, @str=']+&\\\x00'}, @typed={0x4, 0xd9}]}]}, 0x2c}], 0x1}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m41.474087882s ago: executing program 0 (id=250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x280, 0x0, 0x3, [{{0x0, 0x2, 0x4004, 0x100, 0xc, 0x2, {0x3, 0x5, 0x0, 0x8, 0x10001, 0x0, 0xb, 0xdcc, 0x34, 0xc000, 0xffff, r3, 0x0, 0x7f, 0x5}}, {0x3, 0xc, 0x59, 0xfffffffc, '\x00\x00\x14\x9bp^\fl\xf3\xc5\xf5\xe1\b\xf4\xfd\x8b=\x01\rJSn\xf7\xf4\\\x90\x9e\x14j\xad\xa3c_T\x96.\x14R\xcb\x1e\xf6.\xe3\x91wL\xb2!\x8e\x9e\xf9}\xb5 <\xab\xffw^^\x9d\xcd\x04\xbb\x89\xc6\x80\x8d\x81\xc4\x04\xb2\x1b\xa3\xceU\x97Oe\x1el\xea\a\x00\x00\x00\x00\x00\x00'}}, {{0x0, 0x3, 0x2, 0x80, 0x8, 0x0, {0x3, 0x6ce6, 0x7, 0x20007, 0x2, 0x80000001, 0xffff5b76, 0x400, 0x101, 0xc000, 0x80000000, r3, r4, 0x1, 0x74}}, {0x6, 0x9d, 0xdb, 0xffffff00, '\x00wn\xbc7\xf8\xb7\xadx\x89C?\xdc\xaa\xd4\xe3\x03S\xbd\xdd<\xbe9`#h\a\xafJ,\xbe\xa3\xd9\x80\xd7\x18R\xe5X\xb6\x13^Q.z\xea\xfd\xa5^\xe3\xa6\xfe\n\xf72\x13t\xa2\x00\x9a\xef\xde\xdb\xcd\x83\t\x88\xe8\xd6\xee\xa6?o}}W\x84\xd4\xb7e\xf3\xba\xe6\xf4\\4\xa3\xf3\x8fBQ\x90\x0f\xe0\v\xc4\xbc\x90\xdah\xbb\xc3)\xcb\x86/\xd0_2\xa9\x7f\x1a+G\x91\xae\x95\xeay\xb4i\xea\xc2\x88h\xae\xeb\x82,A\x93\xab\xb3nS\x97l\xf6w\x87\xb5\xc4H]\xa8\x9b \x04\x1e\xfe\x16]\x03\x02\xf4\xbd\xd1\x9a\x83\b\xdc\xa8\x9f,\x82\xf5\n\x87h\x88;U\xf5\x18\x96\xae\xd9s\t\xac\x91\xbfi\v\xf5\xf7\xba\x80k\xf8K\xb6\xdb|\xf6\xe2\x03\\\x8bjD\xe2\xc8rYc\xcf\x01\xf6\x13<\x99Q1\xf5\xc5S\x9e\xe4'}}]}, 0x0, 0x0, 0x0}) getdents64(r5, &(0x7f0000000100)=""/134, 0x86) r6 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e00000001000010026bd7000ffdbdf256768617368"], 0xe0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000080) r9 = socket$nl_rdma(0x10, 0x3, 0x14) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000140)={0x0, 0x1f, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1418, 0x1, 0x0, 0x3, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x40000}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x8000) ptrace(0x10, r6) ptrace$cont(0x1f, r6, 0x6, 0xf) move_pages(r6, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) 1m40.92210333s ago: executing program 0 (id=254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x400, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x0, 0x2b}, @in6=@mcast2, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40001, 0xfffffffd, 0xae8}, 0x70bd25, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x8000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, 0x1d92, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7831, 0x0, 0x0, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x3, 0xc, 0x4, 0x8090, 0x1, 0x9, '\x00', 0x0, r7, 0x2, 0x4, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000ffff0000000000002700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014001d00b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r10 = syz_io_uring_setup(0xea5, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r8}) io_uring_enter(r10, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0) 1m40.147792029s ago: executing program 0 (id=257): mremap(&(0x7f0000df0000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) creat(0x0, 0xc2) io_setup(0x7f, &(0x7f0000000100)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000240)={0x0, 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000001c0)={0x0, 0x4f424752, 0x0, @discrete={0xfffffffc}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="050000000000000000000000000000984d0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000041549ed07508ef72f5b7e9846eaf7fa180c6ec01a077ab10e8fa1707c7ea4c036cf61088b787e6704fc1c2f1c4766c9443ec9ba4650289a8b4c2a14ee249fc1d3de955f0228074579e2b45a856"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x6c, r4, 0x1000000000000}, 0x38) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 1m39.760989359s ago: executing program 32 (id=257): mremap(&(0x7f0000df0000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) creat(0x0, 0xc2) io_setup(0x7f, &(0x7f0000000100)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000240)={0x0, 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000001c0)={0x0, 0x4f424752, 0x0, @discrete={0xfffffffc}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="050000000000000000000000000000984d0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000041549ed07508ef72f5b7e9846eaf7fa180c6ec01a077ab10e8fa1707c7ea4c036cf61088b787e6704fc1c2f1c4766c9443ec9ba4650289a8b4c2a14ee249fc1d3de955f0228074579e2b45a856"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x6c, r4, 0x1000000000000}, 0x38) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 1m36.284130051s ago: executing program 33 (id=212): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x341, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) symlinkat(&(0x7f0000000280)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000580)={[{@xino_on}, {@metacopy_off}, {@uuid_off}]}) prlimit64(0x0, 0x3, &(0x7f00000002c0)={0x9, 0xd6}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000300)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "d4dfeb1ceb40eeefe68d6cf265b68e88a8bb314f3c0f82df67e25dad70d6b31e036f9f20b70c42a4dc5b21aa28f606af1557115f56805a217afe6b467cb413b3", 0x15}, 0x48, 0xffffffffffffffff) keyctl$negate(0x4, r5, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r5, &(0x7f0000000480)="9299091084b6d5ca01b4f119259ae5d108f249d2213c978d13205d3b5e19ad0ad30d8401c75eb0fd0e490cee1e2cb6288f42bbd12b5ec5dbe8f99ad04dc822334caa8ec4f4a4b1bac273a94eac28fbe59da003487f20504b2ae3660b245e6bb4cdb1c7810c2efd0eb4f341298f7feef2ae9936d4926ba118abf9d585cf4c9b26080c9ca95be2b770ad1748c10467361a096a6efccd6ce9bb627841530585a61da0e351d61fdc7d60879f2e3dc41f390c2ab2b4063889b7e5d69f2673257e1e0f8543cbc15704d8dcd8b1232c129f17057d0e8bab71f8f970717475", 0xdb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='sched_switch\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000180)=[{0x0, 0x3, 0x5, 0x6}, {0x7, 0x6, 0x67, 0x173}, {0x14e, 0x4, 0xd, 0x78}, {0x7, 0x6, 0x0, 0x2}, {0x8000, 0x3, 0x40, 0x9}, {0x9bd, 0x4, 0x7, 0xd96}]}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000380)='./file0\x00') 10.766244008s ago: executing program 2 (id=583): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pi6 \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x29, 0x80, 0xd, 0x5, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x720, 0x4, 0x80000000}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x6, 0x2, 0x1, 0x8880, r0, 0x7, '\x00', r1, r2, 0x1, 0x5, 0x5}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x760, 0x103382) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x658, 0x800) ioctl$LOOP_SET_STATUS(r5, 0x1277, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x3, 0xa, 0x9, 0x1, "4b8b3ea41100dfed0b2f3409000000dd5aefcc70af689d37bbe9b87dd52100000000f6010000aac8c93e0ba6df00000000fabdf75f000b00", "000000f0ff200a0055628002d76af4ac4d000000002200", [0x20, 0x206]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0x80000300, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0xa3}) getdents64(r6, &(0x7f0000000580)=""/174, 0xae) setsockopt$packet_int(r3, 0x107, 0x17, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000200)={r4, 0x6, {0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffa, 0x0, 0x4, 0x1f, 0x8, "9900d50e97e2ec29e5ad19eedb916519619dc5cd4fbe1d43bc32d4c6a826d832d1f7f3b836ff151e8826f31d865f0ed1e3e5f45c98e89f99e1c7efd3acbd2d53", "cfc26260c9b442bbbf1d11050bbf0b2b5217f964e6360b4e6901d1e9a9924e20c7f591c52cb153aeb8d67219561be1f2637afa0e7953a0cd1f95eb8b6bfcec7b", "8cdc47e7def1dbeb2e76d1ac407fa01ff3cab1ffdb3115ffe8e1e13618873928", [0x1, 0x8]}}) 10.70020025s ago: executing program 2 (id=584): syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffffff, 0x0, 0x46) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.145847992s ago: executing program 2 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = socket(0x1f, 0x800, 0x4c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x26020400) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x2000, r7}, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x16, 0x24008880) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000140)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, 0x2}, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x40000004}, 0x24000000) sendmsg$nl_generic(r0, 0x0, 0x2400c011) r11 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r11, 0x0) 7.088334582s ago: executing program 6 (id=591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.083777902s ago: executing program 1 (id=592): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r2, r0, 0x1, 0x0, 0x0, 0x48, 0x1, 0x5, 0xa, 0x8, 0x1, 0x2, 'syz0\x00'}) (fail_nth: 4) 7.0831578s ago: executing program 4 (id=593): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x28, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000000)={0x264e, 0x38414761, 0x1, @stepwise={0x4671f307, 0x1, 0x3, 0x2, 0xc, 0x1}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x13, 0x2, 0x2, "9611ba5a0000000000000000e8f7fa00e9ffffffffffffff83df00", 0x20493859}) 6.995115506s ago: executing program 2 (id=595): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100"], 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x13, 0x2}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) write$binfmt_misc(r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r6, 0x47f6, 0x80ffff, 0x0, 0x0, 0xffa4) 6.688945201s ago: executing program 1 (id=597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x2, 0x200}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x8804}, 0x20000000) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000940), &(0x7f0000000d80)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000004}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x1c) setsockopt$inet_mreqn(r8, 0x0, 0x25, 0x0, 0x0) r9 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='io#harset', 0x0) (fail_nth: 2) 5.861772889s ago: executing program 4 (id=598): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) cachestat(r0, &(0x7f0000000480)={0x8, 0x4}, &(0x7f0000000540), 0x0) r1 = fsopen(&(0x7f0000000100)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r4 = socket$kcm(0x2, 0x5, 0x0) r5 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000180), 0x43) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB='\x00'/28], 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r8 = memfd_secret(0x80000) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x0, 0x200, 0x70bd28, 0x7, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f442b54abea0b856f58155e194"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "663866dfe70a1693fb4a8270747705"}]}, 0x48}, 0x1, 0x0, 0x0, 0x20090}, 0x24000050) r9 = syz_open_procfs$pagemap(r7, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x8, &(0x7f0000000200)=[{0x0, 0x100000be63, 0x9}], 0x1, 0x1000009b, 0x0, 0x0, 0x0, 0xfc}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x24000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x100, 0x2}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4604}, 0x0) 5.835927941s ago: executing program 6 (id=599): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, &(0x7f0000000600)}) 5.253295415s ago: executing program 1 (id=602): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f00000005c0)='net/ip6_mr_cache\x00') syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.95122212s ago: executing program 4 (id=603): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800005a725391b484f20b23bc5e7d16228b3e544aa37818"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x79ad, 0x80, 0x3, 0x26c, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000400)=""/210, 0xd2, 0x10, 0x1}) io_uring_enter(r4, 0x5180, 0x4c1, 0x43, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000300)={0x7b4e, 0x5, 0x4, 0x8000, 0x1, 0x0, [{0x0, 0x8, 0x7, '\x00', 0x404}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) timer_create(0x0, 0x0, 0x0) gettid() r10 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000008, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r10, 0x40045612, &(0x7f0000000000)=0x1) 4.314979735s ago: executing program 6 (id=604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x2, 0x200}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x8804}, 0x20000000) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000d80)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000004ae97e000000", @ANYRES16=r8, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="040000020000000000000000000000000000000081f9a85f3c965d99bd6f76945f453d78ea51ad546988209eb0038b27b8c467dbd796a2226711bf2d5f168f4c562fdb2f06ffc729b7c9bf76c3521091721b0a8df02dbc85ca423c9774c29b15512e9f4d4dd00eca215ebbc313b507dfdf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000008000100850000009500000095000000000000006642e72edb4a214d82c6a4f3ef4ce1c5d3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r11}, 0x10) r12 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r12, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x1c) 4.256652447s ago: executing program 5 (id=605): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x7) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002900)=ANY=[@ANYBLOB="2400000042000100fffffffffddbdf25020000000400381c6d0001800800c800", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="f9", 0x1, 0x40, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)='H', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x52}, 0x8) 4.001509838s ago: executing program 5 (id=606): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = dup(0xffffffffffffffff) write$binfmt_elf32(r6, 0x0, 0x64) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000400000004010000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000084d1ac5b7d94cc380000000000000000000f6d025d5fb79780d380290e04a7ab83857b601daac05fce69155c53e98c02f22a95afb9719bfa1019e099358f350491d9591684010f1a8006f7df747ec2115a87018b8c5848a244d222513e29f9c63a0bea124d3a1f5792bb5af39cc7d8a46f309d894ff239e8b84b9d2a42a157245ac28c92dd14dcf4c187"], 0x50) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async, rerun: 64) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (rerun: 64) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r8, &(0x7f0000000100)='./file0\x00') (async, rerun: 64) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) 3.93540504s ago: executing program 4 (id=607): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x44, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x200484d}, 0x8000) write$6lowpan_enable(r4, &(0x7f0000000200)='0', 0x1) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r7, 0x309, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) 3.624804379s ago: executing program 2 (id=608): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x28, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000000)={0x264e, 0x38414761, 0x1, @stepwise={0x4671f307, 0x1, 0x3, 0x2, 0xc, 0x1}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x13, 0x2, 0x2, "9611ba5a0000000000000000e8f7fa00e9ffffffffffffff83df00", 0x20493859}) 3.392463781s ago: executing program 6 (id=609): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}}, 0x90) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000004100)={0x6, 0x4, 0x2, 0x800, 0xd, 0x0, 0x5, 0x401, r7}, 0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000008c0)={0x0, 0x18, "a910f668d3a38ef581be8ffa71e9979e34e3f6abe03ef8e2"}, &(0x7f0000000900)=0x20) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000040)={r11, 0x4, 0x10}, 0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000940)={0x0, 0x6}, &(0x7f0000000980)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000009c0)={0x0, 0x1000, "47af695b0f26d1a73f13d6c984a388775204dd4f5d60ecd3a2a38d0cf922820034df8348d04a4fdf02a791c23e72faa4ed1352294e056ddc9883e4af30b61c68e97d65205af78917e3e0e752a3858e1ed0e84dd0e05714daa2a43b4ec267e95aef743ae7de4590255e80ef04c2b312729f3be2a3513e0c179e8d85bb3e03f03f9f1036995626589bb01d06dbc35a020d5c8a9caaa745456faaeb0802ca36558b931183807e60b682a3844f21a7cf5cb8476d775a63d2cd042518034b1bde10ffedddbb985866d069bba5027e447ae6af918493209908be2fd140163c70986a01319e3fd835334c9055b52ed54a2b8e14714d4c6f59779c38159406d59edc589a0602ee2314927f6e56d08da16b2535480db7f59f59035e3d8d37a0cc6499585e3d540ba80fd5f7611346d1159efb45c92c97787f6f3b12f3ef70680b9769e2f77871de1401de89fa6983550121010ec0ce1d33efa2e39b6da234a231b4b3465770c7a8302b27c5ed9ddb2e99be4b2951b0752fada7d482721ac34dec19225258a7c7e066dc5fcec54565674b072594cc2f9499e39b451982ffd0d3db8a1a830a4aaff97635110c551b1ae0263390a48a4608d166e17924824479db69621ab13999bb10e77273d70f5869294ba895572ade4867ce48dcd43e89da74f74291605b6e5170aa514953c6a7ad395c2d582adc984f61383051d99155ae503f5f1f7fdf29463746bd9692bfc3e948446d9316537c8e39cfeeeef8f203a89b32bea119f139921bee43e773dfe3566b442c41961593856b6b41de3f76434d913d6403908b85e887ab4cf4e00534c22dcaa37ac422a23a5c02b40b73e5c8dbbeda2e97b0556f38784215748bda8079fe27d53c2a985b4e17059117fa68912be828bb414c5d3133bd00f7f6b4851aac858c5f13c73f6bf9f12f6b493b67482a149702238e7d4995b4f3da245cfd62e7227661183853f29780d9ce4aebaefa5669a28e1ceb93fe81f0b0ab719f8202337d9d1d758d50757b5f61257f8a769dde24684f98d4f73b15e2bef4a177855c90b63852459fbde50bfc17ef97b8feb1afb0039382e3beed1bcfe099e6d47c16a4cff70fbcd8c64da0a09a188a9bb7d8c63564237d92033038269235be58b3980526dfaca450ab76ccb3b5f701164520fa92dcdc9643c7b4d35da09e8d6f952b7223db69f31801d9d158e123e92df59a3b98cba6fb15cb24905d7094337ac9b5557d29ff64dfbe0c64d7d24673b21811214663c12d9b68ec67f626da88790eae62418624010a78f5aab32d3b09eaa3f583b81cf5410a3fb14a0ef30df544a4ea9e2b359910e35d9a7d8457d77591ff320519d72aa76fa81a9ac7ab009337888a28ef27eeb76e9b082e2e97852de4ba46502096c06fcd351856e23bc0f344d0db052a2b8ee365048cd4f87d030e237755306b4052d54fe96cde813229fcecd31991d6e394370c2ac6bf81b059bd6818f5f20e3112c0f571815d87130def9af3200212ddf97ba8714c98066f6e0afde18e0cfd69710cffbffce67704fe4bc7bef25a57bf340772db17160b8df2771fc5437cb282fbe8d3414710171578b6a9f0dfe37f055ebc4f91595e5f4b5e8c267d7250873bca1956195028531bbab953956f7d6572a457432eed58d3380419ffbc5b3fa0a58ab48c8f617d55ff221c0f1e66234d5b97b963ad790e4cc2ff80db0c80a9785acd4966529513bf99cb62501278302dee145540cbf632a058c3fbfbc8b37250ab693a149fcfc62e258e39b3ff66ccdc7faa88af382e09854e85fc5a8dfaef9c2c4e1c60ae9941c8d3a1600c865f78a6cc588a294280ecb8507c14aae62a8233640080ca0babb66f2c22f9406b4b738f2ba69f106bede1bfac92986537d2456a6176ce72e3862e56fb10e690597144444fae10cae5caf9fe679bb749796ea35dea4218c55ff6e6f6a473c6f4366a1273c13ed3af20e1e8aa2fa0136d81b71447a382f1bf80c980f19509b640bf82993033e01ac4cce503de4b1cd1fe748f01594208e71ff8024bf972c673af2a2f7e1b0998a3b56560b95f79e94f12a95afeeef457ac85883dd67ee1f679499162fed278bfad0872b76ce5060d7d7b6233bf94ee1cafbe2d33ed587ae13c09a92bf5f975ac73b30a4982f46a2e78dca9831ee8d1c0b4c761823dfd9343c9a1452c2625363d3279fb2b1e98a049335f3e8c7850d174c83244dd4898b8e3b49d340e1aaa221b6e1cd339d94ef45a07b386bb6b0a509b73d428c1cf1c80a0d768413cfc70f845dbd2ffb87fab5a09345de689dd849725fef937c34c2b2763878b630a4486f2214e428c1f78975062dcdfe928784485813445317d69fbb81f3a078e83c9f2411e2a620c18d0ef60a00798cecb8002a140dfdac1b35c08dd96e48ff1cee6c18e4a7ac2360e0ed8ebeae639f2a6e10116f26be4fd7578ced72f923ff28cda044cb0a63edee79d22dd6e1df7bce2e93a9c9215c6589b0a87a0bf6112eadf9931384660deac8506265c94e0f965e9cb9a8329380314879f8216873d9743ccd17a808b2461416fcffffc141fd622eea580f380a3840f0eebb763039a45d86fb9676426b59329767da05cb4df7c51a75fc5135c300eeb9967fedc2d0d07195297eab4d84bac0332471ea17cfb646331d929bf15a68a6c4081534dba15babc5e30aadc214e407a247c9ca83b0e6eb5e53ea88772ec5aed438fa4b949a2472a5db8a4ea25929f32123c158e508572d9d4ee2b680f910ee93a6fcb004630610a1310d0b1b20bc5a5bab1c3a394e05dfd942cd004a610dab91c05b24cb2de1ca3051aa240eaa18bc6e520a76fea9d14f607d37d863e7026085ed8332c94afdc7a55121d1ab756e1ab5c7955a471bed5a2ec38dc39206558e1f77f78ecd0440b28e404d53327df9e64cde6186c6599e7f142bac5d22c10ac9f18edb1f6765eb03820c11d40a088163b7bf4f1c4e07efc799703a88414e4e2c617cef88299bd89a746a0d57187103a576e8dd22d540ab68a383b69ab69a0ac2f4030da616a1d419189570f67f18fa1b68ad8219c8119544735af011ea454921dc2bc34805cd9437dcf9061c4f68ebf93c69184ffc0fd29039667093f5ef9bb61022ebcb665b9c6afd644e67044e290c668e6c9d435a417eae797a7f5afac4289f1e6d8272b204368411b1ef253e89cfa31b355152891c8441b49a023742fd3092fe0d9c7aaf12c97c0f9159cb1a07d3fd84e38d3332c7ea8fa57b45efa921895086456ec8900b0a388aec626b4e39b67efd06a62d20936b20ae51bc79f0bdc14dc9cbe48ffa48b73cb460776796bef933d3acb20136d1a92225a5daf5566e1b1460394b126f369db12c83ceee4f39168cd3d2a8d6292227273e124feaa8a24c2f7f1a3596bec4e835bb3bbf4cfcae11bfe402cee8141402f360a4a900a769eafa2423b2437c7f1c3009d1328d3387d089b6319e85fd92aeadd95a3bef4047a59fbc56db10dc7177b9b811be18a0afdeda820cf39b1ca1cf8880004fc16ce4fd047bb3483eaef61751b9274c943ef2766058e8e14359ad529a7eaa391deadd6df89d66d9fb770bc25fdbf34c5b61462e546456e2a4d1ccb0085eb62242dbf8ab7aea34f7f04943791b9ca086769bf37d246cc08ebcce6fd45d059b26d368f9cb86ca21c1d41eeac3cccac2505692bd1c235840ca8e5139b934749cd45e79f734d6c70665fcff0e76fa54075150637123d2a9ca80570fb955614ee025c543dd488e74529fbd16dbb067748144bdd49eef2a9105e08f252de903d2085e8047c6af909b036a34d317a60f1534aea1820b21aa393071ca3334089c7a921280db6ff95d694e6b2a6e981708bb2072bce2f5ce9e7cdf2c2bcc4524fb7042c848237393d1d83823a57f25ba64f9867f68cb784d9a96958b59d3e3797241db0191dd50dea233a0eeaed7817a5b908ae99209e419d700dd52e9ce073528d06ff93bf7176641402fbd4e313cca2456c5ca607be86f29e787884231b7f1f2861bfb814ab4829b91ff3340b104f3f61ee4c0555d38acd6cc1b745ae0933c8866cd09a353c3401a20e4bb69a12aa5c8c5de57ee664df4b9ca5449a8b4d98e1c65a9e70a71fcc1aa281883105209f1e04db15b73ff0a4c35852a8fc05081fc5ec9210b357ba5dcb8f67585dad7ec6a9d64597ff54f30fa734d4d04a1067c39cbb4e03a050f9d2f91e37452d0f0c0f53510398051b9e1fccd201214845c95cf451afb0b2b5f3f153db8a265eaf0b47ad0373f8fc4f6452387d4a72037c972291b19928726c2a67261ce48d8f7c8f023834384684519bdea94d3c226ec41863f43a5dc6a29d9bf73c62debfe2f6b35c0ed3a8e88a9dbc5f1f85e43cad9e000c54a349697374568fcdaed2fb627485919ab19c2a03a73b124db7473429cee039f62904802bb32cb213a4da616eb56a2f3088bb3286af98227a46113898d266123048ef82133e701b8eefeb24482ec3de51accfc1082fdff113e7ab6c551803666f78b7484b47dca910657470eaebb244ec72119879de297c924f9b103d7049110ef2a38a7e9ec7417c189b339f3af7d669dd31640ad76336fd95c63db629a46223415460ec42f0260712fcfdf2b600d0d33d66fb8efba4e59a63399319b18d9b84ce895cfd78ba5e5be8b4edbf34f6f713e5fc8441921f450bba230030c3bc18c9e15561533b5030b43d33eec9574589eea7418894d1f984df0955a17ca748031412002d6ac1d7f97ca3071f93a0f9a75bed0a40f52bf9303836068799a1ab1cb6b861b647d8b5253587c63221a1e686f3fed79da0c9f4c923217908fe4f29bdbc36874ef1f725fc367d42e51cac9e09579ca49589d1c462ba0667704864ade207b36b87d5b37808ab32dbdf77656743c75ec4bd9e1ed1aa15d21cba1ff41e7bcb5842acceb6132a1fa19b51ab501aa69e6bd82270e27e13de215d35bfedd2d99dc37ca10c29a47ed97e1ef743d7c8c267fe570ca0dce6b37f5abbf802fbd6c6bc664d19534859707502bb964197773772c96588b0f18862922fb8fefe27f893b362e99cd53a6518634300510f3dd2106acd7a5a7df25a1c02b65e7c3393b339db9e58f33e87c34d606930b35087eef607870bfc7dce141077c7150b9b2ac28a58f5167dad2092204c1dc4960428a3e350effee607e2b75e7371aa35f63a04dbc051c57a3b3bc1302b02e05cfeb1ac3890651f12ecad5645821ab9ef831cb9f3aca105180ae06092118c02cae4cdf54893a4dd6e2f11c6c6c0f26604ae589f5e6ccbdef070cad1e54eef338b708a234f03868ac95b66d88d7130d9332411624bee8dedeb60e1fe0c02ca46a56382cc24856d8584d1eb1bb76584eb730f463d383b1f46a3537c85f719f4caa5e3b53fc238ceffc7f87cc5ebbf1012f9078ba986291654e3277732047b2d625838f6fd6270e4c7f374387162ad2980b67ab4a0f551be2d669d6d18612ffeb35132346387774199e6efe36d5eb199fd4965dd2372c490e30875382c6ff82bb5d5409221d66f55795810cc659ddb701ef559c1406cc5a550512158136b9ba660748d3cc3f28202da5a4c34c0a03a81a35d0346b5c04a919389d3c4a7d3e889394c8f7dc414e1b7e2fa43031099c817149b6b90e9ab00f45a2547e536fb4e862588a595de925d44687fb96493f506c8f831db9947e0868bd57cc081630e0bb316f6e0c31abae7932377bc2544b8126a3a8e0a1164d3d7f1f55b3849f3c6e9406462d877890496ffdce5c125279bc936aee99901300b1b7a7bcd7d0ba7e48d"}, &(0x7f0000001a00)=0x1008) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r14, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x3}, 0x1c) r15 = socket(0x2, 0x80805, 0x0) sendmsg$inet6(r14, &(0x7f0000001cc0)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @private0, 0x1}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000000180)="af", 0x1}], 0x1}, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000000040)={r16, 0x10001}, 0x8) sendmmsg$inet_sctp(r1, &(0x7f0000003100)=[{&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000080)="a3c147eaed5e96c25e1af9ca42b122b9c0e1d246773e60e110c1f16a34176964b69e09d0c3b2dc24ef8aaea4b885459298c21f2d856cd81f4667f20c80841b8383f651423b10fb48c70b60da5cb394", 0x4f}, {&(0x7f0000000100)="ab4eb74859709f3871d1045dacf69280d3ac81ed8961620531d9869cc5a7955dd5ac3610578a238a0fef3a27a392ab3fa8135bd903110c151165c92b7163ed7a2bea151fb943d57d563b90d7637168903c4088caa26e81a3603fccdb84e7f4db28e736140f197b7fbd3358b295b884c752b536d9e9e8a6598f18cafccea050afd47aeb4aca79cb80097c1932e3c874de56d724112b2b545fe5a883813c3407097163610b08bfbf18c5fbccdc9f3484175f5d84b7f0751ba18503463ec969bd48243e53d5126f768802f88d22e1c2b4c2590eefd58f2fac7718cedfee14edb982601bfcfc38105258a7c90ae445365a137ae8787b6091507a5c36bb3eda35", 0xfe}], 0x2, 0x0, 0x0, 0x48811}, {&(0x7f0000000240)=@in6={0xa, 0x4e22, 0x4, @private2, 0x2}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000280)="a673695b4656c6e5025e125a4d5ddd0badee75e56d8c512f4e7a5fabd8a5eee281f53473a2169628b1e8f0130f735539d6df1e180987a67f254046eb3ddefca9e9e4d23dfeec90c47a54a4e2aef7bbdf11b4d0e8185fb0682d436b76a2892a98ce662bf462d88b53e9fd5e862c413b034c2ac6510d3a986739c4879297850a58b48ea47fa1bc96807ba6e62199ea100f8d97d7c2c68f31a58117d0b18690f75904ea4e34353d4d2cee4601f588fe624bac2ab9d71ff9fb1c50886cd297bb916634d2e032a9391fa29bf7914d72cba38fa15d664cd3938d7ef692396727dd9aa2ee41", 0xe2}, {&(0x7f0000000380)="915b40c78530cb74b8673882f3298fab191e52b053f8d8bc2d80128d5603b82c37710cdfcf10f66ceac63b4a987feadf62da49dc53a14d6b48a5a5160ec9d29801ef872dfac817f431168d1bf3c639d04e0c28a88594710098d5b73e07b9a4b4cf2e3bdcfbed7cfc94681f33f8d40d65a27f3b03236800bcb208c7f4231999138ac29de3592e80965ccdff1525a2bbcbc54af3e3263de651ceb0bda6ad69932c91218c4361abbda7a79e85d771c2fc3136751b48ce5b", 0xb6}, {&(0x7f0000000440)="d2b6691cb0a1bf943081555692bcfb500ac3d90d6767671806c20b441e2507b42ab6ab92d23c595b2d0325c1ebcedda07b517ef9cead0f486da4bafa5415056240bf312660ac8b9dfd4bc61bd18c3d394c112af13aacf39853100220931fa104e713af9ac1097ebf06d7d4116ef4d4f53dd26b341f0e9c716ecc205ab78872cd7b16", 0x82}, {&(0x7f0000000500)="3b28b9982597551ce825af1deef9a513387418e8a2708130209c1bf2184c768776f36c60554fbd90e5cd239b7d163eaeaa8429ecde1e4efcff23f1770e929c531a632b87819a157db65e99bdb6b56a09872564b9111743040726843f4ff5499844d162edfcdbd4394c5aa607869cc4c5731ad31047cd894de89ba450876aa9afc0e9c2faf070edb10a14b662e36a3905c8016ffc5ec5c1cd354626e8d9290402c940f36bf0bf6acb4a6643b776e071e3df77f1c367c7ad538253e8f82fdf22796f6aa6c9e94aa01bedff1572ce5608", 0xcf}, {&(0x7f0000000600)="bc427f6397cd571d349250fc792670ea40c5415703161c1e034f943d6971e0027adc566041e306b0665b72a54c67c947bc140ac3b1a72a53165d1c73", 0x3c}], 0x5, &(0x7f00000006c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x11}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndrcv={0x30, 0x84, 0x1, {0xfffd, 0x9, 0xe, 0x1ff, 0x1000, 0x1ff, 0x1add, 0x7, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x2, 0x4, 0x6}}], 0xa0, 0x240c0010}, {&(0x7f0000000780)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000880)=[{&(0x7f00000007c0)="ddd7ecf759b51e1df22411d67296d71df36406e8849a6d79ae6b436583f51f742ab7fc3401cfa18220432a7993f01580e7da96a0b162ff1a07ddc021b5164f49d20c21252a16ac05d1ffbd7ee19822cd4314e1dbef439c1bfc1fbfe1994a9ea542428f722c4b918ca3b7ba34c928218d91613546828c13af3470eaae9fd7c3b426d9779009908cb7491328ecb80ac2920c3e", 0x92}], 0x1, &(0x7f0000001a40)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0xd30}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0xc, 0x2, 0x9, r7}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x6, 0x8, 0x5, r8}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @empty}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0xff, 0x820c, 0x579e4328, 0x26c, 0xfff, 0x4, 0x10000, r11}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0xfff, 0x5, 0x0, 0x4, 0x492, 0x8, 0x2, r12}}, @authinfo={0x18, 0x84, 0x6, {0xaaf}}, @sndrcv={0x30, 0x84, 0x1, {0xff00, 0x800, 0x0, 0x5, 0x7, 0x8, 0x0, 0x8, r13}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @sndinfo={0x20, 0x84, 0x2, {0xd, 0x2, 0x7583, 0x7, r16}}], 0x158, 0x4}, {&(0x7f0000001bc0)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003080)=[{&(0x7f0000001c00)="3de947ac35b7337dcdb430a6100cad6ea049ed2b71e000d4fc43de0e5dc30abb8b1c401a69e5bcf731c60258be9ed45edf58c4fb4799f9f317e80643ad1a937dc0eb2af21a8f9675e3465ea9ff42470cfdff5c5f2d8ec7328b5821303fa391bab52cc6ae5b44c17a86fd59905799efec7a4ad88d5288a2078e6dcdce272143570938f358c52ed660a00a7148562388d6b5d77ebc99eff03a1fead9cc7f25f2edcc463de39da10e4f9f6097a09c818b59b9d7216c560133cc6176bef71722942551c63a532b1aacad61f595799817be2f20d2791874f174bee6a5b518b351f1d17b5b786f8e", 0xe5}, {&(0x7f0000001d00)="017f5bee0b187410af1004531bd0fee83c6add38e2769613b347b343a574cbf5d3ec62f7119e90ea82dd2799fba45ade09d3173d390010ab73610576a58bd6391fe023c055ce686a890e8d0548bf8b381ef222e4f40ace5160ace84f4f48e3f9203068cdaf7ff99ce77826af08d8e5f73f", 0x71}, {&(0x7f0000001d80)="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", 0x1000}, {&(0x7f0000002d80)="c78da384a0f6b912a45f0279721813dfbd6924caefcf0d4c3bc8628cee5d2fad110f4eec7e0ed931fc46054753c892889bac46bc44f0543a53122e2b3e407917f9eb83c31b81", 0x46}, {&(0x7f0000002e00)="48910be9b1ec809190edb128df08599af1c35c98dae5f90aa19f00d46686181353ad4a9102516a079a45f8918d5ccabf8ff5d9bd3407f66ed807163bb69bcd8aa0f01e4adb31d24bb11f207a3551704e8f86b3a1dda9", 0x56}, {&(0x7f0000002e80)="d7d60ca1523a38d3274d1cd9606b87e46c14d23de43cbc098aaaf8a9e771786fddeab98ac73358386b5ca9e78be13af4d880339c3435341850c5c9cb4571c3482461be73b0d361e5c498dfd1e3ece8a848df8de8e2c19cbea8d963c6a29317b414b771b57c9b103287574683141c503dc481b40a16321e0c803f7271afd98983334776c5fac6bf9f96e405498dbba8833516512af27e7286f3eff8ad7b35023e9dc11e2492e1a79e6afe7a03b50c29a24e700748fdc21de7019a", 0xba}, {&(0x7f0000002f40)="1d214d36da3c6843815694a63ef8c4384ebd3e63198f1ec694b06c7b9aec529a45e029ccdb8c44091fde259596d622c705be8c648ca819d052", 0x39}, {&(0x7f0000002f80)="2b59c7ff49c3b89617233dbc0e21b010b4b0f9d4c13e687783cdd2086360d5b6efb409a40d27ffeefd320172292c1dbcaf54dc91232a7f28cf0e34cc5adf10a816de51300b7d8a9b16037fdcaa830cecdbd12621a8992215f0817edcaa769c9b1931c8f77dd4dcbf3577614e7c0cfa9f46463d1f04f1a31c55ee086e6ca9598b0e9e0781a05a6677303fbe813e0e13d7eaf11a45cda5bad41233e7a39ab434ba78838a388beff58278e4dc54e6f7e9c251d2c6f96adebf4d527a4218c3fe553aff4ecf497d9acd26ef67", 0xca}], 0x8, 0x0, 0x0, 0x4}], 0x4, 0x1) 3.25062609s ago: executing program 5 (id=610): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000180)) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x3, 0x0, 0x4, 0x0, "000000cef4a89800"}, 0x10}, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$rxrpc(0x21, 0x2, 0x2) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) get_robust_list(0x0, 0x0, 0x0) unshare(0x4020400) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x4020400) ioctl$TIOCGPTPEER(r7, 0x5441, 0x8000000000200001) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "057ef7d4"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.163746325s ago: executing program 1 (id=611): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x44, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x200484d}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r6, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r7, 0x309, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) 2.328743s ago: executing program 6 (id=612): r0 = socket(0x1e, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10f, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000300)={0x0, 0xd4bb, 0xf9ff795bf1338cce, 0xfffffffd}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x80800}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018010000716c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) migrate_pages(r8, 0x8, &(0x7f0000000380)=0x80000000, &(0x7f0000000480)=0x7) listen(r3, 0x5) io_uring_enter(r4, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002, 0x0, 0x2}]}) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x9, 0x101, 0x2) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r12, 0x400452c9, &(0x7f0000000100)) 2.195963193s ago: executing program 5 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000020000000ff000000000000030018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.149004632s ago: executing program 2 (id=614): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, &(0x7f0000000600)}) 1.967055249s ago: executing program 4 (id=615): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x8, 0x1, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2866e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f000061ac00000000000000f500", "90be8b1c55f96400", [0x8a2]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)={0x4c, r5, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffb, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1.840716908s ago: executing program 5 (id=616): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r3}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x308000, 0x8}) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000400)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0x201, 0x0, &(0x7f0000000c40)="63ecedae46dc4314fbb9111a30ac", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000557588b9d789bb4498078e70a263c448f9110d408980c9cd6248acb6d645034238831fbe8c7bb490", @ANYRES16=r3, @ANYRES64=r4, @ANYRESHEX=0x0], 0x50) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000300)={0x0, 0x80, 0x6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300060c1) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0xe, &(0x7f0000000200)={0x7ff, 0x2}) socket$inet6(0xa, 0x1, 0x0) r6 = dup2(r0, r2) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={@private0, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5, &(0x7f0000000340)=[{0x5a717210, 0x6, 0x401}, {0xffffffffffffc6f9, 0x8, 0x3ff}], 0x2, 0x3, 0x6, 0x8, 0x0, 0xb}) syz_open_dev$dri(0x0, 0x8006, 0xcc804) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc000000180001"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 775.654477ms ago: executing program 4 (id=617): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0xf929) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x101, 0x1, {}, {}, 0x2, 0xea}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 691.280826ms ago: executing program 5 (id=618): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) futex_waitv(&(0x7f0000002d40)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) pselect6(0x40, &(0x7f00000000c0)={0x7, 0xfffffffffffffffd, 0x9, 0x40, 0x1, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 379.140921ms ago: executing program 1 (id=619): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@bcast, @bcast, @default, @rose, @default, @default, @netrom, @null]}, &(0x7f00000000c0)=0x48, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x8, @mcast2, 0xfffffffa}, @in6={0xa, 0x4, 0x80, @private1={0xfc, 0x1, '\x00', 0x40}, 0x7}, @in={0x2, 0x4e22, @multicast2}], 0x48) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x0, &(0x7f0000000200)) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0x8, 0x2, 0x1, 0x3, 0xc4, 0x4, 0x0, 0xffff, 0x3ff, 0x2, 0x7c, 0x6, 0xff, 0x80, 0x1a, 0x4, {0x8, 0x10001}, 0xaa, 0x9}}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000380)=[r1, r0, r1, r3, r0, r0], 0x6) (async) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) (async) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000003c0)=0x5fb, 0x4) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000400)={0x6, 'wlan1\x00', {0x823b}, 0xff}) (async) setsockopt$sock_void(r4, 0x1, 0x1b, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000440)='nicvf0\x00', 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x104a0, 0x0) (async) r5 = getpgrp(r2) ptrace$ARCH_SHSTK_ENABLE(0x1e, r5, 0x1, 0x5001) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f00000004c0)={0x81, 0x5, 0x8}) (async) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r4) (async) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f00000005c0)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000600)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x1, 0x7, 0x22, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x0, 0x474d483e, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x29, 0x9, 0xd, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, @private2, 0x10, 0x40, 0x6, 0x5}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x118, r7, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x890}, 0x2400c000) fchdir(r4) (async) connect$tipc(r0, &(0x7f0000000980)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x1}}, 0x10) (async) r11 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000dc0)={0x0, &(0x7f00000009c0)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest_nat=0x6822, 0x7, 0x0, 0xc31b}}, @wr_crn={0x67, 0x20, {0x8, 0x9e2}}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0x2f1}}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x8, 0x7}}, @rdmsr={0x66, 0x18, {0x1b}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest_nat=0x681c, 0x9, 0x1b8f, 0x7}}, @rdmsr={0x66, 0x18, {0x37c}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro32=0x4402, 0x1, 0x24, 0xe}}, @uexit={0x0, 0x18}, @wr_crn={0x67, 0x20, {0x3, 0x963}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x418, 0x0, 0x9, 0x5}}, @nested_create_vm={0x12d, 0x18}, @wr_drn={0x68, 0x20, {0x1, 0x27a766d2}}, @nested_create_vm={0x12d, 0x18, 0x1}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x8000}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0x369, 0xfffffffffffffffd}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x541, 0x0, 0x9, 0x3}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x2c, 0x5, 0x6, 0xa798}}, @out_dx={0x6a, 0x28, {0x4f4, 0x4, 0x6}}, @nested_create_vm={0x12d, 0x18}, @nested_vmresume={0x130, 0x18, 0x3}, @code={0xa, 0x56, {"c402a5927454c666baf80cb8f07af38eef66bafc0cec360f102ec4e24db89d0000000066420ff12664f2420f127010260f01d1260f01c3c4a3bd69b600000000346743a8a8"}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0x3ce}) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000f00)={0x0, @in={{0x2, 0x4e21, @local}}, 0x5, 0x81, 0x1, 0xfffffff8, 0x44, 0x4}, 0x9c) 312.831874ms ago: executing program 1 (id=620): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./file1\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) sendfile(r0, r0, 0x0, 0x7) symlinkat(&(0x7f0000000440)='\x00', r0, &(0x7f0000000480)='./bus/file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@canfd={0xd, {{0x2}, 0x10, 0x1, 0x0, 0x0, "b159ce900d0e84c29d20bc3c20848d21ab900ff011db1288ddcdb863e705b3ef42fd22a8d31e5a66a3c324ce876ad6c62f5c803da22ce5e3b70fc5da753df1b8"}}}}, &(0x7f0000000000)={0x1, 0x3, [0x10a, 0x34a, 0xf48, 0x3b6]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x400000000000000, 0x0, 0x413, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x29}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r5, 0x401870c8, &(0x7f0000000040)=0x3) r6 = socket$packet(0x11, 0x2, 0x300) dup(r2) r7 = fcntl$dupfd(r1, 0x406, r6) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) 0s ago: executing program 6 (id=621): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012720dcfe14c639a502ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.3.187'. [ 122.959361][ T30] audit: type=1400 audit(1765700294.135:344): avc: denied { write } for pid=6640 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.019022][ T30] audit: type=1400 audit(1765700294.155:345): avc: denied { write } for pid=6640 comm="syz.0.188" name="icmp6" dev="proc" ino=4026533302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 123.678337][ T848] usb 5-1: USB disconnect, device number 9 [ 124.129847][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.192'. [ 124.255742][ T848] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 124.358942][ T6660] x_tables: ip_tables: osf match: only valid for protocol 6 [ 124.898089][ T848] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.055525][ T848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.067198][ T848] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 125.094982][ T848] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.105110][ T848] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.116101][ T848] usb 2-1: Product: syz [ 125.121966][ T848] usb 2-1: Manufacturer: syz [ 125.285467][ T30] audit: type=1400 audit(1765700296.465:346): avc: denied { create } for pid=6665 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 125.702418][ T30] audit: type=1400 audit(1765700296.525:347): avc: denied { map } for pid=6667 comm="syz.2.197" path="socket:[11106]" dev="sockfs" ino=11106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.726280][ T30] audit: type=1400 audit(1765700296.525:348): avc: denied { read } for pid=6667 comm="syz.2.197" path="socket:[11106]" dev="sockfs" ino=11106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.339779][ T6473] usb 2-1: USB disconnect, device number 7 [ 128.191201][ T6474] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 128.229761][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 128.229775][ T30] audit: type=1400 audit(1765700299.405:353): avc: denied { connect } for pid=6694 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.491133][ T6474] usb 5-1: Using ep0 maxpacket: 32 [ 128.504560][ T6474] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 128.532894][ T6474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.554924][ T6474] usb 5-1: Product: syz [ 128.563698][ T6474] usb 5-1: Manufacturer: syz [ 128.568326][ T6474] usb 5-1: SerialNumber: syz [ 128.626534][ T6474] usb 5-1: config 0 descriptor?? [ 128.640716][ T30] audit: type=1400 audit(1765700299.435:354): avc: denied { bind } for pid=6694 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.650254][ T6474] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 128.680169][ T30] audit: type=1400 audit(1765700299.445:355): avc: denied { write } for pid=6694 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.713315][ T30] audit: type=1400 audit(1765700299.735:356): avc: denied { write } for pid=6705 comm="syz.2.206" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.799836][ T30] audit: type=1400 audit(1765700299.765:357): avc: denied { append } for pid=6705 comm="syz.2.206" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 128.803557][ T6711] FAULT_INJECTION: forcing a failure. [ 128.803557][ T6711] name failslab, interval 1, probability 0, space 0, times 0 [ 128.861197][ T30] audit: type=1400 audit(1765700299.795:358): avc: denied { call } for pid=6705 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 128.880172][ T30] audit: type=1400 audit(1765700299.795:359): avc: denied { transfer } for pid=6705 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 128.900318][ T30] audit: type=1400 audit(1765700299.965:360): avc: denied { mount } for pid=6708 comm="syz.3.208" name="/" dev="autofs" ino=11151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 128.901627][ T6711] CPU: 0 UID: 0 PID: 6711 Comm: syz.1.207 Not tainted syzkaller #0 PREEMPT(full) [ 128.901646][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.901654][ T6711] Call Trace: [ 128.901662][ T6711] [ 128.901668][ T6711] dump_stack_lvl+0x16c/0x1f0 [ 128.901688][ T6711] should_fail_ex+0x512/0x640 [ 128.901708][ T6711] ? fs_reclaim_acquire+0xae/0x150 [ 128.901730][ T6711] should_failslab+0xc2/0x120 [ 128.901748][ T6711] __kmalloc_noprof+0xeb/0x910 [ 128.901770][ T6711] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 128.901790][ T6711] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 128.901805][ T6711] tomoyo_realpath_from_path+0xc2/0x6e0 [ 128.901824][ T6711] ? tomoyo_profile+0x47/0x60 [ 128.901844][ T6711] tomoyo_path_number_perm+0x245/0x580 [ 128.901865][ T6711] ? tomoyo_path_number_perm+0x237/0x580 [ 128.901888][ T6711] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 128.901910][ T6711] ? find_held_lock+0x2b/0x80 [ 128.901956][ T6711] ? find_held_lock+0x2b/0x80 [ 128.901975][ T6711] ? hook_file_ioctl_common+0x144/0x410 [ 128.901999][ T6711] ? __fget_files+0x20e/0x3c0 [ 128.902022][ T6711] security_file_ioctl+0x9b/0x240 [ 128.902039][ T6711] __x64_sys_ioctl+0xb7/0x210 [ 128.902057][ T6711] do_syscall_64+0xcd/0xf80 [ 128.902073][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.902087][ T6711] RIP: 0033:0x7ffa5f98f749 [ 128.902099][ T6711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.902111][ T6711] RSP: 002b:00007ffa608f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.902126][ T6711] RAX: ffffffffffffffda RBX: 00007ffa5fbe5fa0 RCX: 00007ffa5f98f749 [ 128.902134][ T6711] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 128.902143][ T6711] RBP: 00007ffa608f9090 R08: 0000000000000000 R09: 0000000000000000 [ 128.902151][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.902159][ T6711] R13: 00007ffa5fbe6038 R14: 00007ffa5fbe5fa0 R15: 00007ffd158b79a8 [ 128.902180][ T6711] [ 128.902200][ T6711] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.922745][ T30] audit: type=1400 audit(1765700300.025:361): avc: denied { read } for pid=6708 comm="syz.3.208" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 129.160635][ T30] audit: type=1400 audit(1765700300.025:362): avc: denied { open } for pid=6708 comm="syz.3.208" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 129.267330][ T6699] bridge_slave_0: left allmulticast mode [ 129.273396][ T6699] bridge_slave_0: left promiscuous mode [ 129.279930][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.352780][ T6699] bridge_slave_1: left allmulticast mode [ 129.358447][ T6699] bridge_slave_1: left promiscuous mode [ 129.372815][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.414821][ T6699] bond0: (slave bond_slave_0): Releasing backup interface [ 129.470321][ T6720] binder: 6719:6720 ioctl c0306201 0 returned -14 [ 129.481831][ T6699] bond0: (slave bond_slave_1): Releasing backup interface [ 129.531686][ T6699] team0: Port device team_slave_0 removed [ 129.578228][ T6699] team0: Port device team_slave_1 removed [ 129.601811][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.612761][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.627703][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.639349][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.664812][ T6699] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 129.682727][ T6474] gspca_ov534_9: reg_w failed -110 [ 129.971172][ T6474] gspca_ov534_9: Unknown sensor 0000 [ 129.971227][ T6474] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 129.993730][ T6474] usb 5-1: USB disconnect, device number 10 [ 130.841186][ T5827] Bluetooth: hci5: command 0x1003 tx timeout [ 130.841802][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 131.251928][ T6752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.220'. [ 131.271237][ T5927] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 131.471270][ T5927] usb 3-1: device descriptor read/64, error -71 [ 131.711364][ T5927] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 131.981318][ T5927] usb 3-1: device descriptor read/64, error -71 [ 132.122385][ T5927] usb usb3-port1: attempt power cycle [ 132.363801][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.370255][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.451148][ T6767] tipc: Can't bind to reserved service type 0 [ 132.501162][ T5927] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 132.542197][ T5927] usb 3-1: device descriptor read/8, error -71 [ 133.211263][ T5927] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 133.282220][ T5927] usb 3-1: device descriptor read/8, error -71 [ 133.331202][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 133.331220][ T30] audit: type=1326 audit(1765700304.495:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f98f749 code=0x7ffc0000 [ 133.401681][ T5927] usb usb3-port1: unable to enumerate USB device [ 133.408548][ T30] audit: type=1326 audit(1765700304.495:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5f98f749 code=0x7ffc0000 [ 133.580911][ T30] audit: type=1400 audit(1765700304.665:386): avc: denied { create } for pid=6775 comm="syz.4.227" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 133.655680][ T30] audit: type=1400 audit(1765700304.665:387): avc: denied { mounton } for pid=6775 comm="syz.4.227" path="/50/file0" dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 133.984349][ T30] audit: type=1400 audit(1765700305.165:388): avc: denied { create } for pid=6782 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 134.015089][ T30] audit: type=1400 audit(1765700305.195:389): avc: denied { ioctl } for pid=6782 comm="syz.0.229" path="socket:[12314]" dev="sockfs" ino=12314 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 134.122892][ T6787] tmpfs: Bad value for 'mpol' [ 135.332938][ T30] audit: type=1400 audit(1765700306.515:390): avc: denied { getopt } for pid=6809 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 136.851913][ T6823] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 137.043762][ T6830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.242'. [ 137.111327][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 137.253309][ T43] usb 5-1: device descriptor read/64, error -71 [ 137.271179][ T5926] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 137.431585][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 137.439697][ T5926] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 137.448954][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.458753][ T5926] usb 3-1: Product: syz [ 137.463232][ T5926] usb 3-1: Manufacturer: syz [ 137.467838][ T5926] usb 3-1: SerialNumber: syz [ 137.476350][ T5926] usb 3-1: config 0 descriptor?? [ 137.495012][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 137.673601][ T43] usb 5-1: device descriptor read/64, error -71 [ 137.906250][ T43] usb usb5-port1: attempt power cycle [ 137.918204][ T5926] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 138.251169][ T43] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 138.271766][ T43] usb 5-1: device descriptor read/8, error -71 [ 138.531264][ T43] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 138.561732][ T43] usb 5-1: device descriptor read/8, error -71 [ 138.686544][ T43] usb usb5-port1: unable to enumerate USB device [ 139.322745][ T5926] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 139.337559][ T5926] usb 3-1: USB disconnect, device number 11 [ 139.473187][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 140.071239][ T30] audit: type=1400 audit(1765700311.195:391): avc: denied { write } for pid=6855 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 140.151637][ T30] audit: type=1400 audit(1765700311.205:392): avc: denied { create } for pid=6855 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 140.230510][ T30] audit: type=1400 audit(1765700311.235:393): avc: denied { write } for pid=6855 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 140.536106][ T6867] evm: overlay not supported [ 140.559276][ T30] audit: type=1400 audit(1765700311.725:394): avc: denied { watch } for pid=6862 comm="syz.4.252" path="/56/bus/file1" dev="overlay" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 140.811250][ T30] audit: type=1400 audit(1765700311.725:395): avc: denied { watch_sb watch_reads } for pid=6862 comm="syz.4.252" path="/56/bus/file1" dev="overlay" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 141.076765][ T6108] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.226830][ T6108] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.499106][ T30] audit: type=1400 audit(1765700312.675:396): avc: denied { write } for pid=6880 comm="syz.1.259" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 141.548827][ T6882] netlink: 'syz.1.259': attribute type 10 has an invalid length. [ 141.565845][ T30] audit: type=1400 audit(1765700312.675:397): avc: denied { read } for pid=6880 comm="syz.1.259" path="socket:[12472]" dev="sockfs" ino=12472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.603349][ T6108] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.624102][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 141.925157][ T30] audit: type=1400 audit(1765700312.725:398): avc: denied { bind } for pid=6880 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.972179][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.983251][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.993189][ T6882] syz_tun: entered promiscuous mode [ 141.994234][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.009062][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.016883][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.057697][ T6882] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 142.129253][ T6108] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.365765][ T6108] bridge_slave_1: left allmulticast mode [ 143.385522][ T6108] bridge_slave_1: left promiscuous mode [ 143.401358][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.418951][ T6108] bridge_slave_0: left allmulticast mode [ 143.428770][ T6108] bridge_slave_0: left promiscuous mode [ 143.437906][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.511451][ T6264] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.762847][ T6264] usb 2-1: Using ep0 maxpacket: 16 [ 143.770586][ T6264] usb 2-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config [ 143.788967][ T6264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.806800][ T6264] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x37, changing to 0x7 [ 143.824551][ T6264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 240, changing to 11 [ 143.854269][ T6264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 49986, setting to 1024 [ 143.884754][ T6264] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.914359][ T6264] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 143.926844][ T6264] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 143.935051][ T6264] usb 2-1: Manufacturer: syz [ 143.945757][ T6264] usb 2-1: config 0 descriptor?? [ 143.959169][ T6108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.972459][ T6108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.989544][ T6108] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 144.007442][ T6108] bond0 (unregistering): Released all slaves [ 144.026464][ T6886] chnl_net:caif_netlink_parms(): no params data found [ 144.041272][ T5819] Bluetooth: hci0: command tx timeout [ 144.231164][ T6264] rc_core: IR keymap rc-hauppauge not found [ 144.238889][ T6264] Registered IR keymap rc-empty [ 144.247089][ T6264] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 144.263802][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.272886][ T6264] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 144.279835][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.289180][ T6886] bridge_slave_0: entered allmulticast mode [ 144.378171][ T6264] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 144.391003][ T6886] bridge_slave_0: entered promiscuous mode [ 144.400845][ T6264] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 144.416323][ T6264] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 144.434907][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.444432][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.452808][ T6886] bridge_slave_1: entered allmulticast mode [ 144.466050][ T6886] bridge_slave_1: entered promiscuous mode [ 144.495566][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'. [ 144.883901][ T6264] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 144.911379][ T6264] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 144.934578][ T6264] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 144.952836][ T30] audit: type=1400 audit(1765700316.125:399): avc: denied { watch watch_reads } for pid=6901 comm="syz.1.263" path="/proc/207/map_files" dev="proc" ino=13414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 144.971320][ T6264] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 145.012860][ T6108] hsr_slave_0: left promiscuous mode [ 145.019117][ T6108] hsr_slave_1: left promiscuous mode [ 145.024877][ T6264] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 145.025338][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.091341][ T6264] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 145.105180][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.117094][ T6264] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 145.130063][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.138637][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.218884][ T6108] veth0_macvtap: left promiscuous mode [ 145.221484][ T6264] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 145.253104][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.261760][ T6108] veth1_vlan: left promiscuous mode [ 145.263198][ T6264] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 145.271361][ T6108] veth0_vlan: left promiscuous mode [ 145.273756][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.287884][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.298096][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.311424][ T6264] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 145.318960][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.334907][ T6264] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 90 [ 145.350597][ T6264] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 145.408503][ T6264] usb 2-1: USB disconnect, device number 8 [ 145.590937][ T6108] pim6reg (unregistering): left allmulticast mode [ 145.875298][ T30] audit: type=1400 audit(1765700317.055:400): avc: denied { write } for pid=6934 comm="syz.1.270" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 145.917048][ T30] audit: type=1400 audit(1765700317.055:401): avc: denied { open } for pid=6934 comm="syz.1.270" path="/dev/sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 146.126222][ T5827] Bluetooth: hci0: command tx timeout [ 146.384848][ T6108] team0 (unregistering): Port device team_slave_1 removed [ 146.413637][ T6928] slcan: can't register candev [ 146.440040][ T6108] team0 (unregistering): Port device team_slave_0 removed [ 146.504269][ T5939] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 146.551050][ T30] audit: type=1400 audit(1765700317.725:402): avc: denied { mounton } for pid=6951 comm="syz.2.272" path="/58/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 146.573624][ T6952] nfs: Unknown parameter 'fuse' [ 146.809523][ T6954] capability: warning: `syz.2.272' uses 32-bit capabilities (legacy support in use) [ 147.111609][ T5939] usb 2-1: config 0 has an invalid interface number: 78 but max is 0 [ 147.120016][ T5939] usb 2-1: config 0 has no interface number 0 [ 147.144976][ T30] audit: type=1400 audit(1765700317.985:403): avc: denied { mount } for pid=6951 comm="syz.2.272" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 147.156794][ T5939] usb 2-1: too many endpoints for config 0 interface 78 altsetting 101: 215, using maximum allowed: 30 [ 147.214971][ T5939] usb 2-1: config 0 interface 78 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 215 [ 147.246929][ T5939] usb 2-1: config 0 interface 78 has no altsetting 0 [ 147.253828][ T5939] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 147.272661][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.303147][ T5939] usb 2-1: config 0 descriptor?? [ 147.401247][ T5827] Bluetooth: hci5: command tx timeout [ 147.462735][ T6886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.535269][ T6938] syzkaller0: entered promiscuous mode [ 147.541198][ T6938] syzkaller0: entered allmulticast mode [ 147.553264][ T6886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.595656][ T5939] usb 2-1: string descriptor 0 read error: -71 [ 147.618020][ T5939] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 147.629231][ T5939] gspca_cpia1: usb_control_msg 05, error -71 [ 147.637990][ T5939] gspca_cpia1: usb_control_msg 01, error -71 [ 147.644410][ T5939] cpia1 2-1:0.78: only firmware version 1 is supported (got: 0) [ 147.659889][ T6886] team0: Port device team_slave_0 added [ 147.673460][ T5939] usb 2-1: USB disconnect, device number 9 [ 147.681723][ T6886] team0: Port device team_slave_1 added [ 147.763980][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.770926][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.837565][ T6886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.903881][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.913378][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.961444][ T6886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.106468][ T6886] hsr_slave_0: entered promiscuous mode [ 148.121564][ T6886] hsr_slave_1: entered promiscuous mode [ 148.136034][ T6886] debugfs: 'hsr0' already exists in 'hsr' [ 148.145924][ T6886] Cannot create hsr debugfs directory [ 148.201443][ T5827] Bluetooth: hci0: command tx timeout [ 148.651815][ T6108] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.096223][ T30] audit: type=1400 audit(1765700320.275:404): avc: denied { setopt } for pid=6965 comm="syz.1.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 149.132487][ T6108] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.379198][ T6978] tmpfs: Unknown parameter 'g' [ 149.420919][ T6921] chnl_net:caif_netlink_parms(): no params data found [ 149.482317][ T5827] Bluetooth: hci5: command tx timeout [ 149.505429][ T6108] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.507301][ T6983] dlm: plock device version mismatch: kernel (1.2.0), user (64.6.0) [ 149.591203][ T30] audit: type=1400 audit(1765700320.755:405): avc: denied { read write } for pid=6980 comm="syz.4.279" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 149.693479][ T30] audit: type=1400 audit(1765700320.755:406): avc: denied { open } for pid=6980 comm="syz.4.279" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 149.735093][ T6108] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.793416][ T30] audit: type=1400 audit(1765700320.975:407): avc: denied { create } for pid=6991 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.823408][ T30] audit: type=1400 audit(1765700321.005:408): avc: denied { bind } for pid=6991 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.904319][ T6921] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.917390][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.929043][ T6921] bridge_slave_0: entered allmulticast mode [ 149.936909][ T6921] bridge_slave_0: entered promiscuous mode [ 149.944420][ T6886] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.955478][ T6886] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.970630][ T6921] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.994866][ T6921] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.002242][ T6921] bridge_slave_1: entered allmulticast mode [ 150.019777][ T6921] bridge_slave_1: entered promiscuous mode [ 150.051842][ T6886] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.063090][ T6886] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.076120][ T6921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.126923][ T7005] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=7005 comm=syz.1.281 [ 150.133268][ T6921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.207395][ T6921] team0: Port device team_slave_0 added [ 150.224805][ T6921] team0: Port device team_slave_1 added [ 150.273474][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.281621][ T5819] Bluetooth: hci0: command tx timeout [ 150.287878][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.314919][ T6921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.327105][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.034628][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.066442][ T6921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.078641][ T6108] bridge_slave_1: left allmulticast mode [ 151.084621][ T6108] bridge_slave_1: left promiscuous mode [ 151.090451][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.106260][ T6108] bridge_slave_0: left allmulticast mode [ 151.112890][ T6108] bridge_slave_0: left promiscuous mode [ 151.119634][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.126814][ T7011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=7011 comm=syz.2.282 [ 151.241336][ T30] audit: type=1400 audit(1765700322.325:409): avc: denied { ioctl } for pid=7009 comm="syz.4.283" path="socket:[13958]" dev="sockfs" ino=13958 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.282518][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 151.376358][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 151.438415][ T7021] CUSE: unknown device info "" [ 151.443606][ T7021] CUSE: zero length info key specified [ 151.641191][ T5819] Bluetooth: hci5: command tx timeout [ 151.817096][ T6108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.827650][ T6108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.838449][ T6108] bond0 (unregistering): Released all slaves [ 151.895667][ T6108] bond1 (unregistering): Released all slaves [ 151.913016][ T7014] syz_tun: entered allmulticast mode [ 151.934368][ T7015] team1: entered promiscuous mode [ 151.939495][ T7015] team1: entered allmulticast mode [ 151.956206][ T7019] team2: entered promiscuous mode [ 151.968364][ T7019] team2: entered allmulticast mode [ 151.977531][ T7014] syz_tun: left allmulticast mode [ 152.104751][ T6921] hsr_slave_0: entered promiscuous mode [ 152.170950][ T6921] hsr_slave_1: entered promiscuous mode [ 152.178175][ T6921] debugfs: 'hsr0' already exists in 'hsr' [ 152.187171][ T6921] Cannot create hsr debugfs directory [ 152.802193][ T7029] netlink: 'syz.2.288': attribute type 1 has an invalid length. [ 152.824573][ T7029] netlink: 224 bytes leftover after parsing attributes in process `syz.2.288'. [ 152.886686][ T7033] FAULT_INJECTION: forcing a failure. [ 152.886686][ T7033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.902841][ T7033] CPU: 1 UID: 0 PID: 7033 Comm: syz.4.289 Not tainted syzkaller #0 PREEMPT(full) [ 152.902864][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.902874][ T7033] Call Trace: [ 152.902880][ T7033] [ 152.902887][ T7033] dump_stack_lvl+0x16c/0x1f0 [ 152.902910][ T7033] should_fail_ex+0x512/0x640 [ 152.902936][ T7033] _copy_from_iter+0x2a4/0x16c0 [ 152.902964][ T7033] ? __pfx__copy_from_iter+0x10/0x10 [ 152.902985][ T7033] ? rcu_is_watching+0x12/0xc0 [ 152.903002][ T7033] ? trace_kmalloc+0x2b/0xb0 [ 152.903021][ T7033] ? __kmalloc_noprof+0x35d/0x910 [ 152.903047][ T7033] ? kernfs_fop_write_iter+0x237/0x570 [ 152.903077][ T7033] kernfs_fop_write_iter+0x19a/0x570 [ 152.903107][ T7033] vfs_write+0x7d3/0x11d0 [ 152.903129][ T7033] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 152.903157][ T7033] ? __pfx_vfs_write+0x10/0x10 [ 152.903195][ T7033] ksys_write+0x12a/0x250 [ 152.903215][ T7033] ? __pfx_ksys_write+0x10/0x10 [ 152.903244][ T7033] do_syscall_64+0xcd/0xf80 [ 152.903264][ T7033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.903281][ T7033] RIP: 0033:0x7fb91498f749 [ 152.903295][ T7033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.903310][ T7033] RSP: 002b:00007fb9157ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.903333][ T7033] RAX: ffffffffffffffda RBX: 00007fb914be5fa0 RCX: 00007fb91498f749 [ 152.903344][ T7033] RDX: 0000000000000008 RSI: 0000200000000280 RDI: 0000000000000004 [ 152.903354][ T7033] RBP: 00007fb9157ed090 R08: 0000000000000000 R09: 0000000000000000 [ 152.903363][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.903372][ T7033] R13: 00007fb914be6038 R14: 00007fb914be5fa0 R15: 00007ffd225c4558 [ 152.903398][ T7033] [ 153.682709][ T6108] hsr_slave_0: left promiscuous mode [ 153.688810][ T6108] hsr_slave_1: left promiscuous mode [ 153.700189][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.707883][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.721012][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.728482][ T5827] Bluetooth: hci5: command tx timeout [ 153.735493][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.743973][ T7042] 9p: Bad value for 'wfdno' [ 153.764161][ T6108] veth1_macvtap: left promiscuous mode [ 153.771355][ T6108] veth0_macvtap: left promiscuous mode [ 153.777479][ T6108] veth1_vlan: left promiscuous mode [ 153.782936][ T6108] veth0_vlan: left promiscuous mode [ 153.791753][ T7041] [U] [ 153.909795][ T30] audit: type=1400 audit(1765700325.085:410): avc: denied { ioctl } for pid=7044 comm="syz.2.292" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 154.303855][ T6108] team0 (unregistering): Port device team_slave_1 removed [ 154.350571][ T6108] team0 (unregistering): Port device team_slave_0 removed [ 154.805877][ T6886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.859546][ T7062] ======================================================= [ 154.859546][ T7062] WARNING: The mand mount option has been deprecated and [ 154.859546][ T7062] and is ignored by this kernel. Remove the mand [ 154.859546][ T7062] option from the mount to silence this warning. [ 154.859546][ T7062] ======================================================= [ 154.897636][ T7062] tmpfs: Bad value for 'mpol' [ 154.947504][ T6886] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.974616][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.981804][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.029800][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.036992][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.105689][ T6921] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 155.145256][ T6921] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 155.171748][ T6921] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 155.350560][ T6921] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 155.512154][ T6264] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 155.653829][ T6264] usb 5-1: device descriptor read/64, error -71 [ 155.678599][ T6921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.723376][ T6921] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.750273][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.757407][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.805414][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.812592][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.897458][ T6886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.921515][ T6264] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 156.061551][ T6264] usb 5-1: device descriptor read/64, error -71 [ 156.205249][ T6264] usb usb5-port1: attempt power cycle [ 156.295402][ T6921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.425029][ T6886] veth0_vlan: entered promiscuous mode [ 156.468186][ T6886] veth1_vlan: entered promiscuous mode [ 156.534280][ T6886] veth0_macvtap: entered promiscuous mode [ 156.573700][ T6886] veth1_macvtap: entered promiscuous mode [ 156.583759][ T6264] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 156.644958][ T6264] usb 5-1: device descriptor read/8, error -71 [ 156.667793][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.692891][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.733097][ T6108] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.757183][ T6108] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.776960][ T1333] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.811873][ T1333] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.901218][ T6264] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 156.929412][ T6108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.942047][ T6264] usb 5-1: device descriptor read/8, error -71 [ 156.948326][ T6108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.965808][ T6921] veth0_vlan: entered promiscuous mode [ 156.994344][ T6921] veth1_vlan: entered promiscuous mode [ 157.010941][ T6027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.028489][ T6027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.029711][ T6921] veth0_macvtap: entered promiscuous mode [ 157.065530][ T6921] veth1_macvtap: entered promiscuous mode [ 157.073456][ T30] audit: type=1400 audit(1765700328.255:411): avc: denied { mounton } for pid=6886 comm="syz-executor" path="/root/syzkaller.7eHRvm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 157.094936][ T6921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.116223][ T6264] usb usb5-port1: unable to enumerate USB device [ 157.173914][ T6921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.211841][ T1145] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.256764][ T1145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.266718][ T1145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.283907][ T1145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.386501][ T6027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.397311][ T30] audit: type=1400 audit(1765700328.585:412): avc: denied { read write } for pid=7113 comm="syz.5.302" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 157.397741][ T7114] random: crng reseeded on system resumption [ 157.431190][ T6027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.461971][ T30] audit: type=1400 audit(1765700328.585:413): avc: denied { ioctl open } for pid=7113 comm="syz.5.302" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 157.476868][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.499370][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.553191][ T30] audit: type=1400 audit(1765700328.735:414): avc: denied { read } for pid=7116 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.588278][ T7139] kAFS: unable to lookup cell '(,' [ 158.606979][ T30] audit: type=1400 audit(1765700329.785:415): avc: denied { mount } for pid=7140 comm="syz.6.307" name="/" dev="configfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 158.650419][ T30] audit: type=1400 audit(1765700329.815:416): avc: denied { search } for pid=7140 comm="syz.6.307" name="/" dev="configfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.716613][ T30] audit: type=1400 audit(1765700329.815:417): avc: denied { search } for pid=7140 comm="syz.6.307" name="/" dev="configfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.999670][ T30] audit: type=1400 audit(1765700329.815:418): avc: denied { read open } for pid=7140 comm="syz.6.307" path="/" dev="configfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.227220][ T30] audit: type=1400 audit(1765700329.825:419): avc: denied { connect } for pid=7140 comm="syz.6.307" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.351199][ T5927] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.691135][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 159.698263][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.710079][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 159.723215][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.731169][ T5924] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 159.736195][ T5927] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 159.751559][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.762040][ T5927] usb 2-1: config 0 descriptor?? [ 159.767764][ T7150] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.870869][ T5927] hub 2-1:0.0: USB hub found [ 159.913556][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 159.923870][ T5924] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 159.959365][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 159.991157][ T5924] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 160.011303][ T5924] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 160.037913][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.058784][ T5924] usb 6-1: config 0 descriptor?? [ 160.070978][ T5927] hub 2-1:0.0: 11 ports detected [ 160.087012][ T5927] hub 2-1:0.0: insufficient power available to use all downstream ports [ 160.290209][ T5924] hdpvr 6-1:0.0: firmware version 0xce dated [ 160.290209][ T5924] ujOm{}Xn~mj.X˺63k_ [ 160.311201][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.333356][ T5924] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 160.349285][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.382397][ T5927] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 160.398476][ T5927] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 160.421974][ T5927] usbhid 2-1:0.0: can't add hid device: -71 [ 160.529183][ T5927] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 160.552541][ T7168] FAULT_INJECTION: forcing a failure. [ 160.552541][ T7168] name failslab, interval 1, probability 0, space 0, times 0 [ 160.571544][ T7168] CPU: 1 UID: 0 PID: 7168 Comm: syz.2.316 Not tainted syzkaller #0 PREEMPT(full) [ 160.571570][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.571583][ T7168] Call Trace: [ 160.571591][ T7168] [ 160.571599][ T7168] dump_stack_lvl+0x16c/0x1f0 [ 160.571621][ T7168] should_fail_ex+0x512/0x640 [ 160.571643][ T7168] ? __kmalloc_cache_noprof+0x5f/0x800 [ 160.571672][ T7168] should_failslab+0xc2/0x120 [ 160.571694][ T7168] __kmalloc_cache_noprof+0x80/0x800 [ 160.571720][ T7168] ? alloc_fs_context+0x57/0xf50 [ 160.571741][ T7168] ? alloc_fs_context+0x57/0xf50 [ 160.571757][ T7168] alloc_fs_context+0x57/0xf50 [ 160.571778][ T7168] path_mount+0xe21/0x23a0 [ 160.571794][ T7168] ? rcu_is_watching+0x12/0xc0 [ 160.571814][ T7168] ? __pfx_path_mount+0x10/0x10 [ 160.571830][ T7168] ? kmem_cache_free+0x2d8/0x770 [ 160.571847][ T7168] ? putname+0xf5/0x1a0 [ 160.571875][ T7168] ? putname+0xf5/0x1a0 [ 160.571896][ T7168] ? putname+0xf5/0x1a0 [ 160.571921][ T7168] ? __x64_sys_mount+0x293/0x310 [ 160.571935][ T7168] __x64_sys_mount+0x293/0x310 [ 160.571950][ T7168] ? __pfx___x64_sys_mount+0x10/0x10 [ 160.571973][ T7168] do_syscall_64+0xcd/0xf80 [ 160.571993][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.572011][ T7168] RIP: 0033:0x7fb2ccf8f749 [ 160.572026][ T7168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.572041][ T7168] RSP: 002b:00007fb2cde05038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 160.572059][ T7168] RAX: ffffffffffffffda RBX: 00007fb2cd1e5fa0 RCX: 00007fb2ccf8f749 [ 160.572069][ T7168] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 160.572079][ T7168] RBP: 00007fb2cde05090 R08: 0000200000000140 R09: 0000000000000000 [ 160.572089][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.572099][ T7168] R13: 00007fb2cd1e6038 R14: 00007fb2cd1e5fa0 R15: 00007ffcaa2074c8 [ 160.572122][ T7168] [ 161.401593][ T7170] random: crng reseeded on system resumption [ 161.545461][ T5927] usb 2-1: USB disconnect, device number 10 [ 161.945524][ T5924] hdpvr 6-1:0.0: device init failed [ 161.964302][ T5924] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 162.037887][ T5924] usb 6-1: USB disconnect, device number 2 [ 162.080059][ T30] audit: type=1400 audit(1765700333.255:420): avc: denied { connect } for pid=7159 comm="syz.6.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 162.536749][ T5927] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 162.822460][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 162.845905][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.883072][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.905849][ T5927] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 163.058564][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.093726][ T5927] usb 3-1: config 0 descriptor?? [ 163.128176][ T7202] IPVS: lc: FWM 3 0x00000003 - no destination available [ 163.166982][ T7202] ucma_write: process 270 (syz.4.324) changed security contexts after opening file descriptor, this is not allowed. [ 163.176510][ T7204] fuseblk: Bad value for 'rootmode' [ 164.134239][ T7221] Bluetooth: Invalid esc byte 0xcb [ 164.159306][ T50] Bluetooth: (null): Invalid header checksum [ 165.233625][ T30] audit: type=1400 audit(1765700336.415:421): avc: denied { read } for pid=7238 comm="syz.1.333" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 165.263864][ T30] audit: type=1400 audit(1765700336.445:422): avc: denied { ioctl } for pid=7238 comm="syz.1.333" path="/dev/sg0" dev="devtmpfs" ino=755 ioctlcmd=0x227d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 165.605888][ T7232] orangefs_mount: mount request failed with -4 [ 165.700561][ T5927] usbhid 3-1:0.0: can't add hid device: -71 [ 165.707056][ T5927] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 166.049530][ T5927] usb 3-1: USB disconnect, device number 12 [ 166.275462][ T7261] netlink: 24 bytes leftover after parsing attributes in process `syz.5.338'. [ 166.419434][ T30] audit: type=1400 audit(1765700337.595:423): avc: denied { ioctl } for pid=7257 comm="syz.1.339" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.436696][ T7261] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7261 comm=syz.5.338 [ 166.636141][ T7270] netlink: 'syz.1.341': attribute type 9 has an invalid length. [ 166.644132][ T7270] netlink: 'syz.1.341': attribute type 11 has an invalid length. [ 166.921741][ T7270] netlink: 'syz.1.341': attribute type 12 has an invalid length. [ 166.929517][ T7270] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.341'. [ 166.945524][ T7277] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20002 [ 168.113839][ T7292] can0: slcan on ttyS3. [ 168.514114][ T7306] Bluetooth: MGMT ver 1.23 [ 168.542684][ T7294] can0 (unregistered): slcan off ttyS3. [ 168.970107][ T30] audit: type=1400 audit(1765700340.145:424): avc: denied { mount } for pid=7314 comm="syz.1.354" name="/" dev="ramfs" ino=16389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 170.095523][ T7328] FAULT_INJECTION: forcing a failure. [ 170.095523][ T7328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.108637][ T7328] CPU: 0 UID: 0 PID: 7328 Comm: syz.2.357 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.108655][ T7328] Tainted: [L]=SOFTLOCKUP [ 170.108659][ T7328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.108665][ T7328] Call Trace: [ 170.108669][ T7328] [ 170.108673][ T7328] dump_stack_lvl+0x16c/0x1f0 [ 170.108688][ T7328] should_fail_ex+0x512/0x640 [ 170.108704][ T7328] _copy_from_user+0x2e/0xd0 [ 170.108717][ T7328] memdup_user+0x6b/0xe0 [ 170.108728][ T7328] strndup_user+0x78/0xe0 [ 170.108739][ T7328] __do_sys_fsconfig+0x86e/0xbe0 [ 170.108752][ T7328] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 170.108763][ T7328] ? fput+0x70/0xf0 [ 170.108784][ T7328] do_syscall_64+0xcd/0xf80 [ 170.108797][ T7328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.108807][ T7328] RIP: 0033:0x7fb2ccf8f749 [ 170.108816][ T7328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.108826][ T7328] RSP: 002b:00007fb2cdde4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 170.108837][ T7328] RAX: ffffffffffffffda RBX: 00007fb2cd1e6090 RCX: 00007fb2ccf8f749 [ 170.108844][ T7328] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 0000000000000006 [ 170.108849][ T7328] RBP: 00007fb2cdde4090 R08: 0000000000000000 R09: 0000000000000000 [ 170.108855][ T7328] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 170.108861][ T7328] R13: 00007fb2cd1e6128 R14: 00007fb2cd1e6090 R15: 00007ffcaa2074c8 [ 170.108874][ T7328] [ 170.916370][ T30] audit: type=1400 audit(1765700342.095:425): avc: denied { write } for pid=7338 comm="syz.2.360" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 170.945482][ T7340] FAULT_INJECTION: forcing a failure. [ 170.945482][ T7340] name failslab, interval 1, probability 0, space 0, times 0 [ 170.996596][ T7340] CPU: 1 UID: 0 PID: 7340 Comm: syz.2.360 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.996626][ T7340] Tainted: [L]=SOFTLOCKUP [ 170.996632][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.996642][ T7340] Call Trace: [ 170.996648][ T7340] [ 170.996655][ T7340] dump_stack_lvl+0x16c/0x1f0 [ 170.996678][ T7340] should_fail_ex+0x512/0x640 [ 170.996699][ T7340] ? __kmalloc_noprof+0xca/0x910 [ 170.996727][ T7340] should_failslab+0xc2/0x120 [ 170.996750][ T7340] __kmalloc_noprof+0xeb/0x910 [ 170.996774][ T7340] ? vkms_crtc_atomic_check+0x3c5/0x880 [ 170.996804][ T7340] ? vkms_crtc_atomic_check+0x3c5/0x880 [ 170.996826][ T7340] vkms_crtc_atomic_check+0x3c5/0x880 [ 170.996856][ T7340] ? __pfx_vkms_crtc_atomic_check+0x10/0x10 [ 170.996879][ T7340] drm_atomic_helper_check_planes+0x4dd/0x900 [ 170.996907][ T7340] drm_atomic_helper_check+0xae/0x190 [ 170.996929][ T7340] vkms_atomic_check+0x1d9/0x250 [ 170.996949][ T7340] ? __pfx_vkms_atomic_check+0x10/0x10 [ 170.996970][ T7340] drm_atomic_check_only+0x19ca/0x3160 [ 170.997004][ T7340] drm_atomic_commit+0x136/0x300 [ 170.997024][ T7340] ? __pfx_drm_atomic_commit+0x10/0x10 [ 170.997043][ T7340] ? __pfx___drm_printfn_info+0x10/0x10 [ 170.997071][ T7340] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 170.997103][ T7340] ? drm_event_reserve_init+0x1fa/0x280 [ 170.997128][ T7340] drm_mode_atomic_ioctl+0x1cbc/0x2640 [ 170.997165][ T7340] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 170.997187][ T7340] ? __lock_acquire+0x436/0x2890 [ 170.997208][ T7340] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 170.997246][ T7340] ? drm_is_current_master+0x2c/0x40 [ 170.997270][ T7340] ? do_raw_spin_unlock+0x172/0x230 [ 170.997296][ T7340] drm_ioctl_kernel+0x1f4/0x3e0 [ 170.997314][ T7340] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 170.997337][ T7340] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 170.997363][ T7340] drm_ioctl+0x5c9/0xc30 [ 170.997386][ T7340] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 170.997409][ T7340] ? __pfx_drm_ioctl+0x10/0x10 [ 170.997438][ T7340] ? selinux_file_ioctl+0x180/0x270 [ 170.997456][ T7340] ? selinux_file_ioctl+0xb4/0x270 [ 170.997475][ T7340] ? __pfx_drm_ioctl+0x10/0x10 [ 170.997495][ T7340] __x64_sys_ioctl+0x18e/0x210 [ 170.997517][ T7340] do_syscall_64+0xcd/0xf80 [ 170.997536][ T7340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.997554][ T7340] RIP: 0033:0x7fb2ccf8f749 [ 170.997567][ T7340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.997584][ T7340] RSP: 002b:00007fb2cde05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.997601][ T7340] RAX: ffffffffffffffda RBX: 00007fb2cd1e5fa0 RCX: 00007fb2ccf8f749 [ 170.997611][ T7340] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000c [ 170.997625][ T7340] RBP: 00007fb2cde05090 R08: 0000000000000000 R09: 0000000000000000 [ 170.997635][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.997644][ T7340] R13: 00007fb2cd1e6038 R14: 00007fb2cd1e5fa0 R15: 00007ffcaa2074c8 [ 170.997670][ T7340] [ 172.306098][ T7360] No control pipe specified [ 172.355470][ T7360] netlink: 60 bytes leftover after parsing attributes in process `syz.4.365'. [ 172.609429][ T7363] faux_driver vgem: [drm] Unknown color mode 2204; guessing buffer size. [ 172.619694][ T30] audit: type=1400 audit(1765700343.805:426): avc: denied { map } for pid=7362 comm="syz.2.367" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 172.802576][ T30] audit: type=1400 audit(1765700343.805:427): avc: denied { execute } for pid=7362 comm="syz.2.367" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 172.844719][ T30] audit: type=1400 audit(1765700344.025:428): avc: denied { mounton } for pid=7362 comm="syz.2.367" path="/85/file0" dev="tmpfs" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 172.993256][ T30] audit: type=1400 audit(1765700344.125:429): avc: denied { mount } for pid=7365 comm="syz.5.368" name="/" dev="hugetlbfs" ino=16275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 173.373384][ T7375] 9p: Bad value for 'wfdno' [ 173.385727][ T7374] 9p: Bad value for 'wfdno' [ 173.413544][ T30] audit: type=1400 audit(1765700344.595:430): avc: denied { bind } for pid=7376 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 173.465788][ T30] audit: type=1400 audit(1765700344.595:431): avc: denied { listen } for pid=7376 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 173.508513][ T30] audit: type=1400 audit(1765700344.595:432): avc: denied { accept } for pid=7376 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 174.320802][ T7393] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 174.459565][ T5939] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 174.481276][ T5895] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 174.895829][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.931131][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.961526][ T5895] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 174.991247][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.101357][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 175.111470][ T5895] usb 7-1: config 0 descriptor?? [ 175.111578][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.131152][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.144486][ T5939] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 175.533174][ T5939] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 175.559862][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.704586][ T5895] usbhid 7-1:0.0: can't add hid device: -71 [ 175.712280][ T5895] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 175.942602][ T5895] usb 7-1: USB disconnect, device number 2 [ 175.951841][ T5939] usb 6-1: config 0 descriptor?? [ 176.006541][ T7408] bridge: RTM_NEWNEIGH with invalid ether address [ 176.014780][ T7408] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 176.105834][ T7410] netlink: 444 bytes leftover after parsing attributes in process `syz.1.381'. [ 176.138407][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 176.192752][ T5939] usbhid 6-1:0.0: can't add hid device: -71 [ 176.205022][ T5939] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 176.231495][ T5939] usb 6-1: USB disconnect, device number 3 [ 176.420264][ T7419] netlink: 128 bytes leftover after parsing attributes in process `syz.5.382'. [ 176.429488][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.382'. [ 177.253867][ T30] audit: type=1400 audit(1765700348.435:433): avc: denied { ioctl } for pid=7428 comm="syz.1.386" path="socket:[17409]" dev="sockfs" ino=17409 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.393519][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 177.999374][ T5874] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 178.009085][ T5939] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 178.541160][ T5939] usb 5-1: Using ep0 maxpacket: 8 [ 178.551034][ T5874] usb 2-1: not running at top speed; connect to a high speed hub [ 178.565365][ T5939] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 178.577897][ T5874] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 178.589291][ T5939] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.605677][ T5874] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 178.619670][ T5939] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 178.635739][ T5874] usb 2-1: config 1 interface 0 has no altsetting 0 [ 178.644830][ T5939] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.662771][ T5939] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.685724][ T5939] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 178.702033][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.543666][ T153] Bluetooth: hci2: Frame reassembly failed (-84) [ 179.550313][ T153] Bluetooth: hci2: Frame reassembly failed (-84) [ 179.710753][ T7467] FAULT_INJECTION: forcing a failure. [ 179.710753][ T7467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.761282][ T7467] CPU: 1 UID: 0 PID: 7467 Comm: syz.5.395 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.761311][ T7467] Tainted: [L]=SOFTLOCKUP [ 179.761317][ T7467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.761327][ T7467] Call Trace: [ 179.761333][ T7467] [ 179.761340][ T7467] dump_stack_lvl+0x16c/0x1f0 [ 179.761365][ T7467] should_fail_ex+0x512/0x640 [ 179.761391][ T7467] _copy_to_user+0x32/0xd0 [ 179.761413][ T7467] simple_read_from_buffer+0xcb/0x170 [ 179.761438][ T7467] proc_fail_nth_read+0x197/0x240 [ 179.761456][ T7467] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.761480][ T7467] ? rw_verify_area+0xcf/0x6c0 [ 179.761499][ T7467] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.761515][ T7467] vfs_read+0x1e4/0xcf0 [ 179.761537][ T7467] ? __pfx___mutex_lock+0x10/0x10 [ 179.761558][ T7467] ? __pfx_vfs_read+0x10/0x10 [ 179.761584][ T7467] ? __fget_files+0x20e/0x3c0 [ 179.761615][ T7467] ksys_read+0x12a/0x250 [ 179.761634][ T7467] ? __pfx_ksys_read+0x10/0x10 [ 179.761655][ T7467] ? fput+0x70/0xf0 [ 179.761683][ T7467] do_syscall_64+0xcd/0xf80 [ 179.761702][ T7467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.761718][ T7467] RIP: 0033:0x7f6cd158e15c [ 179.761732][ T7467] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 179.761748][ T7467] RSP: 002b:00007f6cd2409030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.761765][ T7467] RAX: ffffffffffffffda RBX: 00007f6cd17e5fa0 RCX: 00007f6cd158e15c [ 179.761776][ T7467] RDX: 000000000000000f RSI: 00007f6cd24090a0 RDI: 0000000000000004 [ 179.761786][ T7467] RBP: 00007f6cd2409090 R08: 0000000000000000 R09: 0000000000000000 [ 179.761795][ T7467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.761805][ T7467] R13: 00007f6cd17e6038 R14: 00007f6cd17e5fa0 R15: 00007ffe68356c88 [ 179.761828][ T7467] [ 180.231337][ T5895] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 180.405293][ T5874] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.40 [ 180.420398][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.490801][ T5874] usb 2-1: Product: 㭴༳斗㊝貮칲룝퐲萛狼닢쵗ጾ¢ꗞᾮ咫㍙㼔⭸̇嚙顀컦㈓๞麐ἦ❐赎峰ꙻ䏚禬䗻빕辯헸㤮瓿╘툂旐馾샰⻴ﾞ㩂꟣Ꙩ븺鏣ഀ풓鈃᨜ﱓꇪ鳂핦ȗã颖羱Ợ̭腀ዥ੿ߤ鏿k쌒窒 [ 180.533348][ T5895] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 180.591705][ T5874] usb 2-1: can't set config #1, error -71 [ 180.599203][ T5895] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 180.599452][ T5874] usb 2-1: USB disconnect, device number 11 [ 180.627020][ T5895] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 180.630821][ T30] audit: type=1400 audit(1765700351.805:434): avc: denied { create } for pid=7476 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 180.751356][ T5895] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 180.781193][ T5895] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 180.790308][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.321791][ T7171] usb 5-1: USB disconnect, device number 19 [ 181.409826][ T30] audit: type=1400 audit(1765700352.585:435): avc: denied { ioctl } for pid=7485 comm="syz.4.400" path="socket:[17618]" dev="sockfs" ino=17618 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 181.561409][ T5827] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 181.589961][ T5895] ath6kl: Failed to submit usb control message: -71 [ 181.602698][ T5895] ath6kl: unable to send the bmi data to the device: -71 [ 181.609752][ T5895] ath6kl: Unable to send get target info: -71 [ 181.673106][ T5895] ath6kl: Failed to init ath6kl core: -71 [ 181.831817][ T5895] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 182.061091][ T5895] usb 6-1: USB disconnect, device number 4 [ 182.251510][ T30] audit: type=1400 audit(1765700353.415:436): avc: denied { firmware_load } for pid=7488 comm="syz.4.402" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 182.685063][ T7499] nfs: Unknown parameter 'fuse' [ 182.802638][ T7493] syz.4.402 (7493) used greatest stack depth: 19688 bytes left [ 183.455765][ T30] audit: type=1400 audit(1765700354.595:437): avc: denied { listen } for pid=7514 comm="syz.6.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.511234][ T848] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 183.799447][ T848] usb 6-1: Using ep0 maxpacket: 16 [ 183.883642][ T848] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.966386][ T848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.027323][ T848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 184.037181][ T848] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 184.052262][ T848] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.085922][ T848] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 184.095241][ T848] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 184.105375][ T848] usb 6-1: Manufacturer: syz [ 184.213405][ T848] usb 6-1: config 0 descriptor?? [ 184.343628][ T5874] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 184.691868][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 184.809548][ T5874] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 184.819325][ T5874] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.829153][ T5874] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.858830][ T5874] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.878540][ T5874] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.901171][ T848] rc_core: IR keymap rc-hauppauge not found [ 184.908290][ T5874] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.919343][ T848] Registered IR keymap rc-empty [ 184.934405][ T848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 184.942446][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.971211][ T848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 185.043443][ T848] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 185.102185][ T7543] SELinux: Context is not valid (left unmapped). [ 185.155919][ T30] audit: type=1400 audit(1765700356.335:438): avc: denied { mounton } for pid=7507 comm="syz.5.408" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 185.189934][ T7543] affs: No valid root block on device nullb0 [ 185.212721][ T848] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 185.251947][ T5895] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 185.267556][ T848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 185.321258][ T848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 185.361657][ T848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 185.391190][ T848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 185.411591][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 185.444301][ T5895] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 185.455854][ T5895] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 185.466464][ T848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 185.501201][ T848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 185.510952][ T5895] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.535681][ T848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 185.595775][ T5895] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.618479][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.631421][ T848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 185.691275][ T848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 185.706935][ T5895] usbtmc 2-1:16.0: bulk endpoints not found [ 185.734873][ T848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 185.735849][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 185.742815][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 185.792754][ T848] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 185.848620][ T848] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 186.710383][ T5895] usb 6-1: USB disconnect, device number 5 [ 187.028770][ T7569] netlink: 'syz.6.420': attribute type 2 has an invalid length. [ 187.065453][ T7569] : entered promiscuous mode [ 187.072591][ T5874] usb 3-1: USB disconnect, device number 13 [ 187.295203][ T43] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 187.320727][ T848] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 187.339445][ T5895] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 187.409770][ T43] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.502583][ T848] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 187.511284][ T848] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 187.523178][ T848] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 187.535200][ T848] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 187.552605][ T848] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 187.567102][ T848] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 187.579660][ T848] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 187.581128][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 187.588940][ T848] usb 5-1: Product: syz [ 187.597521][ T848] usb 5-1: Manufacturer: syz [ 187.598624][ T5895] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 187.613108][ T848] cdc_wdm 5-1:1.0: skipping garbage [ 187.618379][ T848] cdc_wdm 5-1:1.0: skipping garbage [ 187.625858][ T848] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 187.632287][ T848] cdc_wdm 5-1:1.0: Unknown control protocol [ 187.639933][ T5895] usb 6-1: config 0 has no interface number 0 [ 187.658525][ T5895] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 187.676872][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.700918][ T5895] usb 6-1: Product: syz [ 187.713391][ T5895] usb 6-1: Manufacturer: syz [ 187.741861][ T5895] usb 6-1: SerialNumber: syz [ 187.765451][ T5895] usb 6-1: config 0 descriptor?? [ 187.835256][ T5895] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 187.997772][ T6474] usb 2-1: USB disconnect, device number 12 [ 188.066802][ T848] usb 5-1: USB disconnect, device number 20 [ 188.092066][ T7578] netlink: 48 bytes leftover after parsing attributes in process `syz.1.424'. [ 188.126362][ T5895] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 188.159445][ T5895] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 188.177695][ T30] audit: type=1400 audit(1765700359.355:439): avc: denied { mount } for pid=7577 comm="syz.1.424" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 188.178646][ T7579] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 188.208699][ T30] audit: type=1400 audit(1765700359.355:440): avc: denied { mounton } for pid=7577 comm="syz.1.424" path="/92/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.264664][ T7578] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 188.359680][ T30] audit: type=1400 audit(1765700359.535:441): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 188.520183][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 188.530527][ T5895] usb 6-1: USB disconnect, device number 6 [ 188.539215][ T5895] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 188.553335][ T5895] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 188.570358][ T5895] quatech2 6-1:0.51: device disconnected [ 188.943467][ T7589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.428'. [ 189.091268][ T848] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 189.364832][ T848] usb 2-1: Using ep0 maxpacket: 16 [ 189.510753][ T848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.617639][ T848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.632810][ T7598] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 189.644958][ T7599] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 189.659495][ T7599] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 189.730254][ T848] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.749266][ T7598] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 189.792554][ T7599] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 189.805647][ T7599] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 189.820469][ T848] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 189.835822][ T7599] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 189.856702][ T7598] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 189.873913][ T7598] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 189.919862][ T848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.963145][ T7598] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 190.038406][ T7599] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.060049][ T7598] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 190.194931][ T848] usb 2-1: config 0 descriptor?? [ 190.211246][ T7599] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 190.261996][ T7599] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 190.292754][ T7598] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.292897][ T7599] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 190.308110][ T7598] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 190.371888][ T7604] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 190.371888][ T7604] program syz.2.431 not setting count and/or reply_len properly [ 190.414481][ T7610] netlink: 'syz.4.433': attribute type 29 has an invalid length. [ 190.471700][ T7610] netlink: 'syz.4.433': attribute type 29 has an invalid length. [ 190.480643][ T7599] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 190.481426][ T7610] netlink: 500 bytes leftover after parsing attributes in process `syz.4.433'. [ 190.532121][ T7599] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 190.553447][ T7610] unsupported nla_type 58 [ 190.592244][ T7616] binder: 7615:7616 ioctl c0306201 0 returned -14 [ 190.642210][ T7598] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 190.651748][ T7598] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 190.670420][ T848] microsoft 0003:045E:07DA.0006: unknown main item tag 0x6 [ 190.691762][ T848] microsoft 0003:045E:07DA.0006: reserved main item tag 0xe [ 190.699799][ T848] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 190.730114][ T848] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input11 [ 190.797626][ T848] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 190.887169][ T848] usb 2-1: USB disconnect, device number 13 [ 191.178409][ T5895] IPVS: starting estimator thread 0... [ 191.208095][ T30] audit: type=1400 audit(1765700362.385:442): avc: denied { listen } for pid=7623 comm="syz.5.436" lport=38161 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.237794][ T7627] IPVS: sh: FWM 3 0x00000003 - no destination available [ 191.272167][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 191.272724][ T7629] IPVS: sh: FWM 3 0x00000003 - no destination available [ 191.291138][ T7630] IPVS: using max 58 ests per chain, 139200 per kthread [ 191.323077][ T30] audit: type=1400 audit(1765700362.385:443): avc: denied { accept } for pid=7623 comm="syz.5.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.371209][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 192.722542][ T30] audit: type=1400 audit(1765700363.535:444): avc: denied { write } for pid=7635 comm="syz.2.440" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 193.097410][ T7644] netlink: 'syz.6.442': attribute type 1 has an invalid length. [ 193.131555][ T7644] netlink: 224 bytes leftover after parsing attributes in process `syz.6.442'. [ 194.133887][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.749102][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.445'. [ 194.871497][ T7662] process 'syz.2.441' launched './file2' with NULL argv: empty string added [ 194.962646][ T30] audit: type=1400 audit(1765700366.135:445): avc: denied { execute_no_trans } for pid=7658 comm="syz.2.441" path="/98/file2" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 195.158761][ T7675] nfs: Unknown parameter 'fuse' [ 195.768659][ T7681] binder: 7679:7681 ioctl c0306201 0 returned -14 [ 195.928683][ T7683] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.955265][ T7687] binder: 7686:7687 ioctl c0306201 0 returned -14 [ 196.441852][ T30] audit: type=1400 audit(1765700367.565:446): avc: denied { write } for pid=7682 comm="syz.5.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 197.041459][ T5874] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 197.105098][ T7700] input: syz1 as /devices/virtual/input/input12 [ 197.555844][ T5874] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 27, changing to 8 [ 197.633149][ T5874] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.642451][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.650980][ T5874] usb 2-1: Product: syz [ 197.655907][ T5874] usb 2-1: Manufacturer: syz [ 197.663172][ T5874] usb 2-1: SerialNumber: syz [ 199.452730][ T5874] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 199.459316][ T5874] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 199.680511][ T5874] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 200.512016][ T30] audit: type=1400 audit(1765700371.695:447): avc: denied { setopt } for pid=7724 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.831697][ T5874] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 200.848465][ T30] audit: type=1400 audit(1765700372.035:448): avc: denied { getopt } for pid=7729 comm="syz.6.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 200.889008][ T5874] usb 2-1: USB disconnect, device number 14 [ 200.901710][ T5874] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 201.189493][ T5925] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 201.359661][ T5925] usb 5-1: config 0 has an invalid interface number: 137 but max is 0 [ 201.395709][ T5925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.415557][ T5925] usb 5-1: config 0 has no interface number 0 [ 201.426706][ T5925] usb 5-1: too many endpoints for config 0 interface 137 altsetting 42: 254, using maximum allowed: 30 [ 201.443788][ T7739] binder: 7738:7739 ioctl c0306201 0 returned -14 [ 201.462406][ T5925] usb 5-1: config 0 interface 137 altsetting 42 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 201.493112][ T5925] usb 5-1: config 0 interface 137 has no altsetting 0 [ 201.500738][ T5925] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 201.520225][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.531151][ T5925] usb 5-1: config 0 descriptor?? [ 201.616160][ T30] audit: type=1400 audit(1765700372.795:449): avc: denied { setattr } for pid=7741 comm="syz.1.466" name="CAN_J1939" dev="sockfs" ino=18331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.722084][ T30] audit: type=1400 audit(1765700372.895:450): avc: denied { lock } for pid=7741 comm="syz.1.466" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 201.757812][ T5925] usb 5-1: string descriptor 0 read error: -71 [ 201.771213][ T5925] usb 5-1: USB disconnect, device number 21 [ 202.867269][ T30] audit: type=1400 audit(1765700374.035:451): avc: denied { append } for pid=7771 comm="syz.4.472" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 204.365380][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 204.775774][ T7782] kAFS: No cell specified [ 204.934321][ T30] audit: type=1400 audit(1765700376.105:452): avc: denied { map } for pid=7781 comm="syz.4.475" path="socket:[18372]" dev="sockfs" ino=18372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 205.788526][ T30] audit: type=1326 audit(1765700376.965:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd158f749 code=0x7ffc0000 [ 205.813660][ T30] audit: type=1326 audit(1765700376.965:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd158f749 code=0x7ffc0000 [ 205.886229][ T30] audit: type=1326 audit(1765700376.965:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd158f749 code=0x7ffc0000 [ 205.938785][ T30] audit: type=1326 audit(1765700376.965:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd158f749 code=0x7ffc0000 [ 205.962974][ T30] audit: type=1326 audit(1765700376.965:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f6cd158f749 code=0x7ffc0000 [ 205.975497][ T7793] [U] ^@ [ 205.987299][ T30] audit: type=1326 audit(1765700376.965:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cd158f749 code=0x7ffc0000 [ 206.164372][ T5925] IPVS: starting estimator thread 0... [ 206.201247][ T848] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 206.251138][ T7801] IPVS: using max 42 ests per chain, 100800 per kthread [ 206.361422][ T848] usb 2-1: Using ep0 maxpacket: 16 [ 206.370951][ T848] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 206.378880][ T848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 206.390516][ T848] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 206.400735][ T848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.411669][ T848] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 206.430714][ T848] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 206.440063][ T848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.448432][ T848] usb 2-1: Product: syz [ 206.452899][ T848] usb 2-1: Manufacturer: syz [ 206.458172][ T848] usb 2-1: SerialNumber: syz [ 206.467959][ T848] usb 2-1: config 0 descriptor?? [ 206.475525][ T7792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 206.631618][ T848] mcba_usb 2-1:0.0 can0: couldn't setup read URBs [ 206.638190][ T848] mcba_usb 2-1:0.0 can0: couldn't start device: -90 [ 206.646071][ T7803] netlink: 'syz.5.482': attribute type 4 has an invalid length. [ 206.653770][ T7803] netlink: 17 bytes leftover after parsing attributes in process `syz.5.482'. [ 206.685707][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.694460][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.704496][ T848] mcba_usb 2-1:0.0: probe with driver mcba_usb failed with error -90 [ 206.941286][ T5895] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 207.131574][ T7657] usb 2-1: USB disconnect, device number 15 [ 207.140982][ T5895] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 207.183210][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.214483][ T5895] usb 6-1: Product: syz [ 207.220018][ T5895] usb 6-1: Manufacturer: syz [ 207.225555][ T5895] usb 6-1: SerialNumber: syz [ 207.284355][ T7812] bridge1: entered promiscuous mode [ 207.289571][ T7812] bridge1: entered allmulticast mode [ 207.330596][ T7812] team0: Port device bridge1 added [ 207.673272][ T7813] Invalid ELF section header size [ 207.687139][ T30] kauditd_printk_skb: 466 callbacks suppressed [ 207.687153][ T30] audit: type=1400 audit(1765700378.855:925): avc: denied { module_load } for pid=7811 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 207.723082][ T5895] rtl8150 6-1:1.0: couldn't reset the device [ 207.723325][ T5895] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 207.728483][ T5895] usb 6-1: USB disconnect, device number 7 [ 207.927391][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 208.753982][ T6108] Bluetooth: hci2: Frame reassembly failed (-84) [ 208.760424][ T1145] Bluetooth: hci2: Frame reassembly failed (-84) [ 209.988683][ T7855] netlink: 112 bytes leftover after parsing attributes in process `syz.1.496'. [ 210.790415][ T5827] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 211.151297][ T5895] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 211.321331][ T5895] usb 7-1: Using ep0 maxpacket: 16 [ 211.408457][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.474893][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.499173][ T5895] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 211.532776][ T7880] tipc: Started in network mode [ 211.538003][ T7880] tipc: Node identity 325cf22201b7, cluster identity 4711 [ 211.576655][ T7880] tipc: Enabled bearer , priority 0 [ 211.591251][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.602500][ T5895] usb 7-1: config 0 descriptor?? [ 211.610673][ T7879] tipc: Resetting bearer [ 211.807883][ T7886] netlink: 'syz.4.506': attribute type 10 has an invalid length. [ 211.865273][ T7882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.027944][ T5895] kye 0003:0458:5016.0007: control desc unexpectedly large [ 212.040406][ T5895] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0007/input/input15 [ 212.125953][ T5895] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0007/input/input16 [ 212.225165][ T5895] kye 0003:0458:5016.0007: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 212.543715][ T30] audit: type=1400 audit(1765700383.725:926): avc: denied { setopt } for pid=7868 comm="syz.6.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 212.577526][ T30] audit: type=1400 audit(1765700383.725:927): avc: denied { map } for pid=7868 comm="syz.6.501" path="socket:[19626]" dev="sockfs" ino=19626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 212.663382][ T30] audit: type=1400 audit(1765700383.725:928): avc: denied { read accept } for pid=7868 comm="syz.6.501" path="socket:[19626]" dev="sockfs" ino=19626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 212.868530][ T30] audit: type=1400 audit(1765700383.795:929): avc: denied { shutdown } for pid=7887 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.144210][ C0] kye 0003:0458:5016.0007: usb_submit_urb(ctrl) failed: -1 [ 213.570932][ T7879] tipc: Disabling bearer [ 213.583568][ T7886] syz_tun: entered promiscuous mode [ 213.594735][ T7895] slcan: can't register candev [ 213.602497][ T5895] tipc: Node number set to 871100962 [ 213.972614][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 214.115108][ T5925] usb 7-1: USB disconnect, device number 3 [ 214.129815][ T30] audit: type=1326 audit(1765700385.305:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.6.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584938f749 code=0x7ffc0000 [ 214.171752][ T30] audit: type=1326 audit(1765700385.305:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.6.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f584938f749 code=0x7ffc0000 [ 214.198271][ T30] audit: type=1400 audit(1765700385.305:932): avc: denied { kexec_image_load } for pid=7912 comm="syz.6.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 214.279136][ T7918] loop9: detected capacity change from 0 to 7 [ 214.290759][ T7918] Dev loop9: unable to read RDB block 7 [ 214.297248][ T7918] loop9: AHDI p1 p2 [ 214.301358][ T7918] loop9: partition table partially beyond EOD, truncated [ 214.308502][ T7918] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 214.316130][ T30] audit: type=1326 audit(1765700385.305:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.6.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584938f749 code=0x7ffc0000 [ 214.374238][ T30] audit: type=1326 audit(1765700385.305:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.6.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584938f749 code=0x7ffc0000 [ 214.409878][ T30] audit: type=1326 audit(1765700385.305:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.6.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f584938f749 code=0x7ffc0000 [ 214.436111][ T30] audit: type=1326 audit(1765700385.305:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.6.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584938f749 code=0x7ffc0000 [ 214.468431][ T30] audit: type=1326 audit(1765700385.305:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.6.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584938f749 code=0x7ffc0000 [ 214.522972][ T30] audit: type=1326 audit(1765700385.305:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7912 comm="syz.6.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f584938f749 code=0x7ffc0000 [ 214.654113][ T7907] orangefs_mount: mount request failed with -4 [ 215.266375][ T7933] netlink: 16 bytes leftover after parsing attributes in process `syz.6.519'. [ 215.280763][ T7933] netlink: 'syz.6.519': attribute type 10 has an invalid length. [ 215.300683][ T7933] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 217.174367][ T7954] netlink: 72 bytes leftover after parsing attributes in process `syz.6.525'. [ 218.312229][ T7969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.529'. [ 218.447865][ T7964] orangefs_mount: mount request failed with -4 [ 218.555397][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 218.555408][ T30] audit: type=1400 audit(1765700389.735:966): avc: denied { bind } for pid=7971 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 218.841207][ T7983] FAULT_INJECTION: forcing a failure. [ 218.841207][ T7983] name failslab, interval 1, probability 0, space 0, times 0 [ 218.854270][ T7983] CPU: 1 UID: 0 PID: 7983 Comm: syz.6.533 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.854289][ T7983] Tainted: [L]=SOFTLOCKUP [ 218.854293][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.854298][ T7983] Call Trace: [ 218.854303][ T7983] [ 218.854307][ T7983] dump_stack_lvl+0x16c/0x1f0 [ 218.854322][ T7983] should_fail_ex+0x512/0x640 [ 218.854337][ T7983] ? __kmalloc_noprof+0xca/0x910 [ 218.854356][ T7983] should_failslab+0xc2/0x120 [ 218.854375][ T7983] __kmalloc_noprof+0xeb/0x910 [ 218.854390][ T7983] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 218.854405][ T7983] ? sock_kmalloc+0x111/0x170 [ 218.854418][ T7983] ? sock_kmalloc+0x111/0x170 [ 218.854426][ T7983] sock_kmalloc+0x111/0x170 [ 218.854437][ T7983] af_alg_sendmsg+0x129b/0x2980 [ 218.854459][ T7983] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 218.854477][ T7983] ? __import_iovec+0x1dd/0x650 [ 218.854490][ T7983] ? __might_fault+0xe3/0x190 [ 218.854499][ T7983] ? __might_fault+0x13b/0x190 [ 218.854512][ T7983] ____sys_sendmsg+0xa5d/0xc30 [ 218.854523][ T7983] ? copy_msghdr_from_user+0x10a/0x160 [ 218.854538][ T7983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.854550][ T7983] ? __pfx__kstrtoull+0x10/0x10 [ 218.854569][ T7983] ___sys_sendmsg+0x134/0x1d0 [ 218.854584][ T7983] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.854605][ T7983] ? find_held_lock+0x2b/0x80 [ 218.854630][ T7983] __sys_sendmmsg+0x200/0x420 [ 218.854647][ T7983] ? __pfx___sys_sendmmsg+0x10/0x10 [ 218.854666][ T7983] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 218.854683][ T7983] ? fput+0x70/0xf0 [ 218.854699][ T7983] ? ksys_write+0x1ac/0x250 [ 218.854711][ T7983] ? __pfx_ksys_write+0x10/0x10 [ 218.854730][ T7983] __x64_sys_sendmmsg+0x9c/0x100 [ 218.854751][ T7983] ? lockdep_hardirqs_on+0x7c/0x110 [ 218.854767][ T7983] do_syscall_64+0xcd/0xf80 [ 218.854784][ T7983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.854794][ T7983] RIP: 0033:0x7f584938f749 [ 218.854804][ T7983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.854814][ T7983] RSP: 002b:00007f584a2b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 218.854825][ T7983] RAX: ffffffffffffffda RBX: 00007f58495e6090 RCX: 00007f584938f749 [ 218.854832][ T7983] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000006 [ 218.854838][ T7983] RBP: 00007f584a2b3090 R08: 0000000000000000 R09: 0000000000000000 [ 218.854843][ T7983] R10: 0000000024004840 R11: 0000000000000246 R12: 0000000000000001 [ 218.854849][ T7983] R13: 00007f58495e6128 R14: 00007f58495e6090 R15: 00007ffefc500998 [ 218.854863][ T7983] [ 220.814224][ T30] audit: type=1400 audit(1765700391.985:967): avc: denied { create } for pid=8000 comm="syz.5.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 221.352708][ T30] audit: type=1400 audit(1765700392.535:968): avc: denied { watch_mount } for pid=8008 comm="syz.4.541" path="/123" dev="tmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 221.415206][ T30] audit: type=1400 audit(1765700392.575:969): avc: denied { create } for pid=7995 comm="syz.6.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 221.436454][ T8005] netlink: 'syz.6.539': attribute type 10 has an invalid length. [ 221.460864][ T8005] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.470841][ T8005] bond0: (slave team0): Enslaving as an active interface with an up link [ 221.502597][ T8009] xt_TPROXY: Can be used only with -p tcp or -p udp [ 221.523943][ T30] audit: type=1400 audit(1765700392.705:970): avc: denied { setopt } for pid=7995 comm="syz.6.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 221.708673][ T7995] delete_channel: no stack [ 222.418810][ T8029] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 222.538710][ T5924] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 222.677805][ T30] audit: type=1400 audit(1765700393.855:971): avc: denied { watch watch_reads } for pid=8032 comm="syz.6.550" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 222.721386][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 222.745424][ T5924] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 222.763550][ T5924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.785714][ T5924] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.820938][ T5924] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.835918][ T30] audit: type=1400 audit(1765700394.015:972): avc: denied { bind } for pid=8037 comm="syz.6.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 222.860602][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.061126][ T5924] usb 5-1: Product: syz [ 223.065383][ T5924] usb 5-1: Manufacturer: syz [ 223.070023][ T5924] usb 5-1: SerialNumber: syz [ 223.075649][ T8040] use of bytesused == 0 is deprecated and will be removed in the future, [ 223.089926][ T8040] use the actual size instead. [ 223.261117][ T5925] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 223.320039][ T5924] usb 5-1: 0:2 : does not exist [ 223.332598][ T5924] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 224.119270][ T5925] usb 7-1: Using ep0 maxpacket: 32 [ 224.123138][ T5924] usb 5-1: USB disconnect, device number 22 [ 224.141637][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.169451][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.220759][ T5925] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 224.230659][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.263525][ T5925] usb 7-1: config 0 descriptor?? [ 225.180789][ T30] audit: type=1400 audit(1765700396.355:973): avc: denied { listen } for pid=8069 comm="syz.1.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 225.716818][ T8080] FAULT_INJECTION: forcing a failure. [ 225.716818][ T8080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.764599][ T8080] CPU: 1 UID: 0 PID: 8080 Comm: syz.2.556 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.764628][ T8080] Tainted: [L]=SOFTLOCKUP [ 225.764633][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.764642][ T8080] Call Trace: [ 225.764647][ T8080] [ 225.764654][ T8080] dump_stack_lvl+0x16c/0x1f0 [ 225.764675][ T8080] should_fail_ex+0x512/0x640 [ 225.764699][ T8080] _copy_from_user+0x2e/0xd0 [ 225.764718][ T8080] video_usercopy+0xee2/0x16c0 [ 225.764735][ T8080] ? __pfx___video_do_ioctl+0x10/0x10 [ 225.764757][ T8080] ? selinux_kernel_read_file+0xf0/0x120 [ 225.764775][ T8080] ? __pfx_video_usercopy+0x10/0x10 [ 225.764805][ T8080] v4l2_ioctl+0x1bd/0x250 [ 225.764827][ T8080] ? __pfx_v4l2_ioctl+0x10/0x10 [ 225.764848][ T8080] __x64_sys_ioctl+0x18e/0x210 [ 225.764862][ T8080] do_syscall_64+0xcd/0xf80 [ 225.764873][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.764887][ T8080] RIP: 0033:0x7fb2ccf8f749 [ 225.764901][ T8080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.764916][ T8080] RSP: 002b:00007fb2cde05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.764931][ T8080] RAX: ffffffffffffffda RBX: 00007fb2cd1e5fa0 RCX: 00007fb2ccf8f749 [ 225.764941][ T8080] RDX: 0000200000000040 RSI: 00000000c0405602 RDI: 0000000000000003 [ 225.764950][ T8080] RBP: 00007fb2cde05090 R08: 0000000000000000 R09: 0000000000000000 [ 225.764959][ T8080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.764967][ T8080] R13: 00007fb2cd1e6038 R14: 00007fb2cd1e5fa0 R15: 00007ffcaa2074c8 [ 225.764981][ T8080] [ 226.301438][ T5924] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 226.317303][ T5925] usbhid 7-1:0.0: can't add hid device: -71 [ 226.341243][ T5925] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 226.371148][ T5925] usb 7-1: USB disconnect, device number 4 [ 226.661162][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 227.002851][ T5924] usb 5-1: config 1 has an invalid interface number: 214 but max is 0 [ 227.013932][ T5924] usb 5-1: config 1 has no interface number 0 [ 227.020269][ T5924] usb 5-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 227.030510][ T5924] usb 5-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 227.040743][ T5924] usb 5-1: config 1 interface 214 has no altsetting 0 [ 227.041134][ T848] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 227.061411][ T5924] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 227.074632][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.083127][ T5924] usb 5-1: Product: syz [ 227.087337][ T5924] usb 5-1: Manufacturer: syz [ 227.093075][ T5924] usb 5-1: SerialNumber: syz [ 227.100384][ T8085] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 227.109867][ T8085] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 227.136973][ T5924] ums-alauda 5-1:1.214: USB Mass Storage device detected [ 227.158146][ T5924] scsi host1: usb-storage 5-1:1.214 [ 227.181175][ T848] usb 6-1: device descriptor read/64, error -71 [ 227.403941][ T5925] usb 5-1: USB disconnect, device number 23 [ 227.421324][ T848] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 227.484109][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.6.571'. [ 227.494363][ T8112] netlink: 24 bytes leftover after parsing attributes in process `syz.6.571'. [ 227.514181][ T7657] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 227.591190][ T848] usb 6-1: device descriptor read/64, error -71 [ 227.681169][ T7657] usb 2-1: Using ep0 maxpacket: 16 [ 227.691782][ T7657] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.701383][ T848] usb usb6-port1: attempt power cycle [ 227.714333][ T7657] usb 2-1: config 1 interface 0 has no altsetting 0 [ 227.771035][ T7657] usb 2-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.40 [ 227.788532][ T7657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.827100][ T7657] usb 2-1: Product: syz [ 227.868667][ T7657] usb 2-1: Manufacturer: ﷼⋐ᖮퟲ정쏛ꖉ䉬უ콿︩ꛢ앒掼娻沲䤼靧林连밃⳾ [ 227.887667][ T7657] usb 2-1: SerialNumber: syz [ 228.081294][ T848] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 228.101765][ T848] usb 6-1: device descriptor read/8, error -71 [ 228.311208][ T5894] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 228.370239][ T848] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 228.381842][ T8122] FAULT_INJECTION: forcing a failure. [ 228.381842][ T8122] name failslab, interval 1, probability 0, space 0, times 0 [ 228.394477][ T8122] CPU: 0 UID: 0 PID: 8122 Comm: syz.6.574 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.394502][ T8122] Tainted: [L]=SOFTLOCKUP [ 228.394507][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.394516][ T8122] Call Trace: [ 228.394522][ T8122] [ 228.394528][ T8122] dump_stack_lvl+0x16c/0x1f0 [ 228.394548][ T8122] should_fail_ex+0x512/0x640 [ 228.394561][ T8122] ? fs_reclaim_acquire+0xae/0x150 [ 228.394577][ T8122] should_failslab+0xc2/0x120 [ 228.394591][ T8122] __kmalloc_noprof+0xeb/0x910 [ 228.394608][ T8122] ? tomoyo_encode2+0x100/0x3e0 [ 228.394630][ T8122] ? tomoyo_encode2+0x100/0x3e0 [ 228.394646][ T8122] tomoyo_encode2+0x100/0x3e0 [ 228.394666][ T8122] tomoyo_encode+0x29/0x50 [ 228.394681][ T8122] tomoyo_realpath_from_path+0x18f/0x6e0 [ 228.394699][ T8122] tomoyo_path_number_perm+0x245/0x580 [ 228.394716][ T8122] ? tomoyo_path_number_perm+0x237/0x580 [ 228.394733][ T8122] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 228.394751][ T8122] ? find_held_lock+0x2b/0x80 [ 228.394795][ T8122] ? find_held_lock+0x2b/0x80 [ 228.394815][ T8122] ? hook_file_ioctl_common+0x144/0x410 [ 228.394836][ T8122] ? __fget_files+0x20e/0x3c0 [ 228.394853][ T8122] security_file_ioctl+0x9b/0x240 [ 228.394865][ T8122] __x64_sys_ioctl+0xb7/0x210 [ 228.394878][ T8122] do_syscall_64+0xcd/0xf80 [ 228.394890][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.394905][ T8122] RIP: 0033:0x7f584938f749 [ 228.394918][ T8122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.394933][ T8122] RSP: 002b:00007f584a2d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.394947][ T8122] RAX: ffffffffffffffda RBX: 00007f58495e5fa0 RCX: 00007f584938f749 [ 228.394956][ T8122] RDX: 0000200000000440 RSI: 00000000c0306201 RDI: 0000000000000004 [ 228.394965][ T8122] RBP: 00007f584a2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 228.394974][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.394979][ T8122] R13: 00007f58495e6038 R14: 00007f58495e5fa0 R15: 00007ffefc500998 [ 228.394993][ T8122] [ 228.395003][ T8122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 228.614501][ T8122] binder_alloc: 8121: binder_alloc_buf, no vma [ 228.620709][ T8122] binder: 8121:8122 ioctl c0306201 200000000440 returned -14 [ 228.641646][ T848] usb 6-1: device descriptor read/8, error -71 [ 228.648979][ T30] audit: type=1400 audit(1765700399.825:974): avc: denied { read write } for pid=8119 comm="syz.2.573" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 228.671792][ T30] audit: type=1400 audit(1765700399.825:975): avc: denied { open } for pid=8119 comm="syz.2.573" path="/120/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 228.675915][ T7657] usbhid 2-1:1.0: can't add hid device: -71 [ 228.694909][ T5894] usb 5-1: device descriptor read/64, error -71 [ 228.705605][ T7657] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 228.717744][ T7657] usb 2-1: USB disconnect, device number 16 [ 228.752579][ T848] usb usb6-port1: unable to enumerate USB device [ 228.901982][ T8131] [ 228.943290][ T5894] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 229.171775][ T8134] nfs: Unknown parameter 'fuse' [ 229.260025][ T5894] usb 5-1: device descriptor read/64, error -71 [ 229.743079][ T5894] usb usb5-port1: attempt power cycle [ 230.124341][ T5894] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 230.191991][ T30] audit: type=1400 audit(1765700401.375:976): avc: denied { ioctl } for pid=8140 comm="syz.5.578" path="/52/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 230.241573][ T5894] usb 5-1: device descriptor read/8, error -71 [ 230.296590][ T30] audit: type=1400 audit(1765700401.475:977): avc: denied { create } for pid=8151 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 230.323632][ T30] audit: type=1400 audit(1765700401.495:978): avc: denied { ioctl } for pid=8151 comm="syz.1.581" path="socket:[20362]" dev="sockfs" ino=20362 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 230.456531][ T30] audit: type=1400 audit(1765700401.635:979): avc: denied { mount } for pid=8157 comm="syz.2.583" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 230.479109][ T30] audit: type=1400 audit(1765700401.635:980): avc: denied { mounton } for pid=8157 comm="syz.2.583" path="/123/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 230.503339][ T5894] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 230.510869][ T848] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 230.518838][ T30] audit: type=1400 audit(1765700401.705:981): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 230.531771][ T5894] usb 5-1: device descriptor read/8, error -71 [ 230.651467][ T5894] usb usb5-port1: unable to enumerate USB device [ 230.661282][ T848] usb 7-1: Using ep0 maxpacket: 8 [ 230.681591][ T848] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 230.690675][ T848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.701681][ T848] usb 7-1: Product: syz [ 230.705936][ T848] usb 7-1: Manufacturer: syz [ 230.710594][ T848] usb 7-1: SerialNumber: syz [ 230.729998][ T848] usb 7-1: config 0 descriptor?? [ 230.758944][ T848] gspca_main: se401-2.14.0 probing 047d:5003 [ 230.970680][ T7657] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 231.175823][ T8167] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 232.101107][ T7657] usb 2-1: Using ep0 maxpacket: 16 [ 232.111886][ T7657] usb 2-1: unable to get BOS descriptor or descriptor too short [ 232.112492][ T848] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input17 [ 232.120713][ T7657] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 83, changing to 7 [ 232.139222][ T30] audit: type=1400 audit(1765700403.315:982): avc: denied { read } for pid=5168 comm="acpid" name="event4" dev="devtmpfs" ino=2895 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 233.007412][ T30] audit: type=1400 audit(1765700403.315:983): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2895 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 233.033475][ T30] audit: type=1400 audit(1765700403.315:984): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2895 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 233.094350][ T7657] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.124920][ T7657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.165763][ T7657] usb 2-1: Product: syz [ 233.189928][ T7657] usb 2-1: Manufacturer: syz [ 233.213476][ T7657] usb 2-1: SerialNumber: syz [ 233.465312][ T848] usb 7-1: USB disconnect, device number 5 [ 233.588939][ T30] audit: type=1400 audit(1765700404.765:985): avc: denied { execute } for pid=8172 comm="syz.2.587" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 233.919914][ T7657] usb 2-1: can't set config #1, error -71 [ 233.930273][ T7657] usb 2-1: USB disconnect, device number 17 [ 233.960465][ T8179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=8179 comm=syz.4.588 [ 233.974285][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 234.031560][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 234.188625][ T8185] FAULT_INJECTION: forcing a failure. [ 234.188625][ T8185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.208780][ T8185] CPU: 0 UID: 0 PID: 8185 Comm: syz.1.592 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.208812][ T8185] Tainted: [L]=SOFTLOCKUP [ 234.208818][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.208829][ T8185] Call Trace: [ 234.208834][ T8185] [ 234.208841][ T8185] dump_stack_lvl+0x16c/0x1f0 [ 234.208865][ T8185] should_fail_ex+0x512/0x640 [ 234.208890][ T8185] _copy_to_user+0x32/0xd0 [ 234.208914][ T8185] simple_read_from_buffer+0xcb/0x170 [ 234.208939][ T8185] proc_fail_nth_read+0x197/0x240 [ 234.208959][ T8185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.208978][ T8185] ? rw_verify_area+0xcf/0x6c0 [ 234.208997][ T8185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.209014][ T8185] vfs_read+0x1e4/0xcf0 [ 234.209036][ T8185] ? __pfx___mutex_lock+0x10/0x10 [ 234.209066][ T8185] ? __pfx_vfs_read+0x10/0x10 [ 234.209093][ T8185] ? __fget_files+0x20e/0x3c0 [ 234.209124][ T8185] ksys_read+0x12a/0x250 [ 234.209144][ T8185] ? __pfx_ksys_read+0x10/0x10 [ 234.209165][ T8185] ? fput+0x70/0xf0 [ 234.209193][ T8185] do_syscall_64+0xcd/0xf80 [ 234.209213][ T8185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.209230][ T8185] RIP: 0033:0x7ffa5f98e15c [ 234.209245][ T8185] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 234.209260][ T8185] RSP: 002b:00007ffa608f9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.209277][ T8185] RAX: ffffffffffffffda RBX: 00007ffa5fbe5fa0 RCX: 00007ffa5f98e15c [ 234.209287][ T8185] RDX: 000000000000000f RSI: 00007ffa608f90a0 RDI: 0000000000000003 [ 234.209295][ T8185] RBP: 00007ffa608f9090 R08: 0000000000000000 R09: 0000000000000000 [ 234.209305][ T8185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.209314][ T8185] R13: 00007ffa5fbe6038 R14: 00007ffa5fbe5fa0 R15: 00007ffd158b79a8 [ 234.209339][ T8185] [ 234.565002][ T8194] input: syz1 as /devices/virtual/input/input18 [ 234.733207][ T848] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 234.803989][ T8198] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=8198 comm=syz.1.597 [ 234.901215][ T848] usb 3-1: Using ep0 maxpacket: 16 [ 234.912219][ T848] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.943748][ T848] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 235.034109][ T8200] FAULT_INJECTION: forcing a failure. [ 235.034109][ T8200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.047257][ T8200] CPU: 1 UID: 0 PID: 8200 Comm: syz.1.597 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.047283][ T8200] Tainted: [L]=SOFTLOCKUP [ 235.047289][ T8200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.047299][ T8200] Call Trace: [ 235.047305][ T8200] [ 235.047313][ T8200] dump_stack_lvl+0x16c/0x1f0 [ 235.047334][ T8200] should_fail_ex+0x512/0x640 [ 235.047360][ T8200] _copy_from_user+0x2e/0xd0 [ 235.047382][ T8200] memdup_user+0x6b/0xe0 [ 235.047401][ T8200] strndup_user+0x78/0xe0 [ 235.047418][ T8200] __do_sys_fsconfig+0x2e1/0xbe0 [ 235.047441][ T8200] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 235.047459][ T8200] ? fput+0x70/0xf0 [ 235.047485][ T8200] ? rcu_is_watching+0x12/0xc0 [ 235.047509][ T8200] do_syscall_64+0xcd/0xf80 [ 235.047527][ T8200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.047544][ T8200] RIP: 0033:0x7ffa5f98f749 [ 235.047558][ T8200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.047574][ T8200] RSP: 002b:00007ffa608b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 235.047590][ T8200] RAX: ffffffffffffffda RBX: 00007ffa5fbe6180 RCX: 00007ffa5f98f749 [ 235.047601][ T8200] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 000000000000000c [ 235.047611][ T8200] RBP: 00007ffa608b7090 R08: 0000000000000000 R09: 0000000000000000 [ 235.047620][ T8200] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 235.047630][ T8200] R13: 00007ffa5fbe6218 R14: 00007ffa5fbe6180 R15: 00007ffd158b79a8 [ 235.047654][ T8200] [ 235.214064][ T848] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 235.224681][ T848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.359983][ T848] usb 3-1: config 0 descriptor?? [ 235.396978][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 235.396995][ T30] audit: type=1400 audit(1765700406.575:987): avc: denied { mount } for pid=8202 comm="syz.4.598" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 235.430452][ T30] audit: type=1400 audit(1765700406.615:988): avc: denied { create } for pid=8202 comm="syz.4.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 235.473322][ T30] audit: type=1400 audit(1765700406.615:989): avc: denied { ioctl } for pid=8202 comm="syz.4.598" path="socket:[20519]" dev="sockfs" ino=20519 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.281191][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.601'. [ 236.447288][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.601'. [ 236.491175][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.601'. [ 236.501139][ T7657] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 236.506479][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.601'. [ 236.691099][ T7657] usb 2-1: Using ep0 maxpacket: 8 [ 236.709463][ T7657] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 236.755204][ T8226] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 236.761126][ T7657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.786354][ T7657] usb 2-1: Product: syz [ 236.796552][ T7657] usb 2-1: Manufacturer: syz [ 236.809317][ T7657] usb 2-1: SerialNumber: syz [ 236.826208][ T7657] usb 2-1: config 0 descriptor?? [ 236.842782][ T7657] gspca_main: se401-2.14.0 probing 047d:5003 [ 236.934968][ T8229] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=8229 comm=syz.6.604 [ 236.945011][ T8231] sp0: Synchronizing with TNC [ 237.044640][ T30] audit: type=1400 audit(1765700408.225:990): avc: denied { bind } for pid=8228 comm="syz.6.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 237.074920][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.5.605'. [ 237.545687][ T43] usb 3-1: USB disconnect, device number 14 [ 237.555225][ T7657] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 237.588326][ T7657] usb 2-1: USB disconnect, device number 18 [ 238.005044][ T30] audit: type=1400 audit(1765700409.175:991): avc: denied { write } for pid=8249 comm="syz.5.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 238.128560][ T30] audit: type=1400 audit(1765700409.305:992): avc: denied { search } for pid=8255 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.156548][ T30] audit: type=1400 audit(1765700409.335:993): avc: denied { search } for pid=8255 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.184563][ T30] audit: type=1400 audit(1765700409.335:994): avc: denied { search } for pid=8255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.234748][ T30] audit: type=1400 audit(1765700409.335:995): avc: denied { search } for pid=8255 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.351728][ T8253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.560106][ T8253] bond0: (slave rose0): Enslaving as an active interface with an up link [ 238.716643][ T30] audit: type=1400 audit(1765700409.405:996): avc: denied { read open } for pid=8258 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.812597][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 241.815706][ T848] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 241.840922][ T31] Tainted: G L syzkaller #0 [ 241.906523][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 241.925970][ T31] task:kworker/1:0 state:D stack:26968 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 241.981128][ T848] usb 7-1: Using ep0 maxpacket: 8 [ 241.991995][ T848] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 242.010000][ T848] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.028932][ T31] Workqueue: usb_hub_wq hub_event [ 242.045307][ T848] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 242.066492][ T31] Call Trace: [ 242.085993][ T31] [ 242.086047][ T848] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 242.129894][ T848] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 242.130985][ T31] ? __schedule+0x10b9/0x6150 [ 242.182673][ T31] __schedule+0x1139/0x6150 [ 242.186929][ T848] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.187422][ T31] ? __lock_acquire+0x436/0x2890 [ 242.225114][ T31] ? __pfx___schedule+0x10/0x10 [ 242.230732][ T848] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 242.231189][ T31] ? find_held_lock+0x2b/0x80 [ 242.240806][ T848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.244659][ T31] ? schedule+0x2d7/0x3a0 [ 242.257886][ T31] schedule+0xe7/0x3a0 [ 242.263471][ T31] schedule_preempt_disabled+0x13/0x30 [ 242.269056][ T31] __mutex_lock+0xc69/0x1ca0 [ 242.274019][ T31] ? __pfx___schedule+0x10/0x10 [ 242.274988][ T848] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 242.278931][ T31] ? hub_event+0x2bb0/0x52f0 [ 242.296660][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 242.302731][ T31] ? __mutex_unlock_slowpath+0x161/0x790 [ 242.308468][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 242.314682][ T31] ? hub_event+0x1bd2/0x52f0 [ 242.319558][ T31] ? hub_event+0x2bb0/0x52f0 [ 242.324291][ T31] hub_event+0x2bb0/0x52f0 [ 242.329799][ T31] ? __noinstr_text_start+0x570/0x570 [ 242.337475][ T31] ? __pfx_hub_event+0x10/0x10 [ 242.342662][ T31] ? rcu_is_watching+0x12/0xc0 [ 242.347520][ T31] process_one_work+0x9ba/0x1b20 [ 242.353530][ T31] ? __pfx_process_one_work+0x10/0x10 [ 242.359379][ T31] ? assign_work+0x1a0/0x250 [ 242.364203][ T31] worker_thread+0x6c8/0xf10 [ 242.368885][ T31] ? __pfx_worker_thread+0x10/0x10 [ 242.375317][ T31] kthread+0x3c5/0x780 [ 242.379711][ T31] ? __pfx_kthread+0x10/0x10 [ 242.384749][ T31] ? rcu_is_watching+0x12/0xc0 [ 242.389522][ T31] ? __pfx_kthread+0x10/0x10 [ 242.394216][ T31] ret_from_fork+0x983/0xb10 [ 242.398843][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 242.406215][ T31] ? __switch_to+0x7af/0x10d0 [ 242.412061][ T31] ? __pfx_kthread+0x10/0x10 [ 242.416701][ T31] ret_from_fork_asm+0x1a/0x30 [ 242.421587][ T31] [ 242.429862][ T31] [ 242.429862][ T31] Showing all locks held in the system: [ 242.437693][ T31] 5 locks held by kworker/1:0/24: [ 242.443271][ T31] #0: ffff8881422e6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 242.470472][ T31] #1: ffffc900001e7c90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 242.484310][ T31] #2: ffff88802ac6c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 242.496775][ T31] #3: ffff88802ac6f518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b87/0x52f0 [ 242.507753][ T31] #4: ffff88802abf7668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bb0/0x52f0 [ 242.517525][ T31] 1 lock held by khungtaskd/31: [ 242.523218][ T31] #0: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 242.533268][ T31] 2 locks held by getty/5570: [ 242.537944][ T31] #0: ffff88814dc0f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 242.547784][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 242.558633][ T31] 5 locks held by kworker/0:3/5811: [ 242.563914][ T31] #0: ffff8881422e6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 242.574814][ T31] #1: ffffc90003357c90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 242.586131][ T31] #2: ffff8881453fa198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 242.595066][ T31] #3: ffff8881453fd518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b87/0x52f0 [ 242.605107][ T31] #4: ffff88802abf7668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bb0/0x52f0 [ 242.614839][ T31] 5 locks held by kworker/u8:14/6027: [ 242.620231][ T31] 1 lock held by syz.4.617/8293: [ 242.626262][ T31] #0: ffffffff8e3d4c40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 242.636263][ T31] 1 lock held by syz.1.620/8311: [ 242.641304][ T31] #0: ffffffff8e3d4c40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 242.651319][ T31] 2 locks held by syz.1.620/8312: [ 242.656340][ T31] #0: ffff8880761d2b48 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: path_openat+0x1248/0x3140 [ 242.667461][ T31] #1: ffff8880761d2ff8 (&fi->mutex){+.+.}-{4:4}, at: fuse_lock_inode+0xd2/0x110 [ 242.676638][ T31] 2 locks held by rm/8342: [ 242.681141][ T31] [ 242.683479][ T31] ============================================= [ 242.683479][ T31] [ 242.692807][ T31] NMI backtrace for cpu 1 [ 242.692825][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 242.692848][ T31] Tainted: [L]=SOFTLOCKUP [ 242.692853][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.692862][ T31] Call Trace: [ 242.692868][ T31] [ 242.692874][ T31] dump_stack_lvl+0x116/0x1f0 [ 242.692896][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 242.692920][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 242.692940][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 242.692965][ T31] sys_info+0x133/0x180 [ 242.692985][ T31] watchdog+0xe66/0x1180 [ 242.693014][ T31] ? rcu_is_watching+0x12/0xc0 [ 242.693029][ T31] ? __pfx_watchdog+0x10/0x10 [ 242.693046][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 242.693064][ T31] ? __kthread_parkme+0x19e/0x250 [ 242.693082][ T31] ? __pfx_watchdog+0x10/0x10 [ 242.693099][ T31] kthread+0x3c5/0x780 [ 242.693118][ T31] ? __pfx_kthread+0x10/0x10 [ 242.693139][ T31] ? rcu_is_watching+0x12/0xc0 [ 242.693154][ T31] ? __pfx_kthread+0x10/0x10 [ 242.693174][ T31] ret_from_fork+0x983/0xb10 [ 242.693192][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 242.693212][ T31] ? __switch_to+0x7af/0x10d0 [ 242.693233][ T31] ? __pfx_kthread+0x10/0x10 [ 242.693252][ T31] ret_from_fork_asm+0x1a/0x30 [ 242.693288][ T31] [ 242.693294][ T31] Sending NMI from CPU 1 to CPUs 0: [ 242.835401][ C0] NMI backtrace for cpu 0 [ 242.835416][ C0] CPU: 0 UID: 0 PID: 8331 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full) [ 242.835434][ C0] Tainted: [L]=SOFTLOCKUP [ 242.835439][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.835446][ C0] RIP: 0010:lock_release+0xa/0x2d0 [ 242.835465][ C0] Code: 24 0c eb 98 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 <41> 54 49 89 f4 53 48 89 fb 48 83 ec 18 65 48 8b 05 59 6d 18 12 48 [ 242.835478][ C0] RSP: 0018:ffffc900127b7410 EFLAGS: 00000202 [ 242.835488][ C0] RAX: 0000000000000001 RBX: 00007ffe8acf5dc8 RCX: ffffffff911a6dda [ 242.835497][ C0] RDX: 0000000000000000 RSI: ffffffff816cb9a4 RDI: ffffffff8e3c9620 [ 242.835506][ C0] RBP: 0000000000000001 R08: ffffffff911a6dde R09: 000000002d64dbdc [ 242.835513][ C0] R10: 0000000000000002 R11: 0000000000000001 R12: ffffc900127b74f0 [ 242.835521][ C0] R13: ffffc900127b74a0 R14: ffffc900127b7f48 R15: 0000000000000001 [ 242.835529][ C0] FS: 0000000000000000(0000) GS:ffff8881248fa000(0000) knlGS:0000000000000000 [ 242.835542][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.835550][ C0] CR2: 000056489c17fda8 CR3: 000000000e184000 CR4: 00000000003526f0 [ 242.835559][ C0] Call Trace: [ 242.835563][ C0] [ 242.835569][ C0] unwind_next_frame+0x3f9/0x20a0 [ 242.835586][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.835601][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 242.835616][ C0] arch_stack_walk+0x94/0x100 [ 242.835635][ C0] stack_trace_save+0x8e/0xc0 [ 242.835647][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 242.835661][ C0] ? __lock_acquire+0x436/0x2890 [ 242.835674][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 242.835695][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 242.835707][ C0] save_stack+0x160/0x1f0 [ 242.835722][ C0] ? __pfx_save_stack+0x10/0x10 [ 242.835735][ C0] ? free_unref_folios+0xa22/0x1610 [ 242.835746][ C0] ? folios_put_refs+0x4be/0x750 [ 242.835758][ C0] ? free_pages_and_swap_cache+0x245/0x4a0 [ 242.835771][ C0] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 242.835787][ C0] ? tlb_finish_mmu+0x168/0x7c0 [ 242.835803][ C0] ? exit_mmap+0x3f9/0xb60 [ 242.835816][ C0] ? __mmput+0x12a/0x410 [ 242.835832][ C0] ? mmput+0x62/0x70 [ 242.835847][ C0] ? do_exit+0x7d7/0x2bd0 [ 242.835859][ C0] ? do_group_exit+0xd3/0x2a0 [ 242.835871][ C0] ? __x64_sys_exit_group+0x3e/0x50 [ 242.835883][ C0] ? x64_sys_call+0x151c/0x1740 [ 242.835900][ C0] ? do_syscall_64+0xcd/0xf80 [ 242.835912][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.835925][ C0] ? page_ext_put+0x3e/0xd0 [ 242.835939][ C0] __reset_page_owner+0x84/0x1a0 [ 242.835955][ C0] free_unref_folios+0xa22/0x1610 [ 242.835969][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 242.835988][ C0] folios_put_refs+0x4be/0x750 [ 242.836001][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 242.836018][ C0] free_pages_and_swap_cache+0x245/0x4a0 [ 242.836031][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 242.836058][ C0] ? __pfx___might_resched+0x10/0x10 [ 242.836071][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 242.836090][ C0] tlb_finish_mmu+0x168/0x7c0 [ 242.836108][ C0] exit_mmap+0x3f9/0xb60 [ 242.836125][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 242.836142][ C0] ? __lock_acquire+0x436/0x2890 [ 242.836159][ C0] ? arch_uprobe_clear_state+0x16/0x150 [ 242.836176][ C0] __mmput+0x12a/0x410 [ 242.836193][ C0] mmput+0x62/0x70 [ 242.836209][ C0] do_exit+0x7d7/0x2bd0 [ 242.836221][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 242.836237][ C0] ? __pfx_do_exit+0x10/0x10 [ 242.836250][ C0] ? rcu_is_watching+0x12/0xc0 [ 242.836268][ C0] do_group_exit+0xd3/0x2a0 [ 242.836281][ C0] __x64_sys_exit_group+0x3e/0x50 [ 242.836294][ C0] x64_sys_call+0x151c/0x1740 [ 242.836310][ C0] do_syscall_64+0xcd/0xf80 [ 242.836323][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.836335][ C0] RIP: 0033:0x7f7778d7a6c5 [ 242.836344][ C0] Code: Unable to access opcode bytes at 0x7f7778d7a69b. [ 242.836350][ C0] RSP: 002b:00007ffe8acf5dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 242.836361][ C0] RAX: ffffffffffffffda RBX: 000056489c1692c0 RCX: 00007f7778d7a6c5 [ 242.836369][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 242.836377][ C0] RBP: 00007ffe8acf60f8 R08: 0000000000000000 R09: 0000000000000000 [ 242.836384][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8acf60f0 [ 242.836391][ C0] R13: 00007ffe8acf6100 R14: 00007f7778f8a000 R15: 000056487b2a6d98 [ 242.836405][ C0] [ 243.287632][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 243.294481][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 243.305134][ T31] Tainted: [L]=SOFTLOCKUP [ 243.309433][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.319464][ T31] Call Trace: [ 243.322721][ T31] [ 243.325637][ T31] dump_stack_lvl+0x3d/0x1f0 [ 243.330221][ T31] vpanic+0x640/0x6f0 [ 243.334186][ T31] panic+0xca/0xd0 [ 243.337884][ T31] ? __pfx_panic+0x10/0x10 [ 243.342278][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 243.348241][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 243.354375][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 243.360511][ T31] ? watchdog+0xe83/0x1180 [ 243.364904][ T31] ? watchdog+0xe76/0x1180 [ 243.369301][ T31] watchdog+0xe94/0x1180 [ 243.373533][ T31] ? rcu_is_watching+0x12/0xc0 [ 243.378284][ T31] ? __pfx_watchdog+0x10/0x10 [ 243.382937][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 243.388116][ T31] ? __kthread_parkme+0x19e/0x250 [ 243.393122][ T31] ? __pfx_watchdog+0x10/0x10 [ 243.397777][ T31] kthread+0x3c5/0x780 [ 243.401824][ T31] ? __pfx_kthread+0x10/0x10 [ 243.406392][ T31] ? rcu_is_watching+0x12/0xc0 [ 243.411133][ T31] ? __pfx_kthread+0x10/0x10 [ 243.415714][ T31] ret_from_fork+0x983/0xb10 [ 243.420288][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 243.425384][ T31] ? __switch_to+0x7af/0x10d0 [ 243.430041][ T31] ? __pfx_kthread+0x10/0x10 [ 243.434609][ T31] ret_from_fork_asm+0x1a/0x30 [ 243.439366][ T31] [ 243.442627][ T31] Kernel Offset: disabled [ 243.446923][ T31] Rebooting in 86400 seconds..