last executing test programs: 13.909051839s ago: executing program 4 (id=873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102389, 0x1901c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000256a510aef244401", @ANYRES16=r3, @ANYBLOB="030300000000fddbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000019200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="991a0aa0ff1dc5f649ca274306bda3d6d53cb75608a981394469e0493a13b6848cae8461c520cbf40b3e43610409c55c049a2eb7ac87789cc5dd2562ec6c7d9cb5dc2c7df354c3418962f481758ec38195b48f23bf79f88c7af42bc8e669791e9ee5d03db94c0669816663dc1e33f2670cddd70e3cb9b921c11e9ff4ed63fc839104c27edba4ada629b9d839eadecad86dcfa42b78fa52d4406a681ce3b7fc7a31528245cdc5d5e1"], 0x1c}}, 0x4000054) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x1, 'caif0\x00', {}, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12.734009731s ago: executing program 4 (id=876): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0xe, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x170bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 12.555635579s ago: executing program 4 (id=878): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x6194}, 0x1}) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000010129000009054f928c"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000100)={0x8, 0x808b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f00000003c0)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x1, 0x61, 0x11, 0xa0}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$igmp6(0xa, 0x3, 0x2) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x328000, 0x1000}, 0x20) r7 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$cgroup_pid(r7, &(0x7f0000000000), 0x12) close_range(r1, 0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x1, &(0x7f00000000c0)=@raw=[@generic={0x6, 0x0, 0xe, 0x0, 0xffffffff}], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xa0}, 0x94) 12.077103225s ago: executing program 0 (id=879): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x903c, 0x40480) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f02ebbeef, 0x2010, 0xffffffffffffffff, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xfff2, 0x1}, {0xffff, 0xffff}, {0x9, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7ff}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x200041, 0x164) r7 = fanotify_init(0xf00, 0x1000) fanotify_mark(r7, 0x105, 0x10000839, r6, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r7, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@getchain={0x4c, 0x66, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xb}, {0xa, 0xfff3}, {0xfff2}}, [{0x8}, {0x8, 0xb, 0xfffffffb}, {0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45}, 0x4000) ioctl$NBD_SET_SIZE(r8, 0xab02, 0x9) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) 10.659642606s ago: executing program 0 (id=882): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xa5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, 0x0, 0x0, 0x2208004, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) 9.387903232s ago: executing program 0 (id=883): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbb55e6bbbb00000000000008060001080006040001000000000000ac1414bbbbbbbbbbbbbbac1414bb"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000700000004000000", @ANYRES32], 0x50) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x7, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x6, 0x6, 0xae4f, 0x0, 0x0, 0x1, 0x0, 0x5f23, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x94, 0x0, 0x0, 0x9, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x39a7, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, 0x0, 0x9, 0x4000000000000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8000000000000001, 0x4, 0xd30, 0x0, 0x4, 0xfffffffffffffdfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x71]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x44000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000300)='SF', 0x2}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x7, 0x9}, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r5, 0xae80, 0x0) writev(r0, &(0x7f0000001800)=[{&(0x7f0000000800)="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", 0x1000}], 0x1) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f00000001c0)}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r8 = open(&(0x7f0000000280)='.\x00', 0x2800, 0x0) fcntl$notify(r8, 0x402, 0x8000001f) setsockopt$packet_int(r8, 0x107, 0xc, &(0x7f0000000000)=0x5, 0x4) 9.250685116s ago: executing program 2 (id=884): socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000e4ff00400601fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0002000090780000080a009032c1d4d7b74093b48fdfb91f000002000098ff7c01f2c12043000004000000ad13128098cf093cc9"], 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/../file0\x00', 0x403, 0xa0) r1 = openat(r0, &(0x7f0000000240)='./cgroup/../file0\x00', 0x224080, 0x127) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000600)={0x0, 0x1, &(0x7f0000000400)=""/183, &(0x7f0000000540)=""/114, &(0x7f00000005c0)=""/3, 0x40000}) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r2 = fsopen(&(0x7f00000001c0)='cifs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x10, &(0x7f0000000100)='barrier') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x1415c0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x765c03, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) 9.181164377s ago: executing program 3 (id=885): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0xc06c4124, 0x40944f9c780000) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001a80)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x0, 0x87b, {{0x19, 0x4, 0x2, 0x26, 0x64, 0x68, 0x0, 0x7, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}, {[@end, @timestamp_addr={0x44, 0x4c, 0xa3, 0x1, 0x3, [{@local, 0x3}, {@loopback, 0xfff}, {@remote, 0x1ff}, {@rand_addr=0x64010101, 0x91}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@rand_addr=0x64010102, 0x2}, {@broadcast, 0x9}, {@loopback, 0xff}, {@local, 0x35f}]}]}}}}}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x60c01, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x4, 0x1, 0x3, 0x1}, 0x8) socket$netlink(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0xefd, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpgrp(0xffffffffffffffff) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000240)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x4, 0xd8d, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x218}}}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r8, 0xc, 0x4) fstat(r8, &(0x7f00000002c0)) r9 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2e, 0x0, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x1, 0x19d, 0x0, 0x0, 0x1000, 0xff, 0x0, 0x0, 0xaa}}}, &(0x7f0000000440)) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r8, 0xc0207511, &(0x7f00000004c0)={r9}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r7, 0xc0207511, &(0x7f0000000300)={r9, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000a53000/0x2000)=nil, 0x2000, 0xb635773f06ebbee8, 0x8010, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0xffffffd8, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80, 0x1, {0x0, r14}}) 8.647008002s ago: executing program 4 (id=886): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setuid(0xee00) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fd4000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x2a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x2d, &(0x7f0000000000)=[@cr4={0x1, 0x9a0}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaa23aac2aaaaaabb0800450000f05229259d73e4de0000000000119078000000000000000000004e20009c907801000000000000006c4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c0459420240800000000000000bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af7e8dafe09"], 0x0) 8.535558039s ago: executing program 3 (id=887): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x101641, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x3a, 0x24, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928030000005a7caf11f04409289e9ebb6286784ca3", 0x20) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) pwritev(r3, &(0x7f0000002740)=[{&(0x7f0000000500)="96eafea117da74708d4cd8c359460634b95599e6fe98525d0468288dc6bfe43e7c3dfc2c465e606a8b054be02ce433eed421b7f230f23932722c1bdcb00575bb0209cb8e3c825245d895b6568e61c1885c5ec20a9297958aed1a96c056b208569a2178b5600580654610d1b50109e7fc13c3c8bbac45a368acbc92642559d12af6698bee68bcd14e943a3a0085bfdda219e262216a97ffd3c9a656", 0xffffff94}], 0x1, 0x8002, 0xa6) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, {0x2, 0x4e23, @multicast1}, {0x2, 0x0, @broadcast}, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000000000}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf010004, 0x1, 0x8000200, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00903, 0x0, '\x00', @p_u16=0x0}}) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x5e) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f00000000c0)={0x8}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00'}) 7.852396198s ago: executing program 2 (id=889): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) mount$bpf(0x0, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0), 0x2000000, 0x0) 7.012302151s ago: executing program 3 (id=890): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x2d, 0x2, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000180)={0xd, 0x10, [0xff, 0x2, 0x1, 0x8000000000000000], &(0x7f0000000100)=[0x0, 0x0]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000002c0)={0x1, 0x3, 0x1, 0x0, 0x0, [{{r2}, 0x7ff}]}) syz_usb_connect(0x3, 0x51, &(0x7f0000000440)=ANY=[@ANYBLOB="1201500257a9c220d1123b98d4270102030109023f0001080640070904950805ff020f090905800c20007f040009050b02100007a10309050e0c080007000d09050702200004010809050c10d6cc07ff01a7777ab93497db37c80b604934784cec2d0b7be40833e8499ff6"], 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d407104"], 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313"], 0x0}, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000280)) prlimit64(0x0, 0xe, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r7, @ANYRES8], 0x15) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r11 = socket(0x2d, 0x2, 0x0) bind$xdp(r11, &(0x7f00000003c0)={0x2d, 0xb, r10, 0x2e}, 0x10) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r12, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40848c0) 6.906578042s ago: executing program 2 (id=891): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r1, 0x5601, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, r3, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x14}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}]}]}, 0xd0}}, 0x90) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x140, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400030015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={0x0, 0x428}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r5 = syz_ublk_setup_io_uring(0x1cb4, &(0x7f0000000040)={0x0, 0xb520, 0x8, 0x2, 0x3c8}, 0x0, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000900), 0x0) times(0xfffffffffffffffc) syz_usb_connect(0x5, 0x6a, 0x0, 0x0) mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz1\x00', 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) syz_open_dev$ttys(0xc, 0x2, 0x1) 6.814032202s ago: executing program 4 (id=893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x0, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x2d, 0x2, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f00000000c0), 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r9 = socket(0x2d, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r13, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xaf}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc5}, 0x24000806) sendmsg$SEG6_CMD_SETHMAC(r11, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r13, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0xc3a, 0x4, 0x6945, 0xfffffffe]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x4c}}, 0x4004000) sendmsg$SEG6_CMD_SET_TUNSRC(r10, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r13, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x4020815}, 0x60c0184) bind$xdp(r9, &(0x7f0000000080)={0x2d, 0x0, r8, 0xc}, 0x10) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r14, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40848c0) sendmsg$nl_route_sched(r9, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000700)=@deltaction={0x288, 0x31, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x94, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff3b}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7bd}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6d}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc862}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x94, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x4004}, 0x40) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r15, 0x12c1a, 0x1a111}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x20004000) 6.22006956s ago: executing program 4 (id=895): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000380), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x800) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x7e}) socket$kcm(0xa, 0x2, 0x0) (async) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r7, @ANYBLOB="b48c6fecfdd13fff0021db5e41e8fb11d37829d7ef42d61db53eaadcb55a6c12da7233330c4d2c9d3ac33692b572e9adedce2c10f4bbdd7352b9e6dc86a3549cba76d890e9bf0d0c78eccb71afd2a3f2224648c1b69bf9d389689f9a1d291100e89246940dad", @ANYRESOCT, @ANYRESDEC=r3, @ANYRES32=r6, @ANYRESOCT=r0, @ANYBLOB="d78a5f0cccf7943d91181c94ab28e3", @ANYRES32=r7, @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r7, @ANYBLOB="b48c6fecfdd13fff0021db5e41e8fb11d37829d7ef42d61db53eaadcb55a6c12da7233330c4d2c9d3ac33692b572e9adedce2c10f4bbdd7352b9e6dc86a3549cba76d890e9bf0d0c78eccb71afd2a3f2224648c1b69bf9d389689f9a1d291100e89246940dad", @ANYRESOCT, @ANYRESDEC=r3, @ANYRES32=r6, @ANYRESOCT=r0, @ANYBLOB="d78a5f0cccf7943d91181c94ab28e3", @ANYRES32=r7, @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r8, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5a10011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73d153bf01de50151803", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) socket$can_raw(0x1d, 0x3, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) (async) r9 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x4e23, 0xc0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) writev(r9, &(0x7f0000001200)=[{&(0x7f0000000a40)="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", 0x163}], 0x1) (async) writev(r9, &(0x7f0000001200)=[{&(0x7f0000000a40)="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", 0x163}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000006c0)=0x2) 5.382347588s ago: executing program 1 (id=896): open$dir(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000180), 0x7, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x28, 0x2, 0x1030, 0x4, 0x0, 0xfffffffc}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x105842, 0xa9) writev(r5, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x40000}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) timer_settime(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) shutdown(0xffffffffffffffff, 0x1) 4.254898227s ago: executing program 1 (id=897): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) (async) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x5f3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0x1aa5, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x0, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x0, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10, 0x3, 0x243, 0x0, r0}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x91b, 0x0, 0x0}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xa}, 0x1c) 4.243727629s ago: executing program 2 (id=898): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0xc06c4124, 0x40944f9c780000) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001b40)={'syztnl2\x00', &(0x7f0000001a80)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x0, 0x87b, {{0x19, 0x4, 0x2, 0x26, 0x64, 0x68, 0x0, 0x7, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}, {[@end, @timestamp_addr={0x44, 0x4c, 0xa3, 0x1, 0x3, [{@local, 0x3}, {@loopback, 0xfff}, {@remote, 0x1ff}, {@rand_addr=0x64010101, 0x91}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@rand_addr=0x64010102, 0x2}, {@broadcast, 0x9}, {@loopback, 0xff}, {@local, 0x35f}]}]}}}}}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x60c01, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x4, 0x1, 0x3, 0x1}, 0x8) socket$netlink(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0xefd, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpgrp(0xffffffffffffffff) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000240)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x4, 0xd8d, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x218}}}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r8, 0xc, 0x4) fstat(r8, &(0x7f00000002c0)) r9 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2e, 0x0, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x1, 0x19d, 0x0, 0x0, 0x1000, 0xff, 0x0, 0x0, 0xaa}}}, &(0x7f0000000440)) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r8, 0xc0207511, &(0x7f00000004c0)={r9}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r7, 0xc0207511, &(0x7f0000000300)={r9, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000a53000/0x2000)=nil, 0x2000, 0xb635773f06ebbee8, 0x8010, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0xd8, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80, 0x1, {0x0, r14}}) 4.064474886s ago: executing program 1 (id=899): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES16=0x0, @ANYBLOB="1d0b27bd7000fcdbdf25010000000c0006000300000003000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) (async) write$selinux_load(r0, 0x0, 0x11011) 4.014751032s ago: executing program 2 (id=900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x400}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 3.992195497s ago: executing program 0 (id=901): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48006) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x26, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000040)="0472", 0x2, 0x20008884, &(0x7f0000000080)={0x11, 0xd, r6, 0x1, 0xfd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0xc}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0xc}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x8) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() (async) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x83, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60209476004d060000000000000000000000ffffac14141bfe8000000000060000000000000000aa4e244001", @ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="50c2000490780000f25c01e9f96729ff664d31538f5506173fa50b9825847ac062f7a04c55dcc87d23f4f4d2773b098c5ee178826a9d83eceedb53f210aa1ad151"], 0x0) (async) syz_emit_ethernet(0x83, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60209476004d060000000000000000000000ffffac14141bfe8000000000060000000000000000aa4e244001", @ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="50c2000490780000f25c01e9f96729ff664d31538f5506173fa50b9825847ac062f7a04c55dcc87d23f4f4d2773b098c5ee178826a9d83eceedb53f210aa1ad151"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 3.916320996s ago: executing program 1 (id=902): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x84, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) munmap(&(0x7f0000b9c000/0x4000)=nil, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x4000800000001) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 3.874018258s ago: executing program 2 (id=903): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setuid(0xee00) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fd4000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x2a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x2d, &(0x7f0000000000)=[@cr4={0x1, 0x9a0}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaa23aac2aaaaaabb0800450000f05229259d73e4de0000000000119078000000000000000000004e20009c907801000000000000006c4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c0459420240800000000000000bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af7e8dafe09"], 0x0) 3.431896442s ago: executing program 3 (id=904): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3, 0x700}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 3.066884678s ago: executing program 3 (id=905): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$kcm(0x23, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf2535000000e3000300", @ANYRES32=r4, @ANYBLOB="0a0006003fe227d2f3aa0000"], 0x28}, 0x1, 0x0, 0x0, 0x20001}, 0x8090) getsockopt(r0, 0x10, 0xffff, 0x0, &(0x7f0000000140)) 2.671944216s ago: executing program 1 (id=906): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3, 0x3000}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 2.671350987s ago: executing program 0 (id=907): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) kexec_load(0x2, 0x7, &(0x7f00000002c0), 0x0) 2.658889521s ago: executing program 3 (id=908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000672000/0x1000)=nil) syz_clone3(&(0x7f0000000140)={0x120006200, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) close(r0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000040)={&(0x7f0000000300)=[{0x4009, 0x1001, 0x50, &(0x7f0000000100)="f67b818da81017e72f07b0b1642c148743b6fb4488fc6c8975a958862b0b0b12942acbe148f2158470b37675983c64d14c6a60ab9f28e23921a0e9fd1f4b36e555d4054272365aa91dc71b33b72c9644"}, {0x5, 0x801, 0x0, 0x0}], 0x2}) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) write(r0, &(0x7f00000001c0)="f279cab401a8aa60d569a864269b2f11ff4b5e622fe28fccad246c8cd6476567f6d4c0186c9a0dbd6fed08b7a29c31adf6bcff4fba1a283c0eb61d7990a1dd7c", 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 67.226098ms ago: executing program 0 (id=909): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r5) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8c02, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) r7 = dup(r5) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10800, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e1863a09991e3ae613a7763a89d4c5efbbeead0d0c8f1cbf5f3c892932a97ef829d48629da6c5", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRES32=r2, @ANYBLOB="2c04e8a31af344728befdffce7e4ec35d8c32bced581d57ba7f7124fdb1848442759bbe82023b3d12093d4dcaf937f7652bf869b0c0d6e5d4c1881e0ec9b8baa7ee70d571dbee134fc3e734319b63f39ba353233df116599c6acae708cc6ca021b01fbca"]) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) fsopen(0x0, 0x0) 0s ago: executing program 1 (id=910): mkdirat(0xffffffffffffff9c, 0x0, 0x2c) r0 = openat(0xffffffffffffff9c, 0x0, 0x14b041, 0x2) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001200)=@o_path={&(0x7f00000011c0)='./file0/file1\x00', 0x0, 0x4000, r0}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000002000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000506608000000000000180000000000000000000000000000109500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) kernel console output (not intermixed with test programs): input input13: Device does not respond to id packet P [ 213.783479][ T9] usb 2-1: reset high-speed USB device number 14 using dummy_hcd [ 213.793124][ T5711] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 213.807171][ T5711] input input13: Device does not respond to id packet B [ 213.829407][ T5711] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 213.842661][ T5711] input input13: Device does not respond to id packet N [ 213.879415][ T5711] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 213.907485][ T5711] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 214.026745][ T5711] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 214.040032][ T5711] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 214.059920][ T5711] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 214.510748][ T5711] usb 1-1: USB disconnect, device number 13 [ 214.731865][ T5805] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 214.921861][ T5805] usb 4-1: device descriptor read/64, error -71 [ 214.982049][ T30] audit: type=1400 audit(1783157382.848:751): avc: denied { read } for pid=7532 comm="syz.2.451" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 215.046095][ T30] audit: type=1400 audit(1783157382.858:752): avc: denied { open } for pid=7532 comm="syz.2.451" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 215.073273][ T30] audit: type=1400 audit(1783157382.858:753): avc: denied { watch watch_reads } for pid=7532 comm="syz.2.451" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 215.098337][ T30] audit: type=1400 audit(1783157382.868:754): avc: denied { view } for pid=7532 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 215.137318][ T30] audit: type=1400 audit(1783157383.008:755): avc: denied { connect } for pid=7540 comm="syz.2.452" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.186211][ T5805] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 215.220083][ T7544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.453'. [ 215.236087][ T7545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.454'. [ 215.257065][ T7545] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 215.293305][ T7544] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 215.332926][ T5805] usb 4-1: device descriptor read/64, error -71 [ 215.452037][ T5805] usb usb4-port1: attempt power cycle [ 215.593617][ T993] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 215.791987][ T5805] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 215.799661][ T993] usb 3-1: Using ep0 maxpacket: 32 [ 215.887055][ T7554] overlayfs: failed to resolve './file0': -2 [ 216.282319][ T30] audit: type=1400 audit(1783157383.708:756): avc: denied { map } for pid=7551 comm="syz.4.457" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 216.317167][ T30] audit: type=1400 audit(1783157383.748:757): avc: denied { ioctl } for pid=7551 comm="syz.4.457" path="socket:[17206]" dev="sockfs" ino=17206 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 216.343115][ T993] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 216.354686][ T5805] usb 4-1: device descriptor read/8, error -71 [ 216.362033][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 216.376245][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 216.386073][ T30] audit: type=1400 audit(1783157383.828:758): avc: denied { setopt } for pid=7551 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 216.409473][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 216.425856][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 216.439031][ T993] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 216.464233][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.473706][ T993] usb 3-1: Product: syz [ 216.477891][ T993] usb 3-1: Manufacturer: syz [ 216.482503][ T993] usb 3-1: SerialNumber: syz [ 216.489306][ T993] usb 3-1: config 0 descriptor?? [ 216.496509][ T5740] usb 2-1: USB disconnect, device number 14 [ 216.601909][ T5805] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 216.636613][ T5805] usb 4-1: device descriptor read/8, error -71 [ 216.753532][ T5805] usb usb4-port1: unable to enumerate USB device [ 216.963462][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 216.978441][ T993] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 217.030933][ T993] input input14: Device does not respond to id packet M [ 217.216394][ T993] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 217.271300][ T993] input input14: Device does not respond to id packet P [ 217.284779][ T7574] tipc: Started in network mode [ 217.293843][ T993] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 217.300599][ T7574] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 217.310035][ T993] input input14: Device does not respond to id packet B [ 217.317508][ T993] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 217.322439][ T7574] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 217.846328][ T993] input input14: Device does not respond to id packet N [ 217.863783][ T993] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 217.870900][ T993] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 217.882958][ T7574] tipc: Enabled bearer , priority 10 [ 217.891274][ T993] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 217.911138][ T993] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 217.999103][ T993] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 218.577657][ T993] usb 3-1: USB disconnect, device number 24 [ 218.902178][ T7580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.000295][ T7585] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 219.147735][ T7585] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 219.447235][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 219.456167][ T7595] netlink: 'syz.2.469': attribute type 10 has an invalid length. [ 219.464618][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'. [ 219.472521][ T7585] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len [ 219.513752][ T5740] tipc: Node number set to 1 [ 219.543179][ T7595] geneve4: entered promiscuous mode [ 219.555113][ T7595] geneve4: entered allmulticast mode [ 219.621105][ T30] audit: type=1400 audit(1783157387.488:759): avc: denied { create } for pid=7598 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 219.648404][ T30] audit: type=1400 audit(1783157387.518:760): avc: denied { bind } for pid=7598 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 219.712526][ T5740] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 219.882159][ T5740] usb 4-1: Using ep0 maxpacket: 32 [ 219.891993][ T5740] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.902446][ T5740] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 219.914926][ T5740] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 219.924349][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.952904][ T5740] usb 4-1: config 0 descriptor?? [ 220.031873][ T29] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 220.241850][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 220.249007][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 220.258139][ T29] usb 3-1: config 4 interface 0 has no altsetting 0 [ 220.268149][ T29] usb 3-1: string descriptor 0 read error: -22 [ 220.806211][ T29] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 220.822073][ T29] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 220.956534][ T29] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 221.522911][ T29] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 221.532490][ T7608] overlayfs: upper fs does not support file handles, falling back to index=off. [ 221.533427][ T29] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 221.565633][ T29] usb 3-1: media controller created [ 221.650023][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.786507][ T29] zl10353_read_register: readreg error (reg=127, ret==0) [ 221.929985][ T29] usb 3-1: USB disconnect, device number 25 [ 222.022129][ T5740] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 222.022605][ T5711] usb 4-1: USB disconnect, device number 13 [ 222.111369][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'. [ 222.120965][ T7650] netlink: 'syz.1.485': attribute type 10 has an invalid length. [ 222.129562][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 222.143925][ T7650] geneve3: entered promiscuous mode [ 222.149234][ T7650] geneve3: entered allmulticast mode [ 222.274764][ T7653] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 222.283439][ T5740] usb 5-1: Using ep0 maxpacket: 32 [ 222.291478][ T5740] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 222.317786][ T5740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 222.343774][ T5740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 222.366555][ T5740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 222.379059][ T5740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 222.391618][ T5740] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 222.400738][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.408907][ T5740] usb 5-1: Product: syz [ 222.413930][ T5740] usb 5-1: Manufacturer: syz [ 222.418525][ T5740] usb 5-1: SerialNumber: syz [ 222.424702][ T5740] usb 5-1: config 0 descriptor?? [ 222.468994][ T30] audit: type=1400 audit(1783157390.338:761): avc: denied { create } for pid=7659 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 222.490537][ T30] audit: type=1400 audit(1783157390.338:762): avc: denied { write } for pid=7659 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 222.513018][ T30] audit: type=1400 audit(1783157390.338:763): avc: denied { read } for pid=7659 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 222.582442][ T30] audit: type=1400 audit(1783157390.458:764): avc: denied { bind } for pid=7662 comm="syz.3.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 222.604364][ T30] audit: type=1400 audit(1783157390.478:765): avc: denied { setopt } for pid=7659 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 222.633200][ T5711] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 222.859390][ T30] audit: type=1400 audit(1783157390.678:766): avc: denied { connect } for pid=7662 comm="syz.3.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 222.884571][ T5740] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 223.043988][ T5740] input input15: Device does not respond to id packet M [ 223.126579][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.130535][ T30] audit: type=1400 audit(1783157390.888:767): avc: denied { write } for pid=7666 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 223.156855][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.157015][ T5711] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 223.330870][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.348774][ T5740] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 223.362048][ T5740] input input15: Device does not respond to id packet P [ 223.374298][ T5711] usb 2-1: config 0 descriptor?? [ 223.392117][ T5740] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 223.418197][ T30] audit: type=1400 audit(1783157391.168:768): avc: denied { accept } for pid=7662 comm="syz.3.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.441368][ T5740] input input15: Device does not respond to id packet B [ 223.460339][ T5740] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 223.469622][ T7672] veth1_macvtap: left promiscuous mode [ 223.485340][ T5740] input input15: Device does not respond to id packet N [ 223.504652][ T5740] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 223.508802][ T7672] macsec0: entered allmulticast mode [ 223.528035][ T5740] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 223.544490][ T5740] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 223.551676][ T5740] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 223.567482][ T7675] veth1_macvtap: entered promiscuous mode [ 223.897585][ T5740] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 223.916315][ T5740] usb 5-1: USB disconnect, device number 16 [ 223.922334][ T7675] veth1_macvtap: entered allmulticast mode [ 223.969969][ T7675] macsec0: left allmulticast mode [ 223.980748][ T7675] veth1_macvtap: left allmulticast mode [ 224.133925][ T5711] usb 2-1: string descriptor 0 read error: -22 [ 224.445291][ T5711] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 224.656819][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 224.678951][ T7693] netlink: 'syz.0.498': attribute type 10 has an invalid length. [ 224.699186][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.498'. [ 224.725154][ T7694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.742080][ T7693] geneve3: entered promiscuous mode [ 224.754174][ T7693] geneve3: entered allmulticast mode [ 224.835138][ T5740] usb 2-1: USB disconnect, device number 15 [ 224.842810][ T7694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.896819][ T7694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.308459][ T7701] vlan1: entered allmulticast mode [ 225.314469][ T7701] veth0_vlan: entered allmulticast mode [ 225.426099][ T7704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.548300][ T7704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.585399][ T7704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.141878][ T5753] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 226.358175][ T5753] usb 2-1: unable to get BOS descriptor or descriptor too short [ 226.438048][ T5753] usb 2-1: config 114 has an invalid interface number: 5 but max is 0 [ 226.519192][ T5753] usb 2-1: config 114 has no interface number 0 [ 226.614645][ T5753] usb 2-1: config 114 interface 5 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 226.772843][ T5753] usb 2-1: config 114 interface 5 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 226.908529][ T5753] usb 2-1: config 114 interface 5 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 226.974655][ T7727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.016802][ T5753] usb 2-1: config 114 interface 5 has no altsetting 0 [ 227.183597][ T5753] usb 2-1: New USB device found, idVendor=05c6, idProduct=9068, bcdDevice=ce.f7 [ 227.209663][ T5753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.255025][ T5753] usb 2-1: Product: syz [ 227.266879][ T5753] usb 2-1: Manufacturer: syz [ 227.284113][ T5753] usb 2-1: SerialNumber: syz [ 227.361867][ T7725] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 227.391065][ T7725] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 227.661029][ T5753] usb 2-1: USB disconnect, device number 16 [ 227.922417][ T5740] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 228.003426][ T30] audit: type=1400 audit(1783157395.878:769): avc: denied { create } for pid=7745 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 228.071898][ T30] audit: type=1400 audit(1783157395.898:770): avc: denied { shutdown } for pid=7745 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.097163][ T5740] usb 3-1: config 0 interface 0 has no altsetting 0 [ 228.110259][ T5740] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 228.120643][ T5740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.192857][ T5740] usb 3-1: config 0 descriptor?? [ 228.281963][ T188] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 228.451992][ T188] usb 4-1: Using ep0 maxpacket: 16 [ 228.468284][ T188] usb 4-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 228.479292][ T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.488964][ T188] usb 4-1: Product: syz [ 228.493845][ T188] usb 4-1: Manufacturer: syz [ 228.498639][ T188] usb 4-1: SerialNumber: syz [ 228.532323][ T188] usb 4-1: config 0 descriptor?? [ 228.547062][ T188] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 228.629827][ T30] audit: type=1400 audit(1783157396.498:771): avc: denied { getattr } for pid=7754 comm="syz.0.519" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 228.652980][ T30] audit: type=1400 audit(1783157396.518:772): avc: denied { mount } for pid=7754 comm="syz.0.519" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 228.678209][ T5753] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 228.694138][ T30] audit: type=1804 audit(1783157396.568:773): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.519" name="/newroot/108/file0" dev="tmpfs" ino=577 res=1 errno=0 [ 228.716420][ T993] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 228.747344][ T30] audit: type=1400 audit(1783157396.618:774): avc: denied { setopt } for pid=7745 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 228.748987][ T7746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.775397][ T7746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.790110][ T188] pwc: send_video_command error -71 [ 228.798881][ T188] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 228.806536][ T188] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 228.820046][ T188] usb 4-1: USB disconnect, device number 14 [ 228.849861][ T5753] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 228.859527][ T5753] usb 2-1: config 0 has no interface number 0 [ 228.863768][ T7738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.869838][ T5753] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.881850][ T993] usb 5-1: Using ep0 maxpacket: 32 [ 228.888128][ T5753] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.903073][ T993] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 228.903260][ T5753] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.922752][ T993] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 228.924771][ T5753] usb 2-1: config 0 interface 1 has no altsetting 0 [ 228.939432][ T5753] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 228.940879][ T7738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.948822][ T5711] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 228.958607][ T993] usb 5-1: config 0 has no interface number 0 [ 228.972159][ T993] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 228.973278][ T5753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.980954][ T993] usb 5-1: config 0 has no interface number 0 [ 228.992666][ T5753] usb 2-1: config 0 descriptor?? [ 228.996896][ T993] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 229.008503][ T993] usb 5-1: config 0 has no interface number 0 [ 229.015878][ T993] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 229.024930][ T993] usb 5-1: config 0 has no interface number 0 [ 229.027199][ T7757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.032033][ T993] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 229.050664][ T993] usb 5-1: config 0 has no interface number 0 [ 229.052401][ T7738] netlink: 80 bytes leftover after parsing attributes in process `syz.2.513'. [ 229.057878][ T993] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 229.074722][ T993] usb 5-1: config 0 has no interface number 0 [ 229.082438][ T993] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 229.090714][ T993] usb 5-1: config 0 has no interface number 0 [ 229.097297][ T5740] usbhid 3-1:0.0: can't add hid device: -71 [ 229.103638][ T5740] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 229.111576][ T993] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 229.119679][ T993] usb 5-1: config 0 has no interface number 0 [ 229.131493][ T5740] usb 3-1: USB disconnect, device number 26 [ 229.139053][ T993] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 229.149637][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.155119][ T5711] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 229.159853][ T993] usb 5-1: Product: syz [ 229.170270][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.171208][ T993] usb 5-1: Manufacturer: syz [ 229.182082][ T5711] usb 1-1: config 0 descriptor?? [ 229.189144][ T993] usb 5-1: SerialNumber: syz [ 229.201490][ T993] usb 5-1: config 0 descriptor?? [ 229.216481][ T5711] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 229.218096][ T993] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 229.479540][ T5711] usb 1-1: USB disconnect, device number 14 [ 229.590182][ T7765] netlink: 48 bytes leftover after parsing attributes in process `syz.3.520'. [ 229.943242][ T993] etas_es58x 5-1:0.2: could not retrieve the product info string [ 230.012337][ T30] audit: type=1400 audit(1783157397.888:775): avc: denied { bind } for pid=7768 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 230.022646][ T993] usb 5-1: USB disconnect, device number 17 [ 230.038268][ T7772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.039371][ T993] etas_es58x 5-1:0.2: Disconnecting syz syz [ 230.061917][ T30] audit: type=1400 audit(1783157397.908:776): avc: denied { read } for pid=7768 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 230.141887][ T5740] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 230.155576][ T7774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.175472][ T7772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.215357][ T7491] udevd[7491]: setting owner of /dev/bus/usb/005/017 to uid=0, gid=0 failed: No such file or directory [ 230.233756][ T30] audit: type=1400 audit(1783157398.108:777): avc: denied { read } for pid=5275 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 230.282481][ T5740] usb 4-1: device descriptor read/64, error -71 [ 230.331927][ T29] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 230.481859][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 230.488198][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.499310][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.509083][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.521920][ T29] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 230.530928][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.531970][ T5740] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 230.541200][ T29] usb 1-1: config 0 descriptor?? [ 230.702802][ T5740] usb 4-1: device descriptor read/64, error -71 [ 230.832075][ T5740] usb usb4-port1: attempt power cycle [ 230.969503][ T29] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 230.976998][ T29] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 231.001534][ T29] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0006/input/input16 [ 231.079506][ T29] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 231.182285][ T5740] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 231.212839][ T5740] usb 4-1: device descriptor read/8, error -71 [ 231.256394][ T5753] usbhid 2-1:0.1: can't add hid device: -71 [ 231.272564][ T5753] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 231.302303][ T5753] usb 2-1: USB disconnect, device number 17 [ 231.327740][ T5718] usb 1-1: USB disconnect, device number 15 [ 231.461947][ T5740] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 231.492606][ T5740] usb 4-1: device descriptor read/8, error -71 [ 231.612172][ T5740] usb usb4-port1: unable to enumerate USB device [ 231.846201][ T7802] FAULT_INJECTION: forcing a failure. [ 231.846201][ T7802] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 231.869549][ T7802] CPU: 1 UID: 0 PID: 7802 Comm: syz.1.531 Not tainted syzkaller #0 PREEMPT(full) [ 231.869574][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 231.869584][ T7802] Call Trace: [ 231.869589][ T7802] [ 231.869595][ T7802] dump_stack_lvl+0x100/0x190 [ 231.869620][ T7802] should_fail_ex.cold+0x5/0xa [ 231.869642][ T7802] _copy_from_user+0x2e/0xd0 [ 231.869662][ T7802] kstrtouint_from_user+0xd6/0x1d0 [ 231.869688][ T7802] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 231.869711][ T7802] ? __lock_acquire+0x49f/0x1a40 [ 231.869741][ T7802] proc_fail_nth_write+0x83/0x220 [ 231.869765][ T7802] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 231.869795][ T7802] vfs_write+0x2aa/0x1050 [ 231.869820][ T7802] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 231.869845][ T7802] ? __pfx_vfs_write+0x10/0x10 [ 231.869867][ T7802] ? __fget_files+0x215/0x3d0 [ 231.869899][ T7802] ? __fget_files+0x21f/0x3d0 [ 231.869932][ T7802] ksys_write+0x12a/0x250 [ 231.869961][ T7802] ? __pfx_ksys_write+0x10/0x10 [ 231.869991][ T7802] do_syscall_64+0x115/0x870 [ 231.870017][ T7802] ? clear_bhb_loop+0x40/0x90 [ 231.870039][ T7802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.870056][ T7802] RIP: 0033:0x7f3e81b5e68e [ 231.870071][ T7802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 231.870087][ T7802] RSP: 002b:00007f3e82aaffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.870105][ T7802] RAX: ffffffffffffffda RBX: 00007f3e82ab06c0 RCX: 00007f3e81b5e68e [ 231.870117][ T7802] RDX: 0000000000000001 RSI: 00007f3e82ab00a0 RDI: 0000000000000003 [ 231.870128][ T7802] RBP: 00007f3e82ab0090 R08: 0000000000000000 R09: 0000000000000000 [ 231.870138][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.870149][ T7802] R13: 00007f3e81e26038 R14: 00007f3e81e25fa0 R15: 00007fff376ac3a8 [ 231.870174][ T7802] [ 232.094907][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 232.110610][ T7806] netlink: 'syz.1.533': attribute type 10 has an invalid length. [ 232.135920][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.533'. [ 232.204165][ T7808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.236966][ T7806] geneve3: entered promiscuous mode [ 232.244753][ T7806] geneve3: entered allmulticast mode [ 232.335722][ T7816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.356064][ T7808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.487324][ T30] audit: type=1400 audit(1783157400.358:778): avc: denied { append } for pid=7817 comm="syz.1.537" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 232.777134][ T7827] netdevsim netdevsim3: Direct firmware load for . [ 232.777134][ T7827] failed with error -2 [ 232.832493][ T7827] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 232.832493][ T7827] [ 233.171904][ T5718] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 233.182835][ T7838] kvm: kvm [7837]: vcpu1, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 233.442288][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 233.453688][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 233.473229][ T5718] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.491844][ T5718] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 233.512248][ T5718] usb 2-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 233.529693][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.542108][ T5718] usb 2-1: Product: syz [ 233.549139][ T5718] usb 2-1: Manufacturer: syz [ 233.562496][ T5718] usb 2-1: SerialNumber: syz [ 233.607193][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 233.690008][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 233.724878][ T7858] netlink: 'syz.0.547': attribute type 10 has an invalid length. [ 233.749478][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'. [ 233.789937][ T7858] geneve3: entered promiscuous mode [ 233.798008][ T7858] geneve3: entered allmulticast mode [ 233.806044][ T5718] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 233.827123][ T5718] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 233.846347][ T5718] usb 2-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 234.524378][ T5718] usb 2-1: USB disconnect, device number 18 [ 234.950814][ T7905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.652654][ T7905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.691207][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.271408][ T7929] syzkaller0: entered promiscuous mode [ 236.277308][ T7929] syzkaller0: entered allmulticast mode [ 236.327988][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 236.328003][ T30] audit: type=1400 audit(1783157404.198:785): avc: denied { setopt } for pid=7928 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.394858][ T30] audit: type=1400 audit(1783157404.258:786): avc: denied { write } for pid=7928 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.551504][ T30] audit: type=1326 audit(1783157404.418:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.0.558" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e0f79de59 code=0x0 [ 236.623722][ T7935] syz.0.558 uses obsolete (PF_INET,SOCK_PACKET) [ 236.674680][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 236.684226][ T7938] netlink: 'syz.1.560': attribute type 10 has an invalid length. [ 236.692721][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.560'. [ 236.701663][ T30] audit: type=1400 audit(1783157404.568:788): avc: denied { remount } for pid=7933 comm="syz.3.559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 236.725336][ T7938] geneve3: entered promiscuous mode [ 236.731043][ T7938] geneve3: entered allmulticast mode [ 236.853152][ T5740] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 236.913858][ T30] audit: type=1400 audit(1783157404.788:789): avc: denied { audit_write } for pid=7940 comm="syz.1.561" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 237.011943][ T5740] usb 5-1: Using ep0 maxpacket: 32 [ 237.022851][ T5740] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 237.039749][ T5740] usb 5-1: config 0 has no interface number 0 [ 237.061955][ T5740] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 237.071652][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.087888][ T5740] usb 5-1: Product: syz [ 237.092862][ T5740] usb 5-1: Manufacturer: syz [ 237.097683][ T5740] usb 5-1: SerialNumber: syz [ 237.106976][ T5740] usb 5-1: config 0 descriptor?? [ 237.115295][ T5740] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 237.140592][ T7949] FAULT_INJECTION: forcing a failure. [ 237.140592][ T7949] name failslab, interval 1, probability 0, space 0, times 0 [ 237.155423][ T7949] CPU: 1 UID: 0 PID: 7949 Comm: syz.2.563 Not tainted syzkaller #0 PREEMPT(full) [ 237.155444][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 237.155454][ T7949] Call Trace: [ 237.155459][ T7949] [ 237.155466][ T7949] dump_stack_lvl+0x100/0x190 [ 237.155491][ T7949] should_fail_ex.cold+0x5/0xa [ 237.155511][ T7949] should_failslab+0xc2/0x120 [ 237.155530][ T7949] kmem_cache_alloc_noprof+0x91/0x6a0 [ 237.155547][ T7949] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 237.155569][ T7949] ? ptlock_alloc+0x1f/0x70 [ 237.155595][ T7949] ptlock_alloc+0x1f/0x70 [ 237.155617][ T7949] pte_alloc_one+0x82/0x3d0 [ 237.155633][ T7949] do_fault+0x86c/0x1750 [ 237.155656][ T7949] __handle_mm_fault+0x187d/0x2a00 [ 237.155684][ T7949] ? mt_find+0x45e/0x8e0 [ 237.155701][ T7949] ? __pfx___handle_mm_fault+0x10/0x10 [ 237.155721][ T7949] ? __pfx_mt_find+0x10/0x10 [ 237.155755][ T7949] handle_mm_fault+0x37b/0xa30 [ 237.155784][ T7949] __get_user_pages+0x1178/0x32a0 [ 237.155812][ T7949] ? __pfx___get_user_pages+0x10/0x10 [ 237.155838][ T7949] populate_vma_page_range+0x267/0x3f0 [ 237.155860][ T7949] ? __pfx_populate_vma_page_range+0x10/0x10 [ 237.155884][ T7949] ? __pfx_find_vma_intersection+0x10/0x10 [ 237.155904][ T7949] ? do_mmap+0x93f/0x12f0 [ 237.155925][ T7949] __mm_populate+0x107/0x3a0 [ 237.155947][ T7949] ? __pfx___mm_populate+0x10/0x10 [ 237.155969][ T7949] ? up_write+0x2e5/0x5c0 [ 237.155992][ T7949] vm_mmap_pgoff+0x37f/0x470 [ 237.156013][ T7949] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 237.156034][ T7949] ? __mutex_unlock_slowpath+0x35d/0x930 [ 237.156065][ T7949] ksys_mmap_pgoff+0xe4/0x610 [ 237.156086][ T7949] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 237.156104][ T7949] ? fput+0x79/0x100 [ 237.156120][ T7949] ? ksys_write+0x1ac/0x250 [ 237.156141][ T7949] ? __pfx_ksys_write+0x10/0x10 [ 237.156166][ T7949] __x64_sys_mmap+0x125/0x190 [ 237.156190][ T7949] do_syscall_64+0x115/0x870 [ 237.156211][ T7949] ? clear_bhb_loop+0x40/0x90 [ 237.156231][ T7949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.156250][ T7949] RIP: 0033:0x7f097d79de59 [ 237.156264][ T7949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.156279][ T7949] RSP: 002b:00007f097e688028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 237.156295][ T7949] RAX: ffffffffffffffda RBX: 00007f097da25fa0 RCX: 00007f097d79de59 [ 237.156307][ T7949] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 237.156316][ T7949] RBP: 00007f097e688090 R08: ffffffffffffffff R09: 0000000000000000 [ 237.156326][ T7949] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 237.156336][ T7949] R13: 00007f097da26038 R14: 00007f097da25fa0 R15: 00007fff6ab90468 [ 237.156359][ T7949] [ 237.171902][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 237.457957][ T5740] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 237.528304][ T5740] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 237.836797][ T7954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.565'. [ 237.938434][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 237.957941][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.966646][ T9] usb 2-1: Product: syz [ 237.970850][ T9] usb 2-1: Manufacturer: syz [ 237.975565][ T9] usb 2-1: SerialNumber: syz [ 237.983752][ T9] usb 2-1: config 0 descriptor?? [ 238.622916][ T7971] Cannot find add_set index 0 as target [ 238.865727][ T9] usb 2-1: Firmware: major: 57, minor: 32, hardware type: UNKNOWN (170) [ 238.911634][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 238.921219][ T7980] netlink: 'syz.3.572': attribute type 10 has an invalid length. [ 238.929544][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 238.967142][ T7980] geneve3: entered promiscuous mode [ 238.981358][ T7980] geneve3: entered allmulticast mode [ 239.078773][ T9] usb 2-1: Firmware: build  [ 239.193490][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 239.193859][ T29] usb 5-1: USB disconnect, device number 18 [ 239.251904][ T29] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 239.296446][ T29] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 239.325684][ T29] quatech2 5-1:0.51: device disconnected [ 239.342396][ T5718] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 239.612073][ T5718] usb 3-1: device descriptor read/64, error -71 [ 240.092925][ T5718] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 240.172408][ T9] usb 2-1: failed to fetch extended address, random address set [ 240.181856][ T9] usb 2-1: atusb_probe: initialization failed, error = -524 [ 240.191071][ T9] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 240.358417][ T9] usb 2-1: USB disconnect, device number 19 [ 240.475034][ T5718] usb 3-1: device descriptor read/64, error -71 [ 241.343129][ T5718] usb usb3-port1: attempt power cycle [ 241.458135][ T7991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.782267][ T5718] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 241.867186][ T5718] usb 3-1: device descriptor read/8, error -71 [ 242.438393][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 242.992611][ T8015] netdevsim netdevsim3 netdevsim0: refused to change device tx_queue_len [ 243.942118][ T30] audit: type=1800 audit(1783157411.718:790): pid=8027 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.588" name="file1" dev="overlay" ino=626 res=0 errno=0 [ 243.979273][ T8030] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 244.594265][ T8046] Cannot find add_set index 0 as target [ 244.833870][ T8052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.594'. [ 244.918618][ T30] audit: type=1400 audit(1783157412.788:791): avc: denied { append } for pid=8060 comm="syz.3.598" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 246.097925][ T8080] gre1: entered promiscuous mode [ 246.319218][ T30] audit: type=1400 audit(1783157414.188:792): avc: denied { mount } for pid=8092 comm="syz.0.606" name="/" dev="ramfs" ino=19313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 246.601665][ T5753] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 246.783811][ T5753] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 247.966506][ T5753] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 247.980417][ T5753] usb 1-1: config 220 has an invalid descriptor of length 178, skipping remainder of the config [ 247.991310][ T5753] usb 1-1: config 220 has no interface number 2 [ 247.997641][ T5753] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 248.574155][ T5753] usb 1-1: config 220 interface 0 has no altsetting 0 [ 248.581118][ T5753] usb 1-1: config 220 interface 76 has no altsetting 0 [ 248.588181][ T5753] usb 1-1: config 220 interface 1 has no altsetting 0 [ 248.597557][ T5753] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 248.606779][ T5753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.608414][ T30] audit: type=1326 audit(1783157416.028:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.4.602" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f36d299de59 code=0x0 [ 248.614892][ T5753] usb 1-1: Product: syz [ 248.644993][ T5753] usb 1-1: Manufacturer: syz [ 248.649706][ T5753] usb 1-1: SerialNumber: syz [ 248.833767][ T30] audit: type=1400 audit(1783157416.208:794): avc: denied { open } for pid=8079 comm="syz.4.602" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 248.976256][ T30] audit: type=1400 audit(1783157416.788:795): avc: denied { ioctl } for pid=8092 comm="syz.0.606" path="socket:[19329]" dev="sockfs" ino=19329 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 249.100151][ T8122] netlink: 36 bytes leftover after parsing attributes in process `syz.0.606'. [ 249.155049][ T30] audit: type=1400 audit(1783157417.018:796): avc: denied { mounton } for pid=8118 comm="syz.4.610" path="/file0" dev="bpf" ino=19757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=dir permissive=1 [ 249.163555][ T8120] overlayfs: upper fs does not support tmpfile. [ 249.240048][ T8122] usb usb9: usbfs: process 8122 (syz.0.606) did not claim interface 0 before use [ 249.378598][ T8128] syzkaller0: entered promiscuous mode [ 249.399780][ T8128] syzkaller0: entered allmulticast mode [ 249.693016][ T5753] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 249.718740][ T5753] uvcvideo 1-1:220.0: No valid video chain found. [ 249.732639][ T5753] usb 1-1: selecting invalid altsetting 0 [ 249.782121][ T5718] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 249.821558][ T8136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=8136 comm=syz.3.615 [ 249.830204][ T5753] usb 1-1: selecting invalid altsetting 0 [ 250.049562][ T5753] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 250.094513][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.102022][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.116646][ T5753] usb 1-1: USB disconnect, device number 16 [ 250.124322][ T5718] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 250.177970][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 140, setting to 64 [ 250.194080][ T5718] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.204009][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.216210][ T5718] usb 5-1: Product: syz [ 250.220463][ T5718] usb 5-1: Manufacturer: syz [ 250.257402][ T30] audit: type=1400 audit(1783157418.138:797): avc: denied { write } for pid=8137 comm="syz.3.616" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 250.285897][ T5718] usb 5-1: SerialNumber: syz [ 250.319243][ T5718] usb 5-1: config 0 descriptor?? [ 250.332646][ T8131] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 250.407614][ T30] audit: type=1400 audit(1783157418.278:798): avc: denied { setopt } for pid=8137 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 250.562837][ T5844] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 250.573550][ T8131] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 250.652554][ T188] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 250.731905][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 250.738716][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.750275][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.760031][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 250.812068][ T188] usb 2-1: Using ep0 maxpacket: 32 [ 250.826704][ T5844] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 250.835881][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.853850][ T5844] usb 3-1: config 0 descriptor?? [ 251.039284][ T993] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 251.051243][ T188] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 251.070205][ T188] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 251.083928][ T188] usb 2-1: config 1 interface 0 has no altsetting 0 [ 251.116480][ T188] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.125646][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.133659][ T188] usb 2-1: Product: Ј [ 251.137720][ T188] usb 2-1: Manufacturer: ㉭竆축Ｗ悁⁷挌쩦儞 [ 251.145306][ T188] usb 2-1: SerialNumber: ⠁ [ 251.152979][ T8143] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 251.160282][ T8143] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 251.295152][ T8156] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 251.413271][ T8143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.427786][ T8143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.529627][ T188] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 251.542448][ T993] usb 4-1: Using ep0 maxpacket: 16 [ 251.549636][ T188] usb 2-1: USB disconnect, device number 20 [ 251.564003][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.574256][ T5718] usb 5-1: USB disconnect, device number 19 [ 251.583951][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.597942][ T5844] usbhid 3-1:0.0: can't add hid device: -71 [ 251.608808][ T993] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.612824][ T5844] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 251.622376][ T993] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 251.652780][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.681051][ T5844] usb 3-1: USB disconnect, device number 31 [ 251.694251][ T993] usb 4-1: config 0 descriptor?? [ 253.253037][ T8162] Bluetooth: MGMT ver 1.23 [ 253.253529][ T8166] netlink: 36 bytes leftover after parsing attributes in process `syz.1.625'. [ 253.257520][ T8162] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 253.565007][ T5718] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 254.282338][ T5844] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 254.300080][ T993] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 254.372694][ T993] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 254.471972][ T993] microsoft 0003:045E:07DA.0007: item fetching failed at offset 31/34 [ 254.522492][ T993] microsoft 0003:045E:07DA.0007: parse failed [ 254.545102][ T993] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22 [ 255.242448][ T3793] usb 4-1: USB disconnect, device number 19 [ 255.345092][ T30] audit: type=1400 audit(1783157423.218:799): avc: denied { read } for pid=8181 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.371896][ T5718] usb 5-1: device descriptor read/64, error -71 [ 255.529133][ T5844] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 255.551839][ T5844] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 255.562861][ T5844] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 255.575910][ T5844] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 255.617295][ T5844] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.660539][ T30] audit: type=1400 audit(1783157423.508:800): avc: denied { accept } for pid=8186 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 255.689924][ T5718] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 255.759693][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.875070][ T5844] usb 3-1: Product: syz [ 255.924234][ T5844] usb 3-1: Manufacturer: syz [ 255.941991][ T5718] usb 5-1: device descriptor read/64, error -71 [ 256.005656][ T5844] usb 3-1: SerialNumber: syz [ 256.103635][ T5718] usb usb5-port1: attempt power cycle [ 256.167559][ T8168] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 256.397134][ T5844] usb 3-1: can't set config #1, error -71 [ 256.446680][ T5844] usb 3-1: USB disconnect, device number 32 [ 256.645196][ T5718] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 257.379564][ T5718] usb 5-1: device descriptor read/8, error -71 [ 257.506137][ T8219] FAULT_INJECTION: forcing a failure. [ 257.506137][ T8219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.537005][ T8219] CPU: 1 UID: 0 PID: 8219 Comm: syz.2.640 Not tainted syzkaller #0 PREEMPT(full) [ 257.537031][ T8219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 257.537042][ T8219] Call Trace: [ 257.537048][ T8219] [ 257.537054][ T8219] dump_stack_lvl+0x100/0x190 [ 257.537081][ T8219] should_fail_ex.cold+0x5/0xa [ 257.537102][ T8219] _copy_from_iter+0x43a/0x1690 [ 257.537128][ T8219] ? __pfx__copy_from_iter+0x10/0x10 [ 257.537147][ T8219] ? __pfx___alloc_skb+0x10/0x10 [ 257.537182][ T8219] netlink_sendmsg+0x808/0xda0 [ 257.537210][ T8219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.537241][ T8219] ____sys_sendmsg+0xa4d/0xbe0 [ 257.537261][ T8219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.537285][ T8219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.537318][ T8219] ___sys_sendmsg+0x190/0x1e0 [ 257.537342][ T8219] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.537364][ T8219] ? __lock_acquire+0x49f/0x1a40 [ 257.537383][ T8219] ? get_pid_task+0x106/0x250 [ 257.537436][ T8219] __sys_sendmsg+0x160/0x210 [ 257.537454][ T8219] ? __pfx___sys_sendmsg+0x10/0x10 [ 257.537485][ T8219] do_syscall_64+0x115/0x870 [ 257.537509][ T8219] ? clear_bhb_loop+0x40/0x90 [ 257.537530][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.537547][ T8219] RIP: 0033:0x7f097d79de59 [ 257.537562][ T8219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.537579][ T8219] RSP: 002b:00007f097e688028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.537596][ T8219] RAX: ffffffffffffffda RBX: 00007f097da25fa0 RCX: 00007f097d79de59 [ 257.537608][ T8219] RDX: 0000000020040840 RSI: 0000200000000000 RDI: 0000000000000003 [ 257.537619][ T8219] RBP: 00007f097e688090 R08: 0000000000000000 R09: 0000000000000000 [ 257.537629][ T8219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.537639][ T8219] R13: 00007f097da26038 R14: 00007f097da25fa0 R15: 00007fff6ab90468 [ 257.537663][ T8219] [ 257.836542][ T30] audit: type=1400 audit(1783157425.708:801): avc: denied { setopt } for pid=8224 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 257.997290][ T30] audit: type=1400 audit(1783157425.798:802): avc: denied { ioctl } for pid=8214 comm="syz.1.639" path="socket:[20036]" dev="sockfs" ino=20036 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 258.067617][ T8236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.642'. [ 258.073148][ T993] IPVS: starting estimator thread 0... [ 258.202521][ T30] audit: type=1400 audit(1783157425.898:803): avc: denied { read } for pid=8215 comm="syz.0.641" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 258.231867][ T30] audit: type=1400 audit(1783157425.898:804): avc: denied { open } for pid=8215 comm="syz.0.641" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 258.256504][ T9] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 258.266267][ T8241] xt_HMARK: proto mask must be zero with L3 mode [ 258.321889][ T8239] IPVS: using max 79 ests per chain, 189600 per kthread [ 258.398149][ T30] audit: type=1400 audit(1783157425.908:805): avc: denied { ioctl } for pid=8215 comm="syz.0.641" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 258.454526][ T9] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0xA has an invalid bInterval 0, changing to 4 [ 258.473449][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 258.493963][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 258.503348][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 258.512087][ T9] usb 2-1: Product: syz [ 258.516380][ T9] usb 2-1: Manufacturer: syz [ 258.527131][ T9] usb 2-1: SerialNumber: syz [ 258.577178][ T9] usb 2-1: config 0 descriptor?? [ 258.623242][ T9] usb 2-1: selecting invalid altsetting 0 [ 258.822476][ T30] audit: type=1400 audit(1783157426.688:806): avc: denied { read } for pid=8214 comm="syz.1.639" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 258.874309][ T8221] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 258.928008][ T8221] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 258.935710][ T30] audit: type=1400 audit(1783157426.688:807): avc: denied { open } for pid=8214 comm="syz.1.639" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 258.975457][ T8221] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 259.241898][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 259.299837][ T8258] Option ' /msr' to dns_resolver key: bad/missing value [ 259.576901][ T8265] xt_hashlimit: size too large, truncated to 1048576 [ 259.672953][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 259.687813][ T9] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 259.701152][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.716990][ T9] usb 1-1: Product: syz [ 259.742994][ T9] usb 1-1: Manufacturer: syz [ 259.752110][ T9] usb 1-1: SerialNumber: syz [ 259.776131][ T5718] usb 2-1: USB disconnect, device number 21 [ 259.860086][ T8270] overlayfs: missing 'lowerdir' [ 259.933282][ T30] audit: type=1400 audit(1783157427.808:808): avc: denied { setopt } for pid=8269 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 259.988729][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.001037][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 260.016390][ T8275] FAULT_INJECTION: forcing a failure. [ 260.016390][ T8275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.056936][ T8275] CPU: 0 UID: 0 PID: 8275 Comm: syz.1.655 Not tainted syzkaller #0 PREEMPT(full) [ 260.056953][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 260.056960][ T8275] Call Trace: [ 260.056963][ T8275] [ 260.056967][ T8275] dump_stack_lvl+0x100/0x190 [ 260.056985][ T8275] should_fail_ex.cold+0x5/0xa [ 260.056999][ T8275] _copy_from_iter+0x43a/0x1690 [ 260.057015][ T8275] ? __pfx__copy_from_iter+0x10/0x10 [ 260.057027][ T8275] ? __pfx___alloc_skb+0x10/0x10 [ 260.057049][ T8275] netlink_sendmsg+0x808/0xda0 [ 260.057066][ T8275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.057085][ T8275] ____sys_sendmsg+0xa4d/0xbe0 [ 260.057098][ T8275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.057113][ T8275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.057132][ T8275] ___sys_sendmsg+0x190/0x1e0 [ 260.057146][ T8275] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.057159][ T8275] ? __lock_acquire+0x49f/0x1a40 [ 260.057171][ T8275] ? get_pid_task+0x106/0x250 [ 260.057202][ T8275] __sys_sendmsg+0x160/0x210 [ 260.057213][ T8275] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.057229][ T8275] do_syscall_64+0x115/0x870 [ 260.057244][ T8275] ? clear_bhb_loop+0x40/0x90 [ 260.057257][ T8275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.057268][ T8275] RIP: 0033:0x7f3e81b9de59 [ 260.057278][ T8275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.057288][ T8275] RSP: 002b:00007f3e82ab0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.057298][ T8275] RAX: ffffffffffffffda RBX: 00007f3e81e25fa0 RCX: 00007f3e81b9de59 [ 260.057305][ T8275] RDX: 0000000020040840 RSI: 0000200000000000 RDI: 0000000000000003 [ 260.057311][ T8275] RBP: 00007f3e82ab0090 R08: 0000000000000000 R09: 0000000000000000 [ 260.057317][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.057323][ T8275] R13: 00007f3e81e26038 R14: 00007f3e81e25fa0 R15: 00007fff376ac3a8 [ 260.057338][ T8275] [ 260.299852][ T9] usb 1-1: USB disconnect, device number 17 [ 260.353953][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.553692][ T30] audit: type=1400 audit(1783157428.428:809): avc: denied { getopt } for pid=8279 comm="syz.1.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 260.696454][ T8289] netlink: 176 bytes leftover after parsing attributes in process `syz.4.659'. [ 261.069692][ T30] audit: type=1400 audit(1783157428.938:810): avc: denied { map } for pid=8295 comm="syz.0.660" path="socket:[20611]" dev="sockfs" ino=20611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 261.096541][ T30] audit: type=1400 audit(1783157428.968:811): avc: denied { read accept } for pid=8295 comm="syz.0.660" path="socket:[20611]" dev="sockfs" ino=20611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 261.849219][ T8305] team0: No ports can be present during mode change [ 262.218067][ T30] audit: type=1400 audit(1783157430.088:812): avc: denied { write } for pid=8307 comm="syz.0.664" path="socket:[20640]" dev="sockfs" ino=20640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 262.345663][ T8310] netlink: 'syz.0.665': attribute type 4 has an invalid length. [ 262.696082][ T8322] FAULT_INJECTION: forcing a failure. [ 262.696082][ T8322] name failslab, interval 1, probability 0, space 0, times 0 [ 262.741690][ T8322] CPU: 0 UID: 0 PID: 8322 Comm: syz.2.668 Not tainted syzkaller #0 PREEMPT(full) [ 262.741715][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 262.741725][ T8322] Call Trace: [ 262.741730][ T8322] [ 262.741738][ T8322] dump_stack_lvl+0x100/0x190 [ 262.741764][ T8322] should_fail_ex.cold+0x5/0xa [ 262.741783][ T8322] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 262.741806][ T8322] should_failslab+0xc2/0x120 [ 262.741826][ T8322] kmem_cache_alloc_noprof+0x91/0x6a0 [ 262.741845][ T8322] ? skb_clone+0x190/0x400 [ 262.741866][ T8322] skb_clone+0x190/0x400 [ 262.741883][ T8322] netlink_deliver_tap+0xaed/0xcc0 [ 262.741911][ T8322] netlink_unicast+0x62b/0x850 [ 262.741936][ T8322] ? __pfx_netlink_unicast+0x10/0x10 [ 262.741966][ T8322] netlink_sendmsg+0x8b0/0xda0 [ 262.741992][ T8322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.742025][ T8322] ____sys_sendmsg+0xa4d/0xbe0 [ 262.742044][ T8322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.742069][ T8322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.742102][ T8322] ___sys_sendmsg+0x190/0x1e0 [ 262.742127][ T8322] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.742147][ T8322] ? __lock_acquire+0x49f/0x1a40 [ 262.742166][ T8322] ? get_pid_task+0x106/0x250 [ 262.742219][ T8322] __sys_sendmsg+0x160/0x210 [ 262.742237][ T8322] ? __pfx___sys_sendmsg+0x10/0x10 [ 262.742267][ T8322] do_syscall_64+0x115/0x870 [ 262.742297][ T8322] ? clear_bhb_loop+0x40/0x90 [ 262.742319][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.742336][ T8322] RIP: 0033:0x7f097d79de59 [ 262.742351][ T8322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.742367][ T8322] RSP: 002b:00007f097e688028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.742384][ T8322] RAX: ffffffffffffffda RBX: 00007f097da25fa0 RCX: 00007f097d79de59 [ 262.742396][ T8322] RDX: 0000000020040840 RSI: 0000200000000000 RDI: 0000000000000003 [ 262.742406][ T8322] RBP: 00007f097e688090 R08: 0000000000000000 R09: 0000000000000000 [ 262.742416][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.742426][ T8322] R13: 00007f097da26038 R14: 00007f097da25fa0 R15: 00007fff6ab90468 [ 262.742450][ T8322] [ 263.237971][ T30] audit: type=1400 audit(1783157431.108:813): avc: denied { getopt } for pid=8330 comm="syz.1.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 263.249556][ T8333] nvme_fabrics: missing parameter 'transport=%s' [ 263.264750][ T8333] nvme_fabrics: missing parameter 'nqn=%s' [ 263.270589][ T8334] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 263.305556][ T8333] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 263.342104][ T30] audit: type=1400 audit(1783157431.208:814): avc: denied { write } for pid=8319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.398081][ T30] audit: type=1400 audit(1783157431.208:815): avc: denied { listen } for pid=8340 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 263.446407][ T30] audit: type=1400 audit(1783157431.248:816): avc: denied { accept } for pid=8340 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 264.303097][ T8348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.930019][ T30] audit: type=1400 audit(1783157432.798:817): avc: denied { write } for pid=8352 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.972625][ T8354] netlink: 392 bytes leftover after parsing attributes in process `syz.3.676'. [ 265.006077][ T30] audit: type=1400 audit(1783157432.858:818): avc: denied { setopt } for pid=8353 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 265.106925][ T8360] 9p: Bad value for 'wfdno' [ 265.111588][ T8361] 9p: Bad value for 'wfdno' [ 265.391889][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'. [ 266.461661][ T8399] overlayfs: missing 'lowerdir' [ 266.730441][ T8402] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 266.756539][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 266.756552][ T30] audit: type=1800 audit(1783157434.628:820): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.682" name="/newroot/133/bus" dev="tmpfs" ino=712 res=0 errno=0 [ 266.861512][ T30] audit: type=1400 audit(1783157434.728:821): avc: denied { setattr } for pid=8400 comm="syz.3.686" name="" dev="pipefs" ino=5177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 266.915963][ T30] audit: type=1400 audit(1783157434.788:822): avc: denied { create } for pid=8407 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 266.969863][ T5740] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 267.007981][ T30] audit: type=1400 audit(1783157434.788:823): avc: denied { write } for pid=8407 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 267.041322][ T8417] FAULT_INJECTION: forcing a failure. [ 267.041322][ T8417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.078425][ T30] audit: type=1400 audit(1783157434.818:824): avc: denied { write } for pid=8359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.096494][ T8417] CPU: 1 UID: 0 PID: 8417 Comm: syz.1.689 Not tainted syzkaller #0 PREEMPT(full) [ 267.096516][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 267.096525][ T8417] Call Trace: [ 267.096530][ T8417] [ 267.096536][ T8417] dump_stack_lvl+0x100/0x190 [ 267.096559][ T8417] should_fail_ex.cold+0x5/0xa [ 267.096579][ T8417] _copy_from_user+0x2e/0xd0 [ 267.096598][ T8417] kstrtouint_from_user+0xd6/0x1d0 [ 267.096626][ T8417] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 267.096646][ T8417] ? __lock_acquire+0x49f/0x1a40 [ 267.096673][ T8417] proc_fail_nth_write+0x83/0x220 [ 267.096694][ T8417] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.096719][ T8417] vfs_write+0x2aa/0x1050 [ 267.096741][ T8417] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.096762][ T8417] ? __pfx_vfs_write+0x10/0x10 [ 267.096782][ T8417] ? __fget_files+0x215/0x3d0 [ 267.096808][ T8417] ? __fget_files+0x21f/0x3d0 [ 267.096836][ T8417] ksys_write+0x12a/0x250 [ 267.096856][ T8417] ? __pfx_ksys_write+0x10/0x10 [ 267.096882][ T8417] do_syscall_64+0x115/0x870 [ 267.096905][ T8417] ? clear_bhb_loop+0x40/0x90 [ 267.096924][ T8417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.096939][ T8417] RIP: 0033:0x7f3e81b5e68e [ 267.096951][ T8417] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 267.096965][ T8417] RSP: 002b:00007f3e82aaffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 267.096980][ T8417] RAX: ffffffffffffffda RBX: 00007f3e82ab06c0 RCX: 00007f3e81b5e68e [ 267.096990][ T8417] RDX: 0000000000000001 RSI: 00007f3e82ab00a0 RDI: 0000000000000004 [ 267.096999][ T8417] RBP: 00007f3e82ab0090 R08: 0000000000000000 R09: 0000000000000000 [ 267.097007][ T8417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.097016][ T8417] R13: 00007f3e81e26038 R14: 00007f3e81e25fa0 R15: 00007fff376ac3a8 [ 267.097037][ T8417] [ 267.297393][ T30] audit: type=1400 audit(1783157435.008:825): avc: denied { write } for pid=8423 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.323447][ T5740] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 267.335071][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 140, setting to 64 [ 267.355538][ T5740] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 267.402361][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.412321][ T3793] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 267.453105][ T5740] usb 1-1: Product: syz [ 267.473013][ T5740] usb 1-1: Manufacturer: syz [ 267.583702][ T3793] usb 3-1: Using ep0 maxpacket: 8 [ 267.685919][ T5740] usb 1-1: SerialNumber: syz [ 267.780425][ T3793] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.786451][ T5740] usb 1-1: config 0 descriptor?? [ 267.808792][ T8398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 267.826962][ T3793] usb 3-1: config 1 interface 0 has no altsetting 0 [ 267.873849][ T3793] usb 3-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.40 [ 267.905106][ T3793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.926574][ T3793] usb 3-1: Product: syz [ 267.931168][ T3793] usb 3-1: Manufacturer: syz [ 267.939408][ T3793] usb 3-1: SerialNumber: syz [ 267.948876][ T8455] netlink: 264 bytes leftover after parsing attributes in process `syz.1.698'. [ 267.953046][ T8454] netlink: 60 bytes leftover after parsing attributes in process `syz.4.699'. [ 267.988309][ T8454] macsec1: entered promiscuous mode [ 267.993850][ T8454] virt_wifi0: entered promiscuous mode [ 268.094345][ T8398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.274785][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.284492][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.300912][ T3793] usbhid 3-1:1.0: can't add hid device: -71 [ 268.307021][ T3793] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 268.324462][ T3793] usb 3-1: USB disconnect, device number 33 [ 268.717510][ T5753] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 268.725304][ T30] audit: type=1400 audit(1783157436.308:826): avc: denied { checkpoint_restore } for pid=8466 comm="syz.3.702" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 269.097985][ T8476] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 269.442826][ T5753] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 269.452248][ T5753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.460329][ T5753] usb 5-1: Product: syz [ 269.464571][ T5753] usb 5-1: Manufacturer: syz [ 269.469253][ T5753] usb 5-1: SerialNumber: syz [ 269.477935][ T5753] usb 5-1: config 0 descriptor?? [ 269.515999][ T5718] usb 1-1: USB disconnect, device number 18 [ 269.588383][ T30] audit: type=1400 audit(1783157437.458:827): avc: denied { read } for pid=8481 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 269.695392][ T5753] usb 5-1: f81604_read: reg: 105 failed: -EPROTO [ 269.706646][ T5753] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 269.726970][ T5753] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 269.750208][ T5753] usb 5-1: USB disconnect, device number 24 [ 269.832806][ T8491] netlink: 84 bytes leftover after parsing attributes in process `syz.1.709'. [ 269.852414][ T5740] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 269.863600][ T8491] netlink: 'syz.1.709': attribute type 1 has an invalid length. [ 270.015636][ T5740] usb 4-1: Using ep0 maxpacket: 16 [ 270.028081][ T5740] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 270.199079][ T5740] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 270.217401][ T5740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.233041][ T5740] usb 4-1: Product: syz [ 270.744137][ T5740] usb 4-1: Manufacturer: syz [ 270.748782][ T5740] usb 4-1: SerialNumber: syz [ 270.759441][ T5740] usb 4-1: config 0 descriptor?? [ 270.776681][ T5740] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 270.786598][ T5740] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 270.970501][ T8506] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len [ 271.225248][ T993] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 271.271672][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.715'. [ 271.285858][ T8513] 9p: Bad value for 'rfdno' [ 271.377620][ T5740] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 271.403931][ T993] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 271.415649][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 140, setting to 64 [ 271.436042][ T993] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 271.445316][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.453856][ T993] usb 2-1: Product: syz [ 271.458253][ T993] usb 2-1: Manufacturer: syz [ 271.463250][ T993] usb 2-1: SerialNumber: syz [ 271.472665][ T993] usb 2-1: config 0 descriptor?? [ 271.480964][ T8508] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 271.690098][ T8508] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 271.748552][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 271.757918][ T8518] netlink: 36 bytes leftover after parsing attributes in process `syz.4.717'. [ 271.812574][ T5740] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 271.846116][ T5740] em28xx 4-1:0.0: board has no eeprom [ 272.081887][ T5753] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 272.139576][ T8529] FAULT_INJECTION: forcing a failure. [ 272.139576][ T8529] name failslab, interval 1, probability 0, space 0, times 0 [ 272.152554][ T8529] CPU: 1 UID: 0 PID: 8529 Comm: syz.1.714 Not tainted syzkaller #0 PREEMPT(full) [ 272.152578][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 272.152588][ T8529] Call Trace: [ 272.152594][ T8529] [ 272.152600][ T8529] dump_stack_lvl+0x100/0x190 [ 272.152625][ T8529] should_fail_ex.cold+0x5/0xa [ 272.152648][ T8529] should_failslab+0xc2/0x120 [ 272.152668][ T8529] __kmalloc_cache_noprof+0x91/0x6c0 [ 272.152701][ T8529] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 272.152729][ T8529] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 272.152753][ T8529] ? rcu_is_watching+0x12/0xc0 [ 272.152778][ T8529] ? trace_contention_end+0x126/0x160 [ 272.152800][ T8529] ? __mutex_lock+0x26d/0x1bd0 [ 272.152825][ T8529] ? snd_pcm_oss_write+0x49a/0xa30 [ 272.152848][ T8529] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 272.152873][ T8529] ? __pfx___mutex_lock+0x10/0x10 [ 272.152907][ T8529] ? get_pid_task+0xfc/0x250 [ 272.152931][ T8529] ? get_pid_task+0xfc/0x250 [ 272.152958][ T8529] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 272.152983][ T8529] snd_pcm_oss_write+0x4bb/0xa30 [ 272.153005][ T8529] ? bpf_lsm_file_permission+0x9/0x10 [ 272.153029][ T8529] ? security_file_permission+0x76/0x210 [ 272.153059][ T8529] vfs_write+0x2aa/0x1050 [ 272.153084][ T8529] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 272.153109][ T8529] ? __pfx_vfs_write+0x10/0x10 [ 272.153130][ T8529] ? find_held_lock+0x2b/0x80 [ 272.153153][ T8529] ? __fget_files+0x215/0x3d0 [ 272.153179][ T8529] ? __fget_files+0x215/0x3d0 [ 272.153208][ T8529] ? __fget_files+0x21f/0x3d0 [ 272.153241][ T8529] ksys_write+0x12a/0x250 [ 272.153263][ T8529] ? __pfx_ksys_write+0x10/0x10 [ 272.153294][ T8529] do_syscall_64+0x115/0x870 [ 272.153318][ T8529] ? clear_bhb_loop+0x40/0x90 [ 272.153340][ T8529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.153358][ T8529] RIP: 0033:0x7f3e81b9de59 [ 272.153373][ T8529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.153390][ T8529] RSP: 002b:00007f3e82a6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.153407][ T8529] RAX: ffffffffffffffda RBX: 00007f3e81e26180 RCX: 00007f3e81b9de59 [ 272.153419][ T8529] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 000000000000000b [ 272.153429][ T8529] RBP: 00007f3e82a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 272.153440][ T8529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.153450][ T8529] R13: 00007f3e81e26218 R14: 00007f3e81e26180 R15: 00007fff376ac3a8 [ 272.153475][ T8529] [ 272.417939][ T5844] usb 2-1: USB disconnect, device number 22 [ 272.492117][ T5740] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 272.501167][ T5740] em28xx 4-1:0.0: dvb set to bulk mode. [ 272.501834][ T5753] usb 5-1: Using ep0 maxpacket: 32 [ 272.507140][ T993] em28xx 4-1:0.0: Binding DVB extension [ 272.515392][ T5753] usb 5-1: config 0 has no interfaces? [ 272.527088][ T5753] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 272.536316][ T5753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.544594][ T5753] usb 5-1: Product: syz [ 272.548819][ T5753] usb 5-1: Manufacturer: syz [ 272.553533][ T5753] usb 5-1: SerialNumber: syz [ 272.577239][ T5753] usb 5-1: config 0 descriptor?? [ 273.389005][ T5621] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 274.159694][ T5844] usb 5-1: USB disconnect, device number 25 [ 274.201052][ T8479] em28xx 4-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 274.406017][ T993] em28xx 4-1:0.0: Registering input extension [ 274.428187][ T5844] usb 4-1: USB disconnect, device number 20 [ 274.441401][ T5844] em28xx 4-1:0.0: Disconnecting em28xx [ 274.441509][ T5844] em28xx 4-1:0.0: Closing input extension [ 274.660993][ T5844] em28xx 4-1:0.0: Freeing device [ 274.700802][ T8577] netdevsim netdevsim3 netdevsim0: refused to change device tx_queue_len [ 274.781881][ T993] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 274.938056][ T30] audit: type=1400 audit(1783157442.808:828): avc: denied { connect } for pid=8582 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 274.964565][ T993] usb 2-1: Using ep0 maxpacket: 32 [ 275.053104][ T5718] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 275.160158][ T30] audit: type=1400 audit(1783157442.808:829): avc: denied { connect } for pid=8582 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 275.181123][ T993] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 275.192834][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 275.203901][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 275.214500][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 275.215690][ T5718] usb 3-1: Using ep0 maxpacket: 8 [ 275.225713][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 275.243758][ T993] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 275.247484][ T5718] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 275.253241][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.271148][ T993] usb 2-1: Product: syz [ 275.275515][ T993] usb 2-1: Manufacturer: syz [ 275.280139][ T993] usb 2-1: SerialNumber: syz [ 275.286782][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.287704][ T993] usb 2-1: config 0 descriptor?? [ 275.299795][ T5718] usb 3-1: Product: syz [ 275.304048][ T5718] usb 3-1: Manufacturer: syz [ 275.308724][ T5718] usb 3-1: SerialNumber: syz [ 275.321557][ T5718] usb 3-1: config 0 descriptor?? [ 275.488593][ T8588] netlink: 32 bytes leftover after parsing attributes in process `syz.3.730'. [ 275.538693][ T5718] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 275.719920][ T993] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 275.740762][ T993] input input18: Device does not respond to id packet M [ 276.944485][ T993] iforce 2-1:0.0: usb_submit_urb failed: -110 [ 276.954560][ T993] input input18: Device does not respond to id packet P [ 276.966123][ T993] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 276.973346][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 276.973630][ T993] input input18: Device does not respond to id packet B [ 276.987206][ T993] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 276.993742][ T993] input input18: Device does not respond to id packet N [ 277.234375][ T8606] netlink: 'syz.2.728': attribute type 2 has an invalid length. [ 277.257328][ T8579] Can't find a SQUASHFS superblock on nullb0 [ 277.446592][ T30] audit: type=1400 audit(1783157445.188:830): avc: denied { read write } for pid=8578 comm="syz.2.728" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 277.630242][ T8612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.704884][ T8612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.735560][ T30] audit: type=1400 audit(1783157445.218:831): avc: denied { open } for pid=8578 comm="syz.2.728" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 277.835441][ T30] audit: type=1400 audit(1783157445.648:832): avc: denied { mount } for pid=8614 comm="syz.0.736" name="/" dev="autofs" ino=21105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 277.951613][ T993] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 277.958039][ T993] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 277.964386][ T993] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 277.970685][ T993] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 277.978460][ T993] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 278.414826][ T30] audit: type=1400 audit(1783157446.268:833): avc: denied { write } for pid=8617 comm="syz.3.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 278.719680][ T30] audit: type=1400 audit(1783157446.558:834): avc: denied { write } for pid=8578 comm="syz.2.728" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 278.777357][ T993] usb 2-1: USB disconnect, device number 23 [ 278.777414][ T5718] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 278.826574][ T30] audit: type=1400 audit(1783157446.558:835): avc: denied { map } for pid=8578 comm="syz.2.728" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 278.855551][ T8620] wlan0 speed is unknown, defaulting to 1000 [ 278.864686][ T8620] wlan0 speed is unknown, defaulting to 1000 [ 278.880030][ T5718] usb 3-1: USB disconnect, device number 34 [ 278.887321][ T8620] wlan0 speed is unknown, defaulting to 1000 [ 278.894642][ T8620] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 278.909042][ T8620] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 278.925951][ T8620] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 278.939592][ T8620] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 278.955021][ T8620] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 278.984337][ T8628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8628 comm=syz.0.741 [ 278.994070][ T8620] wlan0 speed is unknown, defaulting to 1000 [ 279.007345][ T8620] wlan0 speed is unknown, defaulting to 1000 [ 279.014753][ T8620] wlan0 speed is unknown, defaulting to 1000 [ 279.030027][ T8630] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len [ 279.072879][ T8620] wlan0 speed is unknown, defaulting to 1000 [ 279.085149][ T8620] wlan0 speed is unknown, defaulting to 1000 [ 279.312116][ T8638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.744'. [ 280.991903][ T5844] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 281.035659][ T8669] loop5: detected capacity change from 0 to 7 [ 281.055266][ T8669] Buffer I/O error on dev loop5, logical block 0, async page read [ 281.084148][ T5625] Buffer I/O error on dev loop5, logical block 0, async page read [ 281.108815][ T5625] Buffer I/O error on dev loop5, logical block 0, async page read [ 281.127473][ T5625] Buffer I/O error on dev loop5, logical block 0, async page read [ 281.136793][ T5625] Buffer I/O error on dev loop5, logical block 0, async page read [ 281.158264][ T5625] Buffer I/O error on dev loop5, logical block 0, async page read [ 281.176556][ T8669] Buffer I/O error on dev loop5, logical block 0, async page read [ 281.192130][ T8669] Buffer I/O error on dev loop5, logical block 0, async page read [ 281.201370][ T8669] Buffer I/O error on dev loop5, logical block 0, async page read [ 281.272014][ T5844] usb 1-1: Using ep0 maxpacket: 8 [ 281.280070][ T8669] Buffer I/O error on dev loop5, logical block 0, async page read [ 281.304008][ T5844] usb 1-1: config 8 has an invalid interface number: 188 but max is 0 [ 281.368187][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'. [ 281.567689][ T30] audit: type=1400 audit(1783157449.238:836): avc: denied { setopt } for pid=8666 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 282.251322][ T5844] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 282.281004][ T30] audit: type=1400 audit(1783157449.258:837): avc: denied { read } for pid=8666 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 282.292873][ T5844] usb 1-1: config 8 has no interface number 0 [ 282.309071][ T5844] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 282.318865][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.327371][ T5844] usb 1-1: Product: syz [ 282.331605][ T5844] usb 1-1: Manufacturer: syz [ 282.336304][ T5844] usb 1-1: SerialNumber: syz [ 282.374895][ T8669] ldm_validate_partition_table(): Disk read failed. [ 282.399220][ T8669] Dev loop5: unable to read RDB block 0 [ 282.438672][ T8669] loop5: unable to read partition table [ 282.444803][ T30] audit: type=1400 audit(1783157449.498:838): avc: denied { map } for pid=8666 comm="syz.3.752" path="socket:[21192]" dev="sockfs" ino=21192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 282.499139][ T8669] loop5: partition table beyond EOD, truncated [ 282.533602][ T8669] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 282.605765][ T30] audit: type=1400 audit(1783157449.498:839): avc: denied { read } for pid=8666 comm="syz.3.752" path="socket:[21192]" dev="sockfs" ino=21192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 282.888865][ T5844] vmk80xx 1-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 282.968698][ T5844] usb 1-1: USB disconnect, device number 19 [ 283.105079][ T8700] netlink: 168 bytes leftover after parsing attributes in process `syz.2.761'. [ 283.130830][ T8700] netlink: 168 bytes leftover after parsing attributes in process `syz.2.761'. [ 283.312139][ T5844] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 283.601856][ T5844] usb 1-1: device descriptor read/64, error -71 [ 283.951954][ T5844] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 284.071137][ T8716] overlay: ./bus is not a directory [ 284.150342][ T5844] usb 1-1: device descriptor read/64, error -71 [ 284.292034][ T5844] usb usb1-port1: attempt power cycle [ 284.532047][ T993] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 284.661845][ T5844] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 284.702221][ T993] usb 4-1: Using ep0 maxpacket: 8 [ 284.712483][ T5844] usb 1-1: device descriptor read/8, error -71 [ 284.723034][ T993] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.747742][ T993] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.772726][ T993] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.797742][ T993] usb 4-1: config 0 interface 0 has no altsetting 0 [ 284.816517][ T993] usb 4-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 284.838989][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.860216][ T993] usb 4-1: config 0 descriptor?? [ 284.993059][ T5844] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 285.042386][ T5844] usb 1-1: device descriptor read/8, error -71 [ 285.172177][ T5844] usb usb1-port1: unable to enumerate USB device [ 285.252019][ T5740] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 285.354915][ T993] usbhid 4-1:0.0: can't add hid device: -71 [ 285.378135][ T993] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 285.391845][ T29] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 285.396660][ T993] usb 4-1: USB disconnect, device number 21 [ 285.410077][ T5740] usb 2-1: device descriptor read/64, error -71 [ 285.631842][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 285.662960][ T5740] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 285.822618][ T5740] usb 2-1: device descriptor read/64, error -71 [ 285.990312][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.991444][ T5740] usb usb2-port1: attempt power cycle [ 286.373811][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.434077][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.444199][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.457316][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 286.518102][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.523535][ T5740] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 287.055555][ T5740] usb 2-1: device descriptor read/8, error -71 [ 287.270385][ T29] usb 5-1: GET_CAPABILITIES returned 0 [ 287.276593][ T5718] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 287.291182][ T29] usbtmc 5-1:16.0: can't read capabilities [ 287.322265][ T5740] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 287.421928][ T5718] usb 1-1: device descriptor read/64, error -71 [ 287.662023][ T5718] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 287.942245][ T5718] usb 1-1: device descriptor read/64, error -71 [ 288.069240][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 288.135570][ T5718] usb usb1-port1: attempt power cycle [ 288.169604][ T8760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.299469][ T3793] usb 5-1: USB disconnect, device number 26 [ 288.582544][ T5718] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 288.662384][ T5718] usb 1-1: device descriptor read/8, error -71 [ 288.906969][ T5740] usb 2-1: device not accepting address 27, error -71 [ 288.983206][ T5718] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 288.984337][ T5740] usb usb2-port1: unable to enumerate USB device [ 289.172524][ T5718] usb 1-1: device descriptor read/8, error -71 [ 289.243830][ T8781] Cannot find add_set index 0 as target [ 289.302431][ T5718] usb usb1-port1: unable to enumerate USB device [ 289.515313][ T30] audit: type=1400 audit(1783157457.388:840): avc: denied { write } for pid=8782 comm="syz.2.782" path="socket:[21329]" dev="sockfs" ino=21329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 290.483088][ T8798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.515887][ T30] audit: type=1400 audit(1783157458.348:841): avc: denied { create } for pid=8796 comm="syz.2.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 291.271183][ T30] audit: type=1400 audit(1783157459.138:842): avc: denied { ioctl } for pid=8807 comm="syz.3.788" path="socket:[22416]" dev="sockfs" ino=22416 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 291.516217][ T30] audit: type=1400 audit(1783157459.388:843): avc: denied { write } for pid=8807 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 291.565987][ T8816] bridge2: entered promiscuous mode [ 291.588085][ T8816] bridge2: entered allmulticast mode [ 291.626226][ T8816] team0: Port device bridge2 added [ 291.646142][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'. [ 291.675027][ T30] audit: type=1400 audit(1783157459.518:844): avc: denied { accept } for pid=8818 comm="syz.4.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 293.283814][ T24] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 293.392850][ T3793] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 293.548384][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 293.590741][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 140, setting to 64 [ 293.603463][ T3793] usb 4-1: Using ep0 maxpacket: 16 [ 293.662229][ T3793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.687360][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 293.725638][ T3793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.758201][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.773071][ T3793] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 293.796242][ T24] usb 3-1: Product: syz [ 293.812044][ T24] usb 3-1: Manufacturer: syz [ 293.826131][ T24] usb 3-1: SerialNumber: syz [ 293.833176][ T3793] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 293.858138][ T3793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.891356][ T24] usb 3-1: config 0 descriptor?? [ 293.900884][ T3793] usb 4-1: config 0 descriptor?? [ 293.916093][ T8852] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 294.149705][ T8856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.159104][ T8856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.173472][ T8852] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 294.572299][ T24] usb 3-1: USB disconnect, device number 35 [ 295.551800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 295.617923][ T8886] Device name cannot be null; rc = [-22] [ 296.502945][ T8895] wlan0 speed is unknown, defaulting to 1000 [ 297.251801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #84!!! [ 297.311799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 297.401794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 297.451797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 297.471793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 298.141799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 298.191793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 298.837647][ T3793] usbhid 4-1:0.0: can't add hid device: -71 [ 298.844279][ T3793] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 298.926337][ T3793] usb 4-1: USB disconnect, device number 22 [ 299.040184][ T8912] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 299.066040][ T8912] UDF-fs: Scanning with blocksize 512 failed [ 299.110345][ T8912] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 299.162738][ T8912] UDF-fs: Scanning with blocksize 1024 failed [ 299.177348][ T8912] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 299.177387][ T8912] UDF-fs: Scanning with blocksize 2048 failed [ 299.194094][ T8912] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 299.194114][ T8912] UDF-fs: Scanning with blocksize 4096 failed [ 299.247410][ T30] audit: type=1400 audit(1783157467.118:845): avc: denied { create } for pid=8913 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 299.487076][ T8920] netlink: 'syz.3.814': attribute type 10 has an invalid length. [ 299.561238][ T8920] netlink: 40 bytes leftover after parsing attributes in process `syz.3.814'. [ 299.633611][ T8929] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 299.832512][ T8907] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 300.123225][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 300.350734][ T8920] team0: Port device geneve1 added [ 301.672505][ T30] audit: type=1400 audit(1783157469.548:846): avc: denied { map } for pid=8940 comm="syz.2.821" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 302.458985][ T30] audit: type=1400 audit(1783157469.578:847): avc: denied { execute } for pid=8940 comm="syz.2.821" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 304.441846][ T5844] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 304.556558][ T8967] Device name cannot be null; rc = [-22] [ 304.712021][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 304.756427][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.789079][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.847187][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 304.893727][ T5844] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 304.928721][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.009565][ T5844] usb 3-1: config 0 descriptor?? [ 305.738573][ T5844] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 305.746319][ T5844] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 305.894600][ T5844] microsoft 0003:045E:07DA.0008: unknown main item tag 0x2 [ 305.902377][ T5844] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 305.931656][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.241385][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.314365][ T5844] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 306.342537][ T8963] pim6reg1: tun_chr_ioctl cmd 1074025678 [ 306.362832][ T5844] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 306.371623][ T8963] pim6reg1: group set to 0 [ 306.390393][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.403109][ T5844] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 306.439171][ T5844] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 306.451520][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.488903][ T5844] microsoft 0003:045E:07DA.0008: unknown main item tag 0x2 [ 306.839953][ T8963] pim6reg1: tun_chr_ioctl cmd 1074025675 [ 307.335611][ T8963] pim6reg1: persist enabled [ 307.677883][ T8979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.273819][ T5844] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0008/input/input19 [ 308.372248][ T5621] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 308.430588][ T5844] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 308.484039][ T8991] tipc: Started in network mode [ 308.520386][ T8991] tipc: Node identity 56d09afa9a4f, cluster identity 4711 [ 308.557201][ T5844] usb 3-1: USB disconnect, device number 36 [ 308.575491][ T8991] tipc: Enabled bearer , priority 0 [ 308.643037][ T8995] syzkaller0: MTU too low for tipc bearer [ 308.662071][ T8995] tipc: Disabling bearer [ 309.936163][ T8994] fido_id[8994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 310.338764][ T9020] netlink: 'syz.2.842': attribute type 1 has an invalid length. [ 310.559199][ T9020] 8021q: adding VLAN 0 to HW filter on device bond2 [ 310.677555][ T30] audit: type=1400 audit(1783157478.548:848): avc: denied { bind } for pid=9030 comm="syz.4.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 310.723258][ T9024] bond2: (slave dummy0): making interface the new active one [ 310.749317][ T30] audit: type=1400 audit(1783157478.618:849): avc: denied { listen } for pid=9030 comm="syz.4.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 310.775492][ T9024] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 310.828721][ T9025] : renamed from dummy0 (while UP) [ 310.846358][ T30] audit: type=1400 audit(1783157478.718:850): avc: denied { load_policy } for pid=9027 comm="syz.3.844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 310.846787][ T9028] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 310.885197][ T9028] SELinux: failed to load policy [ 310.976439][ T9032] netlink: 'syz.4.845': attribute type 2 has an invalid length. [ 311.238263][ T9038] FAULT_INJECTION: forcing a failure. [ 311.238263][ T9038] name failslab, interval 1, probability 0, space 0, times 0 [ 311.252074][ T9038] CPU: 0 UID: 0 PID: 9038 Comm: syz.1.846 Not tainted syzkaller #0 PREEMPT(full) [ 311.252098][ T9038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 311.252108][ T9038] Call Trace: [ 311.252114][ T9038] [ 311.252120][ T9038] dump_stack_lvl+0x100/0x190 [ 311.252143][ T9038] should_fail_ex.cold+0x5/0xa [ 311.252157][ T9038] should_failslab+0xc2/0x120 [ 311.252169][ T9038] kmem_cache_alloc_noprof+0x91/0x6a0 [ 311.252182][ T9038] ? vm_area_dup+0x27/0x8e0 [ 311.252199][ T9038] vm_area_dup+0x27/0x8e0 [ 311.252215][ T9038] __split_vma+0x18c/0xda0 [ 311.252230][ T9038] ? is_bpf_text_address+0x8a/0x1a0 [ 311.252244][ T9038] ? bpf_ksym_find+0x128/0x1c0 [ 311.252260][ T9038] ? __pfx___split_vma+0x10/0x10 [ 311.252274][ T9038] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 311.252295][ T9038] ? unwind_get_return_address+0x59/0xa0 [ 311.252316][ T9038] vms_gather_munmap_vmas+0x1d2/0x1720 [ 311.252333][ T9038] ? mtree_range_walk+0x72b/0xb70 [ 311.252349][ T9038] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 311.252370][ T9038] ? mas_walk+0x6ef/0x9b0 [ 311.252389][ T9038] __mmap_region+0x4a7/0x2db0 [ 311.252408][ T9038] ? __pfx___mmap_region+0x10/0x10 [ 311.252422][ T9038] ? __pfx___might_resched+0x10/0x10 [ 311.252435][ T9038] ? find_held_lock+0x2b/0x80 [ 311.252449][ T9038] ? process_measurement+0x4c8/0x2350 [ 311.252465][ T9038] ? process_measurement+0x4c8/0x2350 [ 311.252481][ T9038] ? down_write+0x146/0x1f0 [ 311.252501][ T9038] ? process_measurement+0x1f4/0x2350 [ 311.252519][ T9038] ? find_held_lock+0x2b/0x80 [ 311.252534][ T9038] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 311.252550][ T9038] ? __lock_acquire+0x49f/0x1a40 [ 311.252566][ T9038] ? __lock_acquire+0x49f/0x1a40 [ 311.252579][ T9038] ? find_held_lock+0x2b/0x80 [ 311.252593][ T9038] ? is_bpf_text_address+0x8a/0x1a0 [ 311.252622][ T9038] ? do_raw_read_unlock+0x3f/0x70 [ 311.252641][ T9038] mmap_region+0x35d/0x620 [ 311.252659][ T9038] ? __pfx_mmap_region+0x10/0x10 [ 311.252674][ T9038] ? __pfx_drm_gem_mmap+0x10/0x10 [ 311.252700][ T9038] ? memfd_check_seals_mmap+0x4a/0x250 [ 311.252719][ T9038] ? shmem_mapping+0x4/0x50 [ 311.252735][ T9038] do_mmap+0xc63/0x12f0 [ 311.252755][ T9038] ? __pfx_do_mmap+0x10/0x10 [ 311.252768][ T9038] ? __pfx_down_write_killable+0x10/0x10 [ 311.252787][ T9038] vm_mmap_pgoff+0x29e/0x470 [ 311.252802][ T9038] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 311.252813][ T9038] ? __fget_files+0x215/0x3d0 [ 311.252832][ T9038] ? __fget_files+0x21f/0x3d0 [ 311.252850][ T9038] ksys_mmap_pgoff+0x3cb/0x610 [ 311.252864][ T9038] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 311.252875][ T9038] ? fput+0x79/0x100 [ 311.252885][ T9038] ? ksys_write+0x1ac/0x250 [ 311.252899][ T9038] ? __pfx_ksys_write+0x10/0x10 [ 311.252915][ T9038] __x64_sys_mmap+0x125/0x190 [ 311.252931][ T9038] do_syscall_64+0x115/0x870 [ 311.252949][ T9038] ? clear_bhb_loop+0x40/0x90 [ 311.252962][ T9038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.252973][ T9038] RIP: 0033:0x7f3e81b9de59 [ 311.252983][ T9038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.252993][ T9038] RSP: 002b:00007f3e82a8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 311.253004][ T9038] RAX: ffffffffffffffda RBX: 00007f3e81e26090 RCX: 00007f3e81b9de59 [ 311.253011][ T9038] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 00002000003e9000 [ 311.253017][ T9038] RBP: 00007f3e82a8f090 R08: 0000000000000005 R09: 0000000100000000 [ 311.253023][ T9038] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 311.253029][ T9038] R13: 00007f3e81e26128 R14: 00007f3e81e26090 R15: 00007fff376ac3a8 [ 311.253043][ T9038] [ 311.792192][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 311.815342][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.821655][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.964262][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 311.972513][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 311.979400][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 311.990639][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.000854][ T9] usb 5-1: config 0 descriptor?? [ 312.180771][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.849'. [ 312.422241][ T9] uclogic 0003:28BD:0075.0009: interface is invalid, ignoring [ 312.446388][ T9042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.683270][ T5844] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 312.903128][ T30] audit: type=1400 audit(1783157480.658:851): avc: denied { write } for pid=9030 comm="syz.4.845" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 313.116737][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 313.140876][ T5844] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 313.175135][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.214989][ T5844] usb 3-1: Product: syz [ 313.253158][ T5844] usb 3-1: Manufacturer: syz [ 313.277085][ T5844] usb 3-1: SerialNumber: syz [ 313.328082][ T5844] usb 3-1: config 0 descriptor?? [ 313.358513][ T5844] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 313.506242][ T188] usb 5-1: USB disconnect, device number 27 [ 314.402638][ T5844] gspca_ov534_9: reg_w failed -110 [ 314.528207][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.854'. [ 314.537098][ T9064] netlink: 60 bytes leftover after parsing attributes in process `syz.3.854'. [ 314.664302][ T30] audit: type=1400 audit(1783157482.538:852): avc: denied { read } for pid=9068 comm="syz.3.856" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 314.702231][ T30] audit: type=1400 audit(1783157482.538:853): avc: denied { open } for pid=9068 comm="syz.3.856" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 314.971852][ T5844] gspca_ov534_9: Unknown sensor 0000 [ 314.971925][ T5844] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 315.761033][ T30] audit: type=1400 audit(1783157482.588:854): avc: denied { ioctl } for pid=9068 comm="syz.3.856" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 315.956385][ T29] usb 3-1: USB disconnect, device number 37 [ 317.136549][ T29] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 317.141117][ T30] audit: type=1400 audit(1783157485.008:855): avc: denied { accept } for pid=9089 comm="syz.2.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 317.372383][ T188] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 317.391305][ T30] audit: type=1326 audit(1783157485.258:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.3.865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16799de59 code=0x7ffc0000 [ 317.418777][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 317.426716][ T30] audit: type=1326 audit(1783157485.258:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.3.865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16799de59 code=0x7ffc0000 [ 317.454198][ T30] audit: type=1326 audit(1783157485.278:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.3.865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16799de59 code=0x7ffc0000 [ 317.481287][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 317.493302][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 317.514407][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 57522, setting to 1024 [ 317.557729][ T30] audit: type=1326 audit(1783157485.278:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.3.865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16799de59 code=0x7ffc0000 [ 317.559246][ T188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 317.605793][ T29] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 317.621614][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.650559][ T29] usb 5-1: Product: syz [ 317.692480][ T188] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 317.710133][ T29] usb 5-1: Manufacturer: syz [ 317.746671][ T30] audit: type=1326 audit(1783157485.278:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.3.865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff16799de59 code=0x7ffc0000 [ 317.749764][ T188] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 317.780877][ T29] usb 5-1: SerialNumber: syz [ 317.802396][ T29] usb 5-1: config 0 descriptor?? [ 318.081305][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.252821][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 318.262835][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 318.268911][ T30] audit: type=1326 audit(1783157485.278:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.3.865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16799de59 code=0x7ffc0000 [ 318.297711][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 318.361221][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 318.373059][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 318.677787][ T30] audit: type=1326 audit(1783157485.278:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.3.865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16799de59 code=0x7ffc0000 [ 318.677897][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 318.710190][ T30] audit: type=1326 audit(1783157485.278:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.3.865" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16799de59 code=0x7ffc0000 [ 318.761001][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 318.798925][ T188] usb 1-1: Product: syz [ 318.806852][ T188] usb 1-1: Manufacturer: syz [ 318.848831][ T188] usb 1-1: SerialNumber: syz [ 318.865733][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 318.908322][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 318.949089][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 318.982385][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 319.055404][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 319.161473][ T188] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 319.223357][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 319.255805][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 320.262928][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 320.283516][ T188] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 320.862737][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 320.891080][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 320.905494][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 320.955247][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 321.001613][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 321.027996][ T9127] tmpfs: Bad value for 'mpol' [ 321.028006][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 321.028017][ T30] audit: type=1400 audit(1783157488.898:887): avc: denied { create } for pid=9126 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 321.117690][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 321.148179][ T29] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 321.181626][ T29] input input20: Timeout waiting for response from device. [ 321.236218][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 321.247290][ T29] usb 5-1: USB disconnect, device number 28 [ 321.503936][ T188] usb 1-1: USB disconnect, device number 28 [ 321.553797][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 321.695033][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.861964][ T993] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 321.961859][ T9] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 322.026137][ T993] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 322.041901][ T993] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 322.061462][ T993] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 322.098921][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.125758][ T9141] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 322.135328][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 322.153839][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 140, setting to 64 [ 322.168237][ T993] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.184618][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 322.196283][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.228959][ T9] usb 5-1: Product: syz [ 322.237470][ T9] usb 5-1: Manufacturer: syz [ 322.243072][ T9] usb 5-1: SerialNumber: syz [ 322.266926][ T9] usb 5-1: config 0 descriptor?? [ 322.273794][ T9143] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 322.606683][ T9143] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 322.767688][ T30] audit: type=1400 audit(1783157490.638:888): avc: denied { listen } for pid=9147 comm="syz.2.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 323.634180][ T9141] wlan0 speed is unknown, defaulting to 1000 [ 324.797323][ T188] usb 4-1: USB disconnect, device number 23 [ 325.175644][ T9171] Cannot find add_set index 0 as target [ 325.187529][ T29] usb 5-1: USB disconnect, device number 29 [ 325.495501][ T9172] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 325.526273][ T9172] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 325.541838][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 325.638966][ T9173] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 325.694779][ T30] audit: type=1400 audit(1783157493.568:889): avc: denied { write } for pid=9170 comm="syz.2.884" name="file0" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 325.708560][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 327.022888][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 327.041438][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 327.043167][ T30] audit: type=1400 audit(1783157494.898:890): avc: denied { mounton } for pid=9187 comm="syz.2.889" path="/syzcgroup/unified/syz2/cgroup.procs" dev="cgroup2" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 327.053142][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 327.088627][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 327.186341][ T9] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 327.204630][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.221818][ T9] usb 1-1: Product: syz [ 327.225995][ T9] usb 1-1: Manufacturer: syz [ 327.230740][ T9] usb 1-1: SerialNumber: syz [ 327.241815][ T9] usb 1-1: config 0 descriptor?? [ 327.444290][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 327.632030][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 327.731727][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.764462][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.808634][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.826884][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.840439][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 327.857207][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.074977][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 328.080623][ T24] usbtmc 4-1:16.0: can't read capabilities [ 328.171306][ T9213] netlink: 36 bytes leftover after parsing attributes in process `syz.1.894'. [ 328.808355][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.857388][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.007530][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.017182][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.028027][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.036855][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.261687][ T30] audit: type=1400 audit(1783157497.108:891): avc: denied { read write } for pid=9218 comm="syz.1.896" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 329.953363][ T30] audit: type=1400 audit(1783157497.108:892): avc: denied { open } for pid=9218 comm="syz.1.896" path="/189/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 330.014546][ T9232] Cannot find add_set index 0 as target [ 330.047499][ T24] usb 4-1: USB disconnect, device number 24 [ 330.136083][ T5844] usb 1-1: USB disconnect, device number 29 [ 331.244314][ T9252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.905'. [ 331.255554][ T30] audit: type=1400 audit(1783157499.128:893): avc: denied { getopt } for pid=9251 comm="syz.3.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 333.336727][ T30] audit: type=1400 audit(1783157501.128:894): avc: denied { map } for pid=9259 comm="syz.3.908" path="socket:[24270]" dev="sockfs" ino=24270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 439.281736][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 439.288697][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9253/1:b..l [ 439.297017][ C1] rcu: (detected by 1, t=10505 jiffies, g=37957, q=142 ncpus=2) [ 439.304722][ C1] task:syz.2.903 state:R running task stack:26200 pid:9253 tgid:9253 ppid:5611 task_flags:0x40004c flags:0x00080001 [ 439.318631][ C1] Call Trace: [ 439.321993][ C1] [ 439.324916][ C1] __schedule+0x125c/0x6730 [ 439.329432][ C1] ? __pfx___schedule+0x10/0x10 [ 439.334281][ C1] ? rcu_is_watching+0x12/0xc0 [ 439.339044][ C1] preempt_schedule_irq+0x50/0x90 [ 439.344067][ C1] irqentry_exit+0x205/0xa00 [ 439.348656][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 439.354627][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xf/0x70 [ 439.360692][ C1] Code: 00 00 00 5b e9 52 39 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 85 4f 59 12 48 8b 34 24 <65> 48 8b 15 61 4f 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 [ 439.380287][ C1] RSP: 0018:ffffc9000204f438 EFLAGS: 00000282 [ 439.386342][ C1] RAX: 0000000080000000 RBX: ffffc9000204f520 RCX: ffffffff8bb6a14d [ 439.394299][ C1] RDX: fffffffffffffffe RSI: ffffffff8bb6a160 RDI: ffff888033178000 [ 439.402255][ C1] RBP: ffff888057be9600 R08: 0000000000000006 R09: 0000000000000189 [ 439.410216][ C1] R10: fffffffffffffffe R11: 0000000000000000 R12: fffffffffffffffe [ 439.418176][ C1] R13: ffffc9000204f532 R14: 0000000000000000 R15: dffffc0000000000 [ 439.426152][ C1] ? xas_find+0x23d/0x8e0 [ 439.430477][ C1] ? xas_find+0x250/0x8e0 [ 439.434807][ C1] xas_find+0x250/0x8e0 [ 439.438964][ C1] find_lock_entries+0x176/0x1190 [ 439.443992][ C1] ? __pfx_find_lock_entries+0x10/0x10 [ 439.449450][ C1] ? __pfx___might_resched+0x10/0x10 [ 439.454727][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 439.461055][ C1] shmem_undo_range+0x212/0x1570 [ 439.465995][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 439.471411][ C1] ? percpu_counter_add_batch+0xb9/0x230 [ 439.477037][ C1] shmem_evict_inode+0x3a5/0xbe0 [ 439.481971][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 439.487685][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 439.493141][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 439.499203][ C1] ? find_held_lock+0x2b/0x80 [ 439.503873][ C1] ? evict+0x37e/0xad0 [ 439.507930][ C1] ? evict+0x37e/0xad0 [ 439.511991][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 439.517447][ C1] evict+0x3c2/0xad0 [ 439.521338][ C1] ? __pfx_evict+0x10/0x10 [ 439.525753][ C1] ? iput.part.0+0x981/0x1050 [ 439.530427][ C1] iput.part.0+0x989/0x1050 [ 439.534939][ C1] iput+0x35/0x40 [ 439.538583][ C1] dentry_unlink_inode+0x284/0x470 [ 439.543703][ C1] dentry_kill+0x25d/0xc20 [ 439.548136][ C1] dput.part.0+0xd7/0x240 [ 439.552460][ C1] dput+0x1f/0x30 [ 439.556086][ C1] __fput+0x519/0xb50 [ 439.560062][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.565257][ C1] task_work_run+0x150/0x240 [ 439.569840][ C1] ? __pfx_task_work_run+0x10/0x10 [ 439.574940][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 439.580137][ C1] do_exit+0x951/0x2ae0 [ 439.584289][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 439.589656][ C1] ? __pfx_do_exit+0x10/0x10 [ 439.594244][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 439.599608][ C1] do_group_exit+0xd5/0x2a0 [ 439.604109][ C1] __x64_sys_exit_group+0x3e/0x50 [ 439.609128][ C1] x64_sys_call+0x102c/0x1530 [ 439.613800][ C1] do_syscall_64+0x115/0x870 [ 439.618384][ C1] ? clear_bhb_loop+0x40/0x90 [ 439.623051][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.628931][ C1] RIP: 0033:0x7f097d79de59 [ 439.633335][ C1] RSP: 002b:00007fff6ab907a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 439.641735][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f097d79de59 [ 439.649692][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 439.657647][ C1] RBP: 00007fff6ab9080c R08: 0000000000000000 R09: 00000000000927c0 [ 439.665604][ C1] R10: 0000000000000006 R11: 0000000000000246 R12: 00000000000000b4 [ 439.673561][ C1] R13: 00000000000927c0 R14: 00000000000509e0 R15: 00007fff6ab90860 [ 439.681532][ C1] [ 439.684538][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10504 jiffies! g37957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 439.696844][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=19109 [ 439.704713][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g37957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 439.716065][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 439.726014][ C1] rcu: RCU grace-period kthread stack dump: [ 439.731884][ C1] task:rcu_preempt state:I stack:28984 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 439.743891][ C1] Call Trace: [ 439.747155][ C1] [ 439.750075][ C1] __schedule+0x125c/0x6730 [ 439.754584][ C1] ? __pfx___schedule+0x10/0x10 [ 439.759423][ C1] ? find_held_lock+0x2b/0x80 [ 439.764093][ C1] ? schedule+0x225/0x2c0 [ 439.768417][ C1] schedule+0xdd/0x2c0 [ 439.772479][ C1] schedule_timeout+0x127/0x280 [ 439.777322][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 439.782690][ C1] ? __pfx_process_timeout+0x10/0x10 [ 439.787976][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 439.793781][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 439.799253][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 439.804024][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 439.809309][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 439.814239][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 439.819424][ C1] ? rcu_is_watching+0x12/0xc0 [ 439.824200][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 439.830000][ C1] rcu_gp_kthread+0x179/0x230 [ 439.834672][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 439.839860][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 439.845660][ C1] ? __kthread_parkme+0x18c/0x230 [ 439.850680][ C1] ? kthread+0x13a/0x450 [ 439.854932][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 439.860136][ C1] kthread+0x370/0x450 [ 439.864217][ C1] ? __pfx_kthread+0x10/0x10 [ 439.868810][ C1] ret_from_fork+0x72b/0xd50 [ 439.873407][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 439.878516][ C1] ? __switch_to+0x800/0x10f0 [ 439.883189][ C1] ? __pfx_kthread+0x10/0x10 [ 439.887776][ C1] ret_from_fork_asm+0x1a/0x30 [ 439.892546][ C1] [ 439.895550][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 439.901854][ C1] Sending NMI from CPU 1 to CPUs 0: [ 439.907043][ C0] NMI backtrace for cpu 0 [ 439.907056][ C0] CPU: 0 UID: 0 PID: 9261 Comm: syz.3.908 Not tainted syzkaller #0 PREEMPT(full) [ 439.907071][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 439.907079][ C0] RIP: 0010:advance_sched+0x1c5/0xd20 [ 439.907101][ C0] Code: 05 00 00 e8 bd 16 43 f8 48 8b 04 24 48 83 e8 08 48 89 c2 48 89 44 24 58 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 20 0a 00 00 48 8b 04 24 48 8b 40 f8 48 89 44 24 20 48 85 ed [ 439.907113][ C0] RSP: 0018:ffffc90000007de8 EFLAGS: 00000046 [ 439.907125][ C0] RAX: dffffc0000000000 RBX: ffff888021afd300 RCX: ffffffff89c6bff0 [ 439.907134][ C0] RDX: 1ffff1100435fa5f RSI: ffffffff89c6b9e3 RDI: ffff88802fd02540 [ 439.907143][ C0] RBP: ffff88805b7e0800 R08: 0000000000000005 R09: 0000000000000000 [ 439.907151][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 439.907159][ C0] R13: ffffffff89c6b840 R14: ffff8880b8428540 R15: ffff8880b8428590 [ 439.907168][ C0] FS: 00007ff1687de6c0(0000) GS:ffff888123dee000(0000) knlGS:0000000000000000 [ 439.907187][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.907196][ C0] CR2: 00002000000bd038 CR3: 0000000074682000 CR4: 00000000003526f0 [ 439.907204][ C0] Call Trace: [ 439.907210][ C0] [ 439.907215][ C0] ? find_held_lock+0x2b/0x80 [ 439.907235][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 439.907252][ C0] ? __pfx_advance_sched+0x10/0x10 [ 439.907271][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 439.907293][ C0] hrtimer_interrupt+0x3e5/0x940 [ 439.907316][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 439.907335][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 439.907354][ C0] [ 439.907358][ C0] [ 439.907363][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 439.907379][ C0] RIP: 0010:futex_wait_setup+0x4ae/0x540 [ 439.907399][ C0] Code: 0f 85 89 00 00 00 4c 89 a3 70 18 00 00 66 90 e8 78 d9 0c 00 48 8d 7b 18 be 04 00 00 00 e8 2a 56 7d 00 b8 01 20 00 00 87 43 18 1d ff ff ff e8 58 d9 0c 00 bf 01 20 00 00 e8 1e 6b d8 ff eb cf [ 439.907411][ C0] RSP: 0018:ffffc900037e7a68 EFLAGS: 00000246 [ 439.907421][ C0] RAX: 0000000000000000 RBX: ffff88802fd02540 RCX: ffffffff81fcf736 [ 439.907430][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88802fd02558 [ 439.907438][ C0] RBP: ffffc900037e7ad8 R08: 0000000000000001 R09: ffffed1005fa04ab [ 439.907446][ C0] R10: ffff88802fd0255b R11: 0000000000000000 R12: ffffffff81fcf6f8 [ 439.907455][ C0] R13: 0000000000000000 R14: ffff888055bc8000 R15: ffff888055bc8040 [ 439.907464][ C0] ? futex_wait_setup+0x468/0x540 [ 439.907484][ C0] ? futex_wait_setup+0x4a6/0x540 [ 439.907505][ C0] ? futex_wait_setup+0x4a6/0x540 [ 439.907527][ C0] __futex_wait+0x19f/0x300 [ 439.907546][ C0] ? __pfx___futex_wait+0x10/0x10 [ 439.907564][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 439.907579][ C0] ? futex_hash+0x311/0x400 [ 439.907595][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 439.907615][ C0] ? find_held_lock+0x2b/0x80 [ 439.907631][ C0] ? futex_wake+0x4ea/0x5e0 [ 439.907652][ C0] futex_wait+0xe6/0x370 [ 439.907670][ C0] ? __pfx_futex_wait+0x10/0x10 [ 439.907692][ C0] ? add_device_randomness+0xc9/0x110 [ 439.907708][ C0] ? __pfx_add_device_randomness+0x10/0x10 [ 439.907725][ C0] do_futex+0x265/0x440 [ 439.907741][ C0] ? __pfx_do_futex+0x10/0x10 [ 439.907757][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 439.907771][ C0] ? security_capable+0x80/0x260 [ 439.907784][ C0] ? net_generic+0x29e/0x2a0 [ 439.907802][ C0] __x64_sys_futex+0x34f/0x4d0 [ 439.907819][ C0] ? do_sys_settimeofday64+0x1e4/0x260 [ 439.907834][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 439.907855][ C0] do_syscall_64+0x115/0x870 [ 439.907872][ C0] ? clear_bhb_loop+0x40/0x90 [ 439.907887][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.907900][ C0] RIP: 0033:0x7ff16799de59 [ 439.907912][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.907924][ C0] RSP: 002b:00007ff1687de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 439.907935][ C0] RAX: ffffffffffffffda RBX: 00007ff167c25fa8 RCX: 00007ff16799de59 [ 439.907944][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff167c25fa8 [ 439.907952][ C0] RBP: 00007ff167c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 439.907960][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.907968][ C0] R13: 00007ff167c26038 R14: 00007ffea262f840 R15: 00007ffea262f928 [ 439.907982][ C0]