last executing test programs: 5m18.78152504s ago: executing program 2 (id=773): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, r1) r2 = getpgid(r1) setpgid(0x0, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0xa4ff, 0x4004000}}], 0x2, 0x0) 5m18.090653865s ago: executing program 2 (id=776): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) epoll_create(0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000001b000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001b0c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0xfffffffffffffdcd, 0x0, 0x0, 0x2}, 0x50) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') sched_setscheduler(0x0, 0x0, &(0x7f000001b140)=0x5d) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) gettid() accept(r5, 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) fsopen(0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40081271, &(0x7f0000000000)=0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) 5m17.618650528s ago: executing program 2 (id=778): syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c35, 0x80, 0x2, 0xbfdffdfc}, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@initdev, @multicast2, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write(0xffffffffffffffff, &(0x7f0000000040)="07000000010001", 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000200000006119040000000000950000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8000000062f5, 0x80000100008f}, 0x0) r3 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc, &(0x7f0000000400)=ANY=[@ANYRES32=r2]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) r5 = socket(0x40000000015, 0x5, 0x0) ptrace$ARCH_GET_GS(0x1e, r4, &(0x7f0000000340), 0x1004) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 5m13.773174336s ago: executing program 2 (id=796): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x1800, 0x0) read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0x2020) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000600)="6a793d7c4a8624c46738bd8b283b90d8362093e3cfd9a4d894e4958a23ea7653a4796d89fea65fab0da94fa8e87a927bdfef60d67c472d3a091f506500ff7dcf5a0f26c1bd15c6d4a57c6a2f0687823df5f0c21fcc3e8573aa4618e7cad88228753a4cd039374856ce4bbe0a25e8ce16cb448595cf7f9fa1a57ffafbd4fbeb2ee1387bb21efd15eab225ff8c141510ee23d5b0b9e6c83d2786dae633e442db19661fe508777883061208621b37b1c0eca62b4b7b38a07a17e58204929e297e170bb55287b84fa6a02a3b01f4bf876140ed20f806e3a08806c24c8fe69e543f47f0a8f53950de39ce5baacfc82e9697676ca3891a00107084") mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2001080, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@private2}}}, &(0x7f0000000240)=0xe8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) writev(r1, &(0x7f0000000240)=[{0x0}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0x40000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 5m13.31633977s ago: executing program 2 (id=797): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x22480, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpgrp(0x0) r3 = socket$pptp(0x18, 0x1, 0x2) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000080)="85dc99fcb803ff1fd6af", 0xa}, {&(0x7f00000002c0)="fc36331b33b85f0614abc71eaadc7ae99d1a6629c32765754bb70980cdf051cd24be38ca17c781af63cab2de7351c80654743fd52adc088a328a5f08d5764be54bb1a5cabbffd669961a98ffec4c568594a00c9a17624cd39d9809c73cbaa87b3ade8b0c9916de7d2f2fc7a6b18e8f11b65dbe615ef6820ab406c199b5e94fcc37a219f944d82d8620c8de5873bc2be11c51fdaa925c46cb43c0012683f7d5057bb5bbbe2e75a00eaf9ae1888b65a2c58476d555ca5b29b7f890bfb52204d253310aef3c8f426acef89c51e75cbbb9ec1243afeadcabe8a7944ddb4c135d7540a564e6da0611", 0xe6}, {&(0x7f00000003c0)="fa72fad7c01d85f4bd92d9ca7f68c4147dd0a732c1ae56761509cb2a307c5abbc1b3825ebb709e5fe42b490e9fca5b8e64a55efcea9997612ee6bb30938110ee178ac81c7fda73de764b11204a693ba692c5704fd54c1cee08d2bc34b79ae89c86944062dd2e15919db2a89fd945e21f34", 0x71}, {&(0x7f0000000440)="6cb41f38acef8bc4c9c4d5a32006d72b007ae0983aaa106921fd67b39bdad8bf19dc7accdddc8be2984f99d4bf50c29b9f1522e81ee4ca63b7e38e3e1ef68ab354eeb41036a0a6e7fc2378d37dce310d60acf2525cc39ffbf0d5dd3cc5d5", 0x5e}, {&(0x7f00000004c0)="7f70bffba7aa7770ec55617bca457accd03dddc44dd234888a78b96bdd16ce297c44acb557efde89ff7832e43c963f0610186c593e5e61d313e4a14e9718a83478a6166377cff4c1eaa4f5c4bc54b648267b0cfd6e202ef4cc32a60c6b6bfb81b936149c39058d8bb2b061dc487cfdaf555cd7b80a826e0cbda3833fc27679e71f1fe7e868a349f6486566faae8feb6ed36c50f98daf56316f9de7bc5c43682bc42a4bc4b8e561ffe05a8de752f849d85552399ed5b2b3293f108cac", 0xbc}, {0xfffffffffffffffd}, {&(0x7f0000000b40)="9f9fd004c2d7ebd16131657a4d2a882030ee0cb30667ea22812434c82539e78460d38ee9a0c93a2079a9d71de2d709d983551cd0b70934cfc110dc450aecb6dce6d1dd695db5da6e050c036c8633d1cd36cd7d5c06a1fa7ba15b2315802fca9808dff6bd92aa620eab4197c451d3fa0a9996aa60ea4b24554239330ac08d140c8ccd27176dd302e1c37f82d6227e4bf9fd1debb9422a1e79e334b57adf58899b5885fb3afe6399c2c4cff7f3c827b56dcc7ac48615b0763246fd3d285bda72f0fbc0be93119429772f9df53a9937", 0xce}, {&(0x7f00000000c0)="dd79c13322b2bb5ce337a1e1509ac549825ac4", 0x13}, {&(0x7f0000000c40)="8c2b5f9a3ebbffd9ca230e770ec6842c5a6fbf33464fe3e370b7811f5a0646353a2d281775bc52a1f0ac15ebe2250d412677f3f7d6c92376a50f39c1c8e7be02d3bf08b8752a0367fc16fe863788790f1c40aef7447b4e8c29112f44a89481ce0972e217b4700b679774217cedd37fb34121a1e6dc2ba0104b9a13aa093f9ef0934f61abe6b12044ec8127c4c121498ef04dc9372277a5c1ae1acf365047e66f9d28c00765182139075ee991c6135da9df1e88542718defdbbb9f8c59630b21773db5ffffbf4ab29c6791cd3cd6f86ee117c30", 0xd3}], 0x9, &(0x7f0000000180)=[@ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x86, 0x5, "ee652a"}, @cipso={0x86, 0x28, 0x2, [{0x0, 0x4, "0e18"}, {0x2, 0x8, "49b5f50d56b0"}, {0x1, 0x8, "d147f17bf2ad"}, {0x7, 0x3, '='}, {0x2, 0xb, "5237dcbb4b07b043fe"}]}, @end]}}}], 0x40}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="f31743047f818aa0347bd57960", 0xd, 0x40488d1}, 0x48800) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0x1}, {&(0x7f0000000040)}], 0x2}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000580)=0x400, 0x4) 5m12.853386716s ago: executing program 2 (id=800): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x80, 0xf, 0xe8, 0x8, 0x57c, 0x2200, 0xefd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x160, 0x0, [{{0x9, 0x4, 0x5e, 0x0, 0x0, 0x88, 0x68, 0x2b}}]}}]}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) 5m12.385838278s ago: executing program 32 (id=800): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x80, 0xf, 0xe8, 0x8, 0x57c, 0x2200, 0xefd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x160, 0x0, [{{0x9, 0x4, 0x5e, 0x0, 0x0, 0x88, 0x68, 0x2b}}]}}]}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) 2m8.287663643s ago: executing program 0 (id=1446): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x2b6afac0463545d4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x40000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x4, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000100)={0x1, 0x0, 0x2, 0x2}) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) dup2(0xffffffffffffffff, r3) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x0, 0xfffffffffffffffc, 0x2}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) 2m6.629908969s ago: executing program 0 (id=1451): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 2m6.620742499s ago: executing program 0 (id=1452): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x2098, 0x5, 0x1000, 0xfffffffd}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40) r5 = syz_open_dev$vcsn(0x0, 0x6c90, 0x480c1) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYBLOB="0800010003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2c048010}, 0x20000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf1000000, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000280)=""/34) syz_open_dev$sndpcmp(&(0x7f0000000300), 0xcab, 0x28000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) 2m4.355890641s ago: executing program 0 (id=1461): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') r2 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0xa, 0x3, 0x3a) setpgid(r2, r2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = getpgid(r2) setpgid(0x0, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sendmmsg$unix(r4, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}, 0x3ec0}], 0x2, 0x0) 2m4.004968165s ago: executing program 0 (id=1462): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 2m3.973523758s ago: executing program 0 (id=1463): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e23, 0x6, @loopback, 0x80}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e23, 0x3, @loopback, 0x2}}, 0x0, 0x0, 0x1f, 0x0, "7c873eb0bf1265b9078a4c0301f7b9cc8644e953d839116ef5ba50526bb9deb02f583135a4e16fc10aca34d7b8f225748bce05090f9d8408c3e19eb58d1c1f7d38406a15840417cc1b0aa76c26d22f09"}, 0xd8) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xfffffffe, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@delqdisc={0x2c, 0x25, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff1}, {0xffe6, 0xf}, {0xfff3, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}]}, 0x2c}}, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 2m3.309951508s ago: executing program 33 (id=1463): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e23, 0x6, @loopback, 0x80}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e23, 0x3, @loopback, 0x2}}, 0x0, 0x0, 0x1f, 0x0, "7c873eb0bf1265b9078a4c0301f7b9cc8644e953d839116ef5ba50526bb9deb02f583135a4e16fc10aca34d7b8f225748bce05090f9d8408c3e19eb58d1c1f7d38406a15840417cc1b0aa76c26d22f09"}, 0xd8) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xfffffffe, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@delqdisc={0x2c, 0x25, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff1}, {0xffe6, 0xf}, {0xfff3, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}]}, 0x2c}}, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 9.022064579s ago: executing program 1 (id=1890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a11, 0x51240}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x4000, 0x20000000}, 0x0) 8.912667935s ago: executing program 1 (id=1894): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6, &(0x7f0000000080)=@framed={{}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) socket(0x10, 0x6, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffeb7}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getpgid(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r5) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)=ANY=[@ANYBLOB="280000dc", @ANYRES16=r6, @ANYBLOB="01002bbd7000ffdbdf251500000008000300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4004) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x20000000, 0xffffffffffffffff}, 0x10) (async) modify_ldt$read(0x0, 0x0, 0x0) (async) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @rand_addr=0x64010101, 0x4e24, 0x3, 'lc\x00', 0x4, 0x3237, 0x57}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) 7.779685877s ago: executing program 3 (id=1899): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x80}, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, &(0x7f00000002c0)=0xa4) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0x2100000, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xfc, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000018c0)=@newtfilter={0x30, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x50) shutdown(r0, 0x1) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000000020000000100000000000000080001007f00000100"/36], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c003c3e5033025e3d2811ab4a3dccc488e9d5b3def19da94b400f8a622002af8760b22b"]) read$FUSE(r7, &(0x7f00000050c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r7, &(0x7f0000007100)={0x78, 0x0, r8, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x23, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x7fffffff, 0x4}}}, 0x78) socket(0x2, 0x5, 0x0) r9 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) 7.762133779s ago: executing program 4 (id=1900): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r1, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = dup2(r3, r2) getsockopt$inet_mreqn(r4, 0x0, 0x24, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f00000005c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x2, &(0x7f0000000300)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000340)='syzkaller\x00', 0x4, 0xa5, &(0x7f00000003c0)=""/165, 0x41100, 0x20, '\x00', r1, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0xc, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, r5, r0], &(0x7f0000000580)=[{0x4, 0x2, 0x5b2, 0xb}, {0x5, 0x3, 0x4, 0xc}], 0x10, 0x8}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_trace', 0x60401, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) socket$netlink(0x10, 0x3, 0x14) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0xc8000) syz_io_uring_setup(0x9, &(0x7f0000000640)={0x0, 0x77da, 0x8, 0x1, 0x21}, &(0x7f0000000dc0), 0x0) ioctl$IOC_PR_CLEAR(r9, 0x401070cd, &(0x7f0000000040)={0xd}) fcntl$getownex(r9, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@deltaction={0x38, 0x18, 0x1, 0x3, 0x25de5bfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0) syz_open_procfs$userns(r10, &(0x7f0000000100)) 7.35435667s ago: executing program 3 (id=1902): r0 = socket$inet(0xa, 0x801, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f}]}, 0x98}}, 0x0) (async) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f}]}, 0x98}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, 0x0, 0xc8) (async) write$binfmt_aout(r5, 0x0, 0xc8) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x14, 0x7, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r0, 0x6) (async) listen(r0, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="ea", 0x1) 6.456358343s ago: executing program 4 (id=1903): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001cb6250802040256ec26010203010902120001080000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) 5.431022983s ago: executing program 5 (id=1905): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xc, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e00000003000000c34700000700000004100000", @ANYRES32, @ANYBLOB="ce1dfb3500000000000000001300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000004000000030000000a00"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000700000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002440)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchmodat(r5, &(0x7f0000000240)='./file0\x00', 0x24) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000300)=r6) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr\x00') preadv(r7, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/132, 0x84}], 0x1, 0x2, 0x7fe) 5.257216436s ago: executing program 4 (id=1906): r0 = socket(0x23, 0x6, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, r1, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @loopback}}, 0x0, 0x3, 0x6, 0x400, 0x7}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000002c0), 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x202040, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000340)={r2, 0x5, 0xa, 0x9c}, &(0x7f0000000380)=0x10) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000003c0)) ioctl$IOMMU_VFIO_IOAS$CLEAR(0xffffffffffffffff, 0x3b88, &(0x7f0000000400)={0xc}) getsockname(0xffffffffffffffff, &(0x7f0000000440)=@nfc={0x27, 0x0}, &(0x7f00000004c0)=0x80) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000540)={0x0, @generic={0x3, "2e1e6c474950ce0ac4363da78095"}, @isdn={0x22, 0x2, 0x9d, 0x0, 0x4}, @nfc={0x27, r4, 0x0, 0x5}, 0x1, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000500)='pim6reg0\x00', 0xfff, 0x5}) accept$packet(r3, 0x0, &(0x7f00000005c0)) getsockopt$nfc_llcp(r3, 0x118, 0x2, &(0x7f0000000600)=""/90, 0x5a) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x64, &(0x7f0000000680)=[@in6={0xa, 0x4e24, 0x113, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffff9}, @in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x3d}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, @in6={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x4}, 0x6}]}, &(0x7f0000000740)=0x10) pipe2$watch_queue(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000007c0)=0x2, 0x4) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000200, r1, &(0x7f0000000800)='./file0\x00') setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000840)=@req={0xd1, 0x9, 0x6, 0x9}, 0x10) shutdown(r5, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000a, 0x110, r3, 0x1d103000) ioctl$TCSBRK(r3, 0x5409, 0x58e68fcf) mount$afs(&(0x7f0000000880)=@cell={0x23, 'syz1:', 'syz1'}, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x200000, &(0x7f0000000940)={[{}, {@flock_local}, {@dyn}, {@flock_write}, {@flock_write}, {@dyn}], [{@context={'context', 0x3d, 'system_u'}}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xff\xff'}}, {@appraise}]}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000009c0)) r7 = accept4$inet(r6, &(0x7f0000000a00)={0x2, 0x0, @initdev}, &(0x7f0000000a40)=0x10, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000a80)={0x3, 0x1, 0x1b}) syz_io_uring_setup(0x1a05, &(0x7f0000000ac0)={0x0, 0xf7bd, 0x40, 0x2, 0x1e5, 0x0, r3}, &(0x7f0000000b40), &(0x7f0000000b80)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000bc0)={'ip6tnl0\x00'}) getpeername$ax25(r6, &(0x7f0000000c00)={{}, [@rose, @remote, @bcast, @bcast, @default, @bcast, @remote, @rose]}, &(0x7f0000000c80)=0x48) 5.222903098s ago: executing program 4 (id=1907): r0 = socket(0x2, 0x80805, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x2, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 64) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000640)=[{0x5, 0x4a, 0x37, 0x7a}]}) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2}, 0x6) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RGETLOCK(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="2b000000000000d700000000000000", @ANYRES32=r1, @ANYBLOB='\r\x00sched_switch\x00'], 0x2b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) (async) mq_open(0x0, 0x42, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) (rerun: 32) sendfile(r8, r9, 0x0, 0x20000023896) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40cc00, 0x0) ioctl$TCSETSW(r10, 0x5403, &(0x7f00000000c0)={0x5, 0x3, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) 4.596991658s ago: executing program 3 (id=1908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240)='udf\x00', 0x2008087, 0x0) 4.55069781s ago: executing program 1 (id=1909): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000002200)={0x14}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3b9ac9ff, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xbffffffffffffffe, 0x10000000000100, 0xfffffffffffffffd, 0xfffffffffffffffd}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x9) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3, @ANYBLOB="0697d46399000d2072668600000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x0, &(0x7f0000002140)=0x5) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x4, &(0x7f0000000340)=0x1) unshare(0x28000600) syz_clone(0x4820300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x1011c2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x43) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0xc1485544, &(0x7f0000000000)=0x5) 4.49298742s ago: executing program 6 (id=1910): socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) write$uinput_user_dev(r2, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xe, 0x3}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a1, 0x3, 0x3, 0x7, 0x5b8, 0x2, 0x6, 0xc, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x26, 0x1, 0x5, 0x1, 0x1, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x1, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x800, 0x8], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x7fffc, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x20, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x7, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x10000, 0x9, 0x3, 0x2, 0x89a, 0x100, 0x5, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x9, 0x4, 0x0, 0x3, 0x9, 0x0, 0x2, 0x80000000, 0x0, 0xfffffff8, 0x7, 0x0, 0x3, 0x6, 0x0, 0x5, 0x3, 0x9bb, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0xd54, 0x1, 0x9, 0xb, 0x4, 0x7f, 0x6, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8010, 0x9, 0xff, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x8, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0xff, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="450002"], 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x40804) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20020000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x1ec, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x1020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_VF_PORTS={0x1b8, 0x18, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "992b2988e5cf716b73c58e6f30a7ba1a"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2c36f6bc2ba0075a9ebaf1202ab3e65a"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "62b4dd39d1c7971e29526af9fa504c00"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "fbea561511b34324f07c486f5e108521"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "4554e92b34de19d657c9a4901401ecca"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9d}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "edfa71b60eabb0bc2b78730d810b1f9e"}, @IFLA_PORT_PROFILE={0x11, 0x2, 'NLBL_CIPSOv4\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "661c378304f3f5ee67dc37d473449a66"}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xffffffff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "feac5fb1255c4f6fed7edbce0df4dc24"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8809742df1bbc12344aec5cb8470ae2f"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b096a4795c98b0d9615115463bb71e7a"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9b}, @IFLA_PORT_PROFILE={0x6, 0x2, '-\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0xff}]}, {0x4}, {0x4}, {0x68, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7b1e63c1c4ab658d2dccc94f6798a73d"}, @IFLA_PORT_PROFILE={0x11, 0x2, 'NLBL_CIPSOv4\x00'}, @IFLA_PORT_PROFILE={0x11, 0x2, 'NLBL_CIPSOv4\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "303cfcbaabdd8398c85de067a087cfad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f8dd0c2257f16a2dcc806991d5f8a34e"}]}]}]}, 0x1ec}}, 0x40010) 4.438723862s ago: executing program 5 (id=1911): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xe, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x6c, @multicast2, 0x4e24, 0x1, 'fo\x00', 0x0, 0x7, 0x33}, 0x2c) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x7f8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x18) 4.010517579s ago: executing program 5 (id=1912): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r0}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x8080) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000006c0)={0x0, &(0x7f0000000740)=[@wr_drn={0x68, 0x13, {0x4, 0x9}}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0xfffffffffffffee7, {0x3, 0x9}}, @code={0xa, 0x0, {"0f20e035000020000f22e0f347aac74424003b010000c744240200000000ff2c240f01d1650f08460f07406a002c0066b815010f00d00f017762"}}, @nested_vmlaunch={0x12f, 0x18}, @cpuid={0x64, 0x5f, {0x7, 0x3}}, @wrmsr={0x65, 0x20, {0x318, 0x9}}, @out_dx={0x6a, 0x28, {0x8e1e, 0x2, 0x4}}, @nested_vmlaunch={0x12f, 0xfffffffffffffea9, 0x1}, @nested_create_vm={0x12d, 0x18}, @cpuid={0x64, 0x18, {0x3, 0x2}}, @out_dx={0x6a, 0x28, {0x805d, 0x0, 0x977}}, @enable_nested={0x12c, 0x18}, @set_irq_handler={0xc8, 0x20, {0x37}}], 0x188}) pread64(r5, &(0x7f0000000700)=""/57, 0x39, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0xfffffffffffffe2b, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) recvmmsg(r6, 0x0, 0x0, 0x40002000, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r6, 0x0, 0x0, 0x60, 0x0) (async) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x8, 0xff}, &(0x7f0000000200)=0x9, 0x0, 0x10000000000f, 0x3, 0x80000000, 0x7f, 0x41, 0x6}}], 0x58, 0x4000000}, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f00000003c0)='%ps \x00'}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x51, &(0x7f0000000340)=ANY=[@ANYBLOB="120105024cf1c50863070210845f01000100daef000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209280f000000400000090507c6000000000000"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xad, &(0x7f0000000a00)=ANY=[@ANYBLOB="ad037ccaaabfac4000f38f9feec1cda401d01faa4b0e0468d372a955ee5a0ca957737d4f2b42323b1bcb8c24902ed67fd139d47483ff500f2f316eeb03e0c17d9738e86fd83ade8fa0054cae0f3478f3c91458327e3eeea40060ab0f0ed12cfa70cc418a63598e4d3efaea357068a8530ee10000000000000080cede69853605507607820fe158bcb4eca1600ad56ea7b579b06431952f67eed8e7837af3dc29c94e77eeec1a37c8aeb6da0ac2e595628c2ce3ede6c44e7304be2c3258e65be3a14ed79d5c69"]}]}) 3.90574536s ago: executing program 6 (id=1913): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0xe}]}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount(&(0x7f0000000300), 0x0, &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r11, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8003200030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df01", 0x5c) r12 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000002600)={{{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private0}}, &(0x7f00000000c0)=0xe8) write$FUSE_DIRENTPLUS(r0, &(0x7f0000002700)={0x288, 0x0, r9, [{{0x1, 0x2, 0x8000000000000001, 0xffffffffffffff00, 0x5, 0x108, {0x6, 0x6, 0x9, 0x6, 0x0, 0x10000, 0x5, 0x39a, 0x3, 0x6000, 0x1, r13, r10, 0x4, 0x1}}, {0x0, 0x8, 0xa, 0xfffffffe, ')(]$#\x96##\x0f&'}}, {{0x5, 0x3, 0xcd03, 0xe5, 0x4, 0xfffffffc, {0x4, 0x8000000000000001, 0x100000000, 0x7, 0x1, 0x100000000, 0x7, 0x51b6, 0x6, 0xc000, 0x10000, r7, r10, 0xfff, 0xbe57}}, {0x2, 0xfffffffffffffe00, 0x0, 0x1}}, {{0x2, 0x0, 0x7, 0xf, 0x8, 0x7, {0x6, 0x6, 0x7, 0x100000000, 0x100, 0x3, 0x1, 0x40, 0x0, 0x1000, 0xffffffff, r7, r8, 0xa, 0x9}}, {0x0, 0x2, 0x0, 0x5}}, {{0x4, 0x2, 0x101, 0xfffffffffffffffe, 0x6, 0x2, {0x1, 0x8, 0x0, 0x0, 0x3, 0x2, 0x7, 0xbf, 0x3, 0x1000, 0xe, r7, r10, 0x7, 0x3}}, {0x1, 0x6, 0x7, 0xb193, 'binder\x00'}}]}, 0x288) ioctl$sock_inet_SIOCSARP(r12, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r12, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r14 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000100), &(0x7f00000029c0)=0x4) writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04af01393e0d05c90008ed1cafe0b112d35495afb89b9988920ff61e8ec6eac916"], 0x10) 3.836854264s ago: executing program 5 (id=1914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x2000000, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) 3.055997734s ago: executing program 4 (id=1915): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r2, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3", 0xb6) sendto$inet(r3, 0x0, 0x0, 0x240240c5, &(0x7f0000000040)={0x2, 0x4e24, @private=0xa010101}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x2f) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) unshare(0x40000000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x200) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 2.910476654s ago: executing program 3 (id=1916): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000500)='./cgroup\x00', &(0x7f0000000040)='efs\x00', 0x208000, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) mknodat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x1000, 0x80000003) openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getrlimit(0x5, &(0x7f0000000300)) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x4001, 0x3, 0x398, 0x128, 0x0, 0x148, 0x128, 0x148, 0x300, 0x240, 0x240, 0x300, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x9e4b, 0x8000, 0x0, 0x0, 0xed, 0x7}, {0x4}}}, @common=@unspec=@connmark={{0x30}, {0xfffffffc, 0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x3, 0x8, 0x1}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'veth0_virt_wifi\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7ffffffe}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) 2.833099581s ago: executing program 5 (id=1917): r0 = fsopen(&(0x7f00000002c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\xee', 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x7e, 0xdf, 0xf1, 0x10, 0x4e8, 0x6889, 0x93dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6a, 0xbf, 0xd0, 0x6, [{{0x9, 0x4, 0x8, 0x1, 0x0, 0xff, 0x3, 0x6b, 0x93}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x90, 0xc, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x1, 0x1f, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xbe, 0x0, 0xd}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7f, 0x3, 0xd}}]}}}]}}]}}, &(0x7f0000000440)={0xffffff68, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x8, 0x1, 0xfb, 0x8, 0x9}, 0x182, &(0x7f00000004c0)={0x5, 0xf, 0x182, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x4, 0x0, 0xfffe, 0xff}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "2459d995034ddef3beb0f883def3f602"}, @generic={0x93, 0x10, 0xb, "9e0c57fd36c598ada679d514d76d370743b6bd54fcf5b16c16095355744ab315f70f9f539a5ad4badb125574daae28c35ce6b1ebedb24ff03218bcc20b45cf61417e7102d97cf580a616d19ddd3ac65267d60f7f1fe78284f9e803aefa61c2e24894665fddb3e876f97179671ce41d805c1d9a8a7b546cac7698c2696589f50bf87fe9af91c7f8bd19ea34f68040e151"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x4, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x2, 0xf00f, 0xfd, [0xff3f00, 0x0, 0xff00f0]}, @generic={0xa9, 0x10, 0x2, "5f2a8b8d79c64681782b6d4ed3ec489b7188a71fc52ca0b770a967200707c3096887020a2014e99cc13569e6a4fc5480c1a6d86addc75a9af3e7e7fd0946aa7c29f7342242f21f642b0ad7eb9d7c7f151ec94a4f0fbf229c9cf38d73702053e79a2e86ed4c25e899b0d3f13b84ead785b7c27ab5e52b11a9b5a1a197e02a09a7b47ee2204da8d17d5a4dced82231dcb2598affc7de307c449f1fd9d0cfdc514e641e02c12f7b"}]}, 0x5, [{0xdc, &(0x7f0000000240)=@string={0xdc, 0x3, "a5fcd2966f2f070167606b09b4e6dad8f6870ca287e43a61fc72548fe2292cecab13f7a31dd4173de7d667358d93214e89098a665b0dedb77cae170edd4e4804fb92cb4a78e28968125119764caff7dc4c919d0c9e1edb5e10cb0ee9e679f548213738047b936c801bcefa389273e1957551aaea7d77f413c3b63419557318366f464815ce193b7fb6f7e3cb7f5e001a8f06cdff8c94478c10d77ee95f27f82f0f317448905d81e276718bbfc9979e2457d0e8f3da051b40d5f2e9f5cbe63b2496c384e79cf38eb754088bf223dec79dd846bf64eb305765a450"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x71, &(0x7f0000000340)=@string={0x71, 0x3, "d21acb1aeed3f96e94759816b639ffaa5a70bf724a614e3bbbe537cbcdd445fdcbf6262455df3040672b54df8357b1c05d90a9741314baeb1699897d711c0f495cbdf479e44f6bab34ae6391d75307ca26b261a80fd254fbe0dd7b73e2e3206aa9ebe0762ca79becd1454ad8d63b22"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x412}}]}) 2.75888487s ago: executing program 6 (id=1918): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xf0ff, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x38}}, 0x10) 2.643790563s ago: executing program 6 (id=1919): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) epoll_create(0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000001b000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001b0c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0xfffffffffffffdcd, 0x0, 0x0, 0x2}, 0x50) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f000001b180)={0x28, 0x2, 0x0, {0x0, 0x100000001, 0xc}}, 0x28) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') sched_setscheduler(0x0, 0x0, &(0x7f000001b140)=0x5d) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) gettid() accept(r5, 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) fsopen(0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40081271, &(0x7f0000000000)=0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) (fail_nth: 2) 2.554573563s ago: executing program 1 (id=1920): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) epoll_create(0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000001b000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001b0c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0xfffffffffffffdcd, 0x0, 0x0, 0x2}, 0x50) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f000001b180)={0x28, 0x2, 0x0, {0x800000000000, 0x100000001, 0x95}}, 0x28) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') sched_setscheduler(0x0, 0x5, &(0x7f000001b140)=0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) gettid() accept(r5, 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) fsopen(0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40081271, &(0x7f0000000000)=0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) 2.253160479s ago: executing program 6 (id=1921): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYBLOB="6981cfdab3735558b8c8011936000fe9a7a3b1c06a94214434b58baabe7821b7528847297a13ca24cf0f2275c74d1eabed56b7ab1f806b0b2d977ae160290a5f6a0678ccdb77d0b9a7bbeb346cd5c06e6efc878199f2421d3a5a79182d55e1862c51400c74632e4459e499a2d8638776a73ceb7dcab4637c9e967fa7567653135151a8a0d3ca0cf8c2e4bf7869e43d05ecf55afb4f496a23b43e4bcd21b64cbcf79a3ed2946412d0050ee7c4dc760d065e0edeb00403576287d92cd6bfafb5ea9cc129b8d109d08cb2593c4bb2d5a9d9f6f4a15632b9155424a0b2d409e69fb80f2e4292b3486f73c555fd4c98407ea387405ba631", @ANYRES32=0xee00, @ANYBLOB="02000400", @ANYRES32=0xee00, @ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000800000000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRESDEC, @ANYBLOB='\b\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB="100000000000000020b975ccacf297722f1d71928f3f9f33b6e1acaabaf095ab38fc7bf0c9ac58aacef2b3cfe09dd4567c8ffac8846e1f1145e6046d3d81ef406ec56fb6a2a8f7d311004af192c8b24c56d17566ba6a64b798684fdfade4ede5980b6d957c8d89789a4c81dcf07c1e10d4a81dd7288a7d3d247b9cdb5b1f29047d9c9b315249c64aa69f35fc4d7ac9a38cedb1bcc730d59a3180c0ad80b7ba2c782f784c080c3950ca2d6e847577c706a7a3ffcdeb512c0363d04f25608ec0782f3d2a5317f06af529321edaed8ab8d2172cfc7e8e39401f4c8197e9b0914cfd8c77d83eb3d8a50d9b20d636225451e36911dad3d8e2ca899e9b7303b77c2bd3dd570be66198f58c09fc0f"], 0x5c, 0x0) socket(0x2, 0x80805, 0xfffffffc) io_setup(0x2, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='batadv_slave_0\x00', 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xffffffffffffff58, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x44004) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={0x0, 0x12f0}, 0x1, 0x0, 0x0, 0x800}, 0x4) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c0000800800"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd500000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) socket(0x10, 0x3, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0xfffffffffffffffe) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) 1.577507726s ago: executing program 1 (id=1922): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x20, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f0000000340), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYRES64=r2, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaed}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) (async) connect$inet6(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) (async) prlimit64(r5, 0xa, &(0x7f00000000c0)={0xd35, 0x6}, 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xfff7, 0xe, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x995, 0x9, 0x2, 0x6, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x101, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0xfc74, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x1, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xd064, 0x10000005, 0x4, 0x10000, 0xd, 0x0, 0x9, 0x10, 0x4000e, 0x9, 0x87, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7b, 0xa, 0x0, 0x1000, 0xf1, 0x5a56, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x6, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0xc, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x40000007, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3], [0x4, 0x200, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0x10, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x21ac, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x7, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x2, 0x1, 0xffff0002, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1.559771321s ago: executing program 6 (id=1923): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_io_uring_setup(0x4280, &(0x7f00000004c0)={0x0, 0x683, 0x10000, 0x1, 0x32}, &(0x7f0000000540), &(0x7f0000000580)) syz_io_uring_setup(0x717c, &(0x7f00000005c0)={0x0, 0xebf8, 0x20000, 0x0, 0x1aa, 0x0, r1}, &(0x7f0000000640), 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000480), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x6, 0x357, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x31, 0x2b, 0xb5, 0x8, 0xaf0, 0x6911, 0xe731, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x345, 0x1, 0x1, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0xda, 0x0, 0xf, 0x88, 0xd6, 0xcb, 0x0, [], [{{0x9, 0x5, 0x8, 0x2, 0x10, 0x4, 0x7, 0x4, [@generic={0x23, 0xd, "56df94007e85f07fc1e302b9bcf7d277493f7cd77603b3b818ca51b642d7c60ccf"}, @generic={0x29, 0x23, "4187050410f565e935826f67d5218c86bdb1c4007cafd4414d3b41a2a2deea8d236b0219b7e82d"}]}}, {{0x9, 0x5, 0x8a, 0x19, 0x8, 0x4, 0x8, 0x18, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x8, 0x8c, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x4, 0xa, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1ff0}]}}, {{0x9, 0x5, 0xb, 0x4, 0x19f, 0x9, 0xa, 0x3, [@generic={0xba, 0x2, "cb793a9de67f42ae171ec499561576a67dff6459730107b8bcc7c038bd64dadc6172b178c2d2de734efcab27b90d485589bfce5b9c1304f69b39287e94b8bf30ecf45c43a216141886b3559e1d3437c12b2c56407ae602f05a6cfb38ec8409b78e6e7733df13cb699d216db904c228ed2fe88dfcc94bfdc26547b9aafb73df651bd988aeccf91e8aea7970f36e4fc2ad964f1de30f31a61d1120599970826e4a464f38c8860287831ac3470cdfe3df10b28cce591e6b5db8"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x400, 0x5, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x200}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0xe, 0x5}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x1, 0x0, 0xff}}, {{0x9, 0x5, 0x9, 0x2, 0x0, 0x9, 0x7, 0x9}}, {{0x9, 0x5, 0xf, 0x3139e027615fca72, 0x40, 0xf, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x666a2f1139d9a086, 0x5, 0x2}, @generic={0xbe, 0x9, "d80d8509584db2ea08057a63b1c59cb937798e27e8a11b91e236f8cab396d349b4f54c157d2bce99ba30dff5bd7c9a56d4cc75263aa4b8b257390496eb615ba63447a296b669e207d1c7813b304b58878777469a5c920dda250b31ba4a66287a028a7f5df26c5cdb86a8e18bf57d4288a11e8ee9c2a05392920d2368d1facca6d354cf6e49bd5d5e00c1d830249b438823e7136fa1a9b1fce3359d6e4948b1e90ae2406117dc8f4f9a9f1c2559099f6892440893bad70e84f882dd39"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x92, 0x2}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x7, 0x81, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd0, 0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x0, 0x2, 0x7, [@generic={0x32, 0x4, "03c23da19f3dfa2936cd35d690f7a418eb8c8ba6132f01fb546e4d1c1d9eb7fac3687e63c2e3c02281b8c972969c4690"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x0, 0xa5, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc0, 0x7, 0xf3}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x9d, 0x9b, 0x1, [@generic={0x85, 0xc, "7277cc694627f01f2935a0f3989d8dbe6a0206874dd638259505733ddffc88767a64237482096693ff95194b9860a978595ed9dac3326d176c36baffd6bbc4a6350a6a83223452311fda0db2841ec7adb005c6d37fc657b1eb6afa33d339ae41c71a3b14b800d9fb7f64dcef08ea836f65e443fb95579a8c878f084972d6b174cdc828"}]}}]}}]}}]}}, 0x0) 1.277279396s ago: executing program 3 (id=1924): socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xcbfc0f2606956c3f, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) epoll_create(0x3ff) epoll_create1(0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f00000000c0)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 373.38608ms ago: executing program 1 (id=1925): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) shmat(0x0, &(0x7f0000804000/0x2000)=nil, 0x7000) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000b00)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000300)="7355d81b6932af3d64e79f521e8f9a533dabce9dcc3123bd5b6fa582fbaea99ee54721f77791e6d18934220260ed657ec2e01f322bbe6568bf8abd248c45888b61d6ba2d2268c7d74f92daef3aef49d23e27ecd2bc9d8fbbb214ac1c7a57b8aa11a9f402c69d2577f25a6930bf5502f99fc0c9e70b77e54dff18fae3", 0x7c}, {&(0x7f0000000400)="5e3d3414e5694794788ffa4029072268072c202ac920d9f84c0d4e86b2972da87fd24da69fad17125dbd40a103f6f4eb47df29310ca86c4f07aa4581964243b10bbed457500db5b8ac429e8b92258ea7be732608c530d39c799f5566e525bf918118f492747930e9ea7d707c739ab0a23117ce572fdf34b3eb39b196569a4959ed16366d793aa9f8ee7398d0027742c6cb40fdab26150490513237d591c9eba801462d5926e6bffa7f6bec0f466940f4bd102ddad29b9c84fb358fbbb9fb210be506e84fd621fb491b74748488496dd104", 0xd1}], 0x2, &(0x7f0000000a00)=[@rights={{0x24, 0x1, 0x1, [r6, r7, r7, r6, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r7, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x1c, 0x1, 0x1, [r1, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0xf0, 0x200400c1}}], 0x1, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000580), 0x0) 144.532968ms ago: executing program 5 (id=1926): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) eventfd2(0xff, 0x80801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee00, 0xee00, 0x0) setresuid(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[]) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000002540)=ANY=[@ANYBLOB='b']) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=1927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240)='udf\x00', 0x2008087, 0x0) kernel console output (not intermixed with test programs): config 0 descriptor?? [ 440.284255][ T24] gspca_main: kinect-2.14.0 probing 045e:02ae [ 440.947833][ T30] audit: type=1400 audit(1766301466.786:519): avc: denied { connect } for pid=11012 comm="syz.4.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 441.003787][ T7079] usb 4-1: USB disconnect, device number 41 [ 441.180523][ T5914] usb 1-1: USB disconnect, device number 56 [ 441.466634][ T30] audit: type=1400 audit(1766301467.746:520): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 442.740172][ T7079] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 443.263008][ T30] audit: type=1400 audit(1766301469.106:521): avc: denied { mounton } for pid=11036 comm="syz.4.1342" path="/322" dev="tmpfs" ino=1696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 443.376619][ T30] audit: type=1400 audit(1766301469.106:522): avc: denied { mount } for pid=11036 comm="syz.4.1342" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 443.641183][ T7079] usb 6-1: config 1 has an invalid interface number: 166 but max is 0 [ 443.665751][ T7079] usb 6-1: config 1 has no interface number 0 [ 443.851263][ T7079] usb 6-1: config 1 interface 166 has no altsetting 0 [ 443.877839][ T7079] usb 6-1: New USB device found, idVendor=2040, idProduct=9950, bcdDevice=50.1a [ 443.903295][ T7079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.913369][ T7079] usb 6-1: Product: syz [ 443.918296][ T7079] usb 6-1: Manufacturer: syz [ 443.922984][ T7079] usb 6-1: SerialNumber: syz [ 444.057476][T11052] netlink: 'syz.3.1345': attribute type 2 has an invalid length. [ 444.587277][T11057] netlink: get zone limit has 4 unknown bytes [ 445.112076][ T7079] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in warm state. [ 445.123347][ T7079] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 445.135708][ T7079] dvbdev: DVB: registering new adapter (Hauppauge Nova-T 500 Dual DVB-T) [ 445.145248][ T7079] usb 6-1: media controller created [ 445.165534][ T7079] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.313280][T11032] syz.5.1341 (11032): /proc/11031/oom_adj is deprecated, please use /proc/11031/oom_score_adj instead. [ 445.555824][ T7079] dvb-usb: no frontend was attached by 'Hauppauge Nova-T 500 Dual DVB-T' [ 445.574557][ T7079] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 445.592161][ T7079] dvbdev: DVB: registering new adapter (Hauppauge Nova-T 500 Dual DVB-T) [ 445.618095][ T7079] usb 6-1: media controller created [ 445.665000][ T7079] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.736523][ T7079] dvb-usb: no frontend was attached by 'Hauppauge Nova-T 500 Dual DVB-T' [ 445.815924][ T7079] rc_core: IR keymap rc-dib0700-rc5 not found [ 445.828898][ T7079] Registered IR keymap rc-empty [ 445.833892][ T7079] dvb-usb: could not initialize remote control. [ 445.859200][ T7079] dvb-usb: Hauppauge Nova-T 500 Dual DVB-T successfully initialized and connected. [ 445.883061][ T7079] usb 6-1: USB disconnect, device number 31 [ 445.980241][T11053] lo speed is unknown, defaulting to 1000 [ 446.138332][ T7079] dvb-usb: Hauppauge Nova-T 500 Dual DVB-T successfully deinitialized and disconnected. [ 446.268461][T11071] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1350'. [ 446.300538][T11071] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11071 comm=syz.5.1350 [ 446.375744][ T5915] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 446.517462][T11075] 9p: Bad value for 'port' [ 446.527597][ T5915] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 446.539072][ T5915] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 446.557184][ T5915] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 446.575609][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.579150][T11076] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1352'. [ 446.618447][T11067] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 446.632484][ T5915] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 446.690670][T11077] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.697920][T11077] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.011246][T11077] bridge0: entered allmulticast mode [ 447.511183][ T6486] usb 2-1: USB disconnect, device number 38 [ 447.738228][T11100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11100 comm=syz.4.1358 [ 448.184467][T11105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1359'. [ 449.117592][T11115] tipc: Enabled bearer , priority 0 [ 449.166064][T11117] syzkaller0: entered promiscuous mode [ 449.212343][T11117] syzkaller0: entered allmulticast mode [ 449.860163][ T7079] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 449.929915][T11122] tipc: Resetting bearer [ 449.940458][T11113] tipc: Resetting bearer [ 449.952245][T11113] tipc: Disabling bearer [ 450.025750][ T7079] usb 4-1: Using ep0 maxpacket: 32 [ 450.047186][ T7079] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 450.077545][ T7079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.085621][ T7079] usb 4-1: Product: syz [ 450.093391][ T7079] usb 4-1: Manufacturer: syz [ 450.098482][ T7079] usb 4-1: SerialNumber: syz [ 450.136207][ T7079] usb 4-1: config 0 descriptor?? [ 450.342289][ T30] audit: type=1400 audit(1766301477.592:523): avc: denied { setopt } for pid=11138 comm="syz.1.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 450.382459][ T7079] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 042 [ 450.395831][ T5915] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 450.566152][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 450.660827][ T5915] usb 6-1: config 0 has no interfaces? [ 450.674415][ T5915] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 450.696842][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.155673][ T30] audit: type=1400 audit(1766301478.432:524): avc: denied { map } for pid=11126 comm="syz.3.1364" path="socket:[28148]" dev="sockfs" ino=28148 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 451.178843][ T5915] usb 6-1: Product: syz [ 451.188879][ T5915] usb 6-1: Manufacturer: syz [ 451.202790][ T5915] usb 6-1: SerialNumber: syz [ 451.222955][T11143] lo speed is unknown, defaulting to 1000 [ 451.233778][ T5915] usb 6-1: config 0 descriptor?? [ 451.451726][ T5914] usb 6-1: USB disconnect, device number 32 [ 451.543565][T11165] netlink: 'syz.4.1367': attribute type 2 has an invalid length. [ 452.275085][ T5915] usb 4-1: USB disconnect, device number 42 [ 453.625480][ T5915] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 453.721612][ T30] audit: type=1400 audit(1766301480.992:525): avc: denied { create } for pid=11193 comm="syz.0.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 453.891317][ T5915] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 454.038262][ T5915] usb 4-1: config 0 has no interface number 1 [ 454.064920][ T5915] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 454.217976][ T5915] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 454.538761][ T5915] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 454.559809][T11165] lo speed is unknown, defaulting to 1000 [ 454.590942][ T5915] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.629496][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 454.641190][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 454.694795][ T5915] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 454.711949][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.725076][ T5915] usb 4-1: Product: syz [ 454.736484][ T5915] usb 4-1: Manufacturer: syz [ 454.744047][ T5915] usb 4-1: SerialNumber: syz [ 454.794903][ T5915] usb 4-1: config 0 descriptor?? [ 454.830715][T11188] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 454.889832][ T5915] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.396758][T11221] FAULT_INJECTION: forcing a failure. [ 455.396758][T11221] name failslab, interval 1, probability 0, space 0, times 0 [ 455.409606][T11221] CPU: 0 UID: 0 PID: 11221 Comm: syz.1.1377 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.409631][T11221] Tainted: [L]=SOFTLOCKUP [ 455.409635][T11221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 455.409641][T11221] Call Trace: [ 455.409645][T11221] [ 455.409649][T11221] dump_stack_lvl+0x16c/0x1f0 [ 455.409667][T11221] should_fail_ex+0x512/0x640 [ 455.409683][T11221] ? __kmalloc_cache_noprof+0x5f/0x800 [ 455.409701][T11221] should_failslab+0xc2/0x120 [ 455.409715][T11221] __kmalloc_cache_noprof+0x80/0x800 [ 455.409732][T11221] ? fuse_lookup_name+0x19f/0x780 [ 455.409751][T11221] ? fuse_lookup_name+0x19f/0x780 [ 455.409766][T11221] fuse_lookup_name+0x19f/0x780 [ 455.409783][T11221] ? fuse_lock_inode+0xd2/0x110 [ 455.409792][T11221] ? kasan_save_stack+0x33/0x60 [ 455.409804][T11221] ? __pfx_fuse_lookup_name+0x10/0x10 [ 455.409819][T11221] ? __d_alloc+0x628/0xa80 [ 455.409828][T11221] ? __pfx___mutex_lock+0x10/0x10 [ 455.409842][T11221] ? do_syscall_64+0xcd/0xf80 [ 455.409867][T11221] fuse_lookup+0x26a/0x560 [ 455.409884][T11221] ? __pfx_fuse_lookup+0x10/0x10 [ 455.409908][T11221] ? do_raw_spin_unlock+0x172/0x230 [ 455.409923][T11221] ? _raw_spin_unlock+0x28/0x50 [ 455.409936][T11221] lookup_one_qstr_excl+0x1d1/0x250 [ 455.409946][T11221] ? mnt_want_write+0x161/0x450 [ 455.409960][T11221] filename_create+0x1cf/0x400 [ 455.409973][T11221] ? __pfx_filename_create+0x10/0x10 [ 455.409988][T11221] ? find_held_lock+0x2b/0x80 [ 455.410002][T11221] ? __might_fault+0xe3/0x190 [ 455.410014][T11221] do_mknodat+0x19c/0x6f0 [ 455.410029][T11221] ? __pfx_do_mknodat+0x10/0x10 [ 455.410042][T11221] ? getname_flags.part.0+0x1c5/0x550 [ 455.410056][T11221] __x64_sys_mknod+0x87/0xb0 [ 455.410071][T11221] do_syscall_64+0xcd/0xf80 [ 455.410085][T11221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.410095][T11221] RIP: 0033:0x7f3f79f8f749 [ 455.410104][T11221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.410114][T11221] RSP: 002b:00007f3f7ad97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 455.410124][T11221] RAX: ffffffffffffffda RBX: 00007f3f7a1e6090 RCX: 00007f3f79f8f749 [ 455.410130][T11221] RDX: 0000000000000702 RSI: 0000000000000002 RDI: 00002000000002c0 [ 455.410136][T11221] RBP: 00007f3f7ad97090 R08: 0000000000000000 R09: 0000000000000000 [ 455.410141][T11221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.410147][T11221] R13: 00007f3f7a1e6128 R14: 00007f3f7a1e6090 R15: 00007fffc91e4328 [ 455.410161][T11221] [ 456.143885][ T5915] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 456.384826][T11228] vlan2: entered promiscuous mode [ 456.391182][T11228] bridge0: entered promiscuous mode [ 456.621191][ T5915] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 456.682068][ T5915] usb 4-1: USB disconnect, device number 43 [ 456.688058][ T30] audit: type=1400 audit(1766301483.962:526): avc: denied { setattr } for pid=11232 comm="syz.0.1381" name="" dev="pipefs" ino=28839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 456.803644][T10640] udevd[10640]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.928624][ T30] audit: type=1400 audit(1766301484.212:527): avc: denied { read } for pid=11239 comm="syz.0.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 459.175511][T11272] set match dimension is over the limit! [ 459.495955][ T5915] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 459.827035][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 459.857530][ T5915] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 459.903536][ T5915] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 459.922886][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.953165][ T5915] usb 2-1: Product: syz [ 459.963040][ T5915] usb 2-1: Manufacturer: syz [ 459.975741][ T5915] usb 2-1: SerialNumber: syz [ 460.005448][ T5915] usb 2-1: config 0 descriptor?? [ 460.024865][ T5915] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 460.959250][ T5915] gspca_zc3xx: reg_w_i err -110 [ 461.565800][ T5915] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 461.575798][ T5915] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 461.731715][T11329] netlink: 'syz.0.1403': attribute type 2 has an invalid length. [ 462.019736][T11344] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1407'. [ 462.080801][ T30] audit: type=1400 audit(1766301489.362:528): avc: denied { map } for pid=11341 comm="syz.4.1408" path="socket:[28442]" dev="sockfs" ino=28442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 462.145454][ T30] audit: type=1400 audit(1766301489.392:529): avc: denied { read accept } for pid=11341 comm="syz.4.1408" path="socket:[28442]" dev="sockfs" ino=28442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 462.207077][T11329] lo speed is unknown, defaulting to 1000 [ 462.261912][T11350] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1408'. [ 462.274178][T11350] netlink: 'syz.4.1408': attribute type 4 has an invalid length. [ 463.218457][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1412'. [ 464.128423][ T5880] usb 2-1: USB disconnect, device number 39 [ 464.309801][T11368] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1413'. [ 464.725838][ T5880] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 464.803774][ T6093] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 465.300546][ T5880] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 465.364958][ T5880] usb 2-1: config 0 has no interface number 1 [ 465.391979][ T5880] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 465.485861][ T5880] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 465.530195][ T5880] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 465.571894][ T5880] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.591962][ T6093] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 465.606565][ T6093] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 465.617827][ T6093] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.628799][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 465.653564][ T6093] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 465.655670][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 465.672381][ T5880] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 465.682554][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.690825][ T5880] usb 2-1: Product: syz [ 465.696211][ T5880] usb 2-1: Manufacturer: syz [ 465.700807][ T5880] usb 2-1: SerialNumber: syz [ 465.709267][ T5880] usb 2-1: config 0 descriptor?? [ 465.716597][T11370] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 465.726372][ T5880] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 465.762543][ T5880] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 465.847838][ T5915] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 465.850828][T11395] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 466.105028][T11363] loop6: detected capacity change from 0 to 524287999 [ 466.112913][ T30] audit: type=1400 audit(1766301493.382:530): avc: denied { append } for pid=11362 comm="syz.3.1411" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 466.155177][ T5880] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 466.164382][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 466.190341][ T5915] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 466.228687][ T5880] usb 2-1: USB disconnect, device number 40 [ 466.241511][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.291801][T10645] udevd[10645]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.309233][ T5915] usb 1-1: config 0 descriptor?? [ 466.330663][ T5915] gspca_main: sunplus-2.14.0 probing 041e:400b [ 466.505994][ T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 466.658691][ T24] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 466.669204][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.681989][ T24] usb 6-1: Product: syz [ 466.689314][ T24] usb 6-1: Manufacturer: syz [ 466.697266][ T24] usb 6-1: SerialNumber: syz [ 466.710358][ T24] usb 6-1: config 0 descriptor?? [ 466.727286][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 466.740239][ T5915] gspca_sunplus: reg_w_riv err -71 [ 466.747987][ T5915] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 466.758225][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 466.783351][ T5915] usb 1-1: USB disconnect, device number 57 [ 466.790070][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 466.804705][ T24] usb 6-1: media controller created [ 466.830933][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 466.896958][ T24] DVB: Unable to find symbol mt352_attach() [ 466.967788][ T24] DVB: Unable to find symbol nxt6000_attach() [ 466.984625][ T6093] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 466.986977][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 467.026937][ T6093] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 467.045082][ T6093] stv0680 4-1:4.0: last error: 86, command = 0x78 [ 467.051519][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input53 [ 467.075869][ T6093] usb 4-1: USB disconnect, device number 44 [ 467.116293][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 467.123387][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 467.125778][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 467.133691][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 467.161775][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 467.170886][ T24] usb 6-1: USB disconnect, device number 33 [ 467.288320][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 467.745876][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 467.756552][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 467.766027][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.774062][ T10] usb 2-1: Product: syz [ 467.778814][ T10] usb 2-1: Manufacturer: syz [ 467.783407][ T10] usb 2-1: SerialNumber: syz [ 467.790844][ T10] usb 2-1: config 0 descriptor?? [ 467.798473][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 467.819184][T11411] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1425'. [ 467.964800][T11414] ======================================================= [ 467.964800][T11414] WARNING: The mand mount option has been deprecated and [ 467.964800][T11414] and is ignored by this kernel. Remove the mand [ 467.964800][T11414] option from the mount to silence this warning. [ 467.964800][T11414] ======================================================= [ 468.245964][ T30] audit: type=1400 audit(1766301495.502:531): avc: denied { remount } for pid=11413 comm="syz.5.1426" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 468.248699][T11417] option changes via remount are deprecated (pid=11413 comm=syz.5.1426) [ 468.556677][ T30] audit: type=1400 audit(1766301495.842:532): avc: denied { mounton } for pid=11420 comm="syz.0.1429" path="/proc/979/task" dev="proc" ino=29198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 469.049224][T11431] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 469.556448][T11438] set match dimension is over the limit! [ 469.599650][ T30] audit: type=1400 audit(1766301496.882:533): avc: denied { execute } for pid=11440 comm="syz.5.1436" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 469.971108][T11445] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 469.981508][T11445] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 469.995044][T11445] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 470.005304][T11445] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 470.017909][T11445] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 470.028005][T11445] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 470.040890][T11445] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 470.050770][T11445] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 470.060328][T11445] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 470.078945][ T30] audit: type=1400 audit(1766301497.232:534): avc: denied { name_bind } for pid=11442 comm="syz.5.1437" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 470.359093][ T10] gspca_sonixj: reg_r err -71 [ 470.363863][ T10] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 470.377603][ T10] usb 2-1: USB disconnect, device number 41 [ 470.395966][T10641] udevd[10641]: setting mode of /dev/bus/usb/002/041 to 020664 failed: No such file or directory [ 470.459354][T10641] udevd[10641]: setting owner of /dev/bus/usb/002/041 to uid=0, gid=0 failed: No such file or directory [ 470.955717][ T24] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 471.184380][T11464] ocfs2: Bad value for 'barrier' [ 471.465854][ T5922] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 471.687939][ T24] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 471.717610][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 471.732284][ T24] usb 4-1: can't read configurations, error -61 [ 471.857187][ T5922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 471.868616][ T5922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 471.879836][ T5922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 471.891877][ T24] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 471.900071][ T5922] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 471.935069][ T5922] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 471.956797][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 471.974102][ T5922] usb 6-1: SerialNumber: syz [ 471.989096][T11462] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 471.998855][ T5922] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 472.010412][ T5922] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 472.076770][ T24] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 472.099145][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 472.132729][ T24] usb 4-1: can't read configurations, error -61 [ 472.171980][ T24] usb usb4-port1: attempt power cycle [ 472.207249][T11471] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 472.213619][T11462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.245029][T11462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.718788][ T24] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 472.765907][ T24] usb 4-1: device descriptor read/8, error -71 [ 472.777977][ T10] usb 6-1: USB disconnect, device number 34 [ 472.918759][T11482] set match dimension is over the limit! [ 473.055893][ T5922] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 473.215786][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 473.224291][ T5922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.248604][ T5922] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 473.273139][ T5922] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 473.299729][ T5922] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 473.320531][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.333128][ T5922] usb 2-1: Product: syz [ 473.341469][ T5922] usb 2-1: Manufacturer: syz [ 473.351837][ T5922] usb 2-1: SerialNumber: syz [ 473.364440][T11479] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 473.726178][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 473.756311][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 473.771579][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 473.791531][ T24] usb 4-1: can't read configurations, error -61 [ 473.804726][ T24] usb usb4-port1: unable to enumerate USB device [ 473.931932][T11496] syzkaller0: entered promiscuous mode [ 473.943840][T11496] syzkaller0: entered allmulticast mode [ 474.002574][T11496] tipc: Enabled bearer , priority 10 [ 474.093700][ T5922] cdc_ncm 2-1:1.0: bind() failure [ 474.100354][T11494] tipc: Resetting bearer [ 474.124406][ T5922] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 474.137573][ T5922] usb 2-1: USB disconnect, device number 42 [ 474.163421][T11499] set match dimension is over the limit! [ 474.208902][T11494] tipc: Disabling bearer [ 475.121529][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1457'. [ 475.392127][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1458'. [ 476.492212][ T4133] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.534670][ T4133] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.625364][T11527] netlink: 'syz.3.1464': attribute type 10 has an invalid length. [ 476.640625][T11527] team0: Device ipvlan1 failed to register rx_handler [ 476.873343][ T4133] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.896875][ T4133] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.007804][ T4133] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.028690][ T4133] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.322450][T11537] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1466'. [ 477.362964][T11537] qrtr: Invalid version 0 [ 477.915716][ T5922] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 478.006393][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 478.040561][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 478.055477][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 478.132231][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 478.203143][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 478.237825][ T4133] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.296628][ T4133] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.986584][T11548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1471'. [ 479.135043][ T4133] bridge_slave_1: left allmulticast mode [ 479.158278][ T5922] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 479.191822][ T4133] bridge_slave_1: left promiscuous mode [ 479.272756][ T4133] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.293706][ T5922] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 479.609251][ T5922] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 479.632830][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.643644][ T4133] bridge_slave_0: left allmulticast mode [ 479.677822][ T4133] bridge_slave_0: left promiscuous mode [ 479.693537][T11537] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 479.703930][ T5922] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 479.721113][ T4133] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.340450][T11574] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1477'. [ 480.416022][ T52] Bluetooth: hci2: command tx timeout [ 480.692548][T11543] lo speed is unknown, defaulting to 1000 [ 480.773770][ T4133] : left promiscuous mode [ 481.016875][ T6093] usb 6-1: USB disconnect, device number 35 [ 481.531738][ T4133] tipc: Left network mode [ 481.672296][T11596] syzkaller0: entered promiscuous mode [ 481.681565][T11596] syzkaller0: entered allmulticast mode [ 481.770349][T11543] chnl_net:caif_netlink_parms(): no params data found [ 481.968435][T11610] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1482'. [ 482.076587][T11618] overlayfs: failed to clone lowerpath [ 482.227579][ T30] audit: type=1400 audit(1766301509.512:535): avc: denied { ioctl } for pid=11623 comm="syz.3.1485" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 482.344965][ T30] audit: type=1400 audit(1766301509.602:536): avc: denied { write } for pid=11625 comm="syz.4.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 482.445402][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1488'. [ 482.500448][T11543] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.505778][ T52] Bluetooth: hci2: command tx timeout [ 482.525880][T11543] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.536083][T11543] bridge_slave_0: entered allmulticast mode [ 482.543338][T11543] bridge_slave_0: entered promiscuous mode [ 482.658187][T11543] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.665321][T11543] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.672791][T11543] bridge_slave_1: entered allmulticast mode [ 482.680094][T11543] bridge_slave_1: entered promiscuous mode [ 483.259497][ T4133] hsr_slave_0: left promiscuous mode [ 483.266600][ T4133] hsr_slave_1: left promiscuous mode [ 483.273278][ T4133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.281450][ T4133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.289650][ T4133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.297677][ T4133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.317121][ T4133] veth1_macvtap: left promiscuous mode [ 483.323207][ T4133] veth0_macvtap: left promiscuous mode [ 483.330387][ T4133] veth1_vlan: left promiscuous mode [ 483.336216][ T4133] veth0_vlan: left promiscuous mode [ 483.516977][ T5922] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 483.593609][ T4133] team0 (unregistering): Port device team_slave_1 removed [ 483.620197][ T4133] team0 (unregistering): Port device team_slave_0 removed [ 483.678718][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 483.685196][ T5922] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 483.701592][ T5922] usb 2-1: config 0 has no interface number 0 [ 483.731954][ T5922] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 483.745679][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.765840][ T5922] usb 2-1: Product: syz [ 483.770021][ T5922] usb 2-1: Manufacturer: syz [ 483.785720][ T5922] usb 2-1: SerialNumber: syz [ 483.797757][ T5922] usb 2-1: config 0 descriptor?? [ 483.811378][ T5922] hub 2-1:0.132: bad descriptor, ignoring hub [ 483.825708][ T5922] hub 2-1:0.132: probe with driver hub failed with error -5 [ 483.840060][ T5922] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input54 [ 483.989069][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1490'. [ 484.038474][ T5922] usb 2-1: USB disconnect, device number 43 [ 484.192625][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1490'. [ 484.209219][T11643] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.216512][T11643] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.266738][T11543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.283742][T11543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.500572][T11543] team0: Port device team_slave_0 added [ 484.501595][ T30] audit: type=1400 audit(1766301511.782:537): avc: denied { setopt } for pid=11660 comm="syz.4.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 484.561125][T11543] team0: Port device team_slave_1 added [ 484.578814][ T52] Bluetooth: hci2: command tx timeout [ 484.658942][T11543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.686433][T11543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.810161][T11543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.831677][ T4133] IPVS: stop unused estimator thread 0... [ 484.841073][T11543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.848445][ T30] audit: type=1400 audit(1766301512.142:538): avc: denied { create } for pid=11662 comm="syz.3.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 484.849497][T11543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.136744][ T30] audit: type=1400 audit(1766301512.382:539): avc: denied { setopt } for pid=11669 comm="syz.1.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 485.230805][T11543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.301252][T11543] hsr_slave_0: entered promiscuous mode [ 485.315171][T11543] hsr_slave_1: entered promiscuous mode [ 485.335049][T11543] debugfs: 'hsr0' already exists in 'hsr' [ 485.349404][T11543] Cannot create hsr debugfs directory [ 485.488123][ T30] audit: type=1326 audit(1766301512.772:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784bb8f749 code=0x7ffc0000 [ 485.616943][ T30] audit: type=1326 audit(1766301512.792:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784bb8f749 code=0x7ffc0000 [ 485.647528][ T30] audit: type=1326 audit(1766301512.792:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f784bb9169a code=0x7ffc0000 [ 485.743991][ T30] audit: type=1326 audit(1766301512.792:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f784bb8df90 code=0x7ffc0000 [ 485.812714][ T30] audit: type=1326 audit(1766301512.792:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11683 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784bb8f749 code=0x7ffc0000 [ 485.918979][T11543] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 485.987847][T11543] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 486.003917][T11690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1501'. [ 486.028617][T11543] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 486.112040][T11543] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 486.658600][ T52] Bluetooth: hci2: command tx timeout [ 487.173173][T11543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.201239][T11543] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.221402][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.228562][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.293730][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.300930][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.351896][T11543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 487.366028][T11543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.385803][ T5880] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 487.586879][ T5880] usb 6-1: Using ep0 maxpacket: 8 [ 487.595473][ T5880] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 487.607454][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.626722][ T5880] usb 6-1: Product: syz [ 487.630909][ T5880] usb 6-1: Manufacturer: syz [ 487.635493][ T5880] usb 6-1: SerialNumber: syz [ 487.696712][ T5880] usb 6-1: config 0 descriptor?? [ 487.724132][ T5880] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 487.875841][T11543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.430313][T11543] veth0_vlan: entered promiscuous mode [ 488.457942][T11543] veth1_vlan: entered promiscuous mode [ 488.509754][T11543] veth0_macvtap: entered promiscuous mode [ 488.520795][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 488.520809][ T30] audit: type=1400 audit(1766301515.802:559): avc: denied { create } for pid=11753 comm="syz.1.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 488.521625][T11543] veth1_macvtap: entered promiscuous mode [ 488.556676][ T30] audit: type=1400 audit(1766301515.832:560): avc: denied { setopt } for pid=11753 comm="syz.1.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 488.571820][T11543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.600905][ T30] audit: type=1400 audit(1766301515.872:561): avc: denied { accept } for pid=11753 comm="syz.1.1509" laddr=172.20.20.23 lport=65532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 488.603181][T11543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.656488][ T6023] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.669088][ T6023] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.724389][ T6023] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.748652][ T6023] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.120501][ T10] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 489.326615][ T6332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.372194][T11768] overlayfs: failed to clone upperpath [ 489.395098][ T6332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.402671][ T10] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 489.430412][ T10] usb 2-1: config 0 has no interface number 1 [ 489.474622][ T10] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 489.591503][ T10] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 489.621685][ T4438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.639675][ T10] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 489.652152][ T4438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.660010][ T10] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.674433][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 489.720261][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 489.742597][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 489.759252][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.785491][ T10] usb 2-1: Product: syz [ 489.805797][ T5880] gspca_sonixj: i2c_w8 err -71 [ 489.816814][ T10] usb 2-1: Manufacturer: syz [ 489.841186][ T10] usb 2-1: SerialNumber: syz [ 489.856276][ T5880] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 489.860198][ T10] usb 2-1: config 0 descriptor?? [ 489.874985][T11765] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 489.884319][ T5880] usb 6-1: USB disconnect, device number 36 [ 489.888593][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.923090][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.464061][ T10] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 490.499623][ T10] usb 2-1: USB disconnect, device number 44 [ 490.591506][T10640] udevd[10640]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.938273][T11782] vivid-006: disconnect [ 491.235805][ T10] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 491.445828][ T5880] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 491.547048][ T10] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 491.565873][ T10] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.596867][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 491.602676][T11781] vivid-006: reconnect [ 491.667040][ T5880] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 491.676579][ T5880] usb 6-1: config 0 has no interface number 1 [ 491.682655][ T5880] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 491.705846][ T5880] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 491.725722][ T5880] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 491.726247][ T10] usb 7-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 491.745969][ T5880] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 491.783586][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.804511][ T10] usb 7-1: config 0 descriptor?? [ 491.826251][ T5880] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 491.856636][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 491.890220][ T5880] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 491.900156][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.916900][ T5880] usb 6-1: Product: syz [ 491.921091][ T5880] usb 6-1: Manufacturer: syz [ 491.926794][ T5880] usb 6-1: SerialNumber: syz [ 491.945036][ T5880] usb 6-1: config 0 descriptor?? [ 491.953990][T11791] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 492.450448][ T5880] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 492.481385][ T5880] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 492.491431][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 492.500085][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 492.553874][ T10] usb 7-1: USB disconnect, device number 2 [ 492.585717][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 492.604673][ T5880] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 492.725702][ T24] usb 2-1: device descriptor read/64, error -71 [ 492.990925][ T10] usb 6-1: USB disconnect, device number 37 [ 493.085849][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 493.245710][ T24] usb 2-1: device descriptor read/64, error -71 [ 493.366941][ T24] usb usb2-port1: attempt power cycle [ 493.795724][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 493.826194][ T24] usb 2-1: device descriptor read/8, error -71 [ 494.085857][ T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 494.106542][ T24] usb 2-1: device descriptor read/8, error -71 [ 494.236674][ T24] usb usb2-port1: unable to enumerate USB device [ 494.982184][T11833] netlink: 'syz.5.1527': attribute type 2 has an invalid length. [ 495.228452][T11838] netlink: 'syz.1.1530': attribute type 5 has an invalid length. [ 495.395732][T11838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1530'. [ 495.433504][T11833] lo speed is unknown, defaulting to 1000 [ 496.443632][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1529'. [ 496.526217][T11853] sit0: entered promiscuous mode [ 496.547778][T11853] netlink: 'syz.4.1533': attribute type 1 has an invalid length. [ 496.566836][T11853] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1533'. [ 496.695921][ T10] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 496.904703][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 496.916157][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 496.927113][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 496.938451][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 496.965941][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 496.975093][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 496.986164][ T10] usb 2-1: SerialNumber: syz [ 497.015877][T11851] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 497.029067][ T10] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 497.037131][ T10] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 497.609993][ T5880] usb 2-1: USB disconnect, device number 49 [ 498.141876][T11872] ptrace attach of "./syz-executor exec"[8958] was attempted by ""[11872] [ 498.151568][T11872] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1539'. [ 498.300695][T11877] FAULT_INJECTION: forcing a failure. [ 498.300695][T11877] name failslab, interval 1, probability 0, space 0, times 0 [ 498.313902][T11877] CPU: 1 UID: 0 PID: 11877 Comm: syz.1.1541 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.313927][T11877] Tainted: [L]=SOFTLOCKUP [ 498.313932][T11877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 498.313940][T11877] Call Trace: [ 498.313945][T11877] [ 498.313951][T11877] dump_stack_lvl+0x16c/0x1f0 [ 498.313976][T11877] should_fail_ex+0x512/0x640 [ 498.314006][T11877] ? kmem_cache_alloc_noprof+0x62/0x770 [ 498.314025][T11877] should_failslab+0xc2/0x120 [ 498.314047][T11877] kmem_cache_alloc_noprof+0x83/0x770 [ 498.314062][T11877] ? ceph_msg_new2+0x3e/0x560 [ 498.314082][T11877] ? ceph_msg_new2+0x3e/0x560 [ 498.314095][T11877] ceph_msg_new2+0x3e/0x560 [ 498.314114][T11877] ceph_monc_init+0x588/0xca0 [ 498.314144][T11877] ceph_create_client+0x25b/0x370 [ 498.314162][T11877] ceph_get_tree+0x1ac/0x20c0 [ 498.314182][T11877] ? security_capable+0x7e/0x260 [ 498.314203][T11877] vfs_get_tree+0x8e/0x330 [ 498.314221][T11877] vfs_cmd_create+0xd7/0x2a0 [ 498.314241][T11877] __do_sys_fsconfig+0x7b8/0xbe0 [ 498.314260][T11877] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 498.314277][T11877] ? fput+0x70/0xf0 [ 498.314302][T11877] do_syscall_64+0xcd/0xf80 [ 498.314325][T11877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.314342][T11877] RIP: 0033:0x7f3f79f8f749 [ 498.314355][T11877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.314371][T11877] RSP: 002b:00007f3f7adb8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 498.314387][T11877] RAX: ffffffffffffffda RBX: 00007f3f7a1e5fa0 RCX: 00007f3f79f8f749 [ 498.314398][T11877] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 498.314407][T11877] RBP: 00007f3f7adb8090 R08: 0000000000000000 R09: 0000000000000000 [ 498.314416][T11877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.314425][T11877] R13: 00007f3f7a1e6038 R14: 00007f3f7a1e5fa0 R15: 00007fffc91e4328 [ 498.314448][T11877] [ 498.336821][ T30] audit: type=1326 audit(1766301525.602:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 498.731066][ T30] audit: type=1326 audit(1766301525.682:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 498.784319][ T30] audit: type=1326 audit(1766301525.682:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 498.959932][ T30] audit: type=1326 audit(1766301525.682:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 499.848360][ T30] audit: type=1326 audit(1766301525.682:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 499.913655][T11902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1547'. [ 500.075886][ T30] audit: type=1326 audit(1766301525.682:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 500.575737][ T30] audit: type=1326 audit(1766301525.682:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 501.137685][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.143954][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.170195][ T30] audit: type=1326 audit(1766301525.682:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 501.194718][ T30] audit: type=1326 audit(1766301525.682:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 501.258812][ T30] audit: type=1326 audit(1766301525.682:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11879 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 501.515735][ T5914] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 501.688016][ T5914] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 501.726834][ T5914] usb 4-1: config 1 interface 0 has no altsetting 0 [ 501.772227][ T5914] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 501.815282][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.855900][ T5914] usb 4-1: Product: Т [ 501.872624][ T5914] usb 4-1: Manufacturer: 痛뽕⣈ᡁ採ꮂ闻䶹❰㉋ [ 501.902104][ T5914] usb 4-1: SerialNumber: ࠙ [ 501.933713][T11923] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 502.007148][T11937] xt_socket: unknown flags 0x4 [ 502.485001][ T5914] usb 4-1: USB disconnect, device number 49 [ 502.568905][T11947] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1558'. [ 503.209610][ T24] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 503.485784][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 503.549321][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 503.549336][ T30] audit: type=1400 audit(1766301531.831:580): avc: denied { ioctl } for pid=11961 comm="syz.6.1561" path="socket:[31979]" dev="sockfs" ino=31979 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 503.678922][ T24] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 503.706549][ T24] usb 6-1: config 0 has no interface number 0 [ 503.714184][ T24] usb 6-1: config 0 interface 184 has no altsetting 0 [ 504.233364][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 504.254090][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.269010][ T24] usb 6-1: Product: syz [ 504.273380][ T24] usb 6-1: Manufacturer: syz [ 504.278686][ T24] usb 6-1: SerialNumber: syz [ 504.649444][T11982] set match dimension is over the limit! [ 504.734873][ T24] usb 6-1: config 0 descriptor?? [ 504.773123][ T24] smsc75xx v1.0.0 [ 505.390414][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 505.434018][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 506.386706][ T30] audit: type=1326 audit(1766301535.680:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 506.390086][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 506.505702][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 506.505722][ T5933] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 506.529204][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 506.538802][ T30] audit: type=1326 audit(1766301535.680:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 506.578178][ T24] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 506.597143][ T30] audit: type=1326 audit(1766301535.680:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 506.651125][ T30] audit: type=1326 audit(1766301535.680:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 506.705206][ T30] audit: type=1326 audit(1766301535.680:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 506.705790][ T5914] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 506.755205][ T30] audit: type=1326 audit(1766301535.680:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 506.755685][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 506.835215][ T5933] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 506.850348][ T30] audit: type=1326 audit(1766301535.680:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 506.873896][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.873920][ T5933] usb 2-1: Product: syz [ 506.873933][ T5933] usb 2-1: Manufacturer: syz [ 506.873946][ T5933] usb 2-1: SerialNumber: syz [ 506.876362][ T5933] usb 2-1: config 0 descriptor?? [ 506.991870][ T5914] usb 7-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 507.297473][ T5914] usb 7-1: config 1 interface 0 has no altsetting 0 [ 507.316716][ T30] audit: type=1326 audit(1766301535.680:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 507.327568][ T5914] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 507.835773][ T30] audit: type=1326 audit(1766301535.680:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.5.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ab78f749 code=0x7ffc0000 [ 507.888471][ T5933] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 507.906623][ T5915] usb 6-1: USB disconnect, device number 38 [ 507.945393][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.975759][ T5914] usb 7-1: Product: Т [ 507.979884][ T5914] usb 7-1: Manufacturer: 痛뽕⣈ᡁ採ꮂ闻䶹❰㉋ [ 508.011826][ T5914] usb 7-1: SerialNumber: ࠙ [ 508.034371][T12024] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 508.121614][ T5933] gspca_vc032x: reg_w err -71 [ 508.893501][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 508.919205][ T5914] usb 7-1: USB disconnect, device number 3 [ 508.926098][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 508.948643][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 508.953965][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 508.965724][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 508.978133][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 509.983514][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 509.989674][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 510.003768][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 510.014970][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 510.023480][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 510.029381][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 510.221701][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 510.227117][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 510.232900][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 510.238364][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 510.243647][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 510.248986][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 510.254268][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 510.259634][ T5933] gspca_vc032x: Unknown sensor... [ 510.264715][ T5933] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 510.279781][ T5933] usb 2-1: USB disconnect, device number 50 [ 510.352743][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 510.352756][ T30] audit: type=1326 audit(1766301539.640:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12067 comm="syz.4.1582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f784bb8f749 code=0x0 [ 510.457994][ T30] audit: type=1400 audit(1766301539.750:596): avc: denied { mounton } for pid=12067 comm="syz.4.1582" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 510.585730][ T5933] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 510.585787][ T5915] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 510.747399][ T5915] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 510.758370][ T5915] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.771658][ T5915] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 510.771767][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.792229][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.801452][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.815152][ T5933] usb 2-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 510.825966][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.859983][ T5933] usb 2-1: config 0 descriptor?? [ 511.022470][ T5915] usb 6-1: GET_CAPABILITIES returned 0 [ 511.034065][ T5915] usbtmc 6-1:16.0: can't read capabilities [ 511.063534][T12081] netlink: 'syz.3.1585': attribute type 2 has an invalid length. [ 511.231108][T12071] usb 6-1: usbtmc_ioctl_clear_out_halt returned -32 [ 511.600367][T12081] lo speed is unknown, defaulting to 1000 [ 511.713398][ T5922] usb 6-1: USB disconnect, device number 39 [ 511.766984][ T5933] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 512.311096][ T5933] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 512.318180][ T5933] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 512.325117][ T5933] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 512.335712][ T5933] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 512.348117][ T5933] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 512.356373][ T5933] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 512.364707][ T5933] waltop 0003:172F:0500.0002: hidraw0: USB HID v0.00 Device [HID 172f:0500] on usb-dummy_hcd.1-1/input0 [ 512.405997][T12063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.425301][T12063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.450660][T12063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.466851][T12063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.490122][ T5933] usb 2-1: USB disconnect, device number 51 [ 512.617679][T12098] ip6erspan0: entered promiscuous mode [ 512.663432][T12101] F2FS-fs: Conflicting test_dummy_encryption options [ 513.038578][ T5922] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 513.608711][ T5922] usb 7-1: Using ep0 maxpacket: 16 [ 513.632134][ T5922] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 513.640516][ T5922] usb 7-1: config 252 has no interface number 0 [ 513.647513][ T5922] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 513.675531][ T5922] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 513.685462][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.693851][ T5922] usb 7-1: Product: syz [ 513.731082][ T30] audit: type=1400 audit(1766301543.982:597): avc: denied { connect } for pid=12118 comm="syz.4.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 513.859908][ T5922] usb 7-1: Manufacturer: syz [ 513.877341][ T5922] usb 7-1: SerialNumber: syz [ 513.889172][ T30] audit: type=1400 audit(1766301543.992:598): avc: denied { write } for pid=12118 comm="syz.4.1594" path="socket:[32271]" dev="sockfs" ino=32271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 513.965714][ T5915] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 513.977575][ T5922] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 514.118901][ T5915] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 514.136165][ T5915] usb 2-1: config 0 has no interface number 1 [ 514.165772][ T5915] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 514.193934][ T5915] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 514.205900][ T5915] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 514.226102][ T5915] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 514.247123][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 514.584344][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 514.777259][ T5915] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 514.832405][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.189080][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1589'. [ 515.200999][ T5922] usb 7-1: USB disconnect, device number 4 [ 515.218246][ T13] usb 7-1: Failed to submit usb control message: -110 [ 515.228744][ T13] usb 7-1: unable to send the bmi data to the device: -110 [ 515.235814][ T5915] usb 2-1: Product: syz [ 515.236203][ T13] usb 7-1: unable to get target info from device [ 515.247181][ T13] usb 7-1: could not get target info (-110) [ 515.253376][ T13] usb 7-1: could not probe fw (-110) [ 515.351526][ T5915] usb 2-1: Manufacturer: syz [ 515.361498][ T5915] usb 2-1: SerialNumber: syz [ 515.480835][T12137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1597'. [ 515.895468][ T5915] usb 2-1: config 0 descriptor?? [ 515.906770][T12119] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 515.943918][ T5915] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 515.971282][ T5915] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 516.314910][ T5915] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 516.402505][ T5915] usb 2-1: USB disconnect, device number 52 [ 516.560888][T12148] tipc: Started in network mode [ 516.566106][T12148] tipc: Node identity ac1414aa, cluster identity 4711 [ 516.576897][T12148] tipc: Enabled bearer , priority 10 [ 516.878982][T10644] udevd[10644]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.196097][ T5914] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 517.517804][ T5914] usb 7-1: Using ep0 maxpacket: 8 [ 517.562413][ T5914] usb 7-1: config 0 has no interfaces? [ 517.573035][ T6093] tipc: Node number set to 2886997162 [ 517.583119][ T5914] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 517.593012][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.603415][ T5914] usb 7-1: Product: syz [ 517.607814][ T5914] usb 7-1: Manufacturer: syz [ 517.612407][ T5914] usb 7-1: SerialNumber: syz [ 517.646139][ T5914] usb 7-1: config 0 descriptor?? [ 518.012663][T12182] openvswitch: netlink: Tunnel attr 295 out of range max 16 [ 518.023765][ T5914] usb 7-1: USB disconnect, device number 5 [ 518.668274][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1608'. [ 518.953688][T12199] can0: slcan on ttyS3. [ 518.960223][ T5880] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 519.149756][ T5880] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 519.164286][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.173255][ T5880] usb 7-1: Product: syz [ 519.178620][T12203] can0 (unregistered): slcan off ttyS3. [ 519.183128][ T5880] usb 7-1: Manufacturer: syz [ 519.192964][ T5880] usb 7-1: SerialNumber: syz [ 519.621763][T12217] syzkaller0: entered promiscuous mode [ 519.672988][T12217] syzkaller0: entered allmulticast mode [ 519.883451][T12217] CUSE: info not properly terminated [ 520.783161][T12242] netlink: 'syz.4.1619': attribute type 2 has an invalid length. [ 521.163089][T12243] lo speed is unknown, defaulting to 1000 [ 521.375792][ T5915] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 521.391092][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'. [ 521.538869][ T5915] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 521.547310][ T5915] usb 4-1: config 0 has no interface number 1 [ 521.553476][ T5915] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 521.557267][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'. [ 521.578126][ T5915] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 521.591238][ T5915] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 521.605684][ T5915] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.621747][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 521.639682][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 521.657929][ T5915] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 521.667545][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.709093][ T5915] usb 4-1: Product: syz [ 521.716988][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1622'. [ 521.727296][ T5915] usb 4-1: Manufacturer: syz [ 521.733463][ T5915] usb 4-1: SerialNumber: syz [ 521.813004][ T5915] usb 4-1: config 0 descriptor?? [ 521.842977][T12241] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 521.854693][ T5915] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 521.872705][ T6093] IPVS: starting estimator thread 0... [ 521.889718][ T5915] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 521.965685][T12251] IPVS: using max 45 ests per chain, 108000 per kthread [ 522.234517][ T52] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 522.249834][ T5915] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 522.348892][ T5915] usb 4-1: USB disconnect, device number 50 [ 522.524062][ T5880] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 522.573000][T10644] udevd[10644]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.590977][ T5880] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 522.742077][ T5880] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 522.771126][ T5880] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 522.821111][ T5880] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 522.980084][ T5880] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 523.014785][ T5880] usb 7-1: USB disconnect, device number 6 [ 523.175252][T12261] lo speed is unknown, defaulting to 1000 [ 523.181121][ T5914] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 523.387075][ T5914] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 523.397192][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 523.410023][ T5914] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 523.424713][ T5880] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 523.435513][ T5914] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 523.446088][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.454459][ T5914] usb 4-1: Product: syz [ 523.461987][ T5914] usb 4-1: Manufacturer: syz [ 523.466846][ T5914] usb 4-1: SerialNumber: syz [ 523.474045][ T5914] usb 4-1: config 0 descriptor?? [ 523.973376][T12262] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 523.996775][T12262] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 524.008449][ T5914] usb 4-1: ucan: probing device on interface #0 [ 524.065750][ T5880] usb 7-1: Using ep0 maxpacket: 32 [ 524.076909][ T5880] usb 7-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 524.094439][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.112401][ T5880] usb 7-1: Product: syz [ 524.120805][ T5880] usb 7-1: Manufacturer: syz [ 524.130051][ T5880] usb 7-1: SerialNumber: syz [ 524.149814][ T5880] usb 7-1: config 0 descriptor?? [ 524.539547][ T5880] usb 7-1: selecting invalid altsetting 1 [ 524.576918][ T5880] snd-usb-caiaq 7-1:0.0: can't set alt interface. [ 524.596063][ T5880] usb 7-1: unable to init card! (ret=-5) [ 524.604070][ T5880] snd-usb-caiaq 7-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 524.615058][ T5914] usb 4-1: ucan: device protocol version 1949267045 is not supported [ 524.630743][ T5914] usb 4-1: ucan: probe failed; try to update the device firmware [ 525.436097][ T5914] usb 7-1: USB disconnect, device number 7 [ 525.506952][ T5922] usb 4-1: USB disconnect, device number 51 [ 525.667344][T12285] binder: 12284:12285 ioctl c0306201 200000000600 returned -14 [ 525.980509][T12292] FAULT_INJECTION: forcing a failure. [ 525.980509][T12292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.993746][T12292] CPU: 1 UID: 0 PID: 12292 Comm: syz.5.1635 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.993772][T12292] Tainted: [L]=SOFTLOCKUP [ 525.993779][T12292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 525.993788][T12292] Call Trace: [ 525.993793][T12292] [ 525.993799][T12292] dump_stack_lvl+0x16c/0x1f0 [ 525.993826][T12292] should_fail_ex+0x512/0x640 [ 525.993853][T12292] _copy_from_user+0x2e/0xd0 [ 525.993877][T12292] drm_ioctl+0x4fb/0xc30 [ 525.993903][T12292] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 525.993925][T12292] ? __pfx_drm_ioctl+0x10/0x10 [ 525.993945][T12292] ? rcu_is_watching+0x12/0xc0 [ 525.993971][T12292] ? selinux_file_ioctl+0x180/0x270 [ 525.993993][T12292] ? selinux_file_ioctl+0xb4/0x270 [ 525.994014][T12292] ? __pfx_drm_ioctl+0x10/0x10 [ 525.994037][T12292] __x64_sys_ioctl+0x18e/0x210 [ 525.994065][T12292] do_syscall_64+0xcd/0xf80 [ 525.994087][T12292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.994103][T12292] RIP: 0033:0x7f99ab78f749 [ 525.994116][T12292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.994131][T12292] RSP: 002b:00007f99ac64b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.994146][T12292] RAX: ffffffffffffffda RBX: 00007f99ab9e6180 RCX: 00007f99ab78f749 [ 525.994157][T12292] RDX: 0000200000000540 RSI: 00000000c05064a7 RDI: 0000000000000007 [ 525.994166][T12292] RBP: 00007f99ac64b090 R08: 0000000000000000 R09: 0000000000000000 [ 525.994175][T12292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.994184][T12292] R13: 00007f99ab9e6218 R14: 00007f99ab9e6180 R15: 00007ffebbdd0d08 [ 525.994207][T12292] [ 526.257655][ T52] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 526.266228][ T52] Bluetooth: hci3: Injecting HCI hardware error event [ 526.277209][ T52] Bluetooth: hci3: hardware error 0x00 [ 527.017610][ T30] audit: type=1400 audit(1766301557.292:599): avc: denied { connect } for pid=12300 comm="syz.3.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 527.093264][T12303] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12303 comm=syz.3.1637 [ 527.119129][ T30] audit: type=1107 audit(1766301557.392:600): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='FY7fTtkhI|Ωpy"FŠ1a}2' [ 527.183846][T12308] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 527.339149][ T30] audit: type=1400 audit(1766301557.622:601): avc: denied { write } for pid=12300 comm="syz.3.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 527.546507][ T5933] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 527.751642][ T30] audit: type=1400 audit(1766301557.662:602): avc: denied { setopt } for pid=12300 comm="syz.3.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 527.867033][ T30] audit: type=1400 audit(1766301557.662:603): avc: denied { setopt } for pid=12300 comm="syz.3.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 528.001871][ T5933] usb 7-1: not running at top speed; connect to a high speed hub [ 528.013988][ T5933] usb 7-1: config 5 has an invalid interface number: 148 but max is 0 [ 528.023438][ T5933] usb 7-1: config 5 has an invalid descriptor of length 161, skipping remainder of the config [ 528.041090][ T5933] usb 7-1: config 5 has no interface number 0 [ 528.047441][ T5933] usb 7-1: config 5 interface 148 altsetting 1 endpoint 0xC has invalid maxpacket 58091, setting to 64 [ 528.058740][ T5933] usb 7-1: config 5 interface 148 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.171778][ T5933] usb 7-1: config 5 interface 148 has no altsetting 0 [ 528.187111][ T5933] usb 7-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2 [ 528.199011][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.208070][T12317] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1642'. [ 528.254650][ T5933] usb 7-1: Product: syz [ 528.266239][ T5933] usb 7-1: Manufacturer: syz [ 528.275965][ T5933] usb 7-1: SerialNumber: syz [ 528.282323][ T30] audit: type=1400 audit(1766301558.562:604): avc: denied { map } for pid=12316 comm="syz.5.1642" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 528.329304][T12295] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 528.339806][ T52] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 528.363573][ T30] audit: type=1400 audit(1766301558.562:605): avc: denied { execute } for pid=12316 comm="syz.5.1642" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 528.540155][ T6010] smc: removing ib device syz2 [ 528.595708][ T5922] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 528.668644][ T5933] ipheth 7-1:5.148: Unable to find endpoints [ 528.688342][ T5933] usb 7-1: USB disconnect, device number 8 [ 528.784881][ T5922] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 528.813320][ T5922] usb 2-1: config 1 interface 0 has no altsetting 0 [ 528.859907][ T5922] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 528.893923][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.930833][ T5922] usb 2-1: Product: Т [ 528.944954][ T5922] usb 2-1: Manufacturer: 痛뽕⣈ᡁ採ꮂ闻䶹❰㉋ [ 528.971364][ T5922] usb 2-1: SerialNumber: ࠙ [ 529.039813][T12320] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 529.880406][ T5922] usb 2-1: USB disconnect, device number 53 [ 530.845680][T12341] fuse: Bad value for 'fd' [ 531.663433][T12344] fuse: Bad value for 'fd' [ 533.089171][T12358] macsec1: entered allmulticast mode [ 533.094602][T12358] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 534.513835][T12380] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1662'. [ 534.578814][T12382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1663'. [ 535.126342][ T6093] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 535.465845][ T30] audit: type=1400 audit(1766301565.752:606): avc: denied { bind } for pid=12396 comm="syz.1.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 536.051690][ T6093] usb 7-1: Using ep0 maxpacket: 8 [ 536.063680][ T6093] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 536.081948][ T6093] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.265459][ T6093] usb 7-1: Product: syz [ 536.270245][ T6093] usb 7-1: Manufacturer: syz [ 536.274839][ T6093] usb 7-1: SerialNumber: syz [ 536.302839][ T6093] usb 7-1: config 0 descriptor?? [ 536.429418][ T6093] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 536.985964][ T6093] gspca_sonixj: reg_w1 err -110 [ 536.990891][ T6093] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 537.209042][T12412] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1671'. [ 538.478780][ T6093] usb 7-1: USB disconnect, device number 9 [ 539.766021][ T5922] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 539.995977][ T5922] usb 7-1: Using ep0 maxpacket: 8 [ 540.006629][ T5922] usb 7-1: config 0 has an invalid interface number: 189 but max is 0 [ 540.024159][ T5922] usb 7-1: config 0 has no interface number 0 [ 540.036989][ T5922] usb 7-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=62.1b [ 540.051217][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.064793][ T5922] usb 7-1: Product: syz [ 540.069289][ T5922] usb 7-1: Manufacturer: syz [ 540.074015][ T5922] usb 7-1: SerialNumber: syz [ 540.081841][ T5922] usb 7-1: config 0 descriptor?? [ 540.170765][ T5922] usb 7-1: invalid MIDI EP [ 540.199742][ T5922] usb 7-1: snd-bcd2000: error during probing [ 540.266321][ T5922] snd-bcd2000 7-1:0.189: probe with driver snd-bcd2000 failed with error -22 [ 540.493906][ T5922] usb 7-1: USB disconnect, device number 10 [ 541.085400][T12465] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 541.106078][T12465] FAULT_INJECTION: forcing a failure. [ 541.106078][T12465] name failslab, interval 1, probability 0, space 0, times 0 [ 541.119797][T12465] CPU: 0 UID: 0 PID: 12465 Comm: syz.1.1688 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.119823][T12465] Tainted: [L]=SOFTLOCKUP [ 541.119829][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.119838][T12465] Call Trace: [ 541.119844][T12465] [ 541.119851][T12465] dump_stack_lvl+0x16c/0x1f0 [ 541.119876][T12465] should_fail_ex+0x512/0x640 [ 541.119899][T12465] ? fs_reclaim_acquire+0xae/0x150 [ 541.119924][T12465] should_failslab+0xc2/0x120 [ 541.119945][T12465] __kmalloc_noprof+0xeb/0x910 [ 541.119970][T12465] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 541.119998][T12465] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 541.120019][T12465] tomoyo_realpath_from_path+0xc2/0x6e0 [ 541.120043][T12465] ? tomoyo_profile+0x47/0x60 [ 541.120070][T12465] tomoyo_path_number_perm+0x245/0x580 [ 541.120088][T12465] ? tomoyo_path_number_perm+0x237/0x580 [ 541.120108][T12465] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 541.120154][T12465] ? hook_file_ioctl_common+0x144/0x410 [ 541.120184][T12465] ? __x64_sys_ioctl+0x94/0x210 [ 541.120202][T12465] ? security_file_ioctl+0x18/0x240 [ 541.120226][T12465] security_file_ioctl+0x9b/0x240 [ 541.120248][T12465] __x64_sys_ioctl+0xb7/0x210 [ 541.120268][T12465] do_syscall_64+0xcd/0xf80 [ 541.120291][T12465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.120307][T12465] RIP: 0033:0x7f3f79f8f749 [ 541.120321][T12465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.120336][T12465] RSP: 002b:00007f3f7ad97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 541.120352][T12465] RAX: ffffffffffffffda RBX: 00007f3f7a1e6090 RCX: 00007f3f79f8f749 [ 541.120362][T12465] RDX: 0000200000000040 RSI: 0000000040046109 RDI: 0000000000000003 [ 541.120371][T12465] RBP: 00007f3f7ad97090 R08: 0000000000000000 R09: 0000000000000000 [ 541.120380][T12465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.120389][T12465] R13: 00007f3f7a1e6128 R14: 00007f3f7a1e6090 R15: 00007fffc91e4328 [ 541.120413][T12465] [ 541.120536][T12465] ERROR: Out of memory at tomoyo_realpath_from_path. [ 541.299310][T12471] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1691'. [ 541.513268][ T6093] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 541.628785][T12475] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 541.755941][ T6093] usb 4-1: Using ep0 maxpacket: 8 [ 541.815171][ T6093] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 541.835708][ T6093] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.849468][T12471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 541.857091][T12471] IPv6: NLM_F_CREATE should be set when creating new route [ 541.877938][ T6093] usb 4-1: Product: syz [ 541.882116][ T6093] usb 4-1: Manufacturer: syz [ 541.896156][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1691'. [ 541.899200][ T6093] usb 4-1: SerialNumber: syz [ 541.923760][ T6093] usb 4-1: config 0 descriptor?? [ 541.932224][ T6093] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 542.185928][ T5922] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 542.365718][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 542.386939][ T5922] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 542.518112][T12491] netlink: 'syz.4.1699': attribute type 12 has an invalid length. [ 542.534773][ T5922] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 542.544488][ T5922] usb 2-1: config 1 has no interface number 1 [ 542.583386][ T5922] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 542.604880][ T5922] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.621670][ T5922] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 542.635174][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.647401][ T5922] usb 2-1: Product: syz [ 542.652282][ T5922] usb 2-1: Manufacturer: syz [ 542.659160][ T5922] usb 2-1: SerialNumber: syz [ 542.665807][ T5914] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 543.658195][ T6093] gspca_sonixj: reg_r err -110 [ 543.663280][ T6093] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 543.775388][T12499] fuse: Bad value for 'fd' [ 543.868139][ T5914] usb 7-1: device descriptor read/64, error -71 [ 544.375786][ T5914] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 544.522891][T12519] fuse: Bad value for 'fd' [ 544.535789][ T5914] usb 7-1: device descriptor read/64, error -71 [ 544.575720][ T6093] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 544.641932][ T5922] usb 2-1: 2:1: invalid format type 0x1000 is detected, processed as PCM [ 544.661832][ T5914] usb usb7-port1: attempt power cycle [ 544.668822][ T5922] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 544.687198][ T5922] usb 2-1: USB disconnect, device number 54 [ 544.723860][ T5880] usb 4-1: USB disconnect, device number 52 [ 544.765427][ T6093] usb 6-1: config 0 interface 0 has no altsetting 0 [ 544.795382][ T6093] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 544.826096][ T6093] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.846935][ T6093] usb 6-1: config 0 descriptor?? [ 545.005824][ T5914] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 545.037558][ T5914] usb 7-1: device descriptor read/8, error -71 [ 545.297132][ T5914] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 545.340662][ T5914] usb 7-1: device descriptor read/8, error -71 [ 545.486547][ T5914] usb usb7-port1: unable to enumerate USB device [ 545.706767][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1708'. [ 545.817240][T12534] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1709'. [ 546.325565][T12542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.541468][ T6093] video4linux radio48: keene_cmd_set failed (-110) [ 546.549047][ T6093] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 546.709069][ T5914] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 547.295225][T12553] lo speed is unknown, defaulting to 1000 [ 547.301331][ T5914] usb 7-1: Using ep0 maxpacket: 8 [ 547.307282][ T5914] usb 7-1: too many configurations: 231, using maximum allowed: 8 [ 547.316362][ T5914] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 547.323905][ T5914] usb 7-1: can't read configurations, error -61 [ 547.505785][ T5914] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 547.736575][T12557] evm: overlay not supported [ 547.796089][T12558] input: syz0 as /devices/virtual/input/input60 [ 548.107110][ T30] audit: type=1400 audit(1766301578.022:607): avc: denied { watch } for pid=12556 comm="syz.1.1717" path="/323/bus/file1" dev="overlay" ino=1706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 548.155757][ T6093] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 548.206344][ T5914] usb 7-1: Using ep0 maxpacket: 8 [ 548.212424][ T5914] usb 7-1: too many configurations: 231, using maximum allowed: 8 [ 548.237727][ T5914] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 548.245394][ T5914] usb 7-1: can't read configurations, error -61 [ 548.254969][ T5914] usb usb7-port1: attempt power cycle [ 548.315849][ T6093] usb 4-1: Using ep0 maxpacket: 8 [ 548.324500][ T6093] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 548.343373][ T6093] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.358385][ T6093] usb 4-1: Product: syz [ 548.364133][ T6093] usb 4-1: Manufacturer: syz [ 548.370607][ T30] audit: type=1400 audit(1766301578.662:608): avc: denied { create } for pid=12552 comm="syz.4.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 548.419096][ T6093] usb 4-1: SerialNumber: syz [ 548.430853][ T30] audit: type=1400 audit(1766301578.682:609): avc: denied { sys_admin } for pid=12552 comm="syz.4.1716" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 548.454390][ T6093] usb 4-1: config 0 descriptor?? [ 548.489058][ T6093] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 548.516313][ T30] audit: type=1400 audit(1766301578.682:610): avc: denied { getopt } for pid=12552 comm="syz.4.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 548.565889][ T30] audit: type=1400 audit(1766301578.692:611): avc: denied { getopt } for pid=12552 comm="syz.4.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 548.627177][ T5914] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 548.656745][ T5914] usb 7-1: Using ep0 maxpacket: 8 [ 548.662492][ T5914] usb 7-1: too many configurations: 231, using maximum allowed: 8 [ 548.672606][ T5914] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 548.680526][ T5914] usb 7-1: can't read configurations, error -61 [ 548.745961][ T5880] usb 6-1: USB disconnect, device number 40 [ 548.827370][ T5914] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 549.086569][ T5914] usb 7-1: device not accepting address 18, error -71 [ 549.113510][T12583] netlink: 'syz.6.1724': attribute type 10 has an invalid length. [ 549.127502][T12583] team0: Device ipvlan1 failed to register rx_handler [ 549.152294][ T5914] usb usb7-port1: unable to enumerate USB device [ 549.334324][ T6093] gspca_sonixj: reg_r err -32 [ 549.370430][ T6093] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 550.047765][T12591] block device autoloading is deprecated and will be removed. [ 550.432944][ T5880] usb 4-1: USB disconnect, device number 53 [ 550.534414][T12597] openvswitch: netlink: Key type 12308 is out of range max 32 [ 551.125730][ T5914] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 551.366165][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 551.373290][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 551.382951][ T5914] usb 4-1: config 9 has an invalid interface number: 28 but max is 0 [ 551.391525][ T5914] usb 4-1: config 9 has no interface number 0 [ 551.398261][ T5914] usb 4-1: config 9 interface 28 has no altsetting 0 [ 551.408849][ T5914] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=2b.61 [ 551.421311][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.532685][ T5914] usb 4-1: Product: syz [ 551.543449][ T5914] usb 4-1: Manufacturer: syz [ 551.553781][ T5914] usb 4-1: SerialNumber: syz [ 552.051098][ T5914] cypress_cy7c63 4-1:9.28: Cypress CY7C63xxx device now attached [ 552.085710][ T5914] usb 4-1: USB disconnect, device number 54 [ 552.119419][ T5914] cypress_cy7c63 4-1:9.28: Cypress CY7C63xxx device now disconnected [ 552.775677][ T5914] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 552.795721][ T6093] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 553.145684][ T6093] usb 2-1: Using ep0 maxpacket: 32 [ 553.150862][ T5914] usb 7-1: Using ep0 maxpacket: 8 [ 553.159564][ T5914] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 553.172890][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.201390][ T6093] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 553.223330][ T6093] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 553.238269][ T5914] usb 7-1: Product: syz [ 553.335796][ T5914] usb 7-1: Manufacturer: syz [ 553.340527][ T5914] usb 7-1: SerialNumber: syz [ 553.349808][ T5914] usb 7-1: config 0 descriptor?? [ 553.361304][ T6093] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 553.372859][ T6093] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 553.387339][ T5914] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 553.450250][ T6093] usb 2-1: config 0 interface 0 has no altsetting 0 [ 553.726920][ T6093] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 553.751615][ T6093] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 553.771313][ T6093] usb 2-1: Product: syz [ 553.781764][ T6093] usb 2-1: Manufacturer: syz [ 553.791082][ T6093] usb 2-1: SerialNumber: syz [ 553.806223][ T6093] usb 2-1: config 0 descriptor?? [ 553.819364][ T6093] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 553.832964][ T6093] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 554.196989][ T30] audit: type=1400 audit(1766301584.472:612): avc: denied { read } for pid=12641 comm="syz.4.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 554.267708][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 554.273981][ T6093] usb 2-1: USB disconnect, device number 55 [ 554.286008][T12631] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 554.338517][ T6093] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 554.468293][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 554.468686][ T5914] gspca_sonixj: reg_r err -32 [ 554.484578][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 554.489843][ T5914] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 554.577392][T12649] ceph: No mds server is up or the cluster is laggy [ 554.603258][ T30] audit: type=1400 audit(1766301584.862:613): avc: denied { mounton } for pid=12648 comm="syz.5.1744" path="/175/file0" dev="tmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 554.812565][ T7079] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 554.860899][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1746'. [ 554.989091][ T7079] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 555.010963][ T7079] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 555.038811][ T7079] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 555.084824][ T7079] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 555.105865][ T7079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.137114][ T7079] usb 4-1: Product: syz [ 555.142618][ T7079] usb 4-1: Manufacturer: syz [ 555.161141][ T7079] usb 4-1: SerialNumber: syz [ 555.171271][T12664] netlink: 'syz.1.1748': attribute type 1 has an invalid length. [ 555.187908][T12664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1748'. [ 555.211828][T12668] set match dimension is over the limit! [ 555.230699][ T7079] usb 4-1: config 0 descriptor?? [ 555.248803][T12653] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 555.268745][T12653] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 555.293554][ T7079] usb 4-1: ucan: probing device on interface #0 [ 555.549696][ T6093] usb 7-1: USB disconnect, device number 19 [ 555.619455][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1752'. [ 555.649126][T12677] syz_tun: entered allmulticast mode [ 556.009991][ T7079] ucan 4-1:0.0 can0: registered device [ 556.515775][T12687] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 556.599703][ T7079] ucan 4-1:0.0 can0: firmware string: unknown [ 556.633766][ T7079] usb 4-1: USB disconnect, device number 55 [ 557.064965][ T30] audit: type=1400 audit(1766301587.342:614): avc: denied { create } for pid=12693 comm="syz.1.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 557.110791][ T30] audit: type=1400 audit(1766301587.392:615): avc: denied { read } for pid=12693 comm="syz.1.1757" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 557.160306][ T30] audit: type=1400 audit(1766301587.422:616): avc: denied { open } for pid=12693 comm="syz.1.1757" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 557.185113][T12680] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 557.405894][ T30] audit: type=1400 audit(1766301587.452:617): avc: denied { setopt } for pid=12693 comm="syz.1.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 557.853967][ T30] audit: type=1800 audit(1766301587.502:618): pid=12703 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1758" name="nullb0" dev="tmpfs" ino=1139 res=0 errno=0 [ 557.904089][ T30] audit: type=1800 audit(1766301587.502:619): pid=12703 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1758" name="nullb0" dev="tmpfs" ino=1139 res=0 errno=0 [ 557.950858][ T30] audit: type=1400 audit(1766301587.772:620): avc: denied { mount } for pid=12704 comm="syz.6.1759" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 557.984591][T12695] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 557.990724][T12695] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 558.187941][T12720] lo speed is unknown, defaulting to 1000 [ 558.199630][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1762'. [ 558.445886][ T5922] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 558.698372][ T5922] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 558.720241][ T5922] usb 4-1: config 0 has no interface number 0 [ 558.735849][ T5922] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 559.232219][ T5922] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 559.246670][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.255087][ T5922] usb 4-1: Product: syz [ 559.259497][ T5922] usb 4-1: Manufacturer: syz [ 559.264336][ T5922] usb 4-1: SerialNumber: syz [ 559.278033][ T5922] usb 4-1: config 0 descriptor?? [ 559.290214][ T5922] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 559.376469][T12740] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 559.502824][ C1] yurex 4-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 560.241000][ T6093] usb 4-1: USB disconnect, device number 56 [ 560.267821][ T6093] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 561.623931][ T30] audit: type=1400 audit(1766301591.902:621): avc: denied { module_load } for pid=12777 comm="syz.3.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 562.416952][ T6093] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 562.429311][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.436801][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.670605][ T6093] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 562.679584][ T6093] usb 6-1: config 0 has no interface number 1 [ 562.706805][ T6093] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 562.748532][T12793] Bluetooth: MGMT ver 1.23 [ 563.081292][ T6093] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 563.093607][ T6093] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 563.105551][ T6093] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.122458][ T6093] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 563.137788][ T6093] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 563.165353][ T6093] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 563.185507][ T6093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.208240][ T6093] usb 6-1: Product: syz [ 563.222786][ T6093] usb 6-1: Manufacturer: syz [ 563.243855][ T6093] usb 6-1: SerialNumber: syz [ 563.261500][ T6093] usb 6-1: config 0 descriptor?? [ 563.284597][T12789] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 563.305369][ T6093] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 563.321681][ T6093] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 563.513852][ T6093] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 563.589937][ T6093] usb 6-1: USB disconnect, device number 41 [ 563.676599][T10640] udevd[10640]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.828567][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1787'. [ 565.510600][T12842] netlink: 'syz.5.1792': attribute type 2 has an invalid length. [ 565.624057][T12843] lo speed is unknown, defaulting to 1000 [ 565.666019][ T6486] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 566.075791][ T7079] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 566.374167][ T6486] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 566.391539][ T6486] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 566.403519][ T6486] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 566.435675][ T7079] usb 2-1: Using ep0 maxpacket: 32 [ 566.437061][ T6486] usb 7-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 566.465674][ T6486] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.473683][ T6486] usb 7-1: Product: syz [ 566.477879][ T6486] usb 7-1: Manufacturer: syz [ 566.495575][ T6486] usb 7-1: SerialNumber: syz [ 566.537364][ T7079] usb 2-1: config 7 has an invalid interface number: 116 but max is 0 [ 566.538551][ T6486] usb 7-1: config 0 descriptor?? [ 566.545875][ T7079] usb 2-1: config 7 has no interface number 0 [ 566.596671][ T7079] usb 2-1: config 7 interface 116 has no altsetting 0 [ 566.604138][ T6486] kvaser_usb 7-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 566.606630][ T7079] usb 2-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=f1.1a [ 566.715778][ T7079] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.723877][ T7079] usb 2-1: Product: syz [ 566.828343][ T30] audit: type=1800 audit(1766301597.092:622): pid=12839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1793" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 566.852998][ T7079] usb 2-1: Manufacturer: syz [ 566.858893][ T7079] usb 2-1: SerialNumber: syz [ 566.888992][ T6486] usb 7-1: USB disconnect, device number 20 [ 567.106068][T12846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.416754][T12846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.433163][ T7079] asix 2-1:7.116: probe with driver asix failed with error -22 [ 567.450993][ T7079] usb 2-1: USB disconnect, device number 56 [ 568.827250][ T30] audit: type=1400 audit(1766301599.112:623): avc: denied { watch watch_reads } for pid=12875 comm="syz.3.1804" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 568.876233][ T6093] IPVS: starting estimator thread 0... [ 569.055916][T12878] IPVS: using max 44 ests per chain, 105600 per kthread [ 570.085471][ T5915] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 570.266219][ T30] audit: type=1400 audit(1766301600.532:624): avc: denied { listen } for pid=12887 comm="syz.1.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 570.285665][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 570.292116][ T5915] usb 6-1: config 0 interface 0 altsetting 160 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 570.328448][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0 [ 570.349365][ T5915] usb 6-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 570.386352][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.630638][ T5915] usb 6-1: config 0 descriptor?? [ 571.075680][ T6093] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 571.089382][T12906] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1806'. [ 571.098941][T12880] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1806'. [ 571.225732][ T6093] usb 4-1: device descriptor read/64, error -71 [ 571.274956][T12908] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1813'. [ 571.489099][ T6093] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 571.635910][ T6093] usb 4-1: device descriptor read/64, error -71 [ 571.720230][ T5915] usbhid 6-1:0.0: can't add hid device: -71 [ 571.730784][ T5915] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 571.746759][ T6093] usb usb4-port1: attempt power cycle [ 571.748411][ T5915] usb 6-1: USB disconnect, device number 42 [ 571.771512][T12910] xt_l2tp: unknown flags: 17 [ 572.516322][ T5880] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 572.778381][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 572.944215][ T5880] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 572.989051][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.057835][ T5880] usb 2-1: Product: syz [ 573.093908][ T5880] usb 2-1: Manufacturer: syz [ 573.136062][ T5880] usb 2-1: SerialNumber: syz [ 573.275698][ T5880] usb 2-1: config 0 descriptor?? [ 573.833854][T12912] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.885546][ T30] audit: type=1400 audit(1766301605.073:625): avc: denied { append } for pid=12911 comm="syz.1.1815" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 573.947370][ T30] audit: type=1400 audit(1766301605.093:626): avc: denied { write } for pid=12911 comm="syz.1.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 573.970188][ T5880] em28xx 2-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 573.985804][ T5880] em28xx 2-1:0.0: Device initialization failed. [ 573.992676][ T5880] em28xx 2-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 574.036549][ T5880] usb 2-1: USB disconnect, device number 57 [ 574.238902][T12949] bridge2: entered allmulticast mode [ 574.926851][ T30] audit: type=1400 audit(1766301606.203:627): avc: denied { bind } for pid=12955 comm="syz.1.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 576.235975][ T5915] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 576.372682][ T5915] usb 6-1: device descriptor read/64, error -71 [ 576.795675][ T5915] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 576.956907][ T5915] usb 6-1: device descriptor read/64, error -71 [ 577.096933][ T5915] usb usb6-port1: attempt power cycle [ 577.469896][ T5915] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 577.491242][ T30] audit: type=1400 audit(1766301608.773:628): avc: denied { map } for pid=12992 comm="syz.1.1834" path="socket:[35358]" dev="sockfs" ino=35358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 577.524727][ T5915] usb 6-1: device descriptor read/8, error -71 [ 577.561015][ T30] audit: type=1400 audit(1766301608.803:629): avc: denied { read } for pid=12992 comm="syz.1.1834" path="socket:[35358]" dev="sockfs" ino=35358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 577.790139][T13005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1835'. [ 577.805995][ T5915] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 577.852134][ T5915] usb 6-1: device descriptor read/8, error -71 [ 578.336322][ T5915] usb usb6-port1: unable to enumerate USB device [ 578.845688][ T6486] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 579.156775][ T6486] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 579.183031][ T6486] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.240287][ T6486] usb 2-1: Product: syz [ 579.254616][ T6486] usb 2-1: Manufacturer: syz [ 579.279803][ T6486] usb 2-1: SerialNumber: syz [ 579.378422][ T6486] usb 2-1: config 0 descriptor?? [ 579.387548][ T6486] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 579.805750][ T5915] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 579.916876][ T6486] gspca_stk1135: reg_w 0x2 err -110 [ 579.923129][ T6486] gspca_stk1135: serial bus timeout: status=0x00 [ 579.955658][ T6486] gspca_stk1135: Sensor write failed [ 579.960994][ T6486] gspca_stk1135: serial bus timeout: status=0x00 [ 580.100598][ T6486] gspca_stk1135: Sensor write failed [ 580.457077][ T6486] gspca_stk1135: serial bus timeout: status=0x00 [ 580.472498][ T6486] gspca_stk1135: Sensor read failed [ 580.493170][ T6486] gspca_stk1135: serial bus timeout: status=0x00 [ 580.915952][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 580.922799][ T6486] gspca_stk1135: Sensor read failed [ 580.976535][ T5915] usb 4-1: no configurations [ 580.979652][T13041] tmpfs: Bad value for 'mpol' [ 580.981469][ T5915] usb 4-1: can't read configurations, error -22 [ 581.013169][ T6486] gspca_stk1135: Detected sensor type unknown (0x0) [ 581.049666][ T6486] gspca_stk1135: serial bus timeout: status=0x00 [ 581.074485][ T6486] gspca_stk1135: Sensor read failed [ 581.112675][ T6486] gspca_stk1135: serial bus timeout: status=0x00 [ 581.133858][ T5915] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 581.151948][ T6486] gspca_stk1135: Sensor read failed [ 581.204707][ T6486] gspca_stk1135: serial bus timeout: status=0x00 [ 581.243346][ T6486] gspca_stk1135: Sensor write failed [ 581.273583][ T6486] gspca_stk1135: serial bus timeout: status=0x00 [ 581.308319][ T6486] gspca_stk1135: Sensor write failed [ 581.316568][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 581.327340][ T6486] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 581.354468][ T5915] usb 4-1: no configurations [ 581.364581][ T5915] usb 4-1: can't read configurations, error -22 [ 581.378696][ T5915] usb usb4-port1: attempt power cycle [ 581.725737][ T30] audit: type=1400 audit(1766301613.876:630): avc: denied { setopt } for pid=13056 comm="syz.1.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 581.763491][ T6486] usb 2-1: USB disconnect, device number 58 [ 581.941669][ T5915] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 582.016438][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 582.027789][ T5915] usb 4-1: no configurations [ 582.077087][ T5915] usb 4-1: can't read configurations, error -22 [ 582.162843][ T30] audit: type=1400 audit(1766301613.876:631): avc: denied { read } for pid=13056 comm="syz.1.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 582.245702][T13074] lo speed is unknown, defaulting to 1000 [ 582.335995][ T5915] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 582.454191][T13082] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1850'. [ 582.465880][T13082] kAFS: unable to lookup cell '({^@' [ 582.634786][ T5915] usb 4-1: device not accepting address 63, error -71 [ 582.652802][ T5915] usb usb4-port1: unable to enumerate USB device [ 583.948581][T13110] netlink: 'syz.5.1855': attribute type 10 has an invalid length. [ 583.982019][T13110] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 584.383426][T13074] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 584.982118][T13134] wg1: entered promiscuous mode [ 584.987103][T13134] wg1: entered allmulticast mode [ 585.556853][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1859'. [ 586.892239][ T30] audit: type=1400 audit(1766301618.686:632): avc: denied { write } for pid=13155 comm="syz.5.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 587.105383][T13170] ALSA: mixer_oss: invalid OSS volume 'u' [ 587.429935][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1866'. [ 588.011619][ T30] audit: type=1400 audit(1766301620.296:633): avc: denied { ioctl } for pid=13188 comm="syz.1.1872" path="socket:[35605]" dev="sockfs" ino=35605 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 588.313721][T13192] tipc: Enabling of bearer rejected, failed to enable media [ 589.960174][T13228] 9p: Bad value for 'port' [ 589.966472][T13223] netlink: 'syz.5.1876': attribute type 2 has an invalid length. [ 590.041305][T13234] FAULT_INJECTION: forcing a failure. [ 590.041305][T13234] name failslab, interval 1, probability 0, space 0, times 0 [ 590.054044][T13234] CPU: 0 UID: 0 PID: 13234 Comm: syz.3.1879 Tainted: G L syzkaller #0 PREEMPT(full) [ 590.054069][T13234] Tainted: [L]=SOFTLOCKUP [ 590.054074][T13234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 590.054083][T13234] Call Trace: [ 590.054090][T13234] [ 590.054096][T13234] dump_stack_lvl+0x16c/0x1f0 [ 590.054123][T13234] should_fail_ex+0x512/0x640 [ 590.054146][T13234] ? __kmalloc_noprof+0xca/0x910 [ 590.054173][T13234] should_failslab+0xc2/0x120 [ 590.054195][T13234] __kmalloc_noprof+0xeb/0x910 [ 590.054218][T13234] ? find_held_lock+0x2b/0x80 [ 590.054241][T13234] ? rds_message_alloc+0x42/0x230 [ 590.054267][T13234] ? rds_message_alloc+0x42/0x230 [ 590.054286][T13234] rds_message_alloc+0x42/0x230 [ 590.054306][T13234] rds_sendmsg+0xb54/0x31f0 [ 590.054328][T13234] ? __pfx_avc_has_perm+0x10/0x10 [ 590.054365][T13234] ? __pfx_rds_sendmsg+0x10/0x10 [ 590.054391][T13234] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 590.054429][T13234] ? ____sys_sendmsg+0xa5d/0xc30 [ 590.054451][T13234] ____sys_sendmsg+0xa5d/0xc30 [ 590.054473][T13234] ? copy_msghdr_from_user+0x10a/0x160 [ 590.054490][T13234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 590.054523][T13234] ? __lock_acquire+0x436/0x2890 [ 590.054544][T13234] ___sys_sendmsg+0x134/0x1d0 [ 590.054563][T13234] ? __pfx____sys_sendmsg+0x10/0x10 [ 590.054580][T13234] ? lock_acquire+0x179/0x330 [ 590.054626][T13234] __sys_sendmsg+0x16d/0x220 [ 590.054643][T13234] ? __pfx___sys_sendmsg+0x10/0x10 [ 590.054658][T13234] ? __pfx___schedule+0x10/0x10 [ 590.054684][T13234] ? rcu_is_watching+0x12/0xc0 [ 590.054707][T13234] do_syscall_64+0xcd/0xf80 [ 590.054729][T13234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.054746][T13234] RIP: 0033:0x7fc1e738f749 [ 590.054759][T13234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.054775][T13234] RSP: 002b:00007fc1e81d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.054791][T13234] RAX: ffffffffffffffda RBX: 00007fc1e75e6180 RCX: 00007fc1e738f749 [ 590.054802][T13234] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 590.054812][T13234] RBP: 00007fc1e81d1090 R08: 0000000000000000 R09: 0000000000000000 [ 590.054821][T13234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.054830][T13234] R13: 00007fc1e75e6218 R14: 00007fc1e75e6180 R15: 00007ffe409d9e58 [ 590.054854][T13234] [ 591.056630][ T30] audit: type=1400 audit(1766301623.336:634): avc: denied { ioctl } for pid=13245 comm="syz.6.1885" path="socket:[35731]" dev="sockfs" ino=35731 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 591.096442][T13239] lo speed is unknown, defaulting to 1000 [ 591.744542][ T30] audit: type=1400 audit(1766301624.026:635): avc: denied { listen } for pid=13265 comm="syz.1.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 592.739940][T13296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=13296 comm=syz.3.1899 [ 595.092404][ T30] audit: type=1400 audit(1766301627.376:636): avc: denied { shutdown } for pid=13319 comm="syz.4.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 595.996987][T13336] netlink: 'syz.1.1909': attribute type 1 has an invalid length. [ 596.322671][T13336] 8021q: adding VLAN 0 to HW filter on device bond2 [ 596.487671][T13343] bond2: (slave veth5): Enslaving as an active interface with a down link [ 596.706702][ T30] audit: type=1400 audit(1766301628.996:637): avc: denied { append } for pid=13354 comm="syz.6.1913" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 596.852011][T13359] netlink: 'syz.6.1913': attribute type 4 has an invalid length. [ 597.063181][T13362] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 597.073015][T13362] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 597.083533][T13362] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 597.093243][T13362] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 597.103312][T13362] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 597.112976][T13362] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 597.122954][T13362] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 597.133024][T13362] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 597.142861][T13362] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 597.183997][T13345] bond2: (slave veth0_to_bond): making interface the new active one [ 597.199022][T13345] veth0_to_bond: entered promiscuous mode [ 597.217987][T13345] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 597.699810][T13374] netlink: 'syz.4.1915': attribute type 2 has an invalid length. [ 597.795187][T13374] lo speed is unknown, defaulting to 1000 [ 597.996477][ T5914] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 598.325848][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 598.332866][ T5914] usb 6-1: unable to get BOS descriptor or descriptor too short [ 598.350303][ T5914] usb 6-1: config 106 has an invalid interface number: 8 but max is 0 [ 598.359064][ T5914] usb 6-1: config 106 has no interface number 0 [ 598.365299][ T5914] usb 6-1: config 106 interface 8 has no altsetting 0 [ 598.378974][ T5914] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 598.396050][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.406706][ T30] audit: type=1400 audit(1766301630.696:638): avc: denied { getopt } for pid=13384 comm="syz.6.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 598.429468][ T5914] usb 6-1: Product: syz [ 598.438472][ T5914] usb 6-1: Manufacturer: syz [ 598.447425][ T5914] usb 6-1: SerialNumber: syz [ 598.457993][T13388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1920'. [ 599.022798][T13370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.053390][T13370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.633761][ T5914] kalmia 6-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 599.647986][ T5914] kalmia 6-1:106.8: probe with driver kalmia failed with error -22 [ 599.668856][ T5914] usb 6-1: USB disconnect, device number 47 [ 623.867470][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.869543][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.873770][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 705.385567][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 705.392532][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13408/2:b..l [ 705.400962][ C0] rcu: (detected by 0, t=10502 jiffies, g=55361, q=449 ncpus=2) [ 705.408663][ C0] task:syz.1.1925 state:R running task stack:26392 pid:13408 tgid:13406 ppid:5811 task_flags:0x400140 flags:0x00080001 [ 705.422687][ C0] Call Trace: [ 705.425965][ C0] [ 705.428889][ C0] ? __schedule+0x10b9/0x6150 [ 705.433560][ C0] __schedule+0x1139/0x6150 [ 705.438069][ C0] ? __pfx___schedule+0x10/0x10 [ 705.442914][ C0] ? mark_held_locks+0x49/0x80 [ 705.447669][ C0] preempt_schedule_irq+0x51/0x90 [ 705.452684][ C0] irqentry_exit+0x1d8/0x8c0 [ 705.457268][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 705.463235][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 705.468421][ C0] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 72 b8 ee 0e 0f 82 74 02 00 00 8b 35 0a e9 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 705.488012][ C0] RSP: 0018:ffffc9000216f438 EFLAGS: 00000206 [ 705.494063][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c9620 RCX: 00000000b8ec8623 [ 705.502020][ C0] RDX: 0000000000000000 RSI: ffffffff8daa79d4 RDI: ffffffff8bf2b380 [ 705.509975][ C0] RBP: 0000000000000002 R08: 0000000035e43d3a R09: 00000000a35e43d3 [ 705.517933][ C0] R10: 0000000000000002 R11: ffff8880216b54b0 R12: 0000000000000000 [ 705.525890][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 705.533868][ C0] ? get_mem_cgroup_from_mm+0x88/0x600 [ 705.539314][ C0] get_mem_cgroup_from_mm+0x287/0x600 [ 705.544670][ C0] ? get_mem_cgroup_from_mm+0x88/0x600 [ 705.550117][ C0] __mem_cgroup_charge+0x1a/0x1e0 [ 705.555136][ C0] shmem_alloc_and_add_folio+0x50c/0xc20 [ 705.560774][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 705.566923][ C0] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 705.572816][ C0] shmem_get_folio_gfp+0x67f/0x1610 [ 705.578019][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 705.583645][ C0] ? filemap_map_pages+0x12dd/0x1e00 [ 705.588922][ C0] shmem_fault+0x1fe/0xa00 [ 705.593334][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 705.598273][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 705.603726][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 705.609170][ C0] __do_fault+0x10d/0x490 [ 705.613491][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 705.618935][ C0] do_fault+0xae4/0x1ad0 [ 705.623167][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 705.628616][ C0] __handle_mm_fault+0x1919/0x2bb0 [ 705.633728][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 705.639184][ C0] ? __pte_offset_map_lock+0x174/0x310 [ 705.644631][ C0] ? find_held_lock+0x2b/0x80 [ 705.649313][ C0] ? follow_page_pte+0x5cf/0x1390 [ 705.654335][ C0] handle_mm_fault+0x3fe/0xad0 [ 705.659101][ C0] __get_user_pages+0x54e/0x3590 [ 705.664042][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 705.669411][ C0] populate_vma_page_range+0x267/0x3f0 [ 705.674866][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 705.680835][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 705.686633][ C0] ? do_mmap+0x69c/0x1210 [ 705.690957][ C0] __mm_populate+0x1d8/0x380 [ 705.695538][ C0] ? __pfx___mm_populate+0x10/0x10 [ 705.700640][ C0] ? up_write+0x282/0x4e0 [ 705.704966][ C0] vm_mmap_pgoff+0x37f/0x470 [ 705.709557][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 705.714666][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 705.719594][ C0] ? __x64_sys_futex+0x1e9/0x4c0 [ 705.724526][ C0] ksys_mmap_pgoff+0x7d/0x5c0 [ 705.729190][ C0] ? xfd_validate_state+0x61/0x180 [ 705.734286][ C0] ? __task_pid_nr_ns+0x1f5/0x500 [ 705.739303][ C0] __x64_sys_mmap+0x125/0x190 [ 705.743969][ C0] do_syscall_64+0xcd/0xf80 [ 705.748464][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.754345][ C0] RIP: 0033:0x7f3f79f8f749 [ 705.758746][ C0] RSP: 002b:00007f3f7ad97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 705.767145][ C0] RAX: ffffffffffffffda RBX: 00007f3f7a1e6090 RCX: 00007f3f79f8f749 [ 705.775101][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 705.783056][ C0] RBP: 00007f3f7a013f91 R08: ffffffffffffffff R09: 0000000000000000 [ 705.791010][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 705.798967][ C0] R13: 00007f3f7a1e6128 R14: 00007f3f7a1e6090 R15: 00007fffc91e4328 [ 705.806940][ C0] [ 705.809944][ C0] rcu: rcu_preempt kthread starved for 10488 jiffies! g55361 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 705.821118][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 705.831066][ C0] rcu: RCU grace-period kthread stack dump: [ 705.836935][ C0] task:rcu_preempt state:R running task stack:27728 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 705.850408][ C0] Call Trace: [ 705.853670][ C0] [ 705.856587][ C0] ? __schedule+0x10b9/0x6150 [ 705.861256][ C0] __schedule+0x1139/0x6150 [ 705.865749][ C0] ? __lock_acquire+0x436/0x2890 [ 705.870677][ C0] ? __mod_timer+0x8f2/0xd30 [ 705.875267][ C0] ? __pfx___schedule+0x10/0x10 [ 705.880106][ C0] ? find_held_lock+0x2b/0x80 [ 705.884778][ C0] ? schedule+0x2d7/0x3a0 [ 705.889101][ C0] schedule+0xe7/0x3a0 [ 705.893157][ C0] schedule_timeout+0x123/0x290 [ 705.897994][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 705.903355][ C0] ? __pfx_process_timeout+0x10/0x10 [ 705.908634][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 705.914426][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 705.919878][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 705.924636][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 705.929911][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 705.935100][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 705.940026][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 705.944871][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 705.950672][ C0] rcu_gp_kthread+0x26d/0x380 [ 705.955340][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 705.960530][ C0] ? rcu_is_watching+0x12/0xc0 [ 705.965278][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 705.970468][ C0] ? __kthread_parkme+0x19e/0x250 [ 705.975482][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 705.980670][ C0] kthread+0x3c5/0x780 [ 705.984728][ C0] ? __pfx_kthread+0x10/0x10 [ 705.989311][ C0] ? rcu_is_watching+0x12/0xc0 [ 705.994062][ C0] ? __pfx_kthread+0x10/0x10 [ 705.998642][ C0] ret_from_fork+0x983/0xb10 [ 706.003220][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 706.008322][ C0] ? __switch_to+0x7af/0x10d0 [ 706.012992][ C0] ? __pfx_kthread+0x10/0x10 [ 706.017570][ C0] ret_from_fork_asm+0x1a/0x30 [ 706.022340][ C0] [ 706.025344][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 706.031652][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.042135][ C0] Tainted: [L]=SOFTLOCKUP [ 706.046439][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 706.056476][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 706.062098][ C0] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 706.081688][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 706.087739][ C0] RAX: 00000000032cdfed RBX: 0000000000000000 RCX: ffffffff8b7816d9 [ 706.095696][ C0] RDX: 0000000000000000 RSI: ffffffff8dacda6c RDI: ffffffff8bf2b380 [ 706.103653][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 706.111609][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 706.119566][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b3d0 R15: 0000000000000000 [ 706.127523][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 706.136439][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 706.143009][ C0] CR2: 00007f15536bf329 CR3: 0000000073cf7000 CR4: 00000000003526f0 [ 706.150968][ C0] Call Trace: [ 706.154235][ C0] [ 706.157151][ C0] default_idle+0x13/0x20 [ 706.161471][ C0] default_idle_call+0x6c/0xb0 [ 706.166226][ C0] do_idle+0x38d/0x510 [ 706.170292][ C0] ? __pfx_do_idle+0x10/0x10 [ 706.174882][ C0] cpu_startup_entry+0x4f/0x60 [ 706.179636][ C0] rest_init+0x16b/0x2b0 [ 706.183864][ C0] ? acpi_subsystem_init+0x133/0x180 [ 706.189134][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 706.194667][ C0] start_kernel+0x3ef/0x4d0 [ 706.199164][ C0] x86_64_start_reservations+0x18/0x30 [ 706.204615][ C0] x86_64_start_kernel+0x130/0x190 [ 706.209720][ C0] common_startup_64+0x13e/0x148 [ 706.214657][ C0]