last executing test programs: 7m55.721150783s ago: executing program 1 (id=993): shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) getpgrp(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000040)={0x4, 0x7, 0x3}) sendmsg$nl_netfilter(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)={0x1fc, 0x6, 0x4, 0x5, 0x70bd28, 0x25dfdbfc, {0x5, 0x0, 0xa}, [@nested={0x9c, 0x4a, 0x0, 0x1, [@generic="3464d8060b2e2c177d6e6ed00eadbdb30a39b2a1dcd4f28c8863a46735e304ca6011707d77a241a25eddde6e26543b73da096900a0bccbf117b75175be243bbe6e606ab89fda555421ed67c4d6b48851004757ef2716268b5ee263ad3e4b28f3e6477d96d831b8b96b9219c1a1c895657b43f83bd0d393d3e57f070c3c68c37a6538", @generic="a8067a0d29cc51ad12f5340d07a1", @nested={0x4, 0x136}, @nested={0x4, 0x146}]}, @typed={0x14, 0x10f, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@remote}, @generic="18988d723169d0faef75d3d8f1c3bc6ce0aab3c9afc9d521e42737f4c0f9c0bcf07218e883a80cac3db6d3dc3fce09e15ad9fb5505dcff0063032b935abe2a3aa3db0be8b113e8bef4e531b0a15089c675e287af9112cb0978a34c1e36389174b968db0e61da229f2ab46f1384766efb1e6b609cbcdce65aa1b1a6cf", @typed={0x4, 0x135}, @nested={0xa1, 0xc3, 0x0, 0x1, [@typed={0x8, 0xf7, 0x0, 0x0, @u32=0xff}, @typed={0x8, 0x3d, 0x0, 0x0, @pid}, @generic="b568a1237e9a79b378a007a07f5268611748679c6778a2dd2ba59e2829a8f983ce574e467e853088cc9f22fef4cfa73d7fc78a0e238600efc996f86fdf4e7b9b91954c08520543ff8828c7708f498923a3ee0ed85572a0c3f072e408f558d7d37f2c52ac2a647ef6e40d4c9af2e13b82692ec7800dc044351a8c6025237c48a66039a14b0a63d90511", @nested={0x4, 0x5d}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x200400d4}, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x5, 0x9, 0x4, 0x7f}]}) personality(0xfe47fef9f5ff7379) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0xb88}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x7a, 0x8}}}}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000440)=@string={0x2}}, {0x3c, &(0x7f0000000080)=ANY=[@ANYBLOB="3c03d9ff15d5daad8ef8201c37afd742849ddb4f9a3043bd34c300dbc9f4c2dc643db02f2df4c166b28d7d2d8355d8847d64ba6d23b119686336d7d831069f18f14149a243ee1cea3f1b0e5f24a0585b52a3b1f4df9d48d4f38e48865592e67b9e776cf1121e02e0fcd0a34170c6dd9f3e2a67604660b722b18937120f5e5e38921d583c1d"]}, {0x0, 0x0}, {0x0, 0x0}]}) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffd81b, 0x6b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4041}, 0x8040) 7m52.315377765s ago: executing program 1 (id=1003): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1d2}, &(0x7f0000000180)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000340)='./file2\x00', 0xffffffffffffff9c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0xf4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x7ff}, 0x8) sendto$inet6(r8, &(0x7f00000005c0), 0x0, 0x4008881, 0x0, 0x0) shutdown(r8, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 7m49.612895504s ago: executing program 1 (id=1009): r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000000400)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {r1}, {}, 0xfffffffc, 0x80000001}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000480)=@newsa={0x1cc, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in=@rand_addr=0x64010100, 0x0, 0x32}, @in6=@remote, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x80000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x4, 0x0, 0xcd}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28, 0x2}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}, @algo_comp={0x62, 0x3, {{'deflate\x00'}, 0xd0, "df416cc4c67638747554ddd9fa0b33126d664751b288168a0f6e"}}, @proto={0x5, 0x19, 0xff}, @proto={0x5, 0x19, 0x32}]}, 0x1cc}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000080)=r5, 0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x1) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r9 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) tkill(r9, 0xb) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 7m48.572635279s ago: executing program 1 (id=1013): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), 0x8000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x138, 0x138, 0x0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x138, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @rand_addr=0x64010102, 0x0, 0xffffffff, 'dummy0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x0, 0x24}, 0x0, 0xc0, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6, 0x4}, {0x4, 0x0, 0x4}, 0x2, 0xd}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@empty, @remote, 0xff, 0xe92f794a3f81b63e, '\x00', 'ip_vti0\x00', {}, {}, 0x6c, 0x0, 0xc}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) close(0x3) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x11, &(0x7f0000000040)="020000000980", 0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000080)={0x5, 0x2, 0x2}) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x2) userfaultfd(0xc0001) 7m47.078508682s ago: executing program 1 (id=1016): r0 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2b, 0x1, 0x6, "3a8e00000000c20500ca55e23e00000020000000000000200000000000000700", 0x47314356}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000970000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000540)='syzkaller\x00'}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8931, &(0x7f0000000080)={'bond0\x00', @random="e700"}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000180)='%\x00\x00\x00\x00\r\xcc:', 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 7m45.858143096s ago: executing program 1 (id=1023): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) setresuid(0x0, 0xee00, 0x0) (async) setresuid(0x0, 0xee00, 0x0) r2 = syz_io_uring_setup(0x3760, &(0x7f0000000480)={0x0, 0x45a3, 0x0, 0x81, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)}, 0x10) mprotect(&(0x7f0000719000/0x2000)=nil, 0x2000, 0xe) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r2, 0x22d0, 0x20, 0x0, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000080)={0x2, 0xd, "087383", 0x3, 0xfc}) (async) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000080)={0x2, 0xd, "087383", 0x3, 0xfc}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0x6) syz_pidfd_open(r5, 0x0) (async) syz_pidfd_open(r5, 0x0) r8 = socket$inet6(0xa, 0x80001, 0x0) pipe(&(0x7f0000000180)) (async) pipe(&(0x7f0000000180)) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0xfffffffe, {{0xa, 0x2002, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0xfffffffe, {{0xa, 0x2002, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x6, 0x0, @mcast1, 0xffff}}, {{0xa, 0x4e21, 0x4, @private0, 0xff}}}, 0x108) (async) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x6, 0x0, @mcast1, 0xffff}}, {{0xa, 0x4e21, 0x4, @private0, 0xff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000a0000000000000000000000000001000020000000000000"], 0x90) (async) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000a0000000000000000000000000001000020000000000000"], 0x90) 7m45.197493767s ago: executing program 32 (id=1023): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) setresuid(0x0, 0xee00, 0x0) (async) setresuid(0x0, 0xee00, 0x0) r2 = syz_io_uring_setup(0x3760, &(0x7f0000000480)={0x0, 0x45a3, 0x0, 0x81, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)}, 0x10) mprotect(&(0x7f0000719000/0x2000)=nil, 0x2000, 0xe) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r2, 0x22d0, 0x20, 0x0, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000080)={0x2, 0xd, "087383", 0x3, 0xfc}) (async) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000080)={0x2, 0xd, "087383", 0x3, 0xfc}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0x6) syz_pidfd_open(r5, 0x0) (async) syz_pidfd_open(r5, 0x0) r8 = socket$inet6(0xa, 0x80001, 0x0) pipe(&(0x7f0000000180)) (async) pipe(&(0x7f0000000180)) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0xfffffffe, {{0xa, 0x2002, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0xfffffffe, {{0xa, 0x2002, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x6, 0x0, @mcast1, 0xffff}}, {{0xa, 0x4e21, 0x4, @private0, 0xff}}}, 0x108) (async) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x6, 0x0, @mcast1, 0xffff}}, {{0xa, 0x4e21, 0x4, @private0, 0xff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000a0000000000000000000000000001000020000000000000"], 0x90) (async) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000a0000000000000000000000000001000020000000000000"], 0x90) 2m29.937770583s ago: executing program 0 (id=2085): getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080)={r0, 0x2}, 0x8) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x79, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={r0, 0x5}, 0x8) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00000001c0)=""/19, &(0x7f0000000200)=0x13) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x87a02) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000280)={{0xe3, 0x1}, 'port0\x00', 0xee1a3ae486d22c7e, 0x80401, 0x0, 0x0, 0x5, 0x5, 0x7fffffff, 0x0, 0x2, 0x2}) r5 = getpgrp(0x0) prlimit64(r5, 0x4, &(0x7f0000000340)={0x8000000000000001, 0x101}, &(0x7f0000000380)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x33, 0x11, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0x5, 0xf8cc3d4090e69bed, 0x5, 0x1, 0x4}, @generic={0x80, 0x3, 0x0, 0x18, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x55fe0e8d35dea889, 0x3, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x8000, 0x88, &(0x7f0000000500)=""/136, 0x40f00, 0x7a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xd, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000640)=[{0x0, 0x5, 0x3, 0x9}, {0x0, 0x2, 0x7, 0x5}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000003c0)='qgroup_meta_convert\x00', r7, 0x0, 0xffffffff}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f00000007c0)={{0x6, 0x4}, 'port0\x00', 0x80, 0x170002, 0x8, 0x0, 0xb72, 0xffffffff, 0x14b1a283, 0x0, 0x1, 0x7}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/tty/drivers\x00', 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x605, r6) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, &(0x7f00000008c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x93, 0xf0000000, {{0x7, 0x4, 0x3, 0x23, 0x1c, 0x66, 0x0, 0x3, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@ssrr={0x89, 0x7, 0xb0, [@remote]}]}}}}}) sendmsg$xdp(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x2c, 0x3, r10, 0x23}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000009c0)="5bcb1991a1136c96e7d5dcc1d4c13ab206acac520e78e513da8f2df199631cc44a6ae766431ea6485733b56e0eebe1cff976a06ff6620cd25d59f0cc45f0cb94e306489738ec58af04d02685c41cbffdc2096f000477c5b2876a9e5bcbeb02a4311dc269198ab800337af59acda2fea53801", 0x72}], 0x1, 0x0, 0x0, 0x9400a4bdb9c012a6}, 0x8000050) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000ac0)={@in6={{0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}}, 0x0, 0x0, 0xd, 0x0, "c76f3948134f8218a9de76679d4e0dce5cccd262ff4f5ac69e4f554989a82d3a8d150b5d82276d49280824c4f9f13a2d9efb3ce0f06f568efea7427c3eed2e4b68564f16e61f8a4b84862b84753f7f5a"}, 0xd8) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r9) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r11, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x1) r12 = accept4$rose(r8, &(0x7f0000000e00)=@short={0xb, @dev, @default, 0x1, @bcast}, &(0x7f0000000e40)=0x1c, 0x800) sendmmsg(r12, &(0x7f0000005cc0)=[{{&(0x7f0000000e80)=@xdp={0x2c, 0xa, r10, 0x3}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000f00)="b5cfe0ee9b7934697c42420b52046a9e5d6ec5c8ff5893212f82b6b0a26f87db5e45d1272809806240f16f59b1898c6b2318cd82d3cee3f8b640669f43ff3a7f59f7c1e0a34a9c58011a2cb3f4a14ee73c69d83192ea14f69b646edb642846ef8e12ee93a2afe61e79e68962fc23bd3e2653d8d1ed2e1b2b40236208fa395016ac4e196de70bf8b80a2e791a573a0cba7898", 0x92}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="1c55c174c339aed7cfa19f093ab7ec5f4fa558e95c87e07416d5da1e95049179e6a7", 0x22}], 0x3}}, {{&(0x7f0000002040)=@caif=@dbg={0x25, 0xea, 0x5}, 0x80, &(0x7f00000022c0)=[{&(0x7f00000020c0)="02b2a0c7818d76c7e864113dffabd70f0fe188b4f6161da336f83945e9522e775498daf6c33ffbee03bda97c877ce1a3a5ee31817be39c80a015aded73c4df806e05346e0db96afb8a1295a049786d5afe9a76619c8d9d3878544894018aebfb8311f582cc065c202c6763628f2b4909b530602edb0dddbf4a42c80b768552db0a7d3c781e6ba36f5c93176f2a57c85f69171e04abf1ab12efc397f6ffdb7b69865f6624e3d44a9b996ce729d4541b6409c2731d8c27ecce2a968826cdcf5265bd0b2ae4b7397cde6bca649c271b7fd9b157111fd557", 0xd6}, {&(0x7f00000021c0)="d60e14d78eb3546134b507b76f6e5f97f558da88f04c7c2f1afd280ecfc2fddeb889e502363a2187ca3eb744d9cdd2225e791f8405add5f0684da6ccfed73be0558fc8c8e0f31d5d3e645748706d6ce5b936aedf390c857e3d9cfafbda2367a314b847a58743809a5e327933323b71509d0c64d7c9cb2a2c52f7306284ce0749ecee91c71cec65f2e4c435ebc469c8ec6f22d9120221cc5ba6aeb7d48f8268974789c5d8746298ba5b80b4563e37c8dfe26c74b63512afe13eadc856720b2bbb3d2ec30d2bf6c13fd90e0bd85ee11b3d6f", 0xd1}], 0x2, &(0x7f0000002300)=[{0x108, 0x117, 0x638, "aa278fadd40e76308d2cf8581b8daef9cc82ee82724d46099ad7768ab8686196e392ef86e1fce4ace1a5948d8dad50f23d21296f5e8f6d93465e058b6dd75adc3769a425c36b5353a8bfc2651e0b82b3b4ac8b0ac9be9e191607b69d7cfda4b232d1b836392b95842ad3a6ae20f391a2ca530276b8c2bffc479e0e35cfbc113da29235bfad235b595b31fe8d530a0fc378a67acaa72cc5fd752f5017a567697150f53c9a9fcddccd1979bdd84cb76b5b2aed3c9e2cfb467a98bb4c0868a0c025b40b2c40797665359c71f6cf7e862540c41041b9170787ecddfb98f2bfd7de8cd0df3996b581b515adbb82c06e963d51de783c7b86f55bb6"}, {0xf0, 0x115, 0x80, "7e81a0a70ce527ad118156c15a3952d9b78a3ed75f693ad51766cf77044307415e7dca8282b8431af914fb78050deab7e64a1303b08c96409f7c71e7e83dfca4d9e5efd3b82a325026064341050bbebf8acd2ec77135e6af3448a20bda827cdd7086c9c9fdce40337ce8c7094f59ed3710eb83a7a3ff2baf5df2c99fb7a2e1b5cb19f77404ff0d7c9467b26a172b82823bdd3e58816900c08a32c298a87bdcb4ec2ff703b5ba081de9c7c6e290d4fbea7090362973e67794142c0dfb23f3ce30bc8939abd1e02cb9754d5af6d3934538c6f8b30130984b1a37219bde88"}, {0x40, 0x116, 0x8, "d3640f75ebf0a8a904c0e2d3ac45104050c7b7822ce2a59429e078d920ec276f033e83ca925f1510a1aada284f"}], 0x238}}, {{&(0x7f0000002540)=@ethernet={0x1}, 0x80, &(0x7f0000002840)=[{&(0x7f00000025c0)="e6be8bb5a8719df6493cebbb781af140bb784bd82a4e45b552293c1339e0792624220f88eb785bddec7ddddac0fb348b6f08f4091b874084feed6895b992cd01febcf4698d013de2426e8dc905ee2ab69063a07459f99bdd7eab9b3ee0ce33f497644c388db85dade507c1e011404538ad", 0x71}, {&(0x7f0000002640)="8a7a54ee43ead4bc5145", 0xa}, {&(0x7f0000002680)="e71744ce1ecc0de577453486a6728a480e0b6c57841b8e7af8b4480a3516051460fd1a949887a5cfd74e256a87f37b8681", 0x31}, {&(0x7f00000026c0)="fb76878bfc880953f35b21510f322e259f2546e41485", 0x16}, {&(0x7f0000002700)="b1ffb0dce9b528d23ace81c5e12d4348d29dafed2503e98c083312ad1a1f43c12426f271dc3930d8a3fea97e9e8c568a180f0fc5c055aff3313ce98ef0c8ed", 0x3f}, {&(0x7f0000002740)="5dc3ba23a867497c82191c24512d9ba6566933cd9898e4830730a1798ebfd5d5dc60cea8fe82d2cb63f08b5cb83e7dd4337bee1cb72c0997455927ba6e711c0cd85d252e3ea4680c5947b1940a636bf539131ce38f520e965684b985f6c61947f848f0e2782d35ce95ce44be84ea25350c6668045ab181973049f6927bdc131c56a21cfef402676e18bff9c212f72d3c5446dd4b9fd36de397c952a17f1a2099adb86028caf18a514586792fda35a0eaef8a81575caa6329f1a3280a8b8fd09a7ad37933efafd1e8df8d8f61b7216fa9036696f2d3129a00b01199dc17b3d809c723d39d97fdb9152e36a0e950ff4a5ed2c45208f3a526fdf4", 0xf9}], 0x6, &(0x7f00000028c0)=[{0xf8, 0x200, 0x842f51e, "f60d77be6773c2c52912106f529c79741e605067b0e9d636a36e38aff6c9873dab3c069d5dc3069cfe6219a523925c63c7cdd5d377cc8cd56fe1e202ca6413cda0dc9bb149440229affba4276d84ec4632d50860bf9398f26570ec3e6907d1db5bd40b224b72a804b9b876953d006f848c9b35808599deb02449dd11d84a0ca90031e5a9dda689feb13dadbea0f4bb36453ab1eb8e3208326fb30fb8fdf9f1eee0279f6f5806678b701f6e4e29c2940cd1b199a713c55f7950791e018192184851bcbcb65f25c1160829acb7b70ed2ee77efa014f9645aa4112db9ed69c43e67351fa388ec7d5b0a"}, {0x1010, 0x118, 0x4, "fa7d8666d7203fd4db446f82ab952df9e19f742cc9ff2729ff9d79fdbb31dbf88448a0050efbafbf5c789f620026936214ca091af8c7952a21d202b8164f3baf1bfc4f5d261672296be4e80b56f809be616895799b2cda40c68587bb35ea581dcb656953574aa1fa90a15184df17590f91610d27b23b45c99e37afd05e2e9f6f12d7cf6143368da9112c1d27b095327bd9ac544d214055b66efe794b4e683e3ef08e3b93621c32e7d1bcd84b8953d0087047b7fef889fa0800eedc6a1c16f6343d9cc5eb7696557bb492c7efbd5348c9f00a57da55639675a49d910c4ab82ad57658e7d30d356600fe945a71c1e4d237de4b06d9bf32c666a5caec0959c070e90f66ad363f102e6a5a6172011367931e54228812f5a8babaa755775f327c7d0c8671012b4e38a82a8f96904d0f55328b091d24b7b9e60476e330153660b93bc298b4b3591a422667ef73daf55d3c4d2f2c2ee0147aa8e38369c8ef58f26bc5243059f1e2a114508e049b6d7ec8aca8c0918d2a926668baf496091570e5307f09f96798b096eaea3b9226755b0c64cbfc321873cdc35cdcb13b6d8fe4f58668a9476582c42e0442201a81cc1a27e91a8782f3b8ea8f0644a06cbd030b2091b4909c083a1d6ee5c7640fd1c9373e273841a7e6a17ea4ec2b927c2416538af3d3ce63ceba7c2333756ebfb047913d2f62077bff579810bbf306f5b9ca9fac73d06069e67e758dcfeac46097b8cd30f930c9f076f11d56ae5f572def6e44b2ad0ea7e4b39cd88c13a93b4cbf9dc81bef33dc3248870955faf060386284073caf6a2cf063c235e572d46e3a21974b560442273ff4be239d9513068394dcde5f8aed47adb294b735ba7cbec8d84b9aed1f64a6c4a586bae1c83e502c7d9828b0a3a42c083193388d1528176d356c1696799393d4028190782c150b0d94de8caa4813e6f882769ae4368548952379e6dcfe44c911dcdf1ef1094508a5a23d01048007e5ecec4710343001d441be42e32279a145f2a92fed58b4ae659cbfa22865dd964b197647e4b531963dbf994bc7e9bc6ead7bb71cdcbc79e9e46d39fb96fa7b6e5396b693bab543a2c5c3ce0453f27d7b40a821e476fe87d7ebb23c01d4e4262d6e65b56267b3ab2913eaf4de2c97fb77feb13c8ef23c22884dd9ddcbe88145c4a9351a1c943fbcfbeef493d346eb0ee64877f63d8268acd97938272af10bc7ed528dec2afe34cb006e68f595f045f2a9426a35c4895fef7424133f377e176b2ceb17c5d0d4f38af2cde6bccba77ee22fae4a2de94c1f918c0b47826cccd0d13b2b48875c9cd39e93057fe78a3cc8f7773f15d996f143c7baee11857c6c52a123752203bf8032419849a3122106aead409972177ead78ef2597de572e2813a1829aad8a5ac5d743ef408b121aaf8c30dac9638d440b4092e3d2ab4f7d404d5166b613fd7b4ae0ff990466395423801402f1474fa022c1f9e30f83c6d925e5a60e1748e23f535cc5ebe6bd7c743ffc1c68d55406330654df3ea5380048681f6bc9dacd6cb8b225b29148fd206f0918e44d40a98db32d5032c2f0a8bf3280b9bb6f502ef66cca5152703911f1f55bea3b90ddc87f0a81ad93232d5dd63a489d54998df5060e509d092bc1e4b007526d4a475f349ecf26cfe3ea2b2f6ac30757e80f20120d63cebff300c72ddfcec3d013f97b2007abf931e6a517995cc5e9c7b63f25f2a990cbabc08682c75c206a8cb647e71aa8bea1487092c4c73c3ad1aa53d949ca054f0cc3a00692cd4a6ec4a1a635569d2f1bd3f1ed4ffdd56a9ec5f7a017d34cd9282942c6da78f624355a3f921b7893f21b6c5325083ea6a33b58a387f9efdd8e5fd553c2ce25cdc5aafc9e86ec00c178cf98070a2b87a65fa4da1d9367824b9cebe938ea1cfd3f84c831258e184591e948752b0e96fe82f9b669848638e4f73d476870f3f786bead1325fd35fc1772136c6b51283d237612c6d98218a9f6922ae6bd2cd7a70d223b03d24414534bca84f94b722656059faf99899832f47d7950330ee2cad1dfbe03b1af163e3186174f8fcb7b986d38ee58d0d98abe6587684b06e0c531550d0d2f4d0bdc70f8aa5ab633f0bb20e49ac1ffda37d5b9a25faceb7db12b3b3e788092e4b8b4d9012476b3526f9e4fac4d153a173e96ddd27ddefacbee7285f3cfe560a666bd6fdf2dace2ca6bf1fcb5ebfe729187fc62073e7c52734eadeb6fac50c8a9ea05e4206c065c3cd7c47859ac7dfcedbd9e2121998b1c3ea7dbf74bb799c00e300bf85dcb1090a82c7b1bbdc74cbdc515838c452b420c342875c413fc38d61c367e87777f33985f096253027a4d98d2f9cc0c4d44fab167c9303d0ffa9feb52c2f6ebedfefdc6313b9d6b7ddf0e6ba4233d0eee20b782361efd046f54250fb9b16ee6739d0b2c7d8340a5ba799ff1846a6b868f5f7c831ae01debd27e2ae3b4ba151b9b2d0672ccb374e85fb2e44778ea6075fdeeb16806d1f9e7e2c84bc95148811d18d6fd7b114c9416676ee3449a3ba1c3fa1331d98211639e16d92ce3fde8528f58f2858af3fcd4179c8c2bab4a6d1cfd94d1d73dae762b787f7c481edc1d3e444922e73af4bcbf3fb037e88b99533ddf2eeb725668ff78cb0b27f7ebc08f63d478bec8a6f02f952bf42021378605d122cba9a538b9eaf25694b3ec821704a89e04d81d5e78884e7d03ba9f742fbfbe7876550d936db3cb3078d040f795717fb80c0fbdca496ed35cc5b55944c570565d6d399be9b06926b968bc63d69dcab255537f0afff8612d9302f14ddc783e37a6ca6ada5394ee76382b7927b21782a0679d0173e9ee6c095a0f4991f0bd36d3bf122e58ed30f98b1cf682eee819bcffb3c0c772aab379f750ec8178e453ea7b769a9127318af41666f6267294f4b17ad24a1163c1a4fdaad0d70432fdbd88a6b716c13d8b6ab82e2a25aabc78b626de15a7ee880a2e6a970f12407b2356b1d6e1a3f60d64ec20f7fdb831c9cd444e2d3f03a49fc4c5064e241820610f2a566c355256b8949462b588fad980c89e4474b14f788b70a3abe7a84192267d0a1467b0dc802b91ac2674be295382495e34a4dfe47db1496b322c25ddf5cc2eb43492a152972cfb7225661e135e766775d068b3297dc943152c85e380b57928ec2056f781968c3e286d26408f3bc86912f7c6af25fe023a5cf74279b37812f9abe38eedac98b3dab21fa91855ae35e3b3b321c0be0ff58928cd6408fb04ed930b57caeed3784aa8c8b07e67a512903295c1d1ee14a6bda5b4cb99d1e09518f6ff60370931c7947da1c2e97d4f01e8e6b7d2a342e51c340a3fdfa18edd0af13463169cdb0358578fdb275279d85e0acd6bd8cfeeb7a1721fb080365f6b9c766408e5112752357e22d628a564fe45045ef87ce6c528d7e1ac91697a52152585cb36bb41088326b53ae7ce23662489b1039a4958b1d2c3bb1f4d6b6624f512df1b9c9c13d2cb56d31a48e3fd374cd5e18cbe18080a5f1a3e1c2a07505b3f3596fc6d46f3345ccfb6832e088219976c38912d94be5bcf9ff404c677ea29fa2eb0f729d16f3c04339170ee2727bb49f46fa76a2b9b9afd6962fd49867b6ecdaef2fb5309118ff959f8a6f34f87cdc55fdb8a5ebdac1e6edd77430af6438158f3ee0970cd679c59eef952932b04c54b07472f789fc8d50aa5b183e9aa1df8c6e0f2a61c8a92b5713d0a6503cafb9810ccf20bf062c95da375020a09d3783efb51425db8e74e6a7fdfd2fc14c7e72c85dd316b1582b75c38b6f6231f80f97c693042c1e79f33fc8766624b65bf939ffcd19e3bf114d0e8f70b31e4a47ede36a7a0ad07b4712afba8e028a73f44691e56bfdf236acadb17776a1b992097071658ade50be32a4d5a6118afd27ee0904b35c0fe3540e1f743ade73f592e16b0c3acbdea42a595449bdcfa30a12b3a35147d7c780f2cceb153bab67cfca31a4d05b1152324dbfdcced322964d423afa48fcd431667ccbcbc3a0dc39d0ed2783307833e88c8abb4b42eb4fa1b9fb03136d2bc215d0100367c8d9a5c295549d6a5b83e5e01f312068d746dbd7f64a293c372a7fcc4a6593e4b50c567c7333368d3f79dfe5ffe62bb519dd5ee1ecbbb873a1e518b83d81f89d662103d8587c8ad98c8c19dd430cb4d8ce923cd3398e509fe497e5216fa948ae21819bb71a22b064d71a9ee0502528df0d3404e9a0d0bf6f8b694b26e19df8460e29c1a00d82875a4d5bbcc23e8087bf12e4df58cf2c2c5fb055b5c0cdd87c9f0763142c5403cf832a571ba8b35f081ea7a6a63222727527dd54d5dc0858bfe46175f97197d0d915f2a275c9814ab40a07caa8ed0c5dfa15299da92a2e13ce4082c0870458fdc730be4c5644083aebff1180ac347cc165492ca74bbd0b65c6a1084cda9ffe2169b5a31016c1986d3707381c02bcd177d7191eeacae066b1eaea18aded0bbc8ea1e02902199f718af6ace45aabe0dba82ba3698577889bebc0fd9bf7b4c3129c1ff0893113f95f3a587252f51098f18b2cc73e4cf09cc4cd09322968ed5501d430201c42a71f83385264054562421746d269f5d3d9bfaf6651ceb94494359a3e08435f308d61026002deedfc16f1714a00fa229b3ec37396bbfd82ae44418ac72bc4265369d1df37cbbc678dc948e2affcf982f760ff67c4ac06ae1859b47c6a506882575fa6475f6b6f9eef7873e58c277b0b5ea077f02df865817e6c627f05ce7b7ab47bf9e860c8a3e6945b843c3706cbf40a4c4998065a5039e00491c76e2c7183e885ffe754ba105ec7efd4b2a1c4cb0d7ae797b455584c42d373c287032ca764204cfd2e269eb9cd3b343a5de788faed0d43801c3d56ca5db0847cde032b5c2b9d7df403473703d8eb997ece25af7d2c4b56e41962a2214c08c7a5fd8ef5784b142d0fcdf525e0890540e39f3b00675a8c1ee175172d07706bb1d5754dd401e3c5c9d9a5db1b6bac083680e142b1ba2867f8baf2fafd68ffe1c46f6e0c239d764c7871d0386f7a9fbf817dcfeb57005c0b74c97b27e5ed4e0334d36b9314d40411e7c12480a3b93aa3020a852bd9dbc1cd7e41443f956989609f86067ce664c6b810eef887ed1b5a50d73b8eab658ed1207539d264ffd0070ac0af87fbca21130fb2ff989024f1f6d01227044c8609c669b49e48a7492b86584987a59bc7b77d734468e2785f5006fbc07020811856451d4a7b10ec67117a544f9d281528473733414bbaf83c685af9e5013e434c57f3675a7969d9e83f50a37b979037db529d331cef514069da3d4eb5992dc498046305f483c1b8ef4e9e6600fd62412b3979642b807c7bc401521c4c9d7d90e13d875b4e55b566c8b75350db591cf1333aeb4c6147f54b6d506e108ac5fa9ac351da76d94d3ee96a98d37d149352000b6352f32af801cd9bfb22a0455c2a3e0d0ab7ddd18727765f5d0dded89c489d7f391c4f3e80a1471e8365905210d0076718fff57b9475a4856fb99e9251f2ba6f9bd23b0254719e11675dd043a35f74f54d2883ff1ac434a6d30a50848e9164a5185126000bfdb406d81b0ecc3f13cd06c3061deb4496eaede0de735e4f85eefc830ab11732dbd9904da5d5d87bc43ee11c51837ce952054866485f9bbc6f5ab4c030896731de13ea470740883e4964f2d8dd74dad134a99cacbda1014c9c5a7bfc24b00312ba5072ac89d2a05ed4fb3c0836cce447bdc33611b1e6892a90a8ed0ccb055f519cec7aa192fccf997ecc7e5f8642308aaa976ca95925c67844e0030e760786a73264d9f39e2450a"}, {0x108, 0x111, 0x7, "ed50c56e475ba9a0e4fe0c071b7775232d1fb65345fc9defa57a7a1050a217baeb01e653a0fb01cf394ed5578775bcce52f152f4b1c624d49cacb9747047d7c578b5f6a92b3bf466458f96f004523ab77fde1861c5b19aa7b4076d5df67543b932d8048aa84c2ac0a21dd8b26fce3cc83f63831b5aeeceaeb7dddb37feae997dbb99758667550779e50041c0483057987074f365a86a008e5548b29f517afe9174f709f50c82dca012c605c11edcd599409a3987e1131cdb4a0b1197f2b240f1161ed00c96fd873fd32733b7808af3ffa2b811ba6e7c76decf0e074257eb93b851bcb550e845fd15a1f0b92a32181db14719"}, {0x58, 0x116, 0x4, "a9b486021b36869af21c2e4f99be0ca2af2510be3203718a381e34b7b3bd73c1ec76cde2aea355c309d6cbb122532e4024cff7ce8ff1e2eeff00a4ad0557f543eb5b635277e0"}, {0x100, 0x10c, 0x6, "24f064b0842bdffafeeddfd537f00d740876c9a0ad4fbb05ea8a3b729a45cc60450189b5a1683209acb64ca131321d306bb729841e3bfc6d41791975a774018b5d46c87a9330777ac19c4d56ceb88881b1f474a205a11afcad92804bdfdb5b139f10553ffff5a8f6b8febfad0c4228e475684a83774e816f6cd9720ba47bb6220a1f70d9f6f17c2d9453407550983f6b8516ab4885063e0a763571212ad2179db675cdd25dc230bdd4ccdc4c432ec807d74663b67c13f4af95b5b4ec8d91926278d45a8d2ce3d3b09fdf6ce20f1c2adbe62b01441f4e22da1ce228c387806dc9b70644948cc8d321bda0c3"}, {0x98, 0x101, 0xc, "3e56844ea5deecb76dae5f82b0f1b1c26f2e7bcc0d9aebc9fa3526e251014a9a2656a78dc4d343f728eb7e9af7c063a300028879e0ec14551c035cbb74b687bcd305ae8586ef0789a4a527867b75712fae34654eb52161e971d3350b41308ad9a2b6b50392e664a88dd3ecacf4801d02e0ae483934524d385288e3ca871803805142e2"}], 0x1400}}, {{&(0x7f0000003cc0)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003d40)="7fb2b5d1a39c2b736b77e3839bcc26759259889bddaf1bbd796be67477c4c76add726817b40641c966b73d40b06dee1349f0e6e4ace0a350b69ad6c2b190fff79f288514b9c570acfcef6aad261f400a43d4ab65da2aa4fd3109915692c0f7d18ec2c4b44abf96514219bb67bab664835044ea6a6681c08737a66f2d9a521ded4033602234619de7784bb48b5dca65cca78d791f45e4155472d4d2458a5e41814705e49fb960499a1527acd7cd399c341b557aecfa2b4b669876bbd3aa5c8bdde54a7500097afe5b9f956d941b89d988fd4d0d6237e5906d1085d790968a3a83f4d8b1039c8c59433b", 0xe9}, {&(0x7f0000003e40)="e9bad47a1fae7d5312986bf04a0d2c078f84f094e815604fdc364ec5e369aa5576b0309dea0b10fc9a1e305beae63980d1f29adefd130b7d107fb5bdd7751878f5c2a3a3c5f111796df30536715c6f3bff5d7a303c2d654e2f3058f1d22506b035bd357aaec133a48593", 0x6a}], 0x2, &(0x7f0000003f00)=[{0x1010, 0xff, 0xfc1b, "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"}, {0x108, 0x101, 0xe, "79ddbd08068b2c1a693986a35c0c8579595c54f43b8842424698e840a3cf544296bcdead911e2c1a7715c6d052e8f7f51a6cf2a4ccac767175095c95e872d80a10936547c4d807f014025c836e943a455a867098c36e59f17d4c1aa352043f991b4bbd9a78e5ae084731b840efede0bb907c21aa7434a551afb224e115c881063b8393e5387711529108451569b42400678e5682c08b62ce55c9a5c75e15399926d5a2335af52b5d28cb94c6f734d6cc84373e7a67fcf46fe3d4507d2af791abba260dd6a118798e6b6761a1f9e726ba6028a4cecf3ebfa97261fded7a0fcc1a9af9294d24b3ddc7098101e2a9f6db3021e11d9b44e526"}, {0x20, 0x109, 0xe, "d89fb95f2bebf2b117c4fd38dc16"}], 0x1138}}, {{&(0x7f0000005040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x1, 0x4, 0x4, 0x1}}, 0x80, &(0x7f0000005280)=[{&(0x7f00000050c0)="3049c8216ca12989b1810af83fa242f0e4499c883cdb8c45fdc342e49a907f416d2e0ad1cd9fec85e6a8b080c8953f342335a1e748626942899719d1cd30017f590b5c9fa3116fc9d5310d273eac16b97679132330e9e0d1a1209b5427cd19cea249ea513c5a1c2d12b4ad79de2089f966afe11d7dec98352b6a88b7374c16cd5e7176c748304da07a60bce0c2a742391852a9e06fafbef6ce8b10f575e1e5f08a61fb31a92baf5eccf9184025645b9c8529ee15416c39e24774cc450b560e0ecc4093a543dfa7eb4b60ce5a6a27c8d6e602c9e9be06aa7ba358ca9a1496", 0xde}, {&(0x7f00000051c0)="9d2d4b738528952effe0ad429a281cabf07d014dc65ea040835da24d645a10d91544c3bd58c5ee416afd46dc7cefe95a944042ff2aa92f15de9b7331c6459ffc69c2f5e591cfc7cd3f06897d83d02311c170a18eac4d7da412c327958e65911d1a2a", 0x62}, {&(0x7f0000005240)="0635efff098eda2ac6e9f131166d32095934a1dc2122299a30844db1bf6daaa181a33ffb1118a041716bd2e2e2059cfaf49412c0bdf5ab976179", 0x3a}], 0x3, &(0x7f00000052c0)=[{0x40, 0x6, 0x7fffffff, "2b95df78b14adb1685178cb24ee907bcabee3c53116fc5327f82305965bf1ba94406c4fb22064b5f0954f757410b"}, {0xf8, 0x108, 0x5, "a1de3ce3b01a5cd438065eec4ecc50b54904c4ef3ac2cbc9c1bd0dbc291263d47aba63013dfb118491f42eb7c7459cd34c490bc6e92f437dd11386219ee26b61a2866690186233811975b4c86c70cc3165a7a195e8388d93b4e7937157e725e82336702ba045424ac6fe6e5d92cf0af3663f5c58cbe01fe5b8a911ff5c95c6e325c4807d9f64dd54b277c03359adfab0d5d7e0be01f6be08f733ba53820e5c920ab5abd561c46c8b14cee93afc4836e67e6782dfaca92083de99ddb4afa58980da3dc241858beacc84ae892fb3d404e021a483a289696bdb8736f27f1bc3baa4ecb725b4f1fb"}], 0x138}}, {{&(0x7f0000005400)=@llc={0x1a, 0x321, 0x40, 0x5, 0x6, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000005640)=[{&(0x7f0000005480)="797360e5b5120c67f31bfc302932a97d25347f19f130aac1a4b1e10405e11367ee2bd9d15aa305cb59771fe1020ef3f06060f3f4fa9f46614bec4e8ae003fb019c620a1c4da91652ab9b6f71424e5909590c4b18b87cc676fbff10006479b7b07d2f5d91a18b7c010b3f375b26ad632cbad018f79f2166200a9a66083c90a926124d23f36723a92122cb04beee2dc7bc83f1b172e9f23fd5279a7de6a8628c73fc52acb78ba8e8511f06270a0c887d91df1f", 0xb2}, {&(0x7f0000005540)="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", 0xfd}], 0x2}}, {{&(0x7f0000005680)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x3, 0x1, 0x2, 0x4}}, 0x80, &(0x7f0000005980)=[{&(0x7f0000005700)="0eb727a4f19e3a0c4a174052f81ee0b9400cfb5b58af5ce0464682dd99e21f9c3cb34bf54f730183089a47bd250920f918f21896a3855109c853b293b1923df32ab482562e714e0b8d7ad0d5f67eea74ad87e0f0fc59e064f17b14b2f9e9278f8926c4bc5109d405ed5b0cdf63", 0x6d}, {&(0x7f0000005780)="ce9903ca93d91500f7227653c6d17ad73f4e320c7de66793c2d0bbd589759fb461edd5112747f55ee852cbe00b3b7be7f3678b8a4a781957c4bfe7d451b32dcf11052dad3f36d5aaf641d4316d3c9c750c755f9e078fd5ce608c8a5140732d2774192056c424532ac0701f3337b0ac3ca6caa2e55e1cb2a0f4b9a5db13b9ec89076f64c1edc735a40da2966bb02dc2e4646790f0e6d77a2deee41eb4fc825f7b259a5f10f610a56216579fbee3d83e6ed13ec0b9c9640c8c5a8adb21e718247c8f43d738f5394a15748484e5966a8c0dd452c33a44", 0xd5}, {&(0x7f0000005880)="391e1f6bdf", 0x5}, {&(0x7f00000058c0)="0f19fa4b30764fda371188b4b9668810f0a05eb0a0337fa30935384222f09c5a0041b2f6384926a2c8fcf7e64c87ed76ccc1b9e69333368d2b53e18975f5418a6edf56f0698e74203072c4d93c03d290c0b2cba970586087270d5a9ecf1ea2283af1", 0x62}, {&(0x7f0000005940)="eecfc0d1a17047c6c69d10c1d03213a743fccdeea08a8077c562f9766e31a053b94da0a821af12c5", 0x28}], 0x5, &(0x7f0000005a00)=[{0x110, 0x104, 0x99, "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"}, {0xc0, 0x102, 0x5, "2f919d57ca6113f6b18d9637ca12a380b475fd462bbf19506ca25970d3a9c0aa3b4a9c24d0d24375ff1773b5984f2ef525db00b39a73972fc8dab488deeedaf13157219c7713365ef31a9a4646442e329136daed83a4444346688b3bacd7329c2069fd43d83b95a11482295c7aacc1713d754b4c9420ac23df14a229d82ba4ee7847b4fd8fcd98f1903646591008f106dca5c51b6c896f4fc4adfae949bd1b1ce6852b3ab44f41b3c1f550877c7a"}, {0x30, 0x110, 0x1, "0049c6a56015f885393d66fbb092d11323b50121e0376820755143fb82"}, {0xc0, 0x101, 0x9, "6d00f4e652539fbcb913c4cd5a0fa1682d62ab2ef9234a6e47d1ee6847947c0b819e99e53dfbdb7c82363d343c5af48f1879d802f6b851892051505cb4d9f24d9537d89deb16ec91bac0b4691f0de36a90dc4ff1e0219ec0e400808f381791c59d27c62fb9003b1bb9dedaa0ce8c9f485b67412c24c81afae4e9ee68c5f65f6d19e55f4842431429124b030e64e951e5cff90e6325910c667aa88d7e037ffb73fe6a613aef83375e3598f4c6698f"}], 0x2c0}}], 0x7, 0x20040044) 2m28.747130436s ago: executing program 0 (id=2089): socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x88ff, r2, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m28.636435204s ago: executing program 0 (id=2090): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) (async) preadv(r0, &(0x7f0000008e00)=[{&(0x7f0000007c40)=""/4096, 0x1000}], 0x1, 0x8, 0x3aaecab1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x21, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0xa, 0x5, 0x3, 0x10, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5}, 0x94) 2m28.571686204s ago: executing program 0 (id=2091): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x89901) mount$tmpfs(0xf0ffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, 0x0) 2m28.467607014s ago: executing program 0 (id=2092): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0x2}, 0x1b, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000002900000037"], 0x18}, 0x40e0) 2m28.067338201s ago: executing program 0 (id=2095): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000ac0)="6cb76def", 0x4}], 0x1}}], 0x2, 0x0) (fail_nth: 1) 2m27.575720968s ago: executing program 33 (id=2095): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000ac0)="6cb76def", 0x4}], 0x1}}], 0x2, 0x0) (fail_nth: 1) 10.311922999s ago: executing program 2 (id=2681): socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c007121522300080000109021b0001000000010904080001faf40d00090582239f"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40000000}) syz_open_dev$video4linux(&(0x7f0000000140), 0x400, 0x40) socket$netlink(0x10, 0x3, 0x8000000004) syz_usb_disconnect(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x3d2) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xd, &(0x7f0000000180)={0x3, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(&(0x7f00000003c0)='./bus\x00') 8.859399729s ago: executing program 4 (id=2687): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, &(0x7f0000000040)=0x80000) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = syz_open_dev$mouse(0x0, 0x2, 0x8001) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000100)=0x1, 0x4) r2 = openat2(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40, 0x6, 0x3}, 0x18) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f00000001c0)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000280)=0x30) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)) statx(r2, &(0x7f0000000340)='./file0\x00', 0x800, 0x400, &(0x7f0000000380)) statx(r2, &(0x7f0000000480)='./file1\x00', 0x6000, 0x200, &(0x7f00000004c0)) acct(&(0x7f0000000600)='./file0\x00') ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000640)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) 8.733602937s ago: executing program 4 (id=2689): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002cc0)={0x2020}, 0x2020) 8.523636364s ago: executing program 4 (id=2691): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x0, 0x42, 0x81, 0x1}, {0xfffa, 0x6, 0x7, 0x8}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) setreuid(0xee00, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x2000, 0x4, 0x0) getcwd(0x0, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000000000086a05ba9b0000000000010902240005000000050904000c010300000009210200"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) shutdown(r0, 0x1) 6.589345973s ago: executing program 2 (id=2696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000018c0)={0x1c, 0x6, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x8cffffff, 'veth0_vlan\x00', {0x2}, 0x5}) 6.439545507s ago: executing program 4 (id=2698): open(0x0, 0x16b442, 0xa9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) getpid() r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x10000a0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_usb_connect$cdc_ecm(0x3, 0xa1, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x1, 0x1, 0x6, 0x0, 0x99, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x40, {{0xa, 0x24, 0x6, 0x0, 0x0, "845ad5d5e8"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xfff, 0x8, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x100}, @country_functional={0xc, 0x24, 0x7, 0xc8, 0xac6, [0xff3f, 0x6, 0xb]}, @mdlm={0x15, 0x24, 0x12, 0x94ee}, @obex={0x5, 0x24, 0x15, 0xce9b}, @ncm={0x6, 0x24, 0x1a, 0xa1f, 0x10}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x97}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7f, 0xc, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xc, 0x9, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x10}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x2, 0x8, 0x80, 0x8, 0xfa}, 0x5c, &(0x7f0000000140)={0x5, 0xf, 0x5c, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x10, "7ae1c168ec64b7e2feccaa853dd336d5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x6, 0x6, 0x6cd}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x3, 0xe, 0x8}, @ptm_cap={0x3}, @generic={0x28, 0x10, 0x0, "28c65471ef0b6fbebfdcff6fd14dca1accbc217e093a428914bb91b726c536807579b9b92a"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x0, 0xf, 0x5}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x240a}}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) socket$alg(0x26, 0x5, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x40, 0xe, 0x9, {0x9, 0x23, "8814aaefa57f79"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000400)={0x20, 0x6, 0x68, "ab85fb7d769ea1a84cb20eeeb465d470dee788ed184262cf8829d7ab0f9b68808a1587e52f36d37d624d20c75c5487fe66418ea76a5d737a7cecc141446ad7f91a86b96c857f66325f24ad83e1e294e4a4ee560a4625577a3ae1ef61032f789039427a7fcf50ce67"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) 6.412602549s ago: executing program 2 (id=2700): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, &(0x7f0000000040)=0x80000) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = syz_open_dev$mouse(0x0, 0x2, 0x8001) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000100)=0x1, 0x4) r2 = openat2(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40, 0x6, 0x3}, 0x18) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f00000001c0)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000280)=0x30) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)) statx(r2, &(0x7f0000000340)='./file0\x00', 0x800, 0x400, &(0x7f0000000380)) statx(r2, &(0x7f0000000480)='./file1\x00', 0x6000, 0x200, &(0x7f00000004c0)) acct(&(0x7f0000000600)='./file0\x00') ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000640)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) 6.380991263s ago: executing program 2 (id=2701): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000001c0)={&(0x7f0000000000)=[{0x1, 0x8000, 0x0, 0x0}, {0x7, 0x1000, 0x0, 0x0}], 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000001040)=@known='system.sockprotoname\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) 4.906078027s ago: executing program 3 (id=2705): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) getdents64(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, 0x0, 0x25, 0x5, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001680)=ANY=[@ANYBLOB="e00000001300010028bd7000ffdbdf25647262675f6e6f70725f686d61635f736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140001000400"/224], 0xe0}, 0x1, 0x0, 0x0, 0x5}, 0x4004084) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.90665124s ago: executing program 3 (id=2706): socket(0x10, 0x803, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000240)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x113c}}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x3ff) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000280)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x20000, 0x0, 0x2}, 0x18) sendfile(r6, r6, 0x0, 0x200000) socket$unix(0x1, 0x1, 0x0) 3.583013166s ago: executing program 4 (id=2707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000500)={r1, 0x7, 0x80000000, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x5c, r7, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4c}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xf}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc004000}, 0x4000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) r9 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) poll(&(0x7f00000000c0)=[{r9, 0xe7d4c009da6c1985}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 3.296061792s ago: executing program 2 (id=2708): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000180)={@broadcast, @broadcast, r3}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000100"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000740)="ff00006090bd1088ecee67eaf477a54f60bc08d3300a4ef0370c668561af00ebc5dc7da0155328013f7a2e9ac7b6875a1f86d999405e98f8b2edf5602963613a0ad615ed6f58c5623699b840c48a13e4d67cec4d700ddf1fe0f72a76090b99effb19f6944be411c714d7570d5026a569829000ba9fae9272484913e1cc7e35989f4f0e7bef94e0ee0b97a06683a5e8c996f5496677df36273d37f352d39f139c74e3bf21ef1526141fe4de01fd587dafa9d8f0beceabf1970904a66ae7519c32737ca9ec0866d749fcfb127e1e9cdce28962ffb7c75432ecdce8f5b0c0745ab7552c1ea22fc0587fffc6bf680ced430461d794679c44c73a5fbfb422dafbda1b5a1853e145b1e8b5b8d2b655d4c5926d2f071a639e7d8a5787fa3eb8a0416186df0cfe850eb727d8e70dcfdfa73d5bc2775427bd1207bbcd91dd4282bf930899b4c52e", &(0x7f0000000400)="8e96d0312e733e85e552f2e37ad69082a3bede3431a5123ee8a610081e31cc04306ae2618e87b85cb7601d2e8474290e3cd9fef613c1781857a6d058b37d97f6475c", 0x6, r9, 0x4}, 0x38) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r5, 0x8008ae9d, &(0x7f0000000240)) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x590, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_procfs(0x0, &(0x7f0000000040)='children\x00') syz_pidfd_open(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) 3.134411841s ago: executing program 5 (id=2709): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000000140)={0x0, 0xffffffffffffff60, 0x6}) io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0x653f, 0x10000, 0x0, 0x28e}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000000)={0x1d, r4}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00fb450bd158e2c667377b29c3d2005e12210cc4d4da7ce52fb5acfedb0e7073f8b15f977dba07e3292461401d6a7151d686d290d22c3748cc796349d5defbf41f93ed0000"], 0x45, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x8084}, 0x4004) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 2.77135393s ago: executing program 6 (id=2710): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x33, 0xfffffffe) 2.701057434s ago: executing program 5 (id=2711): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, &(0x7f0000000040)=0x80000) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = syz_open_dev$mouse(0x0, 0x2, 0x8001) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000100)=0x1, 0x4) r2 = openat2(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40, 0x6, 0x3}, 0x18) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f00000001c0)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000280)=0x30) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)) statx(r2, &(0x7f0000000340)='./file0\x00', 0x800, 0x400, &(0x7f0000000380)) statx(r2, &(0x7f0000000480)='./file1\x00', 0x6000, 0x200, &(0x7f00000004c0)) acct(&(0x7f0000000600)='./file0\x00') ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000640)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) 2.633059284s ago: executing program 5 (id=2712): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={0x0, 0x48}, 0x1, 0x400000000000000}, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) read$FUSE(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x3ff, 0xfffffff7, 0x6, 0x40, 0x12, 0x1}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x1c, 0x38, 0x825, 0x70bd2b, 0x25dfdbfb, {0x14}, [@nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4054}, 0x40010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x16, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x0, 0x0, 0x1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}}, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004800)={0x18, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x4, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x48045) futex(&(0x7f0000000300), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0xa000000, 0x8000300) 2.551411557s ago: executing program 6 (id=2713): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 2.456788815s ago: executing program 6 (id=2714): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, &(0x7f0000000040)) 2.127549426s ago: executing program 3 (id=2715): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x44811}, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) 2.063186395s ago: executing program 4 (id=2716): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0xd64}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xfff, 0x4b, 0x8006}, 'syz0\x00', 0x11}) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000004099b8f276dc75584a8d87d907005858367d61f49e1639a48f614a54a8192c2876b7f843cd3a3c07288fa0f1e28983b5cdc2e29b6e", 0x3c, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r6 = dup3(r5, r4, 0x80000) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {0x7, 0xbcd, 0xff, 0xfffb}, 0x46, [0x234287ce, 0x8, 0x3, 0x3, 0x8, 0x1004, 0x7, 0x4, 0x2, 0x7, 0x1, 0xf, 0x6, 0x194, 0x2, 0x0, 0xfffffff7, 0x5, 0x7fff, 0x4, 0x2, 0xf, 0x6174, 0x1, 0x4f0, 0x8, 0x5, 0x80000000, 0xc7, 0x401, 0x7, 0x77c, 0x4, 0x5, 0x6, 0x1, 0xa, 0xffffff00, 0xdd0, 0x2, 0xfffffc01, 0xfff, 0x0, 0x105, 0x6, 0x4, 0x6, 0x7, 0x1, 0x5, 0x7e7, 0x5c, 0x3, 0x2, 0x4, 0x7f, 0x7, 0x0, 0x0, 0x7, 0x79, 0x80000000, 0x8, 0x1c3], [0x8, 0x2, 0x4, 0x7, 0x7ff, 0x9, 0x0, 0xd, 0x3, 0x10001, 0x5, 0x6, 0xa, 0x400, 0x800, 0xf3, 0xffff, 0x8, 0xffffffff, 0x81, 0x573, 0xfffffffd, 0x9dc, 0x8, 0x7fff, 0x9, 0xe829, 0x4, 0x1, 0x8, 0xfffffffb, 0x9, 0x101, 0xfff, 0x9, 0x1, 0x8001, 0xa, 0x0, 0x8001, 0xffff, 0x5, 0x6, 0xfffffffc, 0x3, 0x0, 0x489e, 0x5f, 0x800, 0x2, 0x8, 0x6, 0x8a0, 0xfffffffa, 0x6, 0x800, 0x5, 0x9, 0x1, 0x5, 0x6, 0x4, 0x400, 0x1ff], [0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0xb, 0x8000, 0x2, 0x9, 0x9d, 0xfffff9ee, 0x3, 0x1, 0xbbf0, 0x3, 0x7, 0xffffffff, 0x0, 0x6, 0x7, 0xc860, 0xff, 0x9, 0x8, 0x8, 0x7fff, 0x3ff, 0xd, 0x6, 0x0, 0x4, 0x401, 0x3, 0x9, 0xe4, 0x6, 0x9, 0x8, 0x2, 0x0, 0x2, 0x8, 0x4, 0x5, 0x2, 0x1, 0x6, 0x1, 0xffffff80, 0x3ff, 0x2, 0x2, 0x800, 0x8, 0x0, 0x101, 0x6, 0xc09, 0x3, 0x5, 0x8, 0x9fe8, 0x2], [0x6, 0x7, 0x401, 0x5, 0x81, 0x7, 0x9, 0x8, 0x8, 0x101, 0x73f, 0x4, 0x10001, 0x863, 0x0, 0xd, 0x80000001, 0x800, 0x7, 0x9, 0x5a4, 0x2, 0x0, 0x6, 0x7, 0xfffffffe, 0x6, 0x80000001, 0x59, 0x7fffffff, 0x9, 0x6, 0x7, 0x4, 0x5, 0xfffffffb, 0x5, 0x9, 0x3, 0x0, 0x80, 0x100, 0x7fff, 0x6, 0x0, 0x19e, 0x1, 0xa0, 0x1, 0x8, 0xab6, 0x2, 0x7, 0x1, 0x72205ea6, 0x8, 0x9, 0x8, 0x4, 0x7ff, 0x0, 0x7fffffff, 0x8, 0x80000000]}, 0x45c) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x1c, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x8000) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) r8 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000240)="cc3a", 0x2}], 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=@newtfilter={0x48, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x48}}, 0x48c0) recvmmsg(r6, &(0x7f0000003bc0)=[{{&(0x7f0000000100)=@phonet, 0x80, &(0x7f0000000080)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1}, 0x80000000}, {{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000940)=""/229, 0xe5}], 0x2, &(0x7f0000000a40)=""/156, 0x9c}, 0xa}, {{&(0x7f0000000b00)=@nl, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b80)=""/14, 0xe}, {&(0x7f0000000bc0)=""/55, 0x37}], 0x2}, 0x9}, {{&(0x7f0000000c40)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001040)=[{&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/102, 0x66}, {&(0x7f0000000d40)=""/138, 0x8a}, {&(0x7f0000000e00)=""/248, 0xf8}, {&(0x7f0000000f00)=""/24, 0x18}, {&(0x7f0000000f40)=""/158, 0x9e}], 0x6, &(0x7f00000010c0)=""/108, 0x6c}, 0x723}, {{&(0x7f0000001140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001640)=[{&(0x7f00000011c0)=""/191, 0xbf}, {&(0x7f0000001280)=""/184, 0xb8}, {&(0x7f0000001340)=""/105, 0x69}, {&(0x7f00000013c0)=""/180, 0xb4}, {&(0x7f00000014c0)=""/125, 0x7d}, {&(0x7f0000001540)=""/131, 0x83}, {&(0x7f0000001600)=""/45, 0x2d}], 0x7, &(0x7f00000016c0)=""/45, 0x2d}, 0x10001}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/16, 0x10}, {&(0x7f0000001740)=""/35, 0x23}, {&(0x7f0000003880)=""/164, 0xa4}], 0x3, &(0x7f0000003940)=""/199, 0xc7}, 0x18000000}, {{&(0x7f0000003a40)=@ethernet={0x0, @random}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000003ac0)=""/202, 0xca}], 0x1}, 0x6}], 0x7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.057394613s ago: executing program 3 (id=2717): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) getdents64(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, 0x0, 0x25, 0x5, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001680)=ANY=[@ANYBLOB="e00000001300010028bd7000ffdbdf25647262675f6e6f70725f686d61635f736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140001000400"/224], 0xe0}, 0x1, 0x0, 0x0, 0x5}, 0x4004084) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.767592624s ago: executing program 2 (id=2718): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000000000000000000000000000000000010000000400000000020060802b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_connect(0x2, 0x3f0, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3ceb4a3a28d93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29bc61cf090aa1e112da07250101000300090507080800040406b505bce3"], 0x0) syz_usb_connect$sierra_net(0x4, 0x0, 0x0, 0x0) 1.322948626s ago: executing program 5 (id=2719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x8}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xb}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x174, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa395}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3bc1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x174}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.100122635s ago: executing program 3 (id=2720): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea0485"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000580)={0x201, 0x1, &(0x7f0000000180)=[r6], 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xffffffffffffffff}) connect$inet(r1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10) sendmsg$nl_route(r0, 0x0, 0x8000002) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a000100feffff040000004002000000000400000000000005001b00010000002e7728444c35168782039685dded057e00ffafd17916a5"], 0x24}}, 0x24008800) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @loopback, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x48) 1.068886576s ago: executing program 5 (id=2721): r0 = socket$netlink(0x10, 0x3, 0x4) socket(0x200000000000011, 0xa, 0x0) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (fail_nth: 2) 759.759568ms ago: executing program 6 (id=2722): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, &(0x7f0000000040)=0x80000) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2, 0x8001) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) r2 = openat2(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40, 0x6, 0x3}, 0x18) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f00000001c0)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000280)=0x30) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)) statx(r2, &(0x7f0000000340)='./file0\x00', 0x800, 0x400, &(0x7f0000000380)) statx(r2, &(0x7f0000000480)='./file1\x00', 0x6000, 0x200, &(0x7f00000004c0)) acct(&(0x7f0000000600)='./file0\x00') ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000640)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) 682.923566ms ago: executing program 5 (id=2723): r0 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2b, 0x1, 0x6, "3a8e00000000c20500ca55e23e00000020000000000000200000000000000700", 0x47314356}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000540)='syzkaller\x00'}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8931, &(0x7f0000000080)={'bond0\x00', @random="e700"}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000180)='%\x00\x00\x00\x00\r\xcc:', 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) 654.838923ms ago: executing program 6 (id=2724): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 6.415546ms ago: executing program 3 (id=2725): shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) getpgrp(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000040)={0x4, 0x7, 0x3}) sendmsg$nl_netfilter(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)={0x170, 0x6, 0x4, 0x5, 0x70bd28, 0x25dfdbfc, {0x5, 0x0, 0xa}, [@nested={0x9c, 0x4a, 0x0, 0x1, [@generic="3464d8060b2e2c177d6e6ed00eadbdb30a39b2a1dcd4f28c8863a46735e304ca6011707d77a241a25eddde6e26543b73da096900a0bccbf117b75175be243bbe6e606ab89fda555421ed67c4d6b48851004757ef2716268b5ee263ad3e4b28f3e6477d96d831b8b96b9219c1a1c895657b43f83bd0d393d3e57f070c3c68c37a6538", @generic="a8067a0d29cc51ad12f5340d07a1", @nested={0x4, 0x136}, @nested={0x4, 0x146}]}, @typed={0x14, 0x10f, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@remote}, @generic="18988d723169d0faef75d3d8f1c3bc6ce0aab3c9afc9d521e42737f4c0f9c0bcf07218e883a80cac3db6d3dc3fce09e15ad9fb5505dcff0063032b935abe2a3aa3db0be8b113e8bef4e531b0a15089c675e287af9112cb0978a34c1e36389174b968db0e61da229f2ab46f1384766efb1e6b609cbcdce65aa1b1a6cf", @typed={0x4, 0x135}, @nested={0x18, 0xc3, 0x0, 0x1, [@typed={0x8, 0xf7, 0x0, 0x0, @u32=0xff}, @typed={0x8, 0x3d, 0x0, 0x0, @pid}, @nested={0x4, 0x5d}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x200400d4}, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x5, 0x9, 0x4, 0x7f}]}) personality(0xfe47fef9f5ff7379) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0xb88}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x7a, 0x8}}}}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000440)=@string={0x2}}, {0x3c, &(0x7f0000000080)=ANY=[@ANYBLOB="3c03d9ff15d5daad8ef8201c37afd742849ddb4f9a3043bd34c300dbc9f4c2dc643db02f2df4c166b28d7d2d8355d8847d64ba6d23b119686336d7d831069f18f14149a243ee1cea3f1b0e5f24a0585b52a3b1f4df9d48d4f38e48865592e67b9e776cf1121e02e0fcd0a34170c6dd9f3e2a67604660b722b18937120f5e5e38921d583c1d"]}, {0x0, 0x0}, {0x0, 0x0}]}) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffd81b, 0x6b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4041}, 0x8040) 0s ago: executing program 6 (id=2726): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0412becb3d030100000000000000000800005d3a4bbaa31b865bd07e1e75f8912f"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): umber 0 [ 689.952751][ T5813] usb 7-1: config 0 descriptor?? [ 689.962038][T13855] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 689.974018][T13855] usb 5-1: config 0 interface 1 has no altsetting 0 [ 689.985965][T13855] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 690.004015][T13855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.013341][T13855] usb 5-1: Product: syz [ 690.020452][T13855] usb 5-1: Manufacturer: syz [ 690.025434][T13855] usb 5-1: SerialNumber: syz [ 690.042536][T13855] usb 5-1: config 0 descriptor?? [ 690.275810][T13855] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 690.296255][T13855] cx231xx 5-1:0.1: Failed to read PCB config [ 690.312432][T13855] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 690.334296][T13855] usb 5-1: USB disconnect, device number 99 [ 690.772834][T13905] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 691.543658][T13905] usb 5-1: Using ep0 maxpacket: 32 [ 691.570710][T13905] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 691.601902][T13905] usb 5-1: config 0 has no interface number 0 [ 691.642141][T13905] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 691.772807][ T5926] usb 7-1: USB disconnect, device number 2 [ 691.786083][T13905] usb 5-1: config 0 interface 1 has no altsetting 0 [ 691.870581][T14222] netlink: 'syz.6.2203': attribute type 5 has an invalid length. [ 691.874721][T13905] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 691.917925][T13905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.929126][T14222] FAULT_INJECTION: forcing a failure. [ 691.929126][T14222] name failslab, interval 1, probability 0, space 0, times 0 [ 691.940406][T13905] usb 5-1: Product: syz [ 691.971675][T13905] usb 5-1: Manufacturer: syz [ 691.989811][T14222] CPU: 0 UID: 0 PID: 14222 Comm: syz.6.2203 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.989836][T14222] Tainted: [L]=SOFTLOCKUP [ 691.989842][T14222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 691.989853][T14222] Call Trace: [ 691.989860][T14222] [ 691.989867][T14222] dump_stack_lvl+0x16c/0x1f0 [ 691.989895][T14222] should_fail_ex+0x512/0x640 [ 691.989919][T14222] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 691.989940][T14222] should_failslab+0xc2/0x120 [ 691.989962][T14222] kmem_cache_alloc_noprof+0x83/0x770 [ 691.989981][T14222] ? skb_clone+0x190/0x3f0 [ 691.990005][T14222] ? skb_clone+0x190/0x3f0 [ 691.990022][T14222] skb_clone+0x190/0x3f0 [ 691.990042][T14222] netlink_deliver_tap+0xabd/0xd30 [ 691.990070][T14222] netlink_unicast+0x71f/0x870 [ 691.990101][T14222] ? __pfx_netlink_unicast+0x10/0x10 [ 691.990121][T14222] ? __pfx_tc_ctl_action+0x10/0x10 [ 691.990148][T14222] netlink_ack+0x696/0xb80 [ 691.990178][T14222] netlink_rcv_skb+0x332/0x420 [ 691.990200][T14222] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 691.990223][T14222] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 691.990255][T14222] ? netlink_deliver_tap+0x1ae/0xd30 [ 691.990282][T14222] netlink_unicast+0x5aa/0x870 [ 691.990307][T14222] ? __pfx_netlink_unicast+0x10/0x10 [ 691.990340][T14222] netlink_sendmsg+0x8c8/0xdd0 [ 691.990366][T14222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.990398][T14222] ____sys_sendmsg+0xa5d/0xc30 [ 691.990423][T14222] ? copy_msghdr_from_user+0x10a/0x160 [ 691.990442][T14222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 691.990477][T14222] ___sys_sendmsg+0x134/0x1d0 [ 691.990497][T14222] ? __pfx____sys_sendmsg+0x10/0x10 [ 691.990547][T14222] __sys_sendmsg+0x16d/0x220 [ 691.990566][T14222] ? __pfx___sys_sendmsg+0x10/0x10 [ 691.990602][T14222] do_syscall_64+0xcd/0xf80 [ 691.990628][T14222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.990645][T14222] RIP: 0033:0x7f98feb8f749 [ 691.990659][T14222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.990674][T14222] RSP: 002b:00007f98ff9aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.990690][T14222] RAX: ffffffffffffffda RBX: 00007f98fede5fa0 RCX: 00007f98feb8f749 [ 691.990701][T14222] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 691.990711][T14222] RBP: 00007f98ff9aa090 R08: 0000000000000000 R09: 0000000000000000 [ 691.990721][T14222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.990731][T14222] R13: 00007f98fede6038 R14: 00007f98fede5fa0 R15: 00007ffc06d84008 [ 691.990756][T14222] [ 691.990787][T13905] usb 5-1: SerialNumber: syz [ 692.345150][T13905] usb 5-1: config 0 descriptor?? [ 692.444004][T13905] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 692.512267][T13905] cx231xx 5-1:0.1: Failed to read PCB config [ 692.524043][T13905] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 692.546577][T13905] usb 5-1: USB disconnect, device number 100 [ 692.562088][T14230] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 693.300815][T14242] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:194x2160 (0x33424752, 6, 0, 0, 0) [ 694.172883][ T30] audit: type=1400 audit(1768754460.597:1291): avc: denied { open } for pid=14227 comm="syz.6.2206" path="/dev/ttyr1" dev="devtmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 694.379098][T14251] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 694.566388][ T30] audit: type=1400 audit(1768754460.997:1292): avc: denied { read } for pid=14253 comm="syz.3.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 695.845584][T14289] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 696.152868][ T5813] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 696.157162][ T5928] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 696.229219][T14293] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2222'. [ 696.327302][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 696.352085][ T5813] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 696.366623][ T5813] usb 4-1: config 0 has no interface number 0 [ 696.380306][ T5813] usb 4-1: config 0 interface 184 has no altsetting 0 [ 696.389357][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.410868][ T5928] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 696.431118][ T5813] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 696.440778][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.451045][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.465525][ T5813] usb 4-1: Product: syz [ 696.474986][ T5813] usb 4-1: Manufacturer: syz [ 696.484371][ T5813] usb 4-1: SerialNumber: syz [ 696.508018][ T5928] usb 3-1: config 0 descriptor?? [ 696.512609][ T5813] usb 4-1: config 0 descriptor?? [ 696.543275][ T5813] smsc75xx v1.0.0 [ 696.620677][ T5928] pwc: Askey VC010 type 2 USB webcam detected. [ 696.718802][T14304] FAULT_INJECTION: forcing a failure. [ 696.718802][T14304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.740600][T14304] CPU: 1 UID: 0 PID: 14304 Comm: syz.4.2230 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.740628][T14304] Tainted: [L]=SOFTLOCKUP [ 696.740634][T14304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 696.740644][T14304] Call Trace: [ 696.740651][T14304] [ 696.740658][T14304] dump_stack_lvl+0x16c/0x1f0 [ 696.740687][T14304] should_fail_ex+0x512/0x640 [ 696.740716][T14304] _copy_from_iter+0x2a4/0x16c0 [ 696.740745][T14304] ? __alloc_skb+0x220/0x410 [ 696.740761][T14304] ? __alloc_skb+0x35d/0x410 [ 696.740776][T14304] ? __pfx__copy_from_iter+0x10/0x10 [ 696.740802][T14304] ? netlink_autobind.isra.0+0x158/0x370 [ 696.740834][T14304] netlink_sendmsg+0x820/0xdd0 [ 696.740860][T14304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.740890][T14304] ____sys_sendmsg+0xa5d/0xc30 [ 696.740915][T14304] ? copy_msghdr_from_user+0x10a/0x160 [ 696.740933][T14304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 696.740968][T14304] ___sys_sendmsg+0x134/0x1d0 [ 696.740986][T14304] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.741044][T14304] __sys_sendmsg+0x16d/0x220 [ 696.741064][T14304] ? __pfx___sys_sendmsg+0x10/0x10 [ 696.741099][T14304] do_syscall_64+0xcd/0xf80 [ 696.741124][T14304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.741140][T14304] RIP: 0033:0x7fcb5a38f749 [ 696.741154][T14304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.741170][T14304] RSP: 002b:00007fcb5b201038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.741187][T14304] RAX: ffffffffffffffda RBX: 00007fcb5a5e5fa0 RCX: 00007fcb5a38f749 [ 696.741198][T14304] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 696.741208][T14304] RBP: 00007fcb5b201090 R08: 0000000000000000 R09: 0000000000000000 [ 696.741218][T14304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.741228][T14304] R13: 00007fcb5a5e6038 R14: 00007fcb5a5e5fa0 R15: 00007ffea2328428 [ 696.741252][T14304] [ 698.289699][ T5928] pwc: recv_control_msg error -32 req 02 val 2b00 [ 698.318959][ T5928] pwc: recv_control_msg error -32 req 02 val 2700 [ 698.661567][T14311] overlayfs: missing 'lowerdir' [ 698.694974][T14311] input: syz0 as /devices/virtual/input/input56 [ 699.009240][ T5813] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 699.142320][T14316] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.345132][ T5813] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 700.354908][ T5813] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 700.370813][ T5813] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 700.396103][ T5813] usb 4-1: USB disconnect, device number 101 [ 700.592860][ T30] audit: type=1400 audit(1768754466.973:1293): avc: denied { getopt } for pid=14325 comm="syz.3.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 700.659730][ T5928] pwc: recv_control_msg error -71 req 02 val 2c00 [ 700.675334][ T5928] pwc: recv_control_msg error -71 req 04 val 1000 [ 700.685073][ T5928] pwc: recv_control_msg error -71 req 04 val 1300 [ 700.699936][ T5926] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 700.708831][ T5928] pwc: recv_control_msg error -71 req 04 val 1400 [ 700.716202][ T5928] pwc: recv_control_msg error -71 req 02 val 2000 [ 700.724830][ T5928] pwc: recv_control_msg error -71 req 02 val 2100 [ 700.737993][ T5928] pwc: recv_control_msg error -71 req 04 val 1500 [ 700.745126][ T6730] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 700.756948][ T5928] pwc: recv_control_msg error -71 req 02 val 2500 [ 700.764297][ T5928] pwc: recv_control_msg error -71 req 02 val 2400 [ 700.772139][ T5928] pwc: recv_control_msg error -71 req 02 val 2600 [ 700.785628][ T5928] pwc: recv_control_msg error -71 req 02 val 2900 [ 700.792698][ T5928] pwc: recv_control_msg error -71 req 02 val 2800 [ 700.799771][ T5928] pwc: recv_control_msg error -71 req 04 val 1100 [ 700.806912][ T5928] pwc: recv_control_msg error -71 req 04 val 1200 [ 700.851433][ T5926] usb 5-1: config 0 has no interfaces? [ 700.861595][ T5926] usb 5-1: New USB device found, idVendor=0582, idProduct=0052, bcdDevice=aa.06 [ 700.873845][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.884798][ T5928] pwc: Registered as video103. [ 700.902172][ T6730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 700.914171][ T6730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.928668][ T5928] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input57 [ 700.958305][ T5926] usb 5-1: Product: syz [ 700.966931][ T5926] usb 5-1: Manufacturer: syz [ 700.988589][ T6730] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 700.990014][ T30] audit: type=1400 audit(1768754467.393:1294): avc: denied { shutdown } for pid=14335 comm="syz.6.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 701.002117][ T5926] usb 5-1: SerialNumber: syz [ 701.043163][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2242'. [ 701.054651][ T5928] usb 3-1: USB disconnect, device number 90 [ 701.063433][ T6730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.093759][ T6730] usb 6-1: config 0 descriptor?? [ 701.128835][ T5926] usb 5-1: config 0 descriptor?? [ 701.206865][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b19e400: rx timeout, send abort [ 701.251634][ T30] audit: type=1400 audit(1768754467.653:1295): avc: denied { read } for pid=5168 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 701.351987][ T30] audit: type=1400 audit(1768754467.653:1296): avc: denied { search } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.375643][ T30] audit: type=1400 audit(1768754467.653:1297): avc: denied { search } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.402151][ T5926] usb 5-1: USB disconnect, device number 101 [ 701.451367][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2243'. [ 701.666148][ T5928] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 701.675250][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b19dc00: rx timeout, send abort [ 701.716397][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b19e400: abort rx timeout. Force session deactivation [ 701.778731][ T6730] usbhid 6-1:0.0: can't add hid device: -71 [ 702.046877][ T6730] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 702.060807][ T6730] usb 6-1: USB disconnect, device number 61 [ 702.073365][ T30] audit: type=1400 audit(1768754467.653:1298): avc: denied { add_name } for pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.183677][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b19dc00: abort rx timeout. Force session deactivation [ 702.200616][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 702.212936][ T5928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 702.232555][ T5928] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 702.235461][ T30] audit: type=1400 audit(1768754467.653:1299): avc: denied { create } for pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 702.263032][ T5928] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 702.288927][ T30] audit: type=1400 audit(1768754467.653:1300): avc: denied { append open } for pid=5168 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 702.352334][ T5928] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 702.354193][ T30] audit: type=1400 audit(1768754467.653:1301): avc: denied { getattr } for pid=5168 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 702.495032][ T30] audit: type=1400 audit(1768754467.763:1302): avc: denied { bind } for pid=14345 comm="syz.3.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 702.505157][ T5928] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 703.226667][ T5928] usb 3-1: config 1 interface 0 has no altsetting 0 [ 703.241106][ T5928] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 703.286624][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.322823][ T5928] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 703.341897][ T6730] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 703.377927][T14373] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2247'. [ 703.504820][ T6730] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 703.518399][T14375] fuse: Bad value for 'fd' [ 703.545196][ T6730] usb 7-1: language id specifier not provided by device, defaulting to English [ 703.952949][ T6730] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.40 [ 704.083297][ T6730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.091501][ T5928] scsi host1: usb-storage 3-1:1.0 [ 704.116728][ T6730] usb 7-1: Manufacturer: ￙픕귚ᰠ꼷䋗鶄俛゚뵃쌴㵤⾰曁趲⵽喃蓘摽涺넣栙㙣 [ 704.163354][T14366] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 704.243804][ T5876] usb 3-1: USB disconnect, device number 91 [ 704.437784][ T5137] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 705.384492][T14397] syz_tun: entered allmulticast mode [ 705.475024][ T6730] usbhid 7-1:1.0: can't add hid device: -71 [ 705.480996][ T6730] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 705.564173][ T6730] usb 7-1: USB disconnect, device number 3 [ 705.768603][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2254'. [ 706.336044][T14402] lo speed is unknown, defaulting to 1000 [ 706.745829][T14416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2257'. [ 707.551345][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 707.551386][ T30] audit: type=1400 audit(1768754473.960:1304): avc: denied { name_bind } for pid=14421 comm="syz.2.2259" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 707.589932][T14415] ip6erspan0: entered promiscuous mode [ 707.690813][ T5137] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 710.045927][T14448] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 710.555451][T14463] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 710.707888][ T30] audit: type=1400 audit(1768754477.129:1305): avc: denied { listen } for pid=14470 comm="syz.4.2272" lport=37830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 710.791531][ T30] audit: type=1400 audit(1768754477.149:1306): avc: denied { getopt } for pid=14470 comm="syz.4.2272" lport=37830 faddr=255.255.255.254 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 711.530736][T13906] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 712.499506][T14502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=14502 comm=syz.2.2281 [ 712.563227][T13906] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 712.571706][T13906] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 712.581473][T13906] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 712.592016][T13906] usb 6-1: config 220 has no interface number 2 [ 712.598360][T13906] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 712.611862][T13906] usb 6-1: config 220 interface 0 has no altsetting 0 [ 712.642337][T13906] usb 6-1: config 220 interface 76 has no altsetting 0 [ 712.662449][T13906] usb 6-1: config 220 interface 1 has no altsetting 0 [ 712.680217][T13906] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 712.723555][T13906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.751712][T13906] usb 6-1: Product: syz [ 712.764210][T13906] usb 6-1: Manufacturer: syz [ 712.779429][T13906] usb 6-1: SerialNumber: syz [ 712.884300][ T6730] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 713.088142][ T6730] usb 7-1: Using ep0 maxpacket: 16 [ 713.651523][T13906] usb 6-1: selecting invalid altsetting 0 [ 713.656244][ T6730] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.658730][T13906] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 713.723442][T13906] uvcvideo 6-1:220.0: No valid video chain found. [ 713.741336][T13906] usb 6-1: selecting invalid altsetting 0 [ 713.747757][T13906] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 713.761399][T13906] usb 6-1: USB disconnect, device number 62 [ 713.774538][ T6730] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 713.805435][ T6730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.832110][ T6730] usb 7-1: config 0 descriptor?? [ 714.034565][T14525] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 714.168902][ T6730] usbhid 7-1:0.0: can't add hid device: -71 [ 714.173232][T14531] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 714.186723][ T6730] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 714.198417][T14531] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 714.201224][ T6730] usb 7-1: USB disconnect, device number 4 [ 714.484625][ T5928] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 714.507743][ T30] audit: type=1400 audit(1768754480.919:1307): avc: denied { connect } for pid=14535 comm="syz.5.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 714.945072][ T5928] usb 3-1: device descriptor read/64, error -71 [ 715.265109][ T5928] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 715.424792][ T5928] usb 3-1: device descriptor read/64, error -71 [ 715.514811][ T6730] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 715.535234][ T5928] usb usb3-port1: attempt power cycle [ 716.097311][T14555] No control pipe specified [ 716.103458][ T30] audit: type=1400 audit(1768754482.508:1308): avc: denied { map } for pid=14551 comm="syz.3.2297" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 716.131882][ T6730] usb 7-1: config 0 has an invalid interface number: 168 but max is 0 [ 716.185240][ T30] audit: type=1400 audit(1768754482.508:1309): avc: denied { execute } for pid=14551 comm="syz.3.2297" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 716.210236][ T5928] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 716.228478][ T6730] usb 7-1: config 0 has no interface number 0 [ 716.235938][ T6730] usb 7-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 716.246510][ T5928] usb 3-1: device descriptor read/8, error -71 [ 716.259298][ T6730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.270626][ T6730] usb 7-1: config 0 descriptor?? [ 716.493549][ T5137] Bluetooth: hci2: adv larger than maximum supported [ 716.493596][ T5137] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 716.503699][ T30] audit: type=1400 audit(1768754482.918:1310): avc: denied { mounton } for pid=14559 comm="syz.5.2299" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 716.503831][T14562] Invalid source name [ 716.535069][ T5137] Bluetooth: hci2: Malformed LE Event: 0x0d [ 716.538908][T14562] UBIFS error (pid: 14562): cannot open "/dev/sg0", error -22 [ 716.539321][ T6730] usb 7-1: string descriptor 0 read error: -71 [ 716.597087][ T6730] usb-storage 7-1:0.168: USB Mass Storage device detected [ 716.615018][ T5928] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 716.632939][ T6730] usb-storage 7-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 716.645713][ T5928] usb 3-1: device descriptor read/8, error -71 [ 716.691692][ T6730] usb 7-1: USB disconnect, device number 5 [ 716.775200][ T5928] usb usb3-port1: unable to enumerate USB device [ 716.905053][T13855] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 717.046717][T13855] usb 5-1: device descriptor read/64, error -71 [ 717.384353][T13855] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 717.411238][ T30] audit: type=1400 audit(1768754483.830:1311): avc: denied { map } for pid=14573 comm="syz.2.2302" path="socket:[49322]" dev="sockfs" ino=49322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 717.976634][ T30] audit: type=1400 audit(1768754483.830:1312): avc: denied { accept } for pid=14573 comm="syz.2.2302" path="socket:[49322]" dev="sockfs" ino=49322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 718.035125][T13855] usb 5-1: device descriptor read/64, error -71 [ 718.152389][T13855] usb usb5-port1: attempt power cycle [ 718.805636][ T5137] Bluetooth: hci2: link tx timeout [ 718.811659][ T5137] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 718.833207][ T30] audit: type=1400 audit(1768754485.250:1313): avc: denied { ioctl } for pid=14580 comm="syz.6.2304" path="socket:[50201]" dev="sockfs" ino=50201 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 718.878323][ T30] audit: type=1400 audit(1768754485.250:1314): avc: denied { ioctl } for pid=14580 comm="syz.6.2304" path="socket:[50198]" dev="sockfs" ino=50198 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 718.911757][T13855] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 718.955804][T13855] usb 5-1: device descriptor read/8, error -71 [ 719.195143][T13855] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 719.272972][T13855] usb 5-1: device descriptor read/8, error -71 [ 719.415510][T13855] usb usb5-port1: unable to enumerate USB device [ 720.523153][T14607] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2307'. [ 720.581653][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2310'. [ 720.945237][ T5137] Bluetooth: hci2: command 0x0406 tx timeout [ 721.145155][T13855] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 721.412335][T13855] usb 5-1: Using ep0 maxpacket: 16 [ 721.432201][T13855] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 722.055613][T13855] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 722.067626][T13855] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 722.078131][T13855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 722.130842][T13855] usb 5-1: SerialNumber: syz [ 722.146758][T14603] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 722.154043][T14603] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 722.512613][T13855] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 722.543295][T13855] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 722.566056][T13855] usb 5-1: USB disconnect, device number 106 [ 723.667470][ T30] audit: type=1400 audit(1768754490.080:1315): avc: denied { read } for pid=14642 comm="syz.5.2319" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 723.725110][ T30] audit: type=1400 audit(1768754490.080:1316): avc: denied { open } for pid=14642 comm="syz.5.2319" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 723.792212][ T30] audit: type=1400 audit(1768754490.190:1317): avc: denied { setopt } for pid=14640 comm="syz.4.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 724.015207][T13855] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 724.220643][T13855] usb 4-1: config 0 has no interfaces? [ 724.270263][T13855] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 724.342459][T13855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.366244][T13855] usb 4-1: config 0 descriptor?? [ 724.580046][T14656] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2319'. [ 724.594776][T14654] fuse: Bad value for 'rootmode' [ 724.605552][ T5926] usb 4-1: USB disconnect, device number 102 [ 724.783277][T14654] team0: Port device team_slave_0 removed [ 726.239538][T14685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2330'. [ 726.993670][T14689] : renamed from wg2 (while UP) [ 727.119754][T14687] 9p: Bad value for 'rfdno' [ 728.411513][T14708] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 728.875390][ T5928] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 729.326005][ T5928] usb 7-1: Using ep0 maxpacket: 8 [ 729.339396][ T5928] usb 7-1: unable to get BOS descriptor or descriptor too short [ 729.363409][ T5928] usb 7-1: config 8 has an invalid interface number: 203 but max is 0 [ 730.357593][ T5928] usb 7-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 730.822709][ T5928] usb 7-1: config 8 has an invalid descriptor of length 94, skipping remainder of the config [ 730.984520][ T5928] usb 7-1: config 8 has no interface number 0 [ 731.008380][ T5928] usb 7-1: config 8 interface 203 has no altsetting 0 [ 731.956754][T14741] FAULT_INJECTION: forcing a failure. [ 731.956754][T14741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.018914][T14741] CPU: 1 UID: 0 PID: 14741 Comm: syz.4.2344 Tainted: G L syzkaller #0 PREEMPT(full) [ 732.018943][T14741] Tainted: [L]=SOFTLOCKUP [ 732.018950][T14741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 732.018960][T14741] Call Trace: [ 732.018967][T14741] [ 732.018974][T14741] dump_stack_lvl+0x16c/0x1f0 [ 732.019003][T14741] should_fail_ex+0x512/0x640 [ 732.019039][T14741] _copy_to_user+0x32/0xd0 [ 732.019068][T14741] simple_read_from_buffer+0xcb/0x170 [ 732.019094][T14741] proc_fail_nth_read+0x197/0x240 [ 732.019114][T14741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 732.019135][T14741] ? rw_verify_area+0xcf/0x6c0 [ 732.019154][T14741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 732.019173][T14741] vfs_read+0x1e4/0xcf0 [ 732.019195][T14741] ? __pfx___mutex_lock+0x10/0x10 [ 732.019221][T14741] ? __pfx_vfs_read+0x10/0x10 [ 732.019248][T14741] ? __fget_files+0x20e/0x3c0 [ 732.019281][T14741] ksys_read+0x12a/0x250 [ 732.019302][T14741] ? __pfx_ksys_read+0x10/0x10 [ 732.019324][T14741] ? fput+0x70/0xf0 [ 732.019343][T14741] do_syscall_64+0xcd/0xf80 [ 732.019370][T14741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.019388][T14741] RIP: 0033:0x7fcb5a38e15c [ 732.019403][T14741] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 732.019419][T14741] RSP: 002b:00007fcb5b201030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 732.019436][T14741] RAX: ffffffffffffffda RBX: 00007fcb5a5e5fa0 RCX: 00007fcb5a38e15c [ 732.019448][T14741] RDX: 000000000000000f RSI: 00007fcb5b2010a0 RDI: 0000000000000004 [ 732.019458][T14741] RBP: 00007fcb5b201090 R08: 0000000000000000 R09: 0000000000000000 [ 732.019469][T14741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.019478][T14741] R13: 00007fcb5a5e6038 R14: 00007fcb5a5e5fa0 R15: 00007ffea2328428 [ 732.019504][T14741] [ 732.394636][T14738] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 732.805343][T14752] binder: BINDER_SET_CONTEXT_MGR already set [ 732.818579][T14752] binder: 14747:14752 ioctl 4018620d 2000000000c0 returned -16 [ 732.836909][T14752] binder: 14747:14752 unknown command 0 [ 732.848673][T14752] binder: 14747:14752 ioctl c0306201 200000000080 returned -22 [ 732.871018][T14752] binder: BINDER_SET_CONTEXT_MGR already set [ 732.883239][T14752] binder: 14747:14752 ioctl 4018620d 200000001100 returned -16 [ 733.009216][ T5928] usb 7-1: string descriptor 0 read error: -71 [ 733.029145][ T5928] usb 7-1: New USB device found, idVendor=0c45, idProduct=6011, bcdDevice=e7.e6 [ 733.052652][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.131138][ T5928] usb 7-1: can't set config #8, error -71 [ 733.166813][ T5928] usb 7-1: USB disconnect, device number 6 [ 734.305115][ T6730] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 734.587438][ T6730] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 734.626023][ T6730] usb 6-1: language id specifier not provided by device, defaulting to English [ 734.653156][ T6730] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.40 [ 734.662353][ T6730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.670593][ T6730] usb 6-1: Manufacturer: ￙픕귚ᰠ꼷䋗鶄俛゚뵃쌴㵤⾰曁趲⵽喃蓘摽涺넣栙㙣 [ 734.693829][T14762] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 735.067533][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 735.160356][ T30] audit: type=1400 audit(1768754501.560:1318): avc: denied { name_bind } for pid=14776 comm="syz.3.2354" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 735.648390][T14769] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2351'. [ 735.805144][ T5926] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 735.975122][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 735.987423][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.017411][ T5926] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 736.053984][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.072210][T14786] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 736.090495][ T5926] usb 4-1: config 0 descriptor?? [ 736.461381][ T6730] usbhid 6-1:1.0: can't add hid device: -71 [ 736.485223][ T6730] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 736.532664][ T6730] usb 6-1: USB disconnect, device number 63 [ 736.579624][T14789] FAULT_INJECTION: forcing a failure. [ 736.579624][T14789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.621538][T14789] CPU: 0 UID: 0 PID: 14789 Comm: syz.5.2357 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.621565][T14789] Tainted: [L]=SOFTLOCKUP [ 736.621570][T14789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 736.621579][T14789] Call Trace: [ 736.621585][T14789] [ 736.621591][T14789] dump_stack_lvl+0x16c/0x1f0 [ 736.621616][T14789] should_fail_ex+0x512/0x640 [ 736.621637][T14789] _copy_to_user+0x32/0xd0 [ 736.621663][T14789] do_ip_getsockopt+0xb0a/0x2750 [ 736.621683][T14789] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 736.621705][T14789] ? find_held_lock+0x2b/0x80 [ 736.621727][T14789] ? avc_has_perm_noaudit+0x149/0x3b0 [ 736.621740][T14789] ? avc_has_perm+0x144/0x1f0 [ 736.621755][T14789] ? __pfx_avc_has_perm+0x10/0x10 [ 736.621767][T14789] ? __lock_acquire+0x436/0x2890 [ 736.621789][T14789] ip_getsockopt+0x9b/0x1e0 [ 736.621807][T14789] ? __pfx_ip_getsockopt+0x10/0x10 [ 736.621821][T14789] ? find_held_lock+0x2b/0x80 [ 736.621842][T14789] ? __might_fault+0xe3/0x190 [ 736.621857][T14789] ? __might_fault+0xe3/0x190 [ 736.621867][T14789] ? __might_fault+0x13b/0x190 [ 736.621879][T14789] tcp_getsockopt+0xa1/0x100 [ 736.621892][T14789] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 736.621906][T14789] do_sock_getsockopt+0x324/0x410 [ 736.621921][T14789] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 736.621939][T14789] ? __fget_files+0x204/0x3c0 [ 736.621972][T14789] __sys_getsockopt+0x12f/0x260 [ 736.621998][T14789] __x64_sys_getsockopt+0xbd/0x160 [ 736.622010][T14789] ? do_syscall_64+0x91/0xf80 [ 736.622024][T14789] ? lockdep_hardirqs_on+0x7c/0x110 [ 736.622038][T14789] do_syscall_64+0xcd/0xf80 [ 736.622053][T14789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.622063][T14789] RIP: 0033:0x7f777f38f749 [ 736.622076][T14789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.622092][T14789] RSP: 002b:00007f778026e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 736.622107][T14789] RAX: ffffffffffffffda RBX: 00007f777f5e6090 RCX: 00007f777f38f749 [ 736.622117][T14789] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 736.622126][T14789] RBP: 00007f778026e090 R08: 0000200000000240 R09: 0000000000000000 [ 736.622135][T14789] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 736.622144][T14789] R13: 00007f777f5e6128 R14: 00007f777f5e6090 R15: 00007ffeb7275e18 [ 736.622159][T14789] [ 736.646907][ T5926] mcp2221 0003:04D8:00DD.0037: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 736.911416][T14784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.921644][T14784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.054457][ T5926] usb 4-1: USB disconnect, device number 103 [ 737.368792][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2358'. [ 738.415892][T14811] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2362'. [ 739.143387][T14806] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 740.745707][T14834] FAULT_INJECTION: forcing a failure. [ 740.745707][T14834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.877700][T14834] CPU: 1 UID: 0 PID: 14834 Comm: syz.3.2368 Tainted: G L syzkaller #0 PREEMPT(full) [ 740.877733][T14834] Tainted: [L]=SOFTLOCKUP [ 740.877739][T14834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 740.877749][T14834] Call Trace: [ 740.877756][T14834] [ 740.877763][T14834] dump_stack_lvl+0x16c/0x1f0 [ 740.877793][T14834] should_fail_ex+0x512/0x640 [ 740.877823][T14834] _copy_from_user+0x2e/0xd0 [ 740.877850][T14834] video_usercopy+0xee2/0x16c0 [ 740.877874][T14834] ? __pfx___video_do_ioctl+0x10/0x10 [ 740.877895][T14834] ? selinux_kernel_read_file+0x100/0x120 [ 740.877919][T14834] ? __pfx_video_usercopy+0x10/0x10 [ 740.877958][T14834] v4l2_ioctl+0x1bd/0x250 [ 740.877978][T14834] ? __pfx_v4l2_ioctl+0x10/0x10 [ 740.878005][T14834] __x64_sys_ioctl+0x18e/0x210 [ 740.878029][T14834] do_syscall_64+0xcd/0xf80 [ 740.878055][T14834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.878072][T14834] RIP: 0033:0x7fedf998f749 [ 740.878086][T14834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.878102][T14834] RSP: 002b:00007fedfa8cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 740.878119][T14834] RAX: ffffffffffffffda RBX: 00007fedf9be5fa0 RCX: 00007fedf998f749 [ 740.878130][T14834] RDX: 0000200000001340 RSI: 00000000c058565d RDI: 0000000000000004 [ 740.878141][T14834] RBP: 00007fedfa8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 740.878151][T14834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.878161][T14834] R13: 00007fedf9be6038 R14: 00007fedf9be5fa0 R15: 00007ffefc0ec898 [ 740.878186][T14834] [ 741.106072][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2367'. [ 741.596228][T14837] vivid-003: kernel_thread() failed [ 741.807695][T14850] loop4: detected capacity change from 0 to 524288000 [ 741.857413][T14853] fuse: Unknown parameter 'user_i00000000000000000000' [ 741.875265][T14850] Invalid logical block size (6) [ 741.970514][T14851] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 742.633962][T14864] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 742.919515][ T30] audit: type=1400 audit(1768754509.340:1319): avc: denied { ioctl } for pid=14865 comm="syz.3.2374" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 742.994339][T14876] x_tables: duplicate underflow at hook 1 [ 743.295168][ T5926] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 743.302774][ T79] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 743.342875][T14889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2379'. [ 743.465157][ T5926] usb 7-1: Using ep0 maxpacket: 32 [ 743.484808][ T79] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 743.533868][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 743.576888][ T79] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 743.634270][ T5926] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 743.680704][ T79] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 743.707196][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.844114][ T5926] usb 7-1: Product: syz [ 743.848641][ T5926] usb 7-1: Manufacturer: syz [ 743.854563][ T79] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 743.866639][ T5926] usb 7-1: SerialNumber: syz [ 743.872168][ T79] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.882208][ T5926] usb 7-1: config 0 descriptor?? [ 743.895744][ T79] usb 6-1: Product: syz [ 743.899905][ T79] usb 6-1: Manufacturer: syz [ 743.904492][ T79] usb 6-1: SerialNumber: syz [ 743.914423][ T5926] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input58 [ 743.922493][T14895] vivid-002: disconnect [ 743.943309][ T79] usb 6-1: config 0 descriptor?? [ 743.969147][T14872] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 743.989228][T14872] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 744.027035][ T79] usb 6-1: ucan: probing device on interface #0 [ 744.049339][T14895] vivid-002: reconnect [ 744.112054][ T5813] usb 7-1: USB disconnect, device number 7 [ 744.123071][T14900] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2380'. [ 744.344503][T14907] fuse: Unknown parameter 'user_i00000000000000000000' [ 744.668988][ T79] ucan 6-1:0.0 can0: registered device [ 744.695157][ T5813] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 745.261312][ T79] ucan 6-1:0.0 can0: firmware string: J: [ 745.326821][ T5813] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 745.338020][ T5813] usb 7-1: config 8 has no interface number 0 [ 745.350792][ T5813] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 745.373309][ T5813] usb 7-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 745.489161][ T79] usb 6-1: USB disconnect, device number 64 [ 745.537130][ T5813] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 745.568437][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.598732][ T5813] usb 7-1: Product: syz [ 745.602897][ T5813] usb 7-1: Manufacturer: syz [ 745.627479][ T5813] usb 7-1: SerialNumber: syz [ 745.877526][ T5813] usb 7-1: USB disconnect, device number 8 [ 746.215798][T14938] bridge0: port 3(syz_tun) entered blocking state [ 746.241096][T14938] bridge0: port 3(syz_tun) entered disabled state [ 746.261567][T14938] syz_tun: entered allmulticast mode [ 746.271160][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2388'. [ 746.284368][T14938] syz_tun: entered promiscuous mode [ 746.307400][T14938] bridge0: port 3(syz_tun) entered blocking state [ 746.314225][T14938] bridge0: port 3(syz_tun) entered forwarding state [ 746.370249][T14940] bridge0: port 3(syz_tun) entered disabled state [ 746.477988][T14940] syz_tun (unregistering): left allmulticast mode [ 746.516323][T14940] syz_tun (unregistering): left promiscuous mode [ 746.522854][T14940] bridge0: port 3(syz_tun) entered disabled state [ 746.613039][T14946] loop4: detected capacity change from 0 to 524288000 [ 746.711515][T14946] Invalid logical block size (6) [ 746.925096][T13855] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 746.966570][ T5137] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 747.125107][T13855] usb 4-1: Using ep0 maxpacket: 16 [ 747.150568][T13855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.194651][T13855] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 747.207717][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.213992][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.249436][T13855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.275838][T13855] usb 4-1: Product: syz [ 747.285625][T13855] usb 4-1: Manufacturer: syz [ 747.300961][T13855] usb 4-1: SerialNumber: syz [ 747.311896][T13855] usb 4-1: config 0 descriptor?? [ 747.320464][T13855] usb 4-1: selecting invalid altsetting 1 [ 747.328173][T13855] usb 4-1: Can not set alternate setting to 1, error: -22 [ 747.335511][T13855] synaptics_usb 4-1:0.0: probe with driver synaptics_usb failed with error -22 [ 747.548534][T14965] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2391'. [ 747.858775][T14971] FAULT_INJECTION: forcing a failure. [ 747.858775][T14971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.872158][ T5926] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 747.881093][ T30] audit: type=1400 audit(1768754514.300:1320): avc: denied { write } for pid=14967 comm="syz.6.2392" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 747.908381][T14971] CPU: 1 UID: 0 PID: 14971 Comm: syz.4.2393 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.908408][T14971] Tainted: [L]=SOFTLOCKUP [ 747.908413][T14971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 747.908424][T14971] Call Trace: [ 747.908430][T14971] [ 747.908437][T14971] dump_stack_lvl+0x16c/0x1f0 [ 747.908464][T14971] should_fail_ex+0x512/0x640 [ 747.908494][T14971] _copy_from_iter+0x2a4/0x16c0 [ 747.908524][T14971] ? __alloc_skb+0x220/0x410 [ 747.908540][T14971] ? __alloc_skb+0x35d/0x410 [ 747.908556][T14971] ? __pfx__copy_from_iter+0x10/0x10 [ 747.908582][T14971] ? netlink_autobind.isra.0+0x158/0x370 [ 747.908613][T14971] netlink_sendmsg+0x820/0xdd0 [ 747.908640][T14971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.908672][T14971] ____sys_sendmsg+0xa5d/0xc30 [ 747.908696][T14971] ? copy_msghdr_from_user+0x10a/0x160 [ 747.908715][T14971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.908749][T14971] ___sys_sendmsg+0x134/0x1d0 [ 747.908770][T14971] ? __pfx____sys_sendmsg+0x10/0x10 [ 747.908820][T14971] __sys_sendmsg+0x16d/0x220 [ 747.908839][T14971] ? __pfx___sys_sendmsg+0x10/0x10 [ 747.908875][T14971] do_syscall_64+0xcd/0xf80 [ 747.908900][T14971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.908917][T14971] RIP: 0033:0x7fcb5a38f749 [ 747.908939][T14971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.908954][T14971] RSP: 002b:00007fcb5b201038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.908972][T14971] RAX: ffffffffffffffda RBX: 00007fcb5a5e5fa0 RCX: 00007fcb5a38f749 [ 747.908983][T14971] RDX: 0000000004040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 747.908993][T14971] RBP: 00007fcb5b201090 R08: 0000000000000000 R09: 0000000000000000 [ 747.909003][T14971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.909012][T14971] R13: 00007fcb5a5e6038 R14: 00007fcb5a5e5fa0 R15: 00007ffea2328428 [ 747.909037][T14971] [ 747.914860][T14969] geneve2: entered promiscuous mode [ 748.056504][ T5926] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 748.061326][T14969] geneve2: entered allmulticast mode [ 748.070814][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 748.162225][T14975] fuse: Unknown parameter 'user_i00000000000000000000' [ 748.182493][ T5926] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 748.206308][ T5926] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 748.215849][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.240359][ T5926] usb 6-1: Product: syz [ 748.251935][ T5926] usb 6-1: Manufacturer: syz [ 748.262855][ T5926] usb 6-1: SerialNumber: syz [ 748.278828][ T5926] usb 6-1: config 0 descriptor?? [ 748.287171][T14965] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 749.057938][ T30] audit: type=1400 audit(1768754515.460:1321): avc: denied { read write } for pid=14981 comm="syz.2.2396" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 749.081026][ T30] audit: type=1400 audit(1768754515.470:1322): avc: denied { open } for pid=14981 comm="syz.2.2396" path="/460/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 749.111238][ T5926] usb 6-1: USB disconnect, device number 65 [ 749.671673][T14994] lo speed is unknown, defaulting to 1000 [ 749.697819][T13855] usb 4-1: USB disconnect, device number 104 [ 750.542933][T15006] FAULT_INJECTION: forcing a failure. [ 750.542933][T15006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.560215][T15006] CPU: 1 UID: 0 PID: 15006 Comm: syz.2.2402 Tainted: G L syzkaller #0 PREEMPT(full) [ 750.560242][T15006] Tainted: [L]=SOFTLOCKUP [ 750.560248][T15006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 750.560257][T15006] Call Trace: [ 750.560263][T15006] [ 750.560270][T15006] dump_stack_lvl+0x16c/0x1f0 [ 750.560296][T15006] should_fail_ex+0x512/0x640 [ 750.560325][T15006] _copy_from_user+0x2e/0xd0 [ 750.560347][T15006] copy_msghdr_from_user+0x98/0x160 [ 750.560364][T15006] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 750.560390][T15006] ___sys_sendmsg+0xfe/0x1d0 [ 750.560408][T15006] ? __pfx____sys_sendmsg+0x10/0x10 [ 750.560456][T15006] __sys_sendmsg+0x16d/0x220 [ 750.560477][T15006] ? __pfx___sys_sendmsg+0x10/0x10 [ 750.560512][T15006] do_syscall_64+0xcd/0xf80 [ 750.560537][T15006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.560554][T15006] RIP: 0033:0x7fd6beb8f749 [ 750.560571][T15006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.560587][T15006] RSP: 002b:00007fd6bfad8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.560604][T15006] RAX: ffffffffffffffda RBX: 00007fd6bede5fa0 RCX: 00007fd6beb8f749 [ 750.560615][T15006] RDX: 0000000000000014 RSI: 00002000000000c0 RDI: 0000000000000003 [ 750.560623][T15006] RBP: 00007fd6bfad8090 R08: 0000000000000000 R09: 0000000000000000 [ 750.560632][T15006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.560641][T15006] R13: 00007fd6bede6038 R14: 00007fd6bede5fa0 R15: 00007fff5a900228 [ 750.560662][T15006] [ 750.784466][ T5137] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 750.918544][T15020] fuse: Unknown parameter 'user_id00000000000000000000' [ 752.365157][T13855] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 752.694742][ T30] audit: type=1400 audit(1768754519.110:1323): avc: denied { read } for pid=15042 comm="syz.5.2412" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 752.719316][T13855] usb 7-1: Using ep0 maxpacket: 8 [ 752.724866][ T30] audit: type=1400 audit(1768754519.110:1324): avc: denied { open } for pid=15042 comm="syz.5.2412" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 752.756284][T13855] usb 7-1: config 0 has an invalid interface number: 199 but max is 0 [ 752.770995][T13855] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.796452][T13855] usb 7-1: config 0 has no interface number 0 [ 752.802598][ T30] audit: type=1400 audit(1768754519.120:1325): avc: denied { ioctl } for pid=15042 comm="syz.5.2412" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 752.828703][T13855] usb 7-1: too many endpoints for config 0 interface 199 altsetting 182: 142, using maximum allowed: 30 [ 752.845597][T13855] usb 7-1: config 0 interface 199 altsetting 182 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 752.859390][T13855] usb 7-1: config 0 interface 199 has no altsetting 0 [ 752.859494][ T30] audit: type=1326 audit(1768754519.280:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.5.2413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f777f38f749 code=0x0 [ 752.866575][T13855] usb 7-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 752.900427][T13855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.935362][T13855] usb 7-1: config 0 descriptor?? [ 752.958733][T15050] FAULT_INJECTION: forcing a failure. [ 752.958733][T15050] name failslab, interval 1, probability 0, space 0, times 0 [ 753.021925][T15050] CPU: 1 UID: 0 PID: 15050 Comm: syz.5.2413 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.021951][T15050] Tainted: [L]=SOFTLOCKUP [ 753.021957][T15050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 753.021967][T15050] Call Trace: [ 753.021972][T15050] [ 753.021979][T15050] dump_stack_lvl+0x16c/0x1f0 [ 753.022008][T15050] should_fail_ex+0x512/0x640 [ 753.022034][T15050] ? kmem_cache_alloc_noprof+0x62/0x770 [ 753.022056][T15050] should_failslab+0xc2/0x120 [ 753.022079][T15050] kmem_cache_alloc_noprof+0x83/0x770 [ 753.022095][T15050] ? stack_depot_save_flags+0x29/0x9b0 [ 753.022119][T15050] ? alloc_empty_file+0x55/0x1e0 [ 753.022141][T15050] ? alloc_empty_file+0x55/0x1e0 [ 753.022156][T15050] ? kasan_save_track+0x14/0x30 [ 753.022173][T15050] alloc_empty_file+0x55/0x1e0 [ 753.022191][T15050] path_openat+0xde/0x3140 [ 753.022213][T15050] ? do_syscall_64+0xcd/0xf80 [ 753.022234][T15050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.022258][T15050] ? __pfx_path_openat+0x10/0x10 [ 753.022290][T15050] do_filp_open+0x20b/0x470 [ 753.022315][T15050] ? __pfx_do_filp_open+0x10/0x10 [ 753.022356][T15050] ? alloc_fd+0x471/0x7d0 [ 753.022387][T15050] do_sys_openat2+0x121/0x290 [ 753.022403][T15050] ? __pfx_do_sys_openat2+0x10/0x10 [ 753.022422][T15050] ? __fget_files+0x20e/0x3c0 [ 753.022450][T15050] __x64_sys_openat+0x174/0x210 [ 753.022467][T15050] ? __pfx___x64_sys_openat+0x10/0x10 [ 753.022482][T15050] ? ksys_write+0x1ac/0x250 [ 753.022512][T15050] do_syscall_64+0xcd/0xf80 [ 753.022534][T15050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.022551][T15050] RIP: 0033:0x7f777f38df90 [ 753.022565][T15050] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 753.022582][T15050] RSP: 002b:00007f778026df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 753.022599][T15050] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f777f38df90 [ 753.022610][T15050] RDX: 0000000000000002 RSI: 00007f778026dfa0 RDI: 00000000ffffff9c [ 753.022621][T15050] RBP: 00007f778026dfa0 R08: 0000000000000000 R09: 00007f778026dcd5 [ 753.022631][T15050] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 753.022640][T15050] R13: 00007f777f5e6128 R14: 00007f777f5e6090 R15: 00007ffeb7275e18 [ 753.022664][T15050] [ 753.535194][ T6730] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 753.689186][ T6730] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 753.707311][ T6730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.734497][ T6730] usb 3-1: Product: syz [ 753.750056][ T6730] usb 3-1: Manufacturer: syz [ 753.767931][ T6730] usb 3-1: SerialNumber: syz [ 753.793995][ T6730] usb 3-1: config 0 descriptor?? [ 754.506497][T13855] usb 7-1: string descriptor 0 read error: -71 [ 754.595606][T13855] usb 7-1: USB disconnect, device number 9 [ 754.866301][ T6730] usb 3-1: Firmware version (0.0) predates our first public release. [ 754.915282][ T6730] usb 3-1: Please update to version 0.2 or newer [ 755.001354][T15108] fuse: Unknown parameter 'user_id00000000000000000000' [ 755.074693][T15113] FAULT_INJECTION: forcing a failure. [ 755.074693][T15113] name failslab, interval 1, probability 0, space 0, times 0 [ 755.125206][T15113] CPU: 0 UID: 0 PID: 15113 Comm: syz.3.2421 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.125233][T15113] Tainted: [L]=SOFTLOCKUP [ 755.125239][T15113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 755.125249][T15113] Call Trace: [ 755.125255][T15113] [ 755.125263][T15113] dump_stack_lvl+0x16c/0x1f0 [ 755.125291][T15113] should_fail_ex+0x512/0x640 [ 755.125318][T15113] ? __kmalloc_cache_noprof+0x5f/0x800 [ 755.125338][T15113] should_failslab+0xc2/0x120 [ 755.125361][T15113] __kmalloc_cache_noprof+0x80/0x800 [ 755.125376][T15113] ? rcu_is_watching+0x12/0xc0 [ 755.125393][T15113] ? vhost_task_create+0xe5/0x370 [ 755.125417][T15113] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 755.125446][T15113] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 755.125470][T15113] ? vhost_task_create+0xe5/0x370 [ 755.125491][T15113] vhost_task_create+0xe5/0x370 [ 755.125513][T15113] ? __pfx_vhost_task_create+0x10/0x10 [ 755.125543][T15113] ? __pfx_vhost_task_fn+0x10/0x10 [ 755.125569][T15113] ? __pfx___mutex_lock+0x10/0x10 [ 755.125600][T15113] kvm_mmu_post_init_vm+0x1b7/0x380 [ 755.125623][T15113] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 755.125645][T15113] ? kvm_vcpu_ioctl+0x14f8/0x16d0 [ 755.125676][T15113] kvm_vcpu_ioctl+0x76d/0x16d0 [ 755.125706][T15113] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 755.125732][T15113] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 755.125754][T15113] ? do_vfs_ioctl+0x128/0x14f0 [ 755.125775][T15113] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 755.125795][T15113] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 755.125828][T15113] ? hook_file_ioctl_common+0x144/0x410 [ 755.125853][T15113] ? selinux_file_ioctl+0x180/0x270 [ 755.125879][T15113] ? selinux_file_ioctl+0xb4/0x270 [ 755.125903][T15113] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 755.125930][T15113] __x64_sys_ioctl+0x18e/0x210 [ 755.125952][T15113] do_syscall_64+0xcd/0xf80 [ 755.125977][T15113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.125994][T15113] RIP: 0033:0x7fedf998f749 [ 755.126008][T15113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.126025][T15113] RSP: 002b:00007fedfa8cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.126042][T15113] RAX: ffffffffffffffda RBX: 00007fedf9be5fa0 RCX: 00007fedf998f749 [ 755.126053][T15113] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 755.126062][T15113] RBP: 00007fedfa8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 755.126072][T15113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.126082][T15113] R13: 00007fedf9be6038 R14: 00007fedf9be5fa0 R15: 00007ffefc0ec898 [ 755.126108][T15113] [ 755.598162][T15118] netlink: 'syz.3.2425': attribute type 1 has an invalid length. [ 756.466603][ T79] usb 3-1: USB disconnect, device number 96 [ 756.603353][T15130] FAULT_INJECTION: forcing a failure. [ 756.603353][T15130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.642524][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 756.643835][T15130] CPU: 1 UID: 0 PID: 15130 Comm: syz.4.2427 Tainted: G L syzkaller #0 PREEMPT(full) [ 756.643857][T15130] Tainted: [L]=SOFTLOCKUP [ 756.643867][T15130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 756.643876][T15130] Call Trace: [ 756.643882][T15130] [ 756.643888][T15130] dump_stack_lvl+0x16c/0x1f0 [ 756.643913][T15130] should_fail_ex+0x512/0x640 [ 756.643939][T15130] _copy_to_user+0x32/0xd0 [ 756.643962][T15130] simple_read_from_buffer+0xcb/0x170 [ 756.643984][T15130] proc_fail_nth_read+0x197/0x240 [ 756.644000][T15130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 756.644017][T15130] ? rw_verify_area+0xcf/0x6c0 [ 756.644033][T15130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 756.644048][T15130] vfs_read+0x1e4/0xcf0 [ 756.644066][T15130] ? __pfx___mutex_lock+0x10/0x10 [ 756.644088][T15130] ? __pfx_vfs_read+0x10/0x10 [ 756.644111][T15130] ? __fget_files+0x20e/0x3c0 [ 756.644137][T15130] ksys_read+0x12a/0x250 [ 756.644154][T15130] ? __pfx_ksys_read+0x10/0x10 [ 756.644173][T15130] ? fput+0x70/0xf0 [ 756.644189][T15130] do_syscall_64+0xcd/0xf80 [ 756.644210][T15130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.644224][T15130] RIP: 0033:0x7fcb5a38e15c [ 756.644236][T15130] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 756.644249][T15130] RSP: 002b:00007fcb5b201030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 756.644263][T15130] RAX: ffffffffffffffda RBX: 00007fcb5a5e5fa0 RCX: 00007fcb5a38e15c [ 756.644273][T15130] RDX: 000000000000000f RSI: 00007fcb5b2010a0 RDI: 0000000000000006 [ 756.644281][T15130] RBP: 00007fcb5b201090 R08: 0000000000000000 R09: 0000000000000000 [ 756.644290][T15130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.644297][T15130] R13: 00007fcb5a5e6038 R14: 00007fcb5a5e5fa0 R15: 00007ffea2328428 [ 756.644319][T15130] [ 756.883394][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 756.900770][ T30] audit: type=1404 audit(1768754523.320:1327): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 756.924324][ T30] audit: type=1400 audit(1768754523.340:1328): avc: denied { read write } for pid=5818 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 756.964249][ T30] audit: type=1400 audit(1768754523.380:1329): avc: denied { append } for pid=15138 comm="syz.3.2429" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 756.988281][ T30] audit: type=1400 audit(1768754523.400:1330): avc: denied { read } for pid=15140 comm="syz.4.2430" dev="nsfs" ino=4026533247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 757.011890][ T30] audit: type=1400 audit(1768754523.410:1331): avc: denied { create } for pid=15140 comm="syz.4.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 757.040738][T15139] sp0: Synchronizing with TNC [ 757.060202][ T5481] audit: audit_backlog=65 > audit_backlog_limit=64 [ 757.067754][ T5481] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 757.076183][ T5481] audit: backlog limit exceeded [ 757.081652][T15141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 757.089226][ T5481] audit: audit_backlog=65 > audit_backlog_limit=64 [ 757.156993][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 757.162998][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 757.459693][T15133] ceph: No mds server is up or the cluster is laggy [ 758.967202][T15190] tc_dump_action: action bad kind [ 759.851728][T15226] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 760.125177][T15238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2467'. [ 760.144373][T15238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2467'. [ 760.153052][T15241] tap0: tun_chr_ioctl cmd 1074025675 [ 760.159846][T15241] tap0: persist disabled [ 760.662041][T15259] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 760.982700][T15272] FAULT_INJECTION: forcing a failure. [ 760.982700][T15272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.029142][T15272] CPU: 1 UID: 0 PID: 15272 Comm: syz.6.2478 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.029169][T15272] Tainted: [L]=SOFTLOCKUP [ 761.029176][T15272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 761.029186][T15272] Call Trace: [ 761.029192][T15272] [ 761.029199][T15272] dump_stack_lvl+0x16c/0x1f0 [ 761.029227][T15272] should_fail_ex+0x512/0x640 [ 761.029257][T15272] _copy_from_user+0x2e/0xd0 [ 761.029284][T15272] do_tcp_getsockopt+0x1d67/0x2b20 [ 761.029309][T15272] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 761.029328][T15272] ? __kernel_text_address+0xd/0x40 [ 761.029354][T15272] ? __lock_acquire+0x436/0x2890 [ 761.029378][T15272] ? __lock_acquire+0x436/0x2890 [ 761.029408][T15272] ? find_held_lock+0x2b/0x80 [ 761.029433][T15272] ? avc_has_perm_noaudit+0x117/0x3b0 [ 761.029455][T15272] ? avc_has_perm_noaudit+0x149/0x3b0 [ 761.029474][T15272] ? avc_has_perm+0x144/0x1f0 [ 761.029491][T15272] ? __pfx_avc_has_perm+0x10/0x10 [ 761.029511][T15272] ? __lock_acquire+0x436/0x2890 [ 761.029534][T15272] ? sock_has_perm+0x258/0x2f0 [ 761.029560][T15272] ? find_held_lock+0x2b/0x80 [ 761.029591][T15272] ? __might_fault+0xe3/0x190 [ 761.029607][T15272] ? __might_fault+0xe3/0x190 [ 761.029620][T15272] ? __might_fault+0x13b/0x190 [ 761.029639][T15272] tcp_getsockopt+0xdf/0x100 [ 761.029661][T15272] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 761.029684][T15272] do_sock_getsockopt+0x324/0x410 [ 761.029708][T15272] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 761.029729][T15272] ? __fget_files+0x204/0x3c0 [ 761.029765][T15272] __sys_getsockopt+0x12f/0x260 [ 761.029790][T15272] __x64_sys_getsockopt+0xbd/0x160 [ 761.029807][T15272] ? do_syscall_64+0x91/0xf80 [ 761.029830][T15272] ? lockdep_hardirqs_on+0x7c/0x110 [ 761.029851][T15272] do_syscall_64+0xcd/0xf80 [ 761.029876][T15272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.029893][T15272] RIP: 0033:0x7f98feb8f749 [ 761.029907][T15272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.029923][T15272] RSP: 002b:00007f98ff9aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 761.029939][T15272] RAX: ffffffffffffffda RBX: 00007f98fede5fa0 RCX: 00007f98feb8f749 [ 761.029950][T15272] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000004 [ 761.029960][T15272] RBP: 00007f98ff9aa090 R08: 0000200000000380 R09: 0000000000000000 [ 761.029970][T15272] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 761.029980][T15272] R13: 00007f98fede6038 R14: 00007f98fede5fa0 R15: 00007ffc06d84008 [ 761.030005][T15272] [ 761.310633][T15275] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 761.374020][T15278] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 761.801527][T15290] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 761.911654][ T30] kauditd_printk_skb: 10940 callbacks suppressed [ 761.911667][ T30] audit: type=1400 audit(1768754528.320:12265): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 761.945743][ T30] audit: type=1400 audit(1768754528.330:12266): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 761.974161][ T30] audit: type=1400 audit(1768754528.330:12267): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 761.995887][T15293] netlink: 'syz.5.2487': attribute type 10 has an invalid length. [ 761.996816][ T30] audit: type=1400 audit(1768754528.330:12268): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 762.023810][T15293] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.040293][ T5481] audit: audit_backlog=65 > audit_backlog_limit=64 [ 762.041099][T13701] audit: audit_backlog=65 > audit_backlog_limit=64 [ 762.046999][ T5481] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 762.053441][T13701] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 762.071260][T13701] audit: backlog limit exceeded [ 762.076433][T15293] bridge_slave_1: left allmulticast mode [ 762.076453][T15293] bridge_slave_1: left promiscuous mode [ 762.076638][T15293] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.098790][ T30] audit: type=1400 audit(1768754528.330:12269): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 762.124184][T15293] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 764.434786][T15349] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 764.520226][T15351] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 764.651365][T15354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32786 sclass=netlink_route_socket pid=15354 comm=syz.4.2504 [ 765.210741][T15356] lo speed is unknown, defaulting to 1000 [ 766.028979][T15380] FAULT_INJECTION: forcing a failure. [ 766.028979][T15380] name failslab, interval 1, probability 0, space 0, times 0 [ 766.080076][T15380] CPU: 1 UID: 0 PID: 15380 Comm: syz.2.2516 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.080102][T15380] Tainted: [L]=SOFTLOCKUP [ 766.080108][T15380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 766.080118][T15380] Call Trace: [ 766.080124][T15380] [ 766.080131][T15380] dump_stack_lvl+0x16c/0x1f0 [ 766.080158][T15380] should_fail_ex+0x512/0x640 [ 766.080183][T15380] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 766.080204][T15380] should_failslab+0xc2/0x120 [ 766.080227][T15380] kmem_cache_alloc_node_noprof+0x86/0x800 [ 766.080244][T15380] ? __alloc_skb+0x156/0x410 [ 766.080266][T15380] ? __alloc_skb+0x156/0x410 [ 766.080281][T15380] __alloc_skb+0x156/0x410 [ 766.080295][T15380] ? __alloc_skb+0x35d/0x410 [ 766.080311][T15380] ? __pfx___alloc_skb+0x10/0x10 [ 766.080327][T15380] ? netlink_autobind.isra.0+0x158/0x370 [ 766.080357][T15380] netlink_alloc_large_skb+0x69/0x140 [ 766.080381][T15380] netlink_sendmsg+0x698/0xdd0 [ 766.080408][T15380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.080439][T15380] ____sys_sendmsg+0xa5d/0xc30 [ 766.080464][T15380] ? copy_msghdr_from_user+0x10a/0x160 [ 766.080483][T15380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.080518][T15380] ___sys_sendmsg+0x134/0x1d0 [ 766.080538][T15380] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.080603][T15380] __sys_sendmsg+0x16d/0x220 [ 766.080622][T15380] ? __pfx___sys_sendmsg+0x10/0x10 [ 766.080662][T15380] do_syscall_64+0xcd/0xf80 [ 766.080687][T15380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.080705][T15380] RIP: 0033:0x7fd6beb8f749 [ 766.080719][T15380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.080735][T15380] RSP: 002b:00007fd6bfad8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.080752][T15380] RAX: ffffffffffffffda RBX: 00007fd6bede5fa0 RCX: 00007fd6beb8f749 [ 766.080763][T15380] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 766.080773][T15380] RBP: 00007fd6bfad8090 R08: 0000000000000000 R09: 0000000000000000 [ 766.080782][T15380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.080792][T15380] R13: 00007fd6bede6038 R14: 00007fd6bede5fa0 R15: 00007fff5a900228 [ 766.080816][T15380] [ 766.411027][T15383] futex_wake_op: syz.5.2517 tries to shift op by -1; fix this program [ 766.557347][T15388] syzkaller0: mtu less than device minimum [ 766.918378][ T30] kauditd_printk_skb: 9812 callbacks suppressed [ 766.918393][ T30] audit: type=1400 audit(1768754533.340:22072): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 767.019362][ T30] audit: type=1400 audit(1768754533.340:22073): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 767.025365][ T5481] audit: audit_backlog=65 > audit_backlog_limit=64 [ 767.062984][T15402] audit: audit_backlog=65 > audit_backlog_limit=64 [ 767.078162][ T5818] audit: audit_backlog=65 > audit_backlog_limit=64 [ 767.084965][T15402] audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64 [ 767.093444][ T5818] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 767.102273][T15402] audit: backlog limit exceeded [ 767.107794][T15404] audit: audit_backlog=65 > audit_backlog_limit=64 [ 767.116374][ T5818] audit: backlog limit exceeded [ 768.214446][T15449] ip6t_REJECT: ECHOREPLY is not supported [ 769.330184][T15468] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 771.613735][T15524] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 771.925473][ T30] kauditd_printk_skb: 16560 callbacks suppressed [ 771.925488][ T30] audit: type=1400 audit(1768754538.350:38351): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 771.941337][ T5481] audit: audit_backlog=65 > audit_backlog_limit=64 [ 771.954573][ T30] audit: type=1400 audit(1768754538.350:38352): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 771.984438][T15530] audit: audit_backlog=65 > audit_backlog_limit=64 [ 771.993311][T15530] audit: audit_lost=107 audit_rate_limit=0 audit_backlog_limit=64 [ 771.997402][ T5481] audit: audit_lost=108 audit_rate_limit=0 audit_backlog_limit=64 [ 772.004076][T15530] audit: backlog limit exceeded [ 772.014811][T15532] FAULT_INJECTION: forcing a failure. [ 772.014811][T15532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.020992][ T5481] audit: backlog limit exceeded [ 772.032213][T15530] audit: audit_backlog=65 > audit_backlog_limit=64 [ 772.039371][ T30] audit: type=1400 audit(1768754538.350:38353): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 772.063384][T15532] CPU: 0 UID: 0 PID: 15532 Comm: syz.4.2573 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.063408][T15532] Tainted: [L]=SOFTLOCKUP [ 772.063415][T15532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 772.063424][T15532] Call Trace: [ 772.063430][T15532] [ 772.063437][T15532] dump_stack_lvl+0x16c/0x1f0 [ 772.063463][T15532] should_fail_ex+0x512/0x640 [ 772.063491][T15532] _copy_to_user+0x32/0xd0 [ 772.063518][T15532] simple_read_from_buffer+0xcb/0x170 [ 772.063544][T15532] proc_fail_nth_read+0x197/0x240 [ 772.063568][T15532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 772.063588][T15532] ? rw_verify_area+0xcf/0x6c0 [ 772.063606][T15532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 772.063624][T15532] vfs_read+0x1e4/0xcf0 [ 772.063645][T15532] ? __pfx___mutex_lock+0x10/0x10 [ 772.063672][T15532] ? __pfx_vfs_read+0x10/0x10 [ 772.063699][T15532] ? __fget_files+0x20e/0x3c0 [ 772.063730][T15532] ksys_read+0x12a/0x250 [ 772.063751][T15532] ? __pfx_ksys_read+0x10/0x10 [ 772.063784][T15532] do_syscall_64+0xcd/0xf80 [ 772.063809][T15532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.063827][T15532] RIP: 0033:0x7fcb5a38e15c [ 772.063841][T15532] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 772.063856][T15532] RSP: 002b:00007fcb5b201030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 772.063872][T15532] RAX: ffffffffffffffda RBX: 00007fcb5a5e5fa0 RCX: 00007fcb5a38e15c [ 772.063883][T15532] RDX: 000000000000000f RSI: 00007fcb5b2010a0 RDI: 0000000000000004 [ 772.063894][T15532] RBP: 00007fcb5b201090 R08: 0000000000000000 R09: 0000000000000000 [ 772.063904][T15532] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 772.063914][T15532] R13: 00007fcb5a5e6038 R14: 00007fcb5a5e5fa0 R15: 00007ffea2328428 [ 772.063940][T15532] [ 772.773805][T15554] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 773.409861][T15565] FAULT_INJECTION: forcing a failure. [ 773.409861][T15565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.439427][T15565] CPU: 1 UID: 0 PID: 15565 Comm: syz.3.2587 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.439453][T15565] Tainted: [L]=SOFTLOCKUP [ 773.439460][T15565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 773.439470][T15565] Call Trace: [ 773.439476][T15565] [ 773.439483][T15565] dump_stack_lvl+0x16c/0x1f0 [ 773.439516][T15565] should_fail_ex+0x512/0x640 [ 773.439548][T15565] _copy_to_user+0x32/0xd0 [ 773.439576][T15565] simple_read_from_buffer+0xcb/0x170 [ 773.439603][T15565] proc_fail_nth_read+0x197/0x240 [ 773.439623][T15565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 773.439643][T15565] ? rw_verify_area+0xcf/0x6c0 [ 773.439662][T15565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 773.439680][T15565] vfs_read+0x1e4/0xcf0 [ 773.439703][T15565] ? __pfx___mutex_lock+0x10/0x10 [ 773.439730][T15565] ? __pfx_vfs_read+0x10/0x10 [ 773.439757][T15565] ? __fget_files+0x20e/0x3c0 [ 773.439788][T15565] ksys_read+0x12a/0x250 [ 773.439809][T15565] ? __pfx_ksys_read+0x10/0x10 [ 773.439830][T15565] ? fdget+0x187/0x210 [ 773.439861][T15565] do_syscall_64+0xcd/0xf80 [ 773.439887][T15565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.439904][T15565] RIP: 0033:0x7fedf998e15c [ 773.439918][T15565] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 773.439934][T15565] RSP: 002b:00007fedfa8ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 773.439951][T15565] RAX: ffffffffffffffda RBX: 00007fedf9be6090 RCX: 00007fedf998e15c [ 773.439962][T15565] RDX: 000000000000000f RSI: 00007fedfa8ae0a0 RDI: 0000000000000005 [ 773.439973][T15565] RBP: 00007fedfa8ae090 R08: 0000000000000000 R09: 0000000000000000 [ 773.439982][T15565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.439992][T15565] R13: 00007fedf9be6128 R14: 00007fedf9be6090 R15: 00007ffefc0ec898 [ 773.440017][T15565] [ 774.841217][T15595] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:508 [ 775.817357][T15619] FAULT_INJECTION: forcing a failure. [ 775.817357][T15619] name failslab, interval 1, probability 0, space 0, times 0 [ 775.851753][T15622] FAULT_INJECTION: forcing a failure. [ 775.851753][T15622] name failslab, interval 1, probability 0, space 0, times 0 [ 775.878172][T15619] CPU: 1 UID: 0 PID: 15619 Comm: syz.2.2608 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.878195][T15619] Tainted: [L]=SOFTLOCKUP [ 775.878201][T15619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 775.878211][T15619] Call Trace: [ 775.878217][T15619] [ 775.878223][T15619] dump_stack_lvl+0x16c/0x1f0 [ 775.878250][T15619] should_fail_ex+0x512/0x640 [ 775.878275][T15619] ? __kmalloc_cache_noprof+0x5f/0x800 [ 775.878294][T15619] should_failslab+0xc2/0x120 [ 775.878315][T15619] __kmalloc_cache_noprof+0x80/0x800 [ 775.878331][T15619] ? tcf_action_init_1+0x278/0x6c0 [ 775.878358][T15619] ? __nla_parse+0x40/0x60 [ 775.878380][T15619] ? tcf_action_init_1+0x278/0x6c0 [ 775.878405][T15619] tcf_action_init_1+0x278/0x6c0 [ 775.878431][T15619] ? tc_lookup_action_n+0xc9/0xf0 [ 775.878455][T15619] ? __pfx_tcf_action_init_1+0x10/0x10 [ 775.878481][T15619] ? __pfx_tc_action_load_ops+0x10/0x10 [ 775.878517][T15619] ? __nla_parse+0x40/0x60 [ 775.878539][T15619] tcf_action_init+0x432/0xa50 [ 775.878566][T15619] ? __pfx_tcf_action_init+0x10/0x10 [ 775.878581][T15619] ? bpf_trace_run2+0x26b/0x5c0 [ 775.878603][T15619] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 775.878616][T15619] ? __bpf_trace_contention_end+0xc9/0x110 [ 775.878629][T15619] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 775.878652][T15619] ? find_held_lock+0x2b/0x80 [ 775.878668][T15619] ? pcpu_alloc_noprof+0x94a/0x1470 [ 775.878682][T15619] tcf_exts_validate_ex+0x42d/0x550 [ 775.878695][T15619] ? __pfx_tcf_exts_validate_ex+0x10/0x10 [ 775.878706][T15619] ? mark_held_locks+0x49/0x80 [ 775.878731][T15619] mall_change+0x3cd/0x1030 [ 775.878747][T15619] ? __pfx_mall_change+0x10/0x10 [ 775.878758][T15619] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 775.878778][T15619] ? __pfx_mall_change+0x10/0x10 [ 775.878789][T15619] tc_new_tfilter+0xa35/0x2340 [ 775.878811][T15619] ? __pfx_tc_new_tfilter+0x10/0x10 [ 775.878829][T15619] ? __lock_acquire+0x436/0x2890 [ 775.878848][T15619] ? find_held_lock+0x2b/0x80 [ 775.878863][T15619] ? __pfx_tc_new_tfilter+0x10/0x10 [ 775.878875][T15619] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 775.878889][T15619] ? __pfx_tc_new_tfilter+0x10/0x10 [ 775.878903][T15619] rtnetlink_rcv_msg+0x95e/0xe90 [ 775.878917][T15619] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 775.878933][T15619] ? ref_tracker_free+0x37c/0x830 [ 775.878945][T15619] netlink_rcv_skb+0x158/0x420 [ 775.878962][T15619] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 775.878975][T15619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 775.878994][T15619] ? netlink_deliver_tap+0x1ae/0xd30 [ 775.879009][T15619] netlink_unicast+0x5aa/0x870 [ 775.879024][T15619] ? __pfx_netlink_unicast+0x10/0x10 [ 775.879042][T15619] netlink_sendmsg+0x8c8/0xdd0 [ 775.879058][T15619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.879077][T15619] ____sys_sendmsg+0xa5d/0xc30 [ 775.879092][T15619] ? copy_msghdr_from_user+0x10a/0x160 [ 775.879103][T15619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.879124][T15619] ___sys_sendmsg+0x134/0x1d0 [ 775.879136][T15619] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.879165][T15619] __sys_sendmsg+0x16d/0x220 [ 775.879176][T15619] ? __pfx___sys_sendmsg+0x10/0x10 [ 775.879206][T15619] do_syscall_64+0xcd/0xf80 [ 775.879230][T15619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.879246][T15619] RIP: 0033:0x7fd6beb8f749 [ 775.879261][T15619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.879273][T15619] RSP: 002b:00007fd6bfab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.879283][T15619] RAX: ffffffffffffffda RBX: 00007fd6bede6090 RCX: 00007fd6beb8f749 [ 775.879289][T15619] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 775.879295][T15619] RBP: 00007fd6bfab7090 R08: 0000000000000000 R09: 0000000000000000 [ 775.879301][T15619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 775.879307][T15619] R13: 00007fd6bede6128 R14: 00007fd6bede6090 R15: 00007fff5a900228 [ 775.879322][T15619] [ 776.737179][T15622] CPU: 0 UID: 0 PID: 15622 Comm: syz.6.2610 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.737198][T15622] Tainted: [L]=SOFTLOCKUP [ 776.737201][T15622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 776.737208][T15622] Call Trace: [ 776.737211][T15622] [ 776.737216][T15622] dump_stack_lvl+0x16c/0x1f0 [ 776.737235][T15622] should_fail_ex+0x512/0x640 [ 776.737251][T15622] ? fs_reclaim_acquire+0xae/0x150 [ 776.737267][T15622] should_failslab+0xc2/0x120 [ 776.737282][T15622] __kmalloc_noprof+0xeb/0x910 [ 776.737299][T15622] ? tomoyo_encode2+0x100/0x3e0 [ 776.737319][T15622] ? tomoyo_encode2+0x100/0x3e0 [ 776.737333][T15622] tomoyo_encode2+0x100/0x3e0 [ 776.737349][T15622] tomoyo_encode+0x29/0x50 [ 776.737363][T15622] tomoyo_realpath_from_path+0x18f/0x6e0 [ 776.737382][T15622] tomoyo_path_number_perm+0x245/0x580 [ 776.737395][T15622] ? tomoyo_path_number_perm+0x237/0x580 [ 776.737409][T15622] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 776.737422][T15622] ? find_held_lock+0x2b/0x80 [ 776.737450][T15622] ? find_held_lock+0x2b/0x80 [ 776.737465][T15622] ? hook_file_ioctl_common+0x144/0x410 [ 776.737479][T15622] ? __fget_files+0x20e/0x3c0 [ 776.737496][T15622] security_file_ioctl+0x9b/0x240 [ 776.737512][T15622] __x64_sys_ioctl+0xb7/0x210 [ 776.737525][T15622] do_syscall_64+0xcd/0xf80 [ 776.737541][T15622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.737552][T15622] RIP: 0033:0x7f98feb8f749 [ 776.737561][T15622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.737571][T15622] RSP: 002b:00007f98ff9aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.737581][T15622] RAX: ffffffffffffffda RBX: 00007f98fede5fa0 RCX: 00007f98feb8f749 [ 776.737588][T15622] RDX: 0000200000000040 RSI: 00000000c1086201 RDI: 0000000000000003 [ 776.737594][T15622] RBP: 00007f98ff9aa090 R08: 0000000000000000 R09: 0000000000000000 [ 776.737600][T15622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.737606][T15622] R13: 00007f98fede6038 R14: 00007f98fede5fa0 R15: 00007ffc06d84008 [ 776.737620][T15622] [ 777.045067][T15622] ERROR: Out of memory at tomoyo_realpath_from_path. [ 777.195529][ T30] kauditd_printk_skb: 11228 callbacks suppressed [ 777.195546][ T30] audit: type=1400 audit(1768754543.470:44237): avc: denied { ioctl } for pid=15620 comm="syz.6.2610" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 777.275864][ T30] audit: type=1400 audit(1768754543.700:44238): avc: denied { write } for pid=15625 comm="syz.4.2611" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 777.363020][ T30] audit: type=1400 audit(1768754543.720:44239): avc: denied { read } for pid=15625 comm="syz.4.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 777.458690][ T30] audit: type=1400 audit(1768754543.720:44240): avc: denied { read write } for pid=15625 comm="syz.4.2611" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 777.559705][T15637] loop4: detected capacity change from 0 to 524288000 [ 777.565088][ T5813] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 777.566640][ T30] audit: type=1400 audit(1768754543.720:44241): avc: denied { open } for pid=15625 comm="syz.4.2611" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 777.615230][T15635] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 777.665842][ T30] audit: type=1400 audit(1768754543.720:44242): avc: denied { ioctl } for pid=15625 comm="syz.4.2611" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 777.715716][T15637] Invalid logical block size (6) [ 777.795397][ T30] audit: type=1400 audit(1768754543.730:44243): avc: denied { create } for pid=15628 comm="syz.6.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 777.827094][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.885294][ T30] audit: type=1400 audit(1768754543.730:44244): avc: denied { create } for pid=15628 comm="syz.6.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 777.885638][ T5813] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 778.028980][ T5813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.066858][ T30] audit: type=1400 audit(1768754543.730:44245): avc: denied { create } for pid=15628 comm="syz.6.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 778.091269][ T5813] usb 7-1: config 0 descriptor?? [ 778.145177][ T30] audit: type=1400 audit(1768754543.730:44246): avc: denied { connect } for pid=15628 comm="syz.6.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 778.375275][T15644] Invalid logical block size (6) [ 778.568241][T15630] netlink: 'syz.6.2613': attribute type 8 has an invalid length. [ 778.592126][T15630] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.600237][T15630] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.800237][T15650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.845311][ T5926] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 778.867851][T15650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.886373][ T5813] usbhid 7-1:0.0: can't add hid device: -71 [ 778.892286][ T5813] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 778.941185][ T5813] usb 7-1: USB disconnect, device number 10 [ 779.045634][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 779.052315][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 779.573997][ T5926] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 779.586170][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.595357][ T5926] usb 3-1: Product: syz [ 779.599511][ T5926] usb 3-1: Manufacturer: syz [ 779.604095][ T5926] usb 3-1: SerialNumber: syz [ 779.613537][ T5926] usb 3-1: config 0 descriptor?? [ 779.850382][ T5926] usb 3-1: USB disconnect, device number 97 [ 780.324694][T15673] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2620'. [ 780.391286][T15673] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2620'. [ 780.460389][T15673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2620'. [ 780.775100][ T5926] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 780.945286][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 780.976778][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 780.998590][ T5926] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 781.026996][ T5926] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 781.075612][ T5926] usb 3-1: string descriptor 0 read error: -22 [ 781.091882][ T5926] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice= 0.01 [ 781.128761][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 781.386138][T15676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.415642][T15676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.610933][T15686] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2626'. [ 782.365442][ T5926] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 782.595695][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 782.602851][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.615899][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.626373][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 782.640000][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 782.640002][ T5926] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 782.640014][ T30] audit: type=1400 audit(1768754549.060:44286): avc: denied { read } for pid=15697 comm="syz.6.2629" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 782.678070][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.719679][ T30] audit: type=1400 audit(1768754549.060:44287): avc: denied { open } for pid=15697 comm="syz.6.2629" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 782.792275][ T30] audit: type=1400 audit(1768754549.130:44288): avc: denied { ioctl } for pid=15697 comm="syz.6.2629" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 782.793309][ T5926] usb 5-1: config 0 descriptor?? [ 782.839863][T15699] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 783.004052][ T30] audit: type=1400 audit(1768754549.420:44289): avc: denied { open } for pid=15697 comm="syz.6.2629" path="/dev/ttyr1" dev="devtmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 783.412961][ T5926] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0038/input/input59 [ 783.449161][ T30] audit: type=1400 audit(1768754549.870:44290): avc: denied { ioctl } for pid=15704 comm="syz.3.2631" path="socket:[54135]" dev="sockfs" ino=54135 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 783.510592][ T30] audit: type=1400 audit(1768754549.930:44291): avc: denied { read } for pid=5171 comm="acpid" name="event5" dev="devtmpfs" ino=4228 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.545588][ T5926] microsoft 0003:045E:07DA.0038: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 783.596515][ T6730] usb 3-1: USB disconnect, device number 98 [ 783.625195][ T30] audit: type=1400 audit(1768754549.930:44292): avc: denied { open } for pid=5171 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=4228 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.707313][T15715] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 784.032105][ T30] audit: type=1400 audit(1768754549.930:44293): avc: denied { ioctl } for pid=5171 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=4228 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 784.101525][T15718] FAULT_INJECTION: forcing a failure. [ 784.101525][T15718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.103487][ T30] audit: type=1400 audit(1768754550.010:44294): avc: denied { ioctl } for pid=15709 comm="syz.6.2632" path="socket:[53178]" dev="sockfs" ino=53178 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 784.147241][ T30] audit: type=1400 audit(1768754550.010:44295): avc: denied { bind } for pid=15709 comm="syz.6.2632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 784.199192][T15718] CPU: 0 UID: 0 PID: 15718 Comm: syz.6.2634 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.199217][T15718] Tainted: [L]=SOFTLOCKUP [ 784.199224][T15718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 784.199234][T15718] Call Trace: [ 784.199240][T15718] [ 784.199246][T15718] dump_stack_lvl+0x16c/0x1f0 [ 784.199274][T15718] should_fail_ex+0x512/0x640 [ 784.199303][T15718] _copy_from_user+0x2e/0xd0 [ 784.199330][T15718] __sys_bpf+0x248/0x4980 [ 784.199359][T15718] ? __pfx___sys_bpf+0x10/0x10 [ 784.199382][T15718] ? find_held_lock+0x2b/0x80 [ 784.199412][T15718] ? find_held_lock+0x2b/0x80 [ 784.199446][T15718] ? __mutex_unlock_slowpath+0x161/0x790 [ 784.199485][T15718] ? fput+0x70/0xf0 [ 784.199500][T15718] ? ksys_write+0x1ac/0x250 [ 784.199520][T15718] ? __pfx_ksys_write+0x10/0x10 [ 784.199543][T15718] __x64_sys_bpf+0x78/0xc0 [ 784.199566][T15718] ? lockdep_hardirqs_on+0x7c/0x110 [ 784.199589][T15718] do_syscall_64+0xcd/0xf80 [ 784.199613][T15718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.199630][T15718] RIP: 0033:0x7f98feb8f749 [ 784.199644][T15718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.199660][T15718] RSP: 002b:00007f98ff9aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 784.199676][T15718] RAX: ffffffffffffffda RBX: 00007f98fede5fa0 RCX: 00007f98feb8f749 [ 784.199687][T15718] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 000000000000001c [ 784.199697][T15718] RBP: 00007f98ff9aa090 R08: 0000000000000000 R09: 0000000000000000 [ 784.199707][T15718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.199717][T15718] R13: 00007f98fede6038 R14: 00007f98fede5fa0 R15: 00007ffc06d84008 [ 784.199742][T15718] [ 784.496131][ T5926] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 784.863285][ T6730] usb 5-1: reset high-speed USB device number 107 using dummy_hcd [ 785.054872][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 785.124802][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 785.194343][ T5926] usb 6-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 785.253423][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.342716][ T5926] usb 6-1: config 0 descriptor?? [ 785.674185][T15721] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 785.804718][T15740] netlink: 'syz.3.2641': attribute type 1 has an invalid length. [ 785.812622][T15740] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2641'. [ 785.891438][T15721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.937856][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2640'. [ 785.958078][T15721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.047090][T15738] lo speed is unknown, defaulting to 1000 [ 787.128554][ T5926] thrustmaster 0003:044F:B304.0039: item fetching failed at offset 5/7 [ 787.212064][ T79] usb 5-1: USB disconnect, device number 107 [ 787.432859][ T5926] thrustmaster 0003:044F:B304.0039: parse failed [ 787.452331][T15746] batman_adv: batadv0: Adding interface: gretap2 [ 787.461236][T15746] batman_adv: batadv0: Interface activated: gretap2 [ 787.461795][ T5926] thrustmaster 0003:044F:B304.0039: probe with driver thrustmaster failed with error -22 [ 787.549225][T15740] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 787.565553][T15740] ALSA: mixer_oss: invalid index 1374389 [ 787.612484][ T5926] usb 6-1: USB disconnect, device number 66 [ 788.936941][T13906] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 789.116153][T13906] usb 5-1: Using ep0 maxpacket: 8 [ 789.151746][T13906] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 789.175102][T13906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.215267][T13906] usb 5-1: Product: syz [ 789.219659][T13906] usb 5-1: Manufacturer: syz [ 789.224673][T13906] usb 5-1: SerialNumber: syz [ 789.239907][T13906] usb 5-1: config 0 descriptor?? [ 789.262180][T13906] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 789.279687][T15769] Invalid/unusable pipe [ 789.291346][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 789.291359][ T30] audit: type=1400 audit(1768754555.710:44309): avc: denied { read write } for pid=15767 comm="syz.5.2646" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 789.322153][ T30] audit: type=1400 audit(1768754555.710:44310): avc: denied { open } for pid=15767 comm="syz.5.2646" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 789.349533][ T30] audit: type=1400 audit(1768754555.740:44311): avc: denied { ioctl } for pid=15767 comm="syz.5.2646" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 789.441783][ T30] audit: type=1400 audit(1768754555.860:44312): avc: denied { create } for pid=15770 comm="syz.5.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 789.785533][T13906] gspca_sonixj: reg_w1 err -110 [ 789.925160][T13906] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 789.945095][ T30] audit: type=1400 audit(1768754556.200:44313): avc: denied { sqpoll } for pid=15757 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 791.253473][ T30] audit: type=1400 audit(1768754557.670:44314): avc: denied { watch watch_reads } for pid=15799 comm="syz.2.2654" path="/514" dev="tmpfs" ino=2695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 791.286379][ T30] audit: type=1400 audit(1768754557.700:44315): avc: denied { read } for pid=15799 comm="syz.2.2654" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 791.313166][ T30] audit: type=1400 audit(1768754557.700:44316): avc: denied { open } for pid=15799 comm="syz.2.2654" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 791.377423][T15806] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 791.383482][T15806] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 791.391608][ T30] audit: type=1400 audit(1768754557.770:44317): avc: denied { bind } for pid=15799 comm="syz.2.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 791.418815][T15806] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 791.431043][T15806] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 791.450644][T15806] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 791.608567][ T30] audit: type=1400 audit(1768754558.030:44318): avc: denied { create } for pid=15815 comm="syz.6.2661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 792.671670][ T79] usb 5-1: USB disconnect, device number 108 [ 793.005182][ T79] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 794.107340][ T5137] Bluetooth: hci1: command 0x0405 tx timeout [ 794.113371][ T5137] Bluetooth: hci4: command 0x0c1a tx timeout [ 794.119405][ T5137] Bluetooth: hci0: command 0x0c1a tx timeout [ 794.125407][ T5137] Bluetooth: hci2: command 0x0c1a tx timeout [ 794.936279][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 794.940658][ T30] audit: type=1400 audit(1768754561.360:44326): avc: denied { name_bind } for pid=15831 comm="syz.4.2665" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 795.368859][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2668'. [ 796.110894][ T30] audit: type=1400 audit(1768754562.530:44327): avc: denied { execute } for pid=15863 comm="syz.3.2673" dev="tmpfs" ino=1443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 796.155640][T13042] Bluetooth: hci2: command 0x0c1a tx timeout [ 796.201522][T15864] syz_tun: entered allmulticast mode [ 796.222699][T15864] syz_tun: left allmulticast mode [ 796.231034][ T30] audit: type=1400 audit(1768754562.560:44328): avc: denied { execute_no_trans } for pid=15863 comm="syz.3.2673" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 796.408542][ T30] audit: type=1400 audit(1768754562.620:44329): avc: denied { setopt } for pid=15863 comm="syz.3.2673" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 796.602932][ T30] audit: type=1400 audit(1768754562.900:44330): avc: denied { create } for pid=15861 comm="syz.4.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 796.623100][ T79] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 796.646557][T15874] netlink: 'syz.4.2671': attribute type 83 has an invalid length. [ 796.806586][ T30] audit: type=1400 audit(1768754562.980:44331): avc: denied { write } for pid=15861 comm="syz.4.2671" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 796.877647][ T79] usb 6-1: Using ep0 maxpacket: 8 [ 796.937233][ T79] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 796.955488][ T30] audit: type=1400 audit(1768754563.060:44332): avc: denied { ioctl } for pid=15861 comm="syz.4.2671" path="socket:[55377]" dev="sockfs" ino=55377 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 797.007393][ T79] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.137696][ T79] pvrusb2: Hardware description: Terratec Grabster AV400 [ 797.175341][ T79] pvrusb2: ********** [ 797.179330][ T79] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 797.226099][T15888] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 797.242341][ T79] pvrusb2: Important functionality might not be entirely working. [ 797.526269][ T30] audit: type=1400 audit(1768754563.950:44333): avc: denied { bind } for pid=15886 comm="syz.2.2679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 797.607347][ T79] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 797.638961][ T30] audit: type=1400 audit(1768754564.010:44334): avc: denied { write } for pid=15886 comm="syz.2.2679" path="socket:[54471]" dev="sockfs" ino=54471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 797.663825][ T79] pvrusb2: ********** [ 797.783019][ T2328] pvrusb2: Invalid write control endpoint [ 797.795680][ T30] audit: type=1400 audit(1768754564.210:44335): avc: denied { read write } for pid=15878 comm="syz.3.2676" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 797.891773][ T2328] pvrusb2: Invalid write control endpoint [ 797.899403][ T2328] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 797.909782][ T2328] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 797.927015][ T2328] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 797.940714][ T2328] pvrusb2: Device being rendered inoperable [ 797.948941][ T2328] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 797.957035][ T2328] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_k) [ 797.964883][ T2328] pvrusb2: Attached sub-driver cx25840 [ 797.972713][ T2328] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 797.984968][ T2328] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 797.994122][ T5813] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 798.003426][T15891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2676'. [ 798.115115][T13855] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 798.156878][ T5813] usb 5-1: config 0 has no interfaces? [ 798.164794][ T5813] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 798.197734][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.208284][ T5813] usb 5-1: config 0 descriptor?? [ 798.265390][T13855] usb 3-1: Using ep0 maxpacket: 8 [ 798.273154][T13855] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 798.282249][T13855] usb 3-1: config 0 has no interface number 0 [ 798.290138][T13855] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 798.311259][T13855] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 798.329694][T13855] usb 3-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 798.346835][T13855] usb 3-1: Product: syz [ 798.358387][T13855] usb 3-1: config 0 descriptor?? [ 798.373221][T13855] iowarrior 3-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 798.439535][T13855] usb 5-1: USB disconnect, device number 109 [ 798.575735][ T5813] usb 3-1: USB disconnect, device number 99 [ 799.238919][ T5813] usb 6-1: USB disconnect, device number 68 [ 799.641982][T15935] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2688'. [ 799.855361][ T5813] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 800.065585][ T5813] usb 5-1: Using ep0 maxpacket: 8 [ 800.148305][ T5813] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.174170][ T5813] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 800.192508][ T5813] usb 5-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 800.247389][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 800.247403][ T30] audit: type=1326 audit(1768754566.650:44352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf998f749 code=0x7ffc0000 [ 800.279450][ T5813] usb 5-1: config 0 interface 0 has no altsetting 0 [ 800.286212][ T5813] usb 5-1: New USB device found, idVendor=056a, idProduct=9bba, bcdDevice= 0.00 [ 800.298469][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.319640][ T5813] usb 5-1: config 0 descriptor?? [ 800.324373][ T30] audit: type=1326 audit(1768754566.650:44353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf998f749 code=0x7ffc0000 [ 800.328763][ T5813] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 800.429647][ T30] audit: type=1326 audit(1768754566.650:44354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedf998f749 code=0x7ffc0000 [ 800.536025][ T30] audit: type=1326 audit(1768754566.650:44355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf998f749 code=0x7ffc0000 [ 800.595603][ T79] usb 5-1: USB disconnect, device number 110 [ 800.958315][ T30] audit: type=1326 audit(1768754566.650:44356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf998f749 code=0x7ffc0000 [ 801.065100][ T30] audit: type=1326 audit(1768754566.660:44357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fedf998f749 code=0x7ffc0000 [ 801.099419][ T30] audit: type=1326 audit(1768754566.660:44358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.3.2692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedf998f749 code=0x0 [ 801.164267][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2693'. [ 801.457807][ T30] audit: type=1400 audit(1768754566.800:44359): avc: denied { unmount } for pid=9605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 801.479326][ T30] audit: type=1400 audit(1768754567.000:44360): avc: denied { ioctl } for pid=15932 comm="syz.4.2691" path="socket:[55544]" dev="sockfs" ino=55544 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 801.522190][ T30] audit: type=1326 audit(1768754567.860:44361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.3.2692" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedf998f749 code=0x0 [ 802.061875][ T5813] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 802.108761][T13855] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 802.229546][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 802.246489][ T5813] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 802.257083][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.265916][T13855] usb 3-1: Using ep0 maxpacket: 8 [ 802.272661][T13855] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 802.284853][ T5813] usb 5-1: config 0 descriptor?? [ 802.289869][T13855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.298737][T15966] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 802.317712][T13855] pvrusb2: Hardware description: Terratec Grabster AV400 [ 802.324959][T13855] pvrusb2: ********** [ 802.330592][T13855] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 802.340906][T13855] pvrusb2: Important functionality might not be entirely working. [ 802.348887][T13855] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 802.365261][T13855] pvrusb2: ********** [ 802.484660][T15984] usb usb1: usbfs: process 15984 (syz.5.2703) did not claim interface 0 before use [ 802.515103][T13906] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 802.527246][ T2328] pvrusb2: Invalid write control endpoint [ 802.566934][ T2328] pvrusb2: Invalid write control endpoint [ 802.572811][ T2328] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 802.582275][ T2328] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 802.592405][ T2328] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 802.602693][ T2328] pvrusb2: Device being rendered inoperable [ 802.611805][ T2328] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 802.619333][ T2328] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_l) [ 802.628219][ T2328] pvrusb2: Attached sub-driver cx25840 [ 802.633827][ T2328] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 802.644073][ T2328] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 802.677146][T13906] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 802.695069][T13906] usb 7-1: config 0 has no interface number 0 [ 802.701163][T13906] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.728402][T15966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.735185][T13906] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.736848][ T79] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 802.754570][T15966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.878058][T13906] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 802.895156][T13906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.916500][T13906] usb 7-1: config 0 descriptor?? [ 803.025102][ T79] usb 6-1: Using ep0 maxpacket: 32 [ 803.031994][ T79] usb 6-1: config 0 has an invalid interface number: 177 but max is 0 [ 803.040267][ T79] usb 6-1: config 0 has no interface number 0 [ 803.048702][ T79] usb 6-1: New USB device found, idVendor=04dd, idProduct=9050, bcdDevice=85.f4 [ 803.058245][ T79] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.066310][ T79] usb 6-1: Product: syz [ 803.070593][ T79] usb 6-1: Manufacturer: syz [ 803.076128][ T79] usb 6-1: SerialNumber: syz [ 803.082918][ T79] usb 6-1: config 0 descriptor?? [ 803.090309][ T79] usb 6-1: bad CDC descriptors [ 803.109442][ T5813] usbhid 5-1:0.0: can't add hid device: -71 [ 803.125241][ T5813] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 803.147265][ T5813] usb 5-1: USB disconnect, device number 111 [ 803.340394][T13906] prodikeys 0003:041E:2801.003A: unknown main item tag 0x0 [ 803.347939][T13906] prodikeys 0003:041E:2801.003A: unknown main item tag 0x0 [ 803.363016][T13906] prodikeys 0003:041E:2801.003A: unknown main item tag 0x0 [ 804.412214][T13906] prodikeys 0003:041E:2801.003A: unknown main item tag 0x0 [ 804.423669][T13906] prodikeys 0003:041E:2801.003A: unknown main item tag 0x0 [ 804.433734][ T5923] usb 6-1: USB disconnect, device number 69 [ 804.441193][T13906] prodikeys 0003:041E:2801.003A: unknown main item tag 0x0 [ 804.455852][T13906] prodikeys 0003:041E:2801.003A: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.6-1/input1 [ 804.478003][T13906] hid_prodikeys: hid-prodikeys: failed to find output report [ 804.478003][T13906] [ 804.499089][T13906] usb 7-1: USB disconnect, device number 11 [ 804.621709][T16000] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 804.642607][T16000] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 804.764519][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2707'. [ 804.779025][ T79] usb 3-1: USB disconnect, device number 100 [ 806.179961][T16036] input: syz0 as /devices/virtual/input/input60 [ 806.209939][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 806.209953][ T30] audit: type=1400 audit(1768754572.600:44375): avc: denied { ioctl } for pid=16032 comm="syz.4.2716" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 806.766906][T13906] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 806.938691][T13906] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 806.952105][T13906] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 806.967107][T13906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.977611][T13906] usb 5-1: Product: syz [ 806.981768][T13906] usb 5-1: Manufacturer: syz [ 806.986458][ T5923] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 806.994856][T13906] usb 5-1: SerialNumber: syz [ 807.020521][T13906] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 807.060606][T16048] FAULT_INJECTION: forcing a failure. [ 807.060606][T16048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.075190][T16048] CPU: 0 UID: 0 PID: 16048 Comm: syz.5.2721 Tainted: G L syzkaller #0 PREEMPT(full) [ 807.075221][T16048] Tainted: [L]=SOFTLOCKUP [ 807.075227][T16048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 807.075236][T16048] Call Trace: [ 807.075241][T16048] [ 807.075247][T16048] dump_stack_lvl+0x16c/0x1f0 [ 807.075278][T16048] should_fail_ex+0x512/0x640 [ 807.075307][T16048] _copy_from_iter+0x2a4/0x16c0 [ 807.075336][T16048] ? __alloc_skb+0x220/0x410 [ 807.075351][T16048] ? __alloc_skb+0x35d/0x410 [ 807.075367][T16048] ? __pfx__copy_from_iter+0x10/0x10 [ 807.075391][T16048] ? netlink_autobind.isra.0+0x158/0x370 [ 807.075422][T16048] netlink_sendmsg+0x820/0xdd0 [ 807.075448][T16048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.075480][T16048] sock_write_iter+0x566/0x610 [ 807.075504][T16048] ? __pfx_sock_write_iter+0x10/0x10 [ 807.075533][T16048] ? bpf_lsm_file_permission+0x9/0x10 [ 807.075550][T16048] ? security_file_permission+0x71/0x210 [ 807.075576][T16048] ? rw_verify_area+0xcf/0x6c0 [ 807.075598][T16048] vfs_write+0x7d3/0x11d0 [ 807.075620][T16048] ? __pfx_sock_write_iter+0x10/0x10 [ 807.075644][T16048] ? __pfx_vfs_write+0x10/0x10 [ 807.075663][T16048] ? find_held_lock+0x2b/0x80 [ 807.075705][T16048] ksys_write+0x1f8/0x250 [ 807.075726][T16048] ? __pfx_ksys_write+0x10/0x10 [ 807.075754][T16048] do_syscall_64+0xcd/0xf80 [ 807.075779][T16048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.075796][T16048] RIP: 0033:0x7f777f38f749 [ 807.075811][T16048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.075827][T16048] RSP: 002b:00007f778028f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 807.075844][T16048] RAX: ffffffffffffffda RBX: 00007f777f5e5fa0 RCX: 00007f777f38f749 [ 807.075855][T16048] RDX: 0000000000000027 RSI: 0000200000000040 RDI: 0000000000000003 [ 807.075865][T16048] RBP: 00007f778028f090 R08: 0000000000000000 R09: 0000000000000000 [ 807.075875][T16048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.075884][T16048] R13: 00007f777f5e6038 R14: 00007f777f5e5fa0 R15: 00007ffeb7275e18 [ 807.075910][T16048] [ 807.569388][ T30] audit: type=1400 audit(1768754573.970:44376): avc: denied { connect } for pid=16046 comm="syz.3.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 808.029299][T13906] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 808.045107][ T5923] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 808.055235][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.065653][T13906] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 808.073896][T13906] usb 5-1: media controller created [ 808.095692][ T5923] usb 3-1: config 0 has no interface number 0 [ 808.136517][ T5923] usb 3-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 808.157702][T13906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.210606][ T30] audit: type=1400 audit(1768754574.630:44377): avc: denied { bind } for pid=16061 comm="syz.6.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 808.237620][ T5923] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 808.377599][ T5923] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 808.402032][ T5923] usb 3-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 808.625635][ C1] ------------[ cut here ]------------ [ 808.631516][ C1] ODEBUG: free active (active state 0) object: ffff88805ab32490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 808.631845][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.644403][ C1] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#1: syz.3.2725/16065 [ 808.660841][ C1] Modules linked in: [ 808.665096][ C1] CPU: 1 UID: 0 PID: 16065 Comm: syz.3.2725 Tainted: G L syzkaller #0 PREEMPT(full) [ 808.676052][ C1] Tainted: [L]=SOFTLOCKUP [ 808.678745][ T5923] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 808.680368][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 808.699432][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 808.705263][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 12 1c dd 0b 41 56 48 8b 14 dd e0 c3 f2 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 1c cd d3 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 808.724899][ C1] RSP: 0018:ffffc90000a08a08 EFLAGS: 00010246 [ 808.729824][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.730982][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 808.730998][ C1] RDX: ffffffff8bf2c320 RSI: ffffffff8bf2bf00 RDI: ffffffff90924a60 [ 808.731012][ C1] RBP: 0000000000000001 R08: ffff88805ab32490 R09: ffffffff8b906c80 [ 808.731025][ C1] R10: ffffffff9088cad7 R11: ffff8880364c2ff0 R12: ffffffff8bf2bf00 [ 808.731038][ C1] R13: ffffffff8b906cc0 R14: ffffffff8a641d60 R15: ffffc90000a08b08 [ 808.731052][ C1] FS: 00007fedfa8ae6c0(0000) GS:ffff8881249f1000(0000) knlGS:0000000000000000 [ 808.731072][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 808.731087][ C1] CR2: 0000001b34c04ff8 CR3: 0000000035b4a000 CR4: 00000000003526f0 [ 808.731100][ C1] Call Trace: [ 808.731108][ C1] [ 808.731116][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 808.731148][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 808.757767][ T5923] usb 3-1: Product: syz [ 808.763003][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 808.771233][ T5923] usb 3-1: Manufacturer: syz [ 808.778957][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 808.778991][ C1] ? mark_held_locks+0x49/0x80 [ 808.779014][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 808.788950][ T5923] usb 3-1: SerialNumber: syz [ 808.794493][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 808.794524][ C1] kfree+0x2d1/0x6e0 [ 808.804391][ T5923] usb 3-1: config 0 descriptor?? [ 808.805755][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 808.805783][ C1] ? rose_timer_expiry+0x53f/0x630 [ 808.812231][ T5923] symbolserial 3-1:0.175: symbol converter detected [ 808.814214][ C1] ? rose_timer_expiry+0x53f/0x630 [ 808.814241][ C1] rose_timer_expiry+0x53f/0x630 [ 808.821852][ T5923] usb 3-1: symbol converter now attached to ttyUSB0 [ 808.824634][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 808.845110][ T5813] usb 4-1: new low-speed USB device number 105 using dummy_hcd [ 808.845519][ C1] call_timer_fn+0x19a/0x5a0 [ 808.920384][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 808.925520][ C1] ? mark_held_locks+0x49/0x80 [ 808.930278][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 808.935721][ C1] __run_timers+0x74a/0xae0 [ 808.940200][ C1] ? __pfx___run_timers+0x10/0x10 [ 808.945214][ C1] run_timer_base+0x114/0x190 [ 808.949865][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 808.955059][ C1] run_timer_softirq+0x1a/0x40 [ 808.959812][ C1] handle_softirqs+0x219/0x950 [ 808.964553][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 808.969826][ C1] __irq_exit_rcu+0x109/0x170 [ 808.974476][ C1] irq_exit_rcu+0x9/0x30 [ 808.978706][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 808.984315][ C1] [ 808.987237][ C1] [ 808.990158][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 808.996136][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 808.996952][ T5813] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 809.002534][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 6e 1e f6 48 89 df e8 9e c1 1e f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 65 c4 0e f6 65 8b 05 2e 59 37 08 85 c0 74 16 5b [ 809.002556][ C1] RSP: 0018:ffffc9000ecbf848 EFLAGS: 00000246 [ 809.002575][ C1] RAX: 0000000000000002 RBX: ffff8880366fb300 RCX: 0000000000000006 [ 809.002588][ C1] RDX: 0000000000000000 RSI: ffffffff8dacf2d0 RDI: ffffffff8bf2b280 [ 809.002604][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000001 [ 809.024117][ T5813] usb 4-1: language id specifier not provided by device, defaulting to English [ 809.032778][ C1] R10: ffffffff9088cad7 R11: 0000000000000000 R12: ffff8880366fb150 [ 809.032796][ C1] R13: ffff8880366fb340 R14: ffff8880366faca8 R15: ffff88805875cc80 [ 809.032827][ C1] __unix_dgram_recvmsg+0x315/0xc30 [ 809.032858][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 809.047372][ T5923] usb 3-1: USB disconnect, device number 101 [ 809.054847][ C1] ? iovec_from_user+0xbb/0x140 [ 809.101403][ T5923] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 809.104480][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 809.104509][ C1] ____sys_recvmsg+0x5f9/0x6b0 [ 809.104541][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 809.111552][ T5813] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.40 [ 809.117108][ C1] ? irqentry_exit+0x1dd/0x8c0 [ 809.117145][ C1] ___sys_recvmsg+0x114/0x1a0 [ 809.117169][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 809.117190][ C1] ? irqentry_exit+0x1dd/0x8c0 [ 809.117227][ C1] ? __pfx___might_resched+0x10/0x10 [ 809.117253][ C1] do_recvmmsg+0x2fe/0x750 [ 809.117278][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 809.117307][ C1] ? do_futex+0x122/0x350 [ 809.117344][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 809.117374][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 809.117399][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 809.117430][ C1] do_syscall_64+0xcd/0xf80 [ 809.117458][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.117478][ C1] RIP: 0033:0x7fedf998f749 [ 809.117496][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.117520][ C1] RSP: 002b:00007fedfa8ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 809.117541][ C1] RAX: ffffffffffffffda RBX: 00007fedf9be6090 RCX: 00007fedf998f749 [ 809.117555][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 809.117568][ C1] RBP: 00007fedf9a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 809.117581][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 809.117593][ C1] R13: 00007fedf9be6128 R14: 00007fedf9be6090 R15: 00007ffefc0ec898 [ 809.117622][ C1] [ 809.117634][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 809.117649][ C1] CPU: 1 UID: 0 PID: 16065 Comm: syz.3.2725 Tainted: G L syzkaller #0 PREEMPT(full) [ 809.117677][ C1] Tainted: [L]=SOFTLOCKUP [ 809.117684][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 809.117696][ C1] Call Trace: [ 809.117703][ C1] [ 809.117711][ C1] dump_stack_lvl+0x3d/0x1f0 [ 809.117737][ C1] vpanic+0x640/0x6f0 [ 809.117756][ C1] ? debug_print_object+0x18e/0x2a0 [ 809.117774][ C1] panic+0xca/0xd0 [ 809.117791][ C1] ? __pfx_panic+0x10/0x10 [ 809.117815][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 809.117834][ C1] check_panic_on_warn+0xab/0xb0 [ 809.117854][ C1] __warn+0x108/0x3c0 [ 809.117875][ C1] __report_bug+0x2a0/0x520 [ 809.117892][ C1] ? debug_print_object+0x18e/0x2a0 [ 809.117912][ C1] ? __pfx___report_bug+0x10/0x10 [ 809.117937][ C1] ? mark_held_locks+0x49/0x80 [ 809.117956][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 809.117981][ C1] report_bug_entry+0xe1/0x290 [ 809.117999][ C1] ? debug_print_object+0x19b/0x2a0 [ 809.118018][ C1] handle_bug+0x18a/0x260 [ 809.118041][ C1] exc_invalid_op+0x17/0x50 [ 809.118057][ C1] asm_exc_invalid_op+0x1a/0x20 [ 809.118072][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 809.118092][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 12 1c dd 0b 41 56 48 8b 14 dd e0 c3 f2 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 1c cd d3 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 809.118107][ C1] RSP: 0018:ffffc90000a08a08 EFLAGS: 00010246 [ 809.118121][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 809.118131][ C1] RDX: ffffffff8bf2c320 RSI: ffffffff8bf2bf00 RDI: ffffffff90924a60 [ 809.118142][ C1] RBP: 0000000000000001 R08: ffff88805ab32490 R09: ffffffff8b906c80 [ 809.118153][ C1] R10: ffffffff9088cad7 R11: ffff8880364c2ff0 R12: ffffffff8bf2bf00 [ 809.118164][ C1] R13: ffffffff8b906cc0 R14: ffffffff8a641d60 R15: ffffc90000a08b08 [ 809.118176][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 809.118210][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 809.118233][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 809.118257][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 809.118284][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 809.118309][ C1] ? mark_held_locks+0x49/0x80 [ 809.118327][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 809.118346][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 809.118370][ C1] kfree+0x2d1/0x6e0 [ 809.118384][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 809.118404][ C1] ? rose_timer_expiry+0x53f/0x630 [ 809.118426][ C1] ? rose_timer_expiry+0x53f/0x630 [ 809.118444][ C1] rose_timer_expiry+0x53f/0x630 [ 809.118463][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 809.118481][ C1] call_timer_fn+0x19a/0x5a0 [ 809.118505][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 809.118530][ C1] ? mark_held_locks+0x49/0x80 [ 809.118549][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 809.118569][ C1] __run_timers+0x74a/0xae0 [ 809.118595][ C1] ? __pfx___run_timers+0x10/0x10 [ 809.118632][ C1] run_timer_base+0x114/0x190 [ 809.118651][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 809.118674][ C1] run_timer_softirq+0x1a/0x40 [ 809.118693][ C1] handle_softirqs+0x219/0x950 [ 809.118720][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 809.118748][ C1] __irq_exit_rcu+0x109/0x170 [ 809.118770][ C1] irq_exit_rcu+0x9/0x30 [ 809.118791][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 809.118811][ C1] [ 809.118817][ C1] [ 809.118824][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 809.118842][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 809.118862][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 6e 1e f6 48 89 df e8 9e c1 1e f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 65 c4 0e f6 65 8b 05 2e 59 37 08 85 c0 74 16 5b [ 809.118876][ C1] RSP: 0018:ffffc9000ecbf848 EFLAGS: 00000246 [ 809.118889][ C1] RAX: 0000000000000002 RBX: ffff8880366fb300 RCX: 0000000000000006 [ 809.118899][ C1] RDX: 0000000000000000 RSI: ffffffff8dacf2d0 RDI: ffffffff8bf2b280 [ 809.118909][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000001 [ 809.118919][ C1] R10: ffffffff9088cad7 R11: 0000000000000000 R12: ffff8880366fb150 [ 809.118930][ C1] R13: ffff8880366fb340 R14: ffff8880366faca8 R15: ffff88805875cc80 [ 809.118957][ C1] __unix_dgram_recvmsg+0x315/0xc30 [ 809.118980][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 809.119011][ C1] ? iovec_from_user+0xbb/0x140 [ 809.119038][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 809.119056][ C1] ____sys_recvmsg+0x5f9/0x6b0 [ 809.119083][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 809.119114][ C1] ? irqentry_exit+0x1dd/0x8c0 [ 809.119142][ C1] ___sys_recvmsg+0x114/0x1a0 [ 809.119161][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 809.119179][ C1] ? irqentry_exit+0x1dd/0x8c0 [ 809.119212][ C1] ? __pfx___might_resched+0x10/0x10 [ 809.119233][ C1] do_recvmmsg+0x2fe/0x750 [ 809.119256][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 809.119281][ C1] ? do_futex+0x122/0x350 [ 809.119313][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 809.119337][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 809.119357][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 809.119384][ C1] do_syscall_64+0xcd/0xf80 [ 809.119406][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.119422][ C1] RIP: 0033:0x7fedf998f749 [ 809.119435][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.119449][ C1] RSP: 002b:00007fedfa8ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 809.119464][ C1] RAX: ffffffffffffffda RBX: 00007fedf9be6090 RCX: 00007fedf998f749 [ 809.119475][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 809.119485][ C1] RBP: 00007fedf9a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 809.119495][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 809.119510][ C1] R13: 00007fedf9be6128 R14: 00007fedf9be6090 R15: 00007ffefc0ec898 [ 809.119533][ C1] [ 809.122888][ C1] Kernel Offset: disabled