last executing test programs: 2m38.29698177s ago: executing program 0 (id=635): openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x113000, 0x24) getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000000)={0xc0f0f000, 0x101, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x9, 0x9977, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x7, [0x3, 0x0, 0x13, 0x2]}) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000180)="aea129502dbfd21b29be8c9c902bb9f903c86f673f493b49716534dcec43df4f6a33dab2062cd2d772045077ba46b93b53cd6c90080ab4b18b8344acf5e16b15262209c9aad1a34f2705c369cd1377fc55d566b8be38048ec6553ffcd3ace00c6d2c45beb5c60be3b1e602758cc8b1ee04f61619a7de8ca135a46f48de0356af784f92a58370e8c511d74b112d6b5dab5aa1e72c1f6d49a1011171b9093210de17c8", &(0x7f0000000380)="c3ce866e991b47b6cb834587d5a01c4773ad43cf82c34b019be31ba90a76b4504fb787ef978269dab08e6a19019f36d2a7679644ff625a75ced6c842cc1de3616cbe214dc0db82149fb0e66b237e0eb1526953a65bc42ce055e16f3d88cb4d48d5e0d5d31bc086485654e37700e71da98dfc6810cc8524e4822af48402914256ce52f845eebeb60372bfa567ac48b3e28373"}}, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) 2m36.948024623s ago: executing program 0 (id=641): socket$inet(0x2, 0x80001, 0x84) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x500, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0x9}, {0x29}, 0x1, 0x192, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) inotify_init1(0x100000) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x4, 0xffffffffffffffff, &(0x7f0000000c80)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f4210309000000000000000400000000000000400000000004000280bee12fa71b67463fb9292edc92fee5fc5448156946418147665ea0c73f5466a8f3700e6b46729227b1"], 0x20}, 0x1, 0x0, 0x0, 0x200400c4}, 0x0) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000302000a000000000b0a01020000000000000500000614000000110001000000000000230000030014b5e919ecf01acc3f7605194dec0000000000000000000059e7b96150827e6020ac1dab7c693151359d587757ad018d5d0de7ac7dcc14e09a8180dac516f8bc8590d1b71fd41c10ddf0eb56500a7fade75a47f1a7a992e5aeacc30784"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r5, 0x89f0, &(0x7f0000000080)=0x59b) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m32.17981545s ago: executing program 0 (id=653): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r1 = dup(r0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x50) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40008c0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0xf334, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x18) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000002, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) 2m30.867678255s ago: executing program 0 (id=657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x492dfc465ae32a8d}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m30.294205427s ago: executing program 0 (id=658): r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f000000080005", @ANYRESOCT=r1], 0x40}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)=r4}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xe0480, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r8, 0x2}) r11 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) close_range(r7, 0xffffffffffffffff, 0x0) 2m27.26355044s ago: executing program 0 (id=668): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x941) ioctl$NBD_DISCONNECT(r1, 0xab08) 2m12.096163023s ago: executing program 32 (id=668): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x941) ioctl$NBD_DISCONNECT(r1, 0xab08) 2m0.022483627s ago: executing program 4 (id=747): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sched_setscheduler(0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000300)=r2) 1m58.377747581s ago: executing program 4 (id=750): socket$inet_tcp(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 7) 1m54.894192332s ago: executing program 4 (id=760): r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f000000080005", @ANYRESOCT=r1], 0x40}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd(r5, &(0x7f0000000040)={[0x4]}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xe0480, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r8, 0x2}) r11 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) close_range(r7, 0xffffffffffffffff, 0x0) 1m53.764485706s ago: executing program 4 (id=761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xfe, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xf0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x35, 0x4, 0x0, 0x0, 0x0, 0x1, 0x81, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x71, 0x3, [{0x0, 0xc, "0800b28c590300000052"}, {0x1, 0x9, "020007651442eb"}, {0x0, 0xe, "743495437304000000b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "0000000000800000"}, {0x7, 0xf, "73bc23f9ffffffa30900a301c8"}, {0x0, 0xf, "c8f46976e79ea788f03d9d3205"}]}, @timestamp_addr={0x44, 0x4c, 0xe1, 0x1, 0x4, [{@loopback, 0x3}, {@empty, 0x81}, {@multicast1, 0x1}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xffff9a05}, {@loopback, 0x100}, {@private=0xa010100, 0x4}, {@multicast2, 0x80000000}, {@private=0xa010102, 0x12c}]}]}}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000000)={0x10004, 0x280, 0x1c0, 0x0}) 1m53.282187671s ago: executing program 4 (id=764): lsetxattr$security_selinux(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340), &(0x7f0000000500)='system_u:object_r:removable_device_t:s0\x00', 0x28, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r5 = socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r4, r3}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073"], 0x7c}}, 0x0) 1m52.343332816s ago: executing program 4 (id=767): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r3, &(0x7f0000000000)="ec", 0x1, 0x10000, &(0x7f0000000100)={0x23, 0x5, 0xe8, 0x23}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009404, &(0x7f0000000140)) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x309, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}]}) sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'netdevsim0\x00', 0x7fff}) 1m37.090788296s ago: executing program 33 (id=767): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r3, &(0x7f0000000000)="ec", 0x1, 0x10000, &(0x7f0000000100)={0x23, 0x5, 0xe8, 0x23}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009404, &(0x7f0000000140)) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x309, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}]}) sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'netdevsim0\x00', 0x7fff}) 13.49483646s ago: executing program 1 (id=1053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) syz_usb_connect(0x5, 0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="8c2e4efdac6a718de6bfa87053b67021996f5cb308f303b3ba1bc6ba214a514d9e0e9bed758a24f59c0f484b2566ce52e38b50cee0b368b600a263", @ANYRESHEX=r0, @ANYRESHEX=r0], 0x0) 12.007856972s ago: executing program 2 (id=1056): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffcf6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, 0xffffffffffffffff, 0xfffffffffffffff8) write(r6, &(0x7f0000000500)="ab56a33cb02af327410499909b736bcf632eb12a834fde68523957cc8f2f557e95c40edade066c2a201751625b57bd91e342b09576c31b3a84e0e1301679a95c3bbcde444c60de67ded01af399b5d737846aaf622f6f62c2a0feab322e86c7e3b16b000a49ce020494c274b34cd1f3857d76830e84f6703207120b053ed1a5273347e8a1fa35eea85bd9a076e37792720ae32e7573db430d17de67eae7cf852a7a89afb11bb9cf1ef6b4645b52feccbbe3fa5733a4e9e672ed47acac225024e8ab63d17afdfba80eb413aa7d00c336523514", 0xd2) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r4) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) 10.186003889s ago: executing program 6 (id=1059): socket$kcm(0xa, 0x3, 0x87) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r5, &(0x7f0000000100)=[{&(0x7f00000001c0)="da575e", 0x3}], 0x1, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0x401, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x84}, 0xe) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e24, @loopback}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x20, {0x2, 0x4e22, @rand_addr=0x64010102}, 'veth0_virt_wifi\x00'}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000800008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_LABEL={0x11}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL]}, {0xfffffffffffffe81, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r8) 9.945572499s ago: executing program 1 (id=1060): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x300) r4 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40002103) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670800000000005601000000ff07ad6706000002000000070300000ee60000bf250000000000002d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861220799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001000000ef931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f0400000000000000d23b48bb38b31a14ffcddd92c38f6b6d86a0e56d47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f1300007d6072f0cf120ad2ba519afdd43a14000000000000000000000000007ef2f3c58d045f0700000094069acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d000000000000000000007758b1267669ded883b5867c5916a74843b784955108f750c57744c76a09629dd0aaca5cb0f14f49db80a1aa2692c18fbb31cbdb3f2e138e6d5ba3491fc3617b511f24bad26466407e39000000000000d7a1bf4624d31c13a6840f45a7f4e01a50d790132abb36915e35b1ac35bf3921357f638684bba17b8fe1e2123153ecd6d1f76820d4f8fa0b96b50c457ae8d5f2351cdb7bc8170380557bc11cf6ee3395974e37018a2a7473312cb32affb8ff72a253e0d36099e460f13694b9891af526d9608271838e83d17103887f34210dd4c0cf60dec608b4ca5ba2f3037bf381e7b5d5b27820000000000000000000000b719bd34f3244730f708fdd532640edc6b82dd4ad72ecbaccafef806f5447aba2246d56a601bbd8c24ba1e16dda3296ce10de6830"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmmsg$alg(r0, &(0x7f00000028c0)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f9b45243c6da02d8eabf4a9f1ba80e08e085234b6a3505e3bebf4213c1fec940357184eb8e5b08faf052d27f3250deade8892285ae17cfbfca0095d2b160f419c0386fb76884a10cd41ba7269a67be1babd287626454170ff98e605a53bfe01c15578db15b49ba21a72e2df899702bbbb773674f44ba07b05ffc193bac9ed69c446ee424764491dfad3956292cc4aa9267185e7a17765f8f", 0x98}, {&(0x7f0000000140)="91e7cd208b956a6eea3e155cbde36f1d4e4123ace01a3881210c831c52694d092081e607707b77a400846b5a15e494260ddd1d5724ab2bb7815e62ce10e4a506ea0c1e2bb9af89fda9e39265c0be9076da68ecce40bd3fbceaaf2f5005b6824b6521c650c40792e702a363", 0x6b}, {&(0x7f00000001c0)="adec9f349e4a0cc75c120605fe100f690d77e805d9388aa93c54aed0ba5cf5760bc0bc29f4ee1b7052b53d17ab4575739aa8deec9f2edeac67a5980eaf72d88125cb2f95ddaa7b37bc40420b76eee4588449dfeae0bc48d7d2480fc92691d7c230b8c9bc76c0e296dc0035623adcd2e17a8a6f62a7ef7c3056035539ee1977ce1fb432360cf909309488304c691ae86815", 0x91}, {&(0x7f0000000280)="be537607a4fd98b80bd874f032582ab48902fe8ccfac241ae5de02e42590a4d63021cb7bf46e3a02339dfddb01106415ec983049047e51d4ba42e73d7d5d384145d005eb40559e71711bc6ab09b1786e62ab9526bbe20d926e96b68c1ebf850fd61f7a25ff97093d633f37460fd34bf85a67ba5aaffd536587f5b3d2fac5b5d589a6e0d62c56a22147294e22dabe8efc6e54ff97ffe06d1bf799e748c8f231c1718cc29b50bc405c5d258a8e8f76a330", 0xb0}], 0x4, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x401}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xd8, 0x117, 0x2, 0xbd, "c04055d80553dbb26c08aee37763f265932a26b941a04bf1b5ed76ef03103bbe2f0acf480df1bcdb5fd8bd8aff186fc98e464614893e70aebfc1c6a4c7e60472e41bed109d1bd846b893800b2034218ba1bac2d513ba5598100dd31c73595cc9c28593787c7367b0a7a994c8043f4b29b55d09f2a3b0300f1b47fd390d8fbf5dea58e9cbb0ef84b819430e4c5a9b8f189c948f3afdb3d6a3e680147c9e63701c549d337f76b0dbc51d29bfe1f86b7202d1feb4753ed33389733bec1532"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x1b0, 0x4000}, {0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000540)="2f2610b061ed49fc5929d99b3eff429005052d1db8e61c8b2a3fc08492d923a9ee6da2c47f5b58c16d6eb6a127480958df3ad6e0a768ce91e65cee1f013fabebe961dfe02f08439287433da65d7582e35767a3d2cf744cf0269eeb53a61b55018501f1b080bab7e22b3f4e28ddf08a73d2e89c94", 0x74}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="c9714b85888e6611674aededa082caa3399478d62ac74792400767386309bc76a93c18b5d2feb2b436f409713f21edfa6c7e2bf00aa9a82a9f0b19881b80ae6f50ffb7fd612b321c75a03aca963b2d5beb1b930087bb7e60c6635b4b2d5f2aea3e69369c876384de9b6f2515a82f594fafb6e83e6243ad", 0x77}], 0x4, &(0x7f0000002680)=[@iv={0xa0, 0x117, 0x2, 0x85, "17a92ee235472c155c613dddac282c05f72f28d072a0c41356f29937c2cf0d8050418cf404855f2b424c33631e7d5076ee73bc3071f49b44e8d4520ffcd82af4ae44cfdb271bdf99e8da68113ee3dbe7f2849881420daaf73ecf78fb8ce4defed59f8e9c8b22e4c0b879fde882081bdd9c60b0a2dd6af32a7c5139ab03bfe196e61be9d1f4"}, @iv={0x60, 0x117, 0x2, 0x4a, "aaac8b4ddabe4bfb1ddcf395796dc75198276614619f65e1823f8c76bbdaa25525b7250152b6bd8b3688fd5b817aaa6ddd13e1e22db40e5f20d9ed4718fe9b38d2a4c82e6c3e7682f2fd"}, @iv={0x118, 0x117, 0x2, 0xfd, "a741be6580b1d1393193c84d4a1e88d9b056af68d22ec9673e2b85fde0a6b225ada2ba9381ddc89f1b489a9fd9874bc7bf0651feff209365bd76c31c6f6f5deab7f03c27a7edd78982ad08214d59dc1b2093b848ec41cca8c6df9245a9e4405e5419148fe0c9d5170bd80837a20e77be1c89544837f380f44cc78e0983c60b0000002c3f7f54792daca08a93bbba401da009f6369983639c7b8dae2bf41d3139e4003bdd4defb54cbe8c7f1ca739e079693ef8dbed06a918575e322df3bc3e379978c7b9a2ef7fb5c91e7ea884bbd6a0455a3314322251dd980af52e266318035e3759f15f1135e6a3e88870529716130e5c5117501625da18b8baeecf"}], 0x218, 0x4044000}], 0x2, 0x890) syz_usb_connect(0x2, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bcc7fc081e040a3f168a0000000109023300010000200009040b0000ffcc1c00052406000005240004000d240f01ed00ffffffffffffff7f241500100524010005"], 0x0) 8.643372506s ago: executing program 6 (id=1063): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x4e, &(0x7f0000000040)={&(0x7f00000005c0)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'gact\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) times(&(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 8.605142797s ago: executing program 3 (id=1064): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x7, @vbi={0xfffff2c9, 0x150, 0x4, 0x41414770, [0xfd, 0x4], [0x3, 0xe1], 0x1}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {0x0, 0x9}}}, 0x24}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000400000000850000006d00000095", @ANYBLOB="5c4c6dadae4289cd3c9ae64838a14dea1c65bdddc7c379cd66f3e64ae6e5c369609cd4768ce442bcfc3bc30b2c006ce9b6ab4d2805f6b63e90daef204a6ca74bc752812d213959ee0f63bb4effde04d56c5ff189504433c1768186ebab71b4718ec7faf27a4e0802c0326771d497f16be029f124d3f5884f8f69560ac054b2a24d58e9dc7b42822d5b3d5201495d42629adad3904a178466c76480a31be6e2d8e3d3b1259b8b72cbfc3f36a2e81eba4b7a977b63bd4d3a0e42", @ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_usb_connect(0x3, 0x17e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) write(r7, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee2003001a000000", 0x33a) 8.589804323s ago: executing program 2 (id=1065): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b553c0006000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x0, 0x20000001, 0x8, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000b40)={0x250, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000c40) 7.673575154s ago: executing program 2 (id=1067): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r0 = io_uring_setup(0x785a, &(0x7f0000000580)={0x0, 0xddf4, 0x400, 0xfffffdfe, 0x183}) close_range(r0, r0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x50080, 0x8b) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000003c0)='[&.\x00', &(0x7f00000004c0)='./file0\x00', r4) recvmmsg(r1, &(0x7f0000003000)=[{{&(0x7f00000026c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002980)}, 0x2c}, {{0x0, 0x0, &(0x7f0000002f00)}, 0x2}], 0x2, 0xfc0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x52b381, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405668, &(0x7f0000000000)={0xd, 0x1, 0x1, "a90000eaffffffde4832c305070000000000000040080000faffffff8200", 0x4c314356}) 7.607636118s ago: executing program 5 (id=1068): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'vlan0\x00', {0x2}, 0x2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_hsr\x00', {0x1}, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000300)={0xffffffffffffffff, {0x20, 0x4, 0x2, 0x41ac854f, 0x2}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x2, 0x1, 0x0, 0x2}, 0x20) 6.685922324s ago: executing program 2 (id=1069): r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f000000080005", @ANYRESOCT], 0x40}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xe0480, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r8, 0x2}) r11 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) close_range(r7, 0xffffffffffffffff, 0x0) 6.510610302s ago: executing program 5 (id=1070): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNSETVNETLE(r5, 0x400454dc, 0x0) write$tun(r5, &(0x7f0000000080)={@void, @val={0x3, 0x3, 0x20, 0x14, 0x8, 0xffff}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x2, 0x1, 0x24, 0x65, 0x0, 0x4, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x4e23, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x9, 0x3, "61dace", 0x4, "24508d"}}}}}, 0x2e) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000740)={[], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}], 0x2f}) 6.481949079s ago: executing program 1 (id=1071): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001780)={@cgroup, 0x16, 0x0, 0x521, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) listen(r1, 0x0) writev(r0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000002c0)="94", 0xf000}], 0x104) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x400}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) fsopen(&(0x7f0000000000)='udf\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x7, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) close_range(r6, r5, 0x0) 5.900267236s ago: executing program 1 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="502f7a2befc0a0f5651c3262fc6a36a12ed4b20a23325fc8812ef34c977c76051677df57b854f207a8aabcb1bd81b0596a8d683844", @ANYRES32=0x0, @ANYRES64=r0], 0x48}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4982}], 0x1, 0xfffffffa) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x3, 0x34a) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000440)={@val={0xa, 0xf8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x64, 0x11, 0xff, @private1, @mcast2, {[], {0x4e20, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "1f0b4f706c142fbaeee0828b9ead0a53786f80768c9b7ed4a3cc0091dace043c", "9efd7edcca5abc059ef1d5d62c17c5db", {"cd8945b500f018df408a9ebe075420c0", "8ecd1500ee4c400671fa86c074bf4590"}}}}}}}}}, 0x9e) 5.196474718s ago: executing program 2 (id=1073): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) setreuid(0x0, r4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) prctl$PR_SET_SECCOMP(0x59616d61, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) read$FUSE(r6, &(0x7f0000001240)={0x2020}, 0x2020) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[], 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 5.196115786s ago: executing program 3 (id=1074): setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000580)={0x40f0f000, 0x101, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x8, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x10, [0x0, 0x0, 0x13, 0x2]}) read$FUSE(0xffffffffffffffff, &(0x7f00000010c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000340)={0x0, 0x0, 0xfffffe3f, 0x0, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb"}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x11, 0x2}, @cond=[{0x1ff, 0x5388, 0x10, 0x800, 0xc7, 0x7}, {0x2, 0x5, 0x8, 0x4a, 0x6, 0x7}]}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) 5.193931225s ago: executing program 6 (id=1075): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x0, 0x2, 0x0, 0x5]}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0xa0a, @rand_addr=' \x01\x00', 0x6}}}, 0x84) 5.119416343s ago: executing program 5 (id=1076): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000190a09040000000000000000020000099189cd42ca392b210900010073797a30000000000900020073797a320000000008000a400000000104000740140000001100010000000000000000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000080)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x40040) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) syz_open_dev$loop(&(0x7f0000000540), 0x4, 0x402582) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d", 0xd, 0xfffffffffffffffd) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000040)) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e21, 0x6, @mcast1, 0x9}, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x0, {[0x5, 0x0, 0x8, 0x8, 0x7, 0x98d, 0x22bb, 0x9]}}, 0x5c) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getgid() 3.412592064s ago: executing program 3 (id=1077): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x0, 0x0}) rt_sigaction(0xd, &(0x7f0000003a40)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xcf4e74310708dfc5, 0xc}) sendmmsg$inet6(r4, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) 3.374930871s ago: executing program 6 (id=1078): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000008c0)="fe", 0x1}], 0x1}}], 0x1, 0x0) 3.055736405s ago: executing program 1 (id=1079): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r0 = io_uring_setup(0x785a, &(0x7f0000000580)={0x0, 0xddf4, 0x400, 0xfffffdfe, 0x183}) close_range(r0, r0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x50080, 0x8b) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000003c0)='[&.\x00', &(0x7f00000004c0)='./file0\x00', r4) recvmmsg(r1, &(0x7f0000003000)=[{{&(0x7f00000026c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002980)}, 0x2c}, {{0x0, 0x0, &(0x7f0000002f00)}, 0x2}], 0x2, 0xfc0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x52b381, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405668, &(0x7f0000000000)={0xd, 0x1, 0x1, "a90000eaffffffde4832c305070000000000000040080000faffffff8200", 0x4c314356}) 2.574063176s ago: executing program 5 (id=1080): r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164", @ANYRESOCT=r1], 0x40}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd(r6, &(0x7f0000000040)={[0x4]}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)=r4}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xe0480, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000100)={0x20004, r9, 0x2}) r12 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r12, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) close_range(r8, 0xffffffffffffffff, 0x0) 2.458091833s ago: executing program 3 (id=1081): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r0 = io_uring_setup(0x785a, &(0x7f0000000580)={0x0, 0xddf4, 0x400, 0xfffffdfe, 0x183}) close_range(r0, r0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x50080, 0x8b) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000003c0)='[&.\x00', &(0x7f00000004c0)='./file0\x00', r4) recvmmsg(r1, &(0x7f0000003000)=[{{&(0x7f00000026c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000002980)}, 0x2c}, {{0x0, 0x0, &(0x7f0000002f00)}, 0x2}], 0x2, 0xfc0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x52b381, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405668, &(0x7f0000000000)={0xd, 0x1, 0x1, "a90000eaffffffde4832c305070000000000000040080000faffffff8200", 0x4c314356}) 2.368747s ago: executing program 6 (id=1082): openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x113000, 0x24) getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000000)={0xc0f0f000, 0x101, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x9, 0x9977, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x7, [0x3, 0x0, 0x13, 0x2]}) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000180)="aea129502dbfd21b29be8c9c902bb9f903c86f673f493b49716534dcec43df4f6a33dab2062cd2d772045077ba46b93b53cd6c90080ab4b18b8344acf5e16b15262209c9aad1a34f2705c369cd1377fc55d566b8be38048ec6553ffcd3ace00c6d2c45beb5c60be3b1e602758cc8b1ee04f61619a7de8ca135a46f48de0356af784f92a58370e8c511d74b112d6b5dab5aa1e72c1f6d49a1011171b9093210de17c8", &(0x7f0000000380)="c3ce866e991b47b6cb834587d5a01c4773ad43cf82c34b019be31ba90a76b4504fb787ef978269dab08e6a19019f36d2a7679644ff625a75ced6c842cc1de3616cbe214dc0db82149fb0e66b237e0eb1526953a65bc42ce055e16f3d88cb4d48d5e0d5d31bc086485654e37700e71da98dfc6810cc8524e4822af48402914256ce52f845eebeb60372bfa567ac48b3e28373"}}, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) 1.456702806s ago: executing program 1 (id=1083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0xb9d16466292578fa, &(0x7f0000000340)=0x7) sched_setscheduler(0x0, 0x0, &(0x7f0000000300)=0x7) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4) socket$pptp(0x18, 0x1, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000000)='\\', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0xffffff32, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.399335305s ago: executing program 5 (id=1084): r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f000000080005", @ANYRESOCT], 0x40}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xe0480, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r8, 0x2}) r11 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) close_range(r7, 0xffffffffffffffff, 0x0) 1.089608717s ago: executing program 2 (id=1085): r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$dri(0x0, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xa0008d0}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@delchain={0x24, 0x65, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xb, 0xf}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000580), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0xee01, &(0x7f0000000680)={0x7fd, 0x6, 0x2000200000a95c, 0xfffffffffffffffc, 0x4000000204, 0x80000001, 0x48ca, 0x6, 0x7ff}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000480)={0xe, {0x1, 0x7f, 0xa9, 0xc7, "920236c03a148be0b134eb523aa353c1a3e482a08ce1949411b4670946d9c43c22f643188e37cf98e372ee7367961ed2ea7ede90c406b9cb0907eb9f0f828390ee7f86a380a949249ecffb4d6bfc1e86199410f5f838a36a9bf5fde88fe4fc917cfd65fd9f0d260f154cf4d80169043ff3eb47fa33cb1f0dd32f2a109994de0de7b0b24c9d79a829bd58b96a39bbe39568b751b3a279f486e4f658e01d9caa5cda823e23c84ebbba5c645f6041543b82fc91f8608b9cc9dbc98a027fadc8c62117b5ded33b0a2b"}}, 0xd3) 272.833609ms ago: executing program 3 (id=1086): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,no']) 264.102964ms ago: executing program 6 (id=1087): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) accept4$x25(0xffffffffffffffff, &(0x7f0000019200), &(0x7f0000019240)=0x12, 0x800) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$kcm(0x29, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 14.72556ms ago: executing program 5 (id=1088): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x0, 0x2, 0x0, 0x5]}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0xa0a, @rand_addr=' \x01\x00', 0x6}}}, 0x84) 0s ago: executing program 3 (id=1089): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x40, 0x7c, 0x2, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, 0x8000, 0x700, 0x9, 0x9}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_dellink={0x70, 0x11, 0x900, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r0, 0x10000, 0x10020}, [@IFLA_EVENT={0x8, 0x2c, 0x7}, @IFLA_AF_SPEC={0x20, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x52109e6c}]}}]}, @IFLA_EVENT={0x8, 0x2c, 0x400}, @IFLA_ADDRESS={0xa, 0x1, @random="9fb08aa8135a"}, @IFLA_IFALIASn={0x4}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "3a671a2bd4045c9346ee7e4e"}]}, 0x70}, 0x1, 0x0, 0x0, 0x48800}, 0x20004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) kernel console output (not intermixed with test programs): =0 [ 270.889697][ T5885] usb 2-1: Product: syz [ 270.893895][ T5885] usb 2-1: Manufacturer: syz [ 270.912827][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 270.918065][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 270.941146][ T5885] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 271.097666][ T5885] cdc_wdm 2-1:1.0: Unknown control protocol [ 271.111195][ T8106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.143944][ T8106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.210452][ T8108] FAULT_INJECTION: forcing a failure. [ 271.210452][ T8108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.223653][ T8108] CPU: 1 UID: 0 PID: 8108 Comm: syz.3.554 Not tainted syzkaller #0 PREEMPT(full) [ 271.223674][ T8108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 271.223684][ T8108] Call Trace: [ 271.223690][ T8108] [ 271.223697][ T8108] dump_stack_lvl+0x16c/0x1f0 [ 271.223727][ T8108] should_fail_ex+0x512/0x640 [ 271.223751][ T8108] _copy_from_user+0x2e/0xd0 [ 271.223773][ T8108] copy_msghdr_from_user+0x98/0x160 [ 271.223796][ T8108] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 271.223831][ T8108] ___sys_sendmsg+0xfe/0x1d0 [ 271.223854][ T8108] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.223874][ T8108] ? __lock_acquire+0x622/0x1c90 [ 271.223926][ T8108] __sys_sendmsg+0x16d/0x220 [ 271.223949][ T8108] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.223987][ T8108] do_syscall_64+0xcd/0xfa0 [ 271.224005][ T8108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.224021][ T8108] RIP: 0033:0x7f462038f6c9 [ 271.224035][ T8108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.224050][ T8108] RSP: 002b:00007f4621163038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.224068][ T8108] RAX: ffffffffffffffda RBX: 00007f46205e6180 RCX: 00007f462038f6c9 [ 271.224078][ T8108] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 000000000000000a [ 271.224088][ T8108] RBP: 00007f4621163090 R08: 0000000000000000 R09: 0000000000000000 [ 271.224098][ T8108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.224107][ T8108] R13: 00007f46205e6218 R14: 00007f46205e6180 R15: 00007ffe4a11bc28 [ 271.224132][ T8108] [ 271.449952][ T5958] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 271.489875][ T30] audit: type=1400 audit(1762832678.484:294): avc: denied { read write } for pid=8081 comm="syz.1.548" name="cdc-wdm0" dev="devtmpfs" ino=3221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 271.513720][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.561438][ T30] audit: type=1400 audit(1762832678.484:295): avc: denied { open } for pid=8081 comm="syz.1.548" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 272.160602][ T5958] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 272.170957][ T5958] usb 5-1: config 0 interface 0 has no altsetting 0 [ 272.272609][ T5958] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 272.281912][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 273.312489][ T5958] usb 5-1: Product: syz [ 273.541716][ T5958] usb 5-1: Manufacturer: syz [ 273.546350][ T5958] usb 5-1: SerialNumber: syz [ 273.580961][ T5958] usb 5-1: config 0 descriptor?? [ 273.624524][ T5958] usb 5-1: selecting invalid altsetting 0 [ 273.662273][ T1206] usb 2-1: USB disconnect, device number 20 [ 275.680429][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 275.920657][ T30] audit: type=1326 audit(1762832683.014:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.3.562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f462038f6c9 code=0x0 [ 276.092866][ T8153] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.564'. [ 276.129275][ T5885] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 276.549406][ T1206] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 276.609281][ T5885] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 276.638067][ T5885] usb 2-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 276.679388][ T5885] usb 2-1: config 0 has no interface number 0 [ 276.695983][ T5885] usb 2-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=8a.16 [ 276.713390][ T5958] usb 5-1: USB disconnect, device number 17 [ 276.770592][ T1206] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 277.199886][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.523827][ T1206] usb 1-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 277.546489][ T1206] usb 1-1: config 0 has no interface number 0 [ 277.553132][ T1206] usb 1-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=8a.16 [ 277.563713][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.575432][ T1206] usb 1-1: config 0 descriptor?? [ 277.598031][ T1206] usb 1-1: unknown interface protocol 0x1c, assuming v1 [ 277.607039][ T1206] usb 1-1: cannot find UAC_HEADER [ 277.609808][ T5885] usb 2-1: config 0 descriptor?? [ 277.625608][ T8160] overlayfs: failed to resolve './file1': -2 [ 277.643438][ T1206] snd-usb-audio 1-1:0.11: probe with driver snd-usb-audio failed with error -22 [ 277.657414][ T5885] usb 2-1: can't set config #0, error -71 [ 277.795058][ T5885] usb 2-1: USB disconnect, device number 21 [ 277.803458][ T1206] usb 1-1: USB disconnect, device number 17 [ 277.819537][ T30] audit: type=1400 audit(1762832684.874:297): avc: denied { write } for pid=8163 comm="syz.3.569" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 278.183534][ T30] audit: type=1400 audit(1762832684.934:298): avc: denied { mounton } for pid=8163 comm="syz.3.569" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 278.185141][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.11/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.246173][ T30] audit: type=1400 audit(1762832685.214:299): avc: denied { map } for pid=8163 comm="syz.3.569" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 278.288536][ T30] audit: type=1400 audit(1762832685.214:300): avc: denied { execute } for pid=8163 comm="syz.3.569" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 278.337289][ T8175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.348263][ T8175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.861370][ T8177] overlayfs: failed to resolve './file1': -2 [ 278.927524][ T30] audit: type=1400 audit(1762832686.014:301): avc: denied { write } for pid=8187 comm="syz.1.575" path="socket:[18282]" dev="sockfs" ino=18282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 278.952256][ T30] audit: type=1400 audit(1762832686.014:302): avc: denied { read } for pid=8187 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 279.048750][ T8193] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.120723][ T42] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 279.229428][ T30] audit: type=1400 audit(1762832686.264:303): avc: denied { setopt } for pid=8187 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 279.570614][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 279.615139][ T42] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 279.679078][ T42] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 279.700355][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 279.707669][ T30] audit: type=1400 audit(1762832686.794:304): avc: denied { read write } for pid=8201 comm="syz.2.578" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 279.729228][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 279.783296][ T30] audit: type=1400 audit(1762832686.794:305): avc: denied { open } for pid=8201 comm="syz.2.578" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 279.858906][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.903613][ T42] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 280.023969][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.640543][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 280.849102][ T42] usb 1-1: Product: syz [ 280.853305][ T42] usb 1-1: Manufacturer: syz [ 280.857910][ T42] usb 1-1: SerialNumber: syz [ 280.961577][ T42] usb 1-1: config 0 descriptor?? [ 281.077332][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 281.138617][ T8217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.187639][ T42] appledisplay 1-1:0.0: Error while getting initial brightness: -90 [ 281.199267][ T42] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -90 [ 281.249669][ T8217] vlan0: entered allmulticast mode [ 281.254815][ T8217] bond1: entered allmulticast mode [ 282.080459][ T8231] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.584'. [ 282.329697][ T5959] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 282.579829][ T5959] usb 5-1: Using ep0 maxpacket: 32 [ 283.548326][ T1206] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 283.894564][ T5959] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 283.904794][ T1206] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 283.913280][ T42] usb 1-1: USB disconnect, device number 18 [ 283.913290][ T5959] usb 5-1: config 0 has no interface number 0 [ 284.004382][ T1206] usb 4-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 284.020899][ T5959] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.031957][ T1206] usb 4-1: config 0 has no interface number 0 [ 284.038073][ T5959] usb 5-1: config 0 interface 85 has no altsetting 0 [ 284.045327][ T1206] usb 4-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=8a.16 [ 284.059952][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.070571][ T5959] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 284.082168][ T1206] usb 4-1: config 0 descriptor?? [ 284.087222][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.095484][ T5959] usb 5-1: Product: syz [ 284.124328][ T5959] usb 5-1: Manufacturer: syz [ 284.211718][ T1206] usb 4-1: unknown interface protocol 0x1c, assuming v1 [ 284.242341][ T5959] usb 5-1: SerialNumber: syz [ 284.247017][ T1206] usb 4-1: cannot find UAC_HEADER [ 284.254502][ T5959] usb 5-1: config 0 descriptor?? [ 284.760826][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 284.818241][ T1206] snd-usb-audio 4-1:0.11: probe with driver snd-usb-audio failed with error -22 [ 284.854582][ T1206] usb 4-1: USB disconnect, device number 20 [ 285.032199][ T8247] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.588'. [ 285.032463][ T5959] appletouch 5-1:0.85: Failed to read mode from device. [ 285.065731][ T5959] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 285.094013][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 285.471396][ T5959] usb 5-1: USB disconnect, device number 18 [ 285.637625][ T8256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.592'. [ 286.021466][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 286.021481][ T30] audit: type=1400 audit(1762832693.114:312): avc: denied { write } for pid=8248 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 286.499204][ T30] audit: type=1400 audit(1762832693.544:313): avc: denied { name_bind } for pid=8259 comm="syz.0.593" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 286.722272][ T8271] overlayfs: failed to resolve './file1': -2 [ 286.972384][ T8274] overlayfs: failed to resolve './file1': -2 [ 288.182126][ T5885] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 288.479791][ T42] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 288.589180][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 288.596072][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 288.608129][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 288.645515][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 288.656877][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 288.668455][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.681498][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 288.689287][ T5885] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 288.698407][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.719288][ T8301] nbd0: detected capacity change from 0 to 549764202496 [ 288.727690][ T42] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 288.736005][ T5820] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 288.754086][ T42] usb 2-1: config 0 has no interface number 0 [ 288.777631][ T5885] usb 5-1: Product: syz [ 288.782295][ T42] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.793657][ T5885] usb 5-1: Manufacturer: syz [ 288.798285][ T5885] usb 5-1: SerialNumber: syz [ 288.807619][ T42] usb 2-1: config 0 interface 85 has no altsetting 0 [ 288.821371][ T5885] usb 5-1: config 0 descriptor?? [ 288.836698][ T42] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 288.852254][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.893930][ T42] usb 2-1: Product: syz [ 288.926830][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 288.982611][ T42] usb 2-1: Manufacturer: syz [ 289.100476][ T5885] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 289.300564][ T42] usb 2-1: SerialNumber: syz [ 289.331528][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 246, setting to 64 [ 289.361500][ T5885] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 289.386359][ T42] usb 2-1: config 0 descriptor?? [ 289.402941][ T5820] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 289.419200][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.428447][ T5820] usb 3-1: Product: syz [ 289.435078][ T5820] usb 3-1: Manufacturer: syz [ 289.440449][ T5820] usb 3-1: SerialNumber: syz [ 289.468055][ T5820] usb 3-1: config 0 descriptor?? [ 289.555267][ T8297] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 289.595284][ T5823] block nbd0: Receive control failed (result -104) [ 290.060794][ T5820] rc_core: IR keymap rc-streamzap not found [ 290.205972][ T5820] Registered IR keymap rc-empty [ 290.225415][ T5820] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 290.701022][ T42] appletouch 2-1:0.85: Geyser mode initialized. [ 290.732257][ T5820] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 290.744382][ T42] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input18 [ 290.783351][ T5820] usb 3-1: USB disconnect, device number 15 [ 290.911529][ T8292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8292 comm=syz.1.602 [ 291.089980][ T8320] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 291.362005][ T5820] usb 2-1: USB disconnect, device number 22 [ 291.395596][ T5885] usb 5-1: USB disconnect, device number 19 [ 291.432888][ T8323] vlan2: entered promiscuous mode [ 291.509106][ T8323] batadv0: entered promiscuous mode [ 291.766133][ T5820] appletouch 2-1:0.85: input: appletouch disconnected [ 291.798508][ T8325] overlayfs: failed to resolve './file1': -2 [ 292.017309][ T8335] netlink: 48 bytes leftover after parsing attributes in process `syz.4.610'. [ 292.087673][ T8339] netlink: 48 bytes leftover after parsing attributes in process `syz.3.611'. [ 292.463653][ T30] audit: type=1400 audit(1762832699.364:314): avc: denied { ioctl } for pid=8328 comm="syz.0.609" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 292.488358][ T1206] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 292.508977][ T30] audit: type=1400 audit(1762832699.404:315): avc: denied { map } for pid=8328 comm="syz.0.609" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 292.532193][ T5959] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 292.589169][ T30] audit: type=1400 audit(1762832699.404:316): avc: denied { execute } for pid=8328 comm="syz.0.609" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 292.651555][ T1206] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 292.660145][ T1206] usb 5-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 292.690175][ T1206] usb 5-1: config 0 has no interface number 0 [ 292.698571][ T5959] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 292.708405][ T5959] usb 4-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 292.822032][ T1206] usb 5-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=8a.16 [ 292.833248][ T5959] usb 4-1: config 0 has no interface number 0 [ 292.847311][ T5959] usb 4-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=8a.16 [ 292.865060][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.885709][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.899477][ T1206] usb 5-1: config 0 descriptor?? [ 292.908980][ T1206] usb 5-1: unknown interface protocol 0x1c, assuming v1 [ 292.939831][ T1206] usb 5-1: cannot find UAC_HEADER [ 292.946986][ T5959] usb 4-1: config 0 descriptor?? [ 293.529348][ T8344] mmap: syz.1.612 (8344) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 293.588108][ T8344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.612'. [ 293.604712][ T1206] snd-usb-audio 5-1:0.11: probe with driver snd-usb-audio failed with error -22 [ 293.660342][ T5959] usb 4-1: unknown interface protocol 0x1c, assuming v1 [ 293.669356][ T30] audit: type=1400 audit(1762832700.664:317): avc: denied { setopt } for pid=8341 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 293.676050][ T5959] usb 4-1: cannot find UAC_HEADER [ 293.741500][ T1206] usb 5-1: USB disconnect, device number 20 [ 293.771939][ T8353] FAULT_INJECTION: forcing a failure. [ 293.771939][ T8353] name failslab, interval 1, probability 0, space 0, times 0 [ 293.804835][ T5959] snd-usb-audio 4-1:0.11: probe with driver snd-usb-audio failed with error -22 [ 293.817731][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.11/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.899427][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.0.614 Not tainted syzkaller #0 PREEMPT(full) [ 293.899443][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.899449][ T8353] Call Trace: [ 293.899453][ T8353] [ 293.899457][ T8353] dump_stack_lvl+0x16c/0x1f0 [ 293.899477][ T8353] should_fail_ex+0x512/0x640 [ 293.899490][ T8353] ? fs_reclaim_acquire+0xae/0x150 [ 293.899503][ T8353] should_failslab+0xc2/0x120 [ 293.899515][ T8353] __kmalloc_noprof+0xdd/0x880 [ 293.899529][ T8353] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 293.899549][ T8353] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 293.899561][ T8353] tomoyo_realpath_from_path+0xc2/0x6e0 [ 293.899574][ T8353] ? tomoyo_profile+0x47/0x60 [ 293.899589][ T8353] tomoyo_path_number_perm+0x245/0x580 [ 293.899599][ T8353] ? tomoyo_path_number_perm+0x237/0x580 [ 293.899609][ T8353] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 293.899620][ T8353] ? find_held_lock+0x2b/0x80 [ 293.899645][ T8353] ? find_held_lock+0x2b/0x80 [ 293.899657][ T8353] ? hook_file_ioctl_common+0x145/0x410 [ 293.899674][ T8353] ? __fget_files+0x20e/0x3c0 [ 293.899687][ T8353] security_file_ioctl+0x9b/0x240 [ 293.899699][ T8353] __x64_sys_ioctl+0xb7/0x210 [ 293.899714][ T8353] do_syscall_64+0xcd/0xfa0 [ 293.899725][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.899735][ T8353] RIP: 0033:0x7face1f8f6c9 [ 293.899744][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.899753][ T8353] RSP: 002b:00007face2e9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.899765][ T8353] RAX: ffffffffffffffda RBX: 00007face21e6090 RCX: 00007face1f8f6c9 [ 293.899771][ T8353] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 293.899777][ T8353] RBP: 00007face2e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 293.899783][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.899789][ T8353] R13: 00007face21e6128 R14: 00007face21e6090 R15: 00007ffdffb9b2a8 [ 293.899802][ T8353] [ 293.899806][ T8353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 294.117352][ T5959] usb 4-1: USB disconnect, device number 21 [ 294.908322][ T30] audit: type=1400 audit(1762832701.984:318): avc: denied { read write } for pid=8363 comm="syz.0.619" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 294.933024][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.168326][ T30] audit: type=1400 audit(1762832701.984:319): avc: denied { open } for pid=8363 comm="syz.0.619" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 295.335159][ T30] audit: type=1400 audit(1762832701.984:320): avc: denied { ioctl } for pid=8363 comm="syz.0.619" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 295.361188][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.240815][ T8384] program syz.3.621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.929305][ T5820] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 297.009628][ T30] audit: type=1400 audit(1762832704.074:321): avc: denied { shutdown } for pid=8393 comm="syz.3.624" lport=54532 faddr=fc01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.113475][ T8390] overlayfs: failed to resolve './file1': -2 [ 297.139099][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 297.272806][ T30] audit: type=1400 audit(1762832704.364:322): avc: denied { write } for pid=8398 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 297.385707][ T5820] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 297.400955][ T30] audit: type=1400 audit(1762832704.484:323): avc: denied { mount } for pid=8398 comm="syz.2.625" name="/" dev="pstore" ino=4119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 297.433852][ T5820] usb 2-1: config 0 has no interface number 0 [ 297.465036][ T5820] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 297.587622][ T5820] usb 2-1: config 0 interface 85 has no altsetting 0 [ 297.625266][ T5820] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 297.634488][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.645145][ T5820] usb 2-1: Product: syz [ 297.661652][ T5820] usb 2-1: Manufacturer: syz [ 298.048479][ T5820] usb 2-1: SerialNumber: syz [ 298.060891][ T5820] usb 2-1: config 0 descriptor?? [ 298.501234][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 298.516000][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 298.526321][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 298.805386][ T5820] appletouch 2-1:0.85: Geyser mode initialized. [ 298.816525][ T5820] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input20 [ 299.122465][ T8386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8386 comm=syz.1.622 [ 299.366106][ T8422] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 300.145251][ T5820] usb 2-1: USB disconnect, device number 23 [ 300.151339][ C1] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 300.298824][ T5820] appletouch 2-1:0.85: input: appletouch disconnected [ 300.780370][ T8440] program syz.0.635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.091089][ T30] audit: type=1400 audit(1762832709.174:324): avc: denied { bind } for pid=8462 comm="syz.3.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 302.179949][ T8468] warning: `syz.0.641' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 302.212151][ T30] audit: type=1400 audit(1762832709.264:325): avc: denied { getopt } for pid=8460 comm="syz.0.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 302.231871][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.439099][ T5820] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 302.439665][ T30] audit: type=1400 audit(1762832709.524:326): avc: denied { search } for pid=5480 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.563436][ T30] audit: type=1400 audit(1762832709.524:327): avc: denied { search } for pid=5480 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.587961][ T30] audit: type=1400 audit(1762832709.524:328): avc: denied { search } for pid=5480 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.658108][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.675385][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.816232][ T5820] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 302.898966][ T8475] netlink: 'syz.2.640': attribute type 10 has an invalid length. [ 302.906817][ T8475] netlink: 40 bytes leftover after parsing attributes in process `syz.2.640'. [ 303.174743][ T30] audit: type=1400 audit(1762832709.524:329): avc: denied { read } for pid=5480 comm="dhcpcd" name="n100" dev="tmpfs" ino=4862 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 303.209166][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.225605][ T8475] batman_adv: batadv0: Adding interface: virt_wifi0 [ 303.232293][ T8475] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.258127][ T8475] batman_adv: batadv0: Interface activated: virt_wifi0 [ 303.315421][ T30] audit: type=1400 audit(1762832709.564:330): avc: denied { open } for pid=5480 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=4862 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 303.347153][ T5820] usb 4-1: config 0 descriptor?? [ 303.365554][ T30] audit: type=1400 audit(1762832709.564:331): avc: denied { getattr } for pid=5480 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=4862 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 303.721334][ T30] audit: type=1400 audit(1762832710.494:332): avc: denied { read open } for pid=8477 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.746768][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.056990][ T30] audit: type=1400 audit(1762832710.494:333): avc: denied { getattr } for pid=8477 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.082334][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.169606][ T5820] hid-led 0003:1D34:0004.0002: unknown main item tag 0x0 [ 306.669354][ T5820] hid-led 0003:1D34:0004.0002: probe with driver hid-led failed with error -71 [ 306.727709][ T5820] usb 4-1: USB disconnect, device number 22 [ 307.407992][ T8530] program syz.3.652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.780242][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 307.780257][ T30] audit: type=1400 audit(1762832714.864:335): avc: denied { add_name } for pid=8473 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.861861][ T30] audit: type=1400 audit(1762832714.904:336): avc: denied { create } for pid=8473 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 307.884033][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.890349][ T30] audit: type=1400 audit(1762832714.904:337): avc: denied { write } for pid=8473 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=4895 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 307.916323][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.001728][ T5823] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 308.049153][ T30] audit: type=1400 audit(1762832714.904:338): avc: denied { append } for pid=8473 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=4895 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 308.107571][ T30] audit: type=1400 audit(1762832715.024:339): avc: denied { append } for pid=8538 comm="syz.4.655" name="comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.130366][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.386202][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 308.395384][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 308.405039][ T30] audit: type=1400 audit(1762832715.024:340): avc: denied { create } for pid=8538 comm="syz.4.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 308.425672][ T30] audit: type=1400 audit(1762832715.024:341): avc: denied { ioctl } for pid=8538 comm="syz.4.655" path="socket:[20713]" dev="sockfs" ino=20713 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 308.450225][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.467271][ T30] audit: type=1400 audit(1762832715.114:342): avc: denied { watch watch_reads } for pid=8516 comm="syz.2.650" path="/136" dev="tmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 308.640135][ T30] audit: type=1400 audit(1762832715.424:343): avc: denied { remove_name } for pid=8544 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=4895 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.663442][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.797855][ T30] audit: type=1400 audit(1762832715.424:344): avc: denied { unlink } for pid=8544 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=4895 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 309.594727][ T8589] netlink: 48 bytes leftover after parsing attributes in process `syz.4.662'. [ 309.686362][ T8591] overlayfs: failed to resolve './file1': -2 [ 310.059513][ T1206] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 310.099265][ T5959] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 310.219225][ T1206] usb 2-1: Using ep0 maxpacket: 32 [ 310.241035][ T1206] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 310.259166][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.290391][ T1206] usb 2-1: Product: syz [ 310.294782][ T1206] usb 2-1: Manufacturer: syz [ 310.306050][ T1206] usb 2-1: SerialNumber: syz [ 310.377110][ T1206] usb 2-1: config 0 descriptor?? [ 310.382354][ T5959] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 310.394073][ T5959] usb 5-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 310.418370][ T1206] snd-usb-6fire 2-1:0.0: too many cards registered. [ 310.451964][ T5959] usb 5-1: config 0 has no interface number 0 [ 310.537408][ T5959] usb 5-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=8a.16 [ 310.758485][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.781219][ T8603] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 310.838468][ T8603] block device autoloading is deprecated and will be removed. [ 310.859830][ T5959] usb 5-1: config 0 descriptor?? [ 310.884606][ T5959] usb 5-1: unknown interface protocol 0x1c, assuming v1 [ 310.896112][ T5959] usb 5-1: cannot find UAC_HEADER [ 310.957577][ T6031] udevd[6031]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.11/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.958288][ T5959] snd-usb-audio 5-1:0.11: probe with driver snd-usb-audio failed with error -22 [ 311.295015][ T8606] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 311.321366][ T8606] CIFS mount error: No usable UNC path provided in device string! [ 311.321366][ T8606] [ 311.331482][ T8606] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 311.352916][ T8606] sg_write: data in/out 768/4 bytes for SCSI command 0x11-- guessing data in; [ 311.352916][ T8606] program syz.2.665 not setting count and/or reply_len properly [ 311.564708][ T8609] fuse: Bad value for 'fd' [ 311.578344][ T8606] fuse: Unknown parameter 'fd0x0000000000000009' [ 311.931214][ T5959] usb 5-1: USB disconnect, device number 21 [ 311.978183][ T8617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.108061][ T5823] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 312.249199][ T5885] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 312.409208][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 312.415754][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 312.426689][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 312.438509][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 312.450032][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 312.464865][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.501737][ T5885] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 312.516825][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.525433][ T5885] usb 3-1: Product: syz [ 312.530259][ T5885] usb 3-1: Manufacturer: syz [ 312.534968][ T5885] usb 3-1: SerialNumber: syz [ 312.545448][ T5885] usb 3-1: config 0 descriptor?? [ 312.673162][ T8627] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 312.764427][ T5885] appledisplay 3-1:0.0: Error while getting initial brightness: -90 [ 312.778868][ T5885] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -90 [ 312.818796][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 312.818811][ T30] audit: type=1400 audit(1762832719.904:349): avc: denied { ioctl } for pid=8624 comm="syz.4.670" path="/136/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 312.881977][ T30] audit: type=1400 audit(1762832719.974:350): avc: denied { connect } for pid=8624 comm="syz.4.670" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 313.362432][ T8630] FAULT_INJECTION: forcing a failure. [ 313.362432][ T8630] name failslab, interval 1, probability 0, space 0, times 0 [ 313.379198][ T8630] CPU: 1 UID: 0 PID: 8630 Comm: syz.3.671 Not tainted syzkaller #0 PREEMPT(full) [ 313.379224][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.379234][ T8630] Call Trace: [ 313.379239][ T8630] [ 313.379246][ T8630] dump_stack_lvl+0x16c/0x1f0 [ 313.379288][ T8630] should_fail_ex+0x512/0x640 [ 313.379307][ T8630] ? fs_reclaim_acquire+0xae/0x150 [ 313.379329][ T8630] should_failslab+0xc2/0x120 [ 313.379349][ T8630] __kmalloc_noprof+0xdd/0x880 [ 313.379370][ T8630] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 313.379393][ T8630] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 313.379410][ T8630] tomoyo_realpath_from_path+0xc2/0x6e0 [ 313.379428][ T8630] ? tomoyo_profile+0x47/0x60 [ 313.379443][ T8630] tomoyo_path_number_perm+0x245/0x580 [ 313.379452][ T8630] ? tomoyo_path_number_perm+0x237/0x580 [ 313.379463][ T8630] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 313.379474][ T8630] ? find_held_lock+0x2b/0x80 [ 313.379499][ T8630] ? find_held_lock+0x2b/0x80 [ 313.379511][ T8630] ? hook_file_ioctl_common+0x145/0x410 [ 313.379528][ T8630] ? __fget_files+0x20e/0x3c0 [ 313.379542][ T8630] security_file_ioctl+0x9b/0x240 [ 313.379555][ T8630] __x64_sys_ioctl+0xb7/0x210 [ 313.379571][ T8630] do_syscall_64+0xcd/0xfa0 [ 313.379581][ T8630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.379592][ T8630] RIP: 0033:0x7f462038f6c9 [ 313.379601][ T8630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.379611][ T8630] RSP: 002b:00007f46211a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.379621][ T8630] RAX: ffffffffffffffda RBX: 00007f46205e5fa0 RCX: 00007f462038f6c9 [ 313.379627][ T8630] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 313.379633][ T8630] RBP: 00007f46211a5090 R08: 0000000000000000 R09: 0000000000000000 [ 313.379639][ T8630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.379645][ T8630] R13: 00007f46205e6038 R14: 00007f46205e5fa0 R15: 00007ffe4a11bc28 [ 313.379659][ T8630] [ 313.379684][ T8630] ERROR: Out of memory at tomoyo_realpath_from_path. [ 313.659102][ T1206] usb 2-1: USB disconnect, device number 24 [ 314.315774][ T5885] usb 3-1: USB disconnect, device number 16 [ 314.962444][ T8653] [ 315.257268][ T8662] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.677'. [ 315.744949][ T5878] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 315.914218][ T5878] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 315.949591][ T8661] orangefs_mount: mount request failed with -4 [ 315.963583][ T5878] usb 3-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 315.979440][ T8671] FAULT_INJECTION: forcing a failure. [ 315.979440][ T8671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.042010][ T5878] usb 3-1: config 0 has no interface number 0 [ 316.068691][ T8671] CPU: 1 UID: 0 PID: 8671 Comm: syz.1.680 Not tainted syzkaller #0 PREEMPT(full) [ 316.068715][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.068725][ T8671] Call Trace: [ 316.068731][ T8671] [ 316.068738][ T8671] dump_stack_lvl+0x16c/0x1f0 [ 316.068769][ T8671] should_fail_ex+0x512/0x640 [ 316.068797][ T8671] _copy_from_iter+0x29f/0x1720 [ 316.068821][ T8671] ? __alloc_skb+0x200/0x380 [ 316.068841][ T8671] ? __pfx__copy_from_iter+0x10/0x10 [ 316.068858][ T8671] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 316.068874][ T8671] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 316.068900][ T8671] netlink_sendmsg+0x820/0xdd0 [ 316.068929][ T8671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.068961][ T8671] ____sys_sendmsg+0xa98/0xc70 [ 316.068978][ T8671] ? copy_msghdr_from_user+0x10a/0x160 [ 316.068999][ T8671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.069024][ T8671] ___sys_sendmsg+0x134/0x1d0 [ 316.069045][ T8671] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.069065][ T8671] ? __lock_acquire+0x622/0x1c90 [ 316.069112][ T8671] __sys_sendmsg+0x16d/0x220 [ 316.069134][ T8671] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.069169][ T8671] do_syscall_64+0xcd/0xfa0 [ 316.069186][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.069205][ T8671] RIP: 0033:0x7f3cbbf8f6c9 [ 316.069219][ T8671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.069236][ T8671] RSP: 002b:00007f3cbcee3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.069252][ T8671] RAX: ffffffffffffffda RBX: 00007f3cbc1e5fa0 RCX: 00007f3cbbf8f6c9 [ 316.069263][ T8671] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 316.069274][ T8671] RBP: 00007f3cbcee3090 R08: 0000000000000000 R09: 0000000000000000 [ 316.069290][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.069300][ T8671] R13: 00007f3cbc1e6038 R14: 00007f3cbc1e5fa0 R15: 00007fffb7f17f58 [ 316.069320][ T8671] [ 316.268039][ T5878] usb 3-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=8a.16 [ 316.277445][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.369907][ T5878] usb 3-1: config 0 descriptor?? [ 316.379533][ T5878] usb 3-1: unknown interface protocol 0x1c, assuming v1 [ 316.386571][ T5878] usb 3-1: cannot find UAC_HEADER [ 316.453733][ T30] audit: type=1400 audit(1762832723.544:351): avc: denied { bind } for pid=8672 comm="syz.1.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 316.480499][ T5878] snd-usb-audio 3-1:0.11: probe with driver snd-usb-audio failed with error -22 [ 316.487489][ T30] audit: type=1400 audit(1762832723.544:352): avc: denied { name_bind } for pid=8672 comm="syz.1.683" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 316.491644][ T6031] udevd[6031]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.11/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.542325][ T30] audit: type=1400 audit(1762832723.544:353): avc: denied { node_bind } for pid=8672 comm="syz.1.683" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 316.648209][ T30] audit: type=1400 audit(1762832723.634:354): avc: denied { ioctl } for pid=8672 comm="syz.1.683" path="socket:[20928]" dev="sockfs" ino=20928 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 317.238105][ T5878] usb 3-1: USB disconnect, device number 17 [ 317.316410][ T8680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.039363][ T5969] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 318.109153][ T1206] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 318.221352][ T5969] usb 4-1: Using ep0 maxpacket: 16 [ 318.228171][ T5969] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 318.239843][ T5969] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 318.262253][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 318.280261][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 318.292318][ T1206] usb 5-1: Using ep0 maxpacket: 32 [ 318.297547][ T5969] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 318.324719][ T1206] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 318.335496][ T5969] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 318.344833][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.352960][ T1206] usb 5-1: config 0 has no interface number 0 [ 318.359376][ T1206] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 318.369535][ T5969] usb 4-1: Product: syz [ 318.373690][ T5969] usb 4-1: Manufacturer: syz [ 318.378273][ T5969] usb 4-1: SerialNumber: syz [ 318.383630][ T1206] usb 5-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 318.397253][ T5969] usb 4-1: config 0 descriptor?? [ 318.409098][ T1206] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 318.445535][ T1206] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 318.458955][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.467959][ T1206] usb 5-1: Product: syz [ 318.479076][ T1206] usb 5-1: Manufacturer: syz [ 318.483724][ T1206] usb 5-1: SerialNumber: syz [ 318.598375][ T1206] usb 5-1: config 0 descriptor?? [ 318.604257][ T8688] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 318.626278][ T5969] appledisplay 4-1:0.0: Error while getting initial brightness: -90 [ 318.635189][ T8688] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 318.672752][ T1206] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 318.682472][ T5969] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -90 [ 318.749098][ T5820] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 318.919137][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 318.925992][ T5820] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 318.992259][ T5820] usb 2-1: config 0 has no interface number 0 [ 319.032473][ T5820] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 319.034140][ T126] block nbd0: Possible stuck request ffff888026b8e000: control (read@0,4096B). Runtime 30 seconds [ 319.045518][ T5878] usb 5-1: USB disconnect, device number 22 [ 319.067227][ T5820] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 319.201939][ T5820] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 319.247236][ T5820] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 319.258566][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.269060][ T5820] usb 2-1: Product: syz [ 319.273312][ T5820] usb 2-1: Manufacturer: syz [ 319.278016][ T5820] usb 2-1: SerialNumber: syz [ 319.286926][ T5820] usb 2-1: config 0 descriptor?? [ 319.293155][ T8691] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 319.311135][ T8691] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 319.327256][ T5820] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 319.538834][ T5820] usb 2-1: USB disconnect, device number 25 [ 320.306809][ T8713] xt_SECMARK: invalid mode: 2 [ 320.515402][ T5969] usb 4-1: USB disconnect, device number 23 [ 321.161058][ T8723] netlink: 132 bytes leftover after parsing attributes in process `syz.4.695'. [ 322.688027][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 322.979963][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.980029][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.465936][ T8753] netlink: 'syz.4.701': attribute type 12 has an invalid length. [ 323.600279][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 323.607640][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.702'. [ 323.892721][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.702'. [ 323.901738][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.702'. [ 323.930318][ T9] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 324.175084][ T9] usb 2-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 324.219091][ T9] usb 2-1: config 0 has no interface number 0 [ 324.228557][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=8a.16 [ 324.255061][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.268075][ T9] usb 2-1: config 0 descriptor?? [ 324.283151][ T9] usb 2-1: unknown interface protocol 0x1c, assuming v1 [ 324.308732][ T9] usb 2-1: cannot find UAC_HEADER [ 324.346824][ T9] snd-usb-audio 2-1:0.11: probe with driver snd-usb-audio failed with error -22 [ 324.489388][ T5969] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 324.514241][ T9] usb 2-1: USB disconnect, device number 26 [ 324.659056][ T5969] usb 4-1: Using ep0 maxpacket: 16 [ 324.668646][ T5969] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 324.686904][ T5969] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 324.746674][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 324.909699][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 325.048123][ T5969] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.065237][ T5969] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 325.079962][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.089360][ T5969] usb 4-1: Product: syz [ 325.096231][ T5969] usb 4-1: Manufacturer: syz [ 325.103894][ T5969] usb 4-1: SerialNumber: syz [ 325.114030][ T5969] usb 4-1: config 0 descriptor?? [ 325.327871][ T5969] appledisplay 4-1:0.0: Error while getting initial brightness: -90 [ 325.344638][ T8781] netlink: 132 bytes leftover after parsing attributes in process `syz.1.709'. [ 325.361038][ T5969] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -90 [ 325.445363][ T30] audit: type=1400 audit(1762832732.534:355): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 325.726272][ T8787] program syz.4.710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.161779][ T5969] usb 4-1: USB disconnect, device number 24 [ 327.951837][ T8804] FAULT_INJECTION: forcing a failure. [ 327.951837][ T8804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.968978][ T8804] CPU: 0 UID: 0 PID: 8804 Comm: syz.3.715 Not tainted syzkaller #0 PREEMPT(full) [ 327.969004][ T8804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 327.969012][ T8804] Call Trace: [ 327.969017][ T8804] [ 327.969021][ T8804] dump_stack_lvl+0x16c/0x1f0 [ 327.969051][ T8804] should_fail_ex+0x512/0x640 [ 327.969074][ T8804] _copy_to_user+0x32/0xd0 [ 327.969097][ T8804] video_usercopy+0xf43/0x1720 [ 327.969125][ T8804] ? __pfx___video_do_ioctl+0x10/0x10 [ 327.969145][ T8804] ? selinux_kernel_read_file+0x90/0x130 [ 327.969161][ T8804] ? __pfx_video_usercopy+0x10/0x10 [ 327.969195][ T8804] v4l2_ioctl+0x1bd/0x250 [ 327.969214][ T8804] ? __pfx_v4l2_ioctl+0x10/0x10 [ 327.969234][ T8804] __x64_sys_ioctl+0x18e/0x210 [ 327.969256][ T8804] do_syscall_64+0xcd/0xfa0 [ 327.969271][ T8804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.969287][ T8804] RIP: 0033:0x7f462038f6c9 [ 327.969300][ T8804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.969314][ T8804] RSP: 002b:00007f46211a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.969329][ T8804] RAX: ffffffffffffffda RBX: 00007f46205e5fa0 RCX: 00007f462038f6c9 [ 327.969340][ T8804] RDX: 0000200000000040 RSI: 00000000c034564b RDI: 0000000000000003 [ 327.969349][ T8804] RBP: 00007f46211a5090 R08: 0000000000000000 R09: 0000000000000000 [ 327.969358][ T8804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.969360][ T5136] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 327.969368][ T8804] R13: 00007f46205e6038 R14: 00007f46205e5fa0 R15: 00007ffe4a11bc28 [ 327.969391][ T8804] [ 328.251973][ T5136] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 328.262835][ T5136] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 328.270793][ T5136] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 328.278282][ T5136] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 328.293931][ T30] audit: type=1400 audit(1762832735.384:356): avc: denied { mounton } for pid=8802 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 329.658794][ T8827] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.767408][ T8802] chnl_net:caif_netlink_parms(): no params data found [ 330.024205][ T8827] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.528397][ T5136] Bluetooth: hci5: command tx timeout [ 330.590029][ T5969] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 330.603495][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.610873][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.618188][ T8802] bridge_slave_0: entered allmulticast mode [ 330.626499][ T8802] bridge_slave_0: entered promiscuous mode [ 330.654303][ T8827] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.703023][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.715247][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.723184][ T8802] bridge_slave_1: entered allmulticast mode [ 330.731489][ T8802] bridge_slave_1: entered promiscuous mode [ 330.757981][ T8827] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.774568][ T5969] usb 3-1: Using ep0 maxpacket: 16 [ 330.798496][ T5969] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 330.919199][ T8848] overlayfs: failed to resolve './file1': -2 [ 330.934598][ T5969] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 331.029232][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 331.040800][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 331.161369][ T8802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.233748][ T8852] FAULT_INJECTION: forcing a failure. [ 331.233748][ T8852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.246868][ T8852] CPU: 1 UID: 0 PID: 8852 Comm: syz.1.726 Not tainted syzkaller #0 PREEMPT(full) [ 331.246890][ T8852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 331.246900][ T8852] Call Trace: [ 331.246907][ T8852] [ 331.246914][ T8852] dump_stack_lvl+0x16c/0x1f0 [ 331.246945][ T8852] should_fail_ex+0x512/0x640 [ 331.246969][ T8852] _copy_to_user+0x32/0xd0 [ 331.246993][ T8852] environ_read+0x287/0x450 [ 331.247015][ T8852] ? __pfx_environ_read+0x10/0x10 [ 331.247030][ T8852] vfs_readv+0x5c1/0x8b0 [ 331.247060][ T8852] ? __pfx_vfs_readv+0x10/0x10 [ 331.247086][ T8852] ? find_held_lock+0x2b/0x80 [ 331.247127][ T8852] ? __fget_files+0x20e/0x3c0 [ 331.247151][ T8852] ? do_preadv+0x1a6/0x270 [ 331.247174][ T8852] do_preadv+0x1a6/0x270 [ 331.247206][ T8852] ? __pfx_do_preadv+0x10/0x10 [ 331.247237][ T8852] do_syscall_64+0xcd/0xfa0 [ 331.247255][ T8852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.247273][ T8852] RIP: 0033:0x7f3cbbf8f6c9 [ 331.247287][ T8852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.247303][ T8852] RSP: 002b:00007f3cbcea1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 331.247320][ T8852] RAX: ffffffffffffffda RBX: 00007f3cbc1e6180 RCX: 00007f3cbbf8f6c9 [ 331.247331][ T8852] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000005 [ 331.247341][ T8852] RBP: 00007f3cbcea1090 R08: 0000000000000000 R09: 0000000000000000 [ 331.247351][ T8852] R10: 0000000000c002a0 R11: 0000000000000246 R12: 0000000000000002 [ 331.247361][ T8852] R13: 00007f3cbc1e6218 R14: 00007f3cbc1e6180 R15: 00007fffb7f17f58 [ 331.247385][ T8852] [ 331.414875][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.482564][ T8802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.526540][ T5969] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.562485][ T5969] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 331.572360][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.581205][ T5969] usb 3-1: Product: syz [ 331.608115][ T5969] usb 3-1: Manufacturer: syz [ 331.615087][ T8802] team0: Port device team_slave_0 added [ 331.624284][ T8802] team0: Port device team_slave_1 added [ 331.629922][ T5969] usb 3-1: SerialNumber: syz [ 331.636314][ T2976] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.651298][ T5969] usb 3-1: config 0 descriptor?? [ 331.669214][ T8855] loop8: detected capacity change from 0 to 7 [ 331.681915][ T8855] Dev loop8: unable to read RDB block 7 [ 331.692571][ T2976] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.693805][ T8855] loop8: unable to read partition table [ 331.713039][ T8855] loop8: partition table beyond EOD, truncated [ 331.720725][ T8855] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 331.761659][ T2960] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.771382][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.786363][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.791012][ T8855] openvswitch: netlink: Duplicate key (type 1). [ 331.813566][ T8802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.987789][ T5969] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 332.003016][ T5969] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 332.046984][ T2976] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.058428][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.075706][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.102555][ T8802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.214581][ T8802] hsr_slave_0: entered promiscuous mode [ 332.232121][ T8802] hsr_slave_1: entered promiscuous mode [ 332.244163][ T8802] debugfs: 'hsr0' already exists in 'hsr' [ 332.250724][ T8802] Cannot create hsr debugfs directory [ 332.575948][ T5136] Bluetooth: hci5: command tx timeout [ 333.430680][ T8802] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 333.522350][ T8802] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 333.597707][ T8802] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 333.721027][ T8882] netlink: 'syz.4.732': attribute type 12 has an invalid length. [ 333.732086][ T8802] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 334.054117][ T8802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.639798][ T5136] Bluetooth: hci5: command tx timeout [ 334.679500][ T8802] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.714612][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.721802][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.741370][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.748438][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.089485][ T5820] usb 3-1: USB disconnect, device number 18 [ 335.341621][ T8802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.908000][ T8913] overlayfs: failed to resolve './file1': -2 [ 336.802033][ T5136] Bluetooth: hci5: command tx timeout [ 336.824591][ T8923] netlink: 176 bytes leftover after parsing attributes in process `syz.2.739'. [ 337.259261][ T5878] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 337.265029][ T8802] veth0_vlan: entered promiscuous mode [ 337.392007][ T8932] overlayfs: failed to resolve './file1': -2 [ 337.461761][ T8802] veth1_vlan: entered promiscuous mode [ 337.499168][ T5878] usb 3-1: device descriptor read/64, error -71 [ 337.536144][ T8802] veth0_macvtap: entered promiscuous mode [ 337.547121][ T8802] veth1_macvtap: entered promiscuous mode [ 337.573694][ T8802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.623502][ T8935] netlink: 'syz.1.742': attribute type 12 has an invalid length. [ 337.664589][ T8802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.708216][ T2960] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.718947][ T2960] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.728362][ T2960] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.737318][ T2960] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.809603][ T5878] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 337.817293][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.825509][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.857232][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.156455][ T5959] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 338.164456][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.188223][ T30] audit: type=1400 audit(1762832745.274:357): avc: denied { mount } for pid=8802 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 338.199100][ T5878] usb 3-1: device descriptor read/64, error -71 [ 338.235796][ T30] audit: type=1400 audit(1762832745.324:358): avc: denied { mount } for pid=8802 comm="syz-executor" name="/" dev="gadgetfs" ino=8267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 338.330366][ T5878] usb usb3-port1: attempt power cycle [ 338.416384][ T5959] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 338.427043][ T5959] usb 2-1: config 0 interface 0 has no altsetting 0 [ 338.576253][ T5959] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 338.585375][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 338.624810][ T5959] usb 2-1: Product: syz [ 338.628992][ T5959] usb 2-1: Manufacturer: syz [ 338.689328][ T5959] usb 2-1: SerialNumber: syz [ 338.711512][ T5959] usb 2-1: config 0 descriptor?? [ 338.752855][ T5959] usb 2-1: selecting invalid altsetting 0 [ 338.999681][ T5969] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 339.409616][ T5969] usb 4-1: Using ep0 maxpacket: 16 [ 339.460098][ T5969] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 339.886761][ T5878] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 339.900103][ T30] audit: type=1326 audit(1762832746.974:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ae38f6c9 code=0x7fc00000 [ 339.928567][ T5969] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 339.940942][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 339.949341][ T5878] usb 3-1: device descriptor read/8, error -71 [ 339.952254][ T30] audit: type=1326 audit(1762832746.974:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff1ae38f6c9 code=0x7fc00000 [ 339.983091][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 339.994647][ T5969] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.009841][ T30] audit: type=1326 audit(1762832746.974:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ae38f6c9 code=0x7fc00000 [ 340.035649][ T30] audit: type=1326 audit(1762832746.974:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ae38f6c9 code=0x7fc00000 [ 340.059830][ T5969] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 340.073975][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.082578][ T5969] usb 4-1: Product: syz [ 340.086897][ T5969] usb 4-1: Manufacturer: syz [ 340.092367][ T5969] usb 4-1: SerialNumber: syz [ 340.097519][ T30] audit: type=1326 audit(1762832746.974:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ae38f6c9 code=0x7fc00000 [ 340.227572][ T5969] usb 4-1: config 0 descriptor?? [ 340.233885][ T30] audit: type=1326 audit(1762832746.974:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ae38f6c9 code=0x7fc00000 [ 340.257833][ T30] audit: type=1326 audit(1762832746.974:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ae38f6c9 code=0x7fc00000 [ 340.285821][ T30] audit: type=1326 audit(1762832747.054:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ae38f6c9 code=0x7fc00000 [ 340.504866][ T5969] appledisplay 4-1:0.0: Error while getting initial brightness: -90 [ 340.523163][ T5969] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -90 [ 341.443746][ T8975] FAULT_INJECTION: forcing a failure. [ 341.443746][ T8975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.496535][ T8975] CPU: 0 UID: 0 PID: 8975 Comm: syz.4.750 Not tainted syzkaller #0 PREEMPT(full) [ 341.496559][ T8975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.496568][ T8975] Call Trace: [ 341.496573][ T8975] [ 341.496582][ T8975] dump_stack_lvl+0x16c/0x1f0 [ 341.496613][ T8975] should_fail_ex+0x512/0x640 [ 341.496636][ T8975] _copy_from_user+0x2e/0xd0 [ 341.496657][ T8975] copy_msghdr_from_user+0x98/0x160 [ 341.496681][ T8975] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 341.496708][ T8975] ? kfree+0x252/0x6d0 [ 341.496738][ T8975] ___sys_sendmsg+0xfe/0x1d0 [ 341.496761][ T8975] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.496809][ T8975] ? __pfx___might_resched+0x10/0x10 [ 341.496832][ T8975] __sys_sendmmsg+0x200/0x420 [ 341.496854][ T8975] ? __pfx___sys_sendmmsg+0x10/0x10 [ 341.496933][ T8975] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 341.496957][ T8975] ? fput+0x9b/0xd0 [ 341.496976][ T8975] ? ksys_write+0x1ac/0x250 [ 341.496989][ T8975] ? __pfx_ksys_write+0x10/0x10 [ 341.497008][ T8975] __x64_sys_sendmmsg+0x9c/0x100 [ 341.497028][ T8975] ? lockdep_hardirqs_on+0x7c/0x110 [ 341.497052][ T8975] do_syscall_64+0xcd/0xfa0 [ 341.497068][ T8975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.497082][ T8975] RIP: 0033:0x7ff1ae38f6c9 [ 341.497096][ T8975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.497110][ T8975] RSP: 002b:00007ff1af178038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 341.497126][ T8975] RAX: ffffffffffffffda RBX: 00007ff1ae5e6090 RCX: 00007ff1ae38f6c9 [ 341.497136][ T8975] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000009 [ 341.497145][ T8975] RBP: 00007ff1af178090 R08: 0000000000000000 R09: 0000000000000000 [ 341.497155][ T8975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.497163][ T8975] R13: 00007ff1ae5e6128 R14: 00007ff1ae5e6090 R15: 00007ffe59a3c108 [ 341.497192][ T8975] [ 341.507115][ T5136] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 341.855804][ T8980] netlink: 'syz.5.753': attribute type 12 has an invalid length. [ 341.893009][ T5820] usb 2-1: USB disconnect, device number 27 [ 342.961539][ T5969] usb 4-1: USB disconnect, device number 25 [ 343.203871][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 343.203882][ T30] audit: type=1400 audit(1762832750.294:430): avc: denied { append } for pid=8994 comm="syz.2.757" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 343.740210][ T30] audit: type=1400 audit(1762832750.824:431): avc: denied { connect } for pid=8982 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 343.889200][ T30] audit: type=1400 audit(1762832750.864:432): avc: denied { write } for pid=8982 comm="syz.1.754" path="socket:[22769]" dev="sockfs" ino=22769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 343.916502][ T5969] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 344.079624][ T5969] usb 3-1: Using ep0 maxpacket: 32 [ 344.108119][ T5969] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 344.125907][ T9002] bond1: option ad_actor_sys_prio: invalid value (0) [ 344.137967][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 344.174923][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 344.185003][ T9002] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 344.190172][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 344.204955][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 344.334158][ T5969] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 344.344239][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.352630][ T5969] usb 3-1: Product: syz [ 344.356911][ T5969] usb 3-1: Manufacturer: syz [ 344.362066][ T5969] usb 3-1: SerialNumber: syz [ 344.368284][ T5969] usb 3-1: config 0 descriptor?? [ 344.802199][ T9002] bond1 (unregistering): Released all slaves [ 345.290220][ T9013] syzkaller0: entered allmulticast mode [ 345.372862][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.382718][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.398342][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.406637][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.419915][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.426322][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.461642][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.471238][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.481171][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.488923][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.496548][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.518449][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.532374][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.570049][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.576376][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.600156][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.629197][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.651443][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 345.671881][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 346.442918][ T5969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 346.449694][ T5969] input input21: Timeout waiting for response from device. [ 346.477039][ T5969] usb 3-1: USB disconnect, device number 23 [ 346.705359][ T30] audit: type=1400 audit(1762832753.784:433): avc: denied { read } for pid=9035 comm="syz.4.767" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 346.893555][ T30] audit: type=1400 audit(1762832753.784:434): avc: denied { open } for pid=9035 comm="syz.4.767" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 346.926611][ T30] audit: type=1400 audit(1762832753.784:435): avc: denied { write } for pid=9035 comm="syz.4.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 347.329295][ T5820] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 347.405245][ T30] audit: type=1400 audit(1762832753.784:436): avc: denied { ioctl } for pid=9035 comm="syz.4.767" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 347.679135][ T5820] usb 6-1: Using ep0 maxpacket: 16 [ 347.693160][ T5820] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 347.704287][ T5820] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 347.716675][ T5820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 347.729867][ T5820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 347.741630][ T5820] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.100449][ T5820] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 348.111998][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.123662][ T5820] usb 6-1: Product: syz [ 348.141464][ T5820] usb 6-1: Manufacturer: syz [ 348.148497][ T5820] usb 6-1: SerialNumber: syz [ 348.188023][ T5820] usb 6-1: config 0 descriptor?? [ 348.272684][ T9074] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 348.415548][ T5820] appledisplay 6-1:0.0: Error while getting initial brightness: -90 [ 348.464172][ C1] usb 6-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 348.805827][ T5820] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -90 [ 348.953199][ T5878] kernel read not supported for file /binder/stats (pid: 5878 comm: kworker/1:5) [ 349.228460][ T126] block nbd0: Possible stuck request ffff888026b8e000: control (read@0,4096B). Runtime 60 seconds [ 349.479056][ T30] audit: type=1400 audit(1762832756.554:437): avc: denied { setopt } for pid=9084 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 349.679909][ T9090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.776'. [ 349.680236][ T9091] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.776'. [ 350.106781][ T5820] usb 6-1: USB disconnect, device number 2 [ 350.139356][ T1206] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 350.331522][ T1206] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 350.425592][ T1206] usb 2-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 350.921145][ T1206] usb 2-1: config 0 has no interface number 0 [ 350.928334][ T1206] usb 2-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=8a.16 [ 350.938775][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.954377][ T1206] usb 2-1: config 0 descriptor?? [ 350.995673][ T1206] usb 2-1: unknown interface protocol 0x1c, assuming v1 [ 351.015356][ T1206] usb 2-1: cannot find UAC_HEADER [ 351.064983][ T1206] snd-usb-audio 2-1:0.11: probe with driver snd-usb-audio failed with error -22 [ 351.779999][ T5820] usb 2-1: USB disconnect, device number 28 [ 354.310484][ T1206] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 354.318344][ T5959] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 354.588944][ T5959] usb 6-1: Using ep0 maxpacket: 32 [ 354.602422][ T1206] usb 3-1: Using ep0 maxpacket: 16 [ 354.672613][ T1206] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 354.699575][ T1206] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 354.711215][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 354.730360][ T5959] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 354.748341][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 354.760359][ T30] audit: type=1400 audit(1762832761.834:438): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 354.781721][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.791520][ T5959] usb 6-1: Product: syz [ 354.795691][ T5959] usb 6-1: Manufacturer: syz [ 354.800586][ T1206] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.814915][ T5959] usb 6-1: SerialNumber: syz [ 354.901345][ T1206] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 354.924586][ T9154] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.793'. [ 354.925206][ T5959] usb 6-1: config 0 descriptor?? [ 354.939883][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.952564][ T1206] usb 3-1: Product: syz [ 354.956805][ T1206] usb 3-1: Manufacturer: syz [ 354.970991][ T1206] usb 3-1: SerialNumber: syz [ 355.200470][ T1206] usb 3-1: config 0 descriptor?? [ 355.220521][ T5959] snd-usb-6fire 6-1:0.0: too many cards registered. [ 355.513862][ T1206] appledisplay 3-1:0.0: Error while getting initial brightness: -90 [ 355.524845][ T1206] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -90 [ 356.389675][ T9169] fuse: Bad value for 'fd' [ 356.650277][ T9172] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.796'. [ 356.979078][ T5820] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 357.130854][ T5820] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 357.145948][ T5820] usb 4-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 357.166212][ T5820] usb 4-1: config 0 has no interface number 0 [ 357.188376][ T5820] usb 4-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=8a.16 [ 357.224520][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.246536][ T5820] usb 4-1: config 0 descriptor?? [ 357.266966][ T5820] usb 4-1: unknown interface protocol 0x1c, assuming v1 [ 357.339550][ T5820] usb 4-1: cannot find UAC_HEADER [ 357.669434][ T5969] usb 6-1: USB disconnect, device number 3 [ 357.681972][ T1206] usb 3-1: USB disconnect, device number 24 [ 357.925291][ T5820] snd-usb-audio 4-1:0.11: probe with driver snd-usb-audio failed with error -22 [ 358.045153][ T5820] usb 4-1: USB disconnect, device number 26 [ 359.913494][ T9200] netlink: 'syz.1.804': attribute type 12 has an invalid length. [ 360.138092][ T9207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.148874][ T9207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.189209][ T5878] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 360.395410][ T5878] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.406115][ T5878] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 360.424007][ T5878] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.518195][ T5878] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.528027][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.549799][ T5878] usb 6-1: Product: syz [ 360.554085][ T5878] usb 6-1: Manufacturer: syz [ 360.565290][ T5878] usb 6-1: SerialNumber: syz [ 360.612843][ T5878] cdc_mbim 6-1:1.0: MBIM functional descriptor missing [ 360.624016][ T5878] cdc_mbim 6-1:1.0: bind() failure [ 361.358215][ T9219] netlink: 'syz.5.805': attribute type 10 has an invalid length. [ 361.793832][ T9219] bond0: (slave bond_slave_0): Releasing backup interface [ 362.535891][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.555295][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.563819][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.571684][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.581846][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.047861][ T9229] chnl_net:caif_netlink_parms(): no params data found [ 363.109197][ T5885] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 363.130687][ T9229] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.137784][ T9229] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.145734][ T9229] bridge_slave_0: entered allmulticast mode [ 363.154856][ T9229] bridge_slave_0: entered promiscuous mode [ 363.163577][ T9229] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.171522][ T9229] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.178705][ T9229] bridge_slave_1: entered allmulticast mode [ 363.186881][ T9229] bridge_slave_1: entered promiscuous mode [ 363.229658][ T9229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.242999][ T9229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.281798][ T9229] team0: Port device team_slave_0 added [ 363.290432][ T9229] team0: Port device team_slave_1 added [ 363.318434][ T9229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.326792][ T9229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.353983][ T9229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.372688][ T9229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.380438][ T9229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.423187][ T9229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.736218][ T9229] hsr_slave_0: entered promiscuous mode [ 363.741934][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 363.747979][ T9229] hsr_slave_1: entered promiscuous mode [ 363.754548][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 363.759734][ T9229] debugfs: 'hsr0' already exists in 'hsr' [ 363.765945][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 363.765974][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 363.766000][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 363.766024][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 363.768239][ T5885] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 363.773455][ T9229] Cannot create hsr debugfs directory [ 363.784659][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.868832][ T5885] usb 2-1: Product: syz [ 363.873102][ T5885] usb 2-1: Manufacturer: syz [ 363.877740][ T5885] usb 2-1: SerialNumber: syz [ 363.897882][ T5885] usb 2-1: config 0 descriptor?? [ 363.924493][ T5820] usb 6-1: USB disconnect, device number 4 [ 364.219093][ T5885] appledisplay 2-1:0.0: Error while getting initial brightness: -90 [ 364.239980][ T5885] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -90 [ 364.722484][ T5136] Bluetooth: hci6: command tx timeout [ 365.212096][ T9257] netlink: 'syz.3.817': attribute type 12 has an invalid length. [ 365.325753][ T30] audit: type=1400 audit(1762832772.414:439): avc: denied { write } for pid=9259 comm="syz.5.820" path="socket:[23227]" dev="sockfs" ino=23227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 365.707196][ T9229] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 365.785935][ T9229] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 365.825794][ T9229] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 365.844383][ T9229] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 366.058359][ T9229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.202362][ T9229] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.245437][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.252602][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.274940][ T5885] usb 2-1: USB disconnect, device number 29 [ 366.436887][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.443992][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.789464][ T5136] Bluetooth: hci6: command tx timeout [ 368.244380][ T30] audit: type=1400 audit(1762832775.334:440): avc: denied { mounton } for pid=9280 comm="syz.1.823" path="/160/file0" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 368.412731][ T9229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.889177][ T5136] Bluetooth: hci6: command tx timeout [ 368.929380][ T30] audit: type=1400 audit(1762832775.914:441): avc: denied { setopt } for pid=9292 comm="syz.3.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 369.748025][ T9309] overlayfs: failed to resolve './file1': -2 [ 369.883587][ T9229] veth0_vlan: entered promiscuous mode [ 369.915913][ T9229] veth1_vlan: entered promiscuous mode [ 369.945105][ T9229] veth0_macvtap: entered promiscuous mode [ 369.968728][ T9229] veth1_macvtap: entered promiscuous mode [ 370.213533][ T9229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.407418][ T9229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.454657][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.497987][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.516768][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.883843][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'. [ 370.949170][ T5136] Bluetooth: hci6: command tx timeout [ 371.397571][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.500479][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.534275][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.599547][ T7530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.729085][ T7530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.775965][ T9289] syz.1.823 (9289): drop_caches: 2 [ 374.039480][ T5935] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 374.259698][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 374.270378][ T5935] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 374.293956][ T5935] usb 2-1: config 0 has no interface number 0 [ 374.719356][ T5935] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 374.732477][ T5935] usb 2-1: config 0 interface 85 has no altsetting 0 [ 374.741038][ T5935] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 374.900311][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.064784][ T5935] usb 2-1: Product: syz [ 375.069231][ T5935] usb 2-1: Manufacturer: syz [ 375.073846][ T5935] usb 2-1: SerialNumber: syz [ 375.187766][ T5935] usb 2-1: config 0 descriptor?? [ 376.250878][ T5935] appletouch 2-1:0.85: Geyser mode initialized. [ 376.260839][ T5935] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input22 [ 376.306465][ T9361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9361 comm=syz.1.836 [ 376.323486][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.841'. [ 376.373454][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.841'. [ 376.384353][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.841'. [ 376.684036][ T9361] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.887869][ T5878] usb 2-1: USB disconnect, device number 30 [ 377.167466][ T9398] overlayfs: failed to resolve './file1': -2 [ 377.251654][ T5878] appletouch 2-1:0.85: input: appletouch disconnected [ 379.183010][ T9424] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 379.273215][ T9420] netlink: 'syz.2.852': attribute type 12 has an invalid length. [ 379.344670][ T9421] overlayfs: failed to resolve './file1': -2 [ 379.845867][ T126] block nbd0: Possible stuck request ffff888026b8e000: control (read@0,4096B). Runtime 90 seconds [ 381.090756][ T5969] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 381.729764][ T5969] usb 6-1: Using ep0 maxpacket: 32 [ 381.737622][ T5969] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 381.746282][ T5969] usb 6-1: config 0 has no interface number 0 [ 381.758669][ T5969] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 381.770689][ T5969] usb 6-1: config 0 interface 85 has no altsetting 0 [ 381.905823][ T5969] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 381.935487][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.376693][ T5969] usb 6-1: Product: syz [ 382.381192][ T5969] usb 6-1: Manufacturer: syz [ 382.475744][ T5969] usb 6-1: SerialNumber: syz [ 382.674248][ T5969] usb 6-1: config 0 descriptor?? [ 383.874997][ T5969] appletouch 6-1:0.85: Geyser mode initialized. [ 383.889429][ T5969] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input23 [ 383.889889][ T9476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9476 comm=syz.5.859 [ 384.327663][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.334178][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.452782][ T9448] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 385.077557][ T1206] usb 6-1: USB disconnect, device number 5 [ 385.123757][ T1206] appletouch 6-1:0.85: input: appletouch disconnected [ 390.140258][ T1206] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 390.770135][ T1206] usb 4-1: Using ep0 maxpacket: 32 [ 391.120088][ T1206] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 391.128197][ T1206] usb 4-1: config 0 has no interface number 0 [ 391.158748][ T1206] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 391.170779][ T1206] usb 4-1: config 0 interface 85 has no altsetting 0 [ 391.191352][ T1206] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 391.200805][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.230034][ T1206] usb 4-1: Product: syz [ 391.250699][ T1206] usb 4-1: Manufacturer: syz [ 391.505398][ T1206] usb 4-1: SerialNumber: syz [ 391.512780][ T1206] usb 4-1: config 0 descriptor?? [ 392.441583][ T1206] appletouch 4-1:0.85: Geyser mode initialized. [ 392.451657][ T1206] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input24 [ 392.646415][ T9537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9537 comm=syz.3.881 [ 392.902071][ T9580] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 392.971109][ T5935] usb 4-1: USB disconnect, device number 27 [ 393.014663][ T5935] appletouch 4-1:0.85: input: appletouch disconnected [ 394.160774][ T30] audit: type=1400 audit(1762832801.196:442): avc: denied { write } for pid=9596 comm="syz.2.895" name="file0" dev="tmpfs" ino=1025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 395.787253][ T9613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.307317][ T9623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.335753][ T9623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.786876][ T9644] netlink: 48 bytes leftover after parsing attributes in process `syz.3.907'. [ 398.119172][ T5969] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 398.781425][ T5969] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 399.024674][ T5969] usb 4-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 399.039139][ T5969] usb 4-1: config 0 has no interface number 0 [ 399.045286][ T5969] usb 4-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=8a.16 [ 399.055118][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.065965][ T5969] usb 4-1: config 0 descriptor?? [ 399.075908][ T5969] usb 4-1: unknown interface protocol 0x1c, assuming v1 [ 399.097174][ T5969] usb 4-1: cannot find UAC_HEADER [ 399.416351][ T5969] snd-usb-audio 4-1:0.11: probe with driver snd-usb-audio failed with error -22 [ 399.794772][ T6031] udevd[6031]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.11/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.239269][ T5892] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 400.734467][ T9682] FAULT_INJECTION: forcing a failure. [ 400.734467][ T9682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.747966][ T9682] CPU: 1 UID: 0 PID: 9682 Comm: syz.6.917 Not tainted syzkaller #0 PREEMPT(full) [ 400.747989][ T9682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 400.747998][ T9682] Call Trace: [ 400.748004][ T9682] [ 400.748010][ T9682] dump_stack_lvl+0x16c/0x1f0 [ 400.748040][ T9682] should_fail_ex+0x512/0x640 [ 400.748064][ T9682] _copy_from_iter+0x29f/0x1720 [ 400.748088][ T9682] ? __alloc_skb+0x200/0x380 [ 400.748110][ T9682] ? __pfx__copy_from_iter+0x10/0x10 [ 400.748131][ T9682] ? netlink_autobind.isra.0+0x158/0x370 [ 400.748165][ T9682] netlink_sendmsg+0x820/0xdd0 [ 400.748200][ T9682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.748233][ T9682] ____sys_sendmsg+0xa98/0xc70 [ 400.748259][ T9682] ? copy_msghdr_from_user+0x10a/0x160 [ 400.748281][ T9682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.748308][ T9682] ___sys_sendmsg+0x134/0x1d0 [ 400.748322][ T1206] usb 4-1: USB disconnect, device number 28 [ 400.748345][ T9682] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.748366][ T9682] ? __lock_acquire+0x622/0x1c90 [ 400.748407][ T9682] __sys_sendmsg+0x16d/0x220 [ 400.748427][ T9682] ? __pfx___sys_sendmsg+0x10/0x10 [ 400.748460][ T9682] do_syscall_64+0xcd/0xfa0 [ 400.748476][ T9682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.748490][ T9682] RIP: 0033:0x7f295358f6c9 [ 400.748503][ T9682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.748517][ T9682] RSP: 002b:00007f29544a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.748532][ T9682] RAX: ffffffffffffffda RBX: 00007f29537e5fa0 RCX: 00007f295358f6c9 [ 400.748542][ T9682] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000003 [ 400.748551][ T9682] RBP: 00007f29544a0090 R08: 0000000000000000 R09: 0000000000000000 [ 400.748560][ T9682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.748568][ T9682] R13: 00007f29537e6038 R14: 00007f29537e5fa0 R15: 00007ffe3eebe0e8 [ 400.748590][ T9682] [ 400.752279][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 401.005815][ T5892] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 401.031149][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.050142][ T5892] usb 3-1: Product: syz [ 401.064724][ T5892] usb 3-1: Manufacturer: syz [ 401.074815][ T5892] usb 3-1: SerialNumber: syz [ 401.110614][ T5892] usb 3-1: config 0 descriptor?? [ 401.118461][ T5892] snd-usb-6fire 3-1:0.0: too many cards registered. [ 403.313025][ T9717] fuse: Bad value for 'fd' [ 404.340868][ T30] audit: type=1400 audit(1762832811.436:443): avc: denied { mount } for pid=9728 comm="syz.3.928" name="/" dev="ramfs" ino=26086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 405.967052][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.935'. [ 406.008059][ T5885] usb 3-1: USB disconnect, device number 25 [ 407.562161][ T30] audit: type=1400 audit(1762832814.656:444): avc: denied { bind } for pid=9786 comm="syz.2.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 407.632973][ T9790] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 407.960403][ T5969] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 408.177320][ T5969] usb 3-1: unable to get BOS descriptor set [ 408.369551][ T5969] usb 3-1: not running at top speed; connect to a high speed hub [ 408.392993][ T9802] overlayfs: failed to resolve './file1': -2 [ 408.430535][ T5969] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 408.442094][ T5969] usb 3-1: config 1 has no interface number 1 [ 408.459486][ T5969] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.483462][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.591790][ T5969] usb 3-1: Product: syz [ 408.775550][ T5969] usb 3-1: Manufacturer: syz [ 408.785248][ T5969] usb 3-1: SerialNumber: syz [ 409.019191][ T5892] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 409.041762][ T5969] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 409.058798][ T5969] usb 3-1: USB disconnect, device number 26 [ 409.144831][ T6031] udevd[6031]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.289296][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 409.298803][ T5892] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 409.740425][ T5892] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 409.828348][ T5892] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.915489][ T126] block nbd0: Possible stuck request ffff888026b8e000: control (read@0,4096B). Runtime 120 seconds [ 410.370134][ T5892] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 410.909528][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.917588][ T5892] usb 6-1: Product: syz [ 410.958897][ T5892] usb 6-1: Manufacturer: syz [ 410.973994][ T5892] usb 6-1: SerialNumber: syz [ 411.590818][ T9806] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 411.607506][ T5892] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 411.636822][ T5892] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 411.662702][ T5892] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 412.085928][ T5892] usb 6-1: USB disconnect, device number 6 [ 412.472443][ T9846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.513455][ T9844] overlayfs: failed to resolve './file1': -2 [ 412.525389][ T9846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.518141][ T9855] netlink: 'syz.6.958': attribute type 12 has an invalid length. [ 417.019311][ T5892] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 418.182484][ T5892] usb 3-1: device descriptor read/64, error -71 [ 418.274308][ T9918] netlink: 'syz.3.972': attribute type 12 has an invalid length. [ 418.603594][ T9924] netlink: 32 bytes leftover after parsing attributes in process `syz.1.975'. [ 418.619020][ T5892] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 419.069158][ T5892] usb 3-1: device descriptor read/64, error -71 [ 419.189842][ T5892] usb usb3-port1: attempt power cycle [ 419.309650][ T5969] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 419.689159][ T5892] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 419.761114][ T5969] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 419.771146][ T5969] usb 4-1: config 0 interface 0 has no altsetting 0 [ 419.830427][ T5892] usb 3-1: device descriptor read/8, error -71 [ 419.952345][ T5969] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 419.961864][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 420.118541][ T5969] usb 4-1: Product: syz [ 420.122790][ T5969] usb 4-1: Manufacturer: syz [ 420.127380][ T5969] usb 4-1: SerialNumber: syz [ 420.170541][ T5969] usb 4-1: config 0 descriptor?? [ 420.555797][ T5969] usb 4-1: selecting invalid altsetting 0 [ 421.389685][ T5892] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 421.449251][ T42] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 421.573235][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 421.682205][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 421.694793][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 421.705066][ T42] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 421.745187][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 421.775467][ T9965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.816671][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 421.828786][ T42] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 421.837517][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 421.850653][ T42] usb 2-1: Product: syz [ 421.858185][ T42] usb 2-1: Manufacturer: syz [ 421.863842][ T42] usb 2-1: SerialNumber: syz [ 421.870347][ T5892] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 421.881341][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.890116][ T5892] usb 3-1: Product: syz [ 421.895978][ T42] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 421.904649][ T5892] usb 3-1: Manufacturer: syz [ 421.913911][ T5892] usb 3-1: SerialNumber: syz [ 421.924409][ T5892] usb 3-1: config 0 descriptor?? [ 422.148926][ T5892] appledisplay 3-1:0.0: Error while getting initial brightness: -90 [ 422.317211][ T42] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 422.754408][ T5892] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -90 [ 422.769197][ T5136] Bluetooth: hci6: link tx timeout [ 422.774497][ T5136] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 422.777612][ T42] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 422.910881][ T42] usb 2-1: USB disconnect, device number 31 [ 423.503073][ T1206] usb 4-1: USB disconnect, device number 29 [ 423.867694][ T9978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.341018][ T30] audit: type=1326 audit(1762832831.436:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.3.990" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f462038f6c9 code=0x0 [ 424.364860][ T30] audit: type=1400 audit(1762832831.436:446): avc: denied { read write } for pid=9990 comm="syz.5.991" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 424.466014][ T30] audit: type=1400 audit(1762832831.436:447): avc: denied { open } for pid=9990 comm="syz.5.991" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 425.019294][ T5823] Bluetooth: hci6: command 0x0406 tx timeout [ 425.740901][ T5892] usb 3-1: USB disconnect, device number 31 [ 426.999233][ T5885] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 427.160848][ T5885] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 427.181519][ T5885] usb 2-1: config 0 interface 0 has no altsetting 0 [ 427.201286][ T5885] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 427.211266][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 427.229064][ T5885] usb 2-1: Product: syz [ 427.237735][ T5885] usb 2-1: Manufacturer: syz [ 427.250441][ T5885] usb 2-1: SerialNumber: syz [ 427.364551][ T5885] usb 2-1: config 0 descriptor?? [ 427.388730][ T5885] usb 2-1: selecting invalid altsetting 0 [ 427.420332][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1000'. [ 428.027240][T10034] overlayfs: failed to resolve './file1': -2 [ 428.284639][ T5892] usb 2-1: USB disconnect, device number 32 [ 429.346524][T10048] netlink: 'syz.1.1004': attribute type 12 has an invalid length. [ 429.386516][T10040] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 429.393174][T10040] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 429.731750][T10040] vhci_hcd vhci_hcd.0: Device attached [ 429.732534][T10047] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1002'. [ 429.746366][T10047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1002'. [ 429.755697][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 429.764979][ T30] audit: type=1400 audit(1762832836.826:448): avc: denied { execute } for pid=10039 comm="syz.2.1002" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 429.847433][T10040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1002'. [ 429.907302][ T30] audit: type=1400 audit(1762832836.986:449): avc: denied { create } for pid=10039 comm="syz.2.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 429.953595][T10051] usbip_core: unknown command [ 430.089119][ T1206] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 430.205982][T10052] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 430.219153][T10051] vhci_hcd: unknown pdu 939524096 [ 430.225039][T10051] usbip_core: unknown command [ 430.244900][ T30] audit: type=1400 audit(1762832837.026:450): avc: denied { write } for pid=10039 comm="syz.2.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 430.265162][ T7512] vhci_hcd: stop threads [ 430.270136][ T7512] vhci_hcd: release socket [ 430.279710][ T7512] vhci_hcd: disconnect device [ 432.620346][ T30] audit: type=1400 audit(1762832839.706:451): avc: denied { ioctl } for pid=10074 comm="syz.5.1011" path="/dev/ttyqe" dev="devtmpfs" ino=389 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 432.708617][ T30] audit: type=1326 audit(1762832839.716:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.5.1011" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0a818f6c9 code=0x0 [ 433.310794][T10091] ªªªªª2: renamed from veth0_vlan (while UP) [ 435.523286][ T1206] vhci_hcd: vhci_device speed not set [ 437.171704][T10141] FAULT_INJECTION: forcing a failure. [ 437.171704][T10141] name failslab, interval 1, probability 0, space 0, times 0 [ 437.184500][T10141] CPU: 0 UID: 0 PID: 10141 Comm: syz.5.1025 Not tainted syzkaller #0 PREEMPT(full) [ 437.184515][T10141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 437.184520][T10141] Call Trace: [ 437.184524][T10141] [ 437.184528][T10141] dump_stack_lvl+0x16c/0x1f0 [ 437.184549][T10141] should_fail_ex+0x512/0x640 [ 437.184562][T10141] ? fs_reclaim_acquire+0xae/0x150 [ 437.184576][T10141] should_failslab+0xc2/0x120 [ 437.184589][T10141] __kmalloc_noprof+0xdd/0x880 [ 437.184604][T10141] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 437.184619][T10141] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 437.184630][T10141] tomoyo_realpath_from_path+0xc2/0x6e0 [ 437.184643][T10141] ? tomoyo_profile+0x47/0x60 [ 437.184658][T10141] tomoyo_path_number_perm+0x245/0x580 [ 437.184667][T10141] ? tomoyo_path_number_perm+0x237/0x580 [ 437.184678][T10141] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 437.184689][T10141] ? find_held_lock+0x2b/0x80 [ 437.184714][T10141] ? find_held_lock+0x2b/0x80 [ 437.184726][T10141] ? hook_file_ioctl_common+0x145/0x410 [ 437.184743][T10141] ? __fget_files+0x20e/0x3c0 [ 437.184755][T10141] security_file_ioctl+0x9b/0x240 [ 437.184768][T10141] __x64_sys_ioctl+0xb7/0x210 [ 437.184783][T10141] do_syscall_64+0xcd/0xfa0 [ 437.184794][T10141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.184804][T10141] RIP: 0033:0x7fb0a818f6c9 [ 437.184813][T10141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.184824][T10141] RSP: 002b:00007fb0a90e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.184834][T10141] RAX: ffffffffffffffda RBX: 00007fb0a83e5fa0 RCX: 00007fb0a818f6c9 [ 437.184840][T10141] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 437.184846][T10141] RBP: 00007fb0a90e3090 R08: 0000000000000000 R09: 0000000000000000 [ 437.184852][T10141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.184858][T10141] R13: 00007fb0a83e6038 R14: 00007fb0a83e5fa0 R15: 00007ffd5d7cab18 [ 437.184872][T10141] [ 437.184876][T10141] ERROR: Out of memory at tomoyo_realpath_from_path. [ 438.516310][T10158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.530866][T10158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.989554][T10009] block nbd0: Possible stuck request ffff888026b8e000: control (read@0,4096B). Runtime 150 seconds [ 442.661117][T10206] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 442.696320][T10211] program syz.5.1044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.058703][T10210] FAULT_INJECTION: forcing a failure. [ 443.058703][T10210] name failslab, interval 1, probability 0, space 0, times 0 [ 443.072941][T10210] CPU: 0 UID: 0 PID: 10210 Comm: syz.6.1043 Not tainted syzkaller #0 PREEMPT(full) [ 443.072957][T10210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.072963][T10210] Call Trace: [ 443.072966][T10210] [ 443.072970][T10210] dump_stack_lvl+0x16c/0x1f0 [ 443.072990][T10210] should_fail_ex+0x512/0x640 [ 443.073003][T10210] ? fs_reclaim_acquire+0xae/0x150 [ 443.073016][T10210] should_failslab+0xc2/0x120 [ 443.073028][T10210] __kmalloc_noprof+0xdd/0x880 [ 443.073042][T10210] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 443.073058][T10210] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 443.073069][T10210] tomoyo_realpath_from_path+0xc2/0x6e0 [ 443.073082][T10210] ? tomoyo_profile+0x47/0x60 [ 443.073096][T10210] tomoyo_path_number_perm+0x245/0x580 [ 443.073105][T10210] ? tomoyo_path_number_perm+0x237/0x580 [ 443.073116][T10210] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 443.073127][T10210] ? find_held_lock+0x2b/0x80 [ 443.073152][T10210] ? find_held_lock+0x2b/0x80 [ 443.073164][T10210] ? hook_file_ioctl_common+0x145/0x410 [ 443.073180][T10210] ? __fget_files+0x20e/0x3c0 [ 443.073193][T10210] security_file_ioctl+0x9b/0x240 [ 443.073206][T10210] __x64_sys_ioctl+0xb7/0x210 [ 443.073221][T10210] do_syscall_64+0xcd/0xfa0 [ 443.073232][T10210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.073243][T10210] RIP: 0033:0x7f295358f6c9 [ 443.073252][T10210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.073262][T10210] RSP: 002b:00007f29544a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.073272][T10210] RAX: ffffffffffffffda RBX: 00007f29537e5fa0 RCX: 00007f295358f6c9 [ 443.073278][T10210] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 443.073284][T10210] RBP: 00007f29544a0090 R08: 0000000000000000 R09: 0000000000000000 [ 443.073290][T10210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.073295][T10210] R13: 00007f29537e6038 R14: 00007f29537e5fa0 R15: 00007ffe3eebe0e8 [ 443.073309][T10210] [ 443.073313][T10210] ERROR: Out of memory at tomoyo_realpath_from_path. [ 445.544094][T10239] FAULT_INJECTION: forcing a failure. [ 445.544094][T10239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.559091][T10239] CPU: 1 UID: 0 PID: 10239 Comm: syz.5.1052 Not tainted syzkaller #0 PREEMPT(full) [ 445.559115][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 445.559124][T10239] Call Trace: [ 445.559130][T10239] [ 445.559136][T10239] dump_stack_lvl+0x16c/0x1f0 [ 445.559168][T10239] should_fail_ex+0x512/0x640 [ 445.559192][T10239] _copy_to_user+0x32/0xd0 [ 445.559215][T10239] simple_read_from_buffer+0xcb/0x170 [ 445.559249][T10239] proc_fail_nth_read+0x197/0x240 [ 445.559271][T10239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.559292][T10239] ? rw_verify_area+0xcf/0x6c0 [ 445.559317][T10239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.559336][T10239] vfs_read+0x1e4/0xcf0 [ 445.559355][T10239] ? __pfx___mutex_lock+0x10/0x10 [ 445.559372][T10239] ? __pfx_vfs_read+0x10/0x10 [ 445.559395][T10239] ? __fget_files+0x20e/0x3c0 [ 445.559420][T10239] ksys_read+0x12a/0x250 [ 445.559435][T10239] ? __pfx_ksys_read+0x10/0x10 [ 445.559450][T10239] ? fput+0x9b/0xd0 [ 445.559474][T10239] do_syscall_64+0xcd/0xfa0 [ 445.559491][T10239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.559508][T10239] RIP: 0033:0x7fb0a818e0dc [ 445.559523][T10239] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 445.559538][T10239] RSP: 002b:00007fb0a90e3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 445.559554][T10239] RAX: ffffffffffffffda RBX: 00007fb0a83e5fa0 RCX: 00007fb0a818e0dc [ 445.559564][T10239] RDX: 000000000000000f RSI: 00007fb0a90e30a0 RDI: 0000000000000004 [ 445.559573][T10239] RBP: 00007fb0a90e3090 R08: 0000000000000000 R09: 0000000000000000 [ 445.559582][T10239] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 445.559591][T10239] R13: 00007fb0a83e6038 R14: 00007fb0a83e5fa0 R15: 00007ffd5d7cab18 [ 445.559615][T10239] [ 445.750835][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.849574][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.856038][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.131289][ T5820] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 446.616286][ T30] audit: type=1400 audit(1762832853.336:453): avc: denied { create } for pid=10246 comm="syz.2.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 446.638383][ T30] audit: type=1400 audit(1762832853.336:454): avc: denied { write } for pid=10246 comm="syz.2.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 446.683926][T10245] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 446.702164][ T5820] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 446.716906][ T5820] usb 6-1: config 0 interface 0 has no altsetting 0 [ 446.725812][ T5820] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 446.735102][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 446.743528][ T5820] usb 6-1: Product: syz [ 446.749411][ T5820] usb 6-1: Manufacturer: syz [ 446.754548][ T5820] usb 6-1: SerialNumber: syz [ 446.810761][ T5820] usb 6-1: config 0 descriptor?? [ 446.823177][ T5820] usb 6-1: selecting invalid altsetting 0 [ 446.859610][ T5958] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 447.059570][ T5958] usb 2-1: device descriptor read/64, error -71 [ 447.349547][ T5958] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 447.539176][ T5958] usb 2-1: device descriptor read/64, error -71 [ 447.669879][ T5958] usb usb2-port1: attempt power cycle [ 448.356202][ T5958] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 448.724556][ T5958] usb 2-1: device descriptor read/8, error -71 [ 448.816388][T10268] syz.6.1059 uses obsolete (PF_INET,SOCK_PACKET) [ 448.845486][T10268] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1059'. [ 448.868449][T10268] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1059'. [ 449.000108][T10258] snd-usb-audio 6-1:0.0: Runtime PM usage count underflow! [ 449.280376][ T5892] usb 6-1: USB disconnect, device number 7 [ 449.330881][T10271] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1060'. [ 450.279075][ T5958] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 450.355830][ T5958] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 450.481042][ T5958] usb 2-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 450.495269][ T5958] usb 2-1: config 0 has no interface number 0 [ 450.505706][ T5958] usb 2-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=8a.16 [ 450.516416][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.538392][ T5958] usb 2-1: config 0 descriptor?? [ 450.974742][ T5958] usb 2-1: unknown interface protocol 0x1c, assuming v1 [ 451.007350][ T5958] usb 2-1: cannot find UAC_HEADER [ 451.068102][ T5958] snd-usb-audio 2-1:0.11: probe with driver snd-usb-audio failed with error -22 [ 451.156360][ T6031] udevd[6031]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.11/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.197438][T10293] netlink: 755 bytes leftover after parsing attributes in process `syz.3.1064'. [ 451.265074][ T5892] usb 2-1: USB disconnect, device number 36 [ 451.449578][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 451.619467][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 452.070910][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 452.418729][T10286] netlink: 'syz.6.1063': attribute type 10 has an invalid length. [ 452.442846][T10286] bond0: (slave bond_slave_0): Releasing backup interface [ 452.952038][ T5136] Bluetooth: hci5: command 0x0406 tx timeout [ 453.468797][T10321] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 455.409009][ T30] audit: type=1400 audit(1762832862.116:455): avc: denied { ioctl } for pid=10324 comm="syz.3.1074" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 455.434558][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.594227][T10330] overlayfs: failed to resolve './file1': -2 [ 457.113410][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 457.130652][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 457.142212][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 457.586323][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'. [ 457.627130][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'. [ 457.638369][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'. [ 457.899418][T10363] program syz.6.1082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.734755][T10376] tmpfs: Unknown parameter 'no' [ 459.196426][ T31] INFO: task syz.0.668:8617 blocked for more than 143 seconds. [ 459.590977][ T31] Not tainted syzkaller #0 [ 459.595953][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 459.661867][ T31] task:syz.0.668 state:D stack:23944 pid:8617 tgid:8616 ppid:5808 task_flags:0x400140 flags:0x00080002 [ 459.706393][ T31] Call Trace: [ 459.732459][ T31] [ 459.757303][ T31] __schedule+0x1190/0x5de0 [ 459.785024][ T31] ? check_path.constprop.0+0x24/0x50 [ 459.837122][ T31] ? __pfx___schedule+0x10/0x10 [ 459.875476][ T31] ? find_held_lock+0x2b/0x80 [ 459.902386][ T31] ? schedule+0x2d7/0x3a0 [ 459.943661][ T31] ? bdev_open+0x41a/0xe40 [ 459.982840][ T31] schedule+0xe7/0x3a0 [ 459.994136][ T31] schedule_preempt_disabled+0x13/0x30 [ 460.004775][ T31] __mutex_lock+0x818/0x1060 [ 460.015724][ T31] ? bdev_open+0x41a/0xe40 [ 460.045933][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 460.064337][ T31] ? bdev_open+0x41a/0xe40 [ 460.068819][ T31] bdev_open+0x41a/0xe40 [ 460.074380][ T31] ? iput+0x35/0x40 [ 460.079133][ T31] blkdev_open+0x34e/0x4f0 [ 460.083592][ T31] do_dentry_open+0x982/0x1530 [ 460.088353][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 460.093408][ T31] vfs_open+0x82/0x3f0 [ 460.097493][ T31] path_openat+0x1de4/0x2cb0 [ 460.102299][ T31] ? __pfx_path_openat+0x10/0x10 [ 460.107305][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 460.112404][ T31] do_filp_open+0x20b/0x470 [ 460.117120][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 460.129025][ T31] ? alloc_fd+0x471/0x7d0 [ 460.133403][ T31] do_sys_openat2+0x11b/0x1d0 [ 460.138084][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 460.143463][ T31] ? find_held_lock+0x2b/0x80 [ 460.148207][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 460.153324][ T31] __x64_sys_openat+0x174/0x210 [ 460.158200][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 460.163774][ T31] do_syscall_64+0xcd/0xfa0 [ 460.168302][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.174250][ T31] RIP: 0033:0x7face1f8df10 [ 460.178668][ T31] RSP: 002b:00007face2ebeb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 460.187270][ T31] RAX: ffffffffffffffda RBX: 0000000000020002 RCX: 00007face1f8df10 [ 460.195322][ T31] RDX: 0000000000020002 RSI: 00007face2ebec10 RDI: 00000000ffffff9c [ 460.203421][ T31] RBP: 00007face2ebec10 R08: 0000000000000000 R09: 002364626e2f7665 [ 460.211432][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 460.219570][ T31] R13: 00007face21e6038 R14: 00007face21e5fa0 R15: 00007ffdffb9b2a8 [ 460.228402][ T31] [ 460.231674][ T31] INFO: task syz.0.668:8619 blocked for more than 144 seconds. [ 460.239374][ T31] Not tainted syzkaller #0 [ 460.244309][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 460.253016][ T31] task:syz.0.668 state:D stack:26168 pid:8619 tgid:8616 ppid:5808 task_flags:0x400040 flags:0x00080002 [ 460.265083][ T31] Call Trace: [ 460.268345][ T31] [ 460.271286][ T31] __schedule+0x1190/0x5de0 [ 460.275797][ T31] ? __pfx___schedule+0x10/0x10 [ 460.280799][ T31] ? find_held_lock+0x2b/0x80 [ 460.285495][ T31] ? schedule+0x2d7/0x3a0 [ 460.289855][ T31] ? bdev_open+0x41a/0xe40 [ 460.294274][ T31] schedule+0xe7/0x3a0 [ 460.298350][ T31] schedule_preempt_disabled+0x13/0x30 [ 460.303946][ T31] __mutex_lock+0x818/0x1060 [ 460.308534][ T31] ? bdev_open+0x41a/0xe40 [ 460.313044][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 460.318084][ T31] ? bdev_open+0x41a/0xe40 [ 460.322693][ T31] bdev_open+0x41a/0xe40 [ 460.326927][ T31] ? iput+0x35/0x40 [ 460.331474][ T31] blkdev_open+0x34e/0x4f0 [ 460.335916][ T31] do_dentry_open+0x982/0x1530 [ 460.340848][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 460.345797][ T31] vfs_open+0x82/0x3f0 [ 460.349923][ T31] path_openat+0x1de4/0x2cb0 [ 460.354532][ T31] ? __pfx_path_openat+0x10/0x10 [ 460.359679][ T31] do_filp_open+0x20b/0x470 [ 460.364184][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 460.369719][ T31] ? alloc_fd+0x471/0x7d0 [ 460.374061][ T31] do_sys_openat2+0x11b/0x1d0 [ 460.378722][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 460.384082][ T31] ? __pfx___schedule+0x10/0x10 [ 460.388985][ T31] __x64_sys_openat+0x174/0x210 [ 460.393840][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 460.399390][ T31] do_syscall_64+0xcd/0xfa0 [ 460.403890][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.409802][ T31] RIP: 0033:0x7face1f8df10 [ 460.414210][ T31] RSP: 002b:00007face2e9db70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 460.422804][ T31] RAX: ffffffffffffffda RBX: 0000000000000941 RCX: 00007face1f8df10 [ 460.431696][ T31] RDX: 0000000000000941 RSI: 00007face2e9dc10 RDI: 00000000ffffff9c [ 460.439847][ T31] RBP: 00007face2e9dc10 R08: 0000000000000000 R09: 002364626e2f7665 [ 460.447824][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 460.455817][ T31] R13: 00007face21e6128 R14: 00007face21e6090 R15: 00007ffdffb9b2a8 [ 460.463964][ T31] [ 460.467035][ T31] [ 460.467035][ T31] Showing all locks held in the system: [ 460.479382][ T31] 5 locks held by kworker/u8:0/12: [ 460.484526][ T31] 5 locks held by kworker/u8:1/13: [ 460.500092][ T31] 1 lock held by khungtaskd/31: [ 460.505011][ T31] #0: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 460.533948][ T31] 2 locks held by getty/5577: [ 460.547191][ T31] #0: ffff88814d5eb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 460.585946][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 460.596239][ T31] 1 lock held by udevd/5983: [ 460.600884][ T31] #0: ffff8881433d8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 460.610428][ T31] 4 locks held by kworker/u8:10/7512: [ 460.615810][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 460.625755][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 460.634969][ T31] #2: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 460.646000][ T31] #3: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xdc/0x420 [ 460.656714][ T31] 1 lock held by syz.0.668/8617: [ 460.661821][ T31] #0: ffff8881433d8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 460.671218][ T31] 1 lock held by syz.0.668/8619: [ 460.676191][ T31] #0: ffff8881433d8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 460.685669][ T31] 1 lock held by syz.4.767/9036: [ 460.690635][ T31] #0: ffff8881433d8358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 460.700094][ T31] 1 lock held by syz.4.767/9044: [ 460.705050][ T31] #0: ffff8881433d8358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 460.714842][ T31] 1 lock held by syz.4.767/9047: [ 460.720608][ T31] #0: ffff8881433d8358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 460.729995][ T31] 1 lock held by syz.4.767/9049: [ 460.734934][ T31] #0: ffff8881433d8358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 460.744985][ T31] 1 lock held by syz.4.767/9055: [ 460.749969][ T31] #0: ffff8881433d8358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 460.759446][ T31] 1 lock held by syz.4.767/9057: [ 460.764371][ T31] #0: ffff8881433d8358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 460.773728][ T31] 1 lock held by syz.4.767/9060: [ 460.778659][ T31] #0: ffff8881433d8358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 460.788148][ T31] 1 lock held by syz.4.767/9064: [ 460.793237][ T31] #0: ffff8881433d8358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 460.802794][ T31] [ 460.805186][ T31] ============================================= [ 460.805186][ T31] [ 460.814111][ T31] NMI backtrace for cpu 1 [ 460.814123][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 460.814142][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 460.814152][ T31] Call Trace: [ 460.814158][ T31] [ 460.814164][ T31] dump_stack_lvl+0x116/0x1f0 [ 460.814194][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 460.814215][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 460.814242][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 460.814265][ T31] watchdog+0xf3f/0x1170 [ 460.814291][ T31] ? rcu_is_watching+0x12/0xc0 [ 460.814319][ T31] ? __pfx_watchdog+0x10/0x10 [ 460.814339][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 460.814367][ T31] ? __kthread_parkme+0x19e/0x250 [ 460.814393][ T31] ? __pfx_watchdog+0x10/0x10 [ 460.814413][ T31] kthread+0x3c5/0x780 [ 460.814430][ T31] ? __pfx_kthread+0x10/0x10 [ 460.814448][ T31] ? rcu_is_watching+0x12/0xc0 [ 460.814469][ T31] ? __pfx_kthread+0x10/0x10 [ 460.814486][ T31] ret_from_fork+0x675/0x7d0 [ 460.814500][ T31] ? __pfx_kthread+0x10/0x10 [ 460.814517][ T31] ret_from_fork_asm+0x1a/0x30 [ 460.814554][ T31] [ 460.814560][ T31] Sending NMI from CPU 1 to CPUs 0: [ 460.938028][ C0] NMI backtrace for cpu 0 [ 460.938045][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 460.938062][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 460.938069][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 460.938092][ C0] Code: e7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 94 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 460.938105][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 460.938116][ C0] RAX: 0000000002908761 RBX: 0000000000000000 RCX: ffffffff8b6092a9 [ 460.938125][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b720 RDI: ffffffff8bf070c0 [ 460.938133][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 460.938141][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 460.938148][ C0] R13: ffffffff8e097a00 R14: ffffffff90820cd0 R15: 0000000000000000 [ 460.938156][ C0] FS: 0000000000000000(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 460.938170][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.938179][ C0] CR2: 00007f852d9b3ad8 CR3: 000000007a71a000 CR4: 00000000003526f0 [ 460.938187][ C0] Call Trace: [ 460.938192][ C0] [ 460.938197][ C0] default_idle+0x13/0x20 [ 460.938211][ C0] default_idle_call+0x6c/0xb0 [ 460.938224][ C0] do_idle+0x38d/0x500 [ 460.938243][ C0] ? __pfx_do_idle+0x10/0x10 [ 460.938258][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 460.938275][ C0] cpu_startup_entry+0x4f/0x60 [ 460.938290][ C0] rest_init+0x16b/0x2b0 [ 460.938304][ C0] ? acpi_subsystem_init+0x133/0x180 [ 460.938321][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 460.938339][ C0] start_kernel+0x3f6/0x4e0 [ 460.938356][ C0] x86_64_start_reservations+0x18/0x30 [ 460.938373][ C0] x86_64_start_kernel+0x130/0x190 [ 460.938390][ C0] common_startup_64+0x13e/0x148 [ 460.938410][ C0] [ 463.589881][ T5185] udevd[5185]: worker [5983] /devices/virtual/block/nbd0 is taking a long time