last executing test programs: 7.459749092s ago: executing program 3 (id=1500): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c0000904000002070101000905010200"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0xfe}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x8, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x6, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0xd3, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x3, 0x0, 0xff, 0xe661, 0x4, 0x9, 0x3, 0x9, 0x4c74, 0x80000000, 0x0, 0x344, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x8, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x7, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0xcad1, 0xfffffffc, 0x4, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x310, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0xa, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x2, 0x1, 0x3, 0xffffffff, 0xbc41, 0x48c93690, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x200009, 0x6, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0x100009, 0xc2, 0x2, 0x77d, 0x7ff, 0x12f, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x3, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7ffd, 0x46f, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0x5, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0xd800, 0xa1f, 0xf40, 0x7, 0x1, 0xb3, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_gettime(r2, &(0x7f00000191c0)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.907828999s ago: executing program 3 (id=1503): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xf, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001980)) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001980)) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000, 0xfffffffc], [], [0x400000000000000]}) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600), 0x4) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x21}]}]}, 0x64}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x21}]}]}, 0x64}}, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x0, &(0x7f0000000180)=0x5, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f0000000100)) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905850140000000000905"], 0x0) epoll_create(0x25e) 5.801286985s ago: executing program 1 (id=1511): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005fdb2971dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359ca9daf3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae682acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da30000bce645451b851111dd98ac4d8da9317c2c082020e0b2d6340809000000000000008e053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456521cffdef93e29f10f4a11f0cfbfc0ff976b20fe"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071184b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 5.652128763s ago: executing program 1 (id=1512): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050a"], 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)='D', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000025c0)="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", 0x398}], 0x1}}], 0x2, 0x2090) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) sendto$inet(r0, &(0x7f00000011c0)="0f", 0x1, 0x300408d3, 0x0, 0x0) 5.444030541s ago: executing program 3 (id=1513): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x8, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x6, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0xd3, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x3, 0x0, 0xff, 0xe661, 0x4, 0x9, 0x3, 0x9, 0x4c74, 0x80000000, 0x0, 0x344, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x8, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x7, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0xcad1, 0xfffffffc, 0x4, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x310, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0xa, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x2, 0x1, 0x3, 0xffffffff, 0xbc41, 0x48c93690, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x200009, 0x6, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0x100009, 0xc2, 0x2, 0x77d, 0x7ff, 0x12f, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x3, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7ffd, 0x46f, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0x5, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0xd800, 0xa1f, 0xf40, 0x7, 0x1, 0xb3, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_gettime(r2, &(0x7f00000191c0)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.96135308s ago: executing program 3 (id=1515): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() r4 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) r6 = syz_clone(0x80100, &(0x7f0000000400)="84a9c5a2a8c397c817bb732daefc4e335ad6d98631855af92821e126672f2a2c0c70f6e93db98033ec6c4fdbac545549e22b5258e53d8c21b2e8b16785865346c815cd7b4b790a5947d5a1ac6408c7836376f5f217f688", 0x57, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="1cd2cd14c697f1726c47b0cb279d1820bceea1952b79b5202bcaa53dfe5836699801c92ca331d7ed00c2c2e35276000970f231a5059dcd4bdfb939c5a9567ef05d4d3dff02c3db252c8d6d060b2584bcd34998cddf83112abe91fb98fa27aa02d51b90d78db250762c2937ee821c334bab3ca0facb879e986381a95ea32689ec98a2d902c8d2540b7f950c23c6557ac205b98fc12c62eaa82e6c20f5f8ee2de98bc36380c311ed4bdc82d71bd1440fdd0e7b517afbccee15c03d00079cde4c601a1ef937adc0591bcdd96dfe97422b25ca35656971cb6fe4246134521e90e48d8db21138aec02bd79d19") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x4e4, 0x16, 0x301, 0x0, 0x0, {0x13}, [@typed={0x14, 0x68, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}, @generic="07c537595f678ab65005ff55d05cf7e0a1fece85775896db16416aac64a353a8d32b3cd64516425187a5d536aeb8f70d9a788f8a1b5ff52b2d0bdcbcb1d74893a0dd6cc8d376a8d3b3464fc9bce7a4ddd08a6aab8e75379855ea0cf36582956ddd1309ffeb5b81b39056dfd703259df3a0a7bfc35ae1d52991ace6c14fe2a09460562cd31462a4c47aa23dc81367ea81f844c30353d4f3185aacc55acc458b4550779f31416b00aa3ae35514866097504bfe70413fe2bf85d5a380acd19013175104b29b8f6331fb849f2ff7285e3cf2bead8580f609a01f7013b8206c71c5ae7c6e193cd96662f2b8139f0f6862914ed609", @generic="4682f18b026acdf4bc863625e91846a7f505ca60a32232d4a92958a450815f65bb7cdb8aadff14da8afc4fff513c0dec531a361af24b8d6506b53dc23b7b183ea583b540e17b4dc9d687f70e8ee001aa1f03d7", @generic="b078a498c2b0865fbf223e8c53588018fa4506f85b754f2a009ada71ada4314b9930d7ccc1c7952735c7a1a1a126641c6bdc263586f506cab02617bcc10a7e9ddc88ba41f911eb9f1b0fe18ddad708f2ab39d6dbaf5f1a38c0f5ed74f400", @nested={0x1e0, 0x2, 0x0, 0x1, [@nested={0x20, 0x75, 0x0, 0x1, [@typed={0x4, 0x84}, @nested={0x4, 0x150}, @nested={0x4, 0x114}, @typed={0x8, 0xb4, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x4, 0x169}, @nested={0x4, 0x96}]}, @nested={0xad, 0xb6, 0x0, 0x1, [@typed={0x4, 0x13a}, @generic="44f93d048254c4a555d730dc0f16ff88526d4ab34a0922da6c16efb87ad9eab46b9bb3ab59b29cd178e36d409fb41ffb969f88e7dfbe26acf4dc5858d6e9573ce7995a43d4a25931b588ee0edeaf3d84809fed046b6c4c09f32847fc9bcb24d334cffe8590", @generic="42eacde63a4eb3d14de2d67eb37292b8b4412126d1ae93ddb4ab39c9", @typed={0x8, 0xda, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x50}, @typed={0x8, 0x5c, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x39, 0x0, 0x0, @uid=r3}, @typed={0x8, 0xcc, 0x0, 0x0, @pid=r4}]}, @nested={0x10, 0x13b, 0x0, 0x1, [@nested={0x4, 0x168}, @typed={0x8, 0xb3, 0x0, 0x0, @uid=r5}]}, @nested={0xfb, 0x49, 0x0, 0x1, [@nested={0x4, 0x45}, @generic="9085cbf101a7a29cd9878f72745d49533aef09464579a2887f89586db174548be6eb9651c1f57468d07a3a9c43b6f2c142da691caa12d0bf3309c24965a1accb425ddf863b0513f3a9392b96b3f24c93fe68353dd6b11e0b0dc13a2116b58c3929fb64c960a1a7da2afa2aa747f0d51f0b12b8d2b9f50042653b332a2c1171b956b5bd3b933a65f41bb4970363850affc40ae87303937766bcd02ba2148442099b45b817f13d69e0d66459a046c25c026cd68ebbeea0fc9325fe55cd0d148a64fa3ca2f874b262cdf0e0a764a9492fea03e2289ca6a092c1314533be0cf3ffabb574a7f351e43f8cd3ed63", @nested={0x4, 0xfe}, @nested={0x4, 0x8c}]}]}, @nested={0xa9, 0xca, 0x0, 0x1, [@generic="adec7e559c2b7f98ffa5a41b46a012205838a6d3d3788d05c41e17b84dc9ea6eea16664a4b98ac89509bcc09600bf625723f857ee7aeeb849b341a0c477fedb791230c7df660ead8dfb6ae89eb1be548f46383a6fb6466972478539c25936cd0062392572fc839d8dae4cc70750c107e241ec3e829", @nested={0x30, 0xfa, 0x0, 0x1, [@typed={0xc, 0x142, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x104, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x163, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x68}, @nested={0x4, 0x3f}, @typed={0x8, 0x13c, 0x0, 0x0, @uid=r2}]}]}, @generic="7c3fe46912ba56d6f1c23fc2abf0f8ca415405588a993a2fd9abcb8b05101c067444db22379d535342f8cb378f62d4d617ef02f15846a3d6fb7d653340da84b38a80f260501aa86d8015d4f846e393d4335371e8993899a975e96cafb6d53107b7e7df56ad424a755629868e2755031162cb4e5162eee4b89cffe318b31e2abc12e77e0c2be7c0cfbaae52"]}, 0x4e4}, 0x1, 0x0, 0x0, 0x20004001}, 0x90) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) pselect6(0x4b, &(0x7f0000000040), &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) 4.52755998s ago: executing program 3 (id=1519): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, 0x0, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000180)={0x0, 0x0, [0xffff, 0x3, 0x3fffc000, 0x6, 0x7, 0x7, 0x10, 0xfffffffd]}) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffe) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) write$proc_mixer(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r7, r6, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) pwritev(r9, &(0x7f0000000380)=[{&(0x7f0000000180)="15cbaf987170048c1640bf6c6a0976dddd4476a011f70995b52d5695deb00b3166186548b8eb5a4acd264d79406a2115b1566a2bf4937dd940b03ae3de14bb27f5b60280e8ff1cf5db83cf002c6d4c1cfff745b5caf92c0e1872dafd088ae5461a92095e745d5c7478269c7031d8e215d87c911d6172a0807c99886443889954e3d16a", 0x83}, {&(0x7f00000003c0)="1d02a0f3933efcd08f4b6768bd0714e8571228bc41f6dac14525a0c2988acaa1bfac3f8a9a74c2ecaab8ffe204de9d73f26af28cb91a2a9a06c39d3c1d08eb5ab2c65a7fe650c09347061ad7350c93965bca530c6902e46da03a8b5cd86f62993f36d0411624802302ce27a0fd27716e6af56708626ec88bef1298718dfd3712557ed4915c29e9da8059764cf6abb340cb76f42fcc1eb486886a79e53fbf23d2f1aff23ca6b70d9a538d55f5630daa5dcc66", 0xb2}, {&(0x7f0000000300)="1c9cc9a87e46004910ee76b5619e28cd04b8d06fb876a86d24de94d5bee0e4b6debbf0625bdf54aa5fc5", 0x2a}, {&(0x7f0000000040)="c8f10007bdd4e1f5b81d895b45fcdad804266a89c7e835ea616218312bca04d3380d39690bd17acfa894f63a31253037056e0788fa1daf4fa071d419a8e8c76988e22c90773e8092daeae897fd", 0x4d}], 0x4, 0x9, 0x3) 4.175786713s ago: executing program 4 (id=1522): r0 = socket$inet(0x2, 0xa, 0x401) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040190}, 0x40) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0x5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91", 0x1}], 0x1}}], 0x1, 0x2090) 4.114947992s ago: executing program 2 (id=1523): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x4, @pix={0x0, 0x20000, 0x9de86b73b1dd5744, 0x3, 0x4, 0x0, 0x5, 0x3, 0x1, 0x3, 0x0, 0x6}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0xb3) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r3, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001c40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@mpls_uc={0x8847, {[], @ipv6=@tipc_packet={0x4, 0x6, "28f448", 0x20, 0x6, 0x0, @rand_addr=' \x01\x00', @remote, {[], @payload_direct={{{{0x20, 0x0, 0x1, 0x0, 0x1, 0x8, 0x1, 0x2, 0x40, 0x0, 0x2, 0x7, 0x1, 0x3, 0x0, 0xad28, 0x4, 0x4e22, 0x4e22}, 0x2, 0x4}}}}}}}}}, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xe, 0x0, 0x0, 0x400000]}}) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x20, 0x4, 0xcd, {0xcd, 0x23, "a6a0d96ec801250ecdaa85695854e43b4865ae35d4a750b334e06b29caec463789da869ff7295d0b7ff93ed8a8a4e7a39fc828708a6d1c5205e37023cbc8d287219e4588ecfecc750754d516494c2a95739921cf05011b4706de7f76ecdbfa24963e98970befd779f17dbd5457071a3291dcf40993c60bb8269a4886b6057dd78e9d5124ae946f18809ad05889ba45a099f5d1ec78caf9e14f34c4b22528ccb168847af29d86b48dbaad953d4fa89764513c6d9e1e5d0f6da4e84d0bea67657cf3270b3ea16416ca108f79"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, &(0x7f0000000440)={0x0, 0xf, 0x69, {0x5, 0xf, 0x69, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x400, 0xf00, 0x8, [0xffc00f, 0xf, 0xff0000, 0xc0, 0xff3fc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "da9e2c7a5100c4d5265786922693901c"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x5, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "5a770632591c502773de6f903991a64e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe0, 0x5, 0x0, 0xfff8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x3, 0x0, 0xef}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x10, 0x6f, 0xff, "412fdab7", "5e7ca89b"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x10, 0x7f, 0x7, 0x9, 0x3, 0xbdf}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000580)={0x20, 0xf, 0x55, "d1a6c2c20bb897b20f5fda68ff510d507ccbbbb90e9f29fb61393b02b7ce3d1018438a394fa15f0b4ffb0c6a50f2d943bd775888c2aa637c943b3db1f5d2e745c1e6e422156b87c9c463460aacf3b3aeb38a33668d"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x40, 0x2}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x4a6}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x60}, &(0x7f0000000780)={0x40, 0xb, 0x2, "84d9"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000800)={0x40, 0x13, 0x6, @local}, &(0x7f0000000840)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, &(0x7f0000000880)={0x40, 0x19, 0x2, '3\f'}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0xea81}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0xf}}) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) (async) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) prctl$PR_SET_PTRACER(0x59616d61, r7) (async) mmap$qrtrtun(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x100010, r8, 0x4) 3.924180943s ago: executing program 4 (id=1524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="6409000001050102000000000000000003000003540201000100000004000000010801000700220073797a31000000000000000000000000000000000000000000000000000000000c7b4c72d9e2ed8aedf802df1c614837c30eff07bd963d2718c08ec38e2ce07edbba8c87b8829deb25010dd9e32d163c7e0d2c17fa8dfaa35ff73980158db5ad0400ffff00000000f8ffffff0400400003000000040000000700fcff00000000020000000a00800000000000ffff000001010500020000000500000002005c0000000000d70000000800ff010100000000000100020007000200000008000000050004000100000004000000ffff07000000000000040000c60c090000000000316600002700560c01000000130900000c00000000000000fc96806d42db0002010000000400000003000300020000000000f803ffff0200020000000800000007000104030000000a00000003005e1102000000050000000300810000000000090000003410030003000000090000000ca3070003000000060000000800050000000000040000000200010000000000007a000002003b00020000000300000000800700000000000200000000000800010000000004000007000100000000006400000006000100010000000900000007005b0601000000ffffffff05000c00020000000300000001000800030000000900000098ad04000300000005000000b90604000100000008000000010018030000000001000000a70e0800020000000000000064dc060001000000050000000e0002000300000000000080ff03060002000000f50000001614060000000000f8ffffff010006000200000001040000540201000200000006000000040805000500250073797a3100000000000000000000000000000000000000000000000000000000295cfd19bbac6f47db9a29d3f097d35c75114ec59d69b7c445c48199931d2ecd0e09903ddf4c32402044427bea9b04d02b36ff2a9a39bdb01f8bb6b1f6cbe01c07000300020000000600000008000700010000000200000006000500030000004e0b00000800090001000000070000000700008003000000960b00000200160000000000000000000200ff0f01000000090000000600f9ff02000000f90a0000926b0f000000000002000000100990000300000004000000e000ffff0000000004000000fbff010003000000080000000700030000000000090000000500050000000000f7ffffffff0106000000000007000000f201000001000000f1ffffff0e00070000000000060000000300200001000000080000000800050001000000400000000000120003000000010000000004040000000000040000002ef7030002000000ff070000d36006000300000002000000000002000100000005000000010001000100000010000000feffff0f03000000000000000a004c0003000000000100000900fa00010000006f0500000600070001000000090000000700040001000000cc2b0000050001000200000040000000f38e010002000000000400000700060001000000080000000200030002000000bb0e000017ac100000000000950000000000ebaf02000000ba0300000000090000000000020000000800d8e10200000001000000050040000200000005000000fcffb46703000000060000005402010001000000fdffffff000001000800080073797a3100000000000000000000000000000000000000000000000000000000b582fd9df213e28a6402f4cda4be10d56642d4d39f3b111a176c92c505120b1ad294b4ada7eaadd2cd7b12b46beabdd5c655149ecc52d9a6ba64ace079df5acd050007000200000008000000030005000200000003d665310000000000000000090000000000790401000000000400007fff09000200000005000000080003000200000002000000ff07a27703000000070000000300040000000000bc080000bd020300020000000b00000093090400000000008000000000000700000000000400000004000180000000000400000007000200010000000800000007000600020000000100008004007c0403000000ff010000080002000200000006000000050049fe0100000001800000010460f6000000000100000000000200010000000180000006000100020000000a0000000400060000000000010000000100040003000000050000000600010003000000ff7f000001010400030000004c8900000100000000000000030000000200040000000000050000000200050000000000010001000200be00010000001c413917090006000300000005000000ff01070002000000e8b0000005000800020000000000000007000200010000000300000005000600010000000800000084f00a0002000000060000000900050002000000067a000007004000010000002d850000f9fffaff020000000500000000008e090000000003000000060009000000000085000000080009000000000008000000540201000000000007000000040209007f000c0073797a310000000000000000000000000000000000000000000000000000000088416d33daeae8d160daa5793082b0d0bbd89a15cb4a07ebdbea220221d0b5552a0f44ac7949170920b59588426b178e914fbdd3453bdc55e8bc7b2d63085f1101000400010000ae070000000180050000000000020000000800c700010000006eb9000004007f000100000001040000040001000100000000090000000007000000000008000000070040000100000007000000960b0100000000000001000004000002030000000800000001f008000200000002000000040007a701000000200000007f00d600010000004afbffff0c00090003000000070000000500080003000000800000006eda104e0200000005000000400009000300000000080000050004000000000000100000090009000000000004000000cb30030001000000060000009b4aa198010000000300000005000e0000000000070000008000d00403000000080000000400050002000000040000000500000201000000030000000800020002000000070000000400ffff00000000e20c00000008010001000000000100009d0007000100000006000000a603030001000000060000000000ff0702000000ff0f0000a50d7f0000000000400000000c0002000300000002000000000103000300000006000000ffff010401000000ff7f00000200270c0300000006000000090003000200000009000000f9ff0700030000000f0000000100dbca000000000600000004000e01000000000a0000000000ff7f020000003309336a"], 0x964}, 0x1, 0x0, 0x0, 0x88}, 0x4e42725442dc41ce) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r2, 0x0, r3, 0x0, 0x38f9, 0x0) fcntl$setstatus(r3, 0x4, 0x6c00) write(r1, &(0x7f0000000040), 0xffffff4a) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES8=0x0, @ANYRESOCT=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc4, &(0x7f00000006c0)=""/196, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800b00010072656a65637400000c00028008000140000000020900010073797a3000000000090002"], 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000400)="d35d440ecb576ed6bacc2a5862ae9ae88f868b9fc2d499a43f163a905182e11b3a3e3dfb359ef747b3101d46cfab0b81cede5d0b5d1725f61724cfdc9d7e095d85868848d17584b2322f03b2de70632b3ae0587aa7e0308ef7f0e9848624c7f2c8a737509c1fb7b0ff232e66c8d5352e7f69bb859619110f7dfdae126faadad1abbe8050fe3e98a4fd928d7ca76be0fab6cd20e95d379fded79d92c43223c467471c954e", &(0x7f0000000540)="04e9e4f4b6900bc18a8666aa0c5a114333c0b273bab5577c81370385a6f8a42726c422c1f72e0f24390d3c29cb23f141ef9797df37a328d839dc6b0cf23e3ef21537f31a7f7753a38864b7a5372ddc28f714c6c00782e441aa79b64afb2ae47f98d744d790b8aa08ddfd33040fb38a89cfae187f5796d08fbfacc54c39dc8e6927ae5d1fe3a4b435efd1967f96724cc97f96e40a945bcca6f2e2316a2ec2136320361a8d053f21bd8d1be9bb76f162ace029daf7bad5c5b07b878a33ff83db07d5795c10c4880d7b5f48934fe8f7acb3db32"}}, &(0x7f0000bbdffc)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000380)=@base={0x6, 0x0, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xffffffff}, 0x50) read(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x22301, 0x0) 3.923769908s ago: executing program 2 (id=1525): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) (async) sendmsg$nl_route(r0, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) (async) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x44, '\x00', @data=0x8, 0x8}, {0x6, '\x00', @buffer={"8f01000000000000003acd90d11555827d3ac01c0075e71885aa05a1f7a01e83", 0x20}, 0x1c}]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280), 0x0) (async) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) (async) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 3.781842519s ago: executing program 2 (id=1526): r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001400)={0x0}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000386cfc080d052201655b010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x1, 0x3, 0x20000007}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe}) r3 = fcntl$getown(r1, 0x9) capset(&(0x7f0000000180)={0x20080522, r3}, &(0x7f0000000240)={0x80, 0x54ec, 0x9, 0x8, 0x800, 0x400}) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) writev(r2, &(0x7f0000003c80)=[{&(0x7f00000003c0)="69c87acea7", 0x5}], 0x1) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r1, 0x82000000) writev(r1, &(0x7f0000002680), 0x5) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x2) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000800, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x101, 0x100000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f00000000c0)=0xd513) 3.551330742s ago: executing program 0 (id=1527): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}}, 0x20008000) syz_open_dev$sndpcmc(&(0x7f0000001240), 0x0, 0x40002) (async) r5 = syz_open_dev$sndpcmc(&(0x7f0000001240), 0x0, 0x40002) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) 3.287543533s ago: executing program 0 (id=1528): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000041000000180100002020732500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x36, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x40010) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbff, "", ["", ""]}, 0x10}}, 0x40080) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x1}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000700)={0x24, &(0x7f0000000580)={0x40, 0x9, 0xa7, {0xa7, 0xd, "923dbfdfd119d3c642173dd522db7d5d55a7d136a7544809895bf30531811508473aa32e15c475eabd0472a7ed153bb7f4489fc6b2bf6ebaa4df6eaf7f63a07f55be584f8aef1c2145e6432350776c7b7ce776a8eae8c7c6264090fc23b3b17c7a26237a9f065850a4a8b0664130c6000e1708478184ff69b28c0f6dec4f34a049c626f507cdb6c57566185cbbb193eb659926f443b43abec22e2cbba3c3195de9ea3c417a"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f00000001c0)={0x0, 0x22, 0x26, {[@global=@item_4={0x3, 0x1, 0x0, "e89c3095"}, @global=@item_012={0x2, 0x1, 0x3, "d75a"}, @global=@item_4={0x3, 0x1, 0x2, "874d13b7"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x1, 0x0, 0x9, 'N'}, @local=@item_4={0x3, 0x2, 0x5, "50eb475a"}, @global=@item_4={0x3, 0x1, 0x5, "46362b1d"}, @local=@item_4={0x3, 0x2, 0x4, "4a7c5383"}, @local=@item_4={0x3, 0x2, 0xa, "3d03d583"}, @local=@item_012={0x1, 0x2, 0x5, '{'}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0xa, 0x1, {0x22, 0xb1a}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000740)={0x0, 0xe, 0x6c, "48de289c8165b558bd51a5789bd3d99025526f5b775cd28e774a82a5c8c1fc98fe791289af17bf3d4370faffb925b97f0e9a9a55e52c784b12436f53708987a26919db3038372130aa84d47b238bac86be20949ddb0c7d8687a7c9ab7cdcc0b8dc43ac5af5e7b189ef086e04"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000840)={0x20, 0x1, 0x65, "1391686ac8ed8b19843ce2a683706d921d0458b040a9143bd367ea3568ffe513f49a79ff85a895b7dc60d001a27fdca4b8824a994302b147988d0f79d88aba0c053f639ed26f0d3f91eeb3c7b23b9af005797c57d70fa88f703915d64dba83f16914f19edf"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x81}}) syz_usb_control_io$uac3(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x5, 0x2, 0x10, 0x7fef7bf9}]}) fsopen(0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000280)=ANY=[], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x3d}) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000002400)={0x2, 0xc473}) 3.136571943s ago: executing program 2 (id=1529): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x28) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x4b4b, 0x6000000000000041) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r7) r8 = syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000680)={0x0, 0x1ff, 0x0, 0x1, 0x3, [], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SCSI_IOCTL_STOP_UNIT(r9, 0x6) epoll_pwait(r4, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000004000000900000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f6b88dc7280000000000000000405547f82eda13268400"], 0x50) accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) 2.931529048s ago: executing program 4 (id=1530): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 64) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe2$9p(&(0x7f0000000380), 0x4080) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x448}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x80}}, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x8, 0xb, 0x0, 0x2, 0x0, 0xfffffdffffffffff, 0xfa11, 0xfcf7}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ec) write$binfmt_script(r3, 0x0, 0x0) (async, rerun: 32) r4 = socket$rxrpc(0x21, 0x2, 0x2) (rerun: 32) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) 2.552168318s ago: executing program 1 (id=1531): r0 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xeb\a\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xc9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\x95\x9cA\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t\xa6A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f00000002c0)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfc\a\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d\xf5\x02;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K$\xa5/2Y\x10\x18=U\xbb\xd86\x02BpT\x98p\x89\x93v\xae\x95\a+\vB\x8c\x8b\xba\x1f\xcf\xf6\x94\xa10\xd9a-\x9b\xe8\x05\xc2\x98\xf3Wz2:\vx0M\xde\x80\xf1\xc1Dr\x92\xf2\xb5j[JN&[\x11\xc6\xb3\xfc\xec\x18', 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000000c0)={0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="4374aa964c000585d7", 0x9}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f656de628b8b1b2107d04", 0x14}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x1ff, 0xb, 0x3}, 0x3e, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0xf, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x259, 0x6, 0x1, 0x6, 0x1, 0x4, 0x6a, 0x1, 0x80, 0x7, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x101, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5ba, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x6, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0xc, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x5, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0x6, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(r5, &(0x7f0000000240), 0x100000000000003c, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 2.529819825s ago: executing program 4 (id=1532): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x44010) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81", 0x1a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b4", 0x3a}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x4b65, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 2.462737341s ago: executing program 0 (id=1533): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0xc28}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x30020000, &(0x7f000005ffe4)={0xa, 0x4a23, 0x0, @mcast2}, 0x1c) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000840)={0xc, 0x8, 0xfa00, {&(0x7f00000006c0)}}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x11}, 0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(0x0) symlink(0x0, &(0x7f0000000100)='./file0\x00') r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)="71bdb964248ac88afe9b68d7a04aff0f8f5b", 0x12, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xaad80) mount$9p_virtio(&(0x7f0000000040), 0x0, &(0x7f0000000000), 0x1000004, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=virtio,a']) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000350009005a2a79e219976204282bac40fffffffffddbdf25020000000c0001ace7fd0100", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x4000004) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) r8 = syz_open_procfs(0x0, 0x0) read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000000c0)={0xfff, 0x1, 0x5, {0xfffffffc, 0x80000}, 0x5, 0x8}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) shutdown(r0, 0x2) 2.363451672s ago: executing program 1 (id=1534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) syz_emit_ethernet(0x4c8, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2f, 0x4ba, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4a6, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x100, @val=0x80}, "2b47019676fb912bfb3979bb82d94c42da0498ad601e4b92fe2c62ba4d6bdd44d280dada5a5650e1edaecb4fd923a6ded85d084df9d5e7bffddda34d04e5cdb51ef2fe8703b3988bb47989823d53b49308c5d2977c173d08535eaf56e740391766d74589e9806165ef3d4085755bbaa162e74e4dc541aa6004761f6a43e20556918bb04da9070b3cc89472820459902b3342031e1571d32a8b78f2da2a8e73e26af9389dced48cdcaf0a714363789e4acd9373813e2729986552c1cdbeabd3a03d7684ead62926c387b1552066f9751c9f0fa935afda36cf2fb30bba0cb8007f3bd1fea86ef3b7f8434e250f2a09e6a3b569c8c0519adc93f8b909470f39920551618ecfe04ff0cc4b1ed29eee56dcd976a79181e4d3218b51150ce595c25371293ec4d05e4aa411ef3b190554c6a2e06ee6374d80a3c511603a8a20b75f8075d0d83d31b86be7d2d785e6d60c07b515fe04bd55e20bcfe799a3e66c93744c52d0d34880ab42354859d5d1a9d0d65b52a0819b19c2d7f7a285d401825bf40ccc355b1aecb100c3f86c71607b00c59c7a8c0d8ae35a0a0e20f189568cb1a386c9d799f2c5ba6cce4e6ae0dce69f7391a4f4b011b27ad89ecaca95b90be9e517d39fa47ab5d08fd75233c1b0b604c169ebdc29efe713e9ecd551fc383be78cc5afccee1d8bb067e64054734b61c99f1055748b335ea261b9a6ccd1b3362a0c9d26c74bcda8e4d1efca7f614a61b8dfa2508a39f78901cf7ab2f15409f1da06432db0b50f00e16a77ceece0e315fc63c46cd418a1d259ba713bc5a26a49bdc202cf04e02149cf29c1f617f0898321ecf9d395f349e276480b42147d4dc1af6491e05cff9a33517437cb21125f6945e0b727576880a89ef6d53375bb901e14ae1a2dd27a5bf67012b8e4515023dba602d2e5293da914c199c0c0d610bf6461cd7bba6c8b948e96f395c39a7a0b93df65368f8eaa306fdcf87522ac1a36c427d98af77c3a3afa33dc3e8e070a1a2f66a4877abbeef23ff67befdcc9532cf3990918fb778d7799ee1f26b469c37f3c9578b8f8f2d00d32fc839171b9474e76f03d827a4eac2802322f3d68b03d1516aec9566bba3acc0bcf0d6a551c412f080d8c7fe0c60e23cdb328920263477470ea4f23e23d5aebbfda173aa781f89bf0cdfce2003ed3c010c511b3b489eab29453a365b839cca172e3abbcbab0203899bdb4f14a3423c2293166145760e61c3c188c3e0888ee817f0772ff89e02df8f42b9951e1661b39def34308c46e8ec1e4e5b68e88140ac7dc993523191fdb71db3a2677a3bd666e6180a96c9846bce6cb6c16e379bf29e1769a66da2f6781e79f082cb80662d72adbb21240cef87dc3079a822b2a791753fcd12a7ec362088d76237370bcd5d5daa440ba735b4e29cf2cb93583a5080270d1a3fd40183dc04f30e01c428f92e595c89fcbd1fc52962eedea82e2772b5f5fa3dad0f908fe6a48fffcc69df60f34ef9d9ba7609d16cdf733ca77785c0ab6f536b79ffde4ff9b835bfcaffef0d15ae69c26c0588f1acd5a648fde52568c713163717eb77f863d20dda0f1ca2c0306748544d3763c1cfa82f1785f047c842cadc4f8ac1906ab6ad8f6425bb9efbe97ee62ea7e40ec6ac342f457f00626f907ed939864"}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x80000) fcntl$setstatus(r4, 0x4, 0x42c00) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) r6 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "a81ef5037a313d882834a7e8543a38267bdcc88850c8d70b5b795116fd55e6a21c2eec400941ac9bb951f967a050f260b917f60c9304e1cba8fb5cd69d56a69f", 0x2a}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffd, r6, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000440)={0xfffffffe, 0x2, {0x3, 0x0, 0x401, 0x3, 0xfffffff9}, 0x7}) write$sndseq(r5, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242) r9 = fcntl$dupfd(r8, 0x406, r8) write$tun(r9, &(0x7f0000000400)=ANY=[], 0xa2) ioctl$SG_GET_PACK_ID(r9, 0x227c, &(0x7f0000000100)) 2.288846865s ago: executing program 4 (id=1535): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffe41}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc0050}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="f0000000161f25ea14562919f228c21fe87e5f29cc6de75d8ae265f03878c4bba908a926c112dc7a0e31569884b0d00f4d409f2c9bd35e1ff239f7d23835c0441f84f1a0bbd09d8dc5693940972fce9319f5882e7993cd6940eebe00040000000000003fc85742e6d76d52864933c08db2a78095ff024bf81e6261a4f6098c", @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4c000870}, 0xc000) 2.108434705s ago: executing program 0 (id=1536): r0 = socket$inet(0x2, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4400000000080102000000000000000000000006140004800800054080000001080006400000000906000240810000000500030084000000090001"], 0x44}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}}, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) (async) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x3, 0x8, 0x9, 0x4}, {0x33, 0xd7, 0x6, 0xfffffff7}, {0x3, 0x6, 0x5d, 0x9}, {0x5, 0x53, 0xe}, {0x2, 0x3, 0x7, 0xf06}]}, 0x10) 1.635424605s ago: executing program 0 (id=1537): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x39, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fsetxattr(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="750000000001"], 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xb07, 0xd, 0x2, 0x18c}, 0x3, 0x1, 0x1, 0x1, 0x8, 0x16, 0x1a, 0x8, 0x8, 0x5, {0x5, 0x4, 0x2, 0x9cac, 0x9, 0xc}}}}]}, 0x78}}, 0x20040084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r8, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.434927145s ago: executing program 4 (id=1538): socket$netlink(0x10, 0x3, 0x0) unshare(0x64000600) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040)) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r5, 0xb) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110037f1ce808000000a3f30a010203010902240001020010110904630702584200080905fe0f1000080009090502"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xa8) fadvise64(r6, 0x2400000, 0x2, 0x500) syz_emit_ethernet(0x76, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x9, 0x6, 'E\\C', 0x8000, 0x0, 0x0, @empty, @private2, [@hopopts={0x89}], "98efd03a7e60b623"}}}}}}}, 0x0) 808.081454ms ago: executing program 2 (id=1539): r0 = socket(0x10, 0x803, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$qrtrtun(r1, &(0x7f0000000240)=""/86, 0x56) iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r2, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r0, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000100)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) dup(r3) 535.487426ms ago: executing program 3 (id=1540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) syz_emit_ethernet(0x4c8, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2f, 0x4ba, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4a6, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x100, @val=0x80}, "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"}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x80000) fcntl$setstatus(r4, 0x4, 0x42c00) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "a81ef5037a313d882834a7e8543a38267bdcc88850c8d70b5b795116fd55e6a21c2eec400941ac9bb951f967a050f260b917f60c9304e1cba8fb5cd69d56a69f", 0x2a}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffd, r6, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000440)={0xfffffffe, 0x2, {0x3, 0x0, 0x401, 0x3, 0xfffffff9}, 0x7}) write$sndseq(r5, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242) r9 = fcntl$dupfd(r8, 0x406, r8) write$tun(r9, &(0x7f0000000400)=ANY=[], 0xa2) ioctl$SG_GET_PACK_ID(r9, 0x227c, &(0x7f0000000100)) 304.457724ms ago: executing program 1 (id=1541): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES64=r1, @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000001ffffffffffff81004400080045"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 278.968819ms ago: executing program 2 (id=1542): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000040)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001a4000/0x3000)=nil, &(0x7f0000678000/0x3000)=nil, 0x3, 0x0, 0x0, 0x403, 0x0, 0x0, 0x8, 0x9a}) syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905"], 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @broadcast}], 0x50) 186.631654ms ago: executing program 0 (id=1543): clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0x100, 0x6, 0xfffffffffffffffe, 0x5, 0x8, 0x4, 0x80000000, 0x80000, 0x2, 0x1, 0x100, 0xfffffffffffffffc, 0x0, 0x2000000000000, 0x8, 0x3, 0x1, 0x6, 0x0, 0x0, 0x816, 0x80000001, 0x37, 0x6}) r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x3, 0x4) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) 0s ago: executing program 1 (id=1544): prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f000001a600)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYBLOB="55a11d4e569fb1990b61d12776cece73ed43edf583dba5cc9f9adf6b77dcfdae5c9987285b9ac3003975d787070cf19c44de1ebcbd10fd8db8ea69b88b95f59023e27d5fee7ac90d6c5f3c0f97939730f4ab304af542109f5e23a7e1ac2c515d2179189a28e41c1751b3292c2be48a100bacfbc5bd772d186cd3173262f25b52695b85c1a591ff7b14eb8e380153533162dd54487134bf18fde51b06b7c344ccf7e71099db2d677b709ed9c3a2db3f7d4bfc5b8deba93d9bb5ec", @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="6971116532b89fef5940b452d2db24e010dc08c57843d6"], 0x7c}}, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000bb00)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040010) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f000001a5c0)=[{&(0x7f0000019400)="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", 0x1000}, {&(0x7f000001a400)="063f1c015aa1a667c9fe7c76dee81ce23568577d9411dfc101c4277b89c123f2f827a1ceb009f7da03c9cda496a8d6e943a33cae3102f49f08f8701a0d1370803e783e66e1891aa36837888f5ee0ed1eae68856151ae5612ddf75495ebb1036ac4d842b363f17f8b9e4accf0670e979ca1961f715977f56c53df600d1a0cb3746334ebcfe063b819bf69482b6b93a7b76352b39443e5445be7f394c4035f6e8ae7649a9768418cd89e49dbcb41c4d3938a404769f7e33ed1b23d4f4447ec7a", 0xbf}, {&(0x7f000001a4c0)="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", 0xfb}], 0x10000000000000c5}, 0x4001) setsockopt$sock_attach_bpf(r1, 0x84, 0x1f, &(0x7f0000000100), 0x120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000400)=""/102400, 0x19000) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x4800) r3 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x34e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7ffffffff000, 0x3, &(0x7f0000fee000/0x2000)=nil) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r5, 0x0, 0x4) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x105, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x80) kernel console output (not intermixed with test programs): 2, SerialNumber=3 [ 159.880941][ T5724] usb 5-1: Product: syz [ 159.887932][ T5724] usb 5-1: Manufacturer: syz [ 159.893937][ T5724] usb 5-1: SerialNumber: syz [ 159.901596][ T24] usb 1-1: USB disconnect, device number 8 [ 159.969906][ T5731] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 160.109871][ T5731] usb 4-1: device descriptor read/64, error -71 [ 160.156607][ T5724] usb 5-1: USB disconnect, device number 14 [ 160.221026][ T5731] usb usb4-port1: attempt power cycle [ 160.569887][ T5731] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 160.621798][ T5731] usb 4-1: device descriptor read/8, error -71 [ 160.648209][ T7192] Bluetooth: MGMT ver 1.23 [ 160.784862][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 160.962033][ T5731] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 161.042285][ T5731] usb 4-1: device descriptor read/8, error -71 [ 161.181627][ T5731] usb usb4-port1: unable to enumerate USB device [ 161.527568][ T30] audit: type=1400 audit(1780639801.655:579): avc: denied { listen } for pid=7194 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.666240][ T7198] binder: Unknown parameter 'sxOtsüåÑÖyêÒÀìrÉ' [ 161.742183][ T30] audit: type=1400 audit(1780639801.655:580): avc: denied { setopt } for pid=7194 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.675914][ T30] audit: type=1400 audit(1780639802.845:581): avc: denied { cmd } for pid=7213 comm="syz.3.323" path="socket:[14383]" dev="sockfs" ino=14383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 162.763510][ T7209] Bluetooth: hci0: unsupported parameter 255 [ 162.781158][ T7209] Bluetooth: hci0: unsupported parameter 128 [ 162.787208][ T7209] Bluetooth: hci0: unsupported parameter 255 [ 162.795344][ T7209] Bluetooth: hci0: unsupported parameter 128 [ 162.930328][ T5731] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 163.655803][ T30] audit: type=1800 audit(1780639803.865:582): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.319" name="/" dev="tmpfs" ino=1090 res=0 errno=0 [ 163.756069][ T5724] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 163.783124][ T5731] usb 4-1: Using ep0 maxpacket: 16 [ 163.795408][ T5731] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.830325][ T5731] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.857341][ T5731] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 163.872775][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.881786][ T5731] usb 4-1: Product: syz [ 163.886003][ T5731] usb 4-1: Manufacturer: syz [ 163.892342][ T5731] usb 4-1: SerialNumber: syz [ 163.905732][ T30] audit: type=1400 audit(1780639804.115:584): avc: denied { setattr } for pid=7235 comm="syz.2.327" path="socket:[14467]" dev="sockfs" ino=14467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.932795][ T5731] usb 4-1: unit 3 not found! [ 163.937406][ T5731] usb 4-1: unit 7 not found! [ 163.944811][ T30] audit: type=1400 audit(1780639804.115:583): avc: denied { setattr } for pid=7235 comm="syz.2.327" path="socket:[14467]" dev="sockfs" ino=14467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.971127][ T5724] usb 2-1: Using ep0 maxpacket: 32 [ 163.982361][ T5724] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.995694][ T5724] usb 2-1: New USB device found, idVendor=0499, idProduct=1040, bcdDevice= 0.40 [ 164.005137][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.014212][ T5724] usb 2-1: Product: Ð [ 164.018358][ T5724] usb 2-1: Manufacturer: é±æ‰æ»¬ë…‹é¶æ©å«£íž”ի鑴ꊇ뢌棉秭ã¾î³¤î“•ï¦šå¨ç¾©âµ®æ˜ì”„â­¾é¤Ôœï žä„€å»³ã²¡á”¹î±’é…∳번æŽâ„­ãŸœâ¢¹í“‹éº¡æº½á„‰è´—௨敂陾ﭲ䖽鹈ຜ髴柠ﯫ驩ḥㆽê®ßëœæ˜ë†®ä‡¼åˆŽë¶…ç´žã•–ëœ¢à³Ÿìˆ [ 164.042166][ T5724] usb 2-1: SerialNumber: syz [ 164.059804][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 164.199304][ T30] audit: type=1400 audit(1780639804.405:585): avc: denied { ioctl } for pid=7213 comm="syz.3.323" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 164.229144][ T5731] usb 4-1: unit 0 not found! [ 164.230344][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 164.246092][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 164.256132][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.268566][ T10] usb 5-1: Product: syz [ 164.273701][ T7243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.329'. [ 164.313029][ T10] usb 5-1: Manufacturer: syz [ 164.318396][ T5731] usb 4-1: USB disconnect, device number 20 [ 164.329171][ T10] usb 5-1: SerialNumber: syz [ 164.344007][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.365951][ T10] usb 5-1: config 0 descriptor?? [ 164.371822][ T5350] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 164.386866][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 164.535415][ T5350] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 164.535974][ T5724] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.546654][ T5350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.562352][ T5350] usb 1-1: config 0 descriptor?? [ 164.572294][ T5350] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 164.590964][ T5724] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 164.605750][ T5724] usb 2-1: USB disconnect, device number 13 [ 164.625217][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.785795][ T7250] netlink: 112 bytes leftover after parsing attributes in process `syz.3.332'. [ 164.796346][ T7250] netlink: 120 bytes leftover after parsing attributes in process `syz.3.332'. [ 164.805597][ T7250] netlink: 128 bytes leftover after parsing attributes in process `syz.3.332'. [ 165.429331][ T7234] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 165.841978][ T5752] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 165.919681][ T7269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.937347][ T7267] ceph: No mds server is up or the cluster is laggy [ 166.011771][ T5752] usb 3-1: config 0 has an invalid interface number: 255 but max is 1 [ 166.020672][ T5752] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.040046][ T5752] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 166.052604][ T5752] usb 3-1: config 0 has no interface number 0 [ 166.059437][ T5752] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 166.071062][ T5752] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 166.084699][ T5752] usb 3-1: config 0 interface 255 has no altsetting 0 [ 166.094927][ T5752] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 166.105429][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.113777][ T5752] usb 3-1: Product: syz [ 166.118596][ T5752] usb 3-1: Manufacturer: syz [ 166.123420][ T5752] usb 3-1: SerialNumber: syz [ 166.139558][ T5752] usb 3-1: config 0 descriptor?? [ 166.170134][ T5724] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 166.330075][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 166.336871][ T5724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.346520][ T5724] usb 2-1: config 2 has an invalid interface number: 99 but max is 0 [ 166.354744][ T5724] usb 2-1: config 2 has no interface number 0 [ 166.356831][ T10] gspca_sonixj: reg_r err -71 [ 166.362483][ T5724] usb 2-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 166.377107][ T5350] gspca_stv06xx: I2C: Read error writing address: -71 [ 166.382682][ T5350] usb 1-1: USB disconnect, device number 9 [ 166.385531][ T5724] usb 2-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 166.413988][ T5724] usb 2-1: config 2 interface 99 has no altsetting 0 [ 166.424082][ T5724] usb 2-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 166.436961][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.445219][ T5724] usb 2-1: Product: syz [ 166.449614][ T5724] usb 2-1: Manufacturer: syz [ 166.454925][ T5724] usb 2-1: SerialNumber: syz [ 166.518998][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 166.534336][ T10] usb 5-1: USB disconnect, device number 15 [ 166.975420][ T7281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.348552][ T5731] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 167.462894][ T7293] FAULT_INJECTION: forcing a failure. [ 167.462894][ T7293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.476120][ T7293] CPU: 1 UID: 0 PID: 7293 Comm: syz.4.343 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.476150][ T7293] Tainted: [L]=SOFTLOCKUP [ 167.476156][ T7293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.476166][ T7293] Call Trace: [ 167.476172][ T7293] [ 167.476184][ T7293] dump_stack_lvl+0x100/0x190 [ 167.476210][ T7293] should_fail_ex.cold+0x5/0xa [ 167.476233][ T7293] _copy_from_user+0x2e/0xd0 [ 167.476256][ T7293] copy_msghdr_from_user+0x9f/0x4f0 [ 167.476279][ T7293] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 167.476311][ T7293] ___sys_sendmsg+0x106/0x1e0 [ 167.476334][ T7293] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.476388][ T7293] __sys_sendmsg+0x170/0x220 [ 167.476415][ T7293] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.476451][ T7293] ? rcu_is_watching+0x12/0xc0 [ 167.476480][ T7293] do_syscall_64+0x115/0x870 [ 167.476502][ T7293] ? clear_bhb_loop+0x40/0x90 [ 167.476524][ T7293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.476541][ T7293] RIP: 0033:0x7f6ae739ce59 [ 167.476556][ T7293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.476572][ T7293] RSP: 002b:00007f6ae8268028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.476589][ T7293] RAX: ffffffffffffffda RBX: 00007f6ae7615fa0 RCX: 00007f6ae739ce59 [ 167.476600][ T7293] RDX: 0000000020000004 RSI: 0000200000000300 RDI: 0000000000000003 [ 167.476611][ T7293] RBP: 00007f6ae8268090 R08: 0000000000000000 R09: 0000000000000000 [ 167.476622][ T7293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.476632][ T7293] R13: 00007f6ae7616038 R14: 00007f6ae7615fa0 R15: 00007ffc1656bda8 [ 167.476655][ T7293] [ 167.682318][ T5731] usb 1-1: Using ep0 maxpacket: 8 [ 167.688991][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.700419][ T5731] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 167.709495][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.721047][ T5731] usb 1-1: config 0 descriptor?? [ 168.004035][ T7305] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 168.044545][ T5731] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 168.265855][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 168.379321][ T5731] usb 1-1: USB disconnect, device number 10 [ 168.385341][ C1] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 168.389798][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 168.551320][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.566247][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 168.575480][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 168.583716][ T10] usb 5-1: Product: syz [ 168.588547][ T10] usb 5-1: Manufacturer: syz [ 168.594267][ T10] usb 5-1: SerialNumber: syz [ 168.655529][ T5731] usb 3-1: USB disconnect, device number 14 [ 168.771744][ T5724] usb 2-1: USB disconnect, device number 14 [ 168.926150][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 169.014399][ T7315] netlink: 'syz.1.352': attribute type 2 has an invalid length. [ 169.117357][ T30] audit: type=1400 audit(1780639809.325:586): avc: denied { read write } for pid=7302 comm="syz.4.348" name="lp0" dev="devtmpfs" ino=2998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 169.183376][ T30] audit: type=1400 audit(1780639809.325:587): avc: denied { open } for pid=7302 comm="syz.4.348" path="/dev/usb/lp0" dev="devtmpfs" ino=2998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 169.341842][ T30] audit: type=1400 audit(1780639809.555:588): avc: denied { create } for pid=7324 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 169.481271][ T7322] veth1_macvtap: left promiscuous mode [ 169.496288][ T7322] macsec0: entered allmulticast mode [ 169.975822][ T7334] veth1_macvtap: entered promiscuous mode [ 169.985855][ T7334] veth1_macvtap: entered allmulticast mode [ 170.007088][ T7334] macsec0: left allmulticast mode [ 170.016438][ T7334] veth1_macvtap: left allmulticast mode [ 170.037082][ T30] audit: type=1400 audit(1780639810.245:589): avc: denied { watch } for pid=7302 comm="syz.4.348" path="/59/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 170.093599][ T5752] usb 5-1: USB disconnect, device number 16 [ 170.123416][ T5752] usblp0: removed [ 170.438023][ T30] audit: type=1400 audit(1780639810.645:590): avc: denied { mount } for pid=7344 comm="syz.1.359" name="/" dev="pstore" ino=3835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 170.469901][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 170.489884][ T5738] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 170.619884][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 170.628636][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.640379][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.659851][ T5738] usb 4-1: Using ep0 maxpacket: 16 [ 170.665741][ T9] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 170.675589][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.685261][ T5738] usb 4-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 170.701151][ T9] usb 3-1: Product: syz [ 170.711017][ T5738] usb 4-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 170.724721][ T9] usb 3-1: Manufacturer: syz [ 170.732633][ T9] usb 3-1: SerialNumber: syz [ 170.750906][ T9] usb 3-1: config 0 descriptor?? [ 170.760654][ T5738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 170.786473][ T9] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 170.799126][ T5738] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 170.811886][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.827175][ T5738] usb 4-1: config 0 descriptor?? [ 171.084688][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.095060][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.337295][ T5724] usb 3-1: USB disconnect, device number 15 [ 171.897068][ T7362] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 172.106315][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.550509][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.138144][ T7359] syzkaller0: entered promiscuous mode [ 173.154686][ T7359] syzkaller0: entered allmulticast mode [ 173.302505][ T30] audit: type=1400 audit(1780639813.515:591): avc: denied { ioctl } for pid=7370 comm="syz.4.366" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 173.464842][ T7374] fuse: Unknown parameter 'þ<â“1Dœÿ7²rÇ}ÊÎëDH ±0)Cøÿ87‡ËHº–+@‰"†Ì Ä] ßPö²_}' [ 173.533184][ T5738] usb 4-1: string descriptor 0 read error: -71 [ 173.545396][ T5738] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 173.554691][ T5738] usb 4-1: USB disconnect, device number 21 [ 173.598120][ T30] audit: type=1400 audit(1780639813.805:592): avc: denied { write } for pid=7380 comm="syz.4.370" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.684103][ T30] audit: type=1400 audit(1780639813.895:593): avc: denied { create } for pid=7380 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 174.560296][ T7390] netlink: 196 bytes leftover after parsing attributes in process `syz.4.373'. [ 174.581266][ T7390] netlink: 196 bytes leftover after parsing attributes in process `syz.4.373'. [ 174.590076][ T5731] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 174.593593][ T7390] netlink: 19 bytes leftover after parsing attributes in process `syz.4.373'. [ 174.608646][ T7392] netlink: 196 bytes leftover after parsing attributes in process `syz.4.373'. [ 174.618883][ T7392] netlink: 196 bytes leftover after parsing attributes in process `syz.4.373'. [ 174.629592][ T7392] netlink: 19 bytes leftover after parsing attributes in process `syz.4.373'. [ 174.761964][ T5731] usb 3-1: config 0 has an invalid interface number: 255 but max is 1 [ 174.770519][ T5731] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.783034][ T5731] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 174.792990][ T5731] usb 3-1: config 0 has no interface number 0 [ 174.843936][ T5731] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 174.877240][ T30] audit: type=1400 audit(1780639815.085:594): avc: denied { read } for pid=7401 comm="syz.3.375" path="socket:[14937]" dev="sockfs" ino=14937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.910242][ T5738] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 175.090073][ T5738] usb 2-1: Using ep0 maxpacket: 32 [ 175.101080][ T5738] usb 2-1: config 0 has no interfaces? [ 175.119873][ T5738] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 175.142538][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.152148][ T5738] usb 2-1: Product: syz [ 175.156421][ T5738] usb 2-1: Manufacturer: syz [ 175.162545][ T5738] usb 2-1: SerialNumber: syz [ 175.180055][ T5752] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 175.181446][ T5731] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 175.198163][ T5738] usb 2-1: config 0 descriptor?? [ 175.205794][ T5731] usb 3-1: config 0 interface 255 has no altsetting 0 [ 175.215918][ T5731] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 175.225656][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.234644][ T5731] usb 3-1: Product: syz [ 175.239323][ T5731] usb 3-1: Manufacturer: syz [ 175.244587][ T5731] usb 3-1: SerialNumber: syz [ 175.254007][ T5731] usb 3-1: config 0 descriptor?? [ 175.330130][ T5752] usb 4-1: device descriptor read/64, error -71 [ 175.613234][ T5738] usb 2-1: USB disconnect, device number 15 [ 175.671399][ T5752] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 175.809833][ T5752] usb 4-1: device descriptor read/64, error -71 [ 175.974361][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.377'. [ 176.050094][ T5752] usb usb4-port1: attempt power cycle [ 176.400002][ T5731] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 176.625834][ T5731] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 176.703276][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.779090][ T5731] usb 5-1: Product: syz [ 176.812670][ T5731] usb 5-1: Manufacturer: syz [ 176.862449][ T5731] usb 5-1: SerialNumber: syz [ 177.131477][ T5731] usb 5-1: config 0 descriptor?? [ 177.224294][ T5731] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 177.331798][ T5752] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 178.199762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 178.549755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 178.569750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 178.669751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 178.740321][ T30] audit: type=1400 audit(1780639817.995:595): avc: denied { mount } for pid=7416 comm="syz.2.379" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 178.764260][ T5731] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 178.776767][ T10] usb 3-1: USB disconnect, device number 16 [ 178.817245][ T5731] sq905c 5-1:0.0: Reading version command failed [ 178.913539][ T5752] usb 4-1: device descriptor read/8, error -71 [ 178.936064][ T30] audit: type=1400 audit(1780639819.135:596): avc: denied { map } for pid=7420 comm="syz.1.380" path="socket:[14961]" dev="sockfs" ino=14961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 179.017389][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.382'. [ 179.089152][ T5731] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 179.180205][ T5731] usb 5-1: USB disconnect, device number 17 [ 179.382556][ T7424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.394418][ T7428] macvlan2: entered promiscuous mode [ 179.400062][ T7428] macvlan2: entered allmulticast mode [ 180.474687][ T7443] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 180.957040][ T7448] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=27077 sclass=netlink_tcpdiag_socket pid=7448 comm=syz.0.388 [ 181.105745][ T7452] kvm: apic: phys broadcast and lowest prio [ 182.067243][ T7462] 9pnet_fd: p9_fd_create_tcp (7462): problem connecting socket to 127.0.0.1 [ 182.119069][ T30] audit: type=1400 audit(1780639822.275:597): avc: denied { mounton } for pid=7461 comm="syz.4.391" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 182.204761][ T30] audit: type=1800 audit(1780639822.305:598): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.390" name="/" dev="tmpfs" ino=47 res=0 errno=0 [ 182.525522][ T7475] netlink: 436 bytes leftover after parsing attributes in process `syz.3.394'. [ 182.541933][ T7475] openvswitch: netlink: Flow key attr not present in new flow. [ 182.601504][ T30] audit: type=1400 audit(1780639822.815:599): avc: denied { setopt } for pid=7476 comm="syz.4.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.649340][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 182.682010][ T7477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7477 comm=syz.4.396 [ 182.720164][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 182.730648][ T30] audit: type=1400 audit(1780639822.945:600): avc: denied { append } for pid=7480 comm="syz.0.397" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.894263][ T7485] netlink: 220 bytes leftover after parsing attributes in process `syz.3.398'. [ 182.903481][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 182.911778][ T24] usb 2-1: config 0 has no interfaces? [ 182.924404][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 182.945415][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.962427][ T24] usb 2-1: Product: syz [ 182.974664][ T24] usb 2-1: Manufacturer: syz [ 182.987752][ T24] usb 2-1: SerialNumber: syz [ 183.002477][ T24] usb 2-1: config 0 descriptor?? [ 183.599427][ T5724] usb 2-1: USB disconnect, device number 16 [ 183.711600][ T7503] binder: 7502:7503 ioctl c0306201 200000000080 returned -14 [ 183.736136][ T7503] binder: 7502:7503 ioctl c0306201 2000000003c0 returned -14 [ 183.760507][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 183.769129][ T804] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 183.912512][ T804] usb 5-1: device descriptor read/64, error -71 [ 183.931065][ T24] usb 4-1: config 36 has an invalid descriptor of length 1, skipping remainder of the config [ 183.951079][ T24] usb 4-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.988954][ T24] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 184.003572][ T24] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 184.034478][ T24] usb 4-1: Manufacturer: syz [ 184.045968][ T24] usb 4-1: SerialNumber: syz [ 184.160125][ T804] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 184.286243][ T24] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 184.310308][ T804] usb 5-1: device descriptor read/64, error -71 [ 184.321027][ T24] usb 4-1: USB disconnect, device number 26 [ 184.441296][ T804] usb usb5-port1: attempt power cycle [ 184.801337][ T804] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 184.840513][ T804] usb 5-1: device descriptor read/8, error -71 [ 184.992091][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 185.043904][ T7522] netlink: 216 bytes leftover after parsing attributes in process `syz.3.408'. [ 185.080073][ T804] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 185.120862][ T804] usb 5-1: device descriptor read/8, error -71 [ 185.160765][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 185.170871][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.182704][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.198803][ T24] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 185.211903][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.231174][ T24] usb 3-1: Product: syz [ 185.242958][ T24] usb 3-1: Manufacturer: syz [ 185.254640][ T804] usb usb5-port1: unable to enumerate USB device [ 185.287877][ T24] usb 3-1: SerialNumber: syz [ 185.381250][ T7528] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 185.420629][ T24] usb 3-1: config 0 descriptor?? [ 185.517993][ T24] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 185.844342][ T7531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.855320][ T7531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.002161][ T5710] usb 3-1: USB disconnect, device number 17 [ 187.274765][ T7543] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 187.349823][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 187.645435][ T29] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 187.722182][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.733789][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 187.771511][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.790380][ T24] usb 5-1: config 0 descriptor?? [ 187.803245][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 187.817122][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 187.826508][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.838544][ T29] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 187.841594][ T7545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.415'. [ 187.848209][ T29] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 187.886872][ T29] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 187.902345][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 187.913882][ T29] usb 4-1: config 1 interface 1 has no altsetting 0 [ 187.925363][ T29] usb 4-1: string descriptor 0 read error: -22 [ 187.932754][ T29] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 187.943814][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 187.973952][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.013633][ T24] pwc: send_video_command error -71 [ 188.026852][ T24] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 188.082341][ T24] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 188.102645][ T24] usb 5-1: USB disconnect, device number 22 [ 188.119627][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 188.572179][ T29] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 188.751584][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.770254][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.247604][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 189.256852][ T7541] xt_socket: unknown flags 0x4 [ 191.219765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 191.237918][ T29] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 191.388624][ T29] usb 4-1: USB disconnect, device number 27 [ 193.152290][ T7572] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 193.551593][ T30] audit: type=1400 audit(1780639833.755:601): avc: denied { ioctl } for pid=7575 comm="syz.4.424" path="socket:[16152]" dev="sockfs" ino=16152 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 193.559922][ T7581] FAULT_INJECTION: forcing a failure. [ 193.559922][ T7581] name failslab, interval 1, probability 0, space 0, times 0 [ 193.595568][ T7581] CPU: 0 UID: 0 PID: 7581 Comm: syz.3.425 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.595596][ T7581] Tainted: [L]=SOFTLOCKUP [ 193.595603][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.595613][ T7581] Call Trace: [ 193.595619][ T7581] [ 193.595626][ T7581] dump_stack_lvl+0x100/0x190 [ 193.595653][ T7581] should_fail_ex.cold+0x5/0xa [ 193.595686][ T7581] should_failslab+0xc2/0x120 [ 193.595707][ T7581] __kmalloc_node_noprof+0xe6/0x850 [ 193.595734][ T7581] ? alloc_slab_obj_exts+0xae/0x270 [ 193.595763][ T7581] alloc_slab_obj_exts+0xae/0x270 [ 193.595790][ T7581] __memcg_slab_post_alloc_hook+0x3c2/0xff0 [ 193.595822][ T7581] ? kasan_save_track+0x14/0x30 [ 193.595841][ T7581] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 193.595868][ T7581] ? alloc_inode+0x183/0x250 [ 193.595890][ T7581] ? __pfx_nfsd_fill_super+0x10/0x10 [ 193.595914][ T7581] alloc_inode+0x183/0x250 [ 193.595932][ T7581] new_inode+0x22/0x1c0 [ 193.595948][ T7581] ? find_held_lock+0x2b/0x80 [ 193.595966][ T7581] ? __pfx_nfsd_fill_super+0x10/0x10 [ 193.595985][ T7581] simple_fill_super+0xff/0x680 [ 193.596012][ T7581] ? __pfx_nfsd_fill_super+0x10/0x10 [ 193.596031][ T7581] ? __pfx_nfsd_fill_super+0x10/0x10 [ 193.596051][ T7581] nfsd_fill_super+0x98/0x560 [ 193.596070][ T7581] ? __pfx_set_anon_super_fc+0x10/0x10 [ 193.596090][ T7581] ? __pfx_nfsd_fill_super+0x10/0x10 [ 193.596107][ T7581] get_tree_keyed+0x10e/0x1d0 [ 193.596128][ T7581] vfs_get_tree+0x92/0x320 [ 193.596146][ T7581] vfs_cmd_create+0xd7/0x2a0 [ 193.596165][ T7581] __do_sys_fsconfig+0x55a/0xcb0 [ 193.596185][ T7581] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 193.596203][ T7581] ? fput+0x79/0x100 [ 193.596229][ T7581] ? trace_irq_enable.constprop.0+0x31/0x160 [ 193.596255][ T7581] ? rcu_is_watching+0x12/0xc0 [ 193.596285][ T7581] do_syscall_64+0x115/0x870 [ 193.596307][ T7581] ? clear_bhb_loop+0x40/0x90 [ 193.596329][ T7581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.596348][ T7581] RIP: 0033:0x7f13c179ce59 [ 193.596363][ T7581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.596379][ T7581] RSP: 002b:00007f13c268f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 193.596397][ T7581] RAX: ffffffffffffffda RBX: 00007f13c1a16090 RCX: 00007f13c179ce59 [ 193.596408][ T7581] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000c [ 193.596418][ T7581] RBP: 00007f13c268f090 R08: 0000000000000000 R09: 0000000000000000 [ 193.596428][ T7581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.596439][ T7581] R13: 00007f13c1a16128 R14: 00007f13c1a16090 R15: 00007ffcab274bd8 [ 193.596464][ T7581] [ 194.588919][ T30] audit: type=1400 audit(1780639834.125:602): avc: denied { mount } for pid=7577 comm="syz.3.425" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 195.215790][ T29] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 195.691607][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.977983][ T29] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 196.009895][ T30] audit: type=1800 audit(1780639836.145:603): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.429" name="/" dev="tmpfs" ino=1105 res=0 errno=0 [ 196.090502][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.153270][ T29] usb 5-1: config 0 descriptor?? [ 196.207414][ T29] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 196.630814][ T30] audit: type=1400 audit(1780639836.745:604): avc: denied { shutdown } for pid=7638 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.853972][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.431'. [ 196.869842][ T30] audit: type=1400 audit(1780639836.745:605): avc: denied { connect } for pid=7638 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.900023][ T7645] netlink: 'syz.2.431': attribute type 12 has an invalid length. [ 196.907758][ T7645] netlink: 'syz.2.431': attribute type 29 has an invalid length. [ 196.915525][ T7645] netlink: 148 bytes leftover after parsing attributes in process `syz.2.431'. [ 196.925094][ T7645] netlink: 'syz.2.431': attribute type 12 has an invalid length. [ 196.932992][ T7645] netlink: 'syz.2.431': attribute type 29 has an invalid length. [ 196.940753][ T7645] netlink: 148 bytes leftover after parsing attributes in process `syz.2.431'. [ 197.093418][ T30] audit: type=1400 audit(1780639837.305:606): avc: denied { nlmsg_write } for pid=7641 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 197.265779][ T7648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.310951][ T7648] netlink: 10 bytes leftover after parsing attributes in process `syz.3.433'. [ 197.574542][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 197.600625][ T7651] netlink: 56 bytes leftover after parsing attributes in process `syz.4.428'. [ 197.637265][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 197.645051][ T7654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.672613][ T7654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.749830][ T5724] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 198.795361][ T29] usb 5-1: USB disconnect, device number 24 [ 198.963783][ T5724] usb 3-1: unable to get BOS descriptor or descriptor too short [ 199.013271][ T5724] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 199.878230][ T5724] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 199.887698][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.897910][ T5724] usb 3-1: Product: syz [ 199.902864][ T5724] usb 3-1: Manufacturer: syz [ 199.907742][ T5724] usb 3-1: SerialNumber: syz [ 199.930211][ T30] audit: type=1800 audit(1780639840.125:607): pid=7674 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.441" name="/" dev="tmpfs" ino=63 res=0 errno=0 [ 200.734113][ T5724] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 201.198098][ T5724] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 201.467945][ T7690] netlink: 'syz.0.444': attribute type 1 has an invalid length. [ 201.584280][ T30] audit: type=1400 audit(1780639841.795:608): avc: denied { cmd } for pid=7692 comm="syz.2.445" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 201.593234][ T5724] usb 3-1: USB disconnect, device number 18 [ 201.737583][ T7690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.753299][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 201.768075][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.791778][ T7700] block nbd0: not configured, cannot reconfigure [ 201.861853][ T30] audit: type=1400 audit(1780639842.075:609): avc: denied { map } for pid=7692 comm="syz.2.445" path="/dev/ublkc0" dev="devtmpfs" ino=3040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.978510][ T30] audit: type=1400 audit(1780639842.185:610): avc: denied { ioctl } for pid=7692 comm="syz.2.445" path="socket:[16414]" dev="sockfs" ino=16414 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 201.994178][ T7706] FAULT_INJECTION: forcing a failure. [ 201.994178][ T7706] name failslab, interval 1, probability 0, space 0, times 0 [ 202.090100][ T29] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 202.101391][ T7706] CPU: 1 UID: 0 PID: 7706 Comm: syz.4.449 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.101411][ T7706] Tainted: [L]=SOFTLOCKUP [ 202.101415][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.101421][ T7706] Call Trace: [ 202.101425][ T7706] [ 202.101430][ T7706] dump_stack_lvl+0x100/0x190 [ 202.101447][ T7706] should_fail_ex.cold+0x5/0xa [ 202.101462][ T7706] ? tomoyo_encode2+0xfb/0x3c0 [ 202.101480][ T7706] should_failslab+0xc2/0x120 [ 202.101492][ T7706] __kmalloc_noprof+0xe0/0x850 [ 202.101509][ T7706] ? d_absolute_path+0x136/0x1b0 [ 202.101523][ T7706] tomoyo_encode2+0xfb/0x3c0 [ 202.101542][ T7706] tomoyo_encode+0x29/0x50 [ 202.101559][ T7706] tomoyo_realpath_from_path+0x18c/0x690 [ 202.101580][ T7706] tomoyo_path_number_perm+0x23c/0x580 [ 202.101594][ T7706] ? tomoyo_path_number_perm+0x22e/0x580 [ 202.101610][ T7706] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 202.101639][ T7706] ? find_held_lock+0x2b/0x80 [ 202.101648][ T7706] ? __fget_files+0x215/0x3d0 [ 202.101662][ T7706] ? hook_file_ioctl_common+0x149/0x410 [ 202.101673][ T7706] ? __fget_files+0x215/0x3d0 [ 202.101689][ T7706] ? __fget_files+0x21f/0x3d0 [ 202.101705][ T7706] security_file_ioctl+0xd3/0x230 [ 202.101723][ T7706] __x64_sys_ioctl+0xb7/0x210 [ 202.101736][ T7706] do_syscall_64+0x115/0x870 [ 202.101750][ T7706] ? clear_bhb_loop+0x40/0x90 [ 202.101763][ T7706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.101775][ T7706] RIP: 0033:0x7f6ae739ce59 [ 202.101784][ T7706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.101795][ T7706] RSP: 002b:00007f6ae8268028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.101807][ T7706] RAX: ffffffffffffffda RBX: 00007f6ae7615fa0 RCX: 00007f6ae739ce59 [ 202.101814][ T7706] RDX: 0000200000000180 RSI: 0000000080047441 RDI: 0000000000000003 [ 202.101820][ T7706] RBP: 00007f6ae8268090 R08: 0000000000000000 R09: 0000000000000000 [ 202.101827][ T7706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.101833][ T7706] R13: 00007f6ae7616038 R14: 00007f6ae7615fa0 R15: 00007ffc1656bda8 [ 202.101847][ T7706] [ 202.101857][ T7706] ERROR: Out of memory at tomoyo_realpath_from_path. [ 202.346279][ T7710] netlink: 'syz.0.450': attribute type 1 has an invalid length. [ 202.459862][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 202.466498][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.487226][ T29] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 202.502198][ T7710] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.509219][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.613493][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 202.682244][ T29] usb 2-1: config 0 descriptor?? [ 203.016827][ T29] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 203.782993][ T30] audit: type=1400 audit(1780639843.995:611): avc: denied { create } for pid=7724 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 203.842738][ T30] audit: type=1400 audit(1780639844.015:612): avc: denied { append } for pid=7724 comm="syz.2.454" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 204.064377][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 204.172787][ T1111] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.182330][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 204.225394][ T5724] usb 2-1: USB disconnect, device number 17 [ 204.235705][ T1111] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.293209][ T1111] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.336785][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 204.362178][ T1111] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.413380][ T30] audit: type=1400 audit(1780639844.625:613): avc: denied { ioctl } for pid=7739 comm="syz.3.458" path="socket:[16450]" dev="sockfs" ino=16450 ioctlcmd=0x6619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.960363][ T30] audit: type=1404 audit(1780639845.155:614): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 205.152291][ T30] audit: type=1400 audit(1780639845.355:615): avc: denied { search } for pid=7750 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 205.257591][ T30] audit: type=1400 audit(1780639845.465:616): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.383732][ T30] audit: type=1400 audit(1780639845.585:617): avc: denied { read write } for pid=5626 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.469412][ T30] audit: type=1400 audit(1780639845.675:618): avc: denied { search } for pid=7756 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 206.019012][ T30] audit: type=1400 audit(1780639846.215:619): avc: denied { create } for pid=7754 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 206.019301][ T7758] bond1: option lp_interval: invalid value (0) [ 206.044891][ T7758] bond1: option lp_interval: allowed values 1 - 2147483647 [ 206.062506][ T7758] bond1 (unregistering): Released all slaves [ 206.099842][ T30] audit: type=1400 audit(1780639846.225:620): avc: denied { allowed } for pid=7754 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 206.202416][ T30] audit: type=1400 audit(1780639846.225:621): avc: denied { create } for pid=7754 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 206.294815][ T30] audit: type=1400 audit(1780639846.255:622): avc: denied { create } for pid=7754 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 206.386154][ T30] audit: type=1400 audit(1780639846.255:623): avc: denied { read } for pid=7754 comm="syz.2.462" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 206.536353][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'. [ 206.749700][ T29] libceph: connect (1)[c::]:6789 error -101 [ 206.761990][ T7785] ceph: No mds server is up or the cluster is laggy [ 206.771581][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 206.782184][ T7786] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 207.051564][ T29] libceph: connect (1)[c::]:6789 error -101 [ 207.064623][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 208.769922][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 208.779178][ T5627] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 209.970012][ T30] kauditd_printk_skb: 7113 callbacks suppressed [ 209.970029][ T30] audit: type=1800 audit(1780639850.175:7692): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.485" name="/" dev="tmpfs" ino=1113 res=0 errno=0 [ 210.035210][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 210.065314][ T5279] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64 [ 210.097747][ T5279] audit: backlog limit exceeded [ 210.114139][ T30] audit: type=1400 audit(1780639850.195:7693): avc: denied { read write } for pid=5616 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.145617][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 210.160908][ T5279] audit: audit_lost=17 audit_rate_limit=0 audit_backlog_limit=64 [ 210.181053][ T5279] audit: backlog limit exceeded [ 210.192980][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 210.196731][ T5614] audit: audit_backlog=65 > audit_backlog_limit=64 [ 210.277894][ T7843] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 210.490685][ T7849] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 210.615334][ T7854] bond0: entered promiscuous mode [ 210.626427][ T7854] bond_slave_0: entered promiscuous mode [ 210.642087][ T7854] bond_slave_1: entered promiscuous mode [ 210.704246][ T7854] bond0: left promiscuous mode [ 210.726355][ T7854] bond_slave_0: left promiscuous mode [ 210.746313][ T7854] bond_slave_1: left promiscuous mode [ 211.273370][ T7865] netlink: 132 bytes leftover after parsing attributes in process `syz.4.494'. [ 212.120127][ T7876] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 213.364639][ T7907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7907 comm=syz.4.510 [ 213.918339][ T7923] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7923 comm=syz.0.515 [ 213.971313][ T7923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=7923 comm=syz.0.515 [ 214.186317][ T7932] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.219572][ T7934] netlink: 56 bytes leftover after parsing attributes in process `syz.0.518'. [ 214.240719][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'. [ 214.439151][ T7938] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 214.984624][ T30] kauditd_printk_skb: 9405 callbacks suppressed [ 214.984636][ T30] audit: type=1400 audit(1780639855.195:17095): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.035185][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 215.042968][ T5279] audit: audit_lost=20 audit_rate_limit=0 audit_backlog_limit=64 [ 215.043333][ T7949] audit: audit_backlog=65 > audit_backlog_limit=64 [ 215.064312][ T5279] audit: backlog limit exceeded [ 215.076312][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 215.083148][ T30] audit: type=1400 audit(1780639855.195:17096): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.114146][ T5279] audit: audit_lost=21 audit_rate_limit=0 audit_backlog_limit=64 [ 215.132813][ T30] audit: type=1400 audit(1780639855.195:17097): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.158074][ T5279] audit: backlog limit exceeded [ 216.131286][ T7958] netlink: 14 bytes leftover after parsing attributes in process `syz.4.528'. [ 217.430215][ T8003] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 218.828761][ T8032] syzkaller0: entered promiscuous mode [ 218.840197][ T8032] syzkaller0: entered allmulticast mode [ 219.208363][ T8045] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 219.734707][ T8059] can0: slcan on ttyS3. [ 219.860045][ T8058] can0 (unregistered): slcan off ttyS3. [ 219.990499][ T30] kauditd_printk_skb: 10655 callbacks suppressed [ 219.990515][ T30] audit: type=1400 audit(1780639860.195:26305): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.084890][ T30] audit: type=1400 audit(1780639860.205:26306): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.157386][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 220.164480][ T8067] audit: audit_backlog=65 > audit_backlog_limit=64 [ 220.165537][ T30] audit: type=1400 audit(1780639860.205:26307): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.219402][ T5279] audit: audit_lost=505 audit_rate_limit=0 audit_backlog_limit=64 [ 220.242658][ T8067] audit: audit_lost=506 audit_rate_limit=0 audit_backlog_limit=64 [ 220.255800][ T5279] audit: backlog limit exceeded [ 220.262246][ T8067] audit: backlog limit exceeded [ 220.266532][ T5615] audit: audit_backlog=65 > audit_backlog_limit=64 [ 220.582784][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.573'. [ 220.974044][ T8104] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 221.268209][ T8114] FAULT_INJECTION: forcing a failure. [ 221.268209][ T8114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.283072][ T8114] CPU: 1 UID: 0 PID: 8114 Comm: syz.1.585 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.283100][ T8114] Tainted: [L]=SOFTLOCKUP [ 221.283106][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.283117][ T8114] Call Trace: [ 221.283123][ T8114] [ 221.283129][ T8114] dump_stack_lvl+0x100/0x190 [ 221.283155][ T8114] should_fail_ex.cold+0x5/0xa [ 221.283180][ T8114] _copy_from_user+0x2e/0xd0 [ 221.283203][ T8114] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 221.283237][ T8114] snd_rawmidi_write+0x2dc/0xc60 [ 221.283269][ T8114] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 221.283291][ T8114] ? avc_policy_seqno+0x9/0x20 [ 221.283309][ T8114] ? selinux_file_permission+0x8f/0x6d0 [ 221.283335][ T8114] ? __pfx_default_wake_function+0x10/0x10 [ 221.283354][ T8114] ? bpf_lsm_file_permission+0x9/0x10 [ 221.283380][ T8114] ? security_file_permission+0x76/0x210 [ 221.283408][ T8114] ? rw_verify_area+0xce/0x6d0 [ 221.283427][ T8114] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 221.283449][ T8114] vfs_writev+0x5ea/0xe10 [ 221.283473][ T8114] ? __pfx_vfs_writev+0x10/0x10 [ 221.283492][ T8114] ? find_held_lock+0x2b/0x80 [ 221.283508][ T8114] ? ksys_write+0x190/0x250 [ 221.283541][ T8114] ? __fget_files+0x21f/0x3d0 [ 221.283569][ T8114] ? do_writev+0x28a/0x340 [ 221.283585][ T8114] do_writev+0x28a/0x340 [ 221.283603][ T8114] ? __pfx_do_writev+0x10/0x10 [ 221.283622][ T8114] ? rcu_is_watching+0x12/0xc0 [ 221.283649][ T8114] do_syscall_64+0x115/0x870 [ 221.283671][ T8114] ? clear_bhb_loop+0x40/0x90 [ 221.283693][ T8114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.283711][ T8114] RIP: 0033:0x7f7f62d9ce59 [ 221.283727][ T8114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.283748][ T8114] RSP: 002b:00007f7f63cbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 221.283766][ T8114] RAX: ffffffffffffffda RBX: 00007f7f63015fa0 RCX: 00007f7f62d9ce59 [ 221.283777][ T8114] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005 [ 221.283787][ T8114] RBP: 00007f7f63cbb090 R08: 0000000000000000 R09: 0000000000000000 [ 221.283797][ T8114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.283807][ T8114] R13: 00007f7f63016038 R14: 00007f7f63015fa0 R15: 00007ffff868b5f8 [ 221.283830][ T8114] [ 222.829202][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 222.925730][ T8144] syzkaller0: entered promiscuous mode [ 222.974611][ T8144] syzkaller0: entered allmulticast mode [ 225.007825][ T30] kauditd_printk_skb: 11763 callbacks suppressed [ 225.007839][ T30] audit: type=1400 audit(1780639865.205:37946): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.063786][ T30] audit: type=1400 audit(1780639865.215:37947): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.067155][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 225.086168][ T30] audit: type=1400 audit(1780639865.215:37948): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.116347][ T8171] audit: audit_backlog=65 > audit_backlog_limit=64 [ 225.123546][ T8171] audit: audit_lost=549 audit_rate_limit=0 audit_backlog_limit=64 [ 225.135432][ T5279] audit: audit_lost=550 audit_rate_limit=0 audit_backlog_limit=64 [ 225.137083][ T8176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 225.143478][ T5279] audit: backlog limit exceeded [ 225.159428][ T8171] audit: backlog limit exceeded [ 225.223444][ T8180] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 225.756188][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.612'. [ 225.877126][ T8199] netlink: 32 bytes leftover after parsing attributes in process `syz.4.612'. [ 225.886321][ T8194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.665765][ T24] libceph: connect (1)[c::]:6789 error -101 [ 227.699275][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 227.747528][ T8241] ceph: No mds server is up or the cluster is laggy [ 230.011680][ T30] kauditd_printk_skb: 11938 callbacks suppressed [ 230.011696][ T30] audit: type=1400 audit(1780639870.225:49717): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.079230][ T30] audit: type=1400 audit(1780639870.225:49718): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.172547][ T8315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 230.181830][ T8313] audit: audit_backlog=65 > audit_backlog_limit=64 [ 230.192263][ T30] audit: type=1400 audit(1780639870.225:49719): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.215289][ T8315] audit: audit_lost=608 audit_rate_limit=0 audit_backlog_limit=64 [ 230.221599][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 230.223258][ T8313] audit: audit_lost=609 audit_rate_limit=0 audit_backlog_limit=64 [ 230.247918][ T8316] audit: audit_backlog=65 > audit_backlog_limit=64 [ 230.266688][ T8313] audit: backlog limit exceeded [ 230.962494][ T8346] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 230.969050][ T8346] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 230.992092][ T8346] vhci_hcd vhci_hcd.0: Device attached [ 231.138407][ T8349] vhci_hcd: connection closed [ 231.138625][ T7627] vhci_hcd vhci_hcd.4: stop threads [ 231.162683][ T7627] vhci_hcd vhci_hcd.4: release socket [ 231.174758][ T7627] vhci_hcd vhci_hcd.4: disconnect device [ 231.229859][ T10] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 231.249670][ T10] usb 41-1: enqueue for inactive port 0 [ 231.329925][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 233.918203][ T8429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.702'. [ 233.994609][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.702'. [ 234.914312][ T8466] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 235.021725][ T30] kauditd_printk_skb: 9491 callbacks suppressed [ 235.021740][ T30] audit: type=1400 audit(1780639875.225:59200): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.119151][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 235.119536][ T30] audit: type=1400 audit(1780639875.225:59201): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.194295][ T5279] audit: audit_lost=614 audit_rate_limit=0 audit_backlog_limit=64 [ 235.216143][ T5279] audit: backlog limit exceeded [ 235.232452][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 235.253556][ T5279] audit: audit_lost=615 audit_rate_limit=0 audit_backlog_limit=64 [ 235.291735][ T5279] audit: backlog limit exceeded [ 235.313206][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 235.333587][ T30] audit: type=1400 audit(1780639875.225:59202): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 236.757245][ T8504] netlink: 'syz.4.731': attribute type 4 has an invalid length. [ 236.994540][ T29] libceph: connect (1)[c::]:6789 error -101 [ 237.017346][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 237.055345][ T8505] ceph: No mds server is up or the cluster is laggy [ 238.059363][ T8519] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 240.030289][ T30] kauditd_printk_skb: 9963 callbacks suppressed [ 240.030305][ T30] audit: type=1400 audit(1780639880.245:65675): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 240.050319][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.103176][ T5279] audit: audit_lost=1780 audit_rate_limit=0 audit_backlog_limit=64 [ 240.118727][ T5279] audit: backlog limit exceeded [ 240.129978][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.141823][ T5617] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.148397][ T5279] audit: audit_lost=1781 audit_rate_limit=0 audit_backlog_limit=64 [ 240.160052][ T5617] audit: audit_lost=1782 audit_rate_limit=0 audit_backlog_limit=64 [ 240.171178][ T5615] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.177708][ T5279] audit: backlog limit exceeded [ 240.787150][ T8558] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 243.532269][ T8609] FAULT_INJECTION: forcing a failure. [ 243.532269][ T8609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.616557][ T8609] CPU: 0 UID: 0 PID: 8609 Comm: syz.0.766 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.616584][ T8609] Tainted: [L]=SOFTLOCKUP [ 243.616590][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.616600][ T8609] Call Trace: [ 243.616606][ T8609] [ 243.616613][ T8609] dump_stack_lvl+0x100/0x190 [ 243.616637][ T8609] should_fail_ex.cold+0x5/0xa [ 243.616667][ T8609] _copy_from_user+0x2e/0xd0 [ 243.616691][ T8609] memdup_user+0x6b/0xe0 [ 243.616709][ T8609] strndup_user+0x78/0xe0 [ 243.616727][ T8609] __x64_sys_mount+0x17f/0x310 [ 243.616753][ T8609] ? __pfx___x64_sys_mount+0x10/0x10 [ 243.616785][ T8609] do_syscall_64+0x115/0x870 [ 243.616806][ T8609] ? clear_bhb_loop+0x40/0x90 [ 243.616826][ T8609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.616843][ T8609] RIP: 0033:0x7f4f6539ce59 [ 243.616857][ T8609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.616872][ T8609] RSP: 002b:00007f4f661fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 243.616885][ T8609] RAX: ffffffffffffffda RBX: 00007f4f65615fa0 RCX: 00007f4f6539ce59 [ 243.616892][ T8609] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000100 [ 243.616899][ T8609] RBP: 00007f4f661fe090 R08: 0000000000000000 R09: 0000000000000000 [ 243.616905][ T8609] R10: 0000000001085408 R11: 0000000000000246 R12: 0000000000000001 [ 243.616912][ T8609] R13: 00007f4f65616038 R14: 00007f4f65615fa0 R15: 00007ffed6ab3508 [ 243.616926][ T8609] [ 244.241516][ T8620] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 244.289140][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 244.302348][ T8621] ceph: No mds server is up or the cluster is laggy [ 244.312011][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 245.040716][ T30] kauditd_printk_skb: 9282 callbacks suppressed [ 245.040732][ T30] audit: type=1400 audit(1780639885.255:74694): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 245.102131][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 245.103656][ T8641] audit: audit_backlog=65 > audit_backlog_limit=64 [ 245.127275][ T5279] audit: audit_lost=1871 audit_rate_limit=0 audit_backlog_limit=64 [ 245.137844][ T8641] audit: audit_lost=1872 audit_rate_limit=0 audit_backlog_limit=64 [ 245.148916][ T30] audit: type=1400 audit(1780639885.255:74695): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 245.168562][ T5279] audit: backlog limit exceeded [ 245.183340][ T8641] audit: backlog limit exceeded [ 245.220067][ T30] audit: type=1400 audit(1780639885.255:74696): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 245.221979][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 245.607549][ T8648] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 247.891248][ T8683] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 249.519813][ T8707] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 249.526358][ T8707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 249.570883][ T8707] vhci_hcd vhci_hcd.0: Device attached [ 249.617042][ T8710] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(8) [ 249.623577][ T8710] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 249.649871][ T8710] vhci_hcd vhci_hcd.0: Device attached [ 249.741748][ T8707] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 249.748299][ T8707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 249.809943][ T5949] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 249.827309][ T8711] vhci_hcd: connection closed [ 249.827513][ T8708] vhci_hcd: connection closed [ 249.828665][ T13] vhci_hcd vhci_hcd.4: stop threads [ 249.867687][ T8709] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 249.879759][ T8715] vhci_hcd: connection closed [ 249.888618][ T13] vhci_hcd vhci_hcd.4: release socket [ 249.888831][ T8707] vhci_hcd vhci_hcd.0: Device attached [ 249.927894][ T8714] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 249.943680][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 250.019474][ T8714] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 250.028284][ T13] vhci_hcd vhci_hcd.4: stop threads [ 250.061070][ T30] kauditd_printk_skb: 8232 callbacks suppressed [ 250.061086][ T30] audit: type=1400 audit(1780639890.265:81739): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 250.097408][ T13] vhci_hcd vhci_hcd.4: release socket [ 250.114321][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 250.116488][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 250.132450][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.139677][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.153496][ T13] vhci_hcd vhci_hcd.4: stop threads [ 250.160215][ T13] vhci_hcd vhci_hcd.4: release socket [ 250.165718][ T30] audit: type=1400 audit(1780639890.265:81740): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 250.167143][ T5279] audit: audit_lost=2270 audit_rate_limit=0 audit_backlog_limit=64 [ 250.187006][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 250.217569][ T30] audit: type=1400 audit(1780639890.265:81741): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 250.259087][ T8726] audit: audit_backlog=65 > audit_backlog_limit=64 [ 250.269563][ T8726] audit: audit_lost=2271 audit_rate_limit=0 audit_backlog_limit=64 [ 250.278975][ T8724] audit: audit_backlog=65 > audit_backlog_limit=64 [ 250.285577][ T30] audit: type=1400 audit(1780639890.265:81742): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 250.309108][ T8724] audit: audit_lost=2272 audit_rate_limit=0 audit_backlog_limit=64 [ 250.630733][ T8734] syzkaller0: entered promiscuous mode [ 250.653629][ T8734] syzkaller0: entered allmulticast mode [ 251.195616][ T8749] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 251.917724][ T8753] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 251.942966][ T8753] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 251.998425][ T8753] netlink: 'syz.4.810': attribute type 7 has an invalid length. [ 252.026734][ T8753] netlink: 'syz.4.810': attribute type 8 has an invalid length. [ 253.858903][ T8799] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 254.999833][ T5949] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 255.069894][ T30] kauditd_printk_skb: 11188 callbacks suppressed [ 255.069910][ T30] audit: type=1400 audit(1780639895.275:92664): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 255.130362][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 255.134601][ T5617] audit: audit_backlog=65 > audit_backlog_limit=64 [ 255.139537][ T5614] audit: audit_backlog=65 > audit_backlog_limit=64 [ 255.149076][ T5616] audit: audit_backlog=65 > audit_backlog_limit=64 [ 255.150165][ T5279] audit: audit_lost=2361 audit_rate_limit=0 audit_backlog_limit=64 [ 255.164603][ T5614] audit: audit_lost=2362 audit_rate_limit=0 audit_backlog_limit=64 [ 255.172192][ T5616] audit: audit_lost=2363 audit_rate_limit=0 audit_backlog_limit=64 [ 255.173147][ T30] audit: type=1400 audit(1780639895.275:92665): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 255.186043][ T5617] audit: audit_lost=2364 audit_rate_limit=0 audit_backlog_limit=64 [ 256.214722][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.840'. [ 256.335126][ T8840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.368042][ T8848] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 256.523642][ T8845] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.562950][ T8845] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 256.626231][ T8845] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 258.162533][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'. [ 258.211668][ T8894] vlan3: entered promiscuous mode [ 258.221328][ T8894] gretap0: entered promiscuous mode [ 258.437470][ T8904] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 259.772523][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.874'. [ 259.794197][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.874'. [ 259.841529][ T8940] netlink: 14 bytes leftover after parsing attributes in process `syz.0.875'. [ 260.080690][ T30] kauditd_printk_skb: 10862 callbacks suppressed [ 260.080706][ T30] audit: type=1400 audit(1780639900.285:102000): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 260.135181][ T30] audit: type=1400 audit(1780639900.295:102001): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 260.175340][ T30] audit: type=1400 audit(1780639900.295:102002): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 260.218057][ T30] audit: type=1400 audit(1780639900.295:102003): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 260.265558][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 260.286250][ T5279] audit: audit_lost=2873 audit_rate_limit=0 audit_backlog_limit=64 [ 260.305329][ T5279] audit: backlog limit exceeded [ 260.315733][ T8945] audit: audit_backlog=65 > audit_backlog_limit=64 [ 260.327506][ T30] audit: type=1400 audit(1780639900.295:102004): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 260.351685][ T8945] audit: audit_lost=2874 audit_rate_limit=0 audit_backlog_limit=64 [ 261.357817][ T8965] netlink: 'syz.1.884': attribute type 1 has an invalid length. [ 261.519679][ T8965] bond1: entered promiscuous mode [ 261.577933][ T8965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.862369][ T8977] netlink: 52 bytes leftover after parsing attributes in process `syz.0.888'. [ 261.910614][ T8977] netlink: 76 bytes leftover after parsing attributes in process `syz.0.888'. [ 261.963514][ T8977] netlink: 52 bytes leftover after parsing attributes in process `syz.0.888'. [ 262.358019][ T8987] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 264.211909][ T9018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9018 comm=syz.4.903 [ 264.404928][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.412278][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.481018][ T9022] bridge0: entered allmulticast mode [ 264.560660][ T9025] bridge_slave_1: left allmulticast mode [ 264.569971][ T9025] bridge_slave_1: left promiscuous mode [ 264.616828][ T9027] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=9027 comm=syz.2.904 [ 264.631174][ T9025] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.787753][ T9025] bridge_slave_0: left allmulticast mode [ 264.811873][ T9025] bridge_slave_0: left promiscuous mode [ 264.858242][ T9025] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.093118][ T30] kauditd_printk_skb: 7780 callbacks suppressed [ 265.093130][ T30] audit: type=1400 audit(1780639905.305:108488): avc: denied { create } for pid=9031 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 265.154521][ T30] audit: type=1400 audit(1780639905.335:108489): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 265.221591][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 265.237188][ T9036] audit: audit_backlog=65 > audit_backlog_limit=64 [ 265.237227][ T5617] audit: audit_backlog=65 > audit_backlog_limit=64 [ 265.254371][ T9030] audit: audit_backlog=65 > audit_backlog_limit=64 [ 265.263105][ T5279] audit: audit_lost=3307 audit_rate_limit=0 audit_backlog_limit=64 [ 265.284544][ T9036] audit: audit_lost=3308 audit_rate_limit=0 audit_backlog_limit=64 [ 265.285761][ T30] audit: type=1400 audit(1780639905.335:108490): avc: denied { read } for pid=9031 comm="syz.3.907" dev="nsfs" ino=4026532857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 265.316174][ T9030] audit: audit_lost=3309 audit_rate_limit=0 audit_backlog_limit=64 [ 269.693491][ T9127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.941'. [ 270.100886][ T30] kauditd_printk_skb: 10727 callbacks suppressed [ 270.100903][ T30] audit: type=1400 audit(1780639910.315:117965): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.162748][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 270.181675][ T30] audit: type=1400 audit(1780639910.315:117966): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.186193][ T5279] audit: audit_lost=3727 audit_rate_limit=0 audit_backlog_limit=64 [ 270.208190][ T9137] audit: audit_backlog=65 > audit_backlog_limit=64 [ 270.218430][ T9137] audit: audit_lost=3728 audit_rate_limit=0 audit_backlog_limit=64 [ 270.239525][ T9137] audit: backlog limit exceeded [ 270.247353][ T30] audit: type=1400 audit(1780639910.315:117967): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.266140][ T5279] audit: backlog limit exceeded [ 270.288162][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 271.183089][ T9160] netlink: 'syz.1.953': attribute type 1 has an invalid length. [ 271.232581][ T9160] bond2: entered promiscuous mode [ 271.239074][ T9160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.264524][ T9160] netlink: 56 bytes leftover after parsing attributes in process `syz.1.953'. [ 274.920462][ T9217] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 275.112284][ T30] kauditd_printk_skb: 11724 callbacks suppressed [ 275.112300][ T30] audit: type=1400 audit(1780639915.315:129690): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.158484][ T9228] netlink: 14 bytes leftover after parsing attributes in process `syz.0.973'. [ 275.172711][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 275.188229][ T5279] audit: audit_lost=3730 audit_rate_limit=0 audit_backlog_limit=64 [ 275.201797][ T30] audit: type=1400 audit(1780639915.325:129691): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.208660][ T9228] audit: audit_backlog=65 > audit_backlog_limit=64 [ 275.226347][ T5279] audit: backlog limit exceeded [ 275.241471][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 275.250654][ T5615] audit: audit_backlog=65 > audit_backlog_limit=64 [ 275.259387][ T9232] audit: audit_backlog=65 > audit_backlog_limit=64 [ 275.271445][ T5279] audit: audit_lost=3731 audit_rate_limit=0 audit_backlog_limit=64 [ 278.097238][ T9286] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 278.922293][ T9309] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1001'. [ 279.458159][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 279.470174][ T9318] ceph: No mds server is up or the cluster is laggy [ 279.492453][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 279.963756][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.971082][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.120890][ T30] kauditd_printk_skb: 11088 callbacks suppressed [ 280.120906][ T30] audit: type=1400 audit(1780639920.335:140773): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 280.166592][ T30] audit: type=1400 audit(1780639920.335:140774): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 280.189495][ T30] audit: type=1400 audit(1780639920.335:140775): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 280.215168][ T30] audit: type=1400 audit(1780639920.335:140776): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 280.237582][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 280.244611][ T5279] audit: audit_lost=3735 audit_rate_limit=0 audit_backlog_limit=64 [ 280.253267][ T5279] audit: backlog limit exceeded [ 280.258544][ T30] audit: type=1400 audit(1780639920.355:140777): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 280.281412][ T9331] audit: audit_backlog=65 > audit_backlog_limit=64 [ 280.293180][ T9331] audit: audit_lost=3736 audit_rate_limit=0 audit_backlog_limit=64 [ 280.419501][ T9324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.471493][ T9324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.817186][ T1111] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.826259][ T1111] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.865005][ T1111] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.924413][ T1111] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.148675][ T9350] bond0: (slave bond_slave_0): Releasing backup interface [ 281.211276][ T9350] bond0: (slave bond_slave_1): Releasing backup interface [ 281.330516][ T9350] team0: Port device team_slave_0 removed [ 281.370647][ T9350] team0: Port device team_slave_1 removed [ 281.384605][ T9350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.394674][ T9350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.427883][ T9350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.450459][ T9350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.485826][ T9350] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.117263][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 285.131416][ T30] kauditd_printk_skb: 12022 callbacks suppressed [ 285.131431][ T30] audit: type=1400 audit(1780639925.345:151932): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 285.152963][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 285.168662][ T9427] audit: audit_backlog=65 > audit_backlog_limit=64 [ 285.180372][ T9426] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1041'. [ 285.203087][ T5279] audit: audit_lost=4026 audit_rate_limit=0 audit_backlog_limit=64 [ 285.213055][ T9427] audit: audit_lost=4027 audit_rate_limit=0 audit_backlog_limit=64 [ 285.217205][ T9430] audit: audit_backlog=65 > audit_backlog_limit=64 [ 285.231290][ T5279] audit: backlog limit exceeded [ 285.241824][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 285.245830][ T30] audit: type=1400 audit(1780639925.345:151933): avc: denied { read write } for pid=5617 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.272976][ T9430] audit: audit_lost=4028 audit_rate_limit=0 audit_backlog_limit=64 [ 285.947817][ T9455] syzkaller0: entered promiscuous mode [ 285.961185][ T9455] syzkaller0: entered allmulticast mode [ 286.652838][ T9469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1056'. [ 287.123924][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1064'. [ 287.407277][ T5724] IPVS: starting estimator thread 0... [ 287.519950][ T9500] IPVS: using max 41 ests per chain, 98400 per kthread [ 290.145664][ T30] kauditd_printk_skb: 10288 callbacks suppressed [ 290.145680][ T30] audit: type=1400 audit(1780639930.345:162218): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 290.196729][ T30] audit: type=1400 audit(1780639930.355:162219): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 290.218375][ T30] audit: type=1400 audit(1780639930.355:162220): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 290.265901][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.275917][ T5616] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.291494][ T30] audit: type=1400 audit(1780639930.355:162221): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 290.299807][ T5616] audit: audit_lost=4030 audit_rate_limit=0 audit_backlog_limit=64 [ 290.324940][ T5279] audit: audit_lost=4031 audit_rate_limit=0 audit_backlog_limit=64 [ 290.347351][ T5279] audit: backlog limit exceeded [ 290.358784][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 291.958339][ T9591] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 294.687441][ T9667] libceph: resolve '400' (ret=-3): failed [ 295.131253][ T9681] FAULT_INJECTION: forcing a failure. [ 295.131253][ T9681] name failslab, interval 1, probability 0, space 0, times 0 [ 295.155438][ T30] kauditd_printk_skb: 9952 callbacks suppressed [ 295.155453][ T30] audit: type=1400 audit(1780639935.365:172173): avc: denied { prog_load } for pid=9678 comm="syz.4.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 295.159912][ T9681] CPU: 1 UID: 0 PID: 9681 Comm: syz.1.1130 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.159935][ T9681] Tainted: [L]=SOFTLOCKUP [ 295.159940][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 295.159949][ T9681] Call Trace: [ 295.159954][ T9681] [ 295.159960][ T9681] dump_stack_lvl+0x100/0x190 [ 295.159983][ T9681] should_fail_ex.cold+0x5/0xa [ 295.160006][ T9681] should_failslab+0xc2/0x120 [ 295.160024][ T9681] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 295.160049][ T9681] ? sidtab_sid2str_get+0x17a/0x670 [ 295.160070][ T9681] kmemdup_noprof+0x29/0x60 [ 295.160085][ T9681] sidtab_sid2str_get+0x17a/0x670 [ 295.160103][ T9681] security_sid_to_context_core+0x35a/0x6d0 [ 295.160131][ T9681] ? avc_audit_post_callback+0x115/0x900 [ 295.160149][ T9681] avc_audit_post_callback+0x1aa/0x900 [ 295.160165][ T9681] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 295.160182][ T9681] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 295.160196][ T9681] ? skb_put+0x138/0x180 [ 295.160214][ T9681] ? audit_log_n_string+0x256/0x550 [ 295.160236][ T9681] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 295.160251][ T9681] common_lsm_audit+0x23f/0x2b0 [ 295.160275][ T9681] ? __pfx_common_lsm_audit+0x10/0x10 [ 295.160296][ T9681] ? __lock_acquire+0x4a5/0x2630 [ 295.160321][ T9681] slow_avc_audit+0x186/0x210 [ 295.160338][ T9681] ? __pfx_slow_avc_audit+0x10/0x10 [ 295.160356][ T9681] ? find_held_lock+0x2b/0x80 [ 295.160369][ T9681] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 295.160385][ T9681] ? avc_denied+0x14a/0x190 [ 295.160403][ T9681] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 295.160422][ T9681] avc_has_perm+0x1a6/0x1e0 [ 295.160441][ T9681] ? __pfx_avc_has_perm+0x10/0x10 [ 295.160466][ T9681] selinux_sb_statfs+0x1e1/0x2a0 [ 295.160489][ T9681] ? __pfx_selinux_sb_statfs+0x10/0x10 [ 295.160511][ T9681] ? do_raw_spin_lock+0x128/0x260 [ 295.160533][ T9681] ? user_get_super+0xe8/0x1b0 [ 295.160555][ T9681] security_sb_statfs+0x87/0x1e0 [ 295.160575][ T9681] statfs_by_dentry+0xa3/0x210 [ 295.160594][ T9681] __do_sys_ustat+0x108/0x200 [ 295.160612][ T9681] ? __pfx___do_sys_ustat+0x10/0x10 [ 295.160645][ T9681] ? rcu_is_watching+0x12/0xc0 [ 295.160670][ T9681] do_syscall_64+0x115/0x870 [ 295.160690][ T9681] ? clear_bhb_loop+0x40/0x90 [ 295.160709][ T9681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.160725][ T9681] RIP: 0033:0x7f7f62d9ce59 [ 295.160738][ T9681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.160752][ T9681] RSP: 002b:00007f7f63cbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000088 [ 295.160767][ T9681] RAX: ffffffffffffffda RBX: 00007f7f63015fa0 RCX: 00007f7f62d9ce59 [ 295.160777][ T9681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 295.160786][ T9681] RBP: 00007f7f63cbb090 R08: 0000000000000000 R09: 0000000000000000 [ 295.160795][ T9681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.160804][ T9681] R13: 00007f7f63016038 R14: 00007f7f63015fa0 R15: 00007ffff868b5f8 [ 295.160826][ T9681] [ 295.376637][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.515153][ T9684] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.532805][ T9684] audit: audit_lost=4033 audit_rate_limit=0 audit_backlog_limit=64 [ 295.551291][ T9684] audit: backlog limit exceeded [ 295.581030][ T9684] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.596025][ T9684] audit: audit_lost=4034 audit_rate_limit=0 audit_backlog_limit=64 [ 295.614145][ T5279] audit: audit_lost=4035 audit_rate_limit=0 audit_backlog_limit=64 [ 295.615770][ T30] audit: type=1400 audit(1780639935.345:172162): avc: denied { getattr } for pid=9679 comm="syz.1.1130" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tsid=3 tclass=filesystem permissive=0 [ 295.631507][ T5279] audit: backlog limit exceeded [ 295.758432][ T9690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1134'. [ 295.859315][ T9693] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9693 comm=syz.2.1134 [ 296.087486][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 296.183322][ T9699] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 296.244123][ T9706] netlink: 'syz.1.1135': attribute type 15 has an invalid length. [ 296.264313][ T9706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1135'. [ 296.775868][ T9724] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 297.084350][ T9733] FAULT_INJECTION: forcing a failure. [ 297.084350][ T9733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.123328][ T9733] CPU: 1 UID: 0 PID: 9733 Comm: syz.2.1150 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.123357][ T9733] Tainted: [L]=SOFTLOCKUP [ 297.123363][ T9733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.123373][ T9733] Call Trace: [ 297.123379][ T9733] [ 297.123387][ T9733] dump_stack_lvl+0x100/0x190 [ 297.123413][ T9733] should_fail_ex.cold+0x5/0xa [ 297.123439][ T9733] _copy_to_user+0x32/0xd0 [ 297.123463][ T9733] simple_read_from_buffer+0xcb/0x170 [ 297.123487][ T9733] proc_fail_nth_read+0x1af/0x230 [ 297.123516][ T9733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.123537][ T9733] ? rw_verify_area+0xce/0x6d0 [ 297.123553][ T9733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.123573][ T9733] vfs_read+0x1e4/0xb30 [ 297.123594][ T9733] ? __pfx_vfs_read+0x10/0x10 [ 297.123613][ T9733] ? __fget_files+0x215/0x3d0 [ 297.123640][ T9733] ? __fget_files+0x21f/0x3d0 [ 297.123669][ T9733] ksys_read+0x12a/0x250 [ 297.123687][ T9733] ? __pfx_ksys_read+0x10/0x10 [ 297.123706][ T9733] ? rcu_is_watching+0x12/0xc0 [ 297.123735][ T9733] do_syscall_64+0x115/0x870 [ 297.123758][ T9733] ? clear_bhb_loop+0x40/0x90 [ 297.123779][ T9733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.123797][ T9733] RIP: 0033:0x7fdc8d55d68e [ 297.123812][ T9733] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 297.123829][ T9733] RSP: 002b:00007fdc8e37bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 297.123846][ T9733] RAX: ffffffffffffffda RBX: 00007fdc8e37c6c0 RCX: 00007fdc8d55d68e [ 297.123858][ T9733] RDX: 000000000000000f RSI: 00007fdc8e37c0a0 RDI: 0000000000000004 [ 297.123868][ T9733] RBP: 00007fdc8e37c090 R08: 0000000000000000 R09: 0000000000000000 [ 297.123878][ T9733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.123888][ T9733] R13: 00007fdc8d816038 R14: 00007fdc8d815fa0 R15: 00007ffc34d8c4f8 [ 297.123911][ T9733] [ 298.578036][ T9764] mmap: syz.3.1163 (9764) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 299.608482][ T9786] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 300.159730][ T30] kauditd_printk_skb: 7005 callbacks suppressed [ 300.159824][ T30] audit: type=1400 audit(1780639940.365:179066): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 300.182569][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 300.195449][ T30] audit: type=1400 audit(1780639940.365:179067): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 300.224251][ T5279] audit: audit_lost=4073 audit_rate_limit=0 audit_backlog_limit=64 [ 300.233939][ T30] audit: type=1400 audit(1780639940.365:179068): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 300.249886][ T5279] audit: backlog limit exceeded [ 300.257986][ T30] audit: type=1400 audit(1780639940.365:179069): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 300.286937][ T9793] audit: audit_backlog=65 > audit_backlog_limit=64 [ 300.315452][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 300.320134][ T9793] audit: audit_lost=4074 audit_rate_limit=0 audit_backlog_limit=64 [ 302.866413][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 302.998433][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 303.111748][ T7631] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.165793][ T7631] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.211201][ T7631] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.259220][ T7631] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.171962][ T30] kauditd_printk_skb: 8229 callbacks suppressed [ 305.171976][ T30] audit: type=1400 audit(1780639945.385:186735): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 305.247298][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.247316][ T5279] audit: audit_lost=4263 audit_rate_limit=0 audit_backlog_limit=64 [ 305.247328][ T5279] audit: backlog limit exceeded [ 305.247374][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.247384][ T5279] audit: audit_lost=4264 audit_rate_limit=0 audit_backlog_limit=64 [ 305.247396][ T5279] audit: backlog limit exceeded [ 305.247446][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.247457][ T5279] audit: audit_lost=4265 audit_rate_limit=0 audit_backlog_limit=64 [ 305.247469][ T5279] audit: backlog limit exceeded [ 309.202096][ T9949] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 310.180083][ T30] kauditd_printk_skb: 9356 callbacks suppressed [ 310.180113][ T30] audit: type=1400 audit(1780639950.385:195936): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 310.242910][ T30] audit: type=1400 audit(1780639950.395:195937): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 310.289569][ T30] audit: type=1400 audit(1780639950.395:195938): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 310.291338][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 310.311650][ T30] audit: type=1400 audit(1780639950.395:195939): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 310.374142][ T5279] audit: audit_lost=4318 audit_rate_limit=0 audit_backlog_limit=64 [ 310.384678][ T5279] audit: backlog limit exceeded [ 310.390713][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 310.397326][ T5279] audit: audit_lost=4319 audit_rate_limit=0 audit_backlog_limit=64 [ 310.405782][ T30] audit: type=1400 audit(1780639950.395:195940): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 310.529449][ T9968] netlink: 'syz.1.1234': attribute type 10 has an invalid length. [ 310.537454][ T9968] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1234'. [ 310.552449][ T9968] bridge0: port 1(veth1_macvtap) entered blocking state [ 310.580085][ T9968] bridge0: port 1(veth1_macvtap) entered disabled state [ 310.610099][ T9968] veth1_macvtap: entered allmulticast mode [ 310.635096][ T9968] veth1_macvtap: left allmulticast mode [ 310.650662][ T9968] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 311.577020][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.585977][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.765075][ T9988] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 313.986997][T10022] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1252'. [ 314.866343][T10026] netlink: 'syz.1.1254': attribute type 13 has an invalid length. [ 314.895735][T10026] netlink: 'syz.1.1254': attribute type 17 has an invalid length. [ 314.929276][T10034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=10034 comm=syz.1.1254 [ 315.189909][ T30] kauditd_printk_skb: 7149 callbacks suppressed [ 315.189924][ T30] audit: type=1400 audit(1780639955.405:203074): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 315.321291][ T30] audit: type=1400 audit(1780639955.405:203075): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 315.426899][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 315.426988][ T30] audit: type=1400 audit(1780639955.405:203076): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 315.521599][ T5279] audit: audit_lost=4325 audit_rate_limit=0 audit_backlog_limit=64 [ 315.525556][ T30] audit: type=1400 audit(1780639955.405:203077): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 315.577212][T10044] audit: audit_backlog=65 > audit_backlog_limit=64 [ 315.586423][T10026] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 315.614734][T10044] audit: audit_lost=4326 audit_rate_limit=0 audit_backlog_limit=64 [ 315.641790][ T30] audit: type=1400 audit(1780639955.465:203079): avc: denied { create } for pid=10038 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 315.667120][ T5279] audit: backlog limit exceeded [ 315.745901][T10044] netlink: 'syz.2.1261': attribute type 27 has an invalid length. [ 316.191801][T10054] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1264'. [ 316.491628][T10064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1269'. [ 316.514351][ T7631] Bluetooth: hci5: Frame reassembly failed (-84) [ 318.539870][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 318.547821][ T5627] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 319.387651][T10100] netlink: 'syz.2.1278': attribute type 21 has an invalid length. [ 319.441622][T10100] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1278'. [ 319.538376][T10100] netlink: 'syz.2.1278': attribute type 4 has an invalid length. [ 319.600834][T10100] netlink: 'syz.2.1278': attribute type 5 has an invalid length. [ 319.644127][T10100] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1278'. [ 319.714089][T10106] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1280'. [ 320.076069][T10120] netlink: 'syz.1.1286': attribute type 12 has an invalid length. [ 320.236927][ T30] kauditd_printk_skb: 5502 callbacks suppressed [ 320.236944][ T30] audit: type=1400 audit(1780639960.445:208553): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 320.325972][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 320.329836][ T30] audit: type=1400 audit(1780639960.445:208554): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 320.332846][ T5279] audit: audit_lost=4336 audit_rate_limit=0 audit_backlog_limit=64 [ 320.364116][ T30] audit: type=1400 audit(1780639960.445:208555): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 320.401945][ T5279] audit: backlog limit exceeded [ 320.417867][ T30] audit: type=1400 audit(1780639960.445:208556): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 320.420104][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 320.463639][ T30] audit: type=1400 audit(1780639960.445:208557): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 320.491916][ T5279] audit: audit_lost=4337 audit_rate_limit=0 audit_backlog_limit=64 [ 320.614098][T10133] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1289'. [ 320.618997][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 320.630731][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 320.665570][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 320.716036][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 320.748703][T10128] ceph: No mds server is up or the cluster is laggy [ 320.937472][T10145] snd_aloop snd_aloop.0: control 6:0:7:syz1:6 is already present [ 321.039100][T10148] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1295'. [ 322.074905][T10161] syzkaller0: entered promiscuous mode [ 322.082338][T10161] syzkaller0: entered allmulticast mode [ 322.202902][T10162] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1301'. [ 323.273463][T10189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1308'. [ 324.503517][T10202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1313'. [ 324.789006][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 324.795003][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 324.853998][T10205] ceph: No mds server is up or the cluster is laggy [ 325.247269][ T30] kauditd_printk_skb: 9093 callbacks suppressed [ 325.247284][ T30] audit: type=1400 audit(1780639965.455:217215): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 325.301943][ T30] audit: type=1400 audit(1780639965.455:217216): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 325.339614][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 325.348493][ T30] audit: type=1400 audit(1780639965.455:217217): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 325.374007][ T30] audit: type=1400 audit(1780639965.455:217218): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 325.436931][ T5279] audit: audit_lost=4483 audit_rate_limit=0 audit_backlog_limit=64 [ 325.480986][ T5279] audit: backlog limit exceeded [ 325.486080][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 325.500015][ T5279] audit: audit_lost=4484 audit_rate_limit=0 audit_backlog_limit=64 [ 325.517234][ T5279] audit: backlog limit exceeded [ 326.187997][T10224] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1319'. [ 326.226116][T10223] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 327.157567][T10240] block device autoloading is deprecated and will be removed. [ 327.713665][T10255] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1331'. [ 328.277274][T10270] syzkaller0: entered promiscuous mode [ 328.297047][T10270] syzkaller0: entered allmulticast mode [ 330.249939][ T30] kauditd_printk_skb: 7666 callbacks suppressed [ 330.249956][ T30] audit: type=1400 audit(1780639970.455:223997): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.290630][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 330.303428][ T5279] audit: audit_lost=4781 audit_rate_limit=0 audit_backlog_limit=64 [ 330.317382][ T30] audit: type=1400 audit(1780639970.495:223998): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.339997][ T5279] audit: backlog limit exceeded [ 330.346740][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 330.354244][ T5279] audit: audit_lost=4782 audit_rate_limit=0 audit_backlog_limit=64 [ 330.363722][ T5279] audit: backlog limit exceeded [ 330.369122][ T30] audit: type=1400 audit(1780639970.495:223999): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.391806][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 330.451474][ T5627] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 330.458755][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 331.612520][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'. [ 331.621833][T10319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1355'. [ 332.783608][ T24] IPVS: starting estimator thread 0... [ 332.791532][T10357] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 332.880739][T10364] trusted_key: encrypted_key: keyword 'nƒw' not recognized [ 332.889872][T10361] IPVS: using max 48 ests per chain, 115200 per kthread [ 333.919708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 334.460460][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'. [ 335.262304][ T30] kauditd_printk_skb: 7069 callbacks suppressed [ 335.262321][ T30] audit: type=1400 audit(1780639975.475:230410): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 335.288840][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 335.312711][T10407] audit: audit_backlog=65 > audit_backlog_limit=64 [ 335.316494][ T5279] audit: audit_lost=5003 audit_rate_limit=0 audit_backlog_limit=64 [ 335.338840][ T5279] audit: backlog limit exceeded [ 335.346082][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 335.346604][ T5615] audit: audit_backlog=65 > audit_backlog_limit=64 [ 335.353523][ T5279] audit: audit_lost=5004 audit_rate_limit=0 audit_backlog_limit=64 [ 335.379783][T10407] audit: audit_lost=5005 audit_rate_limit=0 audit_backlog_limit=64 [ 335.389590][ T5279] audit: backlog limit exceeded [ 338.878243][T10461] netlink: 1040 bytes leftover after parsing attributes in process `syz.3.1407'. [ 338.966486][T10463] FAULT_INJECTION: forcing a failure. [ 338.966486][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 339.019893][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.4.1409 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.019922][T10463] Tainted: [L]=SOFTLOCKUP [ 339.019928][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 339.019938][T10463] Call Trace: [ 339.019944][T10463] [ 339.019951][T10463] dump_stack_lvl+0x100/0x190 [ 339.019979][T10463] should_fail_ex.cold+0x5/0xa [ 339.020004][T10463] ? sock_kmalloc+0x111/0x170 [ 339.020022][T10463] should_failslab+0xc2/0x120 [ 339.020043][T10463] __kmalloc_noprof+0xe0/0x850 [ 339.020074][T10463] sock_kmalloc+0x111/0x170 [ 339.020095][T10463] ip6_mc_source+0xe0b/0x1610 [ 339.020121][T10463] do_ipv6_mcast_group_source+0x196/0x270 [ 339.020147][T10463] ? __pfx_do_ipv6_mcast_group_source+0x10/0x10 [ 339.020198][T10463] ? __local_bh_enable_ip+0x9e/0x120 [ 339.020223][T10463] ? lockdep_hardirqs_on+0x78/0x100 [ 339.020249][T10463] do_ipv6_setsockopt+0x1fc5/0x44b0 [ 339.020277][T10463] ? __print_lock_name+0x60/0x80 [ 339.020304][T10463] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 339.020332][T10463] ? avc_has_perm_noaudit+0x145/0x3b0 [ 339.020355][T10463] ? avc_has_perm+0x135/0x1e0 [ 339.020375][T10463] ? __pfx_avc_has_perm+0x10/0x10 [ 339.020396][T10463] ? get_pid_task+0x106/0x250 [ 339.020420][T10463] ? sock_has_perm+0x25a/0x2f0 [ 339.020442][T10463] ? __pfx_sock_has_perm+0x10/0x10 [ 339.020464][T10463] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 339.020491][T10463] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 339.020525][T10463] ? ipv6_setsockopt+0xcb/0x170 [ 339.020545][T10463] ipv6_setsockopt+0xcb/0x170 [ 339.020571][T10463] tcp_setsockopt+0xa7/0x100 [ 339.020590][T10463] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 339.020610][T10463] do_sock_setsockopt+0xf3/0x1d0 [ 339.020632][T10463] __sys_setsockopt+0x195/0x220 [ 339.020662][T10463] __x64_sys_setsockopt+0xbd/0x160 [ 339.020684][T10463] ? do_syscall_64+0x90/0x870 [ 339.020706][T10463] ? lockdep_hardirqs_on+0x78/0x100 [ 339.020730][T10463] do_syscall_64+0x115/0x870 [ 339.020751][T10463] ? clear_bhb_loop+0x40/0x90 [ 339.020772][T10463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.020790][T10463] RIP: 0033:0x7f6ae739ce59 [ 339.020805][T10463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.020822][T10463] RSP: 002b:00007f6ae8268028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 339.020838][T10463] RAX: ffffffffffffffda RBX: 00007f6ae7615fa0 RCX: 00007f6ae739ce59 [ 339.020849][T10463] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000003 [ 339.020859][T10463] RBP: 00007f6ae8268090 R08: 0000000000000108 R09: 0000000000000000 [ 339.020869][T10463] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 339.020879][T10463] R13: 00007f6ae7616038 R14: 00007f6ae7615fa0 R15: 00007ffc1656bda8 [ 339.020903][T10463] [ 340.274572][ T30] kauditd_printk_skb: 5315 callbacks suppressed [ 340.274589][ T30] audit: type=1400 audit(1780639980.485:235624): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 340.390466][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.403022][ T5279] audit: audit_lost=5040 audit_rate_limit=0 audit_backlog_limit=64 [ 340.419963][ T30] audit: type=1400 audit(1780639980.485:235625): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 340.441696][ T5279] audit: backlog limit exceeded [ 340.446771][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.455539][ T5279] audit: audit_lost=5041 audit_rate_limit=0 audit_backlog_limit=64 [ 340.463652][ T30] audit: type=1400 audit(1780639980.485:235626): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 340.493463][ T5279] audit: backlog limit exceeded [ 340.504651][T10486] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.891033][T10498] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 343.575511][T10545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1436'. [ 345.286833][ T30] kauditd_printk_skb: 6862 callbacks suppressed [ 345.286849][ T30] audit: type=1400 audit(1780639985.495:242085): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 345.362035][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 345.380295][ T5279] audit: audit_lost=5177 audit_rate_limit=0 audit_backlog_limit=64 [ 345.391542][ T30] audit: type=1400 audit(1780639985.495:242086): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 345.423407][ T5279] audit: backlog limit exceeded [ 345.431742][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 345.442122][ T5615] audit: audit_backlog=65 > audit_backlog_limit=64 [ 345.459944][ T5279] audit: audit_lost=5178 audit_rate_limit=0 audit_backlog_limit=64 [ 345.469475][ T5615] audit: audit_lost=5179 audit_rate_limit=0 audit_backlog_limit=64 [ 345.481085][ T30] audit: type=1400 audit(1780639985.495:242087): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 345.844761][T10574] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1447'. [ 346.710750][ T29] libceph: connect (1)[c::]:6789 error -101 [ 346.740410][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 346.791275][T10587] ceph: No mds server is up or the cluster is laggy [ 346.800655][T10588] ceph: No mds server is up or the cluster is laggy [ 346.808646][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 346.822694][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 346.844249][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 346.861234][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 347.355117][T10597] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 347.368111][T10597] block device autoloading is deprecated and will be removed. [ 347.809778][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 349.245698][T10617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1459'. [ 350.291550][ T30] kauditd_printk_skb: 6974 callbacks suppressed [ 350.291567][ T30] audit: type=1400 audit(1780639990.505:248098): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 350.353877][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 350.366900][ T5279] audit: audit_lost=5501 audit_rate_limit=0 audit_backlog_limit=64 [ 350.385342][T10643] audit: audit_backlog=65 > audit_backlog_limit=64 [ 350.402339][ T5616] audit: audit_backlog=65 > audit_backlog_limit=64 [ 350.415776][T10643] audit: audit_lost=5502 audit_rate_limit=0 audit_backlog_limit=64 [ 350.429014][ T30] audit: type=1400 audit(1780639990.495:248097): avc: denied { prog_load } for pid=10642 comm="syz.1.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 350.430761][ T5279] audit: backlog limit exceeded [ 350.449232][ T30] audit: type=1400 audit(1780639990.535:248099): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 350.449273][ T30] audit: type=1400 audit(1780639990.535:248100): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 351.055427][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 351.061919][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 351.089213][ T5949] libceph: connect (1)[c::]:6789 error -101 [ 351.119931][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 351.138307][T10656] ceph: No mds server is up or the cluster is laggy [ 351.354588][T10657] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 351.555885][T10667] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1473'. [ 353.865647][T10699] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 353.865647][T10699] The task syz.3.1480 (10699) triggered the difference, watch for misbehavior. [ 354.436100][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 355.344104][ T30] kauditd_printk_skb: 7310 callbacks suppressed [ 355.344120][ T30] audit: type=1400 audit(1780639995.505:255207): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 355.371573][ T30] audit: type=1400 audit(1780639995.545:255208): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 355.392777][ T30] audit: type=1400 audit(1780639995.545:255209): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 355.413991][ T30] audit: type=1400 audit(1780639995.545:255210): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 355.507929][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 355.524751][ T30] audit: type=1400 audit(1780639995.545:255211): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 355.540525][ T5279] audit: audit_lost=5571 audit_rate_limit=0 audit_backlog_limit=64 [ 355.546041][ T30] audit: type=1400 audit(1780639995.545:255212): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 355.546076][ T30] audit: type=1400 audit(1780639995.545:255213): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 355.546111][ T30] audit: type=1400 audit(1780639995.545:255214): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 356.218853][T10768] vlan0: entered promiscuous mode [ 356.818641][T10781] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 357.282484][T10790] FAULT_INJECTION: forcing a failure. [ 357.282484][T10790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.321786][T10790] CPU: 1 UID: 0 PID: 10790 Comm: syz.0.1514 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.321817][T10790] Tainted: [L]=SOFTLOCKUP [ 357.321823][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 357.321834][T10790] Call Trace: [ 357.321839][T10790] [ 357.321847][T10790] dump_stack_lvl+0x100/0x190 [ 357.321873][T10790] should_fail_ex.cold+0x5/0xa [ 357.321898][T10790] _copy_to_user+0x32/0xd0 [ 357.321922][T10790] simple_read_from_buffer+0xcb/0x170 [ 357.321947][T10790] proc_fail_nth_read+0x1af/0x230 [ 357.321967][T10790] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.321988][T10790] ? rw_verify_area+0xce/0x6d0 [ 357.322005][T10790] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.322024][T10790] vfs_read+0x1e4/0xb30 [ 357.322053][T10790] ? __pfx_vfs_read+0x10/0x10 [ 357.322072][T10790] ? __fget_files+0x215/0x3d0 [ 357.322100][T10790] ? __fget_files+0x21f/0x3d0 [ 357.322129][T10790] ksys_read+0x12a/0x250 [ 357.322148][T10790] ? __pfx_ksys_read+0x10/0x10 [ 357.322168][T10790] ? rcu_is_watching+0x12/0xc0 [ 357.322198][T10790] do_syscall_64+0x115/0x870 [ 357.322221][T10790] ? clear_bhb_loop+0x40/0x90 [ 357.322243][T10790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.322260][T10790] RIP: 0033:0x7f4f6535d68e [ 357.322275][T10790] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 357.322292][T10790] RSP: 002b:00007f4f661fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 357.322309][T10790] RAX: ffffffffffffffda RBX: 00007f4f661fe6c0 RCX: 00007f4f6535d68e [ 357.322321][T10790] RDX: 000000000000000f RSI: 00007f4f661fe0a0 RDI: 0000000000000004 [ 357.322331][T10790] RBP: 00007f4f661fe090 R08: 0000000000000000 R09: 0000000000000000 [ 357.322341][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 357.322351][T10790] R13: 00007f4f65616038 R14: 00007f4f65615fa0 R15: 00007ffed6ab3508 [ 357.322375][T10790] [ 360.351203][ T30] kauditd_printk_skb: 7689 callbacks suppressed [ 360.351218][ T30] audit: type=1400 audit(1780640000.555:262903): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 360.407014][T10857] netlink: 'syz.4.1535': attribute type 1 has an invalid length. [ 360.408472][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.442737][ T5279] audit: audit_lost=5572 audit_rate_limit=0 audit_backlog_limit=64 [ 360.457410][ T30] audit: type=1400 audit(1780640000.565:262904): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 360.481990][ T5279] audit: backlog limit exceeded [ 360.488025][ T5279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.515197][ T30] audit: type=1400 audit(1780640000.565:262905): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 360.555217][ T5279] audit: audit_lost=5573 audit_rate_limit=0 audit_backlog_limit=64 [ 360.571132][T10860] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.606714][ T5279] audit: backlog limit exceeded [ 360.648788][T10857] bond2: entered promiscuous mode [ 360.694267][T10860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7958 sclass=netlink_route_socket pid=10860 comm=syz.4.1535 [ 360.718164][T10857] 8021q: adding VLAN 0 to HW filter on device bond2 [ 360.880711][T10859] bond2: (slave bridge2): making interface the new active one [ 360.909837][T10859] bridge2: entered promiscuous mode [ 360.950598][T10859] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 361.468264][ T24] libceph: connect (1)[c::]:6789 error -101 [ 361.516218][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 361.580829][T10875] ceph: No mds server is up or the cluster is laggy [ 361.588345][ T24] libceph: connect (1)[c::]:6789 error -101 [ 361.643411][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 362.079996][T10881] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1539'. [ 362.406567][T10889] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1541'. [ 468.147335][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 468.154302][ C0] rcu: 1-...!: (1 GPs behind) idle=980c/1/0x4000000000000000 softirq=45634/45635 fqs=1 [ 468.164820][ C0] rcu: (detected by 0, t=10506 jiffies, g=53889, q=79 ncpus=2) [ 468.172445][ C0] Sending NMI from CPU 0 to CPUs 1: [ 468.172470][ C1] NMI backtrace for cpu 1 [ 468.172484][ C1] CPU: 1 UID: 0 PID: 5614 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 468.172504][ C1] Tainted: [L]=SOFTLOCKUP [ 468.172508][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 468.172515][ C1] RIP: 0010:lock_is_held_type+0x42/0x140 [ 468.172538][ C1] Code: 8b 15 aa a6 80 08 85 d2 0f 85 de 00 00 00 41 57 41 56 41 55 41 54 55 53 48 83 ec 08 65 48 8b 2d 1c 5f 80 08 8b 95 8c 0b 00 00 <85> d2 0f 85 a7 00 00 00 48 89 fb 41 89 f4 9c 41 5d fa 48 c7 c7 5a [ 468.172550][ C1] RSP: 0018:ffffc90000a08e48 EFLAGS: 00000096 [ 468.172562][ C1] RAX: 00000000ffffffff RBX: 0000000000000001 RCX: 0000000000000001 [ 468.172571][ C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff8880b85284d8 [ 468.172580][ C1] RBP: ffff88802bef0000 R08: 0000000000000005 R09: 0000000000000000 [ 468.172588][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888037dd3300 [ 468.172596][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: 18b7f77c48396cf2 [ 468.172605][ C1] FS: 0000555583877500(0000) GS:ffff888124483000(0000) knlGS:0000000000000000 [ 468.172620][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.172629][ C1] CR2: 00007f4f65617dac CR3: 000000005c9cc000 CR4: 00000000003526f0 [ 468.172639][ C1] Call Trace: [ 468.172644][ C1] [ 468.172651][ C1] __hrtimer_run_queues+0x7c3/0xa00 [ 468.172675][ C1] hrtimer_interrupt+0x3e5/0x940 [ 468.172698][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 468.172718][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 468.172734][ C1] [ 468.172738][ C1] [ 468.172743][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 468.172758][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 468.172774][ C1] Code: 05 3b 45 25 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 46 86 f2 0e 0f 82 a4 02 00 00 8b 35 ce b9 f2 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd 44 25 12 0f 85 ed 02 00 00 48 83 c4 [ 468.172786][ C1] RSP: 0018:ffffc900037d73d8 EFLAGS: 00000206 [ 468.172797][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000007 [ 468.172805][ C1] RDX: 0000000000000000 RSI: ffffffff8deea396 RDI: ffffffff8c1c4680 [ 468.172813][ C1] RBP: ffffffff8e7e5560 R08: 000000007bf5c8e5 R09: 0000000000000007 [ 468.172822][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 468.172830][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.172844][ C1] ? page_table_check_set+0x179/0x920 [ 468.172859][ C1] ? page_table_check_set+0x179/0x920 [ 468.172880][ C1] page_table_check_set+0x2b2/0x920 [ 468.172893][ C1] ? page_table_check_set+0x29d/0x920 [ 468.172908][ C1] __page_table_check_ptes_set+0x27a/0x4e0 [ 468.172924][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 468.172938][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 468.172958][ C1] copy_page_range+0x2197/0x5b20 [ 468.172987][ C1] ? mas_wr_store_entry+0xa1/0x1e80 [ 468.173007][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 468.173027][ C1] ? __pfx___might_resched+0x10/0x10 [ 468.173049][ C1] ? up_write+0x28c/0x4f0 [ 468.173067][ C1] dup_mmap+0xd44/0x21b0 [ 468.173087][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 468.173102][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 468.173119][ C1] ? __lock_acquire+0x4a5/0x2630 [ 468.173135][ C1] ? find_held_lock+0x2b/0x80 [ 468.173147][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 468.173172][ C1] copy_process+0x6c78/0x7ed0 [ 468.173196][ C1] ? __pfx_copy_process+0x10/0x10 [ 468.173215][ C1] ? do_raw_spin_lock+0x128/0x260 [ 468.173237][ C1] kernel_clone+0x176/0x9e0 [ 468.173256][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 468.173275][ C1] ? __lock_acquire+0x4a5/0x2630 [ 468.173293][ C1] ? find_held_lock+0x2b/0x80 [ 468.173304][ C1] ? __might_fault+0xc5/0x140 [ 468.173324][ C1] __do_sys_clone+0xd9/0x120 [ 468.173343][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 468.173369][ C1] ? rcu_is_watching+0x12/0xc0 [ 468.173388][ C1] do_syscall_64+0x115/0x870 [ 468.173404][ C1] ? clear_bhb_loop+0x40/0x90 [ 468.173419][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.173432][ C1] RIP: 0033:0x7f7f62dc58d2 [ 468.173444][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 468.173456][ C1] RSP: 002b:00007ffff868b810 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 468.173468][ C1] RAX: ffffffffffffffda RBX: 00007ffff868b810 RCX: 00007f7f62dc58d2 [ 468.173476][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 468.173484][ C1] RBP: 00007ffff868b99c R08: 0000000000000000 R09: 0000000000000001 [ 468.173491][ C1] R10: 00005555838777d0 R11: 0000000000000246 R12: 0000000000000001 [ 468.173499][ C1] R13: 00000000000927c0 R14: 00000000000587a6 R15: 00007ffff868b9f0 [ 468.173511][ C1] [ 468.174464][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g53889 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 468.661665][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 468.671620][ C0] rcu: RCU grace-period kthread stack dump: [ 468.677493][ C0] task:rcu_preempt state:R running task stack:27992 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 468.690996][ C0] Call Trace: [ 468.694261][ C0] [ 468.697183][ C0] __schedule+0x1295/0x67a0 [ 468.701699][ C0] ? __pfx___schedule+0x10/0x10 [ 468.706538][ C0] ? find_held_lock+0x2b/0x80 [ 468.711210][ C0] ? schedule+0x2bf/0x390 [ 468.715538][ C0] schedule+0xdd/0x390 [ 468.719614][ C0] schedule_timeout+0x127/0x280 [ 468.724455][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 468.729817][ C0] ? __pfx_process_timeout+0x10/0x10 [ 468.735098][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 468.740893][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 468.746608][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 468.751362][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 468.756639][ C0] ? prepare_to_swait_event+0xae/0x4a0 [ 468.762087][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 468.767017][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 468.772204][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 468.778003][ C0] rcu_gp_kthread+0x179/0x230 [ 468.782671][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 468.787857][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 468.793663][ C0] ? __kthread_parkme+0x18c/0x230 [ 468.798687][ C0] ? kthread+0x13a/0x450 [ 468.802932][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 468.808122][ C0] kthread+0x370/0x450 [ 468.812180][ C0] ? __pfx_kthread+0x10/0x10 [ 468.816770][ C0] ret_from_fork+0x72b/0xd50 [ 468.821353][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 468.826454][ C0] ? __switch_to+0x800/0x1100 [ 468.831130][ C0] ? __pfx_kthread+0x10/0x10 [ 468.835710][ C0] ret_from_fork_asm+0x1a/0x30 [ 468.840489][ C0] [ 468.843497][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 468.849805][ C0] CPU: 0 UID: 0 PID: 1111 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.860814][ C0] Tainted: [L]=SOFTLOCKUP [ 468.865119][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 468.875160][ C0] Workqueue: events_unbound toggle_allocation_gate [ 468.881654][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 468.887712][ C0] Code: f6 7f 5c 00 48 89 df 5b e9 dd 10 62 00 be 03 00 00 00 5b e9 b2 ab f0 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 65 20 01 12 48 8b 34 24 65 48 8b 15 41 20 01 [ 468.907306][ C0] RSP: 0018:ffffc900054e7868 EFLAGS: 00000202 [ 468.913362][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fc2c4d [ 468.921318][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888029342540 [ 468.929272][ C0] RBP: ffff8880b8540f80 R08: 0000000000000005 R09: 0000000000000000 [ 468.937242][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 468.945197][ C0] R13: ffffed10170a81f1 R14: 0000000000000001 R15: ffff8880b843c600 [ 468.953153][ C0] FS: 0000000000000000(0000) GS:ffff888124383000(0000) knlGS:0000000000000000 [ 468.962069][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.968640][ C0] CR2: 00007f4f6544f156 CR3: 000000000e596000 CR4: 00000000003526f0 [ 468.976617][ C0] Call Trace: [ 468.979884][ C0] [ 468.982805][ C0] smp_call_function_many_cond+0x587/0x1700 [ 468.988696][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 468.993735][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 469.000051][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 469.005423][ C0] ? __pfx___text_poke+0x10/0x10 [ 469.010356][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 469.015372][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 469.020476][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 469.026964][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 469.032683][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 469.038934][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 469.045162][ C0] ? find_held_lock+0x2b/0x80 [ 469.049832][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 469.055804][ C0] jump_label_update+0x37a/0x550 [ 469.060733][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 469.066620][ C0] static_key_enable+0x1a/0x20 [ 469.071373][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 469.076668][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 469.082559][ C0] ? rcu_is_watching+0x12/0xc0 [ 469.087331][ C0] process_one_work+0xa0e/0x1980 [ 469.092271][ C0] ? __pfx_process_one_work+0x10/0x10 [ 469.097641][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 469.103525][ C0] worker_thread+0x5ef/0xe50 [ 469.108117][ C0] ? kthread+0x13a/0x450 [ 469.112346][ C0] ? __pfx_worker_thread+0x10/0x10 [ 469.117447][ C0] kthread+0x370/0x450 [ 469.121514][ C0] ? __pfx_kthread+0x10/0x10 [ 469.126112][ C0] ret_from_fork+0x72b/0xd50 [ 469.130698][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 469.135804][ C0] ? __switch_to+0x800/0x1100 [ 469.140483][ C0] ? __pfx_kthread+0x10/0x10 [ 469.145070][ C0] ret_from_fork_asm+0x1a/0x30 [ 469.149848][ C0]