last executing test programs: 6m4.119961743s ago: executing program 4 (id=903): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(r0, 0xa, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x180) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x88}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x4000)=nil) 5m59.871507031s ago: executing program 4 (id=920): syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x1) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) lstat(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f00000000c0)=0xd, 0x4) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sendmmsg$inet6(r6, 0x0, 0x0, 0x2000c825) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@ptr={0xfffffffc, 0x0, 0x0, 0x2, 0x4}, @var={0x4, 0x0, 0x0, 0xe, 0x3}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}, @typedef={0x3}]}, {0x0, [0x0, 0x5f, 0x61]}}, 0x0, 0x51}, 0x28) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x3, 0x0, @mcast2, 0x5}, 0x1c) 5m58.705038768s ago: executing program 4 (id=922): socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$ax25(0x3, 0x5, 0x7) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xa) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r5 = fcntl$dupfd(r4, 0x406, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f0000000000)={0x8, 0x400, 0x8, 0x90, 0x1000, 0x1f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x81}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 5m57.616927987s ago: executing program 4 (id=925): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='block_rq_remap\x00', r0, 0x0, 0x9}, 0x18) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x6}]}]}]}, 0x38}}, 0xc000) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="70d56065e955d459df250fe4ffff170007800c000300030002001e00000008000200480000"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x80) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}], 0x1}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) fstatfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl(r7, 0x8b1a, &(0x7f0000000040)) r8 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x30, r5, 0xa4a4c000) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000201010100000000000000000200000024000280140001"], 0x38}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) 5m56.296776164s ago: executing program 4 (id=928): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0xfffffa16}, 0x28) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) read$watch_queue(r3, &(0x7f0000001d40)=""/4095, 0xfff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="520100003ed00d40980c4011e9db000000010902120000f100000009040000000365e6009346d799daacea6900a6ca923271fc95a1f82a94cad3a069330d4c9562c301ef052a155a1156c80bae30e1c396ec122c5b16d1a094c15a35461e0884bd943488e4"], 0x0) 5m51.907223299s ago: executing program 4 (id=941): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) write$dsp(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = gettid() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSSOFTCAR(r4, 0x80047437, &(0x7f0000000140)=0xffff) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x22280, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000140)={'\x00', 0x0, 0x80000001, 0x1, 0x6, 0x1ff, r2}) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0684113, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 5m36.695703668s ago: executing program 32 (id=941): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) write$dsp(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = gettid() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSSOFTCAR(r4, 0x80047437, &(0x7f0000000140)=0xffff) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x22280, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000140)={'\x00', 0x0, 0x80000001, 0x1, 0x6, 0x1ff, r2}) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0684113, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 5m7.375531628s ago: executing program 2 (id=1077): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) 5m5.720533419s ago: executing program 2 (id=1082): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001640)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000080)='_', 0x1}, {&(0x7f00000016c0)="3288fbf4792759ffee36831dc9", 0xd}], 0x2, 0x0, 0x0, 0x8800}], 0x1, 0x2004c004) 5m5.535406789s ago: executing program 2 (id=1083): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x18a) inotify_add_watch(0xffffffffffffffff, 0x0, 0x8000005b) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRES64=r2], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0xd8, &(0x7f0000000000)={0x0, 0x1b75}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x8, 0x2, 0x0) 5m4.540440398s ago: executing program 2 (id=1085): setresuid(0xee01, 0xee00, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) 5m4.247757338s ago: executing program 2 (id=1086): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f0000000580)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000780)=[{0x0}, {0x0}], 0x2}}], 0x34000, 0x240080cb) 5m3.584776203s ago: executing program 2 (id=1090): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) r0 = socket(0x22, 0x2, 0x4) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x2000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 4m48.246522154s ago: executing program 33 (id=1090): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) r0 = socket(0x22, 0x2, 0x4) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x2000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 12.211672616s ago: executing program 1 (id=2003): socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0x0, 0x8, 0x92}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0}, 0x52) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000940), 0x10) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x40, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x4000080) 12.10363078s ago: executing program 1 (id=2006): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0xffffffffffffff62, &(0x7f0000000280)=0xa) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ed", @ANYRES32=0x1, @ANYBLOB="1700"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="04000000000000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000006433e8cef2703554000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85513, &(0x7f0000000b00)={{0xa, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000004, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x80, 0x0, 0x0, 0x8, 0x10001, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x10000, 0xa3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0xfffffffffffff1c5, 0x8, 0x0, 0x3, 0x3, 0x20000, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x80000001, 0x6, 0x0, 0x7, 0x0, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0xc675, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x100, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='geneve0\x00', 0x2, 0x3, 0x80}) r7 = syz_io_uring_setup(0x3b, &(0x7f0000000480)={0x0, 0x36c7, 0x10100}, 0x0, &(0x7f0000000240)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000280)=""/204, 0xcc}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r7, 0xd81, 0x0, 0x0, 0x0, 0x0) 11.416142462s ago: executing program 1 (id=2008): r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x40, 0x8, 0x9, {0x9, 0x7, "ca23dc66d6f1a1"}}, 0x0, 0x0, 0x0}, 0x0) mkdir(0x0, 0x36) mkdir(&(0x7f0000000580)='./file0\x00', 0x41) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) 8.331774018s ago: executing program 1 (id=2015): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363557, 0x0, 0xa, [{0x9, 0x5}, {0x800006, 0x7f36}, {0x10008, 0x70}, {0x31, 0xf}, {0x6, 0xff}, {0x6, 0x589}, {0x8, 0x7}, {0x10041, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x5}}) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x100000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0xffffffffffffffff) prlimit64(r0, 0x2, &(0x7f0000000080)={0x6, 0x8}, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x2, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80800) socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c99000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) madvise(&(0x7f0000fba000/0x1000)=nil, 0x1000, 0x15) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') 7.455440966s ago: executing program 5 (id=2018): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {0x0}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}], 0x48}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000940)=0x8, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x231000, 0x1000, 0xffffffff}, 0xe) writev(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) 7.233246809s ago: executing program 5 (id=2020): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0xfffffffe, 0x2045404a, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x20, 0x76}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x7800) (async) syz_fuse_handle_req(r1, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r3, r4, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) (async) bind$can_raw(0xffffffffffffffff, &(0x7f00000005c0), 0x10) (async) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x2b66, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaeaaaaaaaaaaaaab00080045000038001d000000019078640101b8ac1414aa0b009078036c000045000000000000000089000000000000ac143974ffdf4c4fbb6bd03cd0605e127baa1449371fd04e09af7ec9054e0b3276ee07dfcdc968fed40850d56973791d3914aee7ef7b5c8ca61227019cc96d40f750a1ec2c2e88eda0fb578e79f15c501d230ef225368ecb16def90d10b46f0e5b8f7cde71308cb6c0c501ae1e8bc5badec0c135298362bbbaaca038759dffb81f6f3aa1151dbc8ae13efcc870c3c21ed21f9e2fa706cb47bc8e40472e9b2f53aa79d7227ff4cb8dd0a1b8d037e09a"], 0x0) (async) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r7, 0x0, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28150000020000000c001aab0600058004c601"], 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4) (async) socket$kcm(0x10, 0x2, 0x10) 7.027703613s ago: executing program 0 (id=2023): mkdir(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001080)='net/sockstat\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$inet6(0xa, 0x1, 0x2d9) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000438000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000191000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x0}, 0x68) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x57b7, 0x1c852, 0x2, 0x20002f7, 0x0, r0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket(0x1, 0x803, 0x0) getsockopt$SO_COOKIE(r7, 0x1, 0x47, &(0x7f0000000080), &(0x7f0000000180)=0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020}, 0xffffffac) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) creat(0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x80007730, 0x80, 0x2, 0x34d}, &(0x7f0000000480)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 6.003125827s ago: executing program 0 (id=2025): request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000400)='\x00', 0xffffffffffffffff) (async) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000400)='\x00', 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x10000028, 0x440, 0x0, 0xa9, 0x55, 0x1, 0x7, 0x8000003}, 0x0) syz_open_procfs(0x0, 0x0) fanotify_init(0xa00, 0x0) (async) fanotify_init(0xa00, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x100000}) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)=0x40010000) ioctl$SNDCTL_DSP_SUBDIVIDE(r6, 0xc0045009, &(0x7f00000002c0)=0x1) ppoll(&(0x7f0000000080)=[{r6, 0x1010}], 0x1, &(0x7f0000000100), 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x8080000, 0x0, &(0x7f0000000100)}, {0x5000, 0xf, &(0x7f00000001c0)=""/15}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x8080000, 0x0, &(0x7f0000000100)}, {0x5000, 0xf, &(0x7f00000001c0)=""/15}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)}) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) socket(0x14, 0x80000, 0x9) io_uring_enter(r7, 0x1b13, 0x1fb3, 0x1, &(0x7f0000000140)={[0x8000000000000]}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x430, 0xffffffff, 0xffffffff, 0x430, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE0={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xd0}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x2b4) 5.827662752s ago: executing program 5 (id=2027): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000230500000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008250191881fee523a45aea108f06226b8002ac855f394b0142a38ea9ed96895b37c39dd14acd25c8ea4360d379b9465c181699230a3af045543538c5aebf94383ad5504a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000280)=""/56, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r5], &(0x7f0000000200), &(0x7f00000000c0)=[r6], &(0x7f0000000040), 0x0, 0x300}) 5.462626837s ago: executing program 0 (id=2029): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4008881) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0xf6c8}], 0x1, 0x120, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x20}, 0x48) 5.430906102s ago: executing program 5 (id=2030): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x3de, 0x4) r1 = socket$netlink(0x10, 0x3, 0xa) dup(r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYRESDEC=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e040000300016"], 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000012b8b42bff01000000000000000000000000000101000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"], 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) r10 = inotify_init() r11 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r12 = inotify_add_watch(r10, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r11, &(0x7f0000000040)=ANY=[@ANYRES64=r12], 0x69) 4.948494492s ago: executing program 3 (id=2033): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4008881) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x0) recvmmsg(r6, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0xf6c8}], 0x1, 0x120, 0x0) 4.595851738s ago: executing program 6 (id=2035): r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x6000}}) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0xa1ff) syz_fuse_handle_req(r5, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000007d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f00000005c0)={0x10, 0x0, r6}, 0x10) r7 = epoll_create1(0x0) r8 = socket(0x1, 0x80802, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x10000001}) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x80000001, 0x0, 0x6200000000000000, 0x4, 0xb, 0x7fff}, 0x0, 0x0, 0x0, 0x0) shutdown(r8, 0x0) recvmmsg(r1, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) close(0x4) 3.715635321s ago: executing program 1 (id=2036): getpid() r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=@delchain={0x40, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}, {0x10, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 3.66540376s ago: executing program 5 (id=2037): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x183401, 0x0) pwrite64(r0, 0x0, 0x0, 0x6) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000087020301090224000100000010090417000244b1b60009050602ff0300000009058202ff03fe00"/54], 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x88}}}}}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x4c080}, 0x200080c0) 3.568750413s ago: executing program 1 (id=2038): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'veth1_to_bridge\x00', {0x4}, 0xb41b}) 3.509427747s ago: executing program 6 (id=2039): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x64f2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setparam(0x0, &(0x7f0000000340)=0xfffffff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) 3.508820609s ago: executing program 3 (id=2040): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x4, 0x1, 0xe56, 0xc6}, 'syz1\x00', 0x56}) sendmsg$nl_route(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x200048c0}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x200048c0}, 0x0) 3.397288793s ago: executing program 6 (id=2041): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f00000004c0), 0x0, 0x0, 0x1, 0x1}, 0x28) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)={0x14, 0x43, 0x9, 0x0, 0x3, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24000040) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4004885) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004c00)=""/102392, 0x18ff8) sendmsg$nl_route(r2, 0x0, 0x4044004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x18, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x1, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x4, 0x400, 0x0, 0x9, 0x4, 0x0, @multicast1, @empty}}}}) socket$netlink(0x10, 0x3, 0x13) 3.342794758s ago: executing program 3 (id=2042): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r0], 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49dd, 0xffff, 0x0, 0xc003, 0x3, "fa3d76170000001b"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='net_dev_xmit\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() r5 = mmap$IORING_OFF_SQES(&(0x7f0000059000/0x1000)=nil, 0x1000, 0x1000000, 0x30, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x5, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x69, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 2.538429858s ago: executing program 6 (id=2043): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x10, 0x1, 0xe2, 0xaf3, 0x7ff}, &(0x7f0000000340)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000380)={0x53, 0x5, 0x8, 0x1ff, 0x2a0f, 0x1, 0x9, 0x6, r4}, &(0x7f00000003c0)=0x20) prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x3, &(0x7f0000000180)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r6, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r6, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 2.479996822s ago: executing program 0 (id=2044): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00d}]}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0xc000, 0x0) chdir(0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB], 0xffdd) link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000280)='./bus\x00') mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x30000, &(0x7f0000000440)='.&[-\xa2-!\x00') bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85513, &(0x7f0000002600)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7b, 0x1, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) 2.427361608s ago: executing program 3 (id=2045): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x24, 0x29, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r8}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.291713198s ago: executing program 3 (id=2046): r0 = socket(0x0, 0x80009, 0x17) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x7d, 0x0, &(0x7f0000000180)) setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x14000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004000000040000000100020000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB="000000000400000000000000ffffffff0000000000000000000013"], 0x1d) (fail_nth: 3) 1.078505777s ago: executing program 0 (id=2047): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2402, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b32, 0xf1a) (async) ioctl$KDSETLED(r4, 0x4b32, 0xf1a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b00000000000000000000000000000000000001000300000000000000b40000000000000200000000000000000000007ffffffeffffffffffffffff040000000000000000000000000000000000000000000000000000000000000003000000000000000800000000000000fdffffffffffffff00000400000000d6e80a000000000000000000000a000300700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) dup3(r5, r0, 0x80000) (async) dup3(r5, r0, 0x80000) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb(compress_null-generic),blake2s-224-arm)\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb(compress_null-generic),blake2s-224-arm)\x00'}, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f0000002080)=0x68, 0x23b) write$sysctl(r9, &(0x7f00000002c0)='0\x00', 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e, 0x0, r9}, &(0x7f00000000c0), &(0x7f0000000100)) (async) r11 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e, 0x0, r9}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r14 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) dup(r14) (async) r15 = dup(r14) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r15, 0x0, 0x0, 0x0, 0x80800, 0x1}) (async) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r15, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r11, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r11, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.017468903s ago: executing program 3 (id=2048): r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r1, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0xfffe}, 0x80}], 0x1, 0x32000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) close(0x4) 1.00120693s ago: executing program 6 (id=2049): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4008881) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$caif_stream(0x25, 0x1, 0x0) recvmmsg(r7, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0xf6c8}], 0x1, 0x120, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x20}, 0x48) 919.757187ms ago: executing program 0 (id=2050): r0 = syz_open_dev$sndpcmp(0x0, 0x3, 0x183a00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x46, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xbbee, 0x81}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010000000000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100767469000c0002800800020019020000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2c9dafe5da9a74001fca129f83c08f9e9869d314a946e2a454a7ab46e4b71460f997", 0x22}, {&(0x7f0000000140)="e3c5d7bef08128cab9e38b0372dc62dce8ec7b6f774e69", 0x17}, {&(0x7f0000000440)="96e65d7218ac19fbffca5e518d14e03069589177457f97345dc2b951e9b45be29cc16a84b7cb53cd7f4bc9831fae48ecb04a589200c8e4dd5c48554234c5982e66e063cd0e64578724789491b00f8807af2cfef96a6fc9ed8206b5508683db65e29700f2c43e7fc6f30562b269c93c349092fe2483835a71568b7e2558d29c91674495fc1da50e97a31225eb1adc53394824becfa27c3aae579e45b21c590c47543e89ce72fe7606a8a0552d5aa2d6fa06d67b1169616436e6b615dd89d40c590971558fb55676c0a7e20e0daf97d185e11861ff9197a8c2ec2fa568342ffb698e51b8bde24e29bb766c90bc0432b2cbf84773375ee1e3948b", 0xf9}, {&(0x7f0000000540)="2e3411fe7dcd9cffa00eb1230cc960300313c0e7490605fb6cacaa1f191aab87c7a8fb4eb94b0cdfed3c039fd80ebacd12d074171f35cad66b94cd32418dff72b9ba0df62c8fddb68cd0182d9ba032fbbdeaf28514776cc69a3221d25a6f25ac73e8bb3b2990f31258db7a37428d81c0f7e533d7f1dcc048947385c00296a8f456ef5be48dc01ac65f99f34b0902a4ff6372559d325d9042cb2fcf69ee426e97d03dd3fa035e4d0b61946095da", 0xad}], 0x4, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x10}}, {{&(0x7f0000000740)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000007c0)="c637795a3c01d32f97553b5082b4472d5c9ebb0a03570d429e94478a11ccd3c4bdb302b5255db0d9abf640ed8a00603bc42f28f7a2e864dc02325ba26288f4e67ba3685ac8d558cb690a5649f097aafccc", 0x51}, {&(0x7f0000000840)="b09a8e79246d66bb3e", 0x9}, {&(0x7f0000000980)="fbd3a63fdd5e41c5b5ae827713cf57fdaffe4df9c9670027472d313ac5f35f87df3edb5d4ac062be96c4e5103a3e75ed168068dbae3be9196063486ce6452f4380e961a43bab6f3d2d6c141c45825a97cc3bbbd94474aed333a49fa79f84ea2205abbf57249b4506d0637005837c8e7bd453feea398c570396ed39f0eb35b29045da707684e9725311ebdb60fff894e7f1d376ee95eac3afd3d1542fd2e20c68d995ff18e8c76511ac4e9844e7f506601bc0a1568e05", 0xb6}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="300000005a595e3e88da9982c374dd2b", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1], 0x88, 0x4800}}], 0x2, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000080)) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, 0x0, 0x24044884) socket$unix(0x1, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x140002, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 375.927781ms ago: executing program 5 (id=2051): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff62, &(0x7f0000000280)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ed", @ANYRES32=0x1, @ANYBLOB="1700"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="04000000000000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000006433e8cef2703554000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85513, &(0x7f0000000b00)={{0xa, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000004, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x80, 0x0, 0x0, 0x8, 0x10001, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x10000, 0xa3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0xfffffffffffff1c5, 0x8, 0x0, 0x3, 0x3, 0x20000, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x80000001, 0x6, 0x0, 0x7, 0x0, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x1, 0x6, 0x0, 0x0, 0x1, 0xc675, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x100, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='geneve0\x00', 0x2, 0x3, 0x80}) r7 = syz_io_uring_setup(0x3b, &(0x7f0000000480)={0x0, 0x36c7, 0x10100}, 0x0, &(0x7f0000000240)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000280)=""/204, 0xcc}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r7, 0xd81, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=2052): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x64f2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setparam(0x0, &(0x7f0000000340)=0xfffffff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) kernel console output (not intermixed with test programs): 365][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.734662][T10537] team0: Port device team_slave_0 added [ 456.763724][T10537] team0: Port device team_slave_1 added [ 456.912282][T10537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.926700][T10537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.090776][ T5848] Bluetooth: hci5: command tx timeout [ 457.104324][T10537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.128807][T10537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.137240][T10537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.176428][T10537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.378052][T10537] hsr_slave_0: entered promiscuous mode [ 457.394018][T10537] hsr_slave_1: entered promiscuous mode [ 457.409898][T10537] debugfs: 'hsr0' already exists in 'hsr' [ 457.422942][T10537] Cannot create hsr debugfs directory [ 457.446509][ T37] bridge_slave_1: left allmulticast mode [ 457.457526][ T37] bridge_slave_1: left promiscuous mode [ 457.469597][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.489043][ T37] bridge_slave_0: left allmulticast mode [ 457.501088][ T37] bridge_slave_0: left promiscuous mode [ 457.507231][ T5954] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 457.521515][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.677076][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 457.688384][ T5954] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.704750][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 457.730472][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 457.762437][ T5954] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 457.789233][ T5954] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.820240][ T5954] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 457.833550][ T5954] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 457.853213][ T5954] usb 4-1: Manufacturer: syz [ 457.872560][ T5954] usb 4-1: config 0 descriptor?? [ 458.258160][ T5954] rc_core: IR keymap rc-hauppauge not found [ 458.286233][ T5954] Registered IR keymap rc-empty [ 458.298891][ T5954] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 458.357525][ T5954] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 458.435572][ T5954] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 458.451531][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.499350][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.530504][ T5954] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29 [ 458.552258][ T37] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 458.566862][ T9879] misc userio: Buffer overflowed, userio client isn't keeping up [ 458.615969][ T5954] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 458.624312][ T37] bond0 (unregistering): Released all slaves [ 458.666951][ T5954] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 458.703072][ T5954] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 458.753375][ T5954] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 458.896948][ T5954] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 458.954084][ T5954] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 458.987783][ T5954] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 459.037068][ T5954] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 459.056916][ T5954] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 459.106881][ T5848] Bluetooth: hci5: command tx timeout [ 459.167875][ T5954] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 459.189150][ T5954] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 459.224550][T10611] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1155'. [ 459.247952][ T5954] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 459.585971][ T5954] usb 4-1: USB disconnect, device number 23 [ 459.652255][ T9879] input: PS/2 Generic Mouse as /devices/serio3/input/input28 [ 460.193237][ T9879] psmouse serio3: Failed to enable mouse on [ 460.343951][T10611] syz.5.1155 (10611): drop_caches: 2 [ 461.477757][ T37] hsr_slave_0: left promiscuous mode [ 461.887109][ T37] hsr_slave_1: left promiscuous mode [ 461.985467][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.046903][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.415570][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.458340][T10644] overlayfs: missing 'lowerdir' [ 462.544276][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.795736][ T37] veth1_macvtap: left promiscuous mode [ 462.855009][ T37] veth0_macvtap: left promiscuous mode [ 462.913482][ T37] veth1_vlan: left promiscuous mode [ 462.964720][ T37] veth0_vlan: left promiscuous mode [ 465.313396][ T37] team0 (unregistering): Port device team_slave_1 removed [ 465.368125][ T37] team0 (unregistering): Port device team_slave_0 removed [ 465.418225][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 465.587127][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 465.597876][ T10] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 465.605976][ T10] usb 4-1: config 0 has no interface number 0 [ 465.621561][ T10] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 465.631564][ T10] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 465.655559][ T10] usb 4-1: config 0 interface 41 has no altsetting 0 [ 465.687192][ T10] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 465.696257][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.718496][ T10] usb 4-1: Product: syz [ 465.722714][ T10] usb 4-1: Manufacturer: syz [ 465.733416][ T10] usb 4-1: SerialNumber: syz [ 465.751976][ T10] usb 4-1: config 0 descriptor?? [ 465.778726][T10661] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 465.786020][T10661] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 465.989267][T10636] netlink: 'syz.1.1160': attribute type 25 has an invalid length. [ 466.060187][T10661] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 466.100009][T10661] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 466.420619][T10537] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 466.512835][T10537] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 466.773702][ T10] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 467.314763][T10537] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 467.640594][T10537] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 468.752721][ T10] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 468.790790][ T10] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 468.800956][ T10] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 468.816063][ T10] usb 4-1: USB disconnect, device number 24 [ 468.900552][T10669] delete_channel: no stack [ 468.930132][ T30] audit: type=1400 audit(1983223170.758:590): avc: denied { getopt } for pid=10691 comm="syz.3.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 469.484201][T10537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.549566][ T37] IPVS: stop unused estimator thread 0... [ 469.739754][T10537] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.391005][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.398152][ T6271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.473691][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.480855][ T6271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.900246][T10537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.384795][T10537] veth0_vlan: entered promiscuous mode [ 474.519338][T10537] veth1_vlan: entered promiscuous mode [ 475.252045][T10537] veth0_macvtap: entered promiscuous mode [ 475.286383][T10537] veth1_macvtap: entered promiscuous mode [ 475.959842][T10537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.006991][ T5954] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 476.024090][T10537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.203553][T10446] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.220171][ T5954] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.244676][T10446] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.263210][ T2982] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.275350][ T5954] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.295549][ T2982] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.320772][ T5954] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.339896][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1187'. [ 476.362753][ T5954] usb 6-1: config 1 interface 1 has no altsetting 1 [ 476.376057][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'. [ 476.390580][ T5954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 476.419717][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.432240][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.441280][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.458838][ T5954] usb 6-1: Product: syz [ 476.471185][ T5954] usb 6-1: Manufacturer: syz [ 476.488181][ T5954] usb 6-1: SerialNumber: syz [ 476.500126][ T5954] usb 6-1: selecting invalid altsetting 1 [ 476.527984][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.536950][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1187'. [ 476.559352][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.753508][T10446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.786470][T10446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.892454][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.062954][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.893891][ T5954] cdc_ncm 6-1:1.0: bind() failure [ 478.196143][ T5954] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 478.203598][ T5954] cdc_ncm 6-1:1.1: bind() failure [ 478.215379][ T5954] usb 6-1: USB disconnect, device number 5 [ 484.330976][ T30] audit: type=1400 audit(1983223186.158:591): avc: denied { setattr } for pid=10888 comm="syz.6.1211" name="KEY" dev="sockfs" ino=29516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 485.148258][ T30] audit: type=1400 audit(1983223186.198:592): avc: denied { ioctl } for pid=10888 comm="syz.6.1211" path="socket:[29517]" dev="sockfs" ino=29517 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 485.189506][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 485.293681][ T30] audit: type=1400 audit(1983223186.208:593): avc: denied { ioctl } for pid=10888 comm="syz.6.1211" path="socket:[29516]" dev="sockfs" ino=29516 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 485.369951][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 486.104493][ T9] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 486.113098][ T9] usb 6-1: config 0 has no interface number 0 [ 486.126225][ T9] usb 6-1: config 0 interface 184 has no altsetting 0 [ 486.145352][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 486.156570][ T9] usb 6-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 486.203208][ T9] usb 6-1: Product: syz [ 486.213203][ T9] usb 6-1: Manufacturer: syz [ 486.231505][ T9] usb 6-1: SerialNumber: syz [ 486.252888][ T9] usb 6-1: config 0 descriptor?? [ 486.275167][ T9] smsc75xx v1.0.0 [ 486.668245][ T5848] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 486.750341][ T30] audit: type=1400 audit(1983223188.468:594): avc: denied { listen } for pid=10918 comm="syz.3.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 486.948537][ T30] audit: type=1400 audit(1983223188.538:595): avc: denied { accept } for pid=10918 comm="syz.3.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 487.402708][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 487.415755][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 487.696264][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 487.813717][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 487.839365][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 487.864782][ T9] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 487.933030][ T9] usb 6-1: USB disconnect, device number 6 [ 491.341943][ T30] audit: type=1400 audit(1983223193.178:596): avc: denied { write } for pid=10995 comm="syz.5.1234" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 491.367103][T10996] wlan0 speed is unknown, defaulting to 1000 [ 491.393851][T10996] wlan0 speed is unknown, defaulting to 1000 [ 491.485044][T10996] wlan0 speed is unknown, defaulting to 1000 [ 491.552449][T10996] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 491.633705][T10996] wlan0 speed is unknown, defaulting to 1000 [ 491.694721][T10996] wlan0 speed is unknown, defaulting to 1000 [ 491.743600][T10996] wlan0 speed is unknown, defaulting to 1000 [ 491.795998][T10996] wlan0 speed is unknown, defaulting to 1000 [ 491.890228][T10996] wlan0 speed is unknown, defaulting to 1000 [ 491.930667][T10996] wlan0 speed is unknown, defaulting to 1000 [ 495.156909][ T5899] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 496.286826][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 496.297869][ T5899] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 496.341781][ T5899] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 496.421010][ T5899] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 496.459665][ T5899] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 496.483928][ T5899] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 496.512911][ T5899] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.580624][ T5899] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 496.637021][ T44] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 496.776247][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.396857][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 497.436464][ T44] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 497.463055][ T5899] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 497.483514][ T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 497.620667][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 497.706968][ T9] usb 2-1: USB disconnect, device number 28 [ 497.729444][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 497.819264][ T44] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.976873][ T44] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 497.985945][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.591021][ T44] usb 4-1: GET_CAPABILITIES returned 0 [ 498.617709][ T44] usbtmc 4-1:16.0: can't read capabilities [ 498.789968][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1259'. [ 498.873709][T11068] usb 4-1: usbtmc_ioctl_clear_in_halt returned -32 [ 498.928767][ T9] usb 4-1: USB disconnect, device number 25 [ 499.188066][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1261'. [ 499.207608][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 499.868145][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 499.884505][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.919609][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 499.965156][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 500.050189][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.118953][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 500.150432][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.170886][ T10] usb 2-1: Product: syz [ 500.175070][ T10] usb 2-1: Manufacturer: syz [ 500.201384][ T10] usb 2-1: SerialNumber: syz [ 500.219400][ T10] usb 2-1: config 0 descriptor?? [ 500.377867][ T10] rc_core: IR keymap rc-xbox-dvd not found [ 500.400158][ T10] Registered IR keymap rc-empty [ 500.427822][ T10] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 500.466197][ T10] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input30 [ 500.801707][ T5899] usb 2-1: USB disconnect, device number 29 [ 500.801771][ C0] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 501.123331][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.251861][T11165] binder: 11153:11165 ioctl c0306201 2000000001c0 returned -22 [ 502.318152][ T30] audit: type=1400 audit(1983223204.158:597): avc: denied { listen } for pid=11153 comm="syz.3.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 502.361637][T11165] netlink: 'syz.3.1268': attribute type 4 has an invalid length. [ 502.475733][ T44] lo speed is unknown, defaulting to 1000 [ 502.540949][T11165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=11165 comm=syz.3.1268 [ 502.565351][ T44] 3yz0: Port: 1 Link DOWN [ 502.911388][T11187] lo speed is unknown, defaulting to 1000 [ 502.918985][T11187] lo speed is unknown, defaulting to 1000 [ 502.932541][T11187] lo speed is unknown, defaulting to 1000 [ 503.013622][T11187] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 503.329756][T11187] lo speed is unknown, defaulting to 1000 [ 503.340295][T11187] lo speed is unknown, defaulting to 1000 [ 503.346831][T11187] lo speed is unknown, defaulting to 1000 [ 503.354432][T11187] lo speed is unknown, defaulting to 1000 [ 503.361513][T11187] lo speed is unknown, defaulting to 1000 [ 503.368633][T11187] lo speed is unknown, defaulting to 1000 [ 504.802061][T11204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1277'. [ 507.752057][T11245] syzkaller1: entered promiscuous mode [ 507.791323][T11245] syzkaller1: entered allmulticast mode [ 508.842745][T11260] ipvlan2: entered promiscuous mode [ 508.854408][ T5899] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 509.128992][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 509.136595][ T5899] usb 6-1: config 0 interface 0 has no altsetting 0 [ 509.173769][ T5899] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 509.183236][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.191345][ T5899] usb 6-1: Product: syz [ 509.195614][ T5899] usb 6-1: Manufacturer: syz [ 509.311759][ T5899] usb 6-1: SerialNumber: syz [ 509.426872][ T5899] usb 6-1: config 0 descriptor?? [ 509.531325][ T5899] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 509.627339][T11283] pim6reg1: entered promiscuous mode [ 509.632930][T11283] pim6reg1: entered allmulticast mode [ 509.723046][ T5899] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 509.731148][ T5899] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 509.749116][ T5899] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 509.974320][ T30] audit: type=1400 audit(1983223211.788:598): avc: denied { write } for pid=11251 comm="syz.5.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 511.071176][ T5920] usb 6-1: USB disconnect, device number 7 [ 512.500859][T11319] delete_channel: no stack [ 513.768683][T11355] FAULT_INJECTION: forcing a failure. [ 513.768683][T11355] name failslab, interval 1, probability 0, space 0, times 0 [ 513.787905][T11355] CPU: 0 UID: 0 PID: 11355 Comm: syz.6.1304 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 513.787932][T11355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.787942][T11355] Call Trace: [ 513.787949][T11355] [ 513.787956][T11355] dump_stack_lvl+0x16c/0x1f0 [ 513.787986][T11355] should_fail_ex+0x512/0x640 [ 513.788013][T11355] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 513.788035][T11355] should_failslab+0xc2/0x120 [ 513.788056][T11355] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 513.788072][T11355] ? do_preadv+0x1a6/0x270 [ 513.788086][T11355] ? do_syscall_64+0xcd/0x4c0 [ 513.788111][T11355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.788128][T11355] ? ptlock_alloc+0x1f/0x70 [ 513.788164][T11355] ptlock_alloc+0x1f/0x70 [ 513.788189][T11355] pte_alloc_one+0x82/0x3a0 [ 513.788210][T11355] __pte_alloc+0x6d/0x3c0 [ 513.788231][T11355] ? __pfx___pte_alloc+0x10/0x10 [ 513.788250][T11355] ? __lock_acquire+0x62e/0x1ce0 [ 513.788283][T11355] do_pte_missing+0x285a/0x3ba0 [ 513.788310][T11355] ? mtree_range_walk+0x718/0xc00 [ 513.788335][T11355] ? find_held_lock+0x2b/0x80 [ 513.788358][T11355] __handle_mm_fault+0x152a/0x2a50 [ 513.788392][T11355] ? __pfx___handle_mm_fault+0x10/0x10 [ 513.788442][T11355] handle_mm_fault+0x589/0xd10 [ 513.788474][T11355] __get_user_pages+0x551/0x34a0 [ 513.788506][T11355] ? find_held_lock+0x2b/0x80 [ 513.788527][T11355] ? __pfx___get_user_pages+0x10/0x10 [ 513.788558][T11355] get_user_pages_remote+0x243/0xab0 [ 513.788581][T11355] ? mas_parent_gap+0x6f0/0x7b0 [ 513.788608][T11355] ? __pfx_get_user_pages_remote+0x10/0x10 [ 513.788635][T11355] ? __lock_acquire+0xb97/0x1ce0 [ 513.788665][T11355] __access_remote_vm+0x24d/0x850 [ 513.788691][T11355] ? do_raw_spin_lock+0x12c/0x2b0 [ 513.788710][T11355] ? __pfx___access_remote_vm+0x10/0x10 [ 513.788731][T11355] ? environ_read+0x214/0x450 [ 513.788753][T11355] environ_read+0x31e/0x450 [ 513.788774][T11355] ? __pfx_environ_read+0x10/0x10 [ 513.788789][T11355] vfs_readv+0x5be/0x8b0 [ 513.788812][T11355] ? __pfx_vfs_readv+0x10/0x10 [ 513.788828][T11355] ? find_held_lock+0x2b/0x80 [ 513.788866][T11355] ? __fget_files+0x20e/0x3c0 [ 513.788892][T11355] ? do_preadv+0x1a6/0x270 [ 513.788906][T11355] do_preadv+0x1a6/0x270 [ 513.788923][T11355] ? __pfx_do_preadv+0x10/0x10 [ 513.788947][T11355] do_syscall_64+0xcd/0x4c0 [ 513.788974][T11355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.788992][T11355] RIP: 0033:0x7f6c63d8eb69 [ 513.789006][T11355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.789023][T11355] RSP: 002b:00007f6c64be2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 513.789039][T11355] RAX: ffffffffffffffda RBX: 00007f6c63fb6160 RCX: 00007f6c63d8eb69 [ 513.789050][T11355] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000006 [ 513.789060][T11355] RBP: 00007f6c64be2090 R08: 0000000000000000 R09: 0000000000000000 [ 513.789070][T11355] R10: 0000000000c002a0 R11: 0000000000000246 R12: 0000000000000001 [ 513.789080][T11355] R13: 0000000000000000 R14: 00007f6c63fb6160 R15: 00007fff1c895a88 [ 513.789105][T11355] [ 518.442680][T11404] delete_channel: no stack [ 523.048608][T11484] delete_channel: no stack [ 526.983098][T11541] delete_channel: no stack [ 532.387211][ T5900] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 532.507314][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1365'. [ 532.677085][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 532.685723][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 532.715191][ T5900] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 532.728380][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.736543][ T5900] usb 4-1: Product: syz [ 532.745267][ T5900] usb 4-1: Manufacturer: syz [ 532.752482][ T5900] usb 4-1: SerialNumber: syz [ 532.763096][ T5900] usb 4-1: config 0 descriptor?? [ 532.776538][ T5900] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 532.950227][T11635] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1369'. [ 534.195748][ T9] usb 4-1: USB disconnect, device number 26 [ 534.953505][T11650] delete_channel: no stack [ 538.921303][T11696] delete_channel: no stack [ 539.028277][T11686] Bluetooth: hci0: command 0x0406 tx timeout [ 539.517767][ T30] audit: type=1400 audit(1983223241.348:599): avc: denied { bind } for pid=11716 comm="syz.0.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 541.369196][ T30] audit: type=1400 audit(1983223243.208:600): avc: denied { write } for pid=11749 comm="syz.3.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 542.180772][T11764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1406'. [ 542.255028][T11764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1406'. [ 542.575111][T11760] SELinux: failed to load policy [ 548.029672][T11810] delete_channel: no stack [ 548.523676][ T5920] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 548.706812][ T5920] usb 1-1: device descriptor read/64, error -71 [ 548.884149][T11838] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1426'. [ 548.893488][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1426'. [ 549.318077][T11839] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1427'. [ 549.337038][ T5920] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 549.827034][ T5920] usb 1-1: device descriptor read/64, error -71 [ 550.496305][ T5920] usb usb1-port1: attempt power cycle [ 550.987067][ T5920] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 551.036946][ T5899] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 551.197018][ T5899] usb 2-1: device descriptor read/64, error -71 [ 551.451869][ T5920] usb 1-1: device descriptor read/8, error -71 [ 551.511870][T11859] delete_channel: no stack [ 551.606185][T11872] FAULT_INJECTION: forcing a failure. [ 551.606185][T11872] name failslab, interval 1, probability 0, space 0, times 0 [ 551.626068][T11872] CPU: 1 UID: 0 PID: 11872 Comm: syz.5.1437 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 551.626095][T11872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.626106][T11872] Call Trace: [ 551.626111][T11872] [ 551.626119][T11872] dump_stack_lvl+0x16c/0x1f0 [ 551.626150][T11872] should_fail_ex+0x512/0x640 [ 551.626182][T11872] should_failslab+0xc2/0x120 [ 551.626203][T11872] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 551.626222][T11872] ? skb_clone+0x190/0x3f0 [ 551.626252][T11872] skb_clone+0x190/0x3f0 [ 551.626282][T11872] netlink_deliver_tap+0xabd/0xd30 [ 551.626315][T11872] netlink_unicast+0x64c/0x870 [ 551.626345][T11872] ? __pfx_netlink_unicast+0x10/0x10 [ 551.626371][T11872] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 551.626406][T11872] netlink_sendmsg+0x8d1/0xdd0 [ 551.626437][T11872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.626473][T11872] ____sys_sendmsg+0xa98/0xc70 [ 551.626494][T11872] ? copy_msghdr_from_user+0x10a/0x160 [ 551.626518][T11872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.626550][T11872] ___sys_sendmsg+0x134/0x1d0 [ 551.626576][T11872] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.626625][T11872] ? __mutex_unlock_slowpath+0x100/0x800 [ 551.626660][T11872] __sys_sendmsg+0x16d/0x220 [ 551.626686][T11872] ? __pfx___sys_sendmsg+0x10/0x10 [ 551.626725][T11872] do_syscall_64+0xcd/0x4c0 [ 551.626760][T11872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.626777][T11872] RIP: 0033:0x7f6485d8eb69 [ 551.626791][T11872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.626808][T11872] RSP: 002b:00007f6486caa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.626825][T11872] RAX: ffffffffffffffda RBX: 00007f6485fb5fa0 RCX: 00007f6485d8eb69 [ 551.626836][T11872] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 551.626846][T11872] RBP: 00007f6486caa090 R08: 0000000000000000 R09: 0000000000000000 [ 551.626856][T11872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.626865][T11872] R13: 0000000000000000 R14: 00007f6485fb5fa0 R15: 00007ffe7b69dc48 [ 551.626889][T11872] [ 551.884281][ T5899] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 552.016815][ T5899] usb 2-1: device descriptor read/64, error -71 [ 552.127323][ T5899] usb usb2-port1: attempt power cycle [ 552.387204][T11885] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1440'. [ 552.477064][ T5899] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 552.586831][ T5899] usb 2-1: device descriptor read/8, error -71 [ 552.604300][T11872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.672654][T11872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.731430][T11872] bond0 (unregistering): Released all slaves [ 552.871812][ T5899] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 552.875258][T11889] bridge_slave_0: left allmulticast mode [ 552.918662][ T5899] usb 2-1: device descriptor read/8, error -71 [ 552.960399][T11889] bridge_slave_0: left promiscuous mode [ 553.000246][T11889] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.196987][ T5899] usb usb2-port1: unable to enumerate USB device [ 553.344252][T11889] bridge_slave_1: left allmulticast mode [ 553.350111][T11889] bridge_slave_1: left promiscuous mode [ 553.356390][T11889] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.382634][T11889] bond0: (slave bond_slave_0): Releasing backup interface [ 553.403021][T11889] bond0: (slave bond_slave_1): Releasing backup interface [ 553.435595][T11889] team0: Port device C removed [ 553.458408][T11889] team0: Port device team_slave_1 removed [ 553.467188][T11889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.474715][T11889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.487304][T11889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.495799][T11889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.244115][T11920] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1450'. [ 555.626181][T11923] tipc: Enabled bearer , priority 0 [ 555.674049][T11923] syzkaller0: entered promiscuous mode [ 555.726612][T11923] syzkaller0: entered allmulticast mode [ 555.743725][T11930] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.1454' resets device [ 556.591419][ T30] audit: type=1400 audit(1983223258.418:601): avc: denied { getopt } for pid=11947 comm="syz.0.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 556.648018][ T30] audit: type=1400 audit(1983223258.478:602): avc: denied { getopt } for pid=11947 comm="syz.0.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 556.688168][ T30] audit: type=1400 audit(1983223258.488:603): avc: denied { bind } for pid=11947 comm="syz.0.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 556.719406][ T30] audit: type=1400 audit(1983223258.488:604): avc: denied { listen } for pid=11947 comm="syz.0.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 556.745635][ T30] audit: type=1400 audit(1983223258.528:605): avc: denied { accept } for pid=11947 comm="syz.0.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 556.772319][ T5920] tipc: Node number set to 1228234340 [ 557.809053][T11927] tipc: Resetting bearer [ 557.891882][T11933] bond0 (unregistering): Released all slaves [ 557.917040][T11922] tipc: Resetting bearer [ 557.990946][ T5920] IPVS: starting estimator thread 0... [ 557.998700][T11922] tipc: Disabling bearer [ 558.379922][T11953] IPVS: using max 72 ests per chain, 172800 per kthread [ 559.886998][T11979] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1467'. [ 561.840919][ T5899] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 561.894120][T12011] FAULT_INJECTION: forcing a failure. [ 561.894120][T12011] name failslab, interval 1, probability 0, space 0, times 0 [ 561.921932][T12011] CPU: 1 UID: 0 PID: 12011 Comm: syz.0.1476 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 561.921958][T12011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 561.921968][T12011] Call Trace: [ 561.921974][T12011] [ 561.921981][T12011] dump_stack_lvl+0x16c/0x1f0 [ 561.922010][T12011] should_fail_ex+0x512/0x640 [ 561.922035][T12011] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 561.922063][T12011] should_failslab+0xc2/0x120 [ 561.922083][T12011] __kmalloc_cache_noprof+0x6a/0x3e0 [ 561.922108][T12011] ? alloc_fs_context+0x57/0x9c0 [ 561.922133][T12011] alloc_fs_context+0x57/0x9c0 [ 561.922157][T12011] path_mount+0xbbf/0x1fd0 [ 561.922184][T12011] ? __pfx_path_mount+0x10/0x10 [ 561.922208][T12011] ? kmem_cache_free+0x2d1/0x4d0 [ 561.922224][T12011] ? putname+0x154/0x1a0 [ 561.922250][T12011] ? putname+0x154/0x1a0 [ 561.922274][T12011] ? __x64_sys_mount+0x28d/0x310 [ 561.922294][T12011] __x64_sys_mount+0x28d/0x310 [ 561.922316][T12011] ? __pfx___x64_sys_mount+0x10/0x10 [ 561.922346][T12011] do_syscall_64+0xcd/0x4c0 [ 561.922374][T12011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.922392][T12011] RIP: 0033:0x7f2e6598eb69 [ 561.922406][T12011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.922423][T12011] RSP: 002b:00007f2e66867038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 561.922440][T12011] RAX: ffffffffffffffda RBX: 00007f2e65bb5fa0 RCX: 00007f2e6598eb69 [ 561.922451][T12011] RDX: 0000200000000300 RSI: 00002000000000c0 RDI: 0000200000000180 [ 561.922461][T12011] RBP: 00007f2e66867090 R08: 0000000000000000 R09: 0000000000000000 [ 561.922472][T12011] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000002 [ 561.922482][T12011] R13: 0000000000000000 R14: 00007f2e65bb5fa0 R15: 00007ffcebf2daa8 [ 561.922503][T12011] [ 562.257092][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 562.265541][ T5899] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 562.274657][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.282811][ T5899] usb 2-1: Product: syz [ 562.287011][ T5899] usb 2-1: Manufacturer: syz [ 562.291597][ T5899] usb 2-1: SerialNumber: syz [ 562.298984][ T5899] usb 2-1: config 0 descriptor?? [ 562.313037][ T5899] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 562.356795][ T44] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 562.553526][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.976800][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 563.001414][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.201676][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.276193][ T44] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 563.299331][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.341485][ T44] usb 6-1: config 0 descriptor?? [ 563.973658][T12001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.107451][ T5899] gspca_ov534_9: reg_w failed -110 [ 564.209598][T12001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.448073][ T30] audit: type=1400 audit(1983223266.288:606): avc: denied { append } for pid=12042 comm="syz.0.1484" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 564.499638][ T30] audit: type=1400 audit(1983223266.308:607): avc: denied { read } for pid=12042 comm="syz.0.1484" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 564.536781][ T30] audit: type=1400 audit(1983223266.308:608): avc: denied { open } for pid=12042 comm="syz.0.1484" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 564.566993][ T5899] gspca_ov534_9: Unknown sensor 0000 [ 564.567068][ T5899] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 564.624055][ T44] corsair 0003:1B1C:1B02.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 564.781450][ T30] audit: type=1400 audit(1983223266.308:609): avc: denied { ioctl } for pid=12042 comm="syz.0.1484" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x54dd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 564.807572][ T30] audit: type=1400 audit(1983223266.318:610): avc: denied { shutdown } for pid=12042 comm="syz.0.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 565.942211][ T44] corsair 0003:1B1C:1B02.000A: Failed to get K90 initial state (error -71). [ 566.225501][ T44] usb 6-1: USB disconnect, device number 8 [ 566.312185][ T24] usb 2-1: USB disconnect, device number 34 [ 567.178832][T12074] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1492'. [ 570.271720][T12108] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 570.585311][T12112] ubi31: detaching mtd0 [ 570.604519][T12112] ubi31: mtd0 is detached [ 571.280759][ T9] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 571.446880][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 571.939062][ T9] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 572.212432][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 572.235393][ T9] usb usb4-port1: attempt power cycle [ 572.256940][ T30] audit: type=1400 audit(1983223274.088:611): avc: denied { cmd } for pid=12122 comm="syz.5.1506" path="socket:[33748]" dev="sockfs" ino=33748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 572.396229][ T30] audit: type=1326 audit(1983223274.218:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.0.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6598eb69 code=0x7ffc0000 [ 572.523480][T12134] sctp: [Deprecated]: syz.0.1509 (pid 12134) Use of int in maxseg socket option. [ 572.523480][T12134] Use struct sctp_assoc_value instead [ 572.798849][ T30] audit: type=1326 audit(1983223274.218:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.0.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6598eb69 code=0x7ffc0000 [ 572.822515][ T9] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 572.894979][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 573.022909][ T30] audit: type=1326 audit(1983223274.278:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.0.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e6598d61f code=0x7ffc0000 [ 573.047262][ T30] audit: type=1326 audit(1983223274.278:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.0.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6598eb69 code=0x7ffc0000 [ 573.159046][ T9] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 573.166797][ T30] audit: type=1326 audit(1983223274.278:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.0.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6598eb69 code=0x7ffc0000 [ 573.202946][ T30] audit: type=1326 audit(1983223274.298:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.0.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2e6598eb69 code=0x7ffc0000 [ 573.226625][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 573.233789][ T9] usb usb4-port1: unable to enumerate USB device [ 573.313863][ T30] audit: type=1326 audit(1983223274.298:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.0.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6598eb69 code=0x7ffc0000 [ 573.690604][ T30] audit: type=1326 audit(1983223274.298:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.0.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e6598eb69 code=0x7ffc0000 [ 574.119770][ T30] audit: type=1326 audit(1983223274.298:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.0.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6598eb69 code=0x7ffc0000 [ 574.761531][T12152] lo speed is unknown, defaulting to 1000 [ 574.785267][T12152] wlan0 speed is unknown, defaulting to 1000 [ 574.849613][T12152] lo speed is unknown, defaulting to 1000 [ 575.207668][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 575.349795][T10446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.180258][T12166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.206142][T12166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.242854][T12166] bond0 (unregistering): Released all slaves [ 576.679234][ T3007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.701556][T12169] delete_channel: no stack [ 578.715709][T12205] Bluetooth: MGMT ver 1.23 [ 578.831617][T12209] netlink: 'syz.6.1527': attribute type 1 has an invalid length. [ 578.839529][T12209] netlink: 'syz.6.1527': attribute type 4 has an invalid length. [ 578.847879][T12209] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.1527'. [ 578.878017][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 578.878033][ T30] audit: type=1326 audit(1983223280.598:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c63d8eb69 code=0x7ffc0000 [ 578.913804][ T30] audit: type=1326 audit(1983223280.598:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6c63d8eb69 code=0x7ffc0000 [ 578.937419][ T30] audit: type=1326 audit(1983223280.598:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c63d8eb69 code=0x7ffc0000 [ 579.170544][ T30] audit: type=1326 audit(1983223280.608:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c63d8eb69 code=0x7ffc0000 [ 579.386579][ T30] audit: type=1326 audit(1983223280.608:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6c63d8eb69 code=0x7ffc0000 [ 579.523267][ T30] audit: type=1326 audit(1983223280.608:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c63d8eb69 code=0x7ffc0000 [ 580.023296][ T30] audit: type=1326 audit(1983223280.608:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6c63d8eb69 code=0x7ffc0000 [ 580.454311][ T30] audit: type=1326 audit(1983223280.608:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c63d8eb69 code=0x7ffc0000 [ 580.478708][ T30] audit: type=1326 audit(1983223280.608:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f6c63d8eb69 code=0x7ffc0000 [ 580.677927][ T5954] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 580.701869][ T30] audit: type=1326 audit(1983223280.618:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.6.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c63d8eb69 code=0x7ffc0000 [ 580.841574][ T5954] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 580.860073][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.902926][ T5954] usb 4-1: config 0 descriptor?? [ 580.928954][ T5954] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 581.017419][ T5954] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 581.112159][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.332316][ T5954] usb 4-1: USB disconnect, device number 31 [ 581.426260][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1541'. [ 582.061728][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1547'. [ 582.191148][ T5899] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 582.209499][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1547'. [ 582.221366][T12262] netlink: 'syz.1.1547': attribute type 12 has an invalid length. [ 582.229967][T12262] netlink: 'syz.1.1547': attribute type 13 has an invalid length. [ 582.359232][ T5899] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.391755][T10446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 584.040345][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 585.024711][ T5899] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 585.034185][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.055271][ T5899] usb 6-1: config 0 descriptor?? [ 585.079594][ T5899] usb 6-1: can't set config #0, error -71 [ 585.109564][ T5899] usb 6-1: USB disconnect, device number 9 [ 585.557920][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'. [ 586.314703][ T6032] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 586.925050][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 586.925878][ T30] audit: type=1400 audit(1983223288.758:683): avc: denied { create } for pid=12303 comm="syz.0.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 587.206263][ T30] audit: type=1400 audit(1983223288.798:684): avc: denied { write } for pid=12303 comm="syz.0.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 588.208126][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 588.597346][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 588.746855][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 588.765349][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 588.916920][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.027010][ T5920] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 589.047196][ T24] usb 6-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 589.064369][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 589.215362][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 589.688493][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.701289][ T24] usb 6-1: Product: syz [ 589.706836][ T24] usb 6-1: Manufacturer: syz [ 589.716068][ T24] usb 6-1: SerialNumber: syz [ 589.737778][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.760315][ T5920] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 589.786516][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.814036][ T5920] usb 1-1: config 0 descriptor?? [ 590.011854][T12319] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 590.479320][T12328] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1567'. [ 590.508587][ T5920] smartjoyplus 0003:6666:8804.000B: item fetching failed at offset 2/5 [ 590.561650][ T5920] smartjoyplus 0003:6666:8804.000B: parse failed [ 590.579670][ T5920] smartjoyplus 0003:6666:8804.000B: probe with driver smartjoyplus failed with error -22 [ 590.686723][ C1] hrtimer: interrupt took 42742 ns [ 590.691393][ T5920] usb 1-1: USB disconnect, device number 20 [ 590.878612][T12352] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1573'. [ 590.907345][T12354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1574'. [ 591.096923][T12356] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12356 comm=syz.1.1574 [ 591.230836][ T24] usb 6-1: bad CDC descriptors [ 591.427371][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 591.502143][ T24] usb 6-1: USB disconnect, device number 10 [ 592.272503][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 592.281831][T12370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1577'. [ 592.407042][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 592.578995][T12368] delete_channel: no stack [ 592.714326][ T24] usb 6-1: config 255 has an invalid interface number: 20 but max is 0 [ 592.955313][ T24] usb 6-1: config 255 has no interface number 0 [ 592.984602][ T24] usb 6-1: config 255 interface 20 has no altsetting 0 [ 592.990055][ T30] audit: type=1400 audit(1983223294.828:685): avc: denied { mount } for pid=12377 comm="syz.0.1583" name="/" dev="configfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 593.019734][ T30] audit: type=1400 audit(1983223294.858:686): avc: denied { search } for pid=12377 comm="syz.0.1583" name="/" dev="configfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 593.044157][ T30] audit: type=1400 audit(1983223294.858:687): avc: denied { search } for pid=12377 comm="syz.0.1583" name="/" dev="configfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 593.110385][ T24] usb 6-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 593.306792][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.314876][ T24] usb 6-1: Product: syz [ 593.319134][ T24] usb 6-1: Manufacturer: syz [ 593.323908][ T24] usb 6-1: SerialNumber: syz [ 593.341940][ T30] audit: type=1400 audit(1983223294.858:688): avc: denied { search } for pid=12377 comm="syz.0.1583" name="/" dev="configfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 593.367055][ T30] audit: type=1400 audit(1983223294.958:689): avc: denied { listen } for pid=12376 comm="syz.1.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 593.576854][ T5920] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 594.107196][ T2982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 594.341667][T12363] PKCS7: Unknown OID: [5] (bad) [ 594.346805][T12363] PKCS7: Only support pkcs7_signedData type [ 594.417146][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 594.426113][ T5920] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 594.442096][ T5920] usb 2-1: config 0 has no interface number 0 [ 594.451566][ T5920] usb 2-1: config 0 interface 217 has no altsetting 0 [ 594.470884][ T5920] usb 2-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice=61.c6 [ 594.503100][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.525601][ T5920] usb 2-1: Product: syz [ 594.531184][ T5920] usb 2-1: Manufacturer: syz [ 594.536428][ T5920] usb 2-1: SerialNumber: syz [ 594.550019][ T5920] usb 2-1: config 0 descriptor?? [ 594.734495][T12398] overlayfs: missing 'lowerdir' [ 596.196741][ T30] audit: type=1400 audit(1983223298.028:690): avc: denied { ioctl } for pid=12388 comm="syz.6.1587" path="socket:[36448]" dev="sockfs" ino=36448 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 596.264418][ T5920] usb 2-1: USB disconnect, device number 35 [ 596.306909][ T24] usb 6-1: USB disconnect, device number 11 [ 596.928070][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 597.132539][T12397] syz.3.1586: attempt to access beyond end of device [ 597.132539][T12397] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 598.189175][T12420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1594'. [ 598.198337][T12420] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1594'. [ 599.034225][T12439] 9pnet_fd: Insufficient options for proto=fd [ 599.376994][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 599.505503][ T3007] Bluetooth: hci4: Frame reassembly failed (-84) [ 599.628046][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.668596][ T2982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 599.721253][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.729472][T12453] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12453 comm=syz.5.1606 [ 599.733207][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 600.025675][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 600.107002][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.140582][ T24] usb 4-1: config 0 descriptor?? [ 600.384337][T12468] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 600.394308][T12468] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 600.409864][T12468] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 600.437198][ T30] audit: type=1400 audit(1983223302.248:691): avc: denied { firmware_load } for pid=12465 comm="syz.5.1610" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 600.526961][ T44] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 600.670559][ T24] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 600.715899][T12475] input: syz1 as /devices/virtual/input/input33 [ 600.726999][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 600.738401][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 600.759071][ T44] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 600.770703][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.779535][ T44] usb 1-1: Product: syz [ 600.785084][ T44] usb 1-1: Manufacturer: syz [ 600.790435][ T44] usb 1-1: SerialNumber: syz [ 600.819460][ T44] usb 1-1: config 0 descriptor?? [ 600.932159][ T5954] usb 4-1: USB disconnect, device number 32 [ 601.506963][T11686] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 602.142183][ T44] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 602.295321][T10446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 602.500078][ T44] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 602.539209][ T44] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 602.918298][T12485] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 602.930610][ T5920] usb 1-1: USB disconnect, device number 21 [ 603.488858][ T30] audit: type=1400 audit(1983223305.318:692): avc: denied { write } for pid=12484 comm="syz.1.1614" path="socket:[36920]" dev="sockfs" ino=36920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 604.373548][T12524] tc_dump_action: action bad kind [ 604.423326][T12524] netlink: 'syz.0.1625': attribute type 10 has an invalid length. [ 604.431365][T12524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1625'. [ 604.441701][T12524] dummy0: entered promiscuous mode [ 604.455369][T12524] bridge0: port 3(dummy0) entered blocking state [ 604.463084][T12524] bridge0: port 3(dummy0) entered disabled state [ 604.472762][T12524] dummy0: entered allmulticast mode [ 604.539150][T12524] bridge0: port 3(dummy0) entered blocking state [ 604.545721][T12524] bridge0: port 3(dummy0) entered forwarding state [ 604.727049][T12525] lo speed is unknown, defaulting to 1000 [ 604.734807][T12525] wlan0 speed is unknown, defaulting to 1000 [ 604.744427][T12525] lo speed is unknown, defaulting to 1000 [ 604.814595][ T6036] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 606.646897][ T30] audit: type=1400 audit(1983223308.478:693): avc: denied { ioctl } for pid=12546 comm="syz.1.1631" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 606.959694][T12550] block nbd5: Unsupported socket: shutdown callout must be supported. [ 608.103915][T10446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 608.695306][T12583] overlayfs: missing 'lowerdir' [ 609.912108][ T2982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 610.364536][T12601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1648'. [ 610.795096][T12604] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12604 comm=syz.0.1648 [ 610.884764][T12607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1649'. [ 610.945721][ T30] audit: type=1400 audit(1983223312.778:694): avc: denied { connect } for pid=12606 comm="syz.0.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 610.985760][T12609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1649'. [ 611.624226][T12616] delete_channel: no stack [ 612.210155][ T5920] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 612.239676][ T5920] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 612.351445][ T5920] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 612.364524][ T5920] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 612.377526][ T5920] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 612.807201][ T5920] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 612.820960][ T5920] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 612.839658][ T5920] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 612.847410][ T5920] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 612.855029][ T5920] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 612.874247][ T5920] hid-generic 0002:0004:0009.000D: hidraw0: HID v0.04 Device [syz0] on syz0 [ 612.985113][T12636] fido_id[12636]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 613.456280][T12644] overlayfs: missing 'lowerdir' [ 614.682576][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 615.677138][T11419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 617.926427][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1669'. [ 620.158429][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 621.427307][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 622.403044][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 623.157506][ T9] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 623.181686][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.200061][ T9] usb 1-1: config 0 descriptor?? [ 623.213696][ T9] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 623.253844][ T9] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 623.875926][ T24] usb 1-1: USB disconnect, device number 22 [ 623.989011][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.216152][T12747] netlink: 'syz.6.1688': attribute type 1 has an invalid length. [ 624.233007][T12747] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1688'. [ 624.349307][T12747] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1688'. [ 624.880889][T12757] 9pnet_fd: Insufficient options for proto=fd [ 624.902658][T12757] netlink: 'syz.0.1691': attribute type 10 has an invalid length. [ 624.927042][T12757] bridge0: port 3(dummy0) entered disabled state [ 624.933695][T12757] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.234550][T12757] bridge0: port 3(dummy0) entered blocking state [ 625.240982][T12757] bridge0: port 3(dummy0) entered forwarding state [ 625.247721][T12757] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.247840][T12759] 9pnet_fd: Insufficient options for proto=fd [ 625.254811][T12757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.390057][T12757] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 626.000743][ T4603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 626.063365][ T30] audit: type=1400 audit(1983223327.888:695): avc: denied { write } for pid=12760 comm="syz.3.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 627.301537][T11419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 629.090669][T12808] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 629.436802][ T5954] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 629.982278][ T5954] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 630.004872][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.044014][ T5954] usb 1-1: config 0 descriptor?? [ 630.065871][ T5954] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 630.090416][ T5954] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 630.265460][ T5954] usb 1-1: USB disconnect, device number 23 [ 632.161476][T11419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.307826][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 635.565304][ T5899] hid_parser_main: 7 callbacks suppressed [ 635.565322][ T5899] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 635.660690][T12872] syz.5.1722 (12872): drop_caches: 2 [ 635.667083][T12872] syz.5.1722 (12872): drop_caches: 2 [ 635.879382][ T5899] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 635.887317][ T5899] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 635.902016][ T5899] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 635.909760][ T5899] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 635.917224][ T5899] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 635.924623][ T5899] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 635.932664][ T5899] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 635.940138][ T5899] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 635.947702][ T5899] hid-generic 0002:0004:0009.000E: unknown main item tag 0x0 [ 636.149913][ T5899] hid-generic 0002:0004:0009.000E: hidraw0: HID v0.04 Device [syz0] on syz0 [ 637.488724][T12891] fido_id[12891]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 637.934375][ T30] audit: type=1326 audit(1983223339.768:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1accf8eb69 code=0x7ffc0000 [ 638.039202][ T30] audit: type=1326 audit(1983223339.768:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1accf8eb69 code=0x7ffc0000 [ 638.063477][ T30] audit: type=1326 audit(1983223339.778:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1accf8eb69 code=0x7ffc0000 [ 638.090150][ T30] audit: type=1326 audit(1983223339.778:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1accf8eb69 code=0x7ffc0000 [ 638.115157][ T30] audit: type=1326 audit(1983223339.778:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1accf8eb69 code=0x7ffc0000 [ 638.295211][ T30] audit: type=1326 audit(1983223339.778:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1accf8eb69 code=0x7ffc0000 [ 638.328390][ T30] audit: type=1326 audit(1983223339.778:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1accf8eb69 code=0x7ffc0000 [ 638.387329][ T30] audit: type=1326 audit(1983223339.778:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1accf8eb69 code=0x7ffc0000 [ 638.413711][ T30] audit: type=1326 audit(1983223339.778:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1accf8eb69 code=0x7ffc0000 [ 638.441717][ T30] audit: type=1326 audit(1983223339.788:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.1.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1accf8eb69 code=0x7ffc0000 [ 638.898004][ T3007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 638.911628][ T6032] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 639.012836][T12919] overlayfs: missing 'lowerdir' [ 640.405961][T12925] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 641.233167][T12935] netlink: 'syz.0.1739': attribute type 10 has an invalid length. [ 641.259024][T12935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1739'. [ 641.505395][T12946] befs: (nbd5): No write support. Marking filesystem read-only [ 641.515727][T12946] syz.5.1742: attempt to access beyond end of device [ 641.515727][T12946] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 641.528854][T12946] befs: (nbd5): unable to read superblock [ 643.358368][T12969] tc_dump_action: action bad kind [ 643.379375][T12969] netlink: 'syz.6.1748': attribute type 10 has an invalid length. [ 643.387379][T12969] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1748'. [ 643.396582][T12969] dummy0: entered promiscuous mode [ 643.409055][T12969] bridge0: port 3(dummy0) entered blocking state [ 643.416296][T12969] bridge0: port 3(dummy0) entered disabled state [ 643.424383][T12969] dummy0: entered allmulticast mode [ 643.486214][T12969] bridge0: port 3(dummy0) entered blocking state [ 643.493867][T12969] bridge0: port 3(dummy0) entered forwarding state [ 643.988269][ T3007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.054499][T12977] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 644.725305][ T6032] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 645.073635][ T9879] libceph: connect (1)[c::]:6789 error -101 [ 645.084083][ T9879] libceph: mon0 (1)[c::]:6789 connect error [ 645.102237][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 645.102263][ T30] audit: type=1400 audit(1983223346.938:749): avc: denied { append } for pid=12989 comm="syz.1.1755" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 645.141265][ T30] audit: type=1400 audit(1983223346.938:750): avc: denied { open } for pid=12989 comm="syz.1.1755" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 645.443199][ T9879] libceph: connect (1)[c::]:6789 error -101 [ 645.533738][T13006] lo speed is unknown, defaulting to 1000 [ 645.548201][T13006] wlan0 speed is unknown, defaulting to 1000 [ 645.565086][T13006] lo speed is unknown, defaulting to 1000 [ 645.978268][T12992] ceph: No mds server is up or the cluster is laggy [ 646.455913][ T9879] libceph: mon0 (1)[c::]:6789 connect error [ 646.474021][ T5954] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 646.767132][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 646.841716][ T5954] usb 1-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 646.854977][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.870898][T13004] delete_channel: no stack [ 647.052100][ T5954] usb 1-1: config 0 descriptor?? [ 647.539840][ T5954] hid_parser_main: 7 callbacks suppressed [ 647.539861][ T5954] wacom 0003:056A:0026.000F: unknown main item tag 0x0 [ 648.052534][T13034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.052821][ T5954] wacom 0003:056A:0026.000F: unknown main item tag 0x0 [ 648.064615][T13034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.083926][ T5954] wacom 0003:056A:0026.000F: unknown main item tag 0x0 [ 648.154388][ T5954] usb 1-1: USB disconnect, device number 24 [ 648.300060][T13040] No buffer was provided with the request [ 649.251243][T13044] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 649.588422][ T6032] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 649.995301][T13057] overlayfs: missing 'lowerdir' [ 650.233340][ T6032] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 650.323282][T13061] netlink: 'syz.0.1773': attribute type 10 has an invalid length. [ 651.754782][T13061] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 654.526165][T13105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1788'. [ 654.778107][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 655.507344][T13115] 9pnet_fd: Insufficient options for proto=fd [ 656.078985][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 657.331131][ T30] audit: type=1400 audit(1983223359.168:751): avc: denied { ioctl } for pid=13129 comm="syz.6.1796" path="socket:[39666]" dev="sockfs" ino=39666 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 658.442515][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1800'. [ 660.647530][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 661.747092][ T3007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 663.489807][T13198] block nbd6: Unsupported socket: shutdown callout must be supported. [ 663.678377][T13210] program syz.1.1819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 665.966931][ T44] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 666.487707][ T2982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 666.596867][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 666.613009][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.624204][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.635426][ T44] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 666.645393][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.700228][ T44] usb 1-1: config 0 descriptor?? [ 667.169993][ T44] corsair 0003:1B1C:1B02.0010: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 667.347697][ T44] corsair 0003:1B1C:1B02.0010: Failed to get K90 initial state (error -71). [ 667.371817][ T44] usb 1-1: USB disconnect, device number 25 [ 667.552837][ T6032] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 667.712482][T13249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1830'. [ 668.247489][T13255] FAULT_INJECTION: forcing a failure. [ 668.247489][T13255] name failslab, interval 1, probability 0, space 0, times 0 [ 668.260237][T13255] CPU: 0 UID: 0 PID: 13255 Comm: syz.3.1831 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 668.260262][T13255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 668.260272][T13255] Call Trace: [ 668.260279][T13255] [ 668.260286][T13255] dump_stack_lvl+0x16c/0x1f0 [ 668.260317][T13255] should_fail_ex+0x512/0x640 [ 668.260350][T13255] ? __kmalloc_noprof+0xbf/0x510 [ 668.260370][T13255] ? ethnl_default_notify+0x1be/0xa40 [ 668.260395][T13255] should_failslab+0xc2/0x120 [ 668.260415][T13255] __kmalloc_noprof+0xd2/0x510 [ 668.260438][T13255] ethnl_default_notify+0x1be/0xa40 [ 668.260466][T13255] ? __pfx_ethnl_default_notify+0x10/0x10 [ 668.260500][T13255] ? __might_fault+0xe3/0x190 [ 668.260516][T13255] ? __might_fault+0x13b/0x190 [ 668.260538][T13255] ? __pfx_ethnl_default_notify+0x10/0x10 [ 668.260562][T13255] ethnl_notify+0xc2/0x200 [ 668.260588][T13255] ethtool_set_settings+0x205/0x300 [ 668.260606][T13255] ? __pfx_ethtool_set_settings+0x10/0x10 [ 668.260640][T13255] ? bpf_lsm_capable+0x9/0x10 [ 668.260664][T13255] ? security_capable+0x7e/0x260 [ 668.260685][T13255] dev_ethtool+0x2169/0x5bc0 [ 668.260707][T13255] ? cpupri_find_fitness+0xe2/0x450 [ 668.260736][T13255] ? __pfx_dev_ethtool+0x10/0x10 [ 668.260754][T13255] ? find_lowest_rq+0x17c/0x710 [ 668.260783][T13255] ? find_lock_lowest_rq+0x4d/0x760 [ 668.260802][T13255] ? lock_acquire+0x179/0x350 [ 668.260828][T13255] ? find_held_lock+0x2b/0x80 [ 668.260850][T13255] ? finish_task_switch.isra.0+0x21c/0xc10 [ 668.260874][T13255] ? rcu_is_watching+0x12/0xc0 [ 668.260895][T13255] ? finish_task_switch.isra.0+0x221/0xc10 [ 668.260917][T13255] ? lockdep_hardirqs_on+0x7c/0x110 [ 668.260942][T13255] ? finish_task_switch.isra.0+0x221/0xc10 [ 668.260964][T13255] ? rcu_is_watching+0x12/0xc0 [ 668.260985][T13255] ? trace_sched_exit_tp+0xd1/0x120 [ 668.261004][T13255] ? __schedule+0x11a3/0x5de0 [ 668.261025][T13255] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 668.261062][T13255] ? __rcu_read_unlock+0x2bc/0x620 [ 668.261086][T13255] ? __lock_acquire+0x62e/0x1ce0 [ 668.261127][T13255] ? find_held_lock+0x2b/0x80 [ 668.261147][T13255] ? dev_load+0x8e/0x240 [ 668.261173][T13255] dev_ioctl+0x290/0x10e0 [ 668.261197][T13255] sock_do_ioctl+0x19d/0x280 [ 668.261214][T13255] ? __pfx_sock_do_ioctl+0x10/0x10 [ 668.261238][T13255] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 668.261265][T13255] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 668.261294][T13255] sock_ioctl+0x227/0x6b0 [ 668.261315][T13255] ? __pfx_sock_ioctl+0x10/0x10 [ 668.261337][T13255] ? hook_file_ioctl_common+0x145/0x410 [ 668.261370][T13255] ? selinux_file_ioctl+0x180/0x270 [ 668.261390][T13255] ? selinux_file_ioctl+0xb4/0x270 [ 668.261412][T13255] ? __pfx_sock_ioctl+0x10/0x10 [ 668.261433][T13255] __x64_sys_ioctl+0x18e/0x210 [ 668.261462][T13255] do_syscall_64+0xcd/0x4c0 [ 668.261490][T13255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.261507][T13255] RIP: 0033:0x7fa370d8eb69 [ 668.261522][T13255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.261539][T13255] RSP: 002b:00007fa371c4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.261557][T13255] RAX: ffffffffffffffda RBX: 00007fa370fb6160 RCX: 00007fa370d8eb69 [ 668.261568][T13255] RDX: 0000200000001b00 RSI: 0000000000008946 RDI: 0000000000000008 [ 668.261579][T13255] RBP: 00007fa371c4a090 R08: 0000000000000000 R09: 0000000000000000 [ 668.261589][T13255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 668.261599][T13255] R13: 0000000000000000 R14: 00007fa370fb6160 R15: 00007ffd36d16e18 [ 668.261624][T13255] [ 669.002887][T13261] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1834'. [ 669.012046][T13261] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1834'. [ 669.021036][T13261] netlink: 'syz.3.1834': attribute type 6 has an invalid length. [ 669.028765][T13261] netlink: 'syz.3.1834': attribute type 5 has an invalid length. [ 669.036464][T13261] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1834'. [ 669.128183][T13267] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 669.741537][T13274] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1837'. [ 670.038903][T13284] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13284 comm=syz.5.1837 [ 670.304512][T13289] vxcan1: entered allmulticast mode [ 672.273925][ T6032] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 672.292825][T13304] overlayfs: missing 'lowerdir' [ 673.292433][ T2982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 673.335865][T13312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1850'. [ 673.437843][T13312] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13312 comm=syz.3.1850 [ 674.307228][T13329] openvswitch: netlink: Flow actions attr not present in new flow. [ 674.957171][T13334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 676.551882][T13350] tc_dump_action: action bad kind [ 677.873956][ T6032] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 677.974310][T13363] FAULT_INJECTION: forcing a failure. [ 677.974310][T13363] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 678.055243][T13363] CPU: 1 UID: 0 PID: 13363 Comm: syz.5.1863 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 678.055277][T13363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 678.055287][T13363] Call Trace: [ 678.055293][T13363] [ 678.055299][T13363] dump_stack_lvl+0x16c/0x1f0 [ 678.055328][T13363] should_fail_ex+0x512/0x640 [ 678.055358][T13363] should_fail_alloc_page+0xe7/0x130 [ 678.055378][T13363] prepare_alloc_pages+0x3c2/0x610 [ 678.055402][T13363] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 678.055420][T13363] ? copy_splice_read+0x1a8/0xba0 [ 678.055435][T13363] ? stack_trace_save+0x8e/0xc0 [ 678.055460][T13363] ? __pfx_stack_trace_save+0x10/0x10 [ 678.055482][T13363] ? stack_depot_save_flags+0x29/0x9c0 [ 678.055513][T13363] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 678.055528][T13363] ? kasan_save_stack+0x33/0x60 [ 678.055543][T13363] ? __kasan_kmalloc+0xaa/0xb0 [ 678.055557][T13363] ? copy_splice_read+0x1a8/0xba0 [ 678.055571][T13363] ? do_splice_read+0x282/0x370 [ 678.055584][T13363] ? splice_direct_to_actor+0x2a1/0xa30 [ 678.055599][T13363] ? do_splice_direct+0x174/0x240 [ 678.055613][T13363] ? do_sendfile+0xb06/0xe50 [ 678.055627][T13363] ? __x64_sys_sendfile64+0x1d8/0x220 [ 678.055646][T13363] ? do_syscall_64+0xcd/0x4c0 [ 678.055687][T13363] alloc_pages_bulk_noprof+0x71c/0x1410 [ 678.055712][T13363] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 678.055735][T13363] ? trace_kmalloc+0x2b/0xd0 [ 678.055753][T13363] ? __kmalloc_noprof+0x242/0x510 [ 678.055774][T13363] copy_splice_read+0x1e1/0xba0 [ 678.055790][T13363] ? __pfx_pipe_to_null+0x10/0x10 [ 678.055809][T13363] ? __pfx_copy_splice_read+0x10/0x10 [ 678.055823][T13363] ? pipe_unlock+0x4a/0x70 [ 678.055842][T13363] ? __pfx_splice_from_pipe+0x10/0x10 [ 678.055865][T13363] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 678.055884][T13363] ? __pfx_copy_splice_read+0x10/0x10 [ 678.055899][T13363] do_splice_read+0x282/0x370 [ 678.055917][T13363] splice_direct_to_actor+0x2a1/0xa30 [ 678.055935][T13363] ? __pfx_direct_splice_actor+0x10/0x10 [ 678.055956][T13363] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 678.055972][T13363] ? get_pid_task+0xfc/0x250 [ 678.055993][T13363] do_splice_direct+0x174/0x240 [ 678.056010][T13363] ? __pfx_do_splice_direct+0x10/0x10 [ 678.056026][T13363] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 678.056044][T13363] ? bpf_lsm_file_permission+0x9/0x10 [ 678.056065][T13363] ? security_file_permission+0x71/0x210 [ 678.056087][T13363] ? rw_verify_area+0xcf/0x6c0 [ 678.056114][T13363] do_sendfile+0xb06/0xe50 [ 678.056133][T13363] ? __pfx_do_sendfile+0x10/0x10 [ 678.056148][T13363] ? __fget_files+0x20e/0x3c0 [ 678.056172][T13363] __x64_sys_sendfile64+0x1d8/0x220 [ 678.056192][T13363] ? ksys_write+0x1ac/0x250 [ 678.056207][T13363] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 678.056235][T13363] do_syscall_64+0xcd/0x4c0 [ 678.056261][T13363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.056282][T13363] RIP: 0033:0x7f6485d8eb69 [ 678.056294][T13363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.056311][T13363] RSP: 002b:00007f6486caa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 678.056327][T13363] RAX: ffffffffffffffda RBX: 00007f6485fb5fa0 RCX: 00007f6485d8eb69 [ 678.056337][T13363] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 678.056346][T13363] RBP: 00007f6486caa090 R08: 0000000000000000 R09: 0000000000000000 [ 678.056355][T13363] R10: 000000040000f63c R11: 0000000000000246 R12: 0000000000000002 [ 678.056365][T13363] R13: 0000000000000000 R14: 00007f6485fb5fa0 R15: 00007ffe7b69dc48 [ 678.056387][T13363] [ 678.934873][T13378] tc_dump_action: action bad kind [ 679.107056][ T2982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 679.175684][T13381] random: crng reseeded on system resumption [ 679.215545][ T30] audit: type=1400 audit(1983223381.016:752): avc: denied { append } for pid=13372 comm="syz.6.1866" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 683.507420][ T6032] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 683.519291][T13430] netlink: 'syz.6.1876': attribute type 2 has an invalid length. [ 683.756818][ T9879] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 683.907026][ T9879] usb 2-1: Using ep0 maxpacket: 8 [ 683.922029][ T9879] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 683.935210][ T9879] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 683.943992][ T9879] usb 2-1: config 0 has no interface number 0 [ 683.996727][T11686] Bluetooth: hci5: command 0x0406 tx timeout [ 684.018785][ T5899] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 684.043991][ T9879] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 684.059323][ T9879] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 684.072550][ T9879] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 684.120287][ T9879] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 684.135715][ T9879] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 684.146168][ T9879] usb 2-1: Product: syz [ 684.185153][ T9879] usb 2-1: config 0 descriptor?? [ 684.199655][T13432] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 684.207173][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 684.215999][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.228748][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 684.250992][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 684.264633][ T5899] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 684.276032][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.297524][ T5899] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 684.313130][ T5899] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 684.322747][ T5899] usb 1-1: Manufacturer: syz [ 684.374439][ T5899] usb 1-1: config 0 descriptor?? [ 684.656690][ T9879] usb 2-1: USB disconnect, device number 36 [ 684.752544][ T10] libceph: connect (1)[c::]:6789 error -101 [ 685.589717][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 685.623281][T11419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 685.628094][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.690938][ T10] libceph: connect (1)[c::]:6789 error -101 [ 685.707262][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 685.739379][T13441] ceph: No mds server is up or the cluster is laggy [ 685.977794][ T30] audit: type=1326 audit(1983223387.796:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.0.1878" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e6598eb69 code=0x0 [ 685.978867][ T10] libceph: connect (1)[c::]:6789 error -101 [ 686.163704][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 686.238227][T13453] tipc: Failed to remove unknown binding: 66,1,1/0:2832790056/2832790058 [ 686.248473][T13453] tipc: Failed to remove unknown binding: 66,1,1/0:2832790056/2832790058 [ 686.257565][T13453] tipc: Failed to remove unknown binding: 66,1,1/0:2832790056/2832790058 [ 686.646734][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 686.701223][T13463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1885'. [ 686.871120][ T10] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 686.890214][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 686.899999][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 686.943247][ T10] usb 4-1: Product: syz [ 686.967916][ T10] usb 4-1: Manufacturer: syz [ 686.978548][ T10] usb 4-1: SerialNumber: syz [ 686.994845][ T10] usb 4-1: config 0 descriptor?? [ 688.159010][ T5899] rc_core: IR keymap rc-hauppauge not found [ 688.186427][ T5899] Registered IR keymap rc-empty [ 688.196472][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 688.229057][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 688.351366][ T5899] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 688.543049][ T10] usb 4-1: USB disconnect, device number 33 [ 688.548183][ T5899] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input35 [ 688.640624][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 688.752681][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 688.796745][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 688.974900][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 689.292415][ T6271] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 689.337012][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 689.368435][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 689.404571][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 689.621918][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 689.666757][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 690.084832][ T5899] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 690.418747][ T5899] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 690.427599][ T5899] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 690.449963][ T5899] usb 1-1: USB disconnect, device number 26 [ 691.195070][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 692.079099][T13529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1897'. [ 692.859252][T13544] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 693.718907][T13550] FAULT_INJECTION: forcing a failure. [ 693.718907][T13550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.732198][T13550] CPU: 0 UID: 0 PID: 13550 Comm: syz.1.1904 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 693.732224][T13550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 693.732234][T13550] Call Trace: [ 693.732240][T13550] [ 693.732246][T13550] dump_stack_lvl+0x16c/0x1f0 [ 693.732277][T13550] should_fail_ex+0x512/0x640 [ 693.732307][T13550] _copy_to_user+0x32/0xd0 [ 693.732329][T13550] simple_read_from_buffer+0xcb/0x170 [ 693.732350][T13550] proc_fail_nth_read+0x197/0x240 [ 693.732371][T13550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 693.732393][T13550] ? rw_verify_area+0xcf/0x6c0 [ 693.732419][T13550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 693.732440][T13550] vfs_read+0x1e1/0xc60 [ 693.732461][T13550] ? __pfx___mutex_lock+0x10/0x10 [ 693.732487][T13550] ? __pfx_vfs_read+0x10/0x10 [ 693.732512][T13550] ? __fget_files+0x20e/0x3c0 [ 693.732539][T13550] ksys_read+0x12a/0x250 [ 693.732556][T13550] ? __pfx_ksys_read+0x10/0x10 [ 693.732573][T13550] ? fput+0x9b/0xd0 [ 693.732599][T13550] do_syscall_64+0xcd/0x4c0 [ 693.732627][T13550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.732644][T13550] RIP: 0033:0x7f1accf8d57c [ 693.732659][T13550] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 693.732676][T13550] RSP: 002b:00007f1acdd46030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 693.732693][T13550] RAX: ffffffffffffffda RBX: 00007f1acd1b6160 RCX: 00007f1accf8d57c [ 693.732705][T13550] RDX: 000000000000000f RSI: 00007f1acdd460a0 RDI: 0000000000000007 [ 693.732716][T13550] RBP: 00007f1acdd46090 R08: 0000000000000000 R09: 0000000000000000 [ 693.732726][T13550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.732737][T13550] R13: 0000000000000000 R14: 00007f1acd1b6160 R15: 00007ffdffb87fa8 [ 693.732762][T13550] [ 695.134292][ T6032] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 695.390986][T13558] netlink: 'syz.6.1906': attribute type 10 has an invalid length. [ 695.400251][T13558] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1906'. [ 696.775074][T13578] tc_dump_action: action bad kind [ 696.787252][T13578] netlink: 'syz.1.1911': attribute type 10 has an invalid length. [ 696.795395][T13578] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1911'. [ 696.804621][T13578] dummy0: entered promiscuous mode [ 696.813901][T13578] bridge0: port 3(dummy0) entered blocking state [ 696.821159][T13578] bridge0: port 3(dummy0) entered disabled state [ 696.829087][T13578] dummy0: entered allmulticast mode [ 696.855525][T13578] bridge0: port 3(dummy0) entered blocking state [ 696.862000][T13578] bridge0: port 3(dummy0) entered forwarding state [ 697.051330][ T3007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 697.857999][T13589] dummy0: left allmulticast mode [ 697.863183][T13589] bridge0: port 3(dummy0) entered disabled state [ 697.880672][T13589] batman_adv: batadv0: Adding interface: dummy0 [ 697.887239][T13589] batman_adv: batadv0: Interface activated: dummy0 [ 697.907740][T13589] batadv0: mtu less than device minimum [ 697.913889][T13589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 697.924805][T13589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 697.935435][T13589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 697.946059][T13589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 697.956730][T13589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 697.967334][T13589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 697.977952][T13589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 697.988597][T13589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 697.999225][T13589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 698.256705][ T24] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 698.302061][T13603] netlink: 'syz.6.1918': attribute type 3 has an invalid length. [ 698.310164][T13603] netlink: 16066 bytes leftover after parsing attributes in process `syz.6.1918'. [ 698.324168][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1918'. [ 698.338242][T13600] bridge1: entered allmulticast mode [ 698.417736][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 698.426730][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 698.435502][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 6 [ 698.444792][ T24] usb 4-1: config 1 has no interface number 1 [ 698.451120][ T24] usb 4-1: config 1 interface 2 has no altsetting 0 [ 698.462155][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 698.473019][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.481283][ T24] usb 4-1: Product: syz [ 698.485521][ T24] usb 4-1: Manufacturer: syz [ 698.490236][ T24] usb 4-1: SerialNumber: syz [ 698.718834][ T24] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 698.729037][ T24] usb 4-1: selecting invalid altsetting 0 [ 698.735268][ T24] usb 4-1: selecting invalid altsetting 0 [ 698.767584][ T24] usb 4-1: USB disconnect, device number 34 [ 698.866544][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.221616][T13627] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 701.121189][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 701.387998][T13639] QAT: Stopping all acceleration devices. [ 701.399921][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 701.701750][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.713509][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.726260][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.746092][ T5899] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 702.068758][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 702.097134][ T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 702.109405][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.121478][ T24] usb 1-1: config 0 descriptor?? [ 702.236826][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 702.248392][ T5899] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 702.260857][ T5899] usb 2-1: config 0 has no interface number 0 [ 702.268017][ T5899] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.285103][ T5899] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 59312, setting to 1024 [ 702.299422][ T5899] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 702.310186][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.320738][ T5899] usb 2-1: config 0 descriptor?? [ 702.329681][T13640] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 702.754584][ T6036] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 702.767716][ T24] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 702.782681][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0011/input/input36 [ 702.911155][ T24] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 702.974879][T13623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.001280][T13623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.014177][ T24] usb 1-1: USB disconnect, device number 27 [ 703.185155][ T5899] uclogic 0003:28BD:0094.0012: pen parameters not found [ 703.192794][ T5899] uclogic 0003:28BD:0094.0012: interface is invalid, ignoring [ 703.403205][ T5899] usb 2-1: USB disconnect, device number 37 [ 703.426958][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 703.586780][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 703.593960][ T24] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 703.605314][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.616510][ T24] usb 1-1: config 0 has no interface number 0 [ 703.625968][ T24] usb 1-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 703.635366][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.646068][ T24] usb 1-1: config 0 descriptor?? [ 703.658446][ T24] usb 1-1: Found UVC 0.00 device (0bd3:05f4) [ 703.665554][ T24] usb 1-1: No valid video chain found. [ 703.952564][T13663] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1936'. [ 703.968974][ T30] audit: type=1400 audit(1983223405.806:754): avc: denied { name_connect } for pid=13661 comm="syz.5.1936" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 704.196735][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 704.366774][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 704.375108][ T24] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 704.384384][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.392483][ T24] usb 2-1: Product: syz [ 704.396742][ T24] usb 2-1: Manufacturer: syz [ 704.401370][ T24] usb 2-1: SerialNumber: syz [ 704.409646][ T24] usb 2-1: config 0 descriptor?? [ 704.419850][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 704.472942][ T10] usb 1-1: USB disconnect, device number 28 [ 704.510579][T13668] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 705.030705][T13671] usb usb1: usbfs: process 13671 (syz.3.1939) did not claim interface 0 before use [ 705.052997][ T30] audit: type=1400 audit(1983223406.896:755): avc: denied { read } for pid=13670 comm="syz.3.1939" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 705.076304][T13673] FAULT_INJECTION: forcing a failure. [ 705.076304][T13673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.079353][T13671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 705.093942][T13673] CPU: 0 UID: 0 PID: 13673 Comm: syz.5.1940 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 705.093967][T13673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 705.093976][T13673] Call Trace: [ 705.093981][T13673] [ 705.093987][T13673] dump_stack_lvl+0x16c/0x1f0 [ 705.094014][T13673] should_fail_ex+0x512/0x640 [ 705.094041][T13673] _copy_to_user+0x32/0xd0 [ 705.094060][T13673] copy_siginfo_to_user+0x27/0xc0 [ 705.094083][T13673] x64_setup_rt_frame+0x811/0xcf0 [ 705.094110][T13673] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 705.094131][T13673] ? __pfx_do_splice+0x10/0x10 [ 705.094147][T13673] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 705.094164][T13673] arch_do_signal_or_restart+0x5e4/0x7d0 [ 705.094186][T13673] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 705.094204][T13673] ? __do_splice+0x1e1/0x360 [ 705.094232][T13673] exit_to_user_mode_loop+0x84/0x110 [ 705.094250][T13673] do_syscall_64+0x3f6/0x4c0 [ 705.094274][T13673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.094290][T13673] RIP: 0033:0x7f6485d8eb67 [ 705.094305][T13673] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 705.094320][T13673] RSP: 002b:00007f6486caa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 705.094336][T13673] RAX: 0000000000000113 RBX: 00007f6485fb5fa0 RCX: 00007f6485d8eb69 [ 705.094346][T13673] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 705.094355][T13673] RBP: 00007f6486caa090 R08: 0000000000000ae6 R09: 0000000000000004 [ 705.094364][T13673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 705.094374][T13673] R13: 0000000000000000 R14: 00007f6485fb5fa0 R15: 00007ffe7b69dc48 [ 705.094394][T13673] [ 705.361029][T13675] FAULT_INJECTION: forcing a failure. [ 705.361029][T13675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.665062][T13675] CPU: 0 UID: 0 PID: 13675 Comm: syz.0.1941 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 705.665091][T13675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 705.665100][T13675] Call Trace: [ 705.665106][T13675] [ 705.665118][T13675] dump_stack_lvl+0x16c/0x1f0 [ 705.665146][T13675] should_fail_ex+0x512/0x640 [ 705.665167][T13675] copy_fpstate_to_sigframe+0x854/0xaf0 [ 705.665192][T13675] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 705.665223][T13675] ? get_sigframe+0x40b/0x9c0 [ 705.665246][T13675] get_sigframe+0x4a8/0x9c0 [ 705.665269][T13675] ? __pfx_get_sigframe+0x10/0x10 [ 705.665285][T13675] ? siginfo_layout+0x177/0x290 [ 705.665302][T13675] x64_setup_rt_frame+0x12e/0xcf0 [ 705.665320][T13675] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 705.665344][T13675] arch_do_signal_or_restart+0x5e4/0x7d0 [ 705.665367][T13675] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 705.665402][T13675] exit_to_user_mode_loop+0x84/0x110 [ 705.665419][T13675] do_syscall_64+0x3f6/0x4c0 [ 705.665437][T13675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.665448][T13675] RIP: 0033:0x7f2e6598eb67 [ 705.665457][T13675] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 705.665468][T13675] RSP: 002b:00007f2e66867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000114 [ 705.665480][T13675] RAX: 0000000000000114 RBX: 00007f2e65bb5fa0 RCX: 00007f2e6598eb69 [ 705.665491][T13675] RDX: 0000060000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 705.665500][T13675] RBP: 00007f2e66867090 R08: 0000000000000000 R09: 0000000000000000 [ 705.665509][T13675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 705.665519][T13675] R13: 0000000000000000 R14: 00007f2e65bb5fa0 R15: 00007ffcebf2daa8 [ 705.665540][T13675] [ 705.671708][ T24] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37 [ 705.885683][ T44] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 705.897338][ T44] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 705.917701][ T44] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 705.925279][ T44] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 705.938251][ T44] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 705.954162][ T44] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 705.961877][ T44] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 705.970674][ T44] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 706.098425][ T44] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 706.105860][ T44] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 706.122182][ T44] hid-generic 0002:0004:0009.0013: hidraw0: HID v0.04 Device [syz0] on syz0 [ 706.621851][T11419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 706.650472][T13687] fido_id[13687]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 707.024447][ T30] audit: type=1326 audit(1983223408.866:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.3.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa370d8eb69 code=0x7fc00000 [ 707.170740][ T30] audit: type=1326 audit(1983223408.866:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.3.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa370d8eb69 code=0x7fc00000 [ 707.225591][ T30] audit: type=1326 audit(1983223408.866:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.3.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa370d8eb69 code=0x7fc00000 [ 707.259317][ T30] audit: type=1326 audit(1983223408.866:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.3.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa370d8eb69 code=0x7fc00000 [ 708.125206][ T30] audit: type=1326 audit(1983223408.866:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.3.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa370d8eb69 code=0x7fc00000 [ 708.148861][ T30] audit: type=1326 audit(1983223408.866:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.3.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa370d8eb69 code=0x7fc00000 [ 708.172312][ T30] audit: type=1326 audit(1983223408.866:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.3.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa370d8eb69 code=0x7fc00000 [ 708.195743][ T30] audit: type=1326 audit(1983223408.896:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.3.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa370d8eb69 code=0x7fc00000 [ 708.249404][ T9879] usb 2-1: USB disconnect, device number 38 [ 708.307032][T13712] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1948'. [ 708.368792][T13715] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13715 comm=syz.6.1948 [ 708.468259][ T2982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 709.531259][T13725] overlayfs: missing 'lowerdir' [ 710.568048][T13732] netlink: 1236 bytes leftover after parsing attributes in process `syz.1.1957'. [ 710.590393][ T9879] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 710.809674][ T9879] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 710.835892][ T9879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.821334][ T9879] usb 4-1: config 0 has no interface number 0 [ 711.827937][ T9879] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 711.844912][ T9879] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 711.864348][ T9879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.825385][ T9879] usb 4-1: Product: syz [ 712.830333][ T9879] usb 4-1: Manufacturer: syz [ 712.835312][ T9879] usb 4-1: SerialNumber: syz [ 712.841386][ T9879] usb 4-1: config 0 descriptor?? [ 712.972522][T13740] overlayfs: missing 'lowerdir' [ 713.101809][T13730] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 713.831460][T11419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 715.247658][T11419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 715.812197][ T9879] usb 4-1: can't set config #0, error -71 [ 715.873156][ T9879] usb 4-1: USB disconnect, device number 35 [ 716.160282][T13752] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 716.471538][T13756] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 717.306573][T13769] overlayfs: missing 'lowerdir' [ 718.652874][T13771] tc_dump_action: action bad kind [ 718.699800][T13771] netlink: 'syz.1.1969': attribute type 10 has an invalid length. [ 718.751076][T13771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1969'. [ 718.792309][T13771] batman_adv: batadv0: Interface deactivated: dummy0 [ 718.811779][T13771] batman_adv: batadv0: Removing interface: dummy0 [ 718.856218][T13771] bridge0: port 3(dummy0) entered blocking state [ 718.952758][T13771] bridge0: port 3(dummy0) entered disabled state [ 719.160871][T13771] dummy0: entered allmulticast mode [ 719.178763][T13771] bridge0: port 3(dummy0) entered blocking state [ 719.185213][T13771] bridge0: port 3(dummy0) entered forwarding state [ 719.226702][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 719.350632][T11419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 719.554353][T13792] tc_dump_action: action bad kind [ 719.579518][T13792] netlink: 'syz.1.1972': attribute type 10 has an invalid length. [ 719.587598][T13792] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1972'. [ 719.731487][ T24] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 719.771297][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.790196][ T24] usb 6-1: config 0 descriptor?? [ 719.811873][ T24] usb 6-1: selecting invalid altsetting 1 [ 719.974802][ T24] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 720.263716][ T10] usb 6-1: USB disconnect, device number 12 [ 720.754747][ T4603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 721.202533][ T30] audit: type=1400 audit(1983223423.026:764): avc: denied { map } for pid=13809 comm="syz.1.1978" path="/proc/1444/fd" dev="proc" ino=42121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 721.261648][T13812] geneve2: entered allmulticast mode [ 721.263834][ T30] audit: type=1400 audit(1983223423.026:765): avc: denied { execute } for pid=13809 comm="syz.1.1978" path="/proc/1444/fd" dev="proc" ino=42121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 721.994926][T13826] i: entered promiscuous mode [ 722.417878][T13829] tc_dump_action: action bad kind [ 722.446057][T13829] netlink: 'syz.5.1982': attribute type 10 has an invalid length. [ 722.454093][T13829] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1982'. [ 722.524407][T13829] dummy0: entered promiscuous mode [ 722.537273][T13829] bridge0: port 3(dummy0) entered blocking state [ 722.544579][T13829] bridge0: port 3(dummy0) entered disabled state [ 722.554602][T13829] dummy0: entered allmulticast mode [ 722.572787][T13829] bridge0: port 3(dummy0) entered blocking state [ 722.579419][T13829] bridge0: port 3(dummy0) entered forwarding state [ 723.056361][T13837] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1984'. [ 723.345650][T13847] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 723.491618][T13853] tipc: Started in network mode [ 723.496519][T13853] tipc: Node identity 86ac5e23a742, cluster identity 4711 [ 723.534514][T13853] tipc: Enabled bearer , priority 0 [ 723.546973][T13858] tc_dump_action: action bad kind [ 723.552614][T13858] netlink: 'syz.0.1991': attribute type 10 has an invalid length. [ 723.560660][T13858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1991'. [ 723.579908][T13855] tipc: Enabling of bearer rejected, already enabled [ 723.629881][T13853] syzkaller0: entered promiscuous mode [ 723.649033][T13853] syzkaller0: entered allmulticast mode [ 723.684108][T13853] tipc: Resetting bearer [ 723.706104][T13855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.723243][T13855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.926713][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 724.032266][T13870] tipc: Resetting bearer [ 724.059239][T13875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1986'. [ 724.093105][T13870] tipc: Disabling bearer [ 724.620741][T13889] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 725.122310][T10446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 725.152135][T13895] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1997'. [ 725.367550][T13903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2000'. [ 725.589509][T13911] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2002'. [ 725.635950][T13911] vlan2: entered promiscuous mode [ 725.674063][T13911] gretap0: entered promiscuous mode [ 726.222643][T13923] tc_dump_action: action bad kind [ 726.228443][T13923] netlink: 'syz.5.2005': attribute type 10 has an invalid length. [ 726.236236][T13923] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2005'. [ 727.289076][T13934] trusted_key: encrypted_key: hex blob is missing [ 728.452369][T13959] net_ratelimit: 10 callbacks suppressed [ 728.452389][T13959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.577582][T13959] syz.6.2011 (13959): drop_caches: 2 [ 729.219053][T13965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2012'. [ 729.939194][T13972] mmap: syz.1.2015 (13972): VmData 37470208 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 730.228124][T10446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.778462][T13987] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 730.868096][ T2982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 731.941972][T13998] i: entered promiscuous mode [ 731.961359][T13995] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2022'. [ 732.179579][T14014] FAULT_INJECTION: forcing a failure. [ 732.179579][T14014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.219372][T14014] CPU: 0 UID: 0 PID: 14014 Comm: syz.3.2026 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 732.219390][T14014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 732.219396][T14014] Call Trace: [ 732.219400][T14014] [ 732.219404][T14014] dump_stack_lvl+0x16c/0x1f0 [ 732.219425][T14014] should_fail_ex+0x512/0x640 [ 732.219445][T14014] _copy_from_iter+0x29f/0x16f0 [ 732.219459][T14014] ? _copy_from_iter+0x15d/0x16f0 [ 732.219470][T14014] ? __pfx__copy_from_iter+0x10/0x10 [ 732.219483][T14014] ? __pfx__copy_from_iter+0x10/0x10 [ 732.219495][T14014] ? _copy_from_iter+0x15d/0x16f0 [ 732.219508][T14014] copy_page_from_iter+0xde/0x180 [ 732.219522][T14014] skb_copy_datagram_from_iter+0x2a0/0x740 [ 732.219542][T14014] tun_get_user+0x185c/0x3ce0 [ 732.219562][T14014] ? __pfx_tun_get_user+0x10/0x10 [ 732.219575][T14014] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 732.219590][T14014] ? find_held_lock+0x2b/0x80 [ 732.219606][T14014] ? tun_get+0x191/0x370 [ 732.219620][T14014] tun_chr_write_iter+0xdc/0x210 [ 732.219633][T14014] vfs_write+0x6c4/0x1150 [ 732.219660][T14014] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 732.219674][T14014] ? __pfx_vfs_write+0x10/0x10 [ 732.219684][T14014] ? find_held_lock+0x2b/0x80 [ 732.219706][T14014] ksys_write+0x12a/0x250 [ 732.219716][T14014] ? __pfx_ksys_write+0x10/0x10 [ 732.219731][T14014] do_syscall_64+0xcd/0x4c0 [ 732.219750][T14014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.219761][T14014] RIP: 0033:0x7fa370d8eb69 [ 732.219771][T14014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.219782][T14014] RSP: 002b:00007fa371c6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 732.219792][T14014] RAX: ffffffffffffffda RBX: 00007fa370fb6080 RCX: 00007fa370d8eb69 [ 732.219799][T14014] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000003 [ 732.219805][T14014] RBP: 00007fa371c6b090 R08: 0000000000000000 R09: 0000000000000000 [ 732.219812][T14014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 732.219818][T14014] R13: 0000000000000001 R14: 00007fa370fb6080 R15: 00007ffd36d16e18 [ 732.219831][T14014] [ 732.801051][ T30] audit: type=1400 audit(1983223434.356:766): avc: denied { setopt } for pid=14017 comm="syz.5.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 733.042828][ T30] audit: type=1326 audit(1983223434.396:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.6.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c63d8eb69 code=0x7fc00000 [ 733.109521][ T30] audit: type=1326 audit(1983223434.446:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.6.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c63d8eb69 code=0x7fc00000 [ 733.181543][ T30] audit: type=1400 audit(1983223434.736:769): avc: denied { watch } for pid=14017 comm="syz.5.2030" path="/199/file0" dev="tmpfs" ino=1035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 733.265757][ T30] audit: type=1326 audit(1983223434.936:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.6.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c63d8eb69 code=0x7fc00000 [ 733.372329][ T30] audit: type=1326 audit(1983223434.936:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.6.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c63d8eb69 code=0x7fc00000 [ 733.435517][ T30] audit: type=1326 audit(1983223434.936:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.6.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c63d8eb69 code=0x7fc00000 [ 733.859012][ T30] audit: type=1326 audit(1983223434.936:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.6.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c63d8eb69 code=0x7fc00000 [ 733.884060][ T30] audit: type=1326 audit(1983223434.936:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.6.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c63d8eb69 code=0x7fc00000 [ 733.909428][ T30] audit: type=1326 audit(1983223434.936:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.6.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c63d8eb69 code=0x7fc00000 [ 734.243411][T14043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2036'. [ 734.258190][T14043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14043 comm=syz.1.2036 [ 734.566705][ T9879] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 734.687987][T14058] tc_dump_action: action bad kind [ 734.717147][ T9879] usb 6-1: device descriptor read/64, error -71 [ 734.724081][T14058] netlink: 'syz.6.2041': attribute type 10 has an invalid length. [ 734.732270][T14058] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2041'. [ 735.093871][ T9879] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 735.267473][ T9879] usb 6-1: device descriptor read/64, error -71 [ 735.495130][ T9879] usb usb6-port1: attempt power cycle [ 735.534201][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 735.683087][T14074] overlayfs: missing 'lowerdir' [ 736.178293][ T9879] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 736.665093][ T2982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 736.666236][ T6032] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 736.689443][ T9879] usb 6-1: device descriptor read/8, error -71 [ 736.946766][ T9879] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 737.095252][ T9879] usb 6-1: device descriptor read/8, error -71 [ 737.857010][ T9879] usb usb6-port1: unable to enumerate USB device [ 848.726518][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 848.733488][ C0] rcu: 1-...!: (1 GPs behind) idle=337c/1/0x4000000000000000 softirq=67932/67935 fqs=1 [ 848.744174][ C0] rcu: (detected by 0, t=10505 jiffies, g=59781, q=259 ncpus=2) [ 848.751888][ C0] Sending NMI from CPU 0 to CPUs 1: [ 848.751914][ C1] NMI backtrace for cpu 1 [ 848.751925][ C1] CPU: 1 UID: 0 PID: 14098 Comm: syz.0.2050 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 848.751943][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 848.751951][ C1] RIP: 0010:check_preemption_disabled+0x25/0xe0 [ 848.751978][ C1] Code: 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 75 fc 42 08 65 8b 05 6a fc 42 08 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d <41> 5c e9 04 f1 02 00 9c 58 f6 c4 02 74 ea 48 89 fd 65 48 8b 05 2a [ 848.751992][ C1] RSP: 0018:ffffc90000a08c80 EFLAGS: 00000092 [ 848.752004][ C1] RAX: 0000000000000001 RBX: ffffffff9b07b150 RCX: 0000000000000001 [ 848.752013][ C1] RDX: 0000000000000000 RSI: ffffffff8df3fe84 RDI: ffffffff8c160580 [ 848.752021][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 848.752029][ C1] R10: 0000000000000000 R11: ffffffff9b07b138 R12: 0000000000000001 [ 848.752037][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 848.752045][ C1] FS: 00007f2e668046c0(0000) GS:ffff8881247c6000(0000) knlGS:0000000000000000 [ 848.752059][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 848.752068][ C1] CR2: 00007f2e65b65b10 CR3: 0000000043b7d000 CR4: 00000000003526f0 [ 848.752077][ C1] Call Trace: [ 848.752083][ C1] [ 848.752090][ C1] lock_acquire+0x140/0x350 [ 848.752111][ C1] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 848.752132][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 848.752149][ C1] ? debug_object_activate+0x14c/0x4c0 [ 848.752165][ C1] debug_object_activate+0x14c/0x4c0 [ 848.752183][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 848.752201][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 848.752215][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 848.752230][ C1] enqueue_hrtimer+0x23/0x3b0 [ 848.752252][ C1] __hrtimer_run_queues+0x8ff/0xad0 [ 848.752270][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 848.752284][ C1] ? read_tsc+0x9/0x20 [ 848.752304][ C1] hrtimer_interrupt+0x397/0x8e0 [ 848.752320][ C1] ? ktime_get+0x1a7/0x310 [ 848.752341][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 848.752356][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 848.752374][ C1] [ 848.752378][ C1] [ 848.752383][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 848.752397][ C1] RIP: 0010:lockdep_init_map_type+0x40/0x280 [ 848.752410][ C1] Code: fb 8b 44 24 20 48 c7 47 08 00 00 00 00 48 c7 47 10 00 00 00 00 85 d2 0f 85 df 00 00 00 48 85 f6 0f 84 56 01 00 00 48 89 77 18 <44> 88 4f 20 44 88 47 21 88 47 22 48 85 ed 0f 84 7b 01 00 00 48 89 [ 848.752422][ C1] RSP: 0018:ffffc900036a7cc8 EFLAGS: 00000286 [ 848.752432][ C1] RAX: 0000000000000000 RBX: ffff888030803af0 RCX: 0000000000000000 [ 848.752441][ C1] RDX: 0000000000000000 RSI: ffffffff8bad5560 RDI: ffff888030803af0 [ 848.752449][ C1] RBP: ffffffff93dc6480 R08: 0000000000000002 R09: 0000000000000000 [ 848.752456][ C1] R10: ffff888030803ad7 R11: 0000000000000000 R12: 0000000000000000 [ 848.752464][ C1] R13: 0000000000000002 R14: 0000000000000002 R15: ffffffff9041e8f0 [ 848.752479][ C1] __raw_spin_lock_init+0x3a/0x110 [ 848.752493][ C1] __mutex_init+0x5f/0x120 [ 848.752513][ C1] init_file+0xe0/0x4c0 [ 848.752530][ C1] alloc_empty_file+0x73/0x1e0 [ 848.752548][ C1] alloc_file_pseudo+0x13a/0x230 [ 848.752566][ C1] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 848.752583][ C1] ? alloc_fd+0x471/0x7d0 [ 848.752599][ C1] sock_alloc_file+0x50/0x210 [ 848.752619][ C1] __sys_socket+0x1c0/0x260 [ 848.752633][ C1] ? __x64_sys_openat+0x174/0x210 [ 848.752651][ C1] ? __pfx___sys_socket+0x10/0x10 [ 848.752668][ C1] __x64_sys_socket+0x72/0xb0 [ 848.752682][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 848.752699][ C1] do_syscall_64+0xcd/0x4c0 [ 848.752719][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.752732][ C1] RIP: 0033:0x7f2e6598eb69 [ 848.752744][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 848.752756][ C1] RSP: 002b:00007f2e66803fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 848.752768][ C1] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f2e6598eb69 [ 848.752776][ C1] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 848.752784][ C1] RBP: 00007f2e65a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 848.752792][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.752799][ C1] R13: 0000000000000000 R14: 00007f2e65bb6240 R15: 00007ffcebf2daa8 [ 848.752813][ C1] [ 848.752908][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g59781 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 849.209406][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 849.219392][ C0] rcu: RCU grace-period kthread stack dump: [ 849.225276][ C0] task:rcu_preempt state:R running task stack:27888 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 849.238759][ C0] Call Trace: [ 849.242043][ C0] [ 849.244969][ C0] __schedule+0x1190/0x5de0 [ 849.249494][ C0] ? __pfx___schedule+0x10/0x10 [ 849.254344][ C0] ? find_held_lock+0x2b/0x80 [ 849.259015][ C0] ? schedule+0x2d7/0x3a0 [ 849.263368][ C0] schedule+0xe7/0x3a0 [ 849.267453][ C0] schedule_timeout+0x123/0x290 [ 849.272300][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 849.277669][ C0] ? __pfx_process_timeout+0x10/0x10 [ 849.282952][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 849.288753][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 849.294211][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 849.298965][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 849.304342][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 849.309535][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 849.314456][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 849.319298][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 849.325108][ C0] rcu_gp_kthread+0x270/0x380 [ 849.329773][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 849.334955][ C0] ? rcu_is_watching+0x12/0xc0 [ 849.339714][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 849.344911][ C0] ? __kthread_parkme+0x19e/0x250 [ 849.349932][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 849.355119][ C0] kthread+0x3c2/0x780 [ 849.359176][ C0] ? __pfx_kthread+0x10/0x10 [ 849.363755][ C0] ? rcu_is_watching+0x12/0xc0 [ 849.368509][ C0] ? __pfx_kthread+0x10/0x10 [ 849.373086][ C0] ret_from_fork+0x5d7/0x6f0 [ 849.377659][ C0] ? __pfx_kthread+0x10/0x10 [ 849.382236][ C0] ret_from_fork_asm+0x1a/0x30 [ 849.387003][ C0] [ 849.390006][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 849.396310][ C0] CPU: 0 UID: 0 PID: 14099 Comm: syz.6.2052 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 849.408014][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 849.418054][ C0] RIP: 0010:smp_call_function_many_cond+0xdfd/0x1600 [ 849.424721][ C0] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 05 05 0c 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 08 31 [ 849.444314][ C0] RSP: 0018:ffffc90003547398 EFLAGS: 00000293 [ 849.450375][ C0] RAX: 0000000000000000 RBX: ffff8880b853fe80 RCX: ffffffff81af8d91 [ 849.458341][ C0] RDX: ffff88803028a440 RSI: ffffffff81af8d6b RDI: 0000000000000005 [ 849.466300][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 849.474261][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 849.482219][ C0] R13: ffffed10170a7fd1 R14: 0000000000000001 R15: 0000000000000001 [ 849.490177][ C0] FS: 0000000000000000(0000) GS:ffff8881246c6000(0000) knlGS:0000000000000000 [ 849.499103][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 849.505679][ C0] CR2: 0000200000339000 CR3: 000000006bb7b000 CR4: 00000000003526f0 [ 849.513638][ C0] Call Trace: [ 849.516904][ C0] [ 849.519825][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 849.525189][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 849.530388][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 849.536792][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 849.541730][ C0] ? lock_acquire+0x179/0x350 [ 849.546408][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 849.551598][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 849.556959][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 849.562063][ C0] flush_tlb_mm_range+0x4a0/0x17a0 [ 849.567166][ C0] ? folio_mark_accessed+0xc1/0xc00 [ 849.572443][ C0] ? __pfx_folio_mark_accessed+0x10/0x10 [ 849.578067][ C0] ? arch_check_zapped_pte+0x9d/0x140 [ 849.583434][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 849.588974][ C0] ? rcu_is_watching+0x12/0xc0 [ 849.593730][ C0] unmap_page_range+0x20b2/0x42c0 [ 849.598769][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 849.604136][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 849.609063][ C0] ? uprobe_munmap+0x20/0x5c0 [ 849.613732][ C0] unmap_single_vma.constprop.0+0x153/0x240 [ 849.619622][ C0] unmap_vmas+0x218/0x470 [ 849.623945][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 849.628805][ C0] exit_mmap+0x1b9/0xb90 [ 849.633045][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 849.637819][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 849.642769][ C0] __mmput+0x12a/0x410 [ 849.646832][ C0] mmput+0x62/0x70 [ 849.650543][ C0] do_exit+0x7c7/0x2bf0 [ 849.654693][ C0] ? rcu_is_watching+0x12/0xc0 [ 849.659458][ C0] ? __pfx_do_exit+0x10/0x10 [ 849.664042][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 849.669053][ C0] ? find_held_lock+0x2b/0x80 [ 849.673724][ C0] do_group_exit+0xd3/0x2a0 [ 849.678225][ C0] get_signal+0x2673/0x26d0 [ 849.682720][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 849.687912][ C0] ? __pfx_get_signal+0x10/0x10 [ 849.692753][ C0] ? do_futex+0x122/0x350 [ 849.697078][ C0] ? __pfx_do_futex+0x10/0x10 [ 849.701750][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 849.707293][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 849.713453][ C0] exit_to_user_mode_loop+0x84/0x110 [ 849.718729][ C0] do_syscall_64+0x3f6/0x4c0 [ 849.723317][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.729200][ C0] RIP: 0033:0x7f6c63d8eb69 [ 849.733600][ C0] Code: Unable to access opcode bytes at 0x7f6c63d8eb3f. [ 849.740597][ C0] RSP: 002b:00007fff1c895be8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 849.748995][ C0] RAX: 0000000000000000 RBX: 00000000000b428e RCX: 00007f6c63d8eb69 [ 849.756951][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6c63fb5fac [ 849.764910][ C0] RBP: 0000000000000226 R08: 00007f6c64c25000 R09: 000000011c895edf [ 849.772865][ C0] R10: 00007fff1c895ce0 R11: 0000000000000246 R12: 00007f6c63fb5fac [ 849.780820][ C0] R13: 00007fff1c895ce0 R14: 00000000000b44b4 R15: 00007fff1c895d00 [ 849.788792][ C0]