last executing test programs: 9m49.615088983s ago: executing program 0 (id=812): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x143400, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, 0x0) 9m49.593426632s ago: executing program 0 (id=813): mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone3(&(0x7f0000000680)={0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440), {0xc}, &(0x7f0000000500)=""/140, 0x8c, &(0x7f00000005c0)=""/133, &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x3}, 0x58) 9m49.549372482s ago: executing program 0 (id=814): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80801) (async) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x4, 0x0) (async) mq_timedsend(r5, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x7c, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f00000001c0)=""/4096) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f00000001c0)=""/4096) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r7, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x0, "60055808889f90ac0600000500fdfd9ab67e1db9c9a431078d40f722e600"}) (async) ioctl$VIDIOC_QUERYCTRL(r7, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x0, "60055808889f90ac0600000500fdfd9ab67e1db9c9a431078d40f722e600"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getqdisc={0x28, 0x26, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x1, 0xfff3}, {0xffff, 0xc}, {0x1fff8, 0x4}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 9m49.243264596s ago: executing program 0 (id=817): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 9m49.161354847s ago: executing program 0 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 9m48.859038115s ago: executing program 0 (id=819): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mkdirat(r0, &(0x7f0000000380)='./file0\x00', 0x30) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010002000001000000000904000000cafb1a00"], 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) syz_pidfd_open(r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100003040000000000c0f0126405fedc", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900010069706970000000001400028005000a00000000000500090089000000"], 0x44}}, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {0x0}], 0x2}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet(0x2, 0x2, 0x0) 9m48.72091716s ago: executing program 32 (id=819): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mkdirat(r0, &(0x7f0000000380)='./file0\x00', 0x30) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010002000001000000000904000000cafb1a00"], 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) syz_pidfd_open(r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100003040000000000c0f0126405fedc", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900010069706970000000001400028005000a00000000000500090089000000"], 0x44}}, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {0x0}], 0x2}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet(0x2, 0x2, 0x0) 1m45.404556633s ago: executing program 3 (id=3185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x600, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040810}, 0x8011) socket$kcm(0x2, 0xa, 0x2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000100)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m43.466251777s ago: executing program 3 (id=3204): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1m43.37483392s ago: executing program 3 (id=3206): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m42.908756015s ago: executing program 4 (id=3211): syz_open_dev$dri(&(0x7f0000000000), 0x101, 0x10800) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x4a0040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000001040)="04000000010203", 0x7}], 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x89901) setns(r4, 0x80) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r4, 0x0, 0x160) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x402, 0x2b5, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xb5830000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) 1m42.731451354s ago: executing program 3 (id=3212): syz_open_dev$dri(&(0x7f0000000000), 0x101, 0x10800) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x4a0040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000001040)="04000000010203", 0x7}], 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x89901) setns(r4, 0x80) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r4, 0x0, 0x160) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x402, 0x2b5, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r5], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) 1m42.691355802s ago: executing program 3 (id=3213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0xe) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r5}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400048c0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x81442000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m42.678772457s ago: executing program 4 (id=3214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = io_uring_setup(0x3bc0, &(0x7f0000003f40)={0x0, 0xaadd, 0x2, 0x1, 0x369}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f00000055c0)={0x1, 0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f0000004040)=""/4096, 0x1000}], &(0x7f0000005580)}, 0x20) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000070a050000000000000000000a0040010900010073797a31"], 0x38}, 0x1, 0x0, 0x0, 0x20000850}, 0x0) 1m42.560502771s ago: executing program 4 (id=3215): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) socket$vsock_stream(0x28, 0x5, 0x28) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, 0x0, &(0x7f0000000100)=0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0x74000000) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e23, @multicast2}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x66, {0x2, 0x4e22, @remote}, 'veth0_macvtap\x00'}) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@l2={0x1f, 0x9b, @any, 0x8000}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="e2898b3626eb5bbcdf2cb8519c1c8abaf9314201ee0bcacbfadc723b3f86ef9d46637a89cafe1edf4fac54bbfc598025542da8beeea451e3d86cc06ec61960264703d25f1147d69edc52f1d690601d4485dd13c4f385281c6fa18180fb2008d50934cbbcf94681562e36e22a27537eec5eaf943c8a774052e904cc45c024280c38e2fb08e6748d26fedf5ede", 0x8c}], 0x1, &(0x7f00000004c0)=[{0x30, 0x10c, 0x8, "0458dd6bcacbe6b975f40c32a5fa436814d6c8efc6a416ef4ec6fe"}, {0x68, 0x116, 0x3, "06b3d35bf522ebb655ac37c3d4d2358d7d6b6ee941ef64053026094e5ff12de93ee2898dee0fc6660481804b0030962052d357fcdcb7a91e199aa4ae3efd5b03c2ad4c87ff2e2c9a7759c233fb11928f84575129"}, {0x40, 0x114, 0x7fffffff, "769379cbde091004e7242cbea6a28a6d01c18ed8be3d5305a72e2b7fb27d50290594a3fe5c59b915621b948372e4a822"}, {0x50, 0x104, 0x1682, "e486233a7b0f948e01e9da531f5b7851cd17e373388ce22e58333d174134cd05d44f0d733aa3fbc78d4d29cd3519347a8e3fdc62d50b4c67d2d5"}, {0x70, 0x115, 0x5, "2e3378cd2623b3095d9c588eec7e58a019666b4f7bfae9fcfc0116bb3c36770d164115b0dc78768d508358e61944c93f7029ec001ce2eef3cfbba2970f33e5268f096d27c39b53103e5212e4881284444a397141069d979ab158f279dd914f"}, {0x30, 0x119, 0x0, "bc8271d7e99fa912a9f4d5251e53354a7caae85f8df291369c1096"}, {0x110, 0x109, 0x294, "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"}], 0x2d8}, 0x4084) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m42.376866197s ago: executing program 5 (id=3217): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1m42.301157371s ago: executing program 5 (id=3218): syz_open_dev$dri(&(0x7f0000000000), 0x101, 0x10800) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x4a0040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000001040)="04000000010203", 0x7}], 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x89901) setns(r4, 0x80) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r4, 0x0, 0x160) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r5], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) 1m42.242838224s ago: executing program 5 (id=3219): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) sendfile(r1, r0, &(0x7f0000000040)=0x10, 0x80000001) (fail_nth: 3) 1m41.631651791s ago: executing program 1 (id=3224): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x156, 0x2, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x2000000, 0x1}, {0x4, 0x0, 0x10000000000004}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@local, 0x0, 0x2b}, 0xa, @in6=@private0, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) socket$inet6(0xa, 0x80001, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@mpls_getroute={0xa0, 0x1a, 0x4, 0x70bd2b, 0x0, {}, [@RTA_NEWDST={0x84, 0x13, [{0x2}, {0x4, 0x0, 0x1}, {0xfb}, {0x400}, {0x7fff, 0x0, 0x1}, {0x39}, {}, {0x5}, {0x80}, {0xd97, 0x0, 0x1}, {0xfffff}, {0xff, 0x0, 0x1}, {0x7}, {0x7, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0x3}, {0x5e1}, {0x8}, {0x400}, {0xd70b}, {0xf, 0x0, 0x1}, {0xffff4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7}, {0x5, 0x0, 0x1}, {0xe}, {0xb87}, {0x2}, {0x9}, {0x9, 0x0, 0x1}]}]}, 0xa0}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, r1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x401}, 0x50) add_key(0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r2, 0x204, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(r2, 0x4c, &(0x7f0000000040)=0xa9) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 1m41.599573118s ago: executing program 2 (id=3225): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) syz_io_uring_setup(0x2aca, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000002740)=[{&(0x7f0000000700)="0ea13e", 0x3}, {&(0x7f0000000740)="344265ee69d6bcd3877443bcd5a574f6f4fc44fe3b7ee8bd503fe23fec6a389cdad6b3", 0x23}], 0x2}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000626000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\x00') setsockopt$inet_tcp_int(r7, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) splice(r7, 0x0, r3, 0x0, 0x7ffff000, 0xa) 1m41.567569076s ago: executing program 1 (id=3226): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@gettaction={0x118, 0x32, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7fffffff}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0xc004}, 0x0) 1m41.540113512s ago: executing program 2 (id=3227): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x2, r1, r0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x18, 0x0, r1, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 1m41.47268518s ago: executing program 1 (id=3228): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a3000000000090002007379"], 0xa0}}, 0x0) 1m40.780049018s ago: executing program 3 (id=3229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0xe) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r5}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x81442000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m40.779668284s ago: executing program 2 (id=3230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x82, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0x3, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r3, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpriority(0x2, r4) r5 = syz_open_procfs(r2, &(0x7f0000000100)='net/icmp\x00') read$FUSE(r5, &(0x7f00000023c0)={0x2020}, 0x2020) preadv(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) read$FUSE(r5, &(0x7f0000004400)={0x2020}, 0x2020) syz_emit_ethernet(0x36, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xe, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1}}}}}}, 0x0) 1m40.779394374s ago: executing program 5 (id=3231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x4000000) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0xfffffffb, 0x6, 0x1f, 0x1, "6845695584467d1f9f895c2d6f2e30dce7065dcbc0e888df5a1e0fe409e3ebf47dbd98f3bfed1c2e837347eab56e438c003b08c4f3e63499a80ab760bc747f6d", "b93fa4ba209dd5a58fe2fd0d1b04c077cc9d840ddf000526cc0a0f9a5e03f4e5", [0x4, 0x1]}) 1m40.343286049s ago: executing program 2 (id=3232): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x20, 0xb, 0x84, {0x84, 0x2b, "c16cf09cd1f216e62011b52dacf3f1e4431e9dc084b1b6e6c8c7591368e9f751bda2f94d0f047cad1aa00ed6c8d09edc4d8eb4cec5c86880e9373bdc8c0504c1af199a37e5ec7939fc3bdcf571ad15e72aa15011dd71cd7946aa76c697588398d5063ff5cc4555e2f0527ed75cbecfe90acdfcaaa2d05463d0e34292b543ff3e0b8e"}}, &(0x7f00000000c0)={0x0, 0x3, 0xea, @string={0xea, 0x3, "c3dc4345f0ff2387c4f7ff858363c3c293f5180dc3996f9b5e087d7c271a96daab84ffcce7797b8e76f0f9865f769bfa19691fa24187e5ce2a3e8dab193df59b83471fb524279160542c321c8cc28989bb03339c44754cd1f1fc909c7ad4009baeba775cdf2c16ea9153ce3d2be0a80147ae695e30cc544bff7d013b760ca1311dc5de01b53e09c69dc8819dc3dabfe96af4ec19a2ce8ccf21664bda05fda2470a211df85ab77469409b5aed2885a2337230f3e3f458f7651a01eff5b6a3bb2037a4e73ce26069381441581bcc39da0ce8cddaefd2e1f5f9cba2ccfb7e87365cb9eb8be03e945750"}}, &(0x7f00000001c0)={0x0, 0x22, 0x9, {[@local=@item_012={0x0, 0x2, 0x8}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_012={0x1, 0x0, 0x8, "dd"}, @local=@item_4={0x3, 0x2, 0x2, "e224c276"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0xb97}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x14, 0x5c, "dca48782eb8c26a7edc61ada3d15cc799fd5020c3239732fab4c9bbed8d75aa329bbd42dc590e7b55404440f8ac00f325cbe7b3d00983725dd018a1896e587eefc10c51fc716efb3806bad313602404d14c6522c0f267479b22243c1"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x1, 0x2d, "f37b3a898c78ec61ad02fb758c92553c98fa24fc04360b7264ddb29fa15be35dc0e04b6439985a55323cb4ee81"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x8}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x0, 0x23, 0x4c, {0x4c, 0x1, "81449f48278ba80e05464cf788679b3721924641b175f7dfddd1a44a1045f62fdde67a9459e2fa938c0e2b6af9da61de609f6bad4fabf68dbf1bae51e265d728e491103bfd0a62214c99"}}, &(0x7f00000004c0)={0x0, 0x3, 0x94, @string={0x94, 0x3, "10785a7be441bb753075e970bdab92799d5ce267b84f32777ebd003c1465ff9b36e76eacd3514d55deb5da88a8d34d54054a698115ad9bf73fa25928a4af71900ceec8f73f9a558de0ad07ca24cd301ba96db708da11dd51b3065d3c81b7e343eb11a46790b8657905ef1fb4b505c44590ac88a6234fcd668923f2b66dfbbfaabfad685291f49c30f4292088a1884cace702"}}, &(0x7f0000000580)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x7, 0x0, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x3, 0x8}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x18, 0xa, 0xe, "4da24976", "9935883e"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0x9, 0xa, 0x7, 0x1, 0x5}}}, &(0x7f0000000b00)={0x84, &(0x7f00000006c0)={0xb3ca403ab5ed5ed3, 0x1, 0x68, "420d9d3b48235eac231041e2b46b207b294b2005b6886f4fee0f09dff9e152c9bdeb6681cf976cb0764be3cbc1fc7ba6c8e108399aa9bb7f70c43b13840dfc00a21b155812876da7e5d22d219f1ace09342e3f7614f6a24f27c6a6bc86f2448aad0b4d5282aea6cf"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0x80, 0x1, [0x87f]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x6b}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "afa1"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000940)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000980)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, 'FP'}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x4}}) 1m40.31115377s ago: executing program 5 (id=3233): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0xff8e}}, 0x40) (fail_nth: 4) 1m40.304955138s ago: executing program 1 (id=3234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000440)="9f870afe3c1c6c10e8151d5199ab11e66b4e0de2f79ac8c65d6356e0a3c9b44227eeccf8cb8f41714283537855459f278b4c40ffbbb0276601e31659ed38b92295a32b9176cdd102befb3f850a53dff73233018be37d1b733f846dfb90a13e6d996c5e5c5daff386dab026dde5d4a1dd8cce432f6d176ce09c154074b59b4d4ca3d8d9a1e17163e674bf94a39f7cabcc32c7d51acf426a0d88b42ebee7ad532c08b274e5424e09d9916f34527d4161fcbdbd3e7a300800a1be9171facf6ef4", &(0x7f0000000000)=""/48, &(0x7f0000000500)="5765525c5b192f2cd7170943adc7ff1ccd9237881a0aef4fb8cae2a2e948635893ec14ba14fc20c3f06ab2c209aad8ff0b3e1d575480cb8157d8742521a64f8d9bf38db5f70d6b0d1a1ed9fb556a6a612e248e79d6cfcf5651e44fa58e04f9a4a9491766b76275ebb1558aa495e421360b7458c438ecb7ae1a3f39791441eb1c24c913262bdffc37ab822d957e35b4a1be54a88aa9aa7b5d5d74f1c687ea0223ecda2aabb9122d0c1529933e987e7d7d07d411c8aa43f2e91ddffdc2a5037680da8372ed3f32ba2aab5c1683d6b9c4aa757f3a83a4ed208a130194074dcd8079e260f715f71a7a9e1bf4c7a84cd7fbc1613bb3f3", &(0x7f0000000680)="972bd846362b299efc0d8bf9e57d27320000fedfd727f3d9dd64f7b91eee4a42b28ef7e8e6cf076bbb0c4169ebc6e94684b4f09e9acb08b34fd0e0f975f2c66965ed95dc5654ce53386ba23912f846ae18ba5f22ccec65edd84e9d", 0x9f46, r2}, 0x38) unshare(0x400) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) getpid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xb, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1m36.788607136s ago: executing program 5 (id=3235): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x100000000000f7) keyctl$revoke(0x3, r0) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000004c0)="2ef438094c1db6c1cde61f7c8f19c576c50842c59c04d2602596cdcf38a2a931cecc3bb4f694eb84ef7a9f3b9054f0e58a3f59b9439ec8451fd56744b215a3be3efa0211c20f56332a4aea2f728128061a8b8f81331787c5eda81081cdf4ace49de3211bded8aac042d369e24c481a0482b0341e20ff91032dfacca4befb47d9771bfae302c1ed2f8ac140338e190bb3b383eb342766555404c3e518bad1dbba4e5f1e", 0xa3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0, r1}, &(0x7f0000000200)=""/20, 0x14, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x6, r4}, 0x38) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) lgetxattr(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000380)=""/118, 0x76) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x11, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d6, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0x2003}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m34.637288404s ago: executing program 2 (id=3236): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), 0x0}, 0x20) 1m34.582491781s ago: executing program 4 (id=3237): bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) (fail_nth: 6) 1m34.532455378s ago: executing program 1 (id=3238): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7020000190780000020412000805dc08e005260000ffff000000880000000f000000070000dd2200000800000003e000000000fffffffafe04f9891e0c1205000000000400000001fe06e2d4c3d90102125d75fd442fa8ba890444dc17fc8604c6e918e8071185086ffbf6b8e4f0d5bdc3d208f586106019f888a8e7c0462a93629e2e3cc84db1ce748bd00ca97251271bc30e8d6d8065c437091ed328c97ba45dbc97efa3c44ba2e879661eca92ca0ff7b331ef8a60566bdf9d91"], 0x1f5) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003000000000100000601000000000000000000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (rerun: 64) chdir(&(0x7f00000001c0)='./bus\x00') r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r6, 0x0, 0x0, 0x1001f0) lseek(r6, 0x0, 0x3) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) accept4(r0, 0x0, 0x0, 0x800) (rerun: 32) 1m33.824569606s ago: executing program 1 (id=3239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0xe) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r5}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400048c0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x81442000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m33.809419445s ago: executing program 4 (id=3240): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x2, r1, r0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x18, 0x0, r1, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 1m33.77200584s ago: executing program 2 (id=3241): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) r3 = dup(r2) recvmsg$kcm(r3, &(0x7f0000000700)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/238, 0xee}, {&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f0000000340)=""/83, 0x53}, {&(0x7f00000003c0)=""/36, 0x24}, {&(0x7f0000000400)=""/21, 0x15}, {&(0x7f0000000440)=""/85, 0x55}, {&(0x7f00000004c0)=""/214, 0xd6}], 0x7, &(0x7f0000000640)=""/179, 0xb3}, 0x10) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000740)={0x2002}) sendto$packet(r3, &(0x7f0000000780)="ec451203ea8d74e062de7354b2e09b1f48eaa9b1c831be622d90c1e0e393760a894814b173d538bb5be995d42daae9dfa1d124acdca04f8e8b3da63aa2e996268e3a5fbe80f7de41961cf1", 0x4b, 0x4000, &(0x7f0000000800)={0x11, 0x1a, r1, 0x1, 0x9, 0x6, @multicast}, 0x14) (async) write$UHID_INPUT(r3, &(0x7f0000000840)={0x8, {"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", 0x1000}}, 0x1006) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000001880), 0x8a180, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f00000018c0)={0x0, 0x0, 0xffffffffffffffff}) r5 = dup(r4) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000001900)={0x1, 0x8, 0x2}) (async) connect$inet(r3, &(0x7f0000001940)={0x2, 0x4e21, @multicast1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000019c0), r5) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'syztnl2\x00', r1, 0x700, 0x0, 0x6, 0xeca8, {{0x13, 0x4, 0x2, 0x1, 0x4c, 0x68, 0x0, 0x8, 0x4, 0x0, @remote, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x34, 0x15, 0x3, 0x4, [{@remote, 0x9}, {@remote, 0x7fe}, {@multicast1, 0x4}, {@private=0xa010100, 0x4}, {@remote, 0x6}, {@broadcast}]}, @end]}}}}}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001ac0)={0x0, @loopback, @private}, &(0x7f0000001b00)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001bc0)={'tunl0\x00', &(0x7f0000001b40)={'gretap0\x00', r1, 0x80, 0x8000, 0x6f5, 0x9, {{0xd, 0x4, 0x3, 0x9, 0x34, 0x64, 0x0, 0x5, 0x4, 0x0, @remote, @broadcast, {[@end, @timestamp={0x44, 0x1c, 0xa0, 0x0, 0x2, [0x10000, 0x2, 0x6, 0x513, 0x3, 0xfffffffd]}]}}}}}) (async) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000001c00)={0x0, @multicast1, @loopback}, &(0x7f0000001c40)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000001e00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x104, r7, 0x10, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4018090}, 0x54) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000002e40)={&(0x7f0000001e40)=""/4096, 0x1000, 0x1, 0x7}) (async) ftruncate(r0, 0x9) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000002e80)={0x0, @local, @dev}, &(0x7f0000002ec0)=0xc) (async) r12 = fcntl$getown(r3, 0x9) (async) r13 = syz_open_dev$usbmon(&(0x7f0000002f40), 0x6, 0xa00000) sendmsg$nl_generic(r6, &(0x7f00000042c0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004280)={&(0x7f0000002f80)={0x12e4, 0x40, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@typed={0x8, 0x121, 0x0, 0x0, @fd=r3}, @generic="b3848dce8f3304bd2e5b683df8f2b79ac1f54a1e5146f81dad8eb08b5647533cd49d8cba42ff60a4bd486fb74e4a20ca8d502fc53e8bf2e3972ddfe4a301bc5efcb4b559de519fe90be2e64e1e04939784806fb7f467dce0835933287101bd573044b77418164f2589aa6000aa0b362a5ff901e35e8d82e96278ff53c533e541c3b234e11b4c7fb4793339ac54bf073adfae5492639d35087fa0db58f1f3052e45fa17ef", @nested={0x18, 0xf8, 0x0, 0x1, [@typed={0x14, 0xd, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @nested={0xe5, 0x147, 0x0, 0x1, [@generic="2c429bb29dd2b0efacb77742304da9195d4d0109e83d747fc612043677cc5fd268b1cf0939cb19dfa93b233251bd17aeccaf7007e18eb6d2797be21105c75e170d76bbd207fd84f6e2799b1f252491f6f379634083de628a0c2e5a7170bd8db75dcad23af25e35ea9231ec0301e90b9946744132425fffa5a423ecbd00166eef10e14c55ad254c1cd7e16f9495ab2c7db7e4726f6be5fed5a5078fec2387933ad58e5d6c7b3ca9e49681e3ea2d1dc92d373dd1514e1d385cc320ce72426e9514819ff117077fe8e515cd37e798d06ce3efc08dff980ebddd49a0e260124d306fb5"]}, @typed={0x14, 0x10d, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x62, 0x0, 0x0, @pid=r12}, @nested={0x20, 0xbc, 0x0, 0x1, [@nested={0x4, 0x2c}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r13}, @nested={0x4, 0x7d}, @typed={0xb, 0x40, 0x0, 0x0, @str='dummy0\x00'}]}, @generic="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", @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@local}, @nested={0xd1, 0xa, 0x0, 0x1, [@typed={0xf, 0xbb, 0x0, 0x0, @str='netdevsim0\x00'}, @typed={0x4, 0x79}, @generic="9932eeb1e8ad1267cc6e30189b4cb75e90e087ecb4d2ef9bea78fd5fc2a56e93d96e0a46660c0fe28166f6968ea8f8b0ff7b0b7b0914b8cb39612533f8a0642ae531137081539956638670a5985a355c764c47da7dd8a724e5590f0e2afea0f179c599a013a44b40531b653fc869b67eb9f0df709b989b4c10f5e7e0d6a6b4c76722f208c75d2aaac9e335262f8fe90d93b87e38b158a7dedcad6d30b2117ef7aa8a28ad5fe57dd3e3", @nested={0x4, 0xeb}, @typed={0x8, 0x13, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x91}]}]}, 0x12e4}, 0x1, 0x0, 0x0, 0x4008015}, 0x4000) (async) sendfile(r0, r0, &(0x7f0000004300)=0x2, 0x81) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000004340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x2133, 0x18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0xed}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0xc, 0x4}}}}}]}}]}}, &(0x7f0000004980)={0xa, &(0x7f0000004380)={0xa, 0x6, 0x201, 0x2, 0x2, 0x2, 0x20, 0x5}, 0xc5, &(0x7f00000043c0)={0x5, 0xf, 0xc5, 0x3, [@generic={0xa1, 0x10, 0x4, "48abcbda586f72a7d6c6219d6ec6f903c4048bd9ef5f4bfcceed1dac2b0ca0be60a4fafbf19f3567b78ec4c28ba5f24ed46c2e8df063d39bb5687bb17ddfe74a297aea672f9602a859637b2aa12b0a8a1c85ba4d6b074a6ede033c0f4fbca28f167b87daad757f1cd96a1aac52b52d24ce6e786243a6b47a3420a46a99672872483be1e5cc2ec90ef166500d747796c8287aad88c4af280a268ae9836dd2"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x6, 0xb8, 0x4, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0xf5, "5feb2f2e71278482c7fedc10f24c3a32"}]}, 0x7, [{0xbf, &(0x7f00000044c0)=@string={0xbf, 0x3, "ad5f2a969008b16ceaaee6e5f75304bce522ff97f14db16c3d9a8380bebe87b4ea043d9c0af11dfbdf677a13eab19f0e524bfd07cddd333d6de54843d2aae9eae5e8fd89499cbf67e346cb1f450aa1f8166031679f1e3547b5a2fb418ae9207c2475d0397a507dd09ea486a74574d344ce9d56c5919267f734a9dadc6331fa6268bb9bba5cedd6adc738fc1c880ce95f78fbf3a3fcc353f2c6a8c23ab91edbab250aa863c9d762cce7ae91d34dae099fe7ca93dde222ab82c4a8703b4e"}}, {0xb, &(0x7f0000004580)=@string={0xb, 0x3, "1d742bdec16c8d6391"}}, {0x102, &(0x7f00000045c0)=@string={0x102, 0x3, "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"}}, {0x11, &(0x7f0000004700)=@string={0x11, 0x3, "2e1bd1bb4a0520c811a3d953ed85ff"}}, {0x100, &(0x7f0000004740)=@string={0x100, 0x3, "2e93154f61f5fdaa5f617ee20f4be5c99d2bc625c107d8bcc01bd52ba8237057473245d89a95847419b297cc31f7cafe1f34bd34165546d38c30fc9950c3de67bad0f20d1801f6c00d1b1edaf1384610b5c29fe06ba1b40e7bba5f4ded104c1308cd19c48e6c4c7386b3b9678ed57110a59f5d81ba228dabe04f649f594a0211ed462864443c6eef60b79cd41a781c5ed2ad0ac083b95d04c364e94e4a8bdc375444244e8fff91f99a45dddace9422eaae3e75878b52a2bd4e51503547b1edc9a5f21ec51e251d45827fd07a90d33db879ac25fa2fa271de6bc158959602f1b8cf6edc50cf0c670f25425ecf9e3dd27ffecc152c5236610a37df44782adc"}}, {0x14, &(0x7f0000004840)=@string={0x14, 0x3, "2cb1701cd5479082c3166ca1d3a1694c342a"}}, {0xd8, &(0x7f0000004880)=@string={0xd8, 0x3, "2a5545dc32945a7079742e61efa2509dfdf7d72ae718c7838185dacbb222918ede758e9e852d8fd0cad934bccd4cb6743fbd17db3c44593bc470a77fbba3c4bb0ac555216e49649248c6d35b3206d5b5fc31b0d0e0e991b8ee01c03ed6d6ff2c5ac7ae1f22a30855dd82d569be28c249fb04f44cd17d025b194f781972489570ed05a238c6c4122fefb175c8ddfed04a5529d46c34be21ea626a1680be46d5f0e16712ac8f4ea29bef7a67d6085b90e5fa2e4dabb84ffab5339e4eeb863def08e8dc59552269047ba92b6d2f2939bdc9efe89266dc21"}}]}) (async) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x3) 1m22.657705353s ago: executing program 4 (id=3242): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x82b00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000008c0)={"bed253332e675e0f9a3690b8528850e14932ffb8ec485e3ac83b700c16f7d3817f4d6898e4ed8e19004dcbbe0f93afcfde9847b54adf716d15c7400d9f5183f6cae795c8545037d7add0953a90d53e31d992cbc432f32631bbb1bae2ff17c062a502bd6772ea702881c52557cd7a8e1c396d800f523274d0aa2e6efe4f7466d959b43084ea61bc85cb84b449610d39d18b44943d4b553af41f014ece4a9160ae0a899f76dd1556f2cbf4eaa10a4b89c2413375ef9d84c3e5008bf58daf488262efa7925dfda5da193fce12c468e1ef81b9da8ef0f8a2251cc81a6a288a0b66f85fd27eecc64cf75194f247e684b9a474bd9b6949570c67aca2ee621bde1a74e85fada68c70db851e1fffa6d140cae50493d86105f16cc618d49067d446cee9373d5602d9691dee52654c1992985a6de051bd42a0df5bae349558002c83cf262a9d3b81f05657d83c27e4c52c1f15fd5b5c038804bacd838873ce5af5abcae8c12a8ddd300e666a955a0e286256027a077e4768b8864d4ba72f55256fb41ec36b29b894816a0a329826e721390d8764ba4e7d682ea5900d36523e16886c94dc5269a9087ebe941e03c40dc8a0244315ccb6bfef955de6cef858410e133eceb6a015bbc4467799b0ed4f77d8c7229dd100f1db405e54ea182cd694a9c4084388dc11204d58c7e5f67ae9d67eea8c09982a80165f4b72965ea857c8852afc5fa37fc3e907b3c65ab22e396139f215b34af4ba3b24cf441330d3af69b3bd74e1c60c58d5fc459e2793f58b4c9d1fc6427e62e2f76b4143ff6fdb60e48f246a6b06759a8d0697c5c33e4c67f4b43937b609fee4754f13c0dbc8b31bd0727c3843ffbb2eaf37b76c18dd1ebf0487ad7efbac32f32a45ca796da032d1cb1a3e592984f955e6df4ca515674cf4fb13350264eda103706edf60dc78485f67f4c08a917e2fa1e446bc7fdc68ba06e779a75eabc5b6e5356d3b72e5c5dab57eefc7b7e4a5bbce73276280ce0e4fbd7e99db8dcdeaf00d96ca1779eb6a5a1cbe76273c88762ab5225f2bbf1070e3b08add0bd142151320a55d98ae02da157b37a5c97bedb8a2b4208d3d60c8892a9d42698f768622e4b338d9a4378a40b3ba2eeee93a9816399b4c9922751e2c70a1c22d1c9f636280e6e7c5f4e7c3435c0ff575282a2d3bde3460e3328d3a5003cda8ca14dd0fdfc41103d75da42d70e13bc90f9354ab9f68ac8a01c0ef45f9e7b2c1a2b3461d4893938fb529243230b1af26d9ce7c6833e988f503afe768bf067eea5db399c60ad6b79886bfa85449fca4f5279704298e8bdd8561c4363919a02c259313d688ecda332ae800890365dc8961dd2472476df043c2667ca1dc7a20e8dde046ca32eb2302372cadb0cc763ea4e3ed4df9503814a8a2173522ab8391423df784afa042c5a81e5104bbcc47c222c7134a9fae947f"}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd1000, 0x0, 0xf4, 0xcf, 0xfd, 0xd4, 0x1, 0x0, 0x4, 0x3, 0x6}, {0x10102006, 0xffff1000, 0x9, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0xf, 0x3, 0xca}, {0x6000, 0x80a0000, 0xb, 0x0, 0x6, 0x7, 0x11, 0x21, 0xc, 0x0, 0x6, 0x7}, {0x8000000, 0x8000000, 0xd, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x0, 0x9}, {0xffff1000, 0x4, 0x9, 0x7f, 0x3, 0x9, 0x9, 0x6, 0x7, 0x14, 0x2e, 0x4b}, {0x2, 0x4, 0x0, 0x26, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0xdddd1000, 0x6000, 0x8, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x81, 0x0, 0x78}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x5, 0x54, 0x6, 0x2, 0x7}, {0x3000, 0x5}, {0x5000, 0x9}, 0x10000, 0x0, 0x0, 0x22a0, 0x9, 0x0, 0xe6e70c00, [0x1, 0x401, 0x8, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb6}, {0x83, 0x9, 0x6, '\x00', 0x4b}, {0xfc, 0xe, 0x8, '\x00', 0x40}, {0x0, 0xc0, 0x0, '\x00', 0x5}, {0x8, 0x30, 0x8, '\x00', 0xa8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x7, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x3}, {0x9, 0xd4, 0x6, '\x00', 0x4}, {0x1, 0x9, 0x15, '\x00', 0x8}, {0x0, 0x21, 0x6, '\x00', 0x7}, {0x1, 0x8a, 0x80, '\x00', 0x4}, {0xfa, 0xf1, 0x6, '\x00', 0xb3}, {0x4, 0x4, 0x8, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0xd}, {0x7, 0xfe, 0x4, '\x00', 0x2}, {0xef, 0x4a, 0x4}, {0xf, 0x8, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x15, 0xfd, 0x9, '\x00', 0x2}, {0x8, 0x8, 0xfa, '\x00', 0x42}]}}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000006c0)={{0x20, 0x9, 0x5, 0x32}, 'syz1\x00', 0x31}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 33 (id=3229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0xe) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r5}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x81442000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ive=1 [ 655.557046][T16603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.588807][T16603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.775929][ T5925] usb 6-1: new low-speed USB device number 68 using dummy_hcd [ 655.784869][T16614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.798711][T16614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.799644][T16616] No control pipe specified [ 655.957277][ T5925] usb 6-1: config 7 has an invalid interface number: 112 but max is 1 [ 655.965632][ T5925] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 655.976732][ T5925] usb 6-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 655.991038][ T5925] usb 6-1: config 7 has no interface number 0 [ 655.999180][ T5925] usb 6-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 656.016578][ T5925] usb 6-1: config 7 interface 112 has no altsetting 0 [ 656.028028][ T5925] usb 6-1: string descriptor 0 read error: -22 [ 656.034886][ T5925] usb 6-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 656.044258][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.067222][ T5925] usb 6-1: Found UVC 0.00 device (046d:089b) [ 656.081015][ T5925] usb 6-1: No valid video chain found. [ 656.273010][ T5852] usb 6-1: USB disconnect, device number 68 [ 656.365383][T16621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.379868][T16621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.532116][ T30] audit: type=1400 audit(1755669799.773:1502): avc: denied { write } for pid=16626 comm="syz.3.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 656.573041][ T30] audit: type=1400 audit(1755669799.803:1503): avc: denied { getopt } for pid=16626 comm="syz.3.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 656.767784][ T5852] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 657.007631][ T5852] usb 3-1: Using ep0 maxpacket: 8 [ 657.084471][ T5852] usb 3-1: unable to get BOS descriptor or descriptor too short [ 657.172503][ T5852] usb 3-1: config 4 interface 0 has no altsetting 0 [ 657.362180][T16632] input: syz0 as /devices/virtual/input/input68 [ 657.389424][ T5852] usb 3-1: string descriptor 0 read error: -22 [ 657.454638][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2848'. [ 657.473004][ T5852] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 657.570785][ T5852] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 658.283541][ T5852] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 658.375667][ T5852] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 658.896157][ T5852] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 658.908695][ T5852] usb 3-1: media controller created [ 659.031780][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 659.621126][T16664] geneve3: entered promiscuous mode [ 659.626695][T16664] geneve3: entered allmulticast mode [ 659.842904][T16625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.890024][T16625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.024974][T16625] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 660.156095][ T5957] usb 3-1: USB disconnect, device number 77 [ 660.781038][T16658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.792368][T16658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.835828][T16686] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 661.849030][ T30] audit: type=1400 audit(1755669805.093:1504): avc: denied { create } for pid=16685 comm="syz.1.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 661.940991][T16694] netlink: 'syz.5.2866': attribute type 1 has an invalid length. [ 661.960905][T16695] netlink: 'syz.5.2866': attribute type 1 has an invalid length. [ 662.390112][ T5925] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 662.935150][ T5925] usb 6-1: Using ep0 maxpacket: 16 [ 662.972485][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.984040][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.995045][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 663.026257][ T5925] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 663.244309][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.361242][ T5925] usb 6-1: config 0 descriptor?? [ 663.468913][T16732] netlink: 'syz.1.2870': attribute type 10 has an invalid length. [ 664.433580][T16743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.458663][ T5925] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 664.467153][T16743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.484382][ T5925] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 664.519354][ T30] audit: type=1400 audit(1755669807.763:1505): avc: granted { setsecparam } for pid=16741 comm="syz.4.2878" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 664.526944][ T5925] shield 0003:0955:7214.000E: item fetching failed at offset 3/5 [ 664.641025][T16751] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2877'. [ 664.663300][ T5925] shield 0003:0955:7214.000E: Parse failed [ 664.732179][ T5925] shield 0003:0955:7214.000E: probe with driver shield failed with error -22 [ 664.734438][T16751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2877'. [ 664.816556][ T5925] usb 6-1: USB disconnect, device number 69 [ 666.473641][T12177] udevd[12177]: symlink '../../loop9' '/dev/disk/by-diskseq/83.tmp-b7:9' failed: Read-only file system [ 666.783162][T16805] netlink: 'syz.3.2886': attribute type 10 has an invalid length. [ 666.994301][ T30] audit: type=1400 audit(1755669810.233:1506): avc: denied { map } for pid=16796 comm="syz.1.2887" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 667.087928][T16808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 667.196633][T16812] binder: 16811:16812 ioctl c0306201 2000000004c0 returned -14 [ 667.317046][T16815] FAULT_INJECTION: forcing a failure. [ 667.317046][T16815] name failslab, interval 1, probability 0, space 0, times 0 [ 667.647601][T16815] CPU: 0 UID: 0 PID: 16815 Comm: syz.5.2891 Not tainted syzkaller #0 PREEMPT(full) [ 667.647631][T16815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 667.647641][T16815] Call Trace: [ 667.647649][T16815] [ 667.647658][T16815] dump_stack_lvl+0x16c/0x1f0 [ 667.647676][T16815] should_fail_ex+0x512/0x640 [ 667.647692][T16815] should_failslab+0xc2/0x120 [ 667.647706][T16815] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 667.647719][T16815] ? __alloc_skb+0x2b2/0x380 [ 667.647730][T16815] __alloc_skb+0x2b2/0x380 [ 667.647740][T16815] ? __pfx___alloc_skb+0x10/0x10 [ 667.647751][T16815] ? netlink_ack+0x12d/0xb80 [ 667.647767][T16815] netlink_ack+0x15d/0xb80 [ 667.647781][T16815] netlink_rcv_skb+0x332/0x420 [ 667.647793][T16815] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 667.647806][T16815] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 667.647818][T16815] ? rcu_is_watching+0x12/0xc0 [ 667.647838][T16815] netlink_unicast+0x5aa/0x870 [ 667.647851][T16815] ? __pfx_netlink_unicast+0x10/0x10 [ 667.647865][T16815] netlink_sendmsg+0x8d1/0xdd0 [ 667.647879][T16815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.647893][T16815] ____sys_sendmsg+0xa95/0xc70 [ 667.647908][T16815] ? copy_msghdr_from_user+0x10a/0x160 [ 667.647920][T16815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.647935][T16815] ? rcu_is_watching+0x12/0xc0 [ 667.647949][T16815] ? finish_task_switch.isra.0+0x21c/0xc10 [ 667.647964][T16815] ___sys_sendmsg+0x134/0x1d0 [ 667.647976][T16815] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.647986][T16815] ? rcu_is_watching+0x12/0xc0 [ 667.648002][T16815] ? rcu_is_watching+0x12/0xc0 [ 667.648028][T16815] __sys_sendmsg+0x16d/0x220 [ 667.648039][T16815] ? __pfx___sys_sendmsg+0x10/0x10 [ 667.648050][T16815] ? rcu_is_watching+0x12/0xc0 [ 667.648066][T16815] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 667.648081][T16815] do_syscall_64+0xcd/0x4c0 [ 667.648094][T16815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.648107][T16815] RIP: 0033:0x7f950f38ebe9 [ 667.648116][T16815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.648127][T16815] RSP: 002b:00007f951028c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.648139][T16815] RAX: ffffffffffffffda RBX: 00007f950f5b5fa0 RCX: 00007f950f38ebe9 [ 667.648147][T16815] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000004 [ 667.648154][T16815] RBP: 00007f951028c090 R08: 0000000000000000 R09: 0000000000000000 [ 667.648160][T16815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.648167][T16815] R13: 00007f950f5b6038 R14: 00007f950f5b5fa0 R15: 00007ffc92fbcd78 [ 667.648177][T16815] [ 668.041043][ T30] audit: type=1400 audit(1755669811.263:1507): avc: denied { name_bind } for pid=16818 comm="syz.5.2892" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 669.004193][ T30] audit: type=1400 audit(1755669812.228:1508): avc: denied { remount } for pid=16836 comm="syz.5.2898" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 669.109048][T16850] netlink: 'syz.2.2896': attribute type 10 has an invalid length. [ 669.137873][T16851] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2900'. [ 669.712953][T16861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.782198][T16861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.834284][ T5957] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 670.106128][ T5957] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.116626][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 670.154383][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 670.204236][ T5957] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 670.266789][ T5957] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 670.286326][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.305130][ T5957] usb 6-1: Product: syz [ 670.315490][ T5957] usb 6-1: Manufacturer: syz [ 670.324428][ T5957] usb 6-1: SerialNumber: syz [ 670.395408][ T5957] usb 6-1: config 0 descriptor?? [ 670.561148][ T5957] adutux 6-1:0.0: interrupt endpoints not found [ 670.800041][T16366] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 670.808686][T16366] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 670.816364][T16366] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 670.824258][T16366] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 670.831756][T16366] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 670.867880][ T30] audit: type=1400 audit(1755669814.088:1509): avc: denied { remount } for pid=16879 comm="syz.4.2912" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 671.240457][ T30] audit: type=1400 audit(1755669814.098:1510): avc: denied { accept } for pid=16879 comm="syz.4.2912" lport=35409 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 671.298640][ T30] audit: type=1400 audit(1755669814.098:1511): avc: denied { setopt } for pid=16879 comm="syz.4.2912" lport=35409 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 671.332548][ T30] audit: type=1400 audit(1755669814.098:1512): avc: denied { mount } for pid=16879 comm="syz.4.2912" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 671.425430][ T30] audit: type=1400 audit(1755669814.508:1513): avc: denied { mounton } for pid=16885 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 671.687064][T16885] chnl_net:caif_netlink_parms(): no params data found [ 671.895441][T16885] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.919465][T16885] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.934369][T16885] bridge_slave_0: entered allmulticast mode [ 671.950272][T16885] bridge_slave_0: entered promiscuous mode [ 672.028463][T16912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.074792][T16912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.089516][T16898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.101277][T16885] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.114327][T16898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.120393][T16885] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.131163][T16885] bridge_slave_1: entered allmulticast mode [ 672.142556][T16885] bridge_slave_1: entered promiscuous mode [ 672.179228][T16885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.234062][T16885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.314887][T16885] team0: Port device team_slave_0 added [ 672.373585][T16885] team0: Port device team_slave_1 added [ 672.394066][T16885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.401443][T16885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.427771][T16885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.440006][T16885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.447820][T16885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.475992][T16885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.505568][ T6011] usb 6-1: USB disconnect, device number 70 [ 672.523159][T16885] hsr_slave_0: entered promiscuous mode [ 672.531628][T16885] hsr_slave_1: entered promiscuous mode [ 672.548946][T16885] debugfs: 'hsr0' already exists in 'hsr' [ 672.555028][T16885] Cannot create hsr debugfs directory [ 672.630199][T16885] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.678357][T16885] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.039678][T16885] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.088071][T16885] team0: Port device netdevsim0 removed [ 673.096366][T16885] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.239804][T16885] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 673.275391][T15843] Bluetooth: hci4: command tx timeout [ 673.357933][T16939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.407548][T16885] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 673.414594][T16939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.462219][T16885] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 673.609328][T16885] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 673.681474][T16885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.972138][T16885] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.992544][ T6755] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.999642][ T6755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.009276][ T6755] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.016407][ T6755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.987685][T16885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.018064][T16967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.050820][T16967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.112272][T16885] veth0_vlan: entered promiscuous mode [ 675.128998][T16885] veth1_vlan: entered promiscuous mode [ 675.168509][T16885] veth0_macvtap: entered promiscuous mode [ 675.182472][T16885] veth1_macvtap: entered promiscuous mode [ 675.199437][T16885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.215787][T16885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.233717][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.244199][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.253668][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.264816][ T2909] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.331491][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.354517][T15843] Bluetooth: hci4: command tx timeout [ 675.360693][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.386996][ T6755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.398419][ T6755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.413977][ T30] audit: type=1400 audit(1755669818.648:1514): avc: denied { mounton } for pid=16885 comm="syz-executor" path="/root/syzkaller.EAR4Ln/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 675.443428][ T30] audit: type=1400 audit(1755669818.668:1515): avc: denied { mounton } for pid=16885 comm="syz-executor" path="/root/syzkaller.EAR4Ln/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 675.473438][ T30] audit: type=1400 audit(1755669818.668:1516): avc: denied { mounton } for pid=16885 comm="syz-executor" path="/root/syzkaller.EAR4Ln/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=61010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 675.502302][ T30] audit: type=1400 audit(1755669818.678:1517): avc: denied { mounton } for pid=16885 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 675.526210][ T30] audit: type=1400 audit(1755669818.678:1518): avc: denied { mount } for pid=16885 comm="syz-executor" name="/" dev="gadgetfs" ino=7160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 675.549360][ T30] audit: type=1400 audit(1755669818.678:1519): avc: denied { mounton } for pid=16885 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 676.006802][ T5852] usb 2-1: USB disconnect, device number 33 [ 676.074281][ T5924] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 676.246638][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 676.280486][ T5924] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 676.301777][ T5924] usb 3-1: config 0 has no interface number 0 [ 676.325163][ T5924] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 676.400365][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.418968][ T5924] usb 3-1: Product: syz [ 676.428754][ T5924] usb 3-1: Manufacturer: syz [ 676.482554][ T5924] usb 3-1: SerialNumber: syz [ 676.508227][ T5924] usb 3-1: config 0 descriptor?? [ 676.517260][ T5924] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 676.533968][T16366] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 676.543645][T16366] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 676.551648][T16366] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 676.562575][T16366] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 676.571890][T16366] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 676.796599][ T5924] gspca_spca1528: reg_w err -71 [ 676.846302][ T5924] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 676.867840][ T5924] usb 3-1: USB disconnect, device number 78 [ 676.964566][T16989] chnl_net:caif_netlink_parms(): no params data found [ 677.011386][T16989] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.019261][T16989] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.026626][T16989] bridge_slave_0: entered allmulticast mode [ 677.033722][T16989] bridge_slave_0: entered promiscuous mode [ 677.192374][T16989] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.201204][T16989] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.210478][T16989] bridge_slave_1: entered allmulticast mode [ 677.218820][T16989] bridge_slave_1: entered promiscuous mode [ 677.247803][T16989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.259451][T16989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.304405][T16989] team0: Port device team_slave_0 added [ 677.315877][T16989] team0: Port device team_slave_1 added [ 677.342046][T16989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.351793][T16989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.389429][T16989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.415334][T16989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.423436][T16989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.449427][T16366] Bluetooth: hci4: command tx timeout [ 677.455990][T16989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.495880][T16989] hsr_slave_0: entered promiscuous mode [ 677.506518][T16989] hsr_slave_1: entered promiscuous mode [ 677.515196][T16989] debugfs: 'hsr0' already exists in 'hsr' [ 677.521816][T16989] Cannot create hsr debugfs directory [ 677.698766][T16989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.770309][T16989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.297368][T16989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.389290][T16989] team0: Port device netdevsim0 removed [ 678.725946][T16989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.741043][T16366] Bluetooth: hci5: command tx timeout [ 679.403113][ T30] audit: type=1400 audit(1755669822.588:1520): avc: denied { getopt } for pid=17026 comm="syz.2.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 679.440714][ T30] audit: type=1400 audit(1755669822.588:1521): avc: denied { ioctl } for pid=17026 comm="syz.2.2947" path="socket:[60316]" dev="sockfs" ino=60316 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 679.467597][ T30] audit: type=1400 audit(1755669822.598:1522): avc: denied { map } for pid=17026 comm="syz.2.2947" path="socket:[60318]" dev="sockfs" ino=60318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 679.504305][T17031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.515134][T17031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.515410][T16366] Bluetooth: hci4: command tx timeout [ 679.558131][ T30] audit: type=1400 audit(1755669822.788:1523): avc: denied { read } for pid=17032 comm="syz.5.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 679.615031][T16989] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 679.625255][T16989] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 679.639847][T16989] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 679.660877][T16989] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 679.757074][T17047] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 679.780475][T17033] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input69 [ 679.786026][T16989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.842836][T16989] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.864900][T15540] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.872057][T15540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.903538][T15540] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.910711][T15540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.947142][T16989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 679.970366][T17057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2958'. [ 679.985987][T17058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2957'. [ 680.167838][T16989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.201688][T16989] veth0_vlan: entered promiscuous mode [ 680.211949][T16989] veth1_vlan: entered promiscuous mode [ 680.241599][T16989] veth0_macvtap: entered promiscuous mode [ 680.251787][T16989] veth1_macvtap: entered promiscuous mode [ 680.272597][T16989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.286599][T16989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.300483][ T8567] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.319671][ T8567] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.345268][ T8567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.354738][ T8567] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.417589][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.426968][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.487721][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.505991][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.539436][T17082] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2935'. [ 680.584878][ T6011] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 680.780905][ T6011] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.795354][T16366] Bluetooth: hci5: command tx timeout [ 680.901626][ T6011] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 680.930592][ T5925] usb 4-1: USB disconnect, device number 70 [ 680.936598][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 680.949922][ T6011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.968164][ T5925] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 681.083509][ T6011] usb 3-1: config 0 descriptor?? [ 681.107437][ T6011] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 681.124285][ T43] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 681.284521][ T43] usb 2-1: device descriptor read/64, error -71 [ 681.296155][T15843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 681.303870][T15843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 681.314825][T15843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 681.322839][T15843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 681.331081][T15843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 681.348153][T15540] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.364316][ T92] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 681.365523][ T6011] usb 3-1: USB disconnect, device number 79 [ 681.427131][ T30] audit: type=1400 audit(1755669824.668:1524): avc: denied { read } for pid=17098 comm="syz.4.2972" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 681.450949][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.458338][T15540] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.460569][ T30] audit: type=1400 audit(1755669824.668:1525): avc: denied { open } for pid=17098 comm="syz.4.2972" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 681.514587][ T92] usb 6-1: Using ep0 maxpacket: 16 [ 681.533379][ T92] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 681.541587][ T92] usb 6-1: config 0 has no interface number 0 [ 681.542613][T15540] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.554384][ T92] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 681.560068][ T43] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 681.575875][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.605436][ T92] usb 6-1: Product: syz [ 681.611969][ T92] usb 6-1: Manufacturer: syz [ 681.626715][ T92] usb 6-1: SerialNumber: syz [ 681.645298][ T92] usb 6-1: config 0 descriptor?? [ 681.646944][T17107] syz.4.2974 (17107): drop_caches: 2 [ 681.658964][ T92] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 681.659869][T15540] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.688159][T17096] chnl_net:caif_netlink_parms(): no params data found [ 681.704509][ T43] usb 2-1: device descriptor read/64, error -71 [ 681.727592][T17096] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.735216][T17096] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.742424][T17096] bridge_slave_0: entered allmulticast mode [ 681.749481][T17096] bridge_slave_0: entered promiscuous mode [ 681.757433][T17096] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.764994][T17096] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.772149][T17096] bridge_slave_1: entered allmulticast mode [ 681.779302][T17096] bridge_slave_1: entered promiscuous mode [ 681.799844][T17096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.811738][T17096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.825126][ T43] usb usb2-port1: attempt power cycle [ 681.849263][T17096] team0: Port device team_slave_0 added [ 681.863424][ T92] gspca_spca1528: reg_w err -71 [ 681.870399][T17096] team0: Port device team_slave_1 added [ 681.884259][ T92] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 681.896612][ T92] usb 6-1: USB disconnect, device number 71 [ 681.905915][T17096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.920596][T17096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.949705][T17096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.956500][ T30] audit: type=1400 audit(1755669825.198:1526): avc: denied { setopt } for pid=17114 comm="syz.2.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 682.420416][ T43] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 682.451167][ T43] usb 2-1: device descriptor read/8, error -71 [ 682.704904][ T43] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 682.765021][ T43] usb 2-1: device descriptor read/8, error -71 [ 682.883987][T15843] Bluetooth: hci5: command tx timeout [ 682.884191][ T92] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 682.905240][ T43] usb usb2-port1: unable to enumerate USB device [ 683.192053][T17136] input: syz0 as /devices/virtual/input/input70 [ 683.369696][T15540] bond0 (unregistering): Released all slaves [ 683.428238][T15843] Bluetooth: hci0: command tx timeout [ 683.515072][T15540] bond1 (unregistering): Released all slaves [ 683.773948][T15540] bond2 (unregistering): Released all slaves [ 684.521254][T15540] bond3 (unregistering): Released all slaves [ 684.524177][T17147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2979'. [ 684.530778][T15540] bond4 (unregistering): Released all slaves [ 684.546323][T15540] bond5 (unregistering): Released all slaves [ 684.556538][T15540] bond6 (unregistering): Released all slaves [ 684.565834][T15540] bond7 (unregistering): Released all slaves [ 684.574001][T15540] bond8 (unregistering): Released all slaves [ 684.584434][T17096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.591397][T17096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.617301][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.623954][T17096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.640990][T17134] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 684.642693][T17136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2976'. [ 684.665069][ T92] usb 6-1: Using ep0 maxpacket: 16 [ 684.690291][ T92] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 684.704832][ T92] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.716920][ T92] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 684.730885][T15540] tipc: Disabling bearer [ 684.738789][ T92] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 684.748815][T15540] tipc: Left network mode [ 684.762727][T17096] hsr_slave_0: entered promiscuous mode [ 684.769174][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.778654][T15540] IPVS: stopping master sync thread 6310 ... [ 684.779199][T17153] FAULT_INJECTION: forcing a failure. [ 684.779199][T17153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 684.785313][T17096] hsr_slave_1: entered promiscuous mode [ 684.805935][T15540] IPVS: stopping master sync thread 6308 ... [ 684.812199][ T92] usb 6-1: Product: syz [ 684.816432][T15540] IPVS: stopping master sync thread 6307 ... [ 684.819087][T17153] CPU: 1 UID: 0 PID: 17153 Comm: syz.1.2980 Not tainted syzkaller #0 PREEMPT(full) [ 684.819113][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 684.819123][T17153] Call Trace: [ 684.819129][T17153] [ 684.819135][T17153] dump_stack_lvl+0x16c/0x1f0 [ 684.819157][T17153] should_fail_ex+0x512/0x640 [ 684.819177][T17153] should_fail_alloc_page+0xe7/0x130 [ 684.819197][T17153] prepare_alloc_pages+0x3c2/0x610 [ 684.819218][T17153] ? process_measurement+0x4a6/0x23e0 [ 684.819241][T17153] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 684.819259][T17153] ? up_write+0x1b2/0x520 [ 684.819276][T17153] ? process_measurement+0x1e6/0x23e0 [ 684.819299][T17153] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 684.819316][T17153] ? lock_release+0x201/0x2f0 [ 684.819338][T17153] ? __pfx_process_measurement+0x10/0x10 [ 684.819362][T17153] ? rcu_is_watching+0x12/0xc0 [ 684.819382][T17153] ? unwind_next_frame+0x3f4/0x20a0 [ 684.819399][T17153] ? rcu_is_watching+0x12/0xc0 [ 684.819416][T17153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 684.819439][T17153] ? policy_nodemask+0xea/0x4e0 [ 684.819457][T17153] alloc_pages_mpol+0x1fb/0x550 [ 684.819475][T17153] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 684.819491][T17153] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 684.819512][T17153] ? is_bpf_text_address+0x94/0x1a0 [ 684.819530][T17153] ? kernel_text_address+0x8d/0x100 [ 684.819549][T17153] alloc_pages_noprof+0x131/0x390 [ 684.819566][T17153] __pud_alloc+0x3b/0x750 [ 684.819587][T17153] __handle_mm_fault+0x13de/0x2a50 [ 684.819611][T17153] ? mt_find+0x3ef/0xa30 [ 684.819628][T17153] ? __pfx___handle_mm_fault+0x10/0x10 [ 684.819650][T17153] ? __pfx_mt_find+0x10/0x10 [ 684.819672][T17153] ? find_vma+0xbf/0x140 [ 684.819689][T17153] ? __pfx_find_vma+0x10/0x10 [ 684.819707][T17153] handle_mm_fault+0x589/0xd10 [ 684.819729][T17153] ? __bpf_trace_exceptions+0x1/0x40 [ 684.819753][T17153] do_user_addr_fault+0x7a6/0x1370 [ 684.819770][T17153] ? rcu_is_watching+0x12/0xc0 [ 684.819789][T17153] exc_page_fault+0x5c/0xb0 [ 684.819804][T17153] asm_exc_page_fault+0x26/0x30 [ 684.819819][T17153] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 684.819842][T17153] Code: c4 10 e9 54 1f 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 684.819857][T17153] RSP: 0018:ffffc9001c2dfd70 EFLAGS: 00050202 [ 684.819871][T17153] RAX: 0000000000000001 RBX: 0000200000000040 RCX: 0000000000000004 [ 684.819882][T17153] RDX: fffff5200385bfbc RSI: 0000200000000040 RDI: ffffc9001c2dfde0 [ 684.819892][T17153] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff5200385bfbc [ 684.819902][T17153] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000000 [ 684.819911][T17153] R13: ffffc9001c2dfde0 R14: 0000000000000000 R15: 0000000000000000 [ 684.819931][T17153] _copy_from_user+0x98/0xd0 [ 684.819951][T17153] do_sock_getsockopt+0x3ca/0x440 [ 684.819972][T17153] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 684.819990][T17153] ? lock_release+0x201/0x2f0 [ 684.820017][T17153] __sys_getsockopt+0x12f/0x260 [ 684.820033][T17153] __x64_sys_getsockopt+0xbd/0x160 [ 684.820048][T17153] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 684.820066][T17153] do_syscall_64+0xcd/0x4c0 [ 684.820083][T17153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.820098][T17153] RIP: 0033:0x7f37fa18ebe9 [ 684.820110][T17153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.820125][T17153] RSP: 002b:00007f37faf79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 684.820139][T17153] RAX: ffffffffffffffda RBX: 00007f37fa3b5fa0 RCX: 00007f37fa18ebe9 [ 684.820149][T17153] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 684.820158][T17153] RBP: 00007f37faf79090 R08: 0000200000000040 R09: 0000000000000000 [ 684.820168][T17153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.820177][T17153] R13: 00007f37fa3b6038 R14: 00007f37fa3b5fa0 R15: 00007ffdd5b3c348 [ 684.820193][T17153] [ 684.914427][ T30] audit: type=1400 audit(1755669828.048:1527): avc: denied { create } for pid=17154 comm="syz.4.2981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 684.916492][ T92] usb 6-1: Manufacturer: syz [ 684.924009][T17096] debugfs: 'hsr0' already exists in 'hsr' [ 684.927112][ T92] usb 6-1: SerialNumber: syz [ 684.934529][T15540] IPVS: stopping master sync thread 6306 ... [ 684.939746][T17096] Cannot create hsr debugfs directory [ 684.974328][T15843] Bluetooth: hci5: command tx timeout [ 685.411160][ T5924] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 685.474639][ T92] usb 6-1: 0:2 : does not exist [ 685.514795][T15843] Bluetooth: hci0: command tx timeout [ 685.591327][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 685.601489][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.613100][ T5924] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 685.634720][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.646381][T15540] hsr_slave_0: left promiscuous mode [ 685.677678][ T5924] usb 2-1: config 0 descriptor?? [ 685.680033][T15540] hsr_slave_1: left promiscuous mode [ 685.687615][ T5924] gspca_main: sq930x-2.14.0 probing 041e:403c [ 685.804212][ T6011] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 685.872656][ T92] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 685.911232][T13706] udevd[13706]: setting mode of /dev/snd/controlC3 to 020660 failed: Read-only file system [ 685.916091][T12177] udevd[12177]: setting mode of /dev/mixer3 to 020660 failed: Read-only file system [ 685.925294][ T92] usb 6-1: USB disconnect, device number 72 [ 685.936594][ T6011] usb 3-1: device descriptor read/64, error -71 [ 685.936866][T13706] udevd[13706]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: Read-only file system [ 685.963314][T12177] udevd[12177]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: Read-only file system [ 686.131385][T17188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.144025][T17188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.156839][ T30] audit: type=1400 audit(1755669829.398:1528): avc: denied { write } for pid=17187 comm="syz.4.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 686.195996][ T6011] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 686.334418][ T6011] usb 3-1: device descriptor read/64, error -71 [ 686.444837][ T6011] usb usb3-port1: attempt power cycle [ 686.583835][T17096] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 686.584257][ T5924] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 686.599877][T17096] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 686.675643][ T5924] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 687.597910][T15843] Bluetooth: hci0: command tx timeout [ 687.603000][ T6011] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 689.635712][ T5924] usb 2-1: USB disconnect, device number 38 [ 689.655754][T17096] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 689.674249][T15843] Bluetooth: hci0: command tx timeout [ 689.763164][T17096] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 689.892142][ T6011] usb 3-1: device not accepting address 82, error -71 [ 690.261473][T17096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.287723][T17096] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.326017][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.333103][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.384739][T17096] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 690.404550][T17096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 690.427268][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.434403][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.815783][T17248] netlink: 'syz.5.2990': attribute type 12 has an invalid length. [ 690.823715][T17248] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.2990'. [ 691.453665][T17096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.698210][T17096] veth0_vlan: entered promiscuous mode [ 691.721521][T17096] veth1_vlan: entered promiscuous mode [ 691.787136][T17096] veth0_macvtap: entered promiscuous mode [ 691.823485][ T30] audit: type=1400 audit(1755669835.058:1529): avc: denied { listen } for pid=17268 comm="syz.4.2994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 691.832471][T17096] veth1_macvtap: entered promiscuous mode [ 691.922718][T17096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.962379][ T30] audit: type=1400 audit(1755669835.088:1530): avc: denied { setopt } for pid=17268 comm="syz.4.2994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 691.982822][T17096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.200101][ T43] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 692.294874][T17217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.305869][T17217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.324046][T17217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.335160][T17217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.365204][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 692.373107][ T43] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 1552, setting to 1024 [ 692.384928][ T43] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 692.413230][ T43] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 692.426347][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.438722][ T43] usb 3-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.454570][ T6011] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 692.466540][ T43] usb 3-1: config 1 interface 0 has no altsetting 0 [ 692.473207][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.476930][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 692.491476][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.505590][ T43] usb 3-1: Product: syz [ 692.509859][ T43] usb 3-1: Manufacturer: syz [ 692.536931][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.537888][ T43] usb 3-1: SerialNumber: syz [ 692.558584][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.586146][T17254] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 692.599649][T17254] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 692.615348][ T6011] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 692.624681][ T6011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.655258][ T6011] usb 2-1: config 0 descriptor?? [ 692.697473][ T6011] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 693.342182][ T43] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 693.402584][ T6011] gspca_stv06xx: I2C: Read error writing address: -71 [ 693.443402][ T43] usb 3-1: USB disconnect, device number 84 [ 693.495554][ T6011] usb 2-1: USB disconnect, device number 39 [ 695.074226][ T6011] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 695.284613][ T6011] usb 2-1: Using ep0 maxpacket: 16 [ 695.305358][ T6011] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 695.316512][ T6011] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.351019][ T6011] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 695.446058][ T6011] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 695.456938][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.182454][ T6011] usb 2-1: Product: syz [ 696.214559][ T6011] usb 2-1: Manufacturer: syz [ 696.229571][ T6011] usb 2-1: SerialNumber: syz [ 696.273418][T17346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 696.280312][T17346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 696.286466][T17346] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 696.292486][T17346] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 696.300367][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3005'. [ 696.312141][T17353] sctp: [Deprecated]: syz.5.3005 (pid 17353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 696.312141][T17353] Use struct sctp_sack_info instead [ 696.433826][T17346] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 696.483992][T17346] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 696.493611][T17346] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 696.505041][T17346] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 696.527372][T17346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 696.533574][T17346] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 696.551659][T17346] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 696.808975][ T6011] usb 2-1: 0:2 : does not exist [ 697.143441][T17376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.155285][T17376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.214673][ T6011] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 697.236283][ T6011] usb 2-1: USB disconnect, device number 40 [ 697.246053][T12177] udevd[12177]: setting mode of /dev/mixer3 to 020660 failed: Read-only file system [ 697.259435][T13706] udevd[13706]: setting mode of /dev/snd/controlC3 to 020660 failed: Read-only file system [ 697.286088][T12177] udevd[12177]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: Read-only file system [ 697.299422][ T30] audit: type=1326 audit(1755669840.538:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.2.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2cd58ebe9 code=0x7ffc0000 [ 697.305425][T13706] udevd[13706]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: Read-only file system [ 697.436796][T17384] FAULT_INJECTION: forcing a failure. [ 697.436796][T17384] name failslab, interval 1, probability 0, space 0, times 0 [ 697.450908][T17384] CPU: 0 UID: 0 PID: 17384 Comm: syz.3.3018 Not tainted syzkaller #0 PREEMPT(full) [ 697.450928][T17384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 697.450935][T17384] Call Trace: [ 697.450940][T17384] [ 697.450945][T17384] dump_stack_lvl+0x16c/0x1f0 [ 697.450961][T17384] should_fail_ex+0x512/0x640 [ 697.450976][T17384] should_failslab+0xc2/0x120 [ 697.450990][T17384] __kmalloc_cache_noprof+0x6a/0x3e0 [ 697.451008][T17384] ? genl_start+0x1e8/0x980 [ 697.451024][T17384] genl_start+0x1e8/0x980 [ 697.451038][T17384] __netlink_dump_start+0x60b/0x990 [ 697.451051][T17384] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 697.451067][T17384] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 697.451082][T17384] ? genl_op_from_small+0x25/0x440 [ 697.451096][T17384] ? __pfx_genl_get_cmd+0x10/0x10 [ 697.451109][T17384] ? __pfx_genl_start+0x10/0x10 [ 697.451122][T17384] ? __pfx_genl_dumpit+0x10/0x10 [ 697.451135][T17384] ? __pfx_genl_done+0x10/0x10 [ 697.451149][T17384] ? __radix_tree_lookup+0x21f/0x2c0 [ 697.451169][T17384] genl_rcv_msg+0x46e/0x800 [ 697.451184][T17384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.451198][T17384] ? __pfx_batadv_netlink_dump_hardif+0x10/0x10 [ 697.451219][T17384] netlink_rcv_skb+0x155/0x420 [ 697.451231][T17384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.451246][T17384] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 697.451261][T17384] ? netlink_deliver_tap+0x1ae/0xd30 [ 697.451273][T17384] genl_rcv+0x28/0x40 [ 697.451285][T17384] netlink_unicast+0x5aa/0x870 [ 697.451298][T17384] ? __pfx_netlink_unicast+0x10/0x10 [ 697.451311][T17384] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 697.451325][T17384] netlink_sendmsg+0x8d1/0xdd0 [ 697.451338][T17384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.451353][T17384] ____sys_sendmsg+0xa95/0xc70 [ 697.451368][T17384] ? copy_msghdr_from_user+0x10a/0x160 [ 697.451380][T17384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 697.451394][T17384] ? __pfx_kstrtouint+0x10/0x10 [ 697.451406][T17384] ? kstrtouint_from_user+0x13c/0x1d0 [ 697.451417][T17384] ___sys_sendmsg+0x134/0x1d0 [ 697.451429][T17384] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.451443][T17384] ? rcu_is_watching+0x12/0xc0 [ 697.451462][T17384] __sys_sendmsg+0x16d/0x220 [ 697.451479][T17384] ? __pfx___sys_sendmsg+0x10/0x10 [ 697.451494][T17384] do_syscall_64+0xcd/0x4c0 [ 697.451507][T17384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.451519][T17384] RIP: 0033:0x7f3f6b38ebe9 [ 697.451528][T17384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.451540][T17384] RSP: 002b:00007f3f6c13c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.451551][T17384] RAX: ffffffffffffffda RBX: 00007f3f6b5b5fa0 RCX: 00007f3f6b38ebe9 [ 697.451559][T17384] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 697.451566][T17384] RBP: 00007f3f6c13c090 R08: 0000000000000000 R09: 0000000000000000 [ 697.451572][T17384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.451579][T17384] R13: 00007f3f6b5b6038 R14: 00007f3f6b5b5fa0 R15: 00007fff63daebc8 [ 697.451590][T17384] [ 697.778312][ T30] audit: type=1326 audit(1755669840.538:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.2.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2cd58ebe9 code=0x7ffc0000 [ 697.802049][ T30] audit: type=1326 audit(1755669840.538:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.2.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fc2cd58ebe9 code=0x7ffc0000 [ 697.825692][ T30] audit: type=1326 audit(1755669840.538:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.2.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2cd58ebe9 code=0x7ffc0000 [ 697.849387][ T30] audit: type=1326 audit(1755669840.538:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.2.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fc2cd58ebe9 code=0x7ffc0000 [ 697.875221][ T30] audit: type=1326 audit(1755669840.538:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.2.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2cd58ebe9 code=0x7ffc0000 [ 697.900035][ T30] audit: type=1326 audit(1755669840.538:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.2.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc2cd58ebe9 code=0x7ffc0000 [ 697.923487][ T30] audit: type=1326 audit(1755669840.538:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.2.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2cd58ebe9 code=0x7ffc0000 [ 697.947178][ T30] audit: type=1326 audit(1755669840.538:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.2.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc2cd58ebe9 code=0x7ffc0000 [ 697.956310][T17392] FAULT_INJECTION: forcing a failure. [ 697.956310][T17392] name failslab, interval 1, probability 0, space 0, times 0 [ 697.970878][ T30] audit: type=1326 audit(1755669840.538:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.2.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2cd58ebe9 code=0x7ffc0000 [ 698.020023][T17392] CPU: 0 UID: 0 PID: 17392 Comm: syz.3.3022 Not tainted syzkaller #0 PREEMPT(full) [ 698.020052][T17392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 698.020063][T17392] Call Trace: [ 698.020069][T17392] [ 698.020076][T17392] dump_stack_lvl+0x16c/0x1f0 [ 698.020101][T17392] should_fail_ex+0x512/0x640 [ 698.020123][T17392] should_failslab+0xc2/0x120 [ 698.020145][T17392] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 698.020162][T17392] ? skb_clone+0x190/0x3f0 [ 698.020180][T17392] ? rcu_is_watching+0x12/0xc0 [ 698.020203][T17392] skb_clone+0x190/0x3f0 [ 698.020221][T17392] nfnetlink_rcv_batch+0x1cf/0x2330 [ 698.020250][T17392] ? consume_skb+0xcc/0x100 [ 698.020269][T17392] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 698.020293][T17392] ? rcu_is_watching+0x12/0xc0 [ 698.020313][T17392] ? __dev_queue_xmit+0xaf1/0x4490 [ 698.020337][T17392] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 698.020359][T17392] ? __dev_queue_xmit+0xaf1/0x4490 [ 698.020383][T17392] ? rcu_is_watching+0x12/0xc0 [ 698.020408][T17392] ? avc_has_perm_noaudit+0x149/0x3b0 [ 698.020428][T17392] ? __asan_memset+0x23/0x50 [ 698.020461][T17392] ? __nla_validate_parse+0x600/0x2880 [ 698.020488][T17392] ? __pfx___nla_validate_parse+0x10/0x10 [ 698.020514][T17392] ? cap_capable+0xb3/0x250 [ 698.020536][T17392] ? __nla_parse+0x40/0x60 [ 698.020559][T17392] nfnetlink_rcv+0x3c1/0x430 [ 698.020582][T17392] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 698.020609][T17392] netlink_unicast+0x5aa/0x870 [ 698.020630][T17392] ? __pfx_netlink_unicast+0x10/0x10 [ 698.020650][T17392] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 698.020672][T17392] netlink_sendmsg+0x8d1/0xdd0 [ 698.020691][T17392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.020714][T17392] ____sys_sendmsg+0xa95/0xc70 [ 698.020737][T17392] ? copy_msghdr_from_user+0x10a/0x160 [ 698.020755][T17392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.020776][T17392] ? __pfx_kstrtouint+0x10/0x10 [ 698.020795][T17392] ? kstrtouint_from_user+0x13c/0x1d0 [ 698.020814][T17392] ___sys_sendmsg+0x134/0x1d0 [ 698.020831][T17392] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.020853][T17392] ? rcu_is_watching+0x12/0xc0 [ 698.020882][T17392] __sys_sendmsg+0x16d/0x220 [ 698.020899][T17392] ? __pfx___sys_sendmsg+0x10/0x10 [ 698.020924][T17392] do_syscall_64+0xcd/0x4c0 [ 698.020943][T17392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.020961][T17392] RIP: 0033:0x7f3f6b38ebe9 [ 698.020975][T17392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.020992][T17392] RSP: 002b:00007f3f6c13c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.021010][T17392] RAX: ffffffffffffffda RBX: 00007f3f6b5b5fa0 RCX: 00007f3f6b38ebe9 [ 698.021022][T17392] RDX: 0000000000040080 RSI: 00002000000001c0 RDI: 0000000000000003 [ 698.021033][T17392] RBP: 00007f3f6c13c090 R08: 0000000000000000 R09: 0000000000000000 [ 698.021049][T17392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.021060][T17392] R13: 00007f3f6b5b6038 R14: 00007f3f6b5b5fa0 R15: 00007fff63daebc8 [ 698.021078][T17392] [ 698.331459][T15843] Bluetooth: hci4: command 0x0c1a tx timeout [ 698.336529][T16366] Bluetooth: hci2: command 0x0405 tx timeout [ 698.337932][T15843] Bluetooth: hci3: command 0x0406 tx timeout [ 698.465540][ T43] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 698.554405][T15843] Bluetooth: hci5: command 0x0c1a tx timeout [ 698.554410][T16366] Bluetooth: hci0: command 0x0405 tx timeout [ 698.646269][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 698.660349][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 698.692997][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 698.762986][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 698.895904][T17405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3025'. [ 699.113423][ T43] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 699.122881][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.154201][ T43] usb 2-1: Product: syz [ 699.159271][ T43] usb 2-1: Manufacturer: syz [ 699.170200][ T43] usb 2-1: SerialNumber: syz [ 699.178201][ T43] usb 2-1: config 0 descriptor?? [ 699.266336][T17410] netlink: 580 bytes leftover after parsing attributes in process `syz.2.3027'. [ 699.432349][ T43] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 699.467933][T17417] fuse: Bad value for 'user_id' [ 699.472920][T17417] fuse: Bad value for 'user_id' [ 699.723776][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3028'. [ 699.732725][T17422] netlink: 'syz.2.3028': attribute type 15 has an invalid length. [ 699.743272][T17423] netlink: 'syz.4.3030': attribute type 12 has an invalid length. [ 699.853658][T17423] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.3030'. [ 699.901203][ T43] usb 2-1: USB disconnect, device number 41 [ 700.086837][T17425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24961 sclass=netlink_tcpdiag_socket pid=17425 comm=syz.3.3031 [ 700.100573][T17425] netlink: 'syz.3.3031': attribute type 10 has an invalid length. [ 700.219463][T17427] can: request_module (can-proto-4) failed. [ 700.403887][T15843] Bluetooth: hci4: command 0x0c1a tx timeout [ 700.535593][ T5957] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 700.634249][T15843] Bluetooth: hci5: command 0x0c1a tx timeout [ 700.634374][ T5167] Bluetooth: hci0: command 0x0405 tx timeout [ 700.796609][T17451] input: syz0 as /devices/virtual/input/input71 [ 700.896420][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3037'. [ 701.084424][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 701.095513][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 701.290966][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 701.653935][T17447] input: syz0 as /devices/virtual/input/input72 [ 701.720118][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3038'. [ 702.474262][T16366] Bluetooth: hci4: command 0x0c1a tx timeout [ 702.558779][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 702.571849][ T5957] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 702.585701][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.593802][ T5957] usb 6-1: Product: syz [ 702.598011][ T5957] usb 6-1: Manufacturer: syz [ 702.606419][ T5957] usb 6-1: SerialNumber: syz [ 702.612216][ T5957] usb 6-1: config 0 descriptor?? [ 702.655266][T17461] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 702.686458][T17461] batman_adv: batadv0: Adding interface: ip6gretap1 [ 702.715658][T16366] Bluetooth: hci5: command 0x0c1a tx timeout [ 702.721820][T16366] Bluetooth: hci0: command 0x0405 tx timeout [ 702.792409][T17461] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.802312][T17470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.818048][ C0] vkms_vblank_simulate: vblank timer overrun [ 702.818685][T17461] batman_adv: batadv0: Interface activated: ip6gretap1 [ 702.850342][ T5957] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 702.862058][T17470] FAULT_INJECTION: forcing a failure. [ 702.862058][T17470] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 703.026671][T17470] CPU: 0 UID: 0 PID: 17470 Comm: syz.2.3043 Not tainted syzkaller #0 PREEMPT(full) [ 703.026696][T17470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 703.026706][T17470] Call Trace: [ 703.026713][T17470] [ 703.026721][T17470] dump_stack_lvl+0x16c/0x1f0 [ 703.026744][T17470] should_fail_ex+0x512/0x640 [ 703.026772][T17470] iommufd_get_object+0x7a/0x440 [ 703.026793][T17470] ? __pfx_iommufd_get_object+0x10/0x10 [ 703.026814][T17470] iommufd_hwpt_alloc+0x200/0x1bd0 [ 703.026836][T17470] ? rcu_is_watching+0x12/0xc0 [ 703.026856][T17470] ? __might_fault+0xe3/0x190 [ 703.026871][T17470] ? __might_fault+0x13b/0x190 [ 703.026887][T17470] ? __pfx_iommufd_hwpt_alloc+0x10/0x10 [ 703.026908][T17470] ? lock_release+0x201/0x2f0 [ 703.026938][T17470] iommufd_fops_ioctl+0x34a/0x540 [ 703.026957][T17470] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 703.026977][T17470] ? __fget_files+0x204/0x3c0 [ 703.026994][T17470] ? hook_file_ioctl_common+0x145/0x410 [ 703.027014][T17470] ? selinux_file_ioctl+0x180/0x270 [ 703.027037][T17470] ? selinux_file_ioctl+0xb4/0x270 [ 703.027058][T17470] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 703.027075][T17470] __x64_sys_ioctl+0x18b/0x210 [ 703.027099][T17470] do_syscall_64+0xcd/0x4c0 [ 703.027116][T17470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.027133][T17470] RIP: 0033:0x7fc2cd58ebe9 [ 703.027146][T17470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.027163][T17470] RSP: 002b:00007fc2ce4e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 703.027180][T17470] RAX: ffffffffffffffda RBX: 00007fc2cd7b5fa0 RCX: 00007fc2cd58ebe9 [ 703.027191][T17470] RDX: 0000200000000200 RSI: 0000000000003b89 RDI: 0000000000000003 [ 703.027201][T17470] RBP: 00007fc2ce4e4090 R08: 0000000000000000 R09: 0000000000000000 [ 703.027211][T17470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.027220][T17470] R13: 00007fc2cd7b6038 R14: 00007fc2cd7b5fa0 R15: 00007ffe20756b38 [ 703.027236][T17470] [ 703.235280][ C0] vkms_vblank_simulate: vblank timer overrun [ 703.380711][ T5957] usb 6-1: USB disconnect, device number 73 [ 704.017509][ T5957] usb 5-1: USB disconnect, device number 81 [ 704.031627][T13706] udevd[13706]: symlink '../bus/usb/005/081' '/dev/char/189:592.tmp-c189:592' failed: Read-only file system [ 704.097615][T16366] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 704.108338][T16366] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 704.153319][T16366] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 704.168643][T16366] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 704.179326][T16366] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 704.285132][ T5898] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 704.437404][T17501] input: syz0 as /devices/virtual/input/input73 [ 704.743170][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 704.795191][ T5167] Bluetooth: hci0: command 0x0405 tx timeout [ 704.985869][ T36] team0: Port device netdevsim0 removed [ 704.995697][ T5898] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 705.013648][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.022957][ T5898] usb 6-1: Product: syz [ 705.029310][ T5898] usb 6-1: Manufacturer: syz [ 705.034008][ T5898] usb 6-1: SerialNumber: syz [ 705.040778][ T5898] usb 6-1: config 0 descriptor?? [ 705.076813][T17501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3051'. [ 705.196784][T17491] chnl_net:caif_netlink_parms(): no params data found [ 705.236516][T17503] delete_channel: no stack [ 705.250630][ T5898] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 705.332552][ T36] dvmrp1 (unregistering): left allmulticast mode [ 705.384945][ T6011] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 705.486750][ T36] bond0 (unregistering): Released all slaves [ 705.495743][ T36] bond1 (unregistering): Released all slaves [ 705.507619][ T36] bond2 (unregistering): Released all slaves [ 705.514195][ T43] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 705.526845][ T36] bond3 (unregistering): Released all slaves [ 705.545764][ T6011] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 705.554281][ T6011] usb 3-1: config 150 has no interface number 0 [ 705.560590][ T6011] usb 3-1: config 150 interface 204 has no altsetting 0 [ 705.568178][ T6011] usb 3-1: config 150 interface 1 has no altsetting 0 [ 705.576628][ T6011] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 705.585999][ T6011] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.594029][ T6011] usb 3-1: Product: syz [ 705.600797][T17491] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.603833][ T6011] usb 3-1: Manufacturer: syz [ 705.614033][ T6011] usb 3-1: SerialNumber: syz [ 705.615852][T17491] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.626388][T17491] bridge_slave_0: entered allmulticast mode [ 705.634619][T17491] bridge_slave_0: entered promiscuous mode [ 705.641726][ T36] tipc: Disabling bearer [ 705.648405][ T36] tipc: Disabling bearer [ 705.655680][ T36] tipc: Left network mode [ 705.659862][T17491] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.664223][ T43] usb 2-1: device descriptor read/64, error -71 [ 705.668068][T17491] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.681300][T17491] bridge_slave_1: entered allmulticast mode [ 705.689735][T17491] bridge_slave_1: entered promiscuous mode [ 705.720128][T17491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.732720][T17491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.779548][T17491] team0: Port device team_slave_0 added [ 705.789019][T17491] team0: Port device team_slave_1 added [ 705.820676][T17491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.839978][ T6011] xr_serial 3-1:150.204: xr_serial converter detected [ 705.849577][T17491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.879536][ T6011] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 705.888455][ T6011] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 705.908270][ T6011] usb 3-1: USB disconnect, device number 85 [ 705.923531][T17491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.944161][ T43] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 705.952503][ T6011] xr_serial 3-1:150.204: device disconnected [ 705.958537][T17491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.958554][T17491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.958590][T17491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.031799][T17491] hsr_slave_0: entered promiscuous mode [ 706.037963][T17491] hsr_slave_1: entered promiscuous mode [ 706.045480][T17491] debugfs: 'hsr0' already exists in 'hsr' [ 706.051397][T17491] Cannot create hsr debugfs directory [ 706.144409][ T43] usb 2-1: device descriptor read/64, error -71 [ 706.235924][ T5167] Bluetooth: hci1: command tx timeout [ 706.264267][ T43] usb usb2-port1: attempt power cycle [ 706.330944][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 706.330963][ T30] audit: type=1400 audit(1755669849.568:1560): avc: denied { write } for pid=17537 comm="syz.3.3057" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 706.622415][T17491] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 706.634226][ T43] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 706.654909][T17491] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 706.664243][ T43] usb 2-1: device descriptor read/8, error -71 [ 706.779072][T17491] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 706.811672][ T30] audit: type=1400 audit(1755669850.048:1561): avc: denied { checkpoint_restore } for pid=17555 comm="syz.2.3060" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 706.848260][T17491] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 706.864163][ T5924] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 706.914456][ T43] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 706.944891][ T43] usb 2-1: device descriptor read/8, error -71 [ 706.960910][ T5898] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 706.974535][ T5898] usb 6-1: USB disconnect, device number 74 [ 707.025536][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 707.032647][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 707.042547][ T5924] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 707.064609][ T43] usb usb2-port1: unable to enumerate USB device [ 707.077071][ T5924] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 707.091652][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.117494][ T5924] usb 4-1: Product: syz [ 707.124690][T17491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.131401][ T5924] usb 4-1: Manufacturer: syz [ 707.136986][ T5924] usb 4-1: SerialNumber: syz [ 707.149310][ T5924] usb 4-1: config 0 descriptor?? [ 707.156791][T17491] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.171267][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.178397][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.210071][T15540] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.217217][T15540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.592187][ T92] usb 4-1: USB disconnect, device number 71 [ 707.594624][T17491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.863134][T17599] input: syz0 as /devices/virtual/input/input74 [ 707.897618][T17599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3063'. [ 708.314533][ T5167] Bluetooth: hci1: command tx timeout [ 708.622834][T17614] netlink: 'syz.2.3064': attribute type 10 has an invalid length. [ 708.951160][T17614] team0: Port device netdevsim0 added [ 709.101233][T17491] veth0_vlan: entered promiscuous mode [ 709.141340][ T30] audit: type=1400 audit(1755669852.378:1562): avc: denied { sqpoll } for pid=17624 comm="syz.3.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 709.169608][T17491] veth1_vlan: entered promiscuous mode [ 709.259960][T17491] veth0_macvtap: entered promiscuous mode [ 709.271091][T17491] veth1_macvtap: entered promiscuous mode [ 709.299738][T17491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.313911][T17491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.332873][ T6755] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.385364][ T6755] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.396537][ T6755] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.405814][ T6755] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.514464][ T92] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 709.662900][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.684190][ T92] usb 4-1: Using ep0 maxpacket: 32 [ 709.695375][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.739465][ T92] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 709.757890][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.778473][ T92] usb 4-1: config 0 descriptor?? [ 709.797948][ T92] as10x_usb: device has been detected [ 709.803495][ T92] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 709.827084][ T6755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.946317][ T6755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.030618][ T92] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 710.203514][ T30] audit: type=1400 audit(1755669853.438:1563): avc: denied { append } for pid=17647 comm="syz.4.3045" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 710.342161][ T92] as10x_usb: error during firmware upload part1 [ 710.363492][ T92] Registered device nBox DVB-T Dongle [ 710.371404][ T92] usb 4-1: USB disconnect, device number 72 [ 710.394264][ T5167] Bluetooth: hci1: command tx timeout [ 710.766491][ T92] Unregistered device nBox DVB-T Dongle [ 710.839759][ T92] as10x_usb: device has been disconnected [ 710.971277][ T5167] Bluetooth: hci0: unknown advertising packet type: 0x6b [ 710.971301][ T5167] Bluetooth: hci0: unknown advertising packet type: 0x0f [ 711.014307][ T5167] Bluetooth: hci0: Dropping invalid advertising data [ 711.028071][ T5167] Bluetooth: hci0: Malformed LE Event: 0x02 [ 711.374302][ T92] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 711.545097][ T92] usb 5-1: Using ep0 maxpacket: 16 [ 711.551479][ T92] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 711.560600][ T92] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.595277][ T92] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 711.686341][ T92] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 711.722088][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.731690][ T92] usb 5-1: Product: syz [ 711.737555][ T92] usb 5-1: Manufacturer: syz [ 711.760846][ T92] usb 5-1: SerialNumber: syz [ 711.891744][ T30] audit: type=1400 audit(1755669855.128:1564): avc: denied { execute } for pid=17676 comm="syz.3.3079" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=66640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 711.944468][ T6011] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 711.977448][T17677] input: syz1 as /devices/virtual/input/input75 [ 712.209460][ T92] usb 5-1: 0:2 : does not exist [ 712.223055][ T6011] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 712.228080][ T92] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 712.233637][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.261665][ T6011] usb 6-1: Product: syz [ 712.264783][T12177] udevd[12177]: setting mode of /dev/mixer3 to 020660 failed: Read-only file system [ 712.275257][ T6011] usb 6-1: Manufacturer: syz [ 712.275278][ T6011] usb 6-1: SerialNumber: syz [ 712.310165][ T92] usb 5-1: USB disconnect, device number 82 [ 712.310240][T13706] udevd[13706]: setting mode of /dev/snd/controlC3 to 020660 failed: Read-only file system [ 712.329996][ T6011] usb 6-1: config 0 descriptor?? [ 712.339298][T12177] udevd[12177]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: Read-only file system [ 712.344280][T13706] udevd[13706]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: Read-only file system [ 712.474505][ T5167] Bluetooth: hci1: command tx timeout [ 712.594675][ T5957] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 712.625353][ T5891] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 712.754255][ T5957] usb 2-1: Using ep0 maxpacket: 16 [ 712.761787][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.774172][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 712.782879][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.793099][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 712.807182][ T5957] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 712.816447][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.825606][ T5891] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 1552, setting to 1024 [ 712.838710][ T5891] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 712.849206][ T5957] usb 2-1: config 0 descriptor?? [ 712.854376][ T5891] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 712.864400][ T5891] usb 3-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 712.879160][ T5891] usb 3-1: config 1 interface 0 has no altsetting 0 [ 712.887714][ T5891] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 712.896978][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.905730][ T5891] usb 3-1: Product: syz [ 712.909916][ T5891] usb 3-1: Manufacturer: syz [ 712.914548][ T5891] usb 3-1: SerialNumber: syz [ 712.920752][T17673] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 712.928028][T17673] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 712.953330][ T6011] Error reading MAC address [ 712.955512][T17671] syzkaller0 speed is unknown, defaulting to 1000 [ 712.964663][T17671] syzkaller0 speed is unknown, defaulting to 1000 [ 712.971491][T17671] syzkaller0 speed is unknown, defaulting to 1000 [ 712.984552][T17671] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 712.997946][T17671] syzkaller0 speed is unknown, defaulting to 1000 [ 712.999512][T12177] udevd[12177]: setting mode of /dev/infiniband/uverbs0 to 020666 failed: Read-only file system [ 713.006339][T17671] syzkaller0 speed is unknown, defaulting to 1000 [ 713.015777][ T92] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 713.022368][T17671] syzkaller0 speed is unknown, defaulting to 1000 [ 713.031525][T12177] udevd[12177]: setting owner of /dev/infiniband/uverbs0 to uid=0, gid=0 failed: Read-only file system [ 713.036371][T17671] syzkaller0 speed is unknown, defaulting to 1000 [ 713.053560][T17671] syzkaller0 speed is unknown, defaulting to 1000 [ 713.060614][ T5924] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 713.061233][T17671] syzkaller0 speed is unknown, defaulting to 1000 [ 713.075568][T17671] syzkaller0 speed is unknown, defaulting to 1000 [ 713.091477][ T5925] usb 6-1: USB disconnect, device number 75 [ 713.214773][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 713.214959][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 713.222037][ T5924] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 1552, setting to 1024 [ 713.242229][ T5924] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 713.253143][ T5924] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 713.254377][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 713.270115][ T5924] usb 4-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.273933][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 713.302043][ T5924] usb 4-1: config 1 interface 0 has no altsetting 0 [ 713.304001][ T5957] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 713.310803][ T5924] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 713.327374][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.346521][ T5957] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 713.349082][ T5924] usb 4-1: Product: syz [ 713.377677][ T5924] usb 4-1: Manufacturer: syz [ 713.382373][ T5924] usb 4-1: SerialNumber: syz [ 713.382466][ T5957] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 713.401614][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 713.406910][T17700] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 713.419462][ T5957] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 713.442194][T17700] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 713.454193][ T5957] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 713.474188][ T92] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 713.492078][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.544172][ T5957] input: HID 0955:7214 Haptics as /devices/virtual/input/input76 [ 713.580448][ T92] usb 5-1: Product: syz [ 713.620399][ T92] usb 5-1: Manufacturer: syz [ 713.641619][ T5957] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 713.651430][ T92] usb 5-1: SerialNumber: syz [ 713.669961][ T5891] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 713.689966][ T5957] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 713.701805][ T92] usb 5-1: config 0 descriptor?? [ 713.892593][ T5891] usb 3-1: USB disconnect, device number 86 [ 713.984678][ T5925] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 713.996276][ T5957] usb 2-1: USB disconnect, device number 46 [ 714.012595][ T5925] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 714.034251][ T5925] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 714.045894][ T5925] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 714.065982][ C0] raw-gadget.3 gadget.4: ignoring, device is not running [ 714.073393][ C0] raw-gadget.3 gadget.4: ignoring, device is not running [ 714.080813][ C0] raw-gadget.3 gadget.4: ignoring, device is not running [ 714.088245][ C0] raw-gadget.3 gadget.4: ignoring, device is not running [ 714.096042][ C0] raw-gadget.3 gadget.4: ignoring, device is not running [ 714.129625][ T92] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 714.151410][ T5924] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 714.171961][ T92] usb 5-1: USB disconnect, device number 83 [ 714.270665][ T5924] usb 4-1: USB disconnect, device number 73 [ 714.806348][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3092'. [ 714.816439][ T30] audit: type=1400 audit(1755669858.038:1565): avc: denied { shutdown } for pid=17711 comm="syz.1.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 715.184291][ T30] audit: type=1400 audit(1755669858.428:1566): avc: denied { bind } for pid=17727 comm="syz.5.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 715.483595][T17741] sctp: [Deprecated]: syz.5.3102 (pid 17741) Use of int in max_burst socket option. [ 715.483595][T17741] Use struct sctp_assoc_value instead [ 715.501324][T17742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 715.798221][ T5924] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 716.008540][T17753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3106'. [ 716.026776][ T5924] usb 6-1: device descriptor read/64, error -71 [ 716.370185][T17764] erspan0: entered promiscuous mode [ 716.375651][T17764] vlan2: entered promiscuous mode [ 716.395405][ T5924] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 716.610455][T17767] openvswitch: netlink: EtherType 0 is less than min 600 [ 716.714279][ T5924] usb 6-1: device descriptor read/64, error -71 [ 716.764721][ T43] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 716.766863][T17769] overlayfs: missing 'lowerdir' [ 716.862986][ T5924] usb usb6-port1: attempt power cycle [ 716.865393][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3108'. [ 716.985841][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 716.998767][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 717.019758][ T30] audit: type=1400 audit(1755669860.258:1567): avc: denied { watch watch_reads } for pid=17770 comm="syz.3.3109" path="/38/file0" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 717.019781][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24970, setting to 64 [ 717.064584][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 717.119392][ T43] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 717.149188][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.160275][ T30] audit: type=1400 audit(1755669860.318:1568): avc: denied { read } for pid=17770 comm="syz.3.3109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 717.169426][ T43] usb 3-1: Product: syz [ 717.190178][ T43] usb 3-1: Manufacturer: syz [ 717.200746][ T43] usb 3-1: SerialNumber: syz [ 717.216722][ T43] usb 3-1: config 0 descriptor?? [ 717.234967][T17765] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 717.243415][ T43] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input77 [ 717.253364][ T5924] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 717.274934][ T5924] usb 6-1: device descriptor read/8, error -71 [ 717.554277][ T5924] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 717.585593][ T5924] usb 6-1: device descriptor read/8, error -71 [ 717.705736][ T5924] usb usb6-port1: unable to enumerate USB device [ 718.594242][ T5898] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 718.964158][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 718.971450][ T5898] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 718.979734][ T5898] usb 2-1: config 0 has no interface number 0 [ 718.986186][ T5898] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 718.998995][ T5898] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 719.011058][ T5898] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 719.020449][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 719.031152][ T5898] usb 2-1: Product: syz [ 719.044685][ T5898] usb 2-1: SerialNumber: syz [ 719.065813][ T5898] usb 2-1: config 0 descriptor?? [ 719.114274][ T5957] usb 3-1: USB disconnect, device number 87 [ 719.124490][ T5898] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 719.134726][ T5898] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input78 [ 719.155349][T17805] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 719.161878][T17805] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 719.252237][T17805] vhci_hcd vhci_hcd.0: Device attached [ 719.277809][T17810] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 719.284449][T17810] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 719.295106][T17810] vhci_hcd vhci_hcd.0: Device attached [ 719.315170][T17805] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12) [ 719.321839][T17805] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 719.331063][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 719.335777][T17805] vhci_hcd vhci_hcd.0: Device attached [ 719.352822][T17805] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(15) [ 719.359461][T17805] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 719.369002][T17805] vhci_hcd vhci_hcd.0: Device attached [ 719.382472][T17805] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 719.389104][T17805] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 719.470649][T17805] vhci_hcd vhci_hcd.0: Device attached [ 719.480295][ T5924] vhci_hcd: vhci_device speed not set [ 719.500013][T17810] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 719.506616][T17810] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 719.518515][T17823] syz.2.3122: attempt to access beyond end of device [ 719.518515][T17823] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 719.552465][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 719.559696][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 719.567002][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 719.574215][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 719.581341][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 719.582101][T17810] vhci_hcd vhci_hcd.0: Device attached [ 719.588751][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 719.601433][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 719.608565][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 719.616322][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 719.617449][ T5216] udevd[5216]: worker [13706] terminated by signal 33 (Unknown signal 33) [ 719.623438][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 719.642148][ T5924] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 719.675527][T17805] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 719.699207][ T5898] usb 2-1: USB disconnect, device number 47 [ 719.699285][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 719.745507][T17805] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(21) [ 719.745734][ T5898] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 719.752134][T17805] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 719.770158][T17805] vhci_hcd vhci_hcd.0: Device attached [ 719.811022][T17810] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 719.815258][T17835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3125'. [ 719.898564][T17827] vhci_hcd: connection closed [ 719.898786][T17821] vhci_hcd: connection closed [ 719.902811][T17836] vhci_hcd: connection closed [ 719.903584][ T8567] vhci_hcd: stop threads [ 719.920538][T17806] vhci_hcd: connection reset by peer [ 719.927312][T17813] vhci_hcd: connection closed [ 719.927978][T17819] vhci_hcd: connection closed [ 719.933143][T17811] vhci_hcd: connection closed [ 719.943320][ T8567] vhci_hcd: release socket [ 719.953541][ T8567] vhci_hcd: disconnect device [ 719.958695][ T8567] vhci_hcd: stop threads [ 719.963115][ T8567] vhci_hcd: release socket [ 719.968939][ T8567] vhci_hcd: disconnect device [ 719.974637][ T8567] vhci_hcd: stop threads [ 719.979028][ T8567] vhci_hcd: release socket [ 719.983578][ T8567] vhci_hcd: disconnect device [ 719.988453][ T8567] vhci_hcd: stop threads [ 719.992815][ T8567] vhci_hcd: release socket [ 719.997548][ T8567] vhci_hcd: disconnect device [ 720.002899][ T8567] vhci_hcd: stop threads [ 720.007369][ T8567] vhci_hcd: release socket [ 720.011874][ T8567] vhci_hcd: disconnect device [ 720.021072][ T8567] vhci_hcd: stop threads [ 720.028324][ T8567] vhci_hcd: release socket [ 720.034280][ T8567] vhci_hcd: disconnect device [ 720.039696][T17840] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3126'. [ 720.039827][ T8567] vhci_hcd: stop threads [ 720.054446][ T8567] vhci_hcd: release socket [ 720.059071][T17840] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3126'. [ 720.059128][ T8567] vhci_hcd: disconnect device [ 721.262211][T17840] 8021q: VLANs not supported on ip_vti0 [ 721.795956][ T30] audit: type=1400 audit(1755669865.028:1569): avc: denied { read } for pid=17854 comm="syz.1.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 721.964986][T17869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3137'. [ 722.035188][ T5852] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 722.049090][ T5898] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 722.146763][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 722.156477][T17869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3137'. [ 722.174033][T17882] netlink: 'syz.5.3136': attribute type 10 has an invalid length. [ 722.215070][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 722.231544][ T5852] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 722.241131][ T5852] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.244320][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 722.251454][ T5852] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 722.774519][ T5898] usb 2-1: config 253 has an invalid interface number: 184 but max is 0 [ 722.775768][ T5852] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 722.792068][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.801248][ T5898] usb 2-1: config 253 has no interface number 0 [ 722.807679][ T5852] usb 4-1: Product: syz [ 722.811859][ T5852] usb 4-1: Manufacturer: syz [ 722.816462][ T5898] usb 2-1: config 253 interface 184 has no altsetting 0 [ 722.818062][ T5898] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 722.823492][ T5852] usb 4-1: SerialNumber: syz [ 722.873607][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.903355][ T5898] usb 2-1: Product: syz [ 722.917981][ T5898] usb 2-1: Manufacturer: syz [ 722.925580][ T5898] usb 2-1: SerialNumber: syz [ 722.937026][ T5898] go7007 2-1:253.184: probe with driver go7007 failed with error -12 [ 723.190973][ T6011] usb 2-1: USB disconnect, device number 48 [ 723.213179][T17898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3145'. [ 723.295367][T17900] netlink: 'syz.2.3141': attribute type 10 has an invalid length. [ 723.320500][ T5852] usb 4-1: 0:2 : does not exist [ 723.333966][ T5852] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 723.741652][ T5852] usb 4-1: USB disconnect, device number 74 [ 723.849705][T15613] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 723.938683][T17907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=17907 comm=syz.5.3146 [ 724.045472][T15613] usb 5-1: Using ep0 maxpacket: 16 [ 724.052332][T15613] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 724.079116][T15613] usb 5-1: can't read configurations, error -61 [ 724.215465][T15613] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 724.364129][T15613] usb 5-1: Using ep0 maxpacket: 16 [ 724.370972][T15613] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 724.420622][ T5898] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 724.434454][T15613] usb 5-1: can't read configurations, error -61 [ 724.458410][T15613] usb usb5-port1: attempt power cycle [ 724.575289][ T5898] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 724.592071][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.617947][ T5898] usb 4-1: config 0 has no interface number 0 [ 724.633644][ T5898] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 724.642915][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.651035][ T5898] usb 4-1: Product: syz [ 724.657164][ T5898] usb 4-1: Manufacturer: syz [ 724.668703][ T5898] usb 4-1: SerialNumber: syz [ 724.687395][ T5898] usb 4-1: config 0 descriptor?? [ 724.784688][ T5924] vhci_hcd: vhci_device speed not set [ 724.824843][T15613] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 724.856576][T15613] usb 5-1: Using ep0 maxpacket: 16 [ 724.871447][T15613] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 724.886350][T15613] usb 5-1: can't read configurations, error -61 [ 724.902226][ T5898] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 724.910215][ T5898] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 724.921661][ T5898] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 724.929789][ T5898] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 724.938410][ T5898] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 724.947366][ T5898] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 724.958410][ T5898] usb 4-1: USB disconnect, device number 75 [ 724.965646][ T5898] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 724.978399][ T5898] keyspan 4-1:0.133: device disconnected [ 725.084213][T15613] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 725.534880][T15613] usb 5-1: Using ep0 maxpacket: 16 [ 725.542354][T15613] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 725.550911][T15613] usb 5-1: can't read configurations, error -61 [ 725.557644][T15613] usb usb5-port1: unable to enumerate USB device [ 725.833013][T17932] syz.1.3155 (17932): drop_caches: 2 [ 725.840956][T17932] syz.1.3155 (17932): drop_caches: 2 [ 725.864282][T17937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3157'. [ 726.274882][ T5957] usb usb42-port1: attempt power cycle [ 726.853465][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3159'. [ 726.863275][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3159'. [ 727.040237][ T5957] usb usb42-port1: unable to enumerate USB device [ 727.650851][ T30] audit: type=1326 audit(1755669870.888:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17961 comm="syz.3.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6b38ebe9 code=0x7ffc0000 [ 727.677702][ T30] audit: type=1326 audit(1755669870.918:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17961 comm="syz.3.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6b38ebe9 code=0x7ffc0000 [ 727.708550][ T30] audit: type=1326 audit(1755669870.918:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17961 comm="syz.3.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f3f6b38ebe9 code=0x7ffc0000 [ 727.760289][T17966] syzkaller0 speed is unknown, defaulting to 1000 [ 727.815867][ T30] audit: type=1326 audit(1755669870.918:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17961 comm="syz.3.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6b38ebe9 code=0x7ffc0000 [ 727.847451][ T30] audit: type=1326 audit(1755669870.918:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17961 comm="syz.3.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6b38ebe9 code=0x7ffc0000 [ 727.870923][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.877937][ T30] audit: type=1326 audit(1755669870.948:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17961 comm="syz.3.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f3f6b38ebe9 code=0x7ffc0000 [ 727.901389][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.907635][ T30] audit: type=1326 audit(1755669870.948:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17961 comm="syz.3.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6b38ebe9 code=0x7ffc0000 [ 727.931094][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.937318][ T30] audit: type=1326 audit(1755669870.948:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17961 comm="syz.3.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6b38ebe9 code=0x7ffc0000 [ 727.961424][ T30] audit: type=1326 audit(1755669870.948:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17961 comm="syz.3.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f6b38ebe9 code=0x7ffc0000 [ 727.985867][ T30] audit: type=1326 audit(1755669870.948:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17961 comm="syz.3.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6b38ebe9 code=0x7ffc0000 [ 728.124174][ T5924] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 728.307770][ T6011] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 728.356359][ T5924] usb 2-1: unable to get BOS descriptor or descriptor too short [ 728.364626][ T5924] usb 2-1: not running at top speed; connect to a high speed hub [ 728.415873][ T5924] usb 2-1: config 9 has an invalid interface number: 198 but max is 0 [ 728.425560][ T5924] usb 2-1: config 9 has no interface number 0 [ 728.431680][ T5924] usb 2-1: config 9 interface 198 has no altsetting 0 [ 728.440342][ T5924] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 728.450838][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.460428][ T5924] usb 2-1: Product: syz [ 728.465344][ T5924] usb 2-1: Manufacturer: syz [ 728.470148][ T5924] usb 2-1: SerialNumber: syz [ 728.514255][ T6011] usb 5-1: Using ep0 maxpacket: 8 [ 728.521134][ T6011] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.601676][ T6011] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.969933][ T6011] usb 5-1: config 0 interface 0 has no altsetting 0 [ 728.976984][ T6011] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 728.986428][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.995168][ T6011] usb 5-1: config 0 descriptor?? [ 729.005969][ T5924] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 729.024123][ T5924] dvb-usb: bulk message failed: -22 (3/0) [ 729.048611][ T5924] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 729.070566][ T5924] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 729.079517][ T5924] dvb_usb_umt_010 2-1:9.198: probe with driver dvb_usb_umt_010 failed with error -22 [ 729.092340][ T5924] usb 2-1: USB disconnect, device number 49 [ 729.441525][ T6011] steelseries 0003:1038:1410.0010: reserved main item tag 0xe [ 729.461868][ T6011] steelseries 0003:1038:1410.0010: missing HID_OUTPUT_REPORT 0 [ 729.516716][T18004] vlan0: entered promiscuous mode [ 729.553352][T18007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.776104][T18015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 729.823813][ T5925] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 730.015534][ T5898] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 730.136397][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 730.145784][ T5925] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 1552, setting to 1024 [ 730.166268][ T5925] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 730.187688][ T5925] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 730.208782][ T5925] usb 6-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 730.225365][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 730.230638][ T5925] usb 6-1: config 1 interface 0 has no altsetting 0 [ 730.230733][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3193'. [ 730.238812][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.258121][ T5925] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 730.267283][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.275333][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.285104][ T5925] usb 6-1: Product: syz [ 730.289252][ T5925] usb 6-1: Manufacturer: syz [ 730.293822][ T5925] usb 6-1: SerialNumber: syz [ 730.298451][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 730.312249][ T5898] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 730.321728][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.330038][T17998] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 730.330816][ T5898] usb 4-1: config 0 descriptor?? [ 730.338465][T17998] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 730.802560][ T5898] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 730.809930][ T5898] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 730.817040][ T5898] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 730.826541][ T5898] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 730.834483][ T5898] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 730.852800][ T5898] input: HID 0955:7214 Haptics as /devices/virtual/input/input79 [ 730.905673][ T5898] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 730.913951][ T5898] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 730.942617][ T5925] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 730.953863][ T5925] usb 6-1: USB disconnect, device number 80 [ 731.007312][ T5898] usb 4-1: USB disconnect, device number 76 [ 731.015646][ T92] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 731.031422][ T92] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 731.045225][ T92] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 731.057940][ T92] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 731.236679][ T5898] usb 5-1: USB disconnect, device number 88 [ 731.281880][T18048] binder: Binderfs stats mode cannot be changed during a remount [ 731.384230][ T92] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 731.398458][T18051] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3201'. [ 731.564340][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 731.574777][ T92] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 731.624357][ T92] usb 2-1: config 0 interface 0 has no altsetting 0 [ 731.707207][ T92] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 731.742738][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.822824][ T92] usb 2-1: config 0 descriptor?? [ 731.864467][ T6011] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 732.014389][ T6011] usb 3-1: Using ep0 maxpacket: 32 [ 732.022177][ T6011] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 732.031777][ T6011] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.039905][ T6011] usb 3-1: Product: syz [ 732.044423][ T6011] usb 3-1: Manufacturer: syz [ 732.049032][ T6011] usb 3-1: SerialNumber: syz [ 732.055016][ T6011] usb 3-1: config 0 descriptor?? [ 732.245295][ T92] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 732.253408][ T92] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 732.262259][ T92] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 732.272078][ T6011] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 732.281870][ T92] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 732.289648][ T92] hid-retrode 0003:0403:97C1.0012: unknown main item tag 0x0 [ 732.290850][ T6011] 00 00 00 00 00 00 00 00 [ 732.302414][ T6011] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 732.303306][ T92] hid-retrode 0003:0403:97C1.0012: hidraw0: USB HID v0.02 Device [HID 0403:97c1] on usb-dummy_hcd.1-1/input0 [ 732.445955][T18081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3214'. [ 732.476627][ T92] usb 2-1: USB disconnect, device number 50 [ 732.483019][T17135] usb 3-1: USB disconnect, device number 88 [ 732.887966][T18097] loop2: detected capacity change from 0 to 7 [ 732.919545][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 732.928749][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 732.939079][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 732.939676][T18098] FAULT_INJECTION: forcing a failure. [ 732.939676][T18098] name failslab, interval 1, probability 0, space 0, times 0 [ 732.948271][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 732.969747][T18098] CPU: 0 UID: 0 PID: 18098 Comm: syz.5.3219 Not tainted syzkaller #0 PREEMPT(full) [ 732.969773][T18098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 732.969783][T18098] Call Trace: [ 732.969789][T18098] [ 732.969796][T18098] dump_stack_lvl+0x16c/0x1f0 [ 732.969815][T18098] should_fail_ex+0x512/0x640 [ 732.969830][T18098] ? alloc_pipe_info+0x1ec/0x590 [ 732.969845][T18098] should_failslab+0xc2/0x120 [ 732.969859][T18098] __kmalloc_noprof+0xd2/0x510 [ 732.969872][T18098] alloc_pipe_info+0x1ec/0x590 [ 732.969886][T18098] splice_direct_to_actor+0x77d/0xa30 [ 732.969898][T18098] ? kstrtouint_from_user+0x13c/0x1d0 [ 732.969910][T18098] ? __pfx_direct_splice_actor+0x10/0x10 [ 732.969923][T18098] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 732.969934][T18098] ? lock_release+0x201/0x2f0 [ 732.969954][T18098] do_splice_direct+0x174/0x240 [ 732.969965][T18098] ? __pfx_do_splice_direct+0x10/0x10 [ 732.969977][T18098] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 732.969988][T18098] ? bpf_lsm_file_permission+0x9/0x10 [ 732.970004][T18098] ? security_file_permission+0x71/0x210 [ 732.970022][T18098] ? rw_verify_area+0xcf/0x6c0 [ 732.970039][T18098] do_sendfile+0xb06/0xe50 [ 732.970051][T18098] ? __pfx_do_sendfile+0x10/0x10 [ 732.970060][T18098] ? lock_release+0x201/0x2f0 [ 732.970079][T18098] __x64_sys_sendfile64+0x154/0x220 [ 732.970094][T18098] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 732.970110][T18098] do_syscall_64+0xcd/0x4c0 [ 732.970124][T18098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.970136][T18098] RIP: 0033:0x7f950f38ebe9 [ 732.970145][T18098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.970157][T18098] RSP: 002b:00007f951026b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 732.970169][T18098] RAX: ffffffffffffffda RBX: 00007f950f5b6090 RCX: 00007f950f38ebe9 [ 732.970177][T18098] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000004 [ 732.970184][T18098] RBP: 00007f951026b090 R08: 0000000000000000 R09: 0000000000000000 [ 732.970191][T18098] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 732.970198][T18098] R13: 00007f950f5b6128 R14: 00007f950f5b6090 R15: 00007ffc92fbcd78 [ 732.970216][T18098] [ 732.970605][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.202838][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 733.211106][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.220319][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 733.233249][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.242483][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 733.252062][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.261272][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 733.295186][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.304410][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 733.312441][T18097] ldm_validate_partition_table(): Disk read failed. [ 733.320232][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.329420][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 733.337860][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.347016][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 733.355995][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.365156][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 733.414533][T18097] Dev loop2: unable to read RDB block 0 [ 733.433792][T18097] loop2: unable to read partition table [ 733.445079][T18097] loop2: partition table beyond EOD, truncated [ 733.469514][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 733.469531][ T30] audit: type=1400 audit(1755669876.708:1643): avc: denied { connect } for pid=18105 comm="syz.1.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 733.495979][T18097] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 734.813722][T18135] FAULT_INJECTION: forcing a failure. [ 734.813722][T18135] name failslab, interval 1, probability 0, space 0, times 0 [ 734.828771][T18135] CPU: 1 UID: 0 PID: 18135 Comm: syz.5.3233 Not tainted syzkaller #0 PREEMPT(full) [ 734.828801][T18135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 734.828813][T18135] Call Trace: [ 734.828818][T18135] [ 734.828826][T18135] dump_stack_lvl+0x16c/0x1f0 [ 734.828850][T18135] should_fail_ex+0x512/0x640 [ 734.828873][T18135] should_failslab+0xc2/0x120 [ 734.828894][T18135] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 734.828913][T18135] ? getname_kernel+0x52/0x370 [ 734.828939][T18135] getname_kernel+0x52/0x370 [ 734.828962][T18135] kern_path+0x1d/0x50 [ 734.828980][T18135] bpf_uprobe_multi_link_attach+0x3f4/0x12d0 [ 734.829004][T18135] ? rcu_is_watching+0x12/0xc0 [ 734.829030][T18135] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 734.829052][T18135] ? __fget_files+0x20e/0x3c0 [ 734.829073][T18135] ? fput+0x9b/0xd0 [ 734.829094][T18135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 734.829116][T18135] __sys_bpf+0x3f3c/0x4de0 [ 734.829138][T18135] ? lock_release+0x201/0x2f0 [ 734.829162][T18135] ? __pfx___sys_bpf+0x10/0x10 [ 734.829183][T18135] ? ksys_write+0x190/0x250 [ 734.829199][T18135] ? rcu_is_watching+0x12/0xc0 [ 734.829220][T18135] ? lock_release+0x201/0x2f0 [ 734.829246][T18135] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 734.829273][T18135] ? fput+0x9b/0xd0 [ 734.829294][T18135] ? ksys_write+0x1ac/0x250 [ 734.829311][T18135] ? __pfx_ksys_write+0x10/0x10 [ 734.829330][T18135] __x64_sys_bpf+0x78/0xc0 [ 734.829351][T18135] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 734.829373][T18135] do_syscall_64+0xcd/0x4c0 [ 734.829394][T18135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.829418][T18135] RIP: 0033:0x7f950f38ebe9 [ 734.829433][T18135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.829451][T18135] RSP: 002b:00007f951028c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 734.829469][T18135] RAX: ffffffffffffffda RBX: 00007f950f5b5fa0 RCX: 00007f950f38ebe9 [ 734.829481][T18135] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 734.829492][T18135] RBP: 00007f951028c090 R08: 0000000000000000 R09: 0000000000000000 [ 734.829503][T18135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.829514][T18135] R13: 00007f950f5b6038 R14: 00007f950f5b5fa0 R15: 00007ffc92fbcd78 [ 734.829531][T18135] [ 738.238157][ T23] sched: DL replenish lagged too much [ 740.354468][T17135] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 740.561161][T18144] FAULT_INJECTION: forcing a failure. [ 740.561161][T18144] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 740.831320][T18144] CPU: 0 UID: 0 PID: 18144 Comm: syz.4.3237 Not tainted syzkaller #0 PREEMPT(full) [ 740.831344][T18144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 740.831351][T18144] Call Trace: [ 740.831355][T18144] [ 740.831359][T18144] dump_stack_lvl+0x16c/0x1f0 [ 740.831376][T18144] should_fail_ex+0x512/0x640 [ 740.831390][T18144] should_fail_alloc_page+0xe7/0x130 [ 740.831405][T18144] prepare_alloc_pages+0x3c2/0x610 [ 740.831421][T18144] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 740.831434][T18144] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 740.831453][T18144] ? stack_depot_save_flags+0x3de/0x9c0 [ 740.831466][T18144] ? kasan_save_stack+0x42/0x60 [ 740.831477][T18144] ? kasan_save_stack+0x33/0x60 [ 740.831487][T18144] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 740.831499][T18144] ? alloc_vmap_area+0xdc8/0x29c0 [ 740.831513][T18144] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 740.831529][T18144] ? sock_map_alloc+0x1f9/0x280 [ 740.831540][T18144] ? map_create+0x58f/0x1f80 [ 740.831554][T18144] ? __sys_bpf+0x44d2/0x4de0 [ 740.831568][T18144] ? __x64_sys_bpf+0x78/0xc0 [ 740.831582][T18144] ? do_syscall_64+0xcd/0x4c0 [ 740.831594][T18144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.831608][T18144] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 740.831621][T18144] ? policy_nodemask+0xea/0x4e0 [ 740.831635][T18144] alloc_pages_mpol+0x1fb/0x550 [ 740.831647][T18144] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 740.831661][T18144] alloc_pages_noprof+0x131/0x390 [ 740.831674][T18144] get_free_pages_noprof+0x10/0xb0 [ 740.831687][T18144] kasan_populate_vmalloc+0x89/0x1f0 [ 740.831706][T18144] alloc_vmap_area+0x959/0x29c0 [ 740.831722][T18144] ? __pfx_alloc_vmap_area+0x10/0x10 [ 740.831738][T18144] __get_vm_area_node+0x1ca/0x330 [ 740.831754][T18144] __vmalloc_node_range_noprof+0x271/0x14b0 [ 740.831770][T18144] ? sock_map_alloc+0x1f9/0x280 [ 740.831782][T18144] ? sock_map_alloc+0x1f9/0x280 [ 740.831795][T18144] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 740.831812][T18144] ? rcu_is_watching+0x12/0xc0 [ 740.831826][T18144] ? trace_kmalloc+0x2b/0xd0 [ 740.831840][T18144] ? __kmalloc_node_noprof+0x23b/0x500 [ 740.831852][T18144] ? sock_map_alloc+0x1f9/0x280 [ 740.831863][T18144] __bpf_map_area_alloc+0x12e/0x200 [ 740.831878][T18144] ? sock_map_alloc+0x1f9/0x280 [ 740.831890][T18144] sock_map_alloc+0x1f9/0x280 [ 740.831900][T18144] map_create+0x58f/0x1f80 [ 740.831914][T18144] ? __pfx_avc_has_perm+0x10/0x10 [ 740.831927][T18144] ? __pfx_map_create+0x10/0x10 [ 740.831939][T18144] ? __might_fault+0x13b/0x190 [ 740.831950][T18144] ? rcu_is_watching+0x12/0xc0 [ 740.831964][T18144] ? __might_fault+0xe3/0x190 [ 740.831974][T18144] ? lock_release+0x201/0x2f0 [ 740.831991][T18144] ? selinux_bpf+0xde/0x130 [ 740.832004][T18144] __sys_bpf+0x44d2/0x4de0 [ 740.832018][T18144] ? lock_release+0x201/0x2f0 [ 740.832035][T18144] ? __pfx___sys_bpf+0x10/0x10 [ 740.832049][T18144] ? ksys_write+0x190/0x250 [ 740.832061][T18144] ? rcu_is_watching+0x12/0xc0 [ 740.832075][T18144] ? lock_release+0x201/0x2f0 [ 740.832093][T18144] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 740.832108][T18144] ? fput+0x9b/0xd0 [ 740.832123][T18144] ? ksys_write+0x1ac/0x250 [ 740.832133][T18144] ? __pfx_ksys_write+0x10/0x10 [ 740.832145][T18144] __x64_sys_bpf+0x78/0xc0 [ 740.832160][T18144] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 740.832174][T18144] do_syscall_64+0xcd/0x4c0 [ 740.832186][T18144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.832197][T18144] RIP: 0033:0x7f74a058ebe9 [ 740.832207][T18144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.832219][T18144] RSP: 002b:00007f74a140c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 740.832231][T18144] RAX: ffffffffffffffda RBX: 00007f74a07b5fa0 RCX: 00007f74a058ebe9 [ 740.832238][T18144] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0600000000000000 [ 740.832245][T18144] RBP: 00007f74a140c090 R08: 0000000000000000 R09: 0000000000000000 [ 740.832252][T18144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.832261][T18144] R13: 00007f74a07b6038 R14: 00007f74a07b5fa0 R15: 00007ffc59b9c988 [ 740.832274][T18144] [ 744.502760][ T30] audit: type=1400 audit(1755669887.728:1644): avc: denied { read } for pid=18159 comm="syz.2.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 747.138070][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 831.005343][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 835.230891][T16366] Bluetooth: hci1: command 0x0406 tx timeout [ 870.027520][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 891.693981][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 891.700964][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18161/1:b..l P18157/1:b..l [ 891.710201][ C0] rcu: (detected by 0, t=10503 jiffies, g=79897, q=3061469 ncpus=2) [ 891.718275][ C0] task:syz.1.3239 state:R running task stack:27624 pid:18157 tgid:18153 ppid:16989 task_flags:0x400040 flags:0x00004006 [ 891.731779][ C0] Call Trace: [ 891.735063][ C0] [ 891.738004][ C0] __schedule+0x1190/0x5de0 [ 891.742523][ C0] ? folios_put_refs+0x5ce/0x740 [ 891.747511][ C0] ? __pfx___schedule+0x10/0x10 [ 891.752387][ C0] ? page_table_check_set+0x627/0x750 [ 891.757783][ C0] ? rcu_is_watching+0x12/0xc0 [ 891.762596][ C0] ? page_table_check_set+0x631/0x750 [ 891.767994][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 891.773388][ C0] preempt_schedule_common+0x44/0xc0 [ 891.778694][ C0] preempt_schedule_thunk+0x16/0x30 [ 891.783916][ C0] _raw_spin_unlock+0x3e/0x50 [ 891.788640][ C0] do_wp_page+0x177b/0x4f00 [ 891.793169][ C0] ? lock_acquire+0x2cd/0x350 [ 891.797870][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 891.802735][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 891.808116][ C0] ? ___pte_offset_map+0x2ad/0x4f0 [ 891.813249][ C0] __handle_mm_fault+0x1b2d/0x2a50 [ 891.818387][ C0] ? mt_find+0x3ef/0xa30 [ 891.822644][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 891.828126][ C0] ? __pfx_mt_find+0x10/0x10 [ 891.832729][ C0] ? rcu_is_watching+0x12/0xc0 [ 891.837516][ C0] ? find_vma+0xbf/0x140 [ 891.841784][ C0] ? __pfx_find_vma+0x10/0x10 [ 891.846475][ C0] handle_mm_fault+0x589/0xd10 [ 891.851297][ C0] ? __bpf_trace_exceptions+0x1/0x40 [ 891.856613][ C0] do_user_addr_fault+0x7a6/0x1370 [ 891.861750][ C0] ? rcu_is_watching+0x12/0xc0 [ 891.866536][ C0] exc_page_fault+0x5c/0xb0 [ 891.871058][ C0] asm_exc_page_fault+0x26/0x30 [ 891.875941][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 891.881682][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 07 69 03 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 891.901305][ C0] RSP: 0018:ffffc900033979f8 EFLAGS: 00050246 [ 891.907380][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000061030 [ 891.915362][ C0] RDX: 0000000000080000 RSI: ffffffff89630863 RDI: 0000000000000005 [ 891.923345][ C0] RBP: ffffc90003397d98 R08: 0000000000000005 R09: 0000000000000000 [ 891.931323][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 891.939329][ C0] R13: 0000200000061000 R14: ffffc90003397ddc R15: 0000000000000002 [ 891.947314][ C0] ? ____sys_recvmsg+0x2e3/0x6b0 [ 891.952277][ C0] ____sys_recvmsg+0x2ee/0x6b0 [ 891.957071][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 891.962378][ C0] ? kfree+0x24f/0x4d0 [ 891.966465][ C0] ? ___sys_recvmsg+0x8e/0x1a0 [ 891.971240][ C0] ___sys_recvmsg+0x114/0x1a0 [ 891.975953][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 891.981167][ C0] ? rcu_is_watching+0x12/0xc0 [ 891.985959][ C0] ? __pfx___might_resched+0x10/0x10 [ 891.991262][ C0] do_recvmmsg+0x2fe/0x750 [ 891.995697][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 892.000647][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 892.006131][ C0] ? lock_release+0x201/0x2f0 [ 892.010841][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 892.015885][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 892.021450][ C0] do_syscall_64+0xcd/0x4c0 [ 892.025971][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.031875][ C0] RIP: 0033:0x7f37fa18ebe9 [ 892.036306][ C0] RSP: 002b:00007f37faf58038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 892.044738][ C0] RAX: ffffffffffffffda RBX: 00007f37fa3b6090 RCX: 00007f37fa18ebe9 [ 892.052731][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 892.060718][ C0] RBP: 00007f37fa211e19 R08: 0000000000000000 R09: 0000000000000000 [ 892.068702][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 892.076686][ C0] R13: 00007f37fa3b6128 R14: 00007f37fa3b6090 R15: 00007ffdd5b3c348 [ 892.084676][ C0] [ 892.087701][ C0] task:syz.1.3239 state:R running task stack:28376 pid:18161 tgid:18153 ppid:16989 task_flags:0x400040 flags:0x00004006 [ 892.101207][ C0] Call Trace: [ 892.104491][ C0] [ 892.107423][ C0] __schedule+0x1190/0x5de0 [ 892.111940][ C0] ? rcu_is_watching+0x12/0xc0 [ 892.116725][ C0] ? __pfx___schedule+0x10/0x10 [ 892.121593][ C0] ? rcu_is_watching+0x12/0xc0 [ 892.126370][ C0] ? finish_task_switch.isra.0+0x21c/0xc10 [ 892.132189][ C0] ? lock_release+0x201/0x2f0 [ 892.136887][ C0] ? rcu_is_watching+0x12/0xc0 [ 892.141671][ C0] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 892.147679][ C0] preempt_schedule_irq+0x51/0x90 [ 892.152716][ C0] irqentry_exit+0x36/0x90 [ 892.157141][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 892.162612][ C0] RIP: 0010:unwind_next_frame+0x154b/0x20a0 [ 892.168523][ C0] Code: 89 e2 48 89 c5 48 c1 ea 03 48 b8 00 00 00 00 00 fc ff df 80 3c 02 00 0f 84 84 fa ff ff 4c 89 e7 e8 0a ef b6 00 e9 77 fa ff ff <48> ba 00 00 00 00 00 fc ff df 48 8d 79 02 48 89 f8 48 c1 e8 03 0f [ 892.188141][ C0] RSP: 0018:ffffc900042d73e0 EFLAGS: 00000246 [ 892.194225][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff915011d6 [ 892.202216][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 892.210207][ C0] RBP: ffffc900042d7498 R08: ffffffff915011da R09: 0000000000000000 [ 892.218223][ C0] R10: ffffc900042d7450 R11: 0000000000012be3 R12: ffffc900042d74a0 [ 892.226226][ C0] R13: ffffc900042d7450 R14: ffffc900042d7690 R15: ffffc900042d7484 [ 892.234215][ C0] ? save_stack+0x160/0x1f0 [ 892.238759][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 892.244937][ C0] arch_stack_walk+0x94/0x100 [ 892.249666][ C0] ? __reset_page_owner+0x84/0x1a0 [ 892.254799][ C0] stack_trace_save+0x8e/0xc0 [ 892.259501][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 892.264893][ C0] ? debug_check_no_obj_freed+0x31f/0x600 [ 892.270636][ C0] ? rcu_is_watching+0x12/0xc0 [ 892.275429][ C0] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 892.281433][ C0] save_stack+0x160/0x1f0 [ 892.285775][ C0] ? __pfx_save_stack+0x10/0x10 [ 892.290643][ C0] ? lock_release+0x201/0x2f0 [ 892.295346][ C0] ? rcu_read_lock_held+0x9/0x50 [ 892.300320][ C0] __reset_page_owner+0x84/0x1a0 [ 892.305278][ C0] __free_frozen_pages+0x7d5/0x10f0 [ 892.310525][ C0] __put_partials+0x165/0x1c0 [ 892.315226][ C0] qlist_free_all+0x4d/0x120 [ 892.319836][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 892.325317][ C0] __kasan_kmalloc+0x8a/0xb0 [ 892.329924][ C0] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 892.336358][ C0] ? kstrdup_const+0x63/0x80 [ 892.340972][ C0] kstrdup+0x53/0x100 [ 892.344969][ C0] kstrdup_const+0x63/0x80 [ 892.349402][ C0] __kernfs_new_node+0x9b/0x8e0 [ 892.354273][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 892.359760][ C0] ? rcu_is_watching+0x12/0xc0 [ 892.364546][ C0] ? kernfs_root+0xee/0x2a0 [ 892.369076][ C0] ? rcu_is_watching+0x12/0xc0 [ 892.373865][ C0] ? lock_release+0x201/0x2f0 [ 892.378573][ C0] kernfs_new_node+0x13c/0x1e0 [ 892.383359][ C0] __kernfs_create_file+0x53/0x350 [ 892.388494][ C0] cgroup_addrm_files+0x546/0xc20 [ 892.393539][ C0] ? cpufreq_update_util+0x9b/0x2d0 [ 892.398782][ C0] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 892.404344][ C0] ? online_fair_sched_group+0x22b/0x7e0 [ 892.410002][ C0] ? online_fair_sched_group+0x230/0x7e0 [ 892.415666][ C0] css_populate_dir+0x169/0x580 [ 892.420547][ C0] cgroup_apply_control_enable+0x3f3/0xbb0 [ 892.426379][ C0] cgroup_mkdir+0x5e7/0x11f0 [ 892.430987][ C0] ? __pfx_cgroup_mkdir+0x10/0x10 [ 892.436021][ C0] kernfs_iop_mkdir+0x111/0x190 [ 892.440909][ C0] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 892.445945][ C0] vfs_mkdir+0x590/0x8c0 [ 892.450202][ C0] do_mkdirat+0x304/0x3e0 [ 892.454546][ C0] ? __pfx_do_mkdirat+0x10/0x10 [ 892.459413][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 892.464803][ C0] __x64_sys_mkdir+0xef/0x140 [ 892.469494][ C0] do_syscall_64+0xcd/0x4c0 [ 892.474006][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.479916][ C0] RIP: 0033:0x7f37fa18ebe9 [ 892.484349][ C0] RSP: 002b:00007f37faf37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 892.492775][ C0] RAX: ffffffffffffffda RBX: 00007f37fa3b6180 RCX: 00007f37fa18ebe9 [ 892.500765][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 892.508749][ C0] RBP: 00007f37fa211e19 R08: 0000000000000000 R09: 0000000000000000 [ 892.516731][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.524712][ C0] R13: 00007f37fa3b6218 R14: 00007f37fa3b6180 R15: 00007ffdd5b3c348 [ 892.532705][ C0] [ 892.535735][ C0] rcu: rcu_preempt kthread starved for 4281 jiffies! g79897 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 892.546873][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 892.556850][ C0] rcu: RCU grace-period kthread stack dump: [ 892.562763][ C0] task:rcu_preempt state:R running task stack:26688 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 892.576295][ C0] Call Trace: [ 892.579579][ C0] [ 892.582515][ C0] __schedule+0x1190/0x5de0 [ 892.587032][ C0] ? __pfx___schedule+0x10/0x10 [ 892.591903][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 892.597571][ C0] ? schedule+0x2d7/0x3a0 [ 892.601913][ C0] ? rcu_is_watching+0x12/0xc0 [ 892.606692][ C0] ? lock_release+0x201/0x2f0 [ 892.611392][ C0] schedule+0xe7/0x3a0 [ 892.615473][ C0] schedule_timeout+0x123/0x290 [ 892.620336][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 892.625724][ C0] ? __pfx_process_timeout+0x10/0x10 [ 892.631028][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 892.636889][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 892.642370][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 892.647150][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 892.652446][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 892.657393][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 892.662256][ C0] rcu_gp_kthread+0x270/0x380 [ 892.666946][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 892.672155][ C0] ? rcu_is_watching+0x12/0xc0 [ 892.676933][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 892.682152][ C0] ? __kthread_parkme+0x19e/0x250 [ 892.687191][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 892.692399][ C0] kthread+0x3c2/0x780 [ 892.696508][ C0] ? __pfx_kthread+0x10/0x10 [ 892.701109][ C0] ? rcu_is_watching+0x12/0xc0 [ 892.705891][ C0] ? __pfx_kthread+0x10/0x10 [ 892.710491][ C0] ret_from_fork+0x5d7/0x6f0 [ 892.715087][ C0] ? __pfx_kthread+0x10/0x10 [ 892.719716][ C0] ret_from_fork_asm+0x1a/0x30 [ 892.724503][ C0] [ 892.727525][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 892.733857][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 892.742793][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 892.752860][ C0] RIP: 0010:__read_once_word_nocheck+0x3/0x10 [ 892.758944][ C0] Code: e8 82 7e ac 03 e9 c8 fa ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 8b 07 48 b6 2b 0a 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 892.778591][ C0] RSP: 0018:ffffc90000007120 EFLAGS: 00000202 [ 892.784666][ C0] RAX: 0000000000000003 RBX: 0000000000000002 RCX: ffffc90000008000 [ 892.792647][ C0] RDX: ffffc90000007f01 RSI: ffffc90000007ef8 RDI: ffffc90000007ef8 [ 892.800633][ C0] RBP: ffffc90000007ef8 R08: 0000000000000001 R09: 0000000000000000 [ 892.808616][ C0] R10: ffffc90000007198 R11: 00000000000870c8 R12: ffffc900000071e8 [ 892.816601][ C0] R13: ffffc90000007198 R14: ffffc90000007f28 R15: ffffc900000071cc [ 892.824620][ C0] FS: 0000000000000000(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 892.833572][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 892.840169][ C0] CR2: 00007ffe20755ddc CR3: 0000000062935000 CR4: 00000000003526f0 [ 892.848187][ C0] DR0: 0000000000000046 DR1: 0000000000000000 DR2: 00000000000000d0 [ 892.856165][ C0] DR3: 0000000000000820 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 892.864147][ C0] Call Trace: [ 892.867431][ C0] [ 892.870275][ C0] unwind_next_frame+0x15d5/0x20a0 [ 892.875397][ C0] ? net_rx_action+0xa9f/0xfe0 [ 892.880179][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 892.886352][ C0] arch_stack_walk+0x94/0x100 [ 892.891044][ C0] ? handle_softirqs+0x216/0x8e0 [ 892.896002][ C0] stack_trace_save+0x8e/0xc0 [ 892.900707][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 892.906098][ C0] ? kasan_save_track+0x14/0x30 [ 892.910961][ C0] ? skb_free_head+0x1b7/0x210 [ 892.915745][ C0] ? skb_release_data+0x795/0x9e0 [ 892.920780][ C0] ? consume_skb+0xbf/0x100 [ 892.925296][ C0] ? nft_synproxy_do_eval+0xa6b/0xd80 [ 892.930683][ C0] ? nft_do_chain+0x2e6/0x1920 [ 892.935464][ C0] ? nft_do_chain_inet+0x18a/0x340 [ 892.940593][ C0] ? nf_hook_slow+0xbe/0x200 [ 892.945191][ C0] ? nf_hook.constprop.0+0x422/0x750 [ 892.950498][ C0] kasan_save_stack+0x33/0x60 [ 892.955185][ C0] ? kasan_save_stack+0x33/0x60 [ 892.960039][ C0] ? kasan_save_track+0x14/0x30 [ 892.964896][ C0] ? kasan_save_free_info+0x3b/0x60 [ 892.970115][ C0] ? __kasan_slab_free+0x60/0x70 [ 892.975061][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 892.980007][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 892.984699][ C0] ? consume_skb+0xcc/0x100 [ 892.989208][ C0] ? nft_synproxy_do_eval+0xa6b/0xd80 [ 892.994589][ C0] ? nft_do_chain+0x2e6/0x1920 [ 892.999363][ C0] ? nft_do_chain_inet+0x18a/0x340 [ 893.004484][ C0] ? nf_hook_slow+0xbe/0x200 [ 893.009109][ C0] ? nf_hook.constprop.0+0x422/0x750 [ 893.014409][ C0] ? ip_local_deliver+0x169/0x1f0 [ 893.019440][ C0] ? ip_rcv+0x2e0/0x600 [ 893.023598][ C0] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 893.029680][ C0] ? __netif_receive_skb+0x1d/0x160 [ 893.034896][ C0] ? process_backlog+0x442/0x15e0 [ 893.039940][ C0] ? __napi_poll.constprop.0+0xba/0x550 [ 893.045496][ C0] ? net_rx_action+0xa9f/0xfe0 [ 893.050288][ C0] kasan_save_track+0x14/0x30 [ 893.054982][ C0] kasan_save_free_info+0x3b/0x60 [ 893.060022][ C0] __kasan_slab_free+0x60/0x70 [ 893.064792][ C0] kmem_cache_free+0x2d1/0x4d0 [ 893.069585][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 893.074276][ C0] kfree_skbmem+0x1a4/0x1f0 [ 893.078788][ C0] consume_skb+0xcc/0x100 [ 893.083126][ C0] nft_synproxy_do_eval+0xa6b/0xd80 [ 893.088342][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 893.094083][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 893.099125][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 893.104508][ C0] ? wiphy_work_queue+0xe5/0x410 [ 893.109453][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 893.114933][ C0] nft_do_chain+0x2e6/0x1920 [ 893.119543][ C0] ? rcu_is_watching+0x12/0xc0 [ 893.124350][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 893.129387][ C0] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 893.135388][ C0] ? rcu_is_watching+0x12/0xc0 [ 893.140169][ C0] ? update_group_capacity+0x734/0xa90 [ 893.145679][ C0] ? nf_conntrack_in+0x8b0/0x1930 [ 893.150726][ C0] nft_do_chain_inet+0x18a/0x340 [ 893.155686][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 893.161157][ C0] ? __pfx_nf_conntrack_in+0x10/0x10 [ 893.166461][ C0] ? rcu_is_watching+0x12/0xc0 [ 893.171244][ C0] ? lock_acquire+0x2cd/0x350 [ 893.175944][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 893.181417][ C0] nf_hook_slow+0xbe/0x200 [ 893.185847][ C0] nf_hook.constprop.0+0x422/0x750 [ 893.190987][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 893.196978][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 893.202651][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 893.207779][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 893.213775][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 893.218932][ C0] ip_local_deliver+0x169/0x1f0 [ 893.223797][ C0] ip_rcv+0x2e0/0x600 [ 893.227786][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 893.232292][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 893.238202][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 893.244639][ C0] ? lock_acquire+0x2cd/0x350 [ 893.249332][ C0] ? process_backlog+0x3f0/0x15e0 [ 893.254371][ C0] ? rcu_is_watching+0x12/0xc0 [ 893.259151][ C0] ? process_backlog+0x3f0/0x15e0 [ 893.264189][ C0] __netif_receive_skb+0x1d/0x160 [ 893.269229][ C0] process_backlog+0x442/0x15e0 [ 893.274098][ C0] __napi_poll.constprop.0+0xba/0x550 [ 893.279494][ C0] ? rcu_is_watching+0x12/0xc0 [ 893.284276][ C0] net_rx_action+0xa9f/0xfe0 [ 893.288917][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 893.294064][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 893.299462][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 893.304680][ C0] ? sched_clock+0x38/0x60 [ 893.309112][ C0] ? sched_clock_cpu+0x6c/0x530 [ 893.313979][ C0] ? lock_release+0x201/0x2f0 [ 893.318674][ C0] handle_softirqs+0x216/0x8e0 [ 893.323452][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 893.328753][ C0] __irq_exit_rcu+0x109/0x170 [ 893.333442][ C0] irq_exit_rcu+0x9/0x30 [ 893.337701][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 893.343351][ C0] [ 893.346319][ C0] [ 893.349255][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 893.355249][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 893.360906][ C0] Code: 5c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 72 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 893.380526][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 893.386606][ C0] RAX: 00000000030a86a4 RBX: 0000000000000000 RCX: ffffffff8b939c29 [ 893.394590][ C0] RDX: ffffed1017086656 RSI: ffffffff8c162880 RDI: ffffffff81913321 [ 893.402573][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000000 R09: ffffed1017086655 [ 893.410553][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 893.418535][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab4090 R15: 0000000000000000 [ 893.426521][ C0] ? ct_kernel_exit+0x139/0x190 [ 893.431384][ C0] ? do_idle+0x391/0x510 [ 893.435643][ C0] default_idle+0x13/0x20 [ 893.440013][ C0] default_idle_call+0x6d/0xb0 [ 893.444792][ C0] do_idle+0x391/0x510 [ 893.448883][ C0] ? __pfx_do_idle+0x10/0x10 [ 893.453499][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 893.458725][ C0] cpu_startup_entry+0x4f/0x60 [ 893.463506][ C0] rest_init+0x16b/0x2b0 [ 893.467771][ C0] ? acpi_subsystem_init+0x133/0x180 [ 893.473079][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 893.478641][ C0] start_kernel+0x3ee/0x4d0 [ 893.483175][ C0] x86_64_start_reservations+0x18/0x30 [ 893.488658][ C0] x86_64_start_kernel+0x130/0x190 [ 893.493802][ C0] common_startup_64+0x13e/0x148 [ 893.498766][ C0]