last executing test programs: 42.508265323s ago: executing program 3 (id=476): lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1d, &(0x7f00000008c0)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x10000, &(0x7f00000003c0)={[{@nfs_export_off}, {@xino_off}, {@index_on}, {@uuid_on}, {@redirect_dir_nofollow}], [{@hash}, {@fowner_lt={'fowner<', 0xee01}}, {@pcr={'pcr', 0x3d, 0xe}}, {@euid_lt={'euid<', r0}}, {@audit}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/hwrng\x00'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)='\x00'/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) landlock_restrict_self(r6, 0xd) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) 41.076535802s ago: executing program 3 (id=480): syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 40.961390378s ago: executing program 3 (id=482): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d06}]}) (fail_nth: 4) 40.847158959s ago: executing program 3 (id=484): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = io_uring_setup(0xf09, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) setuid(0xee01) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 40.739254212s ago: executing program 3 (id=485): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x1, r0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x19d1, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x7fffffd, 0x8000000}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3b05, &(0x7f0000000140)={0x0, 0xfffffffe, 0x13580, 0x1, 0xc4}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/19, 0x13, 0x0) 40.19157371s ago: executing program 3 (id=487): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2a8740, 0x80) r3 = openat(r2, &(0x7f0000000300)='./file0\x00', 0x2e8480, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000340)=0x4) sendmmsg$unix(r7, &(0x7f0000006180)=[{{&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)="e3ebef8de5683ef5b66702a098ac3dda85a358dcefcb8f13c66fc05dd7e8ffd5c4879039e7227226d7e6bb698f85e965b5652f950a84b48f8061c39a9390fff8f32c03944f03f01dd29d3409f34b37b77a7772d5ad7cb6326ca1f891e9109bd88189a12585c21bdc46aa2da4e3541594", 0x70}, {&(0x7f00000006c0)="1c8e9362540a96dfafb782f6444682e6ed3fcef0e682fc5be70bfaa24b9529329c3689587fc8328b5f14eed432e92ea867c1cd4293d19a3f3f7bd810e450d9edf8e0736470f350563768caeccb4a91", 0x4f}], 0x2, &(0x7f0000002980)=[@rights={{0x20, 0x1, 0x1, [r7, r7, r1, r6]}}, @rights={{0x1c, 0x1, 0x1, [r0, r6, r6]}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0xd8, 0x4000004}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48911}, 0x8000) r10 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, 0x0, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r11, 0xc0105500, &(0x7f0000000000)=@usbdevfs_connect={0x6a0}) 25.718509081s ago: executing program 32 (id=487): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2a8740, 0x80) r3 = openat(r2, &(0x7f0000000300)='./file0\x00', 0x2e8480, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000340)=0x4) sendmmsg$unix(r7, &(0x7f0000006180)=[{{&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)="e3ebef8de5683ef5b66702a098ac3dda85a358dcefcb8f13c66fc05dd7e8ffd5c4879039e7227226d7e6bb698f85e965b5652f950a84b48f8061c39a9390fff8f32c03944f03f01dd29d3409f34b37b77a7772d5ad7cb6326ca1f891e9109bd88189a12585c21bdc46aa2da4e3541594", 0x70}, {&(0x7f00000006c0)="1c8e9362540a96dfafb782f6444682e6ed3fcef0e682fc5be70bfaa24b9529329c3689587fc8328b5f14eed432e92ea867c1cd4293d19a3f3f7bd810e450d9edf8e0736470f350563768caeccb4a91", 0x4f}], 0x2, &(0x7f0000002980)=[@rights={{0x20, 0x1, 0x1, [r7, r7, r1, r6]}}, @rights={{0x1c, 0x1, 0x1, [r0, r6, r6]}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0xd8, 0x4000004}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48911}, 0x8000) r10 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, 0x0, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r11, 0xc0105500, &(0x7f0000000000)=@usbdevfs_connect={0x6a0}) 8.809015036s ago: executing program 1 (id=617): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) mknod$loop(0x0, 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000447000/0x1000)=nil, 0x1000, 0xdc86d78c8d4eb3b3, 0x10, r0, 0x4885000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d58000000030000000003006970766c616e3100000000000200de001c0012800b0001006970766c616e00000c0002800600010001000000"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x8040) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='SPEAKER \'Kapture\' 00000000000000000000\n'], 0x27) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="02c93010000c00"], 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) landlock_restrict_self(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect(0x2, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000056544820e105080411250102070109023600010000000009040000042ec25d00090502"], 0x0) r6 = gettid() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000340)=[{&(0x7f00000000c0)="c479c7", 0x3}], 0x1, 0x7) getsockname$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) syz_open_procfs(r6, &(0x7f00000000c0)='net/ip_mr_vif\x00') 7.801701413s ago: executing program 1 (id=619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f0000000780)=[{{&(0x7f0000000800)=@qipcrtr, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/97, 0x61}], 0x1, &(0x7f0000000580)=""/114, 0x72}, 0x2}, {{&(0x7f0000000600)=@rc={0x1f, @none}, 0x80, &(0x7f0000000680), 0x0, &(0x7f00000006c0)=""/143, 0x8f}, 0x401}], 0x2, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = dup2(r3, r3) fcntl$notify(r4, 0x402, 0x3f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 32) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x1, '.\x00'}, 0x6e) (rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x14) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x8001, 0x3, 0x9, 0x20000000000, 0x3, 0xfa11, 0xbffffffd}, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) socket(0x1, 0x800, 0x2) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r7], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000003c0)={{{@in6, @in6=@loopback}}, {{@in6=@local}, 0x0, @in6=@initdev}}, 0x0) (async, rerun: 64) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) (rerun: 64) 7.249845936s ago: executing program 1 (id=622): syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffd, 0xc0841) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) pread64(r1, 0x0, 0x0, 0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES16], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) getgroups(0x1, &(0x7f0000000040)=[0x0]) fchown(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/85, 0x0, 0xfec00000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/85, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af04, &(0x7f00000003c0)={0x1}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.929997844s ago: executing program 2 (id=624): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) sendmmsg$unix(r1, &(0x7f000000a280)=[{{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x4000025}}, {{&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000007c0)="c750d76e799855ddcd219100587c62dc961faaa8f998f1eb7bd60670fd10a9e2e4b45cccca651fbc43de979c369445ce53b51721bf2299f41575e1e3df2d11219800983e7b1ad24a50e1394bda70e08c53cebf671d4a2265bd643e3971f87528797a362a46e902691b39172272d3741844ab5dfa47b72d79d465f2775a3f6dac9b542fbf3d", 0x85}], 0x1, 0x0, 0x0, 0x40}}, {{&(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000940)="cb64a7e8887bd57a70d34cdbc9", 0xd}, {&(0x7f0000000980)="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", 0xfe}, {&(0x7f0000000a80)="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", 0xfa}], 0x3, 0x0, 0x0, 0x4048044}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000bc0)="7ee1c42cf36d552d888bacd77bb741344565474c29123b96486fb6b4a10beb253abc5a0daeb83c821bd528f860fce2a3034c956bc786812b4d8ef19433ae57bb959e92cabc5a2a300f85e28c9017f19d84e583eedb22d42b5668b2fe66b3fc7c2f4355cbd41c4cb701ebf3d875df86604497ce3f682430ff3d900964d20db2ef2d2c8d9262240d6168a0615abd0585c1bb5192f617418c91676123af71a28dc0875080ad3d6c58b28f7db2f68ddd2df39b0ff48cc0ff9123a286cb74f333af46ff36fdfbb205e336fbc4d6a3e9fd1152d4a690e3c044cf85909166f6171e5d6c67b7fe25", 0xe4}, {&(0x7f0000000cc0)="725d80289b354c6c0daeaeef3f57dac8eb78300c4e3328079f5dd109e5e5d8392dea50bb5519535122ad65c30d11ba61d48e651e702ed3690e5090df8bec5a391c216f40f8f763f2a990eaf803d5482a3173be333e4535e5dcecb3ed898d99f128a70dd70e9ea314f4d46497b868bb69e177f4893f8e56b0bb90a14f590821b7cfc09817e8c020a165852650136a42f28e80119f7bad4d7f2b0c28e37e47239e721508e101bd05b43d17eb2b2ba25e44138b5952f8b91892000dbcaa79836ad522011121b90f97d168addc230d38aa04dbdad3329f672f29614131f2ddafdba39302945391d1b86cb685eb149de512735a4b1a7383292bc4bc1cf95dbb7aef7e19c671f5df90e8659c1bb67405a713b4a7f8d721202386de99fcda94763fd702b53f0b8ed745966369de23ed6ad24b05f592de62522cee80e3ba2b65c715181b496765239514b33b3b736d74974aa65eaa4c8ecf5c15ab0564bbca599bcae70402e4c99fcac68c81f550b099b7c3986ec6e95de5439d7c8892d698908a25bee9f16c23cc05f7d08bf521d8ee796b44b7ff3f764cb9f4ac45dc21e033fecba7c50e64a909007790f18278a294aa04c84eec01079c14b014c149dcaab6e785cc8f54996ee6e210abb517e691ab859b58962b8bb40f876c0b1301ac03a8f82a856105c6ceaca87fed8f6ef80f715b02dfdbe1230bf9259e83a899e3137d77c2f373dbfbad743089afec800eafef75fd0781e57ae92067811ea9edec9c63b17200c64425aaceaefd50797aa8f1675475d0fba53c0b7f810bf5dc63a0db1fa06fb58101ba69824c503d40548a4a0f250be59eabdbce5b3bb37120a3f2729224220e18bb2b742904a982b8b313ab09b07692d37d33f017d3f3ce2bdec75a967f90fdc65816a5b3fe96ef9e35f79aa5a244869278568b93fad860dedb860063dad4a460d96f7f6f431ce655d6c619e40847f6d938cd97e74f355d6ddd36652b2144f6f1f5fad8163bb8c40896ae73621ea3efae064922ad7539c06745b935eab3a6522756c4a29dd0a80d719927fc16133b1c13e21665495af6fe199c97db8eb87ea152f0e9040db62b53c1c0840e3f1fd50706ff354da52e491caffa3cb82973dfd22983f69ca230fe538657ca10a99b5c77dba017574a35de27b2bbac9bcf16301964fd398f9c503977ac624eb47905b2e20fcd1b2decab7714fa5d4ee706891589fe641cd1adec23180e3b5967783a37d7b610934c954d8b881cb58ea721488878481388c1c75d6957370a01b4c468cb96f3583779f7dfed16d258605d61babb5fd0f9dd7920a7ae149b5249fb97ad80324fad673edc85ef214b11a01fb5aef04bf9bd016c62aedbb753be8dd01deebab2bcda52e01bb4b84056de2e3efd87dd8ce01a2a1527a445c4b5881ea7ae56f85e5267cc105b917ceeea92795afbe2ba002b778b2066c1eae781913e2b869381cc8e54f88619bdcaed9d9d6a3bf5c5ec655b9f6d1c30b6d9fe34958be83dc4cb75feb43706230e3c1254335b7209d321be7ca16ec400c9226e96abca1df6d2f60bfa870933b53ad4e2118f75cc2b3bf825be0a7a905e765b6494080c3d5c0390976f794d3d382e0acd06fbd7bc18ea3afe1bdbbb62fb939e0502c5a6f5fc9719831d851e0743d35245bad8e52154331e4c97adc1bac5471d2e6b5ca36f826ca0590aacc839b4d419cfb78ec5db1fbabc99ee7a2291438507a7d55ebcaacf2b41c4c92cae193f557c07951a182450aeeb800bd27f06deb2a357754e78d4e0410e6f0537a6be10ff0424a03c88818283fb5938c2e63c547877d2c4b0ac5d6342d89438f80f736f9c1e58c5b7f7694cca8972c2882c0ec2d282d3834b10cd5998b49a6ca4c21b9169764044edcb769ce417f3cbc257d4d6cc1cadab7b30718545f035a19307b81ef6c73c0b2d8759d5747349fce48c16e9e08e95a2969db5ec0142ff25f45820bea7920a5ed1c035b13bd5ba1a6615f06d37819124d00b80587561169e33320597dabb50c0ae60760b2cb17d815714ba587d4afea8088c5e2607152e19b2dbae663d5c178bb944a9f997f69ebd277d7525d8ed270a10f53d15579172aa82c7b8dfcf0d245d6305def358a38ad751ee7576a9adb41197cedc8c1b44ded8434c77e6ccc876b0d6abda8f9ba1df69e2b1c766bf13a077e937202f03b64a069f00c3c14399c3e465d0610b548ed2513a6572214a53711653881458067d454c156848c27a12d9b2b1890e55372595b596bae9bfd72e2cc862957acd94426a5a98d2b26653ba063f24d62b5340451cac2db36d7909dd48cd49580dec5640019df56ba6d4b4ce2b320dd1937ad8679e9e931088d698a6c6a0eab9fefa7db1d46f526c39ffa949d6c47f4215547a34deb70df732ceba4951fb8bcc56480238ac058a8bc9f52c5f5c8e1ed5b8991e2dd43893433924c1a2f01f98f7a0ad8a2e65170b64b6a430a5f322e2cd0e285055ad4d65e4c24c7dd410e9035902750cdbc10ff5593148c9ef678cf6b82310aa67db8c9afd12bf03fa34d353462e462ff4ac8c311c669c7f8ecb2f3cc556daeb9ca4c428314448c9eb6f22a10fa08d4d1857fe0053a5c89e51e88b2f77d8c343868818cc1b47fb66d188272b866a5063a62acc5c54cae9c4fcce6851e317fdc8ed7a2c41d5272bde267eb7ec81396d2cd47e14bca0230a9761a200c4b3a5d875c8028aca032d785688517743da2b2c2e73d34361aea2f24cd8eab46b6155e212707d96c62743051c57f551f4f1c85a45afd572bfc5152996f6547f82e5a1cabb4b349092a175aa84c201f22cd3c1b9dc1d52c891b402e1b7cc01c1e0cea8dc834549cc2dfcd2ee26c1cac32e6326848a66f4e0806a7c9d07cd95be4979652e268a5c1924b0b1ae93c897701855de2b26d8818e6849644f1b1b86ed17fd40c63cceb2d309a7413e89a699db247adaae6c5d47278be0101356ed48d2277f03f831d7f0a8ec75ca4e7552627f5a0c03f307225fcc65440113c4dc815fd3051506f1430f0d7e23ba8afd6473b89f71131bb313f31a2d04966ac4a10ae3884d8d8efbfe26b87a2ec26d5d0878f689d90bac55bb1517f213c6a78b2f3a0300512f6251c42969fd4a6d7a2179a14d4ae52ee9257dcb1569798d97bf23961927204508a0615c02262d3e1f06dfc49dd88fd1f80bbde829fb38752a78aff50ec4bf4e9a217abce5d91a8a9a877d6ceb7adfc8268e57b49c3966fb7c38fc864a0644b7a0b8691d02d8b33937e659c8218aa0c26766d28fe6a4eea6de0df056b545d1effc58fa1115d1a26d25f10b3b1ee5b8aacaf5a2e5be38c04b72e47dc97ba933a22b0419abac0c4e2c8ee866d74c2c2af50fd4f2e7e6011dbe933ddcdf59377e1cae5ae2affac97703040df8afd5a5024c45fb9dcf4129e4bf3918c893b07df64bfeb758d81c4c714d605633c3abf328dadaa652fd260c1ff660bf4594a76d619c4f33ded3e2333a0e2d79145766896ba192087c9185bec8343176f0e1f23062e3f6d7a0a90dea90a46bbd3eda829b618e72dd1e7618a34937d680a9e088517e6847c10e48b32d29b1ccb2c92638e8efeb7d0ef4bd1d947c0dd7737232d84cd0c2db960bee7bc37c6b17d32d4e7b3cce9efd4f8ddbddc7eedccf2e3ad94b072c6a7db39b6322881a982aa00fe38289078bcb1aabc3a3c9d48324f2f3cd1bec8e942d0f3e6f12ba0aae7133af40f7decfb72d91f9fa2b1689ec345b7e2520c691581b9a300c0b96b3cb525bd54cf7ae15a94287dc7117432ec61e1f93e5c7d2e5c88913ad71d9e86b2349e0b1a4b82b58a5b75cff8064fd5d85a34e9e06eb2af7210bb296fbe99cd66d6cb322c5eeb37154a47292aa3826344dd209fb732b6b9f7193d618890fa978523196eaa88064447d960acabbd71281fb690dc82263d028f0897004d7f04765b694def9a069625c2abe02d7263ac6f4d13dfcedcd278a17523d41375dbb6801f72e5015bf7cbe7bb9e758622157f451142b3a6a46769b81d63f5eab8f010a060de3aef2d8b1dbd824763b9cc55f5afd4411da961da742d7a1ac46d6909dbd536e0ba25ede48fab5b42385c3daa878b686e76ebaf9473b966f6f96affbd2de50c0d28e24a0b0c188f8bfee2917b1f93d92d943b28b92c99d12013d99f142b9b053b82a5bb2ca7f7db0bd2cf96ca99934dd07c6a92d4decce83a9d007ab8cb32aeb6e0a25eb32151f07f5fe997cfd075b6aab48927bfd6cd020af86218d74b029395bcab9d0192db7e46c30a55ab2f368b26bfa299b2677af4235efe2e708495fe2529dd173158cab0396dc6d2be40f3ec675da73a10dcbffab5d9cd6b95974d4214a52535356932caa5bb9d2bd1b839d336d1e3208f0dea172908802700ce899bdd26915ede1d729f3b45dd4c4334a41dc8e8d8f7b292f4320e684834ff3890ccaf6db01ce06972e54b0a003f4251aca2be27dd4362b18bc914b2e733f9e24e4cd5a14bc353515da93befd718cc2c0bb1fee0d676fa7dc2c06ac5b524b9fcb926733e82635149954692cac003cba163dd546abf8769f5914abbffc9b0b26b448a611b607a10c1ca3fb14a2cb33c2159f5e47ed2f46b1c46e3ba1250ba513b1d3aec680958a2a121512a88bf739d0a2764859efb080a2fff641f81aa17f431d16b1931c9ee2c67e1c679e346f46e465cf0330f1a4bc9e0dadb7b52dd857c7ba7daa79979f61557e1fa31df0470fe08ec2a72b45c67fbef605bf817342e16694d6cec957c7b26c345b387c5b43d9828de402ca9a8b79bd0ac8b364b835c40b9801d6bb872df8dd865a0123bdabbe15e75a4ac6e3a828591ee96c95e8febf5d2611f97cf83c50f4a6d2a4e9ad4fca33ef390f08c45b32d1b7ec19f26a8d7296c8cd9ecee0e6184b8001a2424820b2a69d0fa341c906cd77eb3b00af033d9df90e854878a48a4071540d373083d64384dc3b3014cbb04edca28c1391c49d9d1212d672ec6b8ee0073abd2e2acb3dbc9e5043acf1780b2853c825174f417d3af381f62f73b4a17bff20afb36df1874b1977fb1e783d4aebce9401c638a5dffcf90e513d0d55dcd6d2be14a3b64faad55e232529f30c139dce259fcf293f7dbcc009c71d71e416dfad76da72f027cef5d5cf4741c8f3f3ed2a1c7690275e424c22e16f36a09c0ea105690d5f90d2e319d44a5e76b02e293ac3dc32b79efa760433ea08a49c1a36ffbc85c9442568a51a42fa5a7e17ae002c2f9618632ceb1d5bb3cdad0b781eb13c0afbaba077c62ec0bdd8a45c2b5d5b0f488ea1e727c597133bb367057e42980c65a640eba0b3f762b7c43968c64cdbb6592ee65865a3c2756869aa9544d101e663b7364b110250605dcd31c47f53db35bd3340698a7d17dc8831b8779518ad20c1a83152c4507e375130563cdb6b2b41d413cb6fb008fcad00611e0cd57fde5608728f166803d9a111996c982b3d9c8e9b41fab5c9c2f4be8632d2ebaa89963dafe438475b21784d5f3752210c2165b9dfa3b7d28c92a61112ec81da5d66d6b96c468314c497a526b1f1e4a0274458adaeb321c38c6829abd452f4d80e508f7eb9e37f50a8e60a5692f59134ea6299f5f5c1454ab868490cae18c824d6df616c618ace95be70c5a0e997cf78a604986f47d2af0f58ac8b3a58beae60e359563996a290c4a5d284acfb95fe2de9266bf12b4e12d6d39f725589c9bdb660039dd05d2bd3cf05b46ef665a179b3599f03d39e4fd128b59e75e7292b6c00a5656c26b6bfd682b1ab2fbd7998d4f9409be6250cfca8e05502ee7846", 0x1000}, {&(0x7f0000001cc0)="e165ab9c95e14afbf3874b818a3b9232d886cebbf8948621da06a0ebb3e70b5904b91ea4c8586f2580067e930ecadfc364b6b1ea05d5fc8888d85c6bcf5666c5d5ae9d65d98f5724c413ddbf890d0bf917a852a54d6e0cbcbaa4939f35032ff2f6041a2b6bc256d713373e88cff97ce8e422ed5ea458b3a98f25a3ca605a1202190142476bd0333572865d1fdbf5599118c9cd8b89d71bf6f401bce78159cd6f14b4a59dd855313fe13cc66084b7355e8e0d931a15c8592fbe1bd6b796043a9b4720252777f593373e78b9b44fe4", 0xce}, {&(0x7f0000001dc0)="602fcc66758e00bb231021c312adf1d20bdc0dce49ef48efe45f33bfce88975e0175b4b557a7fd4848bf6b71e09d523cd9a84bcb4ce849934d65a63c803f3f1bbc1c04cb7c39b09fb6fcb3eb35d1d604d96c31722fdf97232b67feb8e5ac8bace0efdbd7", 0x64}], 0x4, &(0x7f0000001e80)=[@rights={{0x28, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r0, r1, r0]}}], 0x28, 0x44}}, {{&(0x7f0000001ec0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000001f40)}, {&(0x7f0000001f80)}, {&(0x7f0000001fc0)="b836edb2e83b8f2a36924c8e1790e3c669bb265d37288b17075de16fd79e56a3a32cfbf3f052bf5515babe6aa2acc14068e92a0233e336369c335fc122f9d588702c3bab774d232c3cbcf570b74c7a355f6c3237bf5c6a6ffb2edf9132483a75563bc2c893ccf47d66d4b0a02523bac9df9e2ca5fcb4895e67bc7587f9ab616cd279e11c3c68a51902a39a843abbd58cd6638a70899d9600d57cf756619cebd6", 0xa0}, {&(0x7f0000002080)="d1838af23301774d8805de6b7ab259dc0cfc2d3e7519051072a3291e84d746ba5f639e519b0ad784ddf9956234f9e73f44a1cb83d04180db4a0c5148f1a5a342e5b2c0adb16401579414a0a69e1d6ba25bf55a", 0x53}], 0x4, &(0x7f0000002200)=[@rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1]}}], 0xb8, 0x48080}}, {{&(0x7f00000022c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002500)=[{&(0x7f0000002340)="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", 0xff}, {&(0x7f00000024c0)="8aac445ec4c1ecbf59ebc3c7de5a", 0xe}], 0x2, 0x0, 0x0, 0x890}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000031c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x7, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x8}, &(0x7f0000004000)=0xc) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10000) syz_emit_ethernet(0x3d5, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000000000800200"/32], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001001000100000011000000000000000a64000000060a09040000000000000000020000000900010073797a30000000000900020073790001007061796c6f6164002400080002400000000208000540000000080800034000000000140000001100010000000000000000000000000adc5cc9b7652973ec7d4bf90a9956952b0becfc41408db09e90e1e5ba9142539c11f584a566e81837b025fe9d2cc35ab4ba7edc"], 0x8c}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) 6.340971647s ago: executing program 5 (id=627): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=@other={'decodes', ' ', 'io'}, 0xb) (fail_nth: 2) 5.956890452s ago: executing program 5 (id=629): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000003a40)={0x5, 0x0, 0x6, 0x5, 0x8a5, 0x9, 0x8001, 0x6f}, &(0x7f0000003a80)={0x4, 0xffffffffffffffff, 0x1, 0x89000000000, 0x400, 0x2e3, 0x401, 0x107c2}, &(0x7f0000003ac0)={0x8, 0x100000000, 0xfffffffffffffff7, 0x9, 0x4, 0x8000, 0x0, 0x1543}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pipe(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = syz_open_dev$sg(0x0, 0x0, 0x400402) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x6], 0x0, 0x0, 0x1, 0x1}}, 0x40) msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x8, 0x800) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="81"], 0x650) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000000140)={&(0x7f0000000300)=[0x4, 0x6, 0x1, 0x9, 0x5, 0x401, 0x200, 0x4, 0x0, 0xcb0d, 0x770f, 0xff, 0x4, 0x81, 0x2, 0x5, 0x1d, 0x0, 0x78, 0xb, 0x5, 0x2, 0x8, 0x9, 0x69, 0x5, 0xfffffff4, 0x7fff, 0x8, 0xe00, 0x0, 0x3, 0x10000, 0x7f, 0x0, 0xfffffff4, 0x15a0, 0xffffff7f, 0x8, 0x5d, 0x800, 0xf94, 0xff, 0x8, 0x2, 0xfffffff9, 0xe, 0xffffbb46, 0x7, 0x4, 0x1, 0x4, 0x5, 0x1000, 0x6, 0x3, 0x1, 0x8, 0x80, 0xc, 0x7, 0x8, 0x2, 0x1, 0x3, 0x1800000, 0x3, 0x5, 0x400, 0x5, 0x9, 0x1, 0x8, 0x2, 0x1000, 0x9, 0x3, 0x6d, 0xfffffffc, 0x1ff, 0xffffffc0, 0x0, 0x5, 0x8, 0x2008, 0x2, 0xf0, 0x5, 0x7, 0x6, 0x4469, 0xb, 0xfffffb4c, 0x80000001, 0xe5f6, 0x0, 0x4, 0xd4, 0xffffffff, 0x200000, 0x9, 0x2, 0x4, 0x5, 0x2, 0x3, 0x8f, 0x7, 0x6, 0x5, 0x4, 0x6d03, 0x8001, 0x9, 0x3, 0x0, 0x8e7a, 0x2, 0x8, 0xfffffff1, 0x5, 0x1000000, 0xfff3, 0x4, 0x1, 0x80000000, 0x3ff, 0x81, 0x100, 0x8, 0xfffffffb, 0x4, 0xfffffffc, 0x1, 0x7, 0x6, 0x3e, 0x43, 0xffff6a70, 0xc, 0xa092, 0x8, 0x877, 0x8, 0x3, 0x800, 0x5, 0x0, 0x8001, 0x48c, 0x7, 0x2, 0x13, 0x3, 0x3, 0x9, 0x0, 0x70000000, 0x2, 0x8, 0x2, 0x1b1c, 0x48, 0xb5, 0x8, 0x401, 0x1000, 0x5, 0x1, 0xa008, 0x9, 0x8, 0xe4, 0x897, 0x7, 0x81, 0x0, 0x1ff, 0x5, 0x80000000, 0x1, 0x8, 0x1, 0x8, 0x4251, 0x6, 0x4, 0x6, 0x4008, 0x200, 0x5, 0x73f7, 0x6, 0x8001, 0x80, 0xd5, 0x6, 0x800000, 0x40, 0xfffffe03, 0x2, 0x80000001, 0x7f, 0xfffffffa, 0xff, 0x4, 0x4b031fcb, 0x7, 0xf3, 0x40, 0xffffffff, 0x1, 0x0, 0x3, 0x6, 0x0, 0x5, 0x6, 0x3, 0x9, 0xfd, 0xd, 0x1000, 0x94, 0xd4f, 0x3, 0xfffffeff, 0xba7, 0x400, 0x4, 0x0, 0x80000001, 0x7, 0x10001, 0xfff, 0x9, 0x2, 0x9, 0x1, 0xfffffff9, 0x6, 0x62, 0x668, 0xffff, 0x0, 0x7, 0x6, 0x0, 0x49, 0x2, 0x5f4, 0x3fd, 0xfffffffe, 0x4, 0x6, 0x9, 0x0, 0x5, 0x4, 0x6, 0x3, 0x1ff, 0xc3f6, 0x7, 0xd8b8, 0xfffffffe, 0xff, 0x8000, 0x7, 0x100, 0x43, 0x2, 0xc7b, 0xe2a0, 0x5, 0x6, 0x81, 0x6, 0x0, 0x3, 0x75c, 0x1, 0x10000, 0x3f, 0x24fb, 0x5, 0x9, 0xd8c, 0x7ffffffd, 0x7, 0xfffff6d2, 0x0, 0x0, 0x1, 0x9, 0x800, 0x5, 0x9, 0x80000000, 0x1, 0x9dcb, 0x8, 0x4, 0x8001, 0x9, 0x7, 0x6, 0x7, 0x81, 0x7ff, 0x0, 0x7, 0x1c00000, 0x5, 0x10, 0x2, 0x1, 0x4, 0xac, 0x8001, 0xb2, 0x4, 0x84f4, 0xf, 0x0, 0x6, 0x6, 0x3ef, 0x7, 0x101, 0x3, 0x4, 0xa, 0x7f, 0x5, 0x2, 0x7ff, 0xffff094f, 0xb, 0x80, 0x6, 0xfffffffd, 0x63, 0xd, 0x7, 0x9, 0x200, 0x9, 0x7, 0x8, 0xa, 0x10001, 0x8, 0xa21, 0x2, 0x9, 0x7, 0xe207, 0xa4, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0x9, 0x1, 0xd, 0x1, 0xf, 0xfffffffd, 0x26d1, 0x9, 0x8b000, 0x6, 0x6, 0x5, 0x80000000, 0xfffffffb, 0x8, 0x7, 0xfffffff9, 0x7, 0x4, 0x2, 0x0, 0x80, 0xffff6c99, 0x5, 0x6bed988b, 0x7f, 0x6, 0xffffff7f, 0x7, 0x7f, 0x8, 0x4, 0x10000, 0x6, 0x9, 0x40, 0x0, 0x5, 0x0, 0x2, 0x3, 0x10000, 0x8, 0x9, 0x53fa, 0x0, 0x53, 0x9465, 0x9, 0x3, 0x4, 0x36c9, 0x3ff, 0x3, 0x4, 0x8, 0x68, 0x2, 0x81, 0x8, 0xcd94, 0x75e, 0x1000, 0x9, 0x6, 0x0, 0xfffffff7, 0xe, 0x6, 0x3, 0x7, 0x0, 0x6, 0x80000001, 0x731, 0x6, 0x4, 0x8, 0x3, 0x9, 0x80000001, 0x1, 0xfff, 0x4, 0x6, 0x4, 0x4, 0x2, 0x9, 0x6f9, 0x3, 0x8, 0x475e0e15, 0x80000000, 0x5, 0x4, 0xf3e, 0x9, 0x5, 0x0, 0x3, 0xad64, 0xfffffff9, 0x2, 0x3, 0x10000, 0x4, 0xff, 0x400, 0x7f, 0x7f, 0x7, 0x800, 0x40, 0x7, 0x6, 0x8, 0x1a, 0x0, 0x1000, 0xff, 0x10001, 0x8, 0x2, 0xffff, 0x8, 0x100, 0x100, 0x9, 0x9, 0x37, 0x28, 0xfffffff9, 0x7fffffff, 0x4, 0x83b9, 0xb, 0x2, 0x85f2, 0xd7f, 0x7, 0x3ff, 0x1000000, 0x2387c5a4, 0x3, 0x8, 0xbc4e, 0xffff, 0x1, 0x2, 0x408, 0x1ffffd, 0x0, 0x5, 0x6, 0x3, 0x6, 0x0, 0x51, 0x2, 0x3, 0x2, 0xfaf0, 0x4a46, 0x4, 0x10001, 0x9, 0x4921bb4d, 0x5c, 0x6, 0x3, 0x7, 0x7fff, 0x80, 0x3, 0x29dc2fdf, 0x200, 0x1, 0x9, 0xd2c, 0x8, 0x3, 0x3, 0x66f, 0x5, 0x4bb6, 0x258d, 0x101, 0x10000, 0x662f, 0x88, 0x5, 0x4, 0x4, 0xd3f6, 0x4, 0x3, 0x4, 0x1, 0xc, 0xbf2, 0xff, 0x7, 0x8002, 0x9, 0x3ff, 0x80000000, 0x9, 0x9, 0x9, 0xf01a, 0x2, 0x2, 0x9, 0x100, 0x0, 0xffffffff, 0x3, 0x3, 0x3, 0x6, 0x240000, 0x0, 0x1, 0xfffffffa, 0x45, 0x0, 0x0, 0x8, 0x5, 0x0, 0x3, 0x8a8, 0xa, 0x9, 0x0, 0x7, 0x9, 0x583, 0x8, 0x8, 0x1, 0x10002, 0x9, 0xffffff81, 0x6, 0x400, 0x227, 0x6, 0x8, 0xc442, 0x0, 0x3, 0x3ff, 0x5, 0x82a, 0x4, 0x72d2, 0x7, 0x5, 0x7, 0x4, 0x8, 0x8, 0xea1, 0x0, 0x566, 0x0, 0xfffffffe, 0x7, 0x737, 0x4, 0x6, 0x2, 0x1000, 0x4, 0x8, 0xff, 0x9, 0x7, 0x5, 0x3, 0x9, 0xbcea, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x3, 0x7fff, 0x8, 0x3, 0x4, 0x9, 0x101, 0x1, 0x8, 0x1, 0x6, 0x6, 0x9, 0x7f800, 0x9, 0xd8a8, 0x3, 0x9, 0xfffffffb, 0x8, 0xd0f, 0x7, 0xc, 0x4, 0x1, 0x7, 0x7, 0x8e, 0x5, 0x0, 0x7, 0xfffffffe, 0x81, 0xad3, 0x4, 0x80000001, 0x7, 0x8, 0x80, 0x8, 0x3ff, 0x6, 0xce1, 0x8, 0x80000001, 0xe, 0x1, 0x400002, 0x8000, 0x4, 0x3, 0xb, 0x2, 0x2, 0x6, 0x1, 0xe30, 0x3ff, 0xa7a, 0x8, 0x8, 0x9, 0x2, 0x401, 0x9, 0x9659, 0x400, 0xa83, 0x6, 0xfffffffe, 0x5082, 0x5, 0x6e82, 0xffff, 0x9, 0x7ff, 0x200800, 0xfffffffb, 0x4, 0x2, 0xd, 0x1, 0xffffff46, 0x7, 0x8000, 0x5d, 0x70d, 0xa, 0x3, 0x4, 0x486, 0x7, 0xa6a0, 0x7, 0x9, 0x1, 0xe8b0c95b, 0x9, 0x3, 0x8a2, 0x4, 0x6, 0x2, 0x3, 0x0, 0x7, 0x3, 0x4, 0x4, 0x5, 0xfffffff9, 0xbffeffff, 0xc, 0xfffffff7, 0x1ff, 0x8, 0x7ffc, 0x9, 0x3, 0xfffffff8, 0x1, 0x434, 0x8, 0x3ab, 0x8, 0x6, 0x0, 0x7, 0x4389, 0x7, 0x800, 0x400, 0x4, 0x0, 0x3, 0x5, 0xc94, 0x9, 0x4, 0x0, 0x4, 0x2, 0x401, 0x6, 0x401, 0x8, 0x1, 0xb, 0xe664, 0x0, 0xc, 0x96, 0x7, 0x101, 0xd, 0x2, 0x6, 0xdc, 0xf, 0x1000, 0x8, 0x7, 0x0, 0x0, 0x10001, 0x9, 0x7, 0x0, 0x40000fff, 0xf9, 0xc8, 0x2400, 0x1, 0x400, 0x9, 0x0, 0x8, 0x8, 0x7, 0x5, 0xfffffffb, 0x6b59b47c, 0x2, 0x4, 0xd64, 0x8, 0xc, 0x0, 0x7, 0x0, 0x9, 0x4, 0x80, 0x3, 0x6, 0x10, 0xc, 0x7, 0x8, 0x8, 0x8000, 0x6, 0x979, 0x385, 0xa0, 0x5, 0x8, 0x3d72e35e, 0xfffffff7, 0x9, 0x80000001, 0x8, 0x1a7, 0x7, 0x8, 0x0, 0x3, 0xe83, 0x3, 0x1, 0x3, 0x0, 0x2, 0x9973, 0x3, 0x4, 0x40, 0x40, 0x4, 0x5, 0x412, 0x4, 0x2, 0x5, 0xb4, 0x1ff, 0xc77c0000, 0xffff2c2c, 0x9, 0x8000, 0x47, 0x9, 0xffffff97, 0x74f, 0x3, 0xffffffc0, 0x10001, 0x2, 0xfffffe01, 0x7fff, 0x78, 0x8, 0x0, 0xf, 0x40, 0x8, 0xed, 0x3, 0x9, 0x8, 0x0, 0x1, 0x1, 0x7, 0x800, 0xb, 0x5, 0x5, 0x9, 0x2, 0xd, 0x2, 0x6, 0x101, 0x4, 0x6, 0xa6d2, 0xd, 0x8000, 0x2, 0x9, 0x2, 0x0, 0x0, 0x3ff, 0x7, 0xffffff00, 0x7, 0x7, 0x40, 0x3, 0x101, 0x20000000, 0xdc000000, 0x2, 0xfffffffb, 0x401, 0x6, 0x1, 0x9, 0x4, 0xffffffa2, 0x5, 0x5, 0x9015, 0x6, 0x5, 0x5, 0x14b, 0x0, 0x336, 0xcf, 0xd, 0x5, 0xbbe7, 0xa8eb, 0xd0, 0xb, 0x800, 0x2b18, 0x3ec3, 0x0, 0x9, 0x5, 0x1, 0x8, 0x200, 0x2, 0x0, 0x5, 0xff, 0xc, 0x8, 0x2, 0x2, 0x7, 0x8, 0x10, 0xb46, 0x8, 0xfffffffd, 0x5dc60e00, 0x4, 0x9, 0x8, 0xd2, 0x9, 0xffff4a7a, 0x88f, 0xbd, 0x4, 0x6, 0x5, 0x8, 0x9, 0xffffffff, 0xda, 0xe, 0x8001000, 0x7b, 0x9, 0x10001, 0x6, 0x136, 0x36, 0x3a12, 0x9, 0x8, 0x4, 0x8], 0x1, 0x400, 0x3ff}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05", @ANYRES16=r4], 0x0) 5.669232341s ago: executing program 2 (id=631): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffd, 0xc0841) ioctl$EVIOCSKEYCODE_V2(r0, 0xc0189436, 0xfffffffffffffffe) 5.5684385s ago: executing program 2 (id=633): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc27`_4t\xcda\x9b\x04e>W\xcf\x00'/38, 0x2) ftruncate(r0, 0x1000006) shutdown(0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000240)=ANY=[@ANYBLOB="a1"]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000140)={0x0, 0x0, 0x5}) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_open_dev$dvb_dvr(&(0x7f0000004b80), 0x401, 0x28000) 5.460608865s ago: executing program 2 (id=634): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 5.397225177s ago: executing program 2 (id=635): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) (async) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x6, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x800) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000041}, 0x4018) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000140)={0x40, 0x21, 0x4d, {0x4d, 0x9, "aaace84e7d432ce28b0a23cf65ad8825bb349e458dfa64cda9369627f1900427496c6ea3857cf5b4e159fd12151177e147376379180966019fadfa43778a3ff787fb3078a19855ca0c8897"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "c7e62b48ac9b2c86948006211a9b2c42992038dd29fcefae183ae1"}}, &(0x7f0000000200)={0x0, 0x22, 0x25, {[@main=@item_4={0x3, 0x0, 0x8, "7f767714"}, @local=@item_012={0x0, 0x2, 0x5}, @local=@item_4={0x3, 0x2, 0xa, "41f7516f"}, @main=@item_4={0x3, 0x0, 0x8, "4eab58a7"}, @global=@item_4={0x3, 0x1, 0x5, "9d53cc57"}, @main=@item_012={0x1, 0x0, 0xa, "b9"}, @local=@item_4={0x3, 0x2, 0x4, "82ba09d0"}, @global=@item_012={0x2, 0x1, 0x9, "9669"}, @local=@item_4={0x3, 0x2, 0x7, "3cfc12f5"}, @global=@item_012={0x0, 0x1, 0x8}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd5e, 0x2, 0x1, {0x22, 0x874}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d0cd50000002ec9cd5f836ac6ec33f4e9a14ffc529cb8216395b9067ba64fc2184a8b1765f9efed514d6843449f059e11e72caf4b302de87e44d53189839fa8f7eb6b7e9099ea9609b8c7e63e0ce2c3bce8ace4eadacc1ffe57f89a8720e784705b2545af89b9a8c32a0b985fe296c6813023fad772a63c9aefe940e9280adb949dd06386a1cd6f4fbdb190d5e3514b294b6aae19f52ee2ba4e09d9c1257681ea8df65a18ee7841f2fbe6d0ff3d40e83c46d7626031a396d0dcc9768f7d97390465aa233ccb60761393c995074466a16e40b6217599c8a1afadd7"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xee}, &(0x7f0000000440)={0x20, 0x1, 0xab, "38659e5f3827c8ce5f236550e4115f0a6caef0863e0f02975a77362d3da7cabd39710d0c9f6bfb97917d5f4ca4f08473a764e38c1b2d39c185e7e007c1e5ddcea089667120a2eb53b5ae87cea936815ec1e0d4b6c6df765094c58034282ba0727b3a4a54df39e8c1bc7c76a12c872d93c6329df75b2e39df4fa77656947eea2a8c4831f0dfffabc2a43d9a02c03c20aad7c4defde4aa3c043d7345e9943260cb282092d6c51671fcdb6cd9"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x80}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4e6f9bac258f19f0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) (async) sendmsg$sock(r5, &(0x7f0000001c00)={&(0x7f0000000700)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @mcast1}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000780)="e25a2eb7a6bbd9ab968178a6b00ee7e1ceb74cc6cb1cf6c031534481eb6d90ab", 0x20}, {&(0x7f00000007c0)="fd99e068ef643cb21542678d022258a32d75c2a9996415921904d47081bcd6a1a449ed4aba0c6b9bdf6409ea46c1ad42bab4c95ac3e13a28bd47ef1ad56fa727a67450c1abf1e64bd5d4f082c115695a7917dab09b5ee49aeed65ba3e02807ab12d1fa71292501f31a440d2f847fd027a3f841b608b6f20faea6fca4d879b23edc5a86c7afa97572a1320e584a69ceb3e31bd9e1af909304f249ca3698ed9061ba48e046c098b5a835f35da5c9940008b900019efe212d9628dd248f7ad9d2f95d7ed57119139791f82bbb633399f596f8dcf0fd4dd2cf9bd181d73cb54125c3d89f76e055c763c9c04a29ca2038533847135bb327", 0xf5}, {&(0x7f00000008c0)="b22ff5c2ac5b04a10ad31b10dff46ace527f206b65dcb74561bab8c1e7d2fad35a5c7a83cdf158ae632b28fb4dff2add57062bc3f455f55d28d2b7fa97e6de02c7840eaadd16c091eb5d1cb9e249c77aa50533", 0x53}, {&(0x7f0000000940)="ec7dcfe3790d85fe0e252d69bf0c134346bfc6791cb6e23daf01524bc82993c37787d8b6fe8b443f676fd9d260250f90", 0x30}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="c3e9a204bee4fe", 0x7}, {&(0x7f0000001b40)="6cf5a028560261ce5bfba6c4e248f68a2f3a49ea8cdd123dba13", 0x1a}], 0x7}, 0x4000010) 3.940703939s ago: executing program 2 (id=641): recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x183203, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201000200000008d90455a000000000000109022400010000f005090400050c0300010009210b00800122290009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r7, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4004851}, 0x4004001) writev(r5, &(0x7f0000019440), 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.939794439s ago: executing program 1 (id=642): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) sendmmsg$unix(r1, &(0x7f000000a280)=[{{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x4000025}}, {{&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000007c0)="c750d76e799855ddcd219100587c62dc961faaa8f998f1eb7bd60670fd10a9e2e4b45cccca651fbc43de979c369445ce53b51721bf2299f41575e1e3df2d11219800983e7b1ad24a50e1394bda70e08c53cebf671d4a2265bd643e3971f87528797a362a46e902691b39172272d3741844ab5dfa47b72d79d465f2775a3f6dac9b542fbf3d", 0x85}], 0x1, 0x0, 0x0, 0x40}}, {{&(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000940)="cb64a7e8887bd57a70d34cdbc9", 0xd}, {&(0x7f0000000980)="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", 0xfe}, {&(0x7f0000000a80)="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", 0xfa}], 0x3, 0x0, 0x0, 0x4048044}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000bc0)="7ee1c42cf36d552d888bacd77bb741344565474c29123b96486fb6b4a10beb253abc5a0daeb83c821bd528f860fce2a3034c956bc786812b4d8ef19433ae57bb959e92cabc5a2a300f85e28c9017f19d84e583eedb22d42b5668b2fe66b3fc7c2f4355cbd41c4cb701ebf3d875df86604497ce3f682430ff3d900964d20db2ef2d2c8d9262240d6168a0615abd0585c1bb5192f617418c91676123af71a28dc0875080ad3d6c58b28f7db2f68ddd2df39b0ff48cc0ff9123a286cb74f333af46ff36fdfbb205e336fbc4d6a3e9fd1152d4a690e3c044cf85909166f6171e5d6c67b7fe25", 0xe4}, {&(0x7f0000000cc0)="725d80289b354c6c0daeaeef3f57dac8eb78300c4e3328079f5dd109e5e5d8392dea50bb5519535122ad65c30d11ba61d48e651e702ed3690e5090df8bec5a391c216f40f8f763f2a990eaf803d5482a3173be333e4535e5dcecb3ed898d99f128a70dd70e9ea314f4d46497b868bb69e177f4893f8e56b0bb90a14f590821b7cfc09817e8c020a165852650136a42f28e80119f7bad4d7f2b0c28e37e47239e721508e101bd05b43d17eb2b2ba25e44138b5952f8b91892000dbcaa79836ad522011121b90f97d168addc230d38aa04dbdad3329f672f29614131f2ddafdba39302945391d1b86cb685eb149de512735a4b1a7383292bc4bc1cf95dbb7aef7e19c671f5df90e8659c1bb67405a713b4a7f8d721202386de99fcda94763fd702b53f0b8ed745966369de23ed6ad24b05f592de62522cee80e3ba2b65c715181b496765239514b33b3b736d74974aa65eaa4c8ecf5c15ab0564bbca599bcae70402e4c99fcac68c81f550b099b7c3986ec6e95de5439d7c8892d698908a25bee9f16c23cc05f7d08bf521d8ee796b44b7ff3f764cb9f4ac45dc21e033fecba7c50e64a909007790f18278a294aa04c84eec01079c14b014c149dcaab6e785cc8f54996ee6e210abb517e691ab859b58962b8bb40f876c0b1301ac03a8f82a856105c6ceaca87fed8f6ef80f715b02dfdbe1230bf9259e83a899e3137d77c2f373dbfbad743089afec800eafef75fd0781e57ae92067811ea9edec9c63b17200c64425aaceaefd50797aa8f1675475d0fba53c0b7f810bf5dc63a0db1fa06fb58101ba69824c503d40548a4a0f250be59eabdbce5b3bb37120a3f2729224220e18bb2b742904a982b8b313ab09b07692d37d33f017d3f3ce2bdec75a967f90fdc65816a5b3fe96ef9e35f79aa5a244869278568b93fad860dedb860063dad4a460d96f7f6f431ce655d6c619e40847f6d938cd97e74f355d6ddd36652b2144f6f1f5fad8163bb8c40896ae73621ea3efae064922ad7539c06745b935eab3a6522756c4a29dd0a80d719927fc16133b1c13e21665495af6fe199c97db8eb87ea152f0e9040db62b53c1c0840e3f1fd50706ff354da52e491caffa3cb82973dfd22983f69ca230fe538657ca10a99b5c77dba017574a35de27b2bbac9bcf16301964fd398f9c503977ac624eb47905b2e20fcd1b2decab7714fa5d4ee706891589fe641cd1adec23180e3b5967783a37d7b610934c954d8b881cb58ea721488878481388c1c75d6957370a01b4c468cb96f3583779f7dfed16d258605d61babb5fd0f9dd7920a7ae149b5249fb97ad80324fad673edc85ef214b11a01fb5aef04bf9bd016c62aedbb753be8dd01deebab2bcda52e01bb4b84056de2e3efd87dd8ce01a2a1527a445c4b5881ea7ae56f85e5267cc105b917ceeea92795afbe2ba002b778b2066c1eae781913e2b869381cc8e54f88619bdcaed9d9d6a3bf5c5ec655b9f6d1c30b6d9fe34958be83dc4cb75feb43706230e3c1254335b7209d321be7ca16ec400c9226e96abca1df6d2f60bfa870933b53ad4e2118f75cc2b3bf825be0a7a905e765b6494080c3d5c0390976f794d3d382e0acd06fbd7bc18ea3afe1bdbbb62fb939e0502c5a6f5fc9719831d851e0743d35245bad8e52154331e4c97adc1bac5471d2e6b5ca36f826ca0590aacc839b4d419cfb78ec5db1fbabc99ee7a2291438507a7d55ebcaacf2b41c4c92cae193f557c07951a182450aeeb800bd27f06deb2a357754e78d4e0410e6f0537a6be10ff0424a03c88818283fb5938c2e63c547877d2c4b0ac5d6342d89438f80f736f9c1e58c5b7f7694cca8972c2882c0ec2d282d3834b10cd5998b49a6ca4c21b9169764044edcb769ce417f3cbc257d4d6cc1cadab7b30718545f035a19307b81ef6c73c0b2d8759d5747349fce48c16e9e08e95a2969db5ec0142ff25f45820bea7920a5ed1c035b13bd5ba1a6615f06d37819124d00b80587561169e33320597dabb50c0ae60760b2cb17d815714ba587d4afea8088c5e2607152e19b2dbae663d5c178bb944a9f997f69ebd277d7525d8ed270a10f53d15579172aa82c7b8dfcf0d245d6305def358a38ad751ee7576a9adb41197cedc8c1b44ded8434c77e6ccc876b0d6abda8f9ba1df69e2b1c766bf13a077e937202f03b64a069f00c3c14399c3e465d0610b548ed2513a6572214a53711653881458067d454c156848c27a12d9b2b1890e55372595b596bae9bfd72e2cc862957acd94426a5a98d2b26653ba063f24d62b5340451cac2db36d7909dd48cd49580dec5640019df56ba6d4b4ce2b320dd1937ad8679e9e931088d698a6c6a0eab9fefa7db1d46f526c39ffa949d6c47f4215547a34deb70df732ceba4951fb8bcc56480238ac058a8bc9f52c5f5c8e1ed5b8991e2dd43893433924c1a2f01f98f7a0ad8a2e65170b64b6a430a5f322e2cd0e285055ad4d65e4c24c7dd410e9035902750cdbc10ff5593148c9ef678cf6b82310aa67db8c9afd12bf03fa34d353462e462ff4ac8c311c669c7f8ecb2f3cc556daeb9ca4c428314448c9eb6f22a10fa08d4d1857fe0053a5c89e51e88b2f77d8c343868818cc1b47fb66d188272b866a5063a62acc5c54cae9c4fcce6851e317fdc8ed7a2c41d5272bde267eb7ec81396d2cd47e14bca0230a9761a200c4b3a5d875c8028aca032d785688517743da2b2c2e73d34361aea2f24cd8eab46b6155e212707d96c62743051c57f551f4f1c85a45afd572bfc5152996f6547f82e5a1cabb4b349092a175aa84c201f22cd3c1b9dc1d52c891b402e1b7cc01c1e0cea8dc834549cc2dfcd2ee26c1cac32e6326848a66f4e0806a7c9d07cd95be4979652e268a5c1924b0b1ae93c897701855de2b26d8818e6849644f1b1b86ed17fd40c63cceb2d309a7413e89a699db247adaae6c5d47278be0101356ed48d2277f03f831d7f0a8ec75ca4e7552627f5a0c03f307225fcc65440113c4dc815fd3051506f1430f0d7e23ba8afd6473b89f71131bb313f31a2d04966ac4a10ae3884d8d8efbfe26b87a2ec26d5d0878f689d90bac55bb1517f213c6a78b2f3a0300512f6251c42969fd4a6d7a2179a14d4ae52ee9257dcb1569798d97bf23961927204508a0615c02262d3e1f06dfc49dd88fd1f80bbde829fb38752a78aff50ec4bf4e9a217abce5d91a8a9a877d6ceb7adfc8268e57b49c3966fb7c38fc864a0644b7a0b8691d02d8b33937e659c8218aa0c26766d28fe6a4eea6de0df056b545d1effc58fa1115d1a26d25f10b3b1ee5b8aacaf5a2e5be38c04b72e47dc97ba933a22b0419abac0c4e2c8ee866d74c2c2af50fd4f2e7e6011dbe933ddcdf59377e1cae5ae2affac97703040df8afd5a5024c45fb9dcf4129e4bf3918c893b07df64bfeb758d81c4c714d605633c3abf328dadaa652fd260c1ff660bf4594a76d619c4f33ded3e2333a0e2d79145766896ba192087c9185bec8343176f0e1f23062e3f6d7a0a90dea90a46bbd3eda829b618e72dd1e7618a34937d680a9e088517e6847c10e48b32d29b1ccb2c92638e8efeb7d0ef4bd1d947c0dd7737232d84cd0c2db960bee7bc37c6b17d32d4e7b3cce9efd4f8ddbddc7eedccf2e3ad94b072c6a7db39b6322881a982aa00fe38289078bcb1aabc3a3c9d48324f2f3cd1bec8e942d0f3e6f12ba0aae7133af40f7decfb72d91f9fa2b1689ec345b7e2520c691581b9a300c0b96b3cb525bd54cf7ae15a94287dc7117432ec61e1f93e5c7d2e5c88913ad71d9e86b2349e0b1a4b82b58a5b75cff8064fd5d85a34e9e06eb2af7210bb296fbe99cd66d6cb322c5eeb37154a47292aa3826344dd209fb732b6b9f7193d618890fa978523196eaa88064447d960acabbd71281fb690dc82263d028f0897004d7f04765b694def9a069625c2abe02d7263ac6f4d13dfcedcd278a17523d41375dbb6801f72e5015bf7cbe7bb9e758622157f451142b3a6a46769b81d63f5eab8f010a060de3aef2d8b1dbd824763b9cc55f5afd4411da961da742d7a1ac46d6909dbd536e0ba25ede48fab5b42385c3daa878b686e76ebaf9473b966f6f96affbd2de50c0d28e24a0b0c188f8bfee2917b1f93d92d943b28b92c99d12013d99f142b9b053b82a5bb2ca7f7db0bd2cf96ca99934dd07c6a92d4decce83a9d007ab8cb32aeb6e0a25eb32151f07f5fe997cfd075b6aab48927bfd6cd020af86218d74b029395bcab9d0192db7e46c30a55ab2f368b26bfa299b2677af4235efe2e708495fe2529dd173158cab0396dc6d2be40f3ec675da73a10dcbffab5d9cd6b95974d4214a52535356932caa5bb9d2bd1b839d336d1e3208f0dea172908802700ce899bdd26915ede1d729f3b45dd4c4334a41dc8e8d8f7b292f4320e684834ff3890ccaf6db01ce06972e54b0a003f4251aca2be27dd4362b18bc914b2e733f9e24e4cd5a14bc353515da93befd718cc2c0bb1fee0d676fa7dc2c06ac5b524b9fcb926733e82635149954692cac003cba163dd546abf8769f5914abbffc9b0b26b448a611b607a10c1ca3fb14a2cb33c2159f5e47ed2f46b1c46e3ba1250ba513b1d3aec680958a2a121512a88bf739d0a2764859efb080a2fff641f81aa17f431d16b1931c9ee2c67e1c679e346f46e465cf0330f1a4bc9e0dadb7b52dd857c7ba7daa79979f61557e1fa31df0470fe08ec2a72b45c67fbef605bf817342e16694d6cec957c7b26c345b387c5b43d9828de402ca9a8b79bd0ac8b364b835c40b9801d6bb872df8dd865a0123bdabbe15e75a4ac6e3a828591ee96c95e8febf5d2611f97cf83c50f4a6d2a4e9ad4fca33ef390f08c45b32d1b7ec19f26a8d7296c8cd9ecee0e6184b8001a2424820b2a69d0fa341c906cd77eb3b00af033d9df90e854878a48a4071540d373083d64384dc3b3014cbb04edca28c1391c49d9d1212d672ec6b8ee0073abd2e2acb3dbc9e5043acf1780b2853c825174f417d3af381f62f73b4a17bff20afb36df1874b1977fb1e783d4aebce9401c638a5dffcf90e513d0d55dcd6d2be14a3b64faad55e232529f30c139dce259fcf293f7dbcc009c71d71e416dfad76da72f027cef5d5cf4741c8f3f3ed2a1c7690275e424c22e16f36a09c0ea105690d5f90d2e319d44a5e76b02e293ac3dc32b79efa760433ea08a49c1a36ffbc85c9442568a51a42fa5a7e17ae002c2f9618632ceb1d5bb3cdad0b781eb13c0afbaba077c62ec0bdd8a45c2b5d5b0f488ea1e727c597133bb367057e42980c65a640eba0b3f762b7c43968c64cdbb6592ee65865a3c2756869aa9544d101e663b7364b110250605dcd31c47f53db35bd3340698a7d17dc8831b8779518ad20c1a83152c4507e375130563cdb6b2b41d413cb6fb008fcad00611e0cd57fde5608728f166803d9a111996c982b3d9c8e9b41fab5c9c2f4be8632d2ebaa89963dafe438475b21784d5f3752210c2165b9dfa3b7d28c92a61112ec81da5d66d6b96c468314c497a526b1f1e4a0274458adaeb321c38c6829abd452f4d80e508f7eb9e37f50a8e60a5692f59134ea6299f5f5c1454ab868490cae18c824d6df616c618ace95be70c5a0e997cf78a604986f47d2af0f58ac8b3a58beae60e359563996a290c4a5d284acfb95fe2de9266bf12b4e12d6d39f725589c9bdb660039dd05d2bd3cf05b46ef665a179b3599f03d39e4fd128b59e75e7292b6c00a5656c26b6bfd682b1ab2fbd7998d4f9409be6250cfca8e05502ee7846", 0x1000}, {&(0x7f0000001cc0)="e165ab9c95e14afbf3874b818a3b9232d886cebbf8948621da06a0ebb3e70b5904b91ea4c8586f2580067e930ecadfc364b6b1ea05d5fc8888d85c6bcf5666c5d5ae9d65d98f5724c413ddbf890d0bf917a852a54d6e0cbcbaa4939f35032ff2f6041a2b6bc256d713373e88cff97ce8e422ed5ea458b3a98f25a3ca605a1202190142476bd0333572865d1fdbf5599118c9cd8b89d71bf6f401bce78159cd6f14b4a59dd855313fe13cc66084b7355e8e0d931a15c8592fbe1bd6b796043a9b4720252777f593373e78b9b44fe4", 0xce}, {&(0x7f0000001dc0)="602fcc66758e00bb231021c312adf1d20bdc0dce49ef48efe45f33bfce88975e0175b4b557a7fd4848bf6b71e09d523cd9a84bcb4ce849934d65a63c803f3f1bbc1c04cb7c39b09fb6fcb3eb35d1d604d96c31722fdf97232b67feb8e5ac8bace0efdbd7", 0x64}], 0x4, &(0x7f0000001e80)=[@rights={{0x28, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r0, r1, r0]}}], 0x28, 0x44}}, {{&(0x7f0000001ec0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000001f40)}, {&(0x7f0000001f80)}, {&(0x7f0000001fc0)="b836edb2e83b8f2a36924c8e1790e3c669bb265d37288b17075de16fd79e56a3a32cfbf3f052bf5515babe6aa2acc14068e92a0233e336369c335fc122f9d588702c3bab774d232c3cbcf570b74c7a355f6c3237bf5c6a6ffb2edf9132483a75563bc2c893ccf47d66d4b0a02523bac9df9e2ca5fcb4895e67bc7587f9ab616cd279e11c3c68a51902a39a843abbd58cd6638a70899d9600d57cf756619cebd6", 0xa0}, {&(0x7f0000002080)="d1838af23301774d8805de6b7ab259dc0cfc2d3e7519051072a3291e84d746ba5f639e519b0ad784ddf9956234f9e73f44a1cb83d04180db4a0c5148f1a5a342e5b2c0adb16401579414a0a69e1d6ba25bf55a", 0x53}], 0x4, &(0x7f0000002200)=[@rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1]}}], 0xb8, 0x48080}}, {{&(0x7f00000022c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002500)=[{&(0x7f0000002340)="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", 0xff}, {&(0x7f00000024c0)="8aac445ec4c1ecbf59ebc3c7de5a", 0xe}], 0x2, 0x0, 0x0, 0x890}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000031c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x7, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x8}, &(0x7f0000004000)=0xc) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10000) syz_emit_ethernet(0x3d5, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000000000800200"/32], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001001000100000011000000000000000a64000000060a09040000000000000000020000000900010073797a30000000000900020073790001007061796c6f6164002400080002400000000208000540000000080800034000000000140000001100010000000000000000000000000adc5cc9b7652973ec7d4bf90a9956952b0becfc41408db09e90e1e5ba9142539c11f584a566e81837b025fe9d2cc35ab4ba7edc"], 0x8c}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) 3.826204177s ago: executing program 5 (id=644): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x1, r0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x19d1, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x7fffffd, 0x8000000}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3b05, &(0x7f0000000140)={0x0, 0xfffffffe, 0x13580, 0x1, 0xc4}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000000340)=""/19, 0x13, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546", 0xf) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_matches\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0xfd68, r9, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0x0, 0x99, {0x4, 0x7}}}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4, 0x1, [0x400]}]}]}, 0x30}}, 0x0) 3.707074626s ago: executing program 4 (id=645): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc27`_4t\xcda\x9b\x04e>W\xcf\x00'/38, 0x2) ftruncate(r0, 0x1000006) shutdown(0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000240)=ANY=[@ANYBLOB="a1"]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000140)={0x0, 0x0, 0x5}) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_open_dev$dvb_dvr(&(0x7f0000004b80), 0x401, 0x28000) 3.634598963s ago: executing program 4 (id=646): rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2, 0x6) write(r0, 0x0, 0x0) 3.509225648s ago: executing program 0 (id=648): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x0, 0x0, &(0x7f0000000080)=0xfffffffffffffe34) r3 = memfd_create(&(0x7f0000000000)='$#**\x00', 0x4) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012002fab0800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa03029078000000006002081000001100fc010000000000000000000000000000000000000000000000000000000000000000f5386e2a13f38fb92aee42ece94b4e000000000000052f000100000000fb"], 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10087, 0x51c84}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6}}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x9005}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000002c0)={'HL\x00'}, &(0x7f0000000300)=0x1e) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 3.444431632s ago: executing program 4 (id=649): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8, 0x4) renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x56633bd1cf1d94b2) io_submit(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x8000}, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2000}, 0xc, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x80}, 0xbba0e750fb86e36c) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x7ffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x5c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r5 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 3.157168339s ago: executing program 0 (id=650): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdc03, {0x0, 0x0, 0x0, r4, 0x64e30, 0x36801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5, 0x27}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000100), &(0x7f0000000200)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r7 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x4}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000240)={0x0, 0x1, 0x6, 0x6, &(0x7f00000000c0)=[{}]}) connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x0) 2.49308982s ago: executing program 0 (id=651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60842, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f0000000400)) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendto(r7, 0x0, 0x0, 0x2004c8e5, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800eaff190001002cbd7000fcdbdf2502002000", @ANYRES32=0x0, @ANYBLOB="0000000014000100fc0200000000000000000000000000000800020007000000"], 0x38}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000940)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x100}}], 0x18}, 0x4000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x0, 0x4, 0x5, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x9, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 2.231485616s ago: executing program 5 (id=652): syz_usb_connect(0x4, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xd, 0x90, 0x67, 0x10, 0x4cc, 0x2533, 0xa31e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x6a, 0x7, 0x2, 0xd, 0xea, 0x2e, 0x1, [], [{{0x9, 0x5, 0x95, 0x2, 0x10, 0x5, 0x4, 0x1b}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0xff, 0x80}}]}}]}}]}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000008000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000840300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount$9p_tcp(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffd, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x400000, 0x2) r1 = syz_clone(0x21009080, &(0x7f0000000100)="19e7d628e4125ad02f3896860358", 0xe, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000300)="fb0609a81d24e660337c97b4ef2151de9f0aa3b87e6c5f4751ec79fb99dc8ae16191f206f8887ab7babfb2be41b12a22614cd7c49122b8c80103b79623c87e1c810d244a160e59ed1944e8c7b03ebecede023850e47b89e100040baf0112907960aea33d14576ed8a7337ab22a8d3e352dac9ddd94a252e70ff8fb863e6795324f71d4cbf81251d92f0ade93a17128319c30a2135efafb7046979c9501b35b609a8dbda541b6cb8e8ffeac42ec9514c124a86d81a9cffbb3db") prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x56f02000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300), 0xfdef) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 1.911806858s ago: executing program 4 (id=653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2c, 0x38, 0x825, 0x70bd25, 0x25dfdbfc, {0xf}, [@nested={0x18, 0x7, 0x0, 0x1, [@typed={0x14, 0xba, 0x0, 0x0, @ipv6=@remote}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x804c050) 1.693254829s ago: executing program 0 (id=654): r0 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x2, 0x3, @mcast2, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.617613171s ago: executing program 4 (id=655): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x800, "98f12948749833cf7afcec6b42165eee33f2622b5812bd08b9247e76f3c081f7"}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25030000000800e1e13f386f7e"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8050) 1.541650555s ago: executing program 0 (id=656): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20c000, 0x0) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) inotify_init() openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) epoll_create1(0x0) r1 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x86) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) socket(0x400000000010, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x55, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x6) 1.474097889s ago: executing program 4 (id=657): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20c000, 0x0) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) inotify_init() openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) epoll_create1(0x0) r1 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x86) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) socket(0x400000000010, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x55, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x6) 980.376702ms ago: executing program 1 (id=658): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x1}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r1, &(0x7f0000000340)=""/19, 0x13, 0x0) 909.007778ms ago: executing program 5 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x88, 0x65, &(0x7f0000000240), 0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0], 0x54}, 0x1, 0x0, 0x0, 0x80c0}, 0x4840) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) sendto$inet(r4, &(0x7f00000000c0)="ab6f67ac3c837e12fad2b21a7e276ae7ebb5ca", 0x13, 0x400a4, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setrlimit(0x4, &(0x7f0000000180)={0x6, 0x8}) sendmsg$inet_sctp(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x20, 0x4048800}, 0x0) fsopen(&(0x7f0000000100)='binder\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f00004a5000/0x2000)=nil, 0x2000, 0x0, 0x28011, r7, 0xe7ce3000) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r6], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000480), &(0x7f0000000440)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 856.515116ms ago: executing program 1 (id=660): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newtaction={0x4824, 0x30, 0x1, 0x0, 0x0, {}, [{0x30f8, 0x1, [@m_ct={0x1074, 0x19, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x64ad}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_MARK={0x8, 0x5, 0x1}, @TCA_CT_LABELS={0x14, 0x7, "52db65373aff0bfd289306ba5c11ba22"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010101}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x9c0, 0x1e, 0x0, 0x0, {{0xb}, {0x8b4, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x0, 0x55, 0x8, 0x1, {0x7, 0x1, 0x7, 0x40, 0x9, 0x3}, {0x4, 0x0, 0x404, 0x9, 0x7, 0x7f}, 0xfffff3e8, 0x8, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x20000000, 0x2, 0x8, 0x7, 0xe, 0x8, 0x8, 0x5, 0x40, 0xbb, 0xc, 0x7ff, 0x7, 0x5, 0x9, 0xe, 0x0, 0x8, 0x9, 0xffff, 0xd93, 0x7, 0x400, 0x82f6, 0x3ff, 0x10000, 0xf, 0xfffffffb, 0x8, 0x0, 0x9, 0x4, 0x40, 0x6, 0x236, 0x71, 0x0, 0x2, 0xfa26, 0x9, 0x400, 0x7, 0x11, 0x33bc0f81, 0x4, 0x6, 0x6, 0x6, 0x4, 0x5, 0x9, 0x6, 0x9, 0x2, 0x6, 0xfffffc00, 0x9, 0x4, 0x8, 0xfffffff8, 0x7, 0x7ff, 0xffffffff, 0xfa, 0x5, 0x5, 0x1, 0x9, 0x10, 0xffffffff, 0x832, 0x72, 0x3, 0x40, 0x0, 0x9, 0x4, 0x1, 0xfffffff8, 0x2, 0x9, 0x7, 0x8, 0x4, 0x3, 0x2, 0x3, 0x9, 0x6e, 0x9, 0xc7ff, 0x8, 0xf59, 0x6, 0x5, 0x1, 0x2, 0x40, 0x400, 0x40, 0x2, 0x10001, 0x9, 0x8b, 0x353, 0x5, 0x80, 0x5, 0x7, 0x7, 0x4, 0x1, 0x7, 0x9, 0xee25, 0x9, 0x10001, 0x101, 0x1, 0x7, 0xf, 0x0, 0x1ff, 0x401, 0x200, 0x7, 0x1000, 0x7, 0x4, 0xe, 0x18b, 0x3, 0xc, 0xb29, 0x0, 0xb, 0xffffff81, 0x2, 0x5, 0xd40, 0x5, 0x9, 0xca, 0x4, 0x3, 0x80, 0x401, 0x100, 0x0, 0x6, 0x800, 0xffffffff, 0x5, 0x7, 0x2, 0x59, 0x7, 0x6, 0x7, 0x7, 0x9, 0x6, 0xfb, 0xc9, 0x801c, 0xf, 0x7, 0xdbf, 0x0, 0x5de0, 0x6, 0xc, 0xca8, 0x0, 0x6, 0x7fffffff, 0x2, 0x9, 0xe, 0xb, 0x5, 0x3, 0x4, 0x7f, 0x9a, 0x8, 0x0, 0x80000001, 0x5, 0xe, 0x9, 0x2, 0x7, 0x3, 0x3, 0x54, 0x1, 0x4, 0x9, 0x9, 0x0, 0x23f, 0xffffffff, 0x4, 0xe, 0x91, 0x69b, 0x4, 0x6, 0x7514, 0x657a47cf, 0x52, 0x3db, 0x6, 0xf, 0x4d21, 0x2, 0x0, 0x2, 0xe, 0x6, 0xf, 0x0, 0x9, 0x80, 0x200, 0x7f, 0x5, 0x8, 0xd, 0x2, 0x6, 0x8000, 0x1ff, 0xffff, 0x4, 0x8, 0xffff, 0x6, 0x8, 0x6, 0xf7b8, 0x40, 0xda87, 0x40, 0x8, 0x1df, 0x4, 0x0, 0x800, 0x3f, 0x1, 0x7, 0x1, 0x7, 0xb39c]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xffffffffffffffff, 0x9, 0x7, 0x4, {0x4, 0x1, 0x3, 0x3, 0xfff4, 0x7fffffff}, {0x9, 0x1, 0x0, 0xef31, 0x0, 0xd8}, 0x1, 0x8, 0xfffffffe}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x1, 0xffff, 0x3, 0x10, 0xc, 0x579, 0x97, 0x2, 0x2, 0x4, 0x5, 0xc, 0x9, 0x4, 0x400, 0x3, 0x3, 0x10000, 0x80000001, 0x80, 0x8, 0x8000, 0x3, 0x6, 0x80000000, 0x80, 0x4, 0x95c7, 0x0, 0x8, 0xb, 0x9, 0x2, 0x1, 0x1, 0x9, 0xba3b, 0x44a, 0x4, 0x9, 0x2, 0x38f, 0xff, 0x4, 0xfffffff5, 0x7, 0x2, 0x0, 0x5049, 0x3, 0x5e, 0x7fff, 0x9, 0x2, 0x7, 0xfffffa54, 0x2e, 0x2, 0x5, 0x0, 0x8, 0x1, 0x7, 0x8, 0x6, 0xc9a, 0x2, 0x0, 0x48, 0x1, 0x9, 0x6, 0xfffffffa, 0x16, 0x3f, 0x9, 0x5, 0x7, 0xd, 0x8000, 0x5, 0x25, 0xd, 0x2, 0x3ff, 0x1, 0xffff, 0x0, 0x6, 0x8, 0x4, 0x4, 0x0, 0x8001, 0x5, 0x63, 0xffffffff, 0x81, 0xfffffffc, 0x2, 0x8, 0x8, 0x4269, 0x9, 0x7, 0x2, 0x40, 0x3, 0x81, 0x8, 0x7fff, 0x80000001, 0x1e2, 0x2, 0xfd9, 0x0, 0x101, 0x4, 0x80000001, 0x2, 0x2d, 0x81, 0xb6, 0xfffffffd, 0x462, 0x7, 0x0, 0x7, 0x4, 0x3, 0x2, 0x1, 0x8, 0x6, 0x9, 0xfffffffb, 0x8, 0x0, 0x8000, 0xe871, 0x81, 0x3, 0x6, 0x0, 0x8, 0x57c, 0x1, 0x7c7, 0x6, 0x40, 0xf25, 0x1, 0x3, 0x7, 0x80, 0x80000000, 0xfffffffc, 0x4, 0x1000, 0x3, 0x7a7a9ea9, 0x195, 0x85, 0x8, 0x1, 0xe, 0x6, 0x1, 0xfffff08e, 0x9, 0x7f, 0x3, 0x8, 0xfffffffc, 0x7f, 0x6, 0xc5, 0x8, 0x3, 0x2, 0x1000, 0x7, 0x80, 0x200, 0x2, 0x3, 0xe5, 0xb3, 0x7, 0x7, 0x5, 0x401, 0xffff, 0x8, 0xeb95, 0x1, 0x5, 0x4, 0x1, 0x7, 0x0, 0x6, 0x5, 0x4, 0x532ef5d1, 0x7, 0x1, 0x67109ae2, 0x9, 0x2, 0xd01, 0x6, 0xff, 0x7f, 0x3, 0x4, 0x81, 0x1, 0x700, 0x5, 0x2, 0x8, 0x9, 0x8, 0xa, 0x3048676e, 0x3, 0x9, 0x0, 0xfffffffd, 0x400, 0x3, 0x6, 0x3, 0xfffffb40, 0xfe, 0x88d94df6, 0x6, 0x9, 0x3, 0x8, 0x0, 0x3, 0xa47, 0x0, 0xa2c, 0x4, 0x6, 0x7, 0x8, 0x5e81, 0x100, 0xa0b, 0x0, 0x2]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}], []]}, {0xe1, 0x6, "3ef6110d48adb14ab866ff755e6202c42c5e196195e8832acf6c9fe6bfa8fa37e2aa1030c95bfd954e6ade1639633c50a09d19d8dee63e6f7d30c150d8889a95039ac16dc14ded388dcece88e33492dc89e274729ee39198e81ce681f5ed4b32dc082902f638ea04a1a2da56a843268fd963644bf6efc97c1858bafb1f2cc6c4c78a6668a2312789d00d35d4bb8a3bbee4490369bf4dee103415a9fa960d75b0d267bb895d4aac6f728b1cad89a89175105a24632e08d93e40ea168d42ad7d92d621a8d2d48c0d6ab0a6420b1bfd6693c1d23b8bc2c743cd89d9502f7c"}, {0xc}, {0xc}}}, @m_gact={0x106c, 0x20, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2408, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1e7f, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x208b, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x66, 0x6, 0x200, 0xf80}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x124, 0x5, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x16a0, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2493, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x166, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x4, 0x4, 0x7ff, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd, 0xfffffffd, 0x7, 0x3, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xff, 0x951cf1f6d4c850b2, 0x8, 0xdbe}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xef, 0xffffffffffffffff, 0x89, 0x400}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1101, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xfe1, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x401, 0xffffffffdffffff8, 0x3, 0x1}}]}, {0x43, 0x6, "322a070e4e3494f12130e642de47c71d9720a783192c4006a582cfe68169b7e81caacc243c20c0e1becf15f2968100a4d766e94353065cc1047fb80b1edc5a"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x4b4, 0xf, 0x0, 0x0, {{0x7}, {0x3e8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x115, 0x6, {0xe, 'raw\x00', 0x0, 0x4, "8df130d3be0f3dc79b0200fa94cc6dc620970c6bdaf9a4df316686117d8ad4c9f1acf17143cc0fbbd9946719d502d8e970387b6ed4478e32b14bd79fbbdd18cd0f479381205a0a888cae25bb9c8bf9285bf0acc83108e2d0e0f90d03825d4ea5034610c721f98c812f24ca637a685ba66b4de80af84083542be798ba2ab9d8b136248b0ca056968eee403adceef2a293c4c622a5dfb2bc5e8b2e3d252416c6d814527922ff2a991a71a8c878276d7e64b57fd9afc87bbbb309e6e4f2032b7399cf54ec11c2d8cd7681c91f13fcbc645444b7548bae5c4f2cff7f76509a7b72b8d2034a313964a5923fae56"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xfb, 0x6, {0x7, 'security\x00', 0xf, 0x2, "4c94bd48633c1dbcb5995e85637081a3753aaf8e256dc3e34164e5eaea66733b13c5ef8a57d0b8c9e5f305f9fa3686279b0ca42c2e323e15517fe808fb955787cf2a26b56bff9d4e98ce64c92602d62562b3412b58bebae63a08999985a1116154d8a99eb8bb6dbe3cdb08ed38a2d7f1eb1df8437e7071ad9946bbbd539c3f56083bf6f0453f6db4407f014473f84c0c472439360e04ee938b2668f59f6cb4d0bb55be25b7617c057493b20acddbae5117994c7beb77f4c6d07c3f6f0d6987029ab106273cda9884d185c0fc4a1b0a0b98"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x10c, 0x6, {0x7ff, 'security\x00', 0x44, 0xb, "79d5829347b9e72c9761eaa6e5676dfaac8ac33eba7b9b516eae14dea51ec83e9298af348aab1811b8f5d0b1e0cd1a892e720bce29bf227bf9bf8a8ddc6d54694eea4038775019012d8d8ac97191043eb41c9f348f541e2efe15cf7df4612d1b4314c05bf9747b3c65ea9bcf5f5df26f9d46f9bfac0651629a18a08faa160f76db5200ca1be184cb2998d14322c23b7ac16223996717c5ffa45ee51e5a7931b40d6550ce77119f4af540efa5bde1fff2746738d0016817e6bf7485336b77fcba5ad301668647b1edfe34995d1684353754bc658257742cfa49f1b714fa99c7423838"}}, @TCA_IPT_TARG={0x4d, 0x6, {0x2, 'nat\x00', 0x5, 0xfa7, "4fc6c531423aadbef6aaf172faa9f69a3957b712a0f16e63472e555b430f35a3dfa148"}}]}, {0xa5, 0x6, "db2d92d75004bf3907683db87446027a498d42017655006323c70d386de0a69aa90a2c00722a0ab051faea2f9b8a4c28ea88a532d29b17d5a4f1e969b348d72b56fe67d7d108be369138f2ff482033d0df96e4d7f688e51ac935a3fffd8b7a108a4a89a0428b21ec994db11c9dca3d59496216cd0750c79956db502347ed19f0d1b984378c053976afeee2c4a5b8cbbfb8245428a86329bf22fd21c70e1fb90d89"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_connmark={0x7c, 0x19, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x9, 0x2, 0x7ff, 0x48000}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7fffffff, 0x8, 0x6, 0x2}, 0x5}}]}, {0x11, 0x6, "2988312a42ff31d58addf998de"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x1718, 0x1, [@m_police={0x1500, 0xb, 0x0, 0x0, {{0xb}, {0x146c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7fff, 0x28000000, 0xa44, 0x1, 0xccc3, 0x2, 0x9, 0x0, 0x3, 0x80000000, 0xfffffffd, 0xd, 0x37, 0x2, 0x9e4, 0x0, 0x1, 0x7, 0x10000, 0x4, 0x3, 0x0, 0x0, 0x10, 0x1, 0x0, 0x4, 0x2, 0x200, 0x2, 0x10001, 0x7, 0x9, 0x7, 0x7b1, 0x0, 0x6, 0xfff, 0x5, 0x0, 0x0, 0x86, 0x5d, 0xf1d5, 0x0, 0x7, 0x1df, 0x9, 0x736e165e, 0x3, 0xfffffff9, 0x8, 0x0, 0xff, 0x400, 0x1, 0xf, 0x6, 0xff, 0x211a, 0x8, 0x0, 0x8, 0x8001, 0x5, 0x9, 0x2, 0xd8000000, 0xfffff999, 0x6, 0x4, 0x1, 0x3, 0x2, 0x6, 0x1, 0x8, 0x7, 0x3, 0x6, 0x5, 0x734, 0xfffffffb, 0x3ff, 0x80000001, 0x7, 0xd, 0x7ff, 0x8, 0x0, 0x8, 0x58, 0x0, 0x38, 0x4, 0x2, 0x7ff, 0x0, 0x1, 0x2d9, 0xfffffffc, 0x1, 0xf21, 0x0, 0x3, 0x5, 0x9, 0xba, 0x3, 0x1, 0xffffffff, 0x5, 0x9, 0x1, 0x93, 0xb, 0x1, 0x2, 0x5, 0x800, 0xd00000, 0x5, 0x5bd9, 0x8, 0xb8, 0x10, 0x0, 0x6, 0x2a4, 0x5, 0x1ff, 0xc, 0xfff, 0x7, 0x4a86, 0x4, 0x5, 0x0, 0x4, 0x4f, 0x800, 0xfffffff8, 0x4ae105d, 0x9, 0x17c, 0x0, 0x0, 0xfffffff9, 0x727, 0x6, 0xf8, 0x2, 0x3, 0xfffffff8, 0x8, 0x4, 0x12769a8a, 0x3, 0x2, 0x0, 0x0, 0x8000, 0x4, 0x0, 0x0, 0x14c, 0x401, 0xdb9, 0xa5, 0xfffffff8, 0x7c000000, 0x6, 0x4, 0x4, 0x6, 0xa33f, 0x6, 0x6a6, 0x3, 0x3, 0x0, 0x192, 0x5, 0x1, 0x4, 0x58c036f7, 0x0, 0x1, 0x7, 0x3, 0x1, 0x9, 0x1ad, 0x6, 0x73, 0xfffffffd, 0x8000, 0x8, 0x400, 0x1, 0x1, 0x0, 0x2, 0x1, 0x8, 0x0, 0x9, 0x9074, 0xcce5, 0x3, 0x7, 0x80, 0x8, 0xbf, 0x3, 0x0, 0x6, 0x3, 0x52, 0x1, 0x7859, 0xffffd858, 0xfffff61c, 0x10, 0x8, 0x5, 0x7f, 0x1000000, 0x9, 0x2, 0x6, 0x0, 0x401, 0xa, 0x2, 0x10, 0x2, 0xb, 0x2, 0x8aac, 0x7, 0x6, 0xfff00000, 0x1, 0x4, 0x1, 0x3070, 0x8, 0x641, 0x8c, 0x4, 0x22e1, 0x30d, 0x6529, 0xd]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x56a9}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0xb07f, 0x1, 0x0, 0x3, 0x6, 0x4, 0x6, 0x9, 0x1, 0x7, 0x4, 0x10001, 0x7fff, 0x84, 0x4, 0x4, 0xffffffff, 0xffff, 0x9, 0x3, 0x1e2f, 0xd6c, 0x6, 0x5, 0x4, 0x6, 0x0, 0x3, 0x2, 0x5, 0x6, 0x0, 0x2, 0x3, 0x5, 0x5, 0xb, 0x4, 0x9bd, 0xc6db, 0x200, 0x400, 0x8, 0x4, 0xffff0000, 0x9, 0x57, 0xff, 0x7f, 0x7, 0x800, 0xff, 0x7, 0x3, 0x6, 0xff, 0x10001, 0x7ff, 0x8001, 0xace, 0x9, 0xf, 0x1, 0x8, 0x1, 0x5, 0xea6, 0x2, 0x2, 0x3, 0xc5, 0x6, 0x63, 0xfffffffc, 0x0, 0x101, 0x400, 0x1, 0x101, 0x76, 0x0, 0x1, 0x7, 0x9, 0x9, 0x10000, 0x0, 0x8, 0x9, 0x3, 0x6, 0x1, 0x6, 0x1000, 0x5, 0x3, 0x3, 0x9, 0x2, 0x9, 0x7, 0x0, 0x400, 0x800, 0x1ff, 0x4, 0x0, 0x6, 0x0, 0x4, 0x9, 0x3, 0x9, 0x1, 0x3, 0xce5, 0x3, 0xb29, 0x9f, 0x2, 0x1000, 0x7, 0xccf, 0x5, 0x5, 0x6, 0x816e, 0x81, 0x7, 0x800, 0x7fff, 0x10001, 0x9, 0x3, 0x5, 0x27a, 0xd2, 0x3, 0x0, 0x10, 0x69f, 0x4, 0xbfd, 0x9, 0x80, 0x4, 0xc96b, 0x0, 0x55, 0x80000001, 0x6, 0x5, 0x6, 0x9, 0x4, 0x100, 0x1, 0x9, 0x4, 0x10001, 0x1, 0x2, 0xfffffadd, 0x1, 0x1, 0x7fff, 0x8, 0x8, 0x3, 0x1, 0x4, 0xffff, 0x3, 0x0, 0xe, 0x3ff, 0x8, 0x0, 0x100, 0x5b46, 0xfffffff4, 0x3e88, 0x392, 0x3, 0x7, 0x4, 0x0, 0x7, 0xfffffff7, 0xb4, 0x8, 0x8, 0x2, 0x0, 0xbc1a, 0x5, 0x98, 0xfffffffb, 0x8, 0x1, 0x5, 0x2, 0x4, 0x7, 0x0, 0x4, 0xfffff801, 0x7ff, 0x1, 0x8, 0x1000, 0x3, 0x4, 0xfff, 0xf, 0x401, 0x4, 0x3, 0x6, 0x6, 0x9e, 0x7fff, 0x200, 0x6, 0x3, 0x9, 0x3, 0x7, 0x200, 0x2f46, 0x10, 0x5, 0x42, 0xb82b, 0x7, 0x5c, 0x2, 0x4800, 0xf1f4, 0x4, 0x7, 0x9, 0x4, 0x7, 0xd, 0x1, 0x9, 0x90a, 0xb705, 0xe75a, 0x8001, 0xdf6b, 0x9, 0x0, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x5, 0xfffffbc2, 0x527a2286, 0x1, 0xc, 0x7f, 0x6, 0x2, 0xa, 0x7, 0x1, 0xffff8000, 0x3, 0xfffffffd, 0xff, 0xfffffff9, 0xffff, 0xd0fd, 0x9d8a, 0x9, 0x7, 0x10000, 0x7fffffff, 0x2, 0x6, 0x1, 0x7, 0x3, 0x5, 0x6, 0x6, 0x2, 0x6, 0x10000, 0x3d, 0x3, 0x3, 0x10, 0xfffffffc, 0xffffffff, 0xe29, 0x6efad655, 0x6, 0xc76, 0x20000, 0x5e0, 0x9, 0x4, 0x2, 0x3, 0x2, 0x9, 0x5, 0x3, 0x6266c898, 0x364, 0xfffffffe, 0x9, 0x6, 0x7, 0x0, 0x2, 0x4, 0xfffff67a, 0x6, 0x1000, 0x10000, 0x2, 0x7e3, 0x101, 0x91a, 0x2, 0x0, 0xb, 0x2, 0x6, 0x200, 0x200, 0x42b2daef, 0x0, 0x1, 0x9, 0xbd07, 0x0, 0xc, 0x800, 0x6, 0x0, 0x5c47658e, 0xc000000, 0x4, 0x401, 0xc849, 0xfffffffa, 0x6, 0x8, 0x10000, 0x80000000, 0x5, 0x3, 0x8, 0x1, 0x9, 0x3, 0x7, 0x7, 0x1, 0x0, 0xfff, 0x0, 0x2, 0x9, 0x6, 0x9, 0xffffff80, 0x2, 0x8, 0x4, 0x6, 0x6, 0x5, 0x0, 0x10000, 0x7, 0x6, 0x7ff, 0x2, 0x5b, 0x2, 0x7fffffff, 0x9, 0x7f, 0x7, 0xf17a, 0x5, 0xe2, 0x8, 0x5, 0x6, 0x7fffffff, 0x9, 0x3, 0x8001, 0x8, 0x9, 0x3ff, 0x10, 0xe0, 0x6, 0x6, 0x8e8f, 0x8, 0x1, 0xffff, 0x100, 0x3, 0x3, 0xfffffff7, 0xb964, 0x7fffffff, 0x5, 0xfffffff0, 0x2, 0x101, 0xf, 0x6, 0x0, 0x3, 0x2, 0x8, 0x6, 0x3, 0x4, 0x1, 0x7fff, 0xfffffffc, 0x6, 0x9, 0xfffffffa, 0x2, 0x101, 0x4, 0x0, 0x3, 0x7ff, 0x0, 0x6, 0x5, 0x4, 0x7, 0x8, 0x7, 0x5, 0x6, 0x8, 0x7fff, 0x4, 0xfffffffd, 0x0, 0x2, 0x8, 0x6, 0x1, 0x6, 0x5, 0x2, 0x10001, 0xef, 0x4, 0x0, 0x4, 0x1, 0x1, 0x4, 0x5, 0x5, 0x0, 0x5, 0x100, 0x1, 0x7, 0x1, 0x42e, 0x741f45ae, 0x6, 0x7f, 0x2, 0x0, 0x10, 0x3, 0x1, 0xb53, 0x7ff, 0x6bc, 0x2, 0x2, 0x7, 0xffffffd3, 0x7, 0x4, 0x40, 0x81, 0x9, 0x3, 0x6, 0x7ff, 0x3, 0x8, 0x3, 0x8001, 0xb, 0x80, 0x2, 0xff, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x78, 0x1, 0x3, 0x7, 0xf, 0x80, 0x80, 0x5, 0x81, 0x5, 0x1, 0x5, 0x2, 0x9, 0x0, 0x100, 0x3, 0x58ca2f05, 0x2, 0x10000, 0x7, 0x0, 0x7, 0x7, 0x8, 0x10001, 0x7fffffff, 0x82f, 0x0, 0x0, 0x9, 0xfffffff7, 0x5, 0x1000, 0xffff, 0x4, 0x3, 0x1, 0x5, 0x0, 0x4, 0x36a, 0x936d, 0x9, 0x8001, 0x7, 0x2, 0x9, 0x1, 0x10, 0x5, 0x800000, 0x6, 0x3eca, 0x81, 0x4, 0xff, 0x6, 0x6, 0x7, 0x3eb, 0x1, 0x7, 0x5, 0xf68, 0x401, 0x55c7, 0x1ff, 0x8, 0xfff, 0xe, 0x3, 0x2, 0x5, 0xfffffffe, 0xffffff9d, 0xfa, 0xfffffffc, 0x4aeb, 0xb7, 0xffffffff, 0x0, 0x6f, 0x3, 0x6, 0x5, 0x7, 0x4, 0x66, 0x7fff, 0x1, 0x7, 0x86, 0x3, 0x7, 0x81, 0x9, 0x7f, 0x6, 0x6fd, 0x4, 0x2, 0x1, 0x4, 0x401, 0x2, 0xffffffb4, 0x700d, 0x17, 0x8, 0x4, 0x7, 0x8, 0xfffffc00, 0x0, 0x5, 0x8, 0x9, 0x8, 0x525, 0x10001, 0x400, 0x3, 0xfffffff9, 0x207, 0x9, 0x1, 0x2, 0xffffffff, 0x1, 0x7, 0x0, 0x1, 0x7, 0x8, 0x9, 0xfffffff7, 0x5, 0x4, 0x80000000, 0x3, 0x8, 0xc, 0x778, 0xfffffffc, 0x4, 0x3, 0x40, 0x268, 0xb, 0x8, 0x6f, 0x853, 0xc341, 0x40, 0x6, 0x5, 0x5, 0x5, 0x7ff, 0x6, 0x4, 0x7, 0x9, 0xff, 0x5, 0x8, 0x5a, 0x1, 0x96, 0x5, 0x488d, 0x1, 0x8, 0x8, 0xa, 0x80000001, 0x1, 0x4, 0x819, 0x5, 0x4, 0x4, 0x6, 0xb4, 0x7, 0xc9, 0x7ff, 0x4, 0xfffffff7, 0xfffffffc, 0xb68d, 0x7, 0x6, 0x1fc, 0x1, 0x10, 0x1, 0x1, 0x3, 0x1, 0x5, 0xfff, 0x2, 0x1, 0x40, 0x1, 0xff, 0x7ff, 0x6dd, 0xa79, 0x2, 0x40, 0xfffffffd, 0x3, 0x8, 0x7fffffff, 0xffffffff, 0x0, 0x5, 0x3, 0xffff76cf, 0xb3f3, 0x8, 0x3, 0x1000, 0x100, 0xc, 0x9, 0x7ff, 0x1, 0x6, 0x62a4, 0x400, 0x4, 0x1, 0x1, 0x3349, 0x5a7, 0x1, 0x8, 0x8, 0xd99d, 0x9, 0x322, 0x4, 0x6, 0x5, 0x80000001, 0x7f, 0x0, 0x6, 0x5, 0x3, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0x3, 0x1, 0xfffffffd, {0x0, 0x0, 0x0, 0x8, 0x7, 0x2}, {0xc, 0x0, 0x1, 0xfffc, 0x9baa, 0x6}, 0x9, 0x6, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9, 0x9, 0x4, 0x4, 0x4, 0x9, 0x10000, 0x6, 0x5, 0x200, 0x1, 0x6, 0x2, 0xdbf, 0x3, 0x2, 0x40, 0x75a83074, 0x780a, 0x10000, 0x5, 0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x9, 0xa65, 0xffffff00, 0x1000, 0x1, 0x7, 0x4, 0x1, 0xffffffff, 0x1, 0x7fff, 0x10001, 0x80000000, 0xff, 0x400, 0x3, 0x4, 0x2, 0x6, 0xbc70ceea, 0x6, 0xb, 0x53, 0x8000, 0xfffffff9, 0x7, 0x5, 0x6, 0x2, 0x7, 0x0, 0x2, 0x1ad8, 0x5, 0x7, 0x8001, 0x7, 0x6, 0x9, 0x2, 0x9, 0x8, 0x7b3, 0xffffffff, 0x1, 0x1, 0x401, 0x4, 0x5, 0x3dd9df4f, 0x3, 0xb, 0x9, 0x9, 0x2, 0x4, 0x46d, 0x1ff, 0x4, 0x5, 0x1, 0x5, 0x3, 0x6, 0x5, 0x8, 0x6a, 0x7, 0x10, 0x9, 0x401, 0x81, 0x2, 0x157b6132, 0xfffffff7, 0x10000, 0x8, 0x6, 0x1ff, 0x10, 0x1, 0x2, 0x2, 0x8, 0x1, 0x9d7d, 0x1, 0x6b6d, 0xfffffff0, 0xaf46, 0x4, 0x100, 0xd48, 0xe, 0x15, 0x5, 0x7fffffff, 0xcfb, 0xe, 0xfffffffa, 0x6, 0x100, 0x9, 0x5, 0x9, 0x5, 0x9d2, 0x40, 0x8, 0x10, 0xd1f, 0x0, 0x100, 0xf, 0x8, 0x5, 0x400, 0x75, 0x2, 0x856, 0x5, 0x8, 0x10, 0x2, 0xff, 0x7, 0x4, 0xff, 0x1, 0x4, 0x7, 0xffff, 0xa, 0x9, 0x3, 0x80000000, 0xd, 0x7, 0x5d, 0x2, 0x0, 0x8, 0x9, 0x274a, 0x3, 0x1, 0xb4cf42ef, 0xa, 0x7fffffff, 0x737, 0x0, 0x1, 0x5, 0x6, 0x8, 0x4, 0x800, 0xfffff184, 0xfffffff8, 0x6, 0x101, 0xfb1, 0xfff, 0x40, 0x3, 0x8001, 0x8, 0xa, 0x7f, 0x2, 0x1, 0x2ee4, 0x9, 0x7, 0x1200000, 0xfffffffb, 0x5, 0x3, 0x7, 0x6, 0x9, 0x1, 0x6628, 0xffffff44, 0x83, 0x100, 0x4c7, 0x4, 0xfffffffd, 0x2, 0x0, 0x6, 0x8, 0xfffffff9, 0x28d, 0x6, 0x0, 0xe1, 0x1, 0x4, 0x3, 0x9, 0x9, 0x100, 0x0, 0x10001, 0x1, 0xfff, 0x5, 0xffffffff, 0x95ae, 0x9, 0x4f20, 0x4, 0x0, 0x9, 0x7, 0xdb, 0x7, 0x0, 0x4, 0x5c75, 0x80000001, 0x6, 0x1, 0x51a920f8, 0x9]}]]}, {0x6c, 0x6, "98fccfd92cee6bf7c556c2fc09ca5c8094053f8a63210828d0a53472cc2a4ba3c21fa796457f864ae6b1eba4e96ee6f1d2227170d575e6aef079dedac17a4d6e2a6db9409fb7e3af54dbaa4489226456d7b825e663219942cd486e8285e1afff56a3d3cdee15bf20"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x64, 0x17, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="3820c8cb9b56"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x81, 0x1, 0x4, 0x6b7812e2}}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x68, 0x1d, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xa0, 0xeff0, 0x10000000, 0x8001, 0x7fff}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc14}]}, {0xd, 0x6, "1340e1f7e424ccf00c"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x90, 0x3, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x58, 0x6, "ae0ce1921bcb6312cc9a72786385acff200cce2269f405afe13d0ca82918681de463c90e3df0fe611f7e7cd9c2482449adaf1c7d94ef8ea640cdf73cb193e42c5af4de8ea5ab8dc5b493ce11b5a0ec26e277f772"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_csum={0xb8, 0xf, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x6, 0x7, 0xfffffff1}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xfffff801, 0x4, 0xc, 0x6}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x1, 0x10, 0x5}, 0x5e}}]}, {0x35, 0x6, "a4c53fe2d90958f9068a829e8f8fac58d1f29e356573b9dbf454f97a3afd56e0a67b36c3ea25eeae990426ecbb26fc4410"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x4824}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r1, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 708.889055ms ago: executing program 0 (id=661): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000300)=0x2, 0x779b, 0x3) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x1000, 0x6, 0x2, 0x0, {0x0, 0x9}, {0x4000350, 0x20002, 0xfffffff9}, {0xf4ef}, {0x4000005, 0x400, 0x1}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3b, 0x0, 0x3, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000280)=@req3={0x6, 0x81, 0x83000000, 0x8ebe, 0x5, 0x4, 0x7}, 0x1c) unshare(0x20060400) fsync(0xffffffffffffffff) r4 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(r5, &(0x7f0000000100)='./file2\x00', 0x181) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xbb3ee8a9a53c79b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @value=r5}, 0x94) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 0s ago: executing program 5 (id=662): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x1, r0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x19d1, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x7fffffd, 0x8000000}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3b05, &(0x7f0000000140)={0x0, 0xfffffffe, 0x13580, 0x1, 0xc4}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000000340)=""/19, 0x13, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546", 0xf) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_matches\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0xfd68, r9, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0x0, 0x99, {0x4, 0x7}}}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4, 0x1, [0x400]}]}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): 86:322): avc: denied { write } for pid=7109 comm="syz.3.294" path="socket:[13501]" dev="sockfs" ino=13501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.866818][ T7136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.897214][ T7136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.976265][ T7136] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.033048][ T30] audit: type=1400 audit(1776329607.030:323): avc: denied { module_request } for pid=7134 comm="syz.0.302" kmod="netdev-team0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 152.102598][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 152.114324][ T5863] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 152.328023][ T5863] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 152.360987][ T5863] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 152.388933][ T5863] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 152.411265][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.424236][ T5863] usb 4-1: Product: syz [ 152.432188][ T5863] usb 4-1: Manufacturer: syz [ 152.439237][ T5863] usb 4-1: SerialNumber: syz [ 152.513842][ T5945] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 152.681994][ T5945] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 152.701197][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.729411][ T5945] usb 2-1: Product: syz [ 152.746560][ T5945] usb 2-1: Manufacturer: syz [ 152.768578][ T5945] usb 2-1: SerialNumber: syz [ 152.793595][ T5863] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 152.803417][ T5863] usb 4-1: clock source 0 is not valid, cannot use [ 152.821039][ T5863] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 152.838968][ T5863] usb 4-1: 1:1: cannot set freq 48000 (v2/v3): err -71 [ 152.923861][ T5863] usb 4-1: USB disconnect, device number 5 [ 153.064011][ T6785] udevd[6785]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.263652][ T5945] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 153.275871][ T5945] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 153.929115][ T7147] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.994781][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'. [ 155.067715][ T30] audit: type=1400 audit(1776329610.222:324): avc: denied { create } for pid=7182 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.116550][ T30] audit: type=1400 audit(1776329610.264:325): avc: denied { connect } for pid=7182 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.487581][ T30] audit: type=1326 audit(1776329610.663:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.2.315" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd9299c819 code=0x0 [ 155.600923][ T7199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.614513][ T30] audit: type=1400 audit(1776329610.768:327): avc: denied { create } for pid=7182 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.659504][ T7199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.703147][ T30] audit: type=1400 audit(1776329610.789:328): avc: denied { bind } for pid=7182 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.723432][ T7196] ubi: mtd0 is already attached to ubi31 [ 155.765694][ T7199] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.843647][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 156.363944][ T5945] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -EPROTO [ 156.395046][ T5945] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 156.418435][ T5945] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 156.449514][ T5945] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 156.476683][ T5945] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 156.506458][ T5945] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 156.544556][ T5945] usb 2-1: USB disconnect, device number 11 [ 157.422286][ T7223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.323'. [ 157.475169][ T30] audit: type=1400 audit(1776329612.658:329): avc: denied { map } for pid=7222 comm="syz.2.323" path="socket:[12746]" dev="sockfs" ino=12746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 157.522374][ T7228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'. [ 157.560781][ T7226] warning: `syz.1.324' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 157.572571][ T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 157.594088][ T30] audit: type=1400 audit(1776329612.868:330): avc: denied { connect } for pid=7229 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.630149][ T7230] usb usb9: usbfs: process 7230 (syz.0.325) did not claim interface 0 before use [ 157.658653][ T7230] tipc: Started in network mode [ 157.665752][ T7230] tipc: Node identity aaaaaaaaaa1f, cluster identity 4711 [ 157.687773][ T7230] tipc: Enabled bearer , priority 5 [ 157.744109][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 157.776048][ T29] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 157.826198][ T29] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 157.847852][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.879878][ T29] usb 4-1: Product: syz [ 157.896965][ T29] usb 4-1: Manufacturer: syz [ 157.912849][ T29] usb 4-1: SerialNumber: syz [ 157.947416][ T30] audit: type=1400 audit(1776329613.246:331): avc: denied { read } for pid=7225 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.140753][ T29] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 158.169917][ T29] usb 4-1: clock source 0 is not valid, cannot use [ 158.191380][ T29] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 158.213834][ T29] usb 4-1: 1:1: cannot set freq 48000 (v2/v3): err -71 [ 158.343855][ T29] usb 4-1: USB disconnect, device number 6 [ 158.886426][ T5815] tipc: Node number set to 11905706 [ 158.902712][ T30] audit: type=1400 audit(1776329613.802:332): avc: denied { listen } for pid=7238 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 159.331758][ T7247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.329'. [ 159.376475][ T30] audit: type=1400 audit(1776329614.737:333): avc: denied { watch watch_reads } for pid=7248 comm="syz.1.331" path="/60" dev="tmpfs" ino=339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 159.465224][ T30] audit: type=1400 audit(1776329614.831:334): avc: denied { link } for pid=7248 comm="syz.1.331" name="#11" dev="tmpfs" ino=354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 159.544411][ T30] audit: type=1400 audit(1776329614.926:335): avc: denied { rename } for pid=7248 comm="syz.1.331" name="#12" dev="tmpfs" ino=354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 159.622717][ T30] audit: type=1400 audit(1776329614.968:336): avc: denied { read write } for pid=7244 comm="syz.3.330" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 159.762184][ T30] audit: type=1400 audit(1776329614.968:337): avc: denied { open } for pid=7244 comm="syz.3.330" path="/dev/sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 159.825513][ T30] audit: type=1400 audit(1776329614.978:338): avc: denied { ioctl } for pid=7244 comm="syz.3.330" path="/dev/sg0" dev="devtmpfs" ino=765 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 159.946125][ T7262] FAULT_INJECTION: forcing a failure. [ 159.946125][ T7262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.012115][ T7262] CPU: 0 UID: 0 PID: 7262 Comm: syz.1.333 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.012138][ T7262] Tainted: [L]=SOFTLOCKUP [ 160.012142][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 160.012148][ T7262] Call Trace: [ 160.012152][ T7262] [ 160.012156][ T7262] dump_stack_lvl+0x100/0x190 [ 160.012173][ T7262] should_fail_ex.cold+0x5/0xa [ 160.012189][ T7262] _copy_from_user+0x2e/0xd0 [ 160.012201][ T7262] vhost_vsock_dev_ioctl+0x116/0xb60 [ 160.012218][ T7262] ? __fget_files+0x215/0x3d0 [ 160.012319][ T7262] ? hook_file_ioctl_common+0x149/0x410 [ 160.012332][ T7262] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 160.012352][ T7262] ? selinux_file_ioctl+0xb6/0x290 [ 160.012369][ T7262] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 160.012385][ T7262] __x64_sys_ioctl+0x18e/0x210 [ 160.012402][ T7262] do_syscall_64+0x10b/0xf80 [ 160.012415][ T7262] ? clear_bhb_loop+0x40/0x90 [ 160.012428][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.012440][ T7262] RIP: 0033:0x7fad4919c819 [ 160.012450][ T7262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.012461][ T7262] RSP: 002b:00007fad49f86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.012475][ T7262] RAX: ffffffffffffffda RBX: 00007fad49415fa0 RCX: 00007fad4919c819 [ 160.012482][ T7262] RDX: 0000000000000000 RSI: 000000004004af61 RDI: 0000000000000003 [ 160.012488][ T7262] RBP: 00007fad49f86090 R08: 0000000000000000 R09: 0000000000000000 [ 160.012494][ T7262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.012501][ T7262] R13: 00007fad49416038 R14: 00007fad49415fa0 R15: 00007ffd2c364528 [ 160.012515][ T7262] [ 160.613301][ T7271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.336'. [ 161.686322][ T7286] netlink: 96 bytes leftover after parsing attributes in process `syz.2.337'. [ 161.760095][ T7286] overlayfs: conflicting lowerdir path [ 161.915142][ T5863] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 162.167349][ T5863] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 162.184233][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.207107][ T5863] usb 2-1: config 0 has no interface number 0 [ 162.213468][ T5863] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.244360][ T5863] usb 2-1: config 0 interface 168 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 162.284872][ T5863] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 162.337063][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.404588][ T5863] usb 2-1: config 0 descriptor?? [ 162.450384][ T5863] HFC-S_USB 2-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 162.657899][ T5931] usb 2-1: USB disconnect, device number 12 [ 162.972432][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.017627][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.301931][ T7332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.342'. [ 164.004514][ T7344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.097613][ T30] audit: type=1400 audit(1776329619.703:339): avc: denied { bind } for pid=7345 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.012075][ T7344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.548086][ T5815] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 171.587588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 172.827427][ T7373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.349'. [ 173.169055][ T30] audit: type=1400 audit(1776329629.226:340): avc: denied { setopt } for pid=7377 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 173.171666][ T7316] syz.4.341 (7316): drop_caches: 2 [ 173.410528][ T5815] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 173.568590][ T30] audit: type=1326 audit(1776329629.646:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7379 comm="syz.4.351" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3eeb39c819 code=0x0 [ 173.568666][ T5815] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.683773][ T5815] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 173.711248][ T5815] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.739220][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.769364][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.791689][ T7374] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 173.799208][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.802046][ T5815] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.827047][ T30] audit: type=1400 audit(1776329629.898:342): avc: denied { create } for pid=7386 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.909396][ T30] audit: type=1400 audit(1776329629.940:343): avc: denied { ioctl } for pid=7386 comm="syz.0.353" path="socket:[12998]" dev="sockfs" ino=12998 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.986067][ T30] audit: type=1400 audit(1776329629.940:344): avc: denied { connect } for pid=7386 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.364893][ T30] audit: type=1400 audit(1776329629.940:345): avc: denied { write } for pid=7386 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.457210][ T10] usb 2-1: USB disconnect, device number 14 [ 174.576168][ T7378] syz.3.346 (7378): drop_caches: 2 [ 174.858783][ T5815] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 175.364734][ T5815] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 175.487152][ T5815] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 175.503826][ T5815] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 175.513311][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.521525][ T5815] usb 5-1: Product: syz [ 175.526002][ T5815] usb 5-1: Manufacturer: syz [ 175.530612][ T5815] usb 5-1: SerialNumber: syz [ 176.073996][ T7409] fuse: Bad value for 'fd' [ 176.225765][ T7414] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 176.232305][ T7414] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 176.240474][ T7414] vhci_hcd vhci_hcd.0: Device attached [ 176.402752][ T30] audit: type=1400 audit(1776329632.533:346): avc: denied { open } for pid=7410 comm="syz.3.361" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 176.622464][ T791] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 176.651509][ T5815] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 176.682521][ T30] audit: type=1400 audit(1776329632.617:347): avc: denied { ioctl } for pid=7410 comm="syz.3.361" path="/dev/ttyqa" dev="devtmpfs" ino=385 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 176.752886][ T5815] usb 5-1: clock source 0 is not valid, cannot use [ 176.806278][ T5815] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 176.860593][ T5815] usb 5-1: 1:1: cannot set freq 48000 (v2/v3): err -71 [ 177.770343][ T7415] vhci_hcd: connection reset by peer [ 177.800661][ T6303] vhci_hcd vhci_hcd.3: stop threads [ 177.830771][ T6303] vhci_hcd vhci_hcd.3: release socket [ 177.941251][ T6303] vhci_hcd vhci_hcd.3: disconnect device [ 178.318954][ T5815] usb 5-1: USB disconnect, device number 9 [ 178.325563][ T7429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.365'. [ 178.397390][ T7435] mmap: syz.2.368 (7435) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 178.425413][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.611189][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 178.744257][ T5815] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 178.890751][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 178.902319][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 178.912520][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 178.921793][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.936740][ T7433] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 178.950047][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.963241][ T5815] usb 5-1: Using ep0 maxpacket: 16 [ 178.970717][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.982877][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.993039][ T5815] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.006333][ T5815] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.017101][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.043561][ T5815] usb 5-1: config 0 descriptor?? [ 179.628004][ T5945] usb 4-1: USB disconnect, device number 7 [ 179.820498][ T5815] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 179.828956][ T5815] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 179.836583][ T5816] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.866996][ T5815] microsoft 0003:045E:07DA.0001: unbalanced collection at end of report description [ 179.878700][ T5815] microsoft 0003:045E:07DA.0001: parse failed [ 179.884875][ T5815] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 179.919260][ T30] audit: type=1400 audit(1776329636.313:348): avc: denied { mount } for pid=7445 comm="syz.1.370" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 179.928331][ T7446] netlink: 29622 bytes leftover after parsing attributes in process `syz.1.370'. [ 179.952141][ T30] audit: type=1400 audit(1776329636.323:349): avc: denied { mounton } for pid=7445 comm="syz.1.370" path="/71/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 179.968763][ T7446] netlink: 32 bytes leftover after parsing attributes in process `syz.1.370'. [ 180.000739][ T30] audit: type=1400 audit(1776329636.386:350): avc: denied { unmount } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 180.035015][ T5816] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 180.053123][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.063621][ T5816] usb 3-1: Product: syz [ 180.069386][ T5816] usb 3-1: Manufacturer: syz [ 180.079068][ T5816] usb 3-1: SerialNumber: syz [ 180.140447][ T5945] usb 5-1: USB disconnect, device number 10 [ 180.319109][ T5816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 180.353003][ T5816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 180.373170][ T5816] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 180.417655][ T5816] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 180.791108][ T7456] usb usb9: usbfs: process 7456 (syz.4.373) did not claim interface 0 before use [ 180.813069][ T7456] tipc: Started in network mode [ 180.824002][ T7456] tipc: Node identity aaaaaaaaaa1f, cluster identity 4711 [ 180.839673][ T7456] tipc: Enabled bearer , priority 5 [ 180.914733][ T30] audit: type=1400 audit(1776329637.352:351): avc: denied { checkpoint_restore } for pid=7458 comm="syz.1.374" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 181.028469][ T7463] bridge_slave_0: left allmulticast mode [ 181.035238][ T7463] bridge_slave_0: left promiscuous mode [ 181.050559][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.065984][ T7463] bridge_slave_1: left allmulticast mode [ 181.080460][ T7463] bridge_slave_1: left promiscuous mode [ 181.103143][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.156704][ T7463] bond0: (slave bond_slave_0): Releasing backup interface [ 181.181899][ T5816] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 181.243980][ T7463] bond0: (slave bond_slave_1): Releasing backup interface [ 181.290417][ T7463] team0: Port device team_slave_0 removed [ 181.329920][ T7463] team0: Port device team_slave_1 removed [ 181.345380][ T5816] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 181.348095][ T30] audit: type=1400 audit(1776329637.814:352): avc: denied { write } for pid=7467 comm="syz.0.376" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 181.384377][ T7463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.398662][ T5816] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 181.412074][ T7463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.446055][ T5816] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 181.448175][ T30] audit: type=1400 audit(1776329637.845:353): avc: denied { open } for pid=7467 comm="syz.0.376" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 181.455627][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.512782][ T7463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.525708][ T7463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.540213][ T30] audit: type=1400 audit(1776329637.845:354): avc: denied { ioctl } for pid=7467 comm="syz.0.376" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 181.544949][ T5816] usb 2-1: Product: syz [ 181.586966][ T7463] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 181.595440][ T30] audit: type=1400 audit(1776329638.055:355): avc: denied { create } for pid=7467 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.611381][ T791] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 181.642705][ T7468] netlink: 'syz.0.376': attribute type 21 has an invalid length. [ 181.657072][ T5816] usb 2-1: Manufacturer: syz [ 181.674824][ T5816] usb 2-1: SerialNumber: syz [ 181.683087][ T30] audit: type=1400 audit(1776329638.087:356): avc: denied { bind } for pid=7467 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.704822][ T7468] netlink: 164 bytes leftover after parsing attributes in process `syz.0.376'. [ 181.720140][ T7465] team0: Mode changed to "loadbalance" [ 181.729923][ T30] audit: type=1400 audit(1776329638.108:357): avc: denied { write } for pid=7467 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.757475][ T7469] syzkaller0: entered promiscuous mode [ 181.763017][ T7469] syzkaller0: entered allmulticast mode [ 181.884666][ T5816] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 181.898121][ T5816] usb 2-1: clock source 0 is not valid, cannot use [ 181.907523][ T5931] tipc: Node number set to 11905706 [ 181.922605][ T5816] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 181.939853][ T5816] usb 2-1: 1:1: cannot set freq 48000 (v2/v3): err -71 [ 182.069979][ T5816] usb 2-1: USB disconnect, device number 15 [ 182.172109][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.823585][ T5945] usb 3-1: USB disconnect, device number 8 [ 182.968350][ T7491] FAULT_INJECTION: forcing a failure. [ 182.968350][ T7491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.992350][ T7491] CPU: 0 UID: 0 PID: 7491 Comm: syz.2.383 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.992379][ T7491] Tainted: [L]=SOFTLOCKUP [ 182.992385][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 182.992394][ T7491] Call Trace: [ 182.992400][ T7491] [ 182.992406][ T7491] dump_stack_lvl+0x100/0x190 [ 182.992431][ T7491] should_fail_ex.cold+0x5/0xa [ 182.992456][ T7491] _copy_from_user+0x2e/0xd0 [ 182.992474][ T7491] drm_ioctl+0x520/0xc60 [ 182.992503][ T7491] ? __pfx_drm_mode_list_lessees_ioctl+0x10/0x10 [ 182.992530][ T7491] ? __pfx_drm_ioctl+0x10/0x10 [ 182.992563][ T7491] ? selinux_file_ioctl+0x13b/0x290 [ 182.992587][ T7491] ? selinux_file_ioctl+0xb6/0x290 [ 182.992612][ T7491] ? __pfx_drm_ioctl+0x10/0x10 [ 182.992636][ T7491] __x64_sys_ioctl+0x18e/0x210 [ 182.992659][ T7491] do_syscall_64+0x10b/0xf80 [ 182.992678][ T7491] ? clear_bhb_loop+0x40/0x90 [ 182.992699][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.992717][ T7491] RIP: 0033:0x7efd9299c819 [ 182.992732][ T7491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.992748][ T7491] RSP: 002b:00007efd90bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.992765][ T7491] RAX: ffffffffffffffda RBX: 00007efd92c15fa0 RCX: 00007efd9299c819 [ 182.992776][ T7491] RDX: 00002000000002c0 RSI: 00000000c01064c7 RDI: 0000000000000003 [ 182.992786][ T7491] RBP: 00007efd90bee090 R08: 0000000000000000 R09: 0000000000000000 [ 182.992797][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.992806][ T7491] R13: 00007efd92c16038 R14: 00007efd92c15fa0 R15: 00007ffc207569a8 [ 182.992830][ T7491] [ 183.789494][ T7494] netlink: 'syz.2.384': attribute type 11 has an invalid length. [ 185.776905][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 185.776920][ T30] audit: type=1400 audit(1776329642.465:359): avc: denied { create } for pid=7513 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 185.992883][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 186.060378][ T7524] FAT-fs (nbd2): unable to read boot sector [ 186.079111][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.085459][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 186.412996][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 186.447370][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 186.489643][ T24] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 186.508236][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.523731][ T24] usb 2-1: Product: syz [ 186.551485][ T24] usb 2-1: Manufacturer: syz [ 186.564523][ T24] usb 2-1: SerialNumber: syz [ 186.891659][ T7531] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 186.898196][ T7531] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.905848][ T7531] vhci_hcd vhci_hcd.0: Device attached [ 187.297820][ T7542] blktrace: Concurrent blktraces are not allowed on loop4 [ 187.657758][ T5931] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 187.679757][ T24] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 187.781244][ T24] usb 2-1: clock source 0 is not valid, cannot use [ 187.907739][ T7533] vhci_hcd: connection reset by peer [ 187.948614][ T24] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 188.002557][ T57] vhci_hcd vhci_hcd.0: stop threads [ 188.007874][ T57] vhci_hcd vhci_hcd.0: release socket [ 188.020314][ T24] usb 2-1: 1:1: cannot set freq 48000 (v2/v3): err -71 [ 188.068941][ T57] vhci_hcd vhci_hcd.0: disconnect device [ 188.078885][ T7543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.569626][ T24] usb 2-1: USB disconnect, device number 16 [ 188.991522][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.221517][ T7554] netlink: 'syz.0.400': attribute type 11 has an invalid length. [ 190.502230][ T7564] fuse: Unknown parameter '000000000000000000000x0000000000000004' [ 190.641814][ T30] audit: type=1326 audit(1776329647.557:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.2.403" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd9299c819 code=0x0 [ 190.708146][ T30] audit: type=1400 audit(1776329647.631:361): avc: denied { create } for pid=7574 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 191.072178][ T30] audit: type=1400 audit(1776329648.019:362): avc: denied { getopt } for pid=7574 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 191.804477][ T30] audit: type=1400 audit(1776329648.786:363): avc: denied { write } for pid=7580 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 192.196271][ T5863] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 192.333691][ T30] audit: type=1400 audit(1776329649.342:364): avc: denied { write } for pid=7590 comm="syz.2.408" path="socket:[14565]" dev="sockfs" ino=14565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 192.405257][ T5863] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 192.420972][ T5863] usb 4-1: config 0 has no interface number 0 [ 192.434925][ T30] audit: type=1326 audit(1776329649.437:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.2.408" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd9299c819 code=0x0 [ 192.448603][ T5863] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 192.506035][ T5863] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 192.545517][ T5863] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 192.564666][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.573780][ T5863] usb 4-1: Product: syz [ 192.577976][ T5863] usb 4-1: Manufacturer: syz [ 192.582550][ T5863] usb 4-1: SerialNumber: syz [ 192.583683][ T5931] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 192.594773][ T5863] usb 4-1: config 0 descriptor?? [ 192.602076][ T7589] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 192.611187][ T7589] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 192.659471][ T30] audit: type=1400 audit(1776329649.668:366): avc: denied { read } for pid=7590 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 192.867230][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.879063][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.914495][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.946755][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.986948][ T30] audit: type=1400 audit(1776329650.035:367): avc: denied { ioctl } for pid=7588 comm="syz.3.407" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.211929][ T5815] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 193.246102][ T7600] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 193.291261][ T7600] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 193.384729][ T5815] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 193.400366][ T5815] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 193.432191][ T5815] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 193.441626][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.449669][ T5815] usb 2-1: Product: syz [ 193.454283][ T5815] usb 2-1: Manufacturer: syz [ 193.458914][ T5815] usb 2-1: SerialNumber: syz [ 193.510031][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 193.555962][ T5863] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 193.567004][ T5863] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 193.673285][ T5815] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 193.682330][ T5815] usb 2-1: clock source 0 is not valid, cannot use [ 193.683141][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 193.690356][ T5815] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 193.706471][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 193.707702][ T5815] usb 2-1: 1:1: cannot set freq 48000 (v2/v3): err -71 [ 193.717501][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 193.737747][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.827893][ T7604] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 193.873207][ T5863] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 193.884660][ T5815] usb 2-1: USB disconnect, device number 17 [ 193.895574][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.907406][ T5863] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 193.954287][ T5863] usb 4-1: USB disconnect, device number 8 [ 194.099494][ T30] audit: type=1400 audit(1776329651.190:368): avc: denied { write } for pid=7605 comm="syz.0.411" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 194.117205][ T7610] random: crng reseeded on system resumption [ 194.192368][ T7613] FAT-fs (nbd0): unable to read boot sector [ 194.198663][ T30] audit: type=1400 audit(1776329651.200:369): avc: denied { open } for pid=7605 comm="syz.0.411" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 194.488237][ T7612] FAT-fs (nbd4): unable to read boot sector [ 195.683198][ T7623] random: crng reseeded on system resumption [ 195.769054][ T7623] FAT-fs (nbd1): unable to read boot sector [ 196.112289][ T7631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.416'. [ 196.368938][ T24] usb 3-1: USB disconnect, device number 9 [ 196.547809][ T7635] usb usb9: usbfs: process 7635 (syz.4.417) did not claim interface 0 before use [ 196.753098][ T7641] Bluetooth: MGMT ver 1.23 [ 196.768153][ T7638] netlink: 'syz.2.418': attribute type 3 has an invalid length. [ 197.431524][ T5890] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 197.557623][ T7654] FAT-fs (nbd0): unable to read boot sector [ 197.650565][ T7653] random: crng reseeded on system resumption [ 197.819206][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 197.834170][ T5890] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 197.844504][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.853269][ T5890] usb 2-1: Product: syz [ 197.857521][ T5890] usb 2-1: Manufacturer: syz [ 197.884609][ T5890] usb 2-1: SerialNumber: syz [ 197.892591][ T5890] usb 2-1: config 0 descriptor?? [ 198.097653][ T7661] FAT-fs (nbd2): unable to read boot sector [ 198.327126][ T7641] io-wq is not configured for unbound workers [ 198.421331][ T7665] FAULT_INJECTION: forcing a failure. [ 198.421331][ T7665] name failslab, interval 1, probability 0, space 0, times 0 [ 198.440280][ T5890] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 198.449270][ T5890] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 198.460591][ T7665] CPU: 1 UID: 0 PID: 7665 Comm: syz.4.426 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.460616][ T7665] Tainted: [L]=SOFTLOCKUP [ 198.460622][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 198.460632][ T7665] Call Trace: [ 198.460637][ T7665] [ 198.460644][ T7665] dump_stack_lvl+0x100/0x190 [ 198.460667][ T7665] should_fail_ex.cold+0x5/0xa [ 198.460690][ T7665] should_failslab+0xc2/0x120 [ 198.460715][ T7665] __kmalloc_cache_noprof+0x7a/0x6f0 [ 198.460732][ T7665] ? binder_get_thread+0x201/0x850 [ 198.460760][ T7665] binder_get_thread+0x201/0x850 [ 198.460786][ T7665] binder_ioctl+0x26c/0x7550 [ 198.460811][ T7665] ? find_held_lock+0x2b/0x80 [ 198.460842][ T7665] ? tomoyo_path_number_perm+0x188/0x580 [ 198.460871][ T7665] ? __pfx_binder_ioctl+0x10/0x10 [ 198.460896][ T7665] ? lockdep_hardirqs_on+0x78/0x100 [ 198.460915][ T7665] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 198.460946][ T7665] ? do_vfs_ioctl+0x226/0x13e0 [ 198.460968][ T7665] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 198.460990][ T7665] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 198.461020][ T7665] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 198.461049][ T7665] ? __fget_files+0x215/0x3d0 [ 198.461072][ T7665] ? hook_file_ioctl_common+0x149/0x410 [ 198.461099][ T7665] ? selinux_file_ioctl+0x13b/0x290 [ 198.461127][ T7665] ? selinux_file_ioctl+0xb6/0x290 [ 198.461152][ T7665] ? __pfx_binder_ioctl+0x10/0x10 [ 198.461178][ T7665] __x64_sys_ioctl+0x18e/0x210 [ 198.461201][ T7665] do_syscall_64+0x10b/0xf80 [ 198.461218][ T7665] ? clear_bhb_loop+0x40/0x90 [ 198.461240][ T7665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.461257][ T7665] RIP: 0033:0x7f3eeb39c819 [ 198.461272][ T7665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.461288][ T7665] RSP: 002b:00007f3eec30a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.461305][ T7665] RAX: ffffffffffffffda RBX: 00007f3eeb615fa0 RCX: 00007f3eeb39c819 [ 198.461316][ T7665] RDX: 0000200000000280 RSI: 00000000c0306201 RDI: 0000000000000003 [ 198.461327][ T7665] RBP: 00007f3eec30a090 R08: 0000000000000000 R09: 0000000000000000 [ 198.461337][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.461347][ T7665] R13: 00007f3eeb616038 R14: 00007f3eeb615fa0 R15: 00007fff382bd678 [ 198.461370][ T7665] [ 198.461387][ T7665] binder: 7664:7665 ioctl c0306201 200000000280 returned -12 [ 198.754727][ T5890] usb 2-1: USB disconnect, device number 18 [ 198.799310][ T30] audit: type=1400 audit(1776329656.135:370): avc: denied { block_suspend } for pid=7671 comm="syz.0.429" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 198.848575][ T7674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.428'. [ 199.248152][ T7680] random: crng reseeded on system resumption [ 199.294480][ T7680] FAT-fs (nbd4): unable to read boot sector [ 199.536839][ T7686] FAULT_INJECTION: forcing a failure. [ 199.536839][ T7686] name failslab, interval 1, probability 0, space 0, times 0 [ 199.555555][ T7686] CPU: 0 UID: 0 PID: 7686 Comm: syz.0.432 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.555583][ T7686] Tainted: [L]=SOFTLOCKUP [ 199.555589][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 199.555599][ T7686] Call Trace: [ 199.555604][ T7686] [ 199.555611][ T7686] dump_stack_lvl+0x100/0x190 [ 199.555636][ T7686] should_fail_ex.cold+0x5/0xa [ 199.555661][ T7686] should_failslab+0xc2/0x120 [ 199.555684][ T7686] __kmalloc_cache_noprof+0x7a/0x6f0 [ 199.555701][ T7686] ? binder_get_thread+0x201/0x850 [ 199.555728][ T7686] binder_get_thread+0x201/0x850 [ 199.555752][ T7686] binder_ioctl+0x26c/0x7550 [ 199.555776][ T7686] ? find_held_lock+0x2b/0x80 [ 199.555811][ T7686] ? tomoyo_path_number_perm+0x188/0x580 [ 199.555839][ T7686] ? __pfx_binder_ioctl+0x10/0x10 [ 199.555865][ T7686] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 199.555894][ T7686] ? do_vfs_ioctl+0x226/0x13e0 [ 199.555916][ T7686] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 199.555938][ T7686] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 199.555971][ T7686] ? __fget_files+0x215/0x3d0 [ 199.555995][ T7686] ? hook_file_ioctl_common+0x149/0x410 [ 199.556017][ T7686] ? selinux_file_ioctl+0x13b/0x290 [ 199.556040][ T7686] ? selinux_file_ioctl+0xb6/0x290 [ 199.556063][ T7686] ? __pfx_binder_ioctl+0x10/0x10 [ 199.556087][ T7686] __x64_sys_ioctl+0x18e/0x210 [ 199.556116][ T7686] do_syscall_64+0x10b/0xf80 [ 199.556135][ T7686] ? clear_bhb_loop+0x40/0x90 [ 199.556155][ T7686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.556172][ T7686] RIP: 0033:0x7fb31d59c819 [ 199.556187][ T7686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.556203][ T7686] RSP: 002b:00007fb31e3fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.556219][ T7686] RAX: ffffffffffffffda RBX: 00007fb31d815fa0 RCX: 00007fb31d59c819 [ 199.556230][ T7686] RDX: 0000200000000280 RSI: 00000000c0306201 RDI: 0000000000000003 [ 199.556240][ T7686] RBP: 00007fb31e3fb090 R08: 0000000000000000 R09: 0000000000000000 [ 199.556249][ T7686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.556259][ T7686] R13: 00007fb31d816038 R14: 00007fb31d815fa0 R15: 00007ffce2344148 [ 199.556282][ T7686] [ 199.556297][ T7686] binder: 7685:7686 ioctl c0306201 200000000280 returned -12 [ 199.886669][ T7689] FAULT_INJECTION: forcing a failure. [ 199.886669][ T7689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.900572][ T7689] CPU: 1 UID: 0 PID: 7689 Comm: syz.0.434 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.900599][ T7689] Tainted: [L]=SOFTLOCKUP [ 199.900603][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 199.900613][ T7689] Call Trace: [ 199.900618][ T7689] [ 199.900624][ T7689] dump_stack_lvl+0x100/0x190 [ 199.900648][ T7689] should_fail_ex.cold+0x5/0xa [ 199.900671][ T7689] _copy_from_iter+0x1f4/0x1690 [ 199.900691][ T7689] ? __asan_memset+0x23/0x50 [ 199.900710][ T7689] ? __pfx__copy_from_iter+0x10/0x10 [ 199.900725][ T7689] ? __pfx___alloc_skb+0x10/0x10 [ 199.900754][ T7689] netlink_sendmsg+0x808/0xda0 [ 199.900782][ T7689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.900805][ T7689] ? __might_fault+0xa0/0x140 [ 199.900831][ T7689] ____sys_sendmsg+0x9e1/0xb70 [ 199.900853][ T7689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.900879][ T7689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.900913][ T7689] ___sys_sendmsg+0x190/0x1e0 [ 199.900940][ T7689] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.900991][ T7689] __sys_sendmsg+0x170/0x220 [ 199.901011][ T7689] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.901039][ T7689] ? rcu_is_watching+0x12/0xc0 [ 199.901064][ T7689] do_syscall_64+0x10b/0xf80 [ 199.901081][ T7689] ? clear_bhb_loop+0x40/0x90 [ 199.901101][ T7689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.901124][ T7689] RIP: 0033:0x7fb31d59c819 [ 199.901137][ T7689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.901156][ T7689] RSP: 002b:00007fb31e3fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.901172][ T7689] RAX: ffffffffffffffda RBX: 00007fb31d815fa0 RCX: 00007fb31d59c819 [ 199.901182][ T7689] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 199.901192][ T7689] RBP: 00007fb31e3fb090 R08: 0000000000000000 R09: 0000000000000000 [ 199.901201][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.901212][ T7689] R13: 00007fb31d816038 R14: 00007fb31d815fa0 R15: 00007ffce2344148 [ 199.901234][ T7689] [ 199.917268][ T5945] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 199.920457][ T30] audit: type=1400 audit(1776329657.290:371): avc: denied { setopt } for pid=7687 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.340249][ T5945] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 200.365785][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.797769][ T5945] usb 4-1: Product: syz [ 200.801955][ T5945] usb 4-1: Manufacturer: syz [ 200.807401][ T5945] usb 4-1: SerialNumber: syz [ 200.870835][ T7705] netlink: 512 bytes leftover after parsing attributes in process `syz.4.438'. [ 201.193605][ T7714] random: crng reseeded on system resumption [ 201.213776][ T7715] FAT-fs (nbd4): unable to read boot sector [ 201.378692][ T5945] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 201.390743][ T5945] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 201.407380][ T5945] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 201.419741][ T5945] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 201.431263][ T5945] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 201.452165][ T7683] bridge_slave_0: left allmulticast mode [ 201.460514][ T7683] bridge_slave_0: left promiscuous mode [ 201.466840][ T7720] FAULT_INJECTION: forcing a failure. [ 201.466840][ T7720] name failslab, interval 1, probability 0, space 0, times 0 [ 201.483379][ T5945] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 201.483496][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.498799][ T7720] CPU: 0 UID: 0 PID: 7720 Comm: syz.0.441 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.498831][ T7720] Tainted: [L]=SOFTLOCKUP [ 201.498837][ T7720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 201.498847][ T7720] Call Trace: [ 201.498853][ T7720] [ 201.498860][ T7720] dump_stack_lvl+0x100/0x190 [ 201.498884][ T7720] should_fail_ex.cold+0x5/0xa [ 201.498908][ T7720] ? tomoyo_encode2+0xfb/0x3c0 [ 201.498930][ T7720] should_failslab+0xc2/0x120 [ 201.498954][ T7720] __kmalloc_noprof+0xe0/0x850 [ 201.498973][ T7720] ? d_absolute_path+0x136/0x1b0 [ 201.499000][ T7720] tomoyo_encode2+0xfb/0x3c0 [ 201.499025][ T7720] tomoyo_encode+0x29/0x50 [ 201.499041][ T7720] tomoyo_realpath_from_path+0x18c/0x690 [ 201.499061][ T7720] tomoyo_path_number_perm+0x23c/0x580 [ 201.499076][ T7720] ? tomoyo_path_number_perm+0x22e/0x580 [ 201.499093][ T7720] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 201.499120][ T7720] ? find_held_lock+0x2b/0x80 [ 201.499136][ T7720] ? __fget_files+0x215/0x3d0 [ 201.499152][ T7720] ? hook_file_ioctl_common+0x149/0x410 [ 201.499163][ T7720] ? __fget_files+0x215/0x3d0 [ 201.499181][ T7720] ? __fget_files+0x21f/0x3d0 [ 201.499200][ T7720] security_file_ioctl+0xd3/0x230 [ 201.499216][ T7720] __x64_sys_ioctl+0xb7/0x210 [ 201.499231][ T7720] do_syscall_64+0x10b/0xf80 [ 201.499243][ T7720] ? clear_bhb_loop+0x40/0x90 [ 201.499256][ T7720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.499268][ T7720] RIP: 0033:0x7fb31d59c819 [ 201.499277][ T7720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.499288][ T7720] RSP: 002b:00007fb31e3da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.499299][ T7720] RAX: ffffffffffffffda RBX: 00007fb31d816090 RCX: 00007fb31d59c819 [ 201.499306][ T7720] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000008 [ 201.499312][ T7720] RBP: 00007fb31e3da090 R08: 0000000000000000 R09: 0000000000000000 [ 201.499318][ T7720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.499324][ T7720] R13: 00007fb31d816128 R14: 00007fb31d816090 R15: 00007ffce2344148 [ 201.499338][ T7720] [ 201.499348][ T7720] ERROR: Out of memory at tomoyo_realpath_from_path. [ 201.781926][ T7683] bridge_slave_1: left allmulticast mode [ 201.798162][ T7683] bridge_slave_1: left promiscuous mode [ 201.827748][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.876269][ T7683] bond0: (slave bond_slave_0): Releasing backup interface [ 201.907360][ T30] audit: type=1400 audit(1776329659.390:372): avc: denied { name_connect } for pid=7724 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 201.937994][ T7683] bond0: (slave bond_slave_1): Releasing backup interface [ 201.957413][ T7683] team0: Port device team_slave_0 removed [ 201.971605][ T30] audit: type=1400 audit(1776329659.400:373): avc: denied { listen } for pid=7724 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.026055][ T7683] team0: Port device team_slave_1 removed [ 202.045419][ T7683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.062608][ T7683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.107284][ T7683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.123747][ T7683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.226522][ T7683] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 202.312250][ T7732] binder_alloc: 7729: binder_alloc_buf, no vma [ 202.321438][ T7721] syz.0.441 (7721): drop_caches: 2 [ 202.332671][ T7716] team0: Mode changed to "loadbalance" [ 202.365536][ T5815] usb 4-1: USB disconnect, device number 9 [ 202.751987][ T7738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.445'. [ 203.215440][ T7744] random: crng reseeded on system resumption [ 203.316458][ T7744] FAT-fs (nbd3): unable to read boot sector [ 203.377562][ T30] audit: type=1400 audit(1776329660.933:374): avc: denied { mount } for pid=7735 comm="syz.0.446" name="/" dev="rpc_pipefs" ino=16144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 203.636799][ T7750] usb usb9: usbfs: process 7750 (syz.4.449) did not claim interface 0 before use [ 204.035265][ T5945] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 204.099544][ T30] audit: type=1400 audit(1776329661.700:375): avc: denied { append } for pid=7760 comm="syz.1.454" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 204.204072][ T5945] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 204.236630][ T5945] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 204.256614][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.288234][ T5945] usb 5-1: Product: syz [ 204.297707][ T5945] usb 5-1: Manufacturer: syz [ 204.305379][ T5945] usb 5-1: SerialNumber: syz [ 204.335379][ T5945] usb 5-1: config 0 descriptor?? [ 204.370912][ T5945] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 204.393310][ T5945] usb 5-1: setting power ON [ 204.413555][ T5945] dvb-usb: bulk message failed: -22 (2/0) [ 204.442224][ T5945] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 204.475340][ T5945] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 204.490455][ T5945] dvb_usb_cxusb 5-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 204.938966][ T10] usb 5-1: USB disconnect, device number 11 [ 205.578856][ T30] audit: type=1400 audit(1776329663.254:376): avc: denied { read } for pid=7767 comm="syz.3.455" path="socket:[16905]" dev="sockfs" ino=16905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 206.176529][ T7785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.227217][ T7785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.257725][ T7797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.283753][ T7797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.717808][ T5945] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 207.870545][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 207.877409][ T5945] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 207.888576][ T5945] usb 3-1: config 0 interface 0 has no altsetting 0 [ 207.949518][ T5945] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 207.963643][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.981351][ T5945] usb 3-1: config 0 descriptor?? [ 208.828428][ T7805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.466'. [ 209.433864][ T5945] corsair-cpro 0003:1B1C:0C10.0002: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 209.852681][ T5945] corsair-cpro 0003:1B1C:0C10.0002: probe with driver corsair-cpro failed with error -71 [ 209.923786][ T5945] usb 3-1: USB disconnect, device number 10 [ 210.441819][ T30] audit: type=1400 audit(1776329668.178:377): avc: denied { connect } for pid=7814 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 211.243052][ T5945] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 211.359067][ T30] audit: type=1400 audit(1776329669.322:378): avc: denied { connect } for pid=7832 comm="syz.3.471" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.414685][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 211.504278][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.514131][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 211.522827][ T5945] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 211.532445][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.559998][ T5945] usb 3-1: config 0 descriptor?? [ 211.575802][ T5945] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 211.630435][ T7837] FAULT_INJECTION: forcing a failure. [ 211.630435][ T7837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.644371][ T7837] CPU: 1 UID: 0 PID: 7837 Comm: syz.3.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.644396][ T7837] Tainted: [L]=SOFTLOCKUP [ 211.644400][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 211.644406][ T7837] Call Trace: [ 211.644410][ T7837] [ 211.644415][ T7837] dump_stack_lvl+0x100/0x190 [ 211.644431][ T7837] should_fail_ex.cold+0x5/0xa [ 211.644447][ T7837] _copy_from_user+0x2e/0xd0 [ 211.644459][ T7837] binder_ioctl+0x4cb/0x7550 [ 211.644481][ T7837] ? tomoyo_path_number_perm+0x188/0x580 [ 211.644500][ T7837] ? __pfx_binder_ioctl+0x10/0x10 [ 211.644518][ T7837] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 211.644538][ T7837] ? do_vfs_ioctl+0x226/0x13e0 [ 211.644553][ T7837] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 211.644567][ T7837] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 211.644588][ T7837] ? hook_file_ioctl_common+0x149/0x410 [ 211.644611][ T7837] ? selinux_file_ioctl+0x13b/0x290 [ 211.644627][ T7837] ? selinux_file_ioctl+0xb6/0x290 [ 211.644643][ T7837] ? __pfx_binder_ioctl+0x10/0x10 [ 211.644659][ T7837] __x64_sys_ioctl+0x18e/0x210 [ 211.644674][ T7837] do_syscall_64+0x10b/0xf80 [ 211.644687][ T7837] ? clear_bhb_loop+0x40/0x90 [ 211.644700][ T7837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.644712][ T7837] RIP: 0033:0x7f9a7b39c819 [ 211.644721][ T7837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.644732][ T7837] RSP: 002b:00007f9a7c2ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.644743][ T7837] RAX: ffffffffffffffda RBX: 00007f9a7b615fa0 RCX: 00007f9a7b39c819 [ 211.644750][ T7837] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 211.644756][ T7837] RBP: 00007f9a7c2ec090 R08: 0000000000000000 R09: 0000000000000000 [ 211.644766][ T7837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.644773][ T7837] R13: 00007f9a7b616038 R14: 00007f9a7b615fa0 R15: 00007fff7bd27168 [ 211.644786][ T7837] [ 211.644874][ T7837] binder: 7836:7837 ioctl c0306201 2000000001c0 returned -14 [ 211.813228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 211.867004][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.882098][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.923795][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 211.939682][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 211.948791][ T10] usb 5-1: SerialNumber: syz [ 211.955023][ T30] audit: type=1400 audit(1776329669.942:379): avc: denied { read } for pid=7838 comm="syz.0.475" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 212.025611][ T30] audit: type=1400 audit(1776329669.942:380): avc: denied { open } for pid=7838 comm="syz.0.475" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 212.139708][ T30] audit: type=1400 audit(1776329669.973:381): avc: denied { ioctl } for pid=7838 comm="syz.0.475" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 212.237292][ T10] usb 5-1: 0:2 : does not exist [ 212.254087][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.273259][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 212.360487][ T7851] blktrace: Concurrent blktraces are not allowed on loop0 [ 212.735069][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.777125][ T10] usb 5-1: USB disconnect, device number 12 [ 212.834173][ T30] audit: type=1400 audit(1776329670.865:382): avc: denied { connect } for pid=7852 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 212.891121][ T30] audit: type=1400 audit(1776329670.928:383): avc: denied { map } for pid=7852 comm="syz.1.478" path="socket:[17032]" dev="sockfs" ino=17032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 212.986548][ T30] audit: type=1400 audit(1776329670.928:384): avc: denied { accept } for pid=7852 comm="syz.1.478" path="socket:[17032]" dev="sockfs" ino=17032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 213.024625][ T30] audit: type=1400 audit(1776329671.075:385): avc: denied { ioctl } for pid=7852 comm="syz.1.478" path="socket:[17030]" dev="sockfs" ino=17030 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 213.783140][ T5931] usb 3-1: USB disconnect, device number 11 [ 213.834028][ T5890] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 214.010931][ T5890] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 214.032557][ T5890] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 214.046491][ T30] audit: type=1400 audit(1776329672.146:386): avc: denied { write } for pid=7874 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 214.051583][ T24] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 214.074675][ T7876] netlink: 40 bytes leftover after parsing attributes in process `syz.2.486'. [ 214.104258][ T5890] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 214.127536][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.146145][ T5890] usb 5-1: Product: syz [ 214.155207][ T5890] usb 5-1: Manufacturer: syz [ 214.166536][ T5890] usb 5-1: SerialNumber: syz [ 214.223024][ T24] usb 2-1: device descriptor read/64, error -71 [ 214.498942][ T5890] usb 5-1: USB disconnect, device number 13 [ 214.510758][ T24] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 214.652289][ T24] usb 2-1: device descriptor read/64, error -71 [ 214.759052][ T24] usb usb2-port1: attempt power cycle [ 215.005766][ T5890] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 215.847482][ T7888] input: syz0 as /devices/virtual/input/input11 [ 215.855416][ T30] audit: type=1400 audit(1776329674.036:387): avc: denied { ioctl } for pid=5160 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3045 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 215.864212][ T24] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 215.995501][ T24] usb 2-1: device descriptor read/8, error -71 [ 216.223201][ T24] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 216.261706][ T24] usb 2-1: device descriptor read/8, error -71 [ 216.361909][ T7897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.491'. [ 216.389312][ T24] usb usb2-port1: unable to enumerate USB device [ 216.620381][ T30] audit: type=1400 audit(1776329674.845:388): avc: denied { append } for pid=7901 comm="syz.1.492" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 216.647845][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 216.692303][ T30] audit: type=1400 audit(1776329674.876:389): avc: denied { write } for pid=7894 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 217.398372][ T7904] syz.1.493 (7904): drop_caches: 2 [ 217.461648][ T5890] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 218.108049][ T7909] input: syz0 as /devices/virtual/input/input12 [ 218.293489][ T30] audit: type=1400 audit(1776329676.598:390): avc: denied { mount } for pid=7913 comm="syz.4.496" name="/" dev="ramfs" ino=17795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 218.437351][ T7916] usb usb9: usbfs: process 7916 (syz.4.498) did not claim interface 0 before use [ 218.549949][ T30] audit: type=1400 audit(1776329676.860:391): avc: denied { create } for pid=7918 comm="syz.0.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 218.592822][ T7920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.602447][ T7920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.899866][ T5945] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 219.059355][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.070549][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.081120][ T5890] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 219.089032][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.102940][ T5945] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.112578][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.127970][ T5945] usb 3-1: config 0 descriptor?? [ 219.246508][ T5890] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 219.256149][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.264748][ T5890] usb 2-1: Product: syz [ 219.269119][ T5890] usb 2-1: Manufacturer: syz [ 219.273882][ T5890] usb 2-1: SerialNumber: syz [ 219.521475][ T7940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.537595][ T5945] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 219.539470][ T7940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.545488][ T5945] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 219.560622][ T5945] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 219.568383][ T5945] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 219.596209][ T5945] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 219.623844][ T5945] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 219.674548][ T5890] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 219.702757][ T5890] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 219.800414][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.811433][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.836482][ T5945] usb 3-1: USB disconnect, device number 13 [ 219.941624][ T7930] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.029156][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 220.242044][ T7949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.253826][ T7949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.720850][ T7956] usb usb9: usbfs: process 7956 (syz.2.512) did not claim interface 0 before use [ 220.904770][ T7963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.916049][ T7963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.166911][ T7966] xt_hashlimit: size too large, truncated to 1048576 [ 221.277378][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 221.346322][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 221.893993][ T5890] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -EPROTO [ 221.918392][ T5890] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 221.934824][ T5890] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 221.947429][ T5890] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 221.958463][ T5890] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 221.976940][ T5890] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 222.005394][ T5890] usb 2-1: USB disconnect, device number 24 [ 222.103497][ T7979] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) ! [ 223.140792][ T5931] IPVS: starting estimator thread 0... [ 223.192205][ T7998] SELinux: Context 줨 is not valid (left unmapped). [ 223.200601][ T30] audit: type=1400 audit(1776329681.753:392): avc: denied { create } for pid=7994 comm="syz.4.522" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 223.223522][ T7998] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 223.239528][ T8001] IPVS: using max 71 ests per chain, 170400 per kthread [ 223.248212][ T7998] overlayfs: missing 'lowerdir' [ 223.255540][ T30] audit: type=1400 audit(1776329681.753:393): avc: denied { associate } for pid=7994 comm="syz.4.522" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=CFA7AE [ 223.278642][ T30] audit: type=1400 audit(1776329681.774:394): avc: denied { mounton } for pid=7994 comm="syz.4.522" path="/104/file0" dev="tmpfs" ino=574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 223.303416][ T30] audit: type=1400 audit(1776329681.816:395): avc: denied { add_name } for pid=7994 comm="syz.4.522" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 223.327674][ T30] audit: type=1400 audit(1776329681.816:396): avc: denied { create } for pid=7994 comm="syz.4.522" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=CFA7AE [ 223.350725][ T30] audit: type=1400 audit(1776329681.816:397): avc: denied { read open } for pid=7994 comm="syz.4.522" path="/104/file0/file1" dev="tmpfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=CFA7AE [ 223.776514][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 223.900799][ T30] audit: type=1400 audit(1776329682.478:398): avc: denied { remove_name } for pid=5803 comm="syz-executor" name="file1" dev="tmpfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 223.910955][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.948727][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 223.958184][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 223.969536][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.982937][ T30] audit: type=1400 audit(1776329682.520:399): avc: denied { unlink } for pid=5803 comm="syz-executor" name="file1" dev="tmpfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=CFA7AE [ 223.992819][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.009670][ T30] audit: type=1400 audit(1776329682.520:400): avc: denied { rmdir } for pid=5803 comm="syz-executor" name="file0" dev="tmpfs" ino=574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 224.028882][ T8012] batman_adv: batadv0: Adding interface: gretap1 [ 224.046513][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.067725][ T8010] binder: 8009:8010 ioctl c0189377 200000000140 returned -22 [ 224.068469][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.076697][ T8012] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.085349][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.118754][ T10] usb 2-1: Product: syz [ 224.123453][ T8012] batman_adv: batadv0: Interface activated: gretap1 [ 224.130798][ T10] usb 2-1: Manufacturer: syz [ 224.135415][ T10] usb 2-1: SerialNumber: syz [ 224.189355][ T10] usb 2-1: 0:2 : does not exist [ 224.264753][ T30] audit: type=1400 audit(1776329938.875:401): avc: denied { ioctl } for pid=8016 comm="syz.2.529" path="socket:[18113]" dev="sockfs" ino=18113 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 224.460412][ T8022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=8022 comm=syz.2.531 [ 224.640724][ T8028] netlink: 76 bytes leftover after parsing attributes in process `syz.0.533'. [ 224.667688][ T8028] netlink: 72 bytes leftover after parsing attributes in process `syz.0.533'. [ 224.714009][ T8031] usb usb9: usbfs: process 8031 (syz.2.534) did not claim interface 0 before use [ 224.909281][ T10] usb 2-1: USB disconnect, device number 25 [ 225.281675][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.701866][ T8041] FAULT_INJECTION: forcing a failure. [ 225.701866][ T8041] name failslab, interval 1, probability 0, space 0, times 0 [ 225.719322][ T8041] CPU: 0 UID: 0 PID: 8041 Comm: syz.2.538 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.719350][ T8041] Tainted: [L]=SOFTLOCKUP [ 225.719355][ T8041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 225.719365][ T8041] Call Trace: [ 225.719370][ T8041] [ 225.719375][ T8041] dump_stack_lvl+0x100/0x190 [ 225.719404][ T8041] should_fail_ex.cold+0x5/0xa [ 225.719427][ T8041] should_failslab+0xc2/0x120 [ 225.719452][ T8041] __kmalloc_cache_noprof+0x7a/0x6f0 [ 225.719470][ T8041] ? pagemap_read+0x225/0x830 [ 225.719492][ T8041] ? security_capable+0xbd/0x260 [ 225.719516][ T8041] pagemap_read+0x225/0x830 [ 225.719541][ T8041] ? avc_policy_seqno+0x9/0x20 [ 225.719559][ T8041] ? __pfx_pagemap_read+0x10/0x10 [ 225.719585][ T8041] ? rw_verify_area+0xce/0x6d0 [ 225.719604][ T8041] ? __pfx_pagemap_read+0x10/0x10 [ 225.719625][ T8041] vfs_read+0x1e4/0xb30 [ 225.719653][ T8041] ? __pfx_vfs_read+0x10/0x10 [ 225.719672][ T8041] ? find_held_lock+0x2b/0x80 [ 225.719695][ T8041] ? __fget_files+0x215/0x3d0 [ 225.719719][ T8041] ? __fget_files+0x215/0x3d0 [ 225.719746][ T8041] ? __fget_files+0x21f/0x3d0 [ 225.719776][ T8041] __x64_sys_pread64+0x1eb/0x250 [ 225.719799][ T8041] ? __pfx___x64_sys_pread64+0x10/0x10 [ 225.719823][ T8041] ? rcu_is_watching+0x12/0xc0 [ 225.719847][ T8041] do_syscall_64+0x10b/0xf80 [ 225.719865][ T8041] ? clear_bhb_loop+0x40/0x90 [ 225.719884][ T8041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.719900][ T8041] RIP: 0033:0x7efd9299c819 [ 225.719914][ T8041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.719929][ T8041] RSP: 002b:00007efd90bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 225.719945][ T8041] RAX: ffffffffffffffda RBX: 00007efd92c15fa0 RCX: 00007efd9299c819 [ 225.719955][ T8041] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000007 [ 225.719965][ T8041] RBP: 00007efd90bee090 R08: 0000000000000000 R09: 0000000000000000 [ 225.719974][ T8041] R10: 0000001000000300 R11: 0000000000000246 R12: 0000000000000001 [ 225.719984][ T8041] R13: 00007efd92c16038 R14: 00007efd92c15fa0 R15: 00007ffc207569a8 [ 225.720006][ T8041] [ 226.106563][ T8043] fuse: Bad value for 'fd' [ 227.491105][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 227.645587][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 227.668779][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.690175][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 227.717539][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 227.739178][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.762014][ T10] usb 3-1: config 0 descriptor?? [ 227.782122][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 228.188247][ T10] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 228.372314][ T8076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.388413][ T8076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.491307][ T10] usb 5-1: device descriptor read/64, error -71 [ 228.729636][ T10] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 228.858018][ T8083] ubi: mtd0 is already attached to ubi31 [ 228.865455][ T10] usb 5-1: device descriptor read/64, error -71 [ 228.978886][ T10] usb usb5-port1: attempt power cycle [ 229.047556][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.059543][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.069882][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.078021][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.088318][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.123770][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.132369][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.141262][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.152255][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.160128][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.339045][ T10] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 229.368064][ T10] usb 5-1: device descriptor read/8, error -71 [ 229.605827][ T10] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 229.635489][ T10] usb 5-1: device descriptor read/8, error -71 [ 229.656152][ T8087] chnl_net:caif_netlink_parms(): no params data found [ 229.748844][ T10] usb usb5-port1: unable to enumerate USB device [ 229.847161][ T8087] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.855800][ T8087] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.865162][ T8087] bridge_slave_0: entered allmulticast mode [ 229.873695][ T8087] bridge_slave_0: entered promiscuous mode [ 229.883218][ T8087] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.890608][ T8087] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.899117][ T8087] bridge_slave_1: entered allmulticast mode [ 229.907682][ T8087] bridge_slave_1: entered promiscuous mode [ 229.970986][ T8087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.989070][ T8087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.049258][ T8087] team0: Port device team_slave_0 added [ 230.061452][ T8087] team0: Port device team_slave_1 added [ 230.118994][ T8087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.126211][ T8087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.152755][ T8087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.167162][ T8087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.174876][ T8087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.205892][ T8087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.206935][ T5815] usb 3-1: USB disconnect, device number 14 [ 230.362294][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 230.362308][ T30] audit: type=1400 audit(1776329945.269:406): avc: denied { watch } for pid=8102 comm="syz.0.556" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 230.398175][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 230.416006][ T8087] hsr_slave_0: entered promiscuous mode [ 230.422334][ T8087] hsr_slave_1: entered promiscuous mode [ 230.428983][ T8087] debugfs: 'hsr0' already exists in 'hsr' [ 230.434925][ T8087] Cannot create hsr debugfs directory [ 230.521061][ T8106] x_tables: duplicate underflow at hook 2 [ 231.189174][ T8120] blktrace: Concurrent blktraces are not allowed on loop0 [ 231.468444][ T5823] Bluetooth: hci5: command tx timeout [ 232.018856][ T8087] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.041466][ T30] audit: type=1400 audit(1776329947.032:407): avc: denied { mount } for pid=8125 comm="syz.4.565" name="/" dev="pstore" ino=474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 232.072134][ T8087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 232.097642][ T8087] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.180260][ T8087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.205786][ T8087] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.702630][ T8087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.718413][ T8087] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.741320][ T8087] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.942043][ T8137] input: syz0 as /devices/virtual/input/input13 [ 232.990954][ T8135] netlink: 56 bytes leftover after parsing attributes in process `syz.0.564'. [ 233.086413][ T8087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.109106][ T8135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.196385][ T8135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.262518][ T8087] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.278936][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.286082][ T6303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.464019][ T5823] Bluetooth: hci5: command tx timeout [ 233.758939][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.766090][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.891882][ T8156] process 'syz.1.567' launched './file1' with NULL argv: empty string added [ 233.919191][ T30] audit: type=1400 audit(1776329948.995:408): avc: denied { execute_no_trans } for pid=8154 comm="syz.1.567" path="/105/file1" dev="tmpfs" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 233.933536][ T8156] FAULT_INJECTION: forcing a failure. [ 233.933536][ T8156] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 233.957890][ T8156] CPU: 0 UID: 0 PID: 8156 Comm: syz.1.567 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.957918][ T8156] Tainted: [L]=SOFTLOCKUP [ 233.957924][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 233.957934][ T8156] Call Trace: [ 233.957939][ T8156] [ 233.957946][ T8156] dump_stack_lvl+0x100/0x190 [ 233.957971][ T8156] should_fail_ex.cold+0x5/0xa [ 233.957991][ T8156] ? prepare_alloc_pages+0x16d/0x5f0 [ 233.958020][ T8156] should_fail_alloc_page+0xeb/0x140 [ 233.958045][ T8156] prepare_alloc_pages+0x1f0/0x5f0 [ 233.958073][ T8156] ? __kernel_text_address+0xd/0x30 [ 233.958098][ T8156] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 233.958125][ T8156] ? stack_trace_save+0x8e/0xc0 [ 233.958149][ T8156] ? __pfx_stack_trace_save+0x10/0x10 [ 233.958173][ T8156] ? stack_depot_save_flags+0x27/0x9d0 [ 233.958195][ T8156] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 233.958217][ T8156] ? kasan_save_stack+0x30/0x50 [ 233.958237][ T8156] ? __kasan_slab_alloc+0x89/0x90 [ 233.958270][ T8156] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.958298][ T8156] ? policy_nodemask+0xed/0x4f0 [ 233.958323][ T8156] alloc_pages_mpol+0x1fb/0x540 [ 233.958346][ T8156] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 233.958371][ T8156] ? __memcg_slab_post_alloc_hook+0x62b/0xdf0 [ 233.958400][ T8156] alloc_pages_noprof+0x1a/0x160 [ 233.958426][ T8156] pgd_alloc+0x4d/0x630 [ 233.958450][ T8156] ? mutex_init_lockdep+0xf1/0x120 [ 233.958472][ T8156] mm_init+0x6da/0x10d0 [ 233.958495][ T8156] mm_alloc+0x97/0xd0 [ 233.958517][ T8156] alloc_bprm+0x2af/0x710 [ 233.958540][ T8156] do_execveat_common.isra.0+0x19c/0x580 [ 233.958570][ T8156] ? do_getname+0x191/0x390 [ 233.958589][ T8156] __x64_sys_execveat+0xdf/0x130 [ 233.958612][ T8156] do_syscall_64+0x10b/0xf80 [ 233.958630][ T8156] ? clear_bhb_loop+0x40/0x90 [ 233.958651][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.958668][ T8156] RIP: 0033:0x7fad4919c819 [ 233.958682][ T8156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.958698][ T8156] RSP: 002b:00007fad49f86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 233.958715][ T8156] RAX: ffffffffffffffda RBX: 00007fad49415fa0 RCX: 00007fad4919c819 [ 233.958726][ T8156] RDX: 0000200000000280 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 233.958737][ T8156] RBP: 00007fad49f86090 R08: 0000000000000000 R09: 0000000000000000 [ 233.958747][ T8156] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 233.958756][ T8156] R13: 00007fad49416038 R14: 00007fad49415fa0 R15: 00007ffd2c364528 [ 233.958779][ T8156] [ 234.391736][ T8087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.674618][ T30] audit: type=1400 audit(1776329949.793:409): avc: denied { accept } for pid=8167 comm="syz.4.573" lport=56463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 234.966291][ T8173] random: crng reseeded on system resumption [ 235.015755][ T30] audit: type=1400 audit(1776329950.150:410): avc: denied { connect } for pid=8175 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 235.328705][ T8182] binder: 8181:8182 ioctl 4018620d 0 returned -22 [ 235.361267][ T8182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.398728][ T8182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.416585][ T5823] Bluetooth: hci5: command tx timeout [ 235.430752][ T8087] veth0_vlan: entered promiscuous mode [ 235.456696][ T8188] usb usb9: usbfs: process 8188 (syz.2.578) did not claim interface 0 before use [ 235.491586][ T8087] veth1_vlan: entered promiscuous mode [ 235.579422][ T8087] veth0_macvtap: entered promiscuous mode [ 235.611887][ T8087] veth1_macvtap: entered promiscuous mode [ 235.672756][ T8087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.724202][ T8087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.771490][ T1099] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.810817][ T1099] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.836189][ T1099] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.878476][ T1099] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.071071][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.093677][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.184164][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.199845][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.232094][ T30] audit: type=1400 audit(1776329951.431:411): avc: denied { mounton } for pid=8087 comm="syz-executor" path="/root/syzkaller.uE6vAj/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 236.265945][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 236.301075][ T30] audit: type=1400 audit(1776329951.504:412): avc: denied { mounton } for pid=8087 comm="syz-executor" path="/root/syzkaller.uE6vAj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 236.337200][ T30] audit: type=1400 audit(1776329951.504:413): avc: denied { mounton } for pid=8087 comm="syz-executor" path="/root/syzkaller.uE6vAj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 236.470296][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 236.493574][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.504094][ T30] audit: type=1400 audit(1776329951.536:414): avc: denied { mounton } for pid=8087 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 236.530435][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 236.544465][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 236.555855][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 236.568417][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.625310][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 236.634630][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 236.643234][ T10] usb 3-1: Manufacturer: syz [ 236.650718][ T10] usb 3-1: config 0 descriptor?? [ 236.674038][ T8207] FAULT_INJECTION: forcing a failure. [ 236.674038][ T8207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.687279][ T8207] CPU: 0 UID: 0 PID: 8207 Comm: syz.5.585 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.687308][ T8207] Tainted: [L]=SOFTLOCKUP [ 236.687314][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 236.687324][ T8207] Call Trace: [ 236.687329][ T8207] [ 236.687335][ T8207] dump_stack_lvl+0x100/0x190 [ 236.687359][ T8207] should_fail_ex.cold+0x5/0xa [ 236.687383][ T8207] _copy_from_user+0x2e/0xd0 [ 236.687400][ T8207] copy_msghdr_from_user+0x9f/0x4f0 [ 236.687429][ T8207] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 236.687460][ T8207] ? rcu_is_watching+0x12/0xc0 [ 236.687482][ T8207] ? ___sys_recvmsg+0x177/0x1a0 [ 236.687507][ T8207] ? kfree+0x1dd/0x6c0 [ 236.687528][ T8207] ___sys_recvmsg+0xdd/0x1a0 [ 236.687561][ T8207] ? __pfx____sys_recvmsg+0x10/0x10 [ 236.687599][ T8207] ? __pfx___might_resched+0x10/0x10 [ 236.687627][ T8207] do_recvmmsg+0x301/0x760 [ 236.687657][ T8207] ? __pfx_do_recvmmsg+0x10/0x10 [ 236.687683][ T8207] ? ksys_write+0x190/0x250 [ 236.687710][ T8207] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 236.687730][ T8207] ? __pfx_vfs_write+0x3/0x10 [ 236.687758][ T8207] ? __fget_files+0x21f/0x3d0 [ 236.687789][ T8207] __x64_sys_recvmmsg+0x22a/0x280 [ 236.687811][ T8207] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 236.687831][ T8207] ? rcu_is_watching+0x12/0xc0 [ 236.687854][ T8207] ? rcu_is_watching+0x12/0xc0 [ 236.687879][ T8207] do_syscall_64+0x10b/0xf80 [ 236.687894][ T8207] ? clear_bhb_loop+0x40/0x90 [ 236.687911][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.687925][ T8207] RIP: 0033:0x7fd8cd19c819 [ 236.687937][ T8207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.687950][ T8207] RSP: 002b:00007fd8ce0c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 236.687964][ T8207] RAX: ffffffffffffffda RBX: 00007fd8cd416090 RCX: 00007fd8cd19c819 [ 236.687973][ T8207] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 236.687982][ T8207] RBP: 00007fd8ce0c8090 R08: 0000000000000000 R09: 0000000000000000 [ 236.687989][ T8207] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 236.687997][ T8207] R13: 00007fd8cd416128 R14: 00007fd8cd416090 R15: 00007ffc3d6910b8 [ 236.688016][ T8207] [ 236.998004][ T10] rc_core: IR keymap rc-hauppauge not found [ 237.004044][ T10] Registered IR keymap rc-empty [ 237.009739][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.036232][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.055035][ T5815] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 237.063175][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 237.076556][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 237.091412][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.112217][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.135523][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.160631][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.178717][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.197887][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.217199][ T5815] usb 5-1: Using ep0 maxpacket: 16 [ 237.217428][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.247244][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.255057][ T5815] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 237.280760][ T5815] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 237.293057][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.323618][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.338296][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.352418][ T10] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 237.371138][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 237.382968][ T5815] usb 5-1: config 0 descriptor?? [ 237.398466][ T5823] Bluetooth: hci5: command tx timeout [ 237.410244][ T10] usb 3-1: USB disconnect, device number 15 [ 237.530390][ T8214] FAULT_INJECTION: forcing a failure. [ 237.530390][ T8214] name failslab, interval 1, probability 0, space 0, times 0 [ 237.544456][ T8214] CPU: 0 UID: 0 PID: 8214 Comm: syz.1.588 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.544483][ T8214] Tainted: [L]=SOFTLOCKUP [ 237.544489][ T8214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 237.544506][ T8214] Call Trace: [ 237.544512][ T8214] [ 237.544518][ T8214] dump_stack_lvl+0x100/0x190 [ 237.544542][ T8214] should_fail_ex.cold+0x5/0xa [ 237.544567][ T8214] should_failslab+0xc2/0x120 [ 237.544591][ T8214] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 237.544612][ T8214] ? sidtab_sid2str_get+0x17a/0x670 [ 237.544639][ T8214] kmemdup_noprof+0x29/0x60 [ 237.544658][ T8214] sidtab_sid2str_get+0x17a/0x670 [ 237.544682][ T8214] security_sid_to_context_core+0x35a/0x6d0 [ 237.544704][ T8214] avc_audit_post_callback+0x109/0x900 [ 237.544728][ T8214] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 237.544751][ T8214] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 237.544772][ T8214] ? skb_put+0x138/0x180 [ 237.544793][ T8214] ? audit_log_n_string+0x256/0x550 [ 237.544821][ T8214] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 237.544843][ T8214] common_lsm_audit+0x23f/0x2b0 [ 237.544863][ T8214] ? __pfx_common_lsm_audit+0x10/0x10 [ 237.544886][ T8214] ? lockdep_hardirqs_on+0x78/0x100 [ 237.544902][ T8214] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 237.544919][ T8214] slow_avc_audit+0x186/0x210 [ 237.544933][ T8214] ? __pfx_slow_avc_audit+0x10/0x10 [ 237.544949][ T8214] ? avc_denied+0x14a/0x190 [ 237.544964][ T8214] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 237.544981][ T8214] avc_has_perm+0x1a6/0x1e0 [ 237.544996][ T8214] ? __pfx_avc_has_perm+0x10/0x10 [ 237.545020][ T8214] sock_has_perm+0x251/0x2f0 [ 237.545038][ T8214] ? __pfx_sock_has_perm+0x10/0x10 [ 237.545061][ T8214] ? get_pid_task+0xfc/0x250 [ 237.545075][ T8214] ? get_pid_task+0xfc/0x250 [ 237.545093][ T8214] security_socket_getsockopt+0x9b/0x230 [ 237.545111][ T8214] do_sock_getsockopt+0x1e3/0x6e0 [ 237.545131][ T8214] ? __lock_acquire+0x4a5/0x2630 [ 237.545150][ T8214] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 237.545171][ T8214] ? find_held_lock+0x2b/0x80 [ 237.545190][ T8214] ? ksys_write+0x190/0x250 [ 237.545212][ T8214] ? find_held_lock+0x2b/0x80 [ 237.545237][ T8214] ? __fget_files+0x21f/0x3d0 [ 237.545262][ T8214] __sys_getsockopt+0x148/0x260 [ 237.545285][ T8214] ? __x64_sys_getsockopt+0xbd/0x160 [ 237.545309][ T8214] __x64_sys_getsockopt+0xbd/0x160 [ 237.545325][ T8214] ? do_syscall_64+0x90/0xf80 [ 237.545340][ T8214] ? lockdep_hardirqs_on+0x78/0x100 [ 237.545355][ T8214] do_syscall_64+0x10b/0xf80 [ 237.545369][ T8214] ? clear_bhb_loop+0x40/0x90 [ 237.545386][ T8214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.545401][ T8214] RIP: 0033:0x7fad4919c819 [ 237.545413][ T8214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.545428][ T8214] RSP: 002b:00007fad49f86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 237.545442][ T8214] RAX: ffffffffffffffda RBX: 00007fad49415fa0 RCX: 00007fad4919c819 [ 237.545451][ T8214] RDX: 0000000000000043 RSI: 0000000000000000 RDI: 0000000000000003 [ 237.545459][ T8214] RBP: 00007fad49f86090 R08: 0000200000000300 R09: 0000000000000000 [ 237.545467][ T8214] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 237.545475][ T8214] R13: 00007fad49416038 R14: 00007fad49415fa0 R15: 00007ffd2c364528 [ 237.545499][ T8214] [ 237.545619][ T30] audit: type=1400 audit(1776329952.796:415): avc: denied { getopt } for pid=8213 comm="syz.1.588" ssid=148 tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.791198][ T5815] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 237.829392][ T8218] usb usb9: usbfs: process 8218 (syz.5.587) did not claim interface 0 before use [ 237.992446][ T8221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.080087][ T5815] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 238.096200][ T5815] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 238.138321][ T5815] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 238.182389][ T5815] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 238.199593][ T5815] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 238.216127][ T5815] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 238.223875][ T5815] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 238.301692][ T5815] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 238.329263][ T5815] zeroplus 0003:0C12:0030.0004: unknown main item tag 0x0 [ 238.338463][ T8230] fuse: Unknown parameter 'grou00000000000000000000' [ 238.417003][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 238.443595][ T5815] zeroplus 0003:0C12:0030.0004: hidraw0: USB HID v0.0a Device [HID 0c12:0030] on usb-dummy_hcd.4-1/input0 [ 238.443617][ T5815] zeroplus 0003:0C12:0030.0004: no inputs found [ 238.447996][ T5815] usb 5-1: USB disconnect, device number 18 [ 238.511961][ T30] audit: type=1400 audit(1776329953.824:416): avc: denied { watch } for pid=8231 comm="syz.0.594" path="/119/file1" dev="tmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 238.540146][ T30] audit: type=1400 audit(1776329953.845:417): avc: denied { watch_sb watch_reads } for pid=8231 comm="syz.0.594" path="/119/file1" dev="tmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 238.597931][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 238.599403][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.599442][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 238.599479][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 238.599506][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.601697][ T24] usb 3-1: config 0 descriptor?? [ 238.603397][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 238.639169][ T8236] fido_id[8236]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 238.704783][ T30] audit: type=1400 audit(1776329954.024:418): avc: denied { mount } for pid=8233 comm="syz.5.595" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 238.844663][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.595'. [ 239.368907][ T8246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.369105][ T8246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.765421][ T8254] Cannot find add_set index 0 as target [ 239.823151][ T30] audit: type=1400 audit(1776329955.200:419): avc: denied { write } for pid=8252 comm="syz.1.598" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 240.673157][ T8260] overlay: ./file0 is not a directory [ 240.798202][ T8268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.602'. [ 241.199982][ T1212] usb 3-1: USB disconnect, device number 16 [ 241.423849][ T30] audit: type=1400 audit(1776329956.879:420): avc: denied { write } for pid=8277 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 241.503332][ T8280] netlink: 'syz.0.606': attribute type 1 has an invalid length. [ 241.559483][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 242.291971][ T8280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.401871][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 242.449826][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.501139][ T24] usb 5-1: Product: syz [ 242.540768][ T24] usb 5-1: Manufacturer: syz [ 242.571539][ T24] usb 5-1: SerialNumber: syz [ 242.805810][ T8283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.815472][ T8283] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 242.846446][ T8283] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 243.400435][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 243.442859][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 244.459460][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'. [ 244.646753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 244.677722][ T8289] tipc: Resetting bearer [ 245.118196][ T8296] random: crng reseeded on system resumption [ 245.131398][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 245.145134][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 245.197267][ T8296] FAT-fs (nbd1): unable to read boot sector [ 245.231941][ T8289] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 245.523135][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 245.549821][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 245.562097][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 245.630259][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 245.658566][ T10] usb 3-1: device descriptor read/64, error -71 [ 245.690656][ T24] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 245.748952][ T24] usb 5-1: USB disconnect, device number 19 [ 245.909226][ T8333] netlink: 48 bytes leftover after parsing attributes in process `syz.1.617'. [ 245.925009][ T30] audit: type=1400 audit(1776329961.603:421): avc: denied { read } for pid=8330 comm="syz.1.617" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 246.047141][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 246.183830][ T30] audit: type=1400 audit(1776329961.698:422): avc: denied { prog_load } for pid=8326 comm="syz.4.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 246.190127][ T10] usb 3-1: device descriptor read/64, error -71 [ 246.242708][ T30] audit: type=1400 audit(1776329961.698:423): avc: denied { bpf } for pid=8326 comm="syz.4.614" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 246.742885][ T10] usb usb3-port1: attempt power cycle [ 247.218333][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 247.259176][ T10] usb 3-1: device descriptor read/8, error -71 [ 247.282064][ T30] audit: type=1400 audit(1776329961.761:424): avc: denied { ioctl } for pid=8300 comm="syz.2.610" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.344792][ T30] audit: type=1400 audit(1776329961.761:425): avc: denied { create } for pid=8334 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 247.399281][ T30] audit: type=1400 audit(1776329961.761:426): avc: denied { setopt } for pid=8326 comm="syz.4.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 247.436416][ T30] audit: type=1400 audit(1776329961.771:427): avc: denied { perfmon } for pid=8326 comm="syz.4.614" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 247.472845][ T30] audit: type=1400 audit(1776329961.771:428): avc: denied { prog_run } for pid=8326 comm="syz.4.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 247.513990][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 247.543604][ T10] usb 3-1: device descriptor read/8, error -71 [ 247.599684][ T1212] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 247.649847][ T10] usb usb3-port1: unable to enumerate USB device [ 247.677106][ T8357] netlink: 96 bytes leftover after parsing attributes in process `syz.4.623'. [ 247.736000][ T1212] usb 2-1: device descriptor read/64, error -71 [ 247.949615][ T30] audit: type=1400 audit(1776329961.771:429): avc: denied { execmem } for pid=8334 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 247.985649][ T30] audit: type=1400 audit(1776329962.023:430): avc: denied { create } for pid=8334 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 247.985676][ T1212] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 248.085565][ T30] audit: type=1400 audit(1776329962.055:431): avc: denied { write } for pid=8334 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 248.105421][ T8367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.138030][ T30] audit: type=1400 audit(1776329962.055:432): avc: denied { create } for pid=8334 comm="syz.0.618" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 248.140719][ T8367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.200501][ T8368] fuse: Unknown parameter 'group_i00000000000000000000' [ 248.238806][ T1212] usb 2-1: device descriptor read/64, error -71 [ 248.271235][ T8370] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 248.286074][ T8370] FAULT_INJECTION: forcing a failure. [ 248.286074][ T8370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.307127][ T8367] tipc: Resetting bearer [ 248.318669][ T8370] CPU: 1 UID: 0 PID: 8370 Comm: syz.5.627 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.318695][ T8370] Tainted: [L]=SOFTLOCKUP [ 248.318701][ T8370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 248.318711][ T8370] Call Trace: [ 248.318716][ T8370] [ 248.318722][ T8370] dump_stack_lvl+0x100/0x190 [ 248.318748][ T8370] should_fail_ex.cold+0x5/0xa [ 248.318773][ T8370] _copy_to_user+0x32/0xd0 [ 248.318792][ T8370] simple_read_from_buffer+0xcb/0x170 [ 248.318819][ T8370] proc_fail_nth_read+0x1af/0x230 [ 248.318843][ T8370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.318867][ T8370] ? rw_verify_area+0xce/0x6d0 [ 248.318887][ T8370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.318909][ T8370] vfs_read+0x1e4/0xb30 [ 248.318934][ T8370] ? __pfx_vfs_read+0x10/0x10 [ 248.318956][ T8370] ? __fget_files+0x215/0x3d0 [ 248.318986][ T8370] ? __fget_files+0x21f/0x3d0 [ 248.319018][ T8370] ksys_read+0x12a/0x250 [ 248.319040][ T8370] ? __pfx_ksys_read+0x10/0x10 [ 248.319064][ T8370] ? rcu_is_watching+0x12/0xc0 [ 248.319090][ T8370] do_syscall_64+0x10b/0xf80 [ 248.319110][ T8370] ? clear_bhb_loop+0x40/0x90 [ 248.319132][ T8370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.319150][ T8370] RIP: 0033:0x7fd8cd15d04e [ 248.319164][ T8370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 248.319182][ T8370] RSP: 002b:00007fd8ce0e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.319199][ T8370] RAX: ffffffffffffffda RBX: 00007fd8ce0e96c0 RCX: 00007fd8cd15d04e [ 248.319210][ T8370] RDX: 000000000000000f RSI: 00007fd8ce0e90a0 RDI: 0000000000000004 [ 248.319220][ T8370] RBP: 00007fd8ce0e9090 R08: 0000000000000000 R09: 0000000000000000 [ 248.319230][ T8370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.319239][ T8370] R13: 00007fd8cd416038 R14: 00007fd8cd415fa0 R15: 00007ffc3d6910b8 [ 248.319264][ T8370] [ 248.343692][ T1212] usb usb2-port1: attempt power cycle [ 248.353563][ T8367] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 248.361123][ T8374] FAULT_INJECTION: forcing a failure. [ 248.361123][ T8374] name failslab, interval 1, probability 0, space 0, times 0 [ 248.558606][ T8374] CPU: 0 UID: 0 PID: 8374 Comm: syz.4.628 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.558633][ T8374] Tainted: [L]=SOFTLOCKUP [ 248.558639][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 248.558648][ T8374] Call Trace: [ 248.558654][ T8374] [ 248.558660][ T8374] dump_stack_lvl+0x100/0x190 [ 248.558685][ T8374] should_fail_ex.cold+0x5/0xa [ 248.558708][ T8374] ? tomoyo_encode2+0xfb/0x3c0 [ 248.558732][ T8374] should_failslab+0xc2/0x120 [ 248.558757][ T8374] __kmalloc_noprof+0xe0/0x850 [ 248.558776][ T8374] ? d_absolute_path+0x136/0x1b0 [ 248.558802][ T8374] tomoyo_encode2+0xfb/0x3c0 [ 248.558830][ T8374] tomoyo_encode+0x29/0x50 [ 248.558852][ T8374] tomoyo_realpath_from_path+0x18c/0x690 [ 248.558881][ T8374] tomoyo_path_number_perm+0x23c/0x580 [ 248.558901][ T8374] ? tomoyo_path_number_perm+0x22e/0x580 [ 248.558924][ T8374] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 248.558971][ T8374] ? find_held_lock+0x2b/0x80 [ 248.558995][ T8374] ? __fget_files+0x215/0x3d0 [ 248.559017][ T8374] ? hook_file_ioctl_common+0x149/0x410 [ 248.559033][ T8374] ? __fget_files+0x215/0x3d0 [ 248.559061][ T8374] ? __fget_files+0x21f/0x3d0 [ 248.559090][ T8374] security_file_ioctl+0xd3/0x230 [ 248.559113][ T8374] __x64_sys_ioctl+0xb7/0x210 [ 248.559136][ T8374] do_syscall_64+0x10b/0xf80 [ 248.559154][ T8374] ? clear_bhb_loop+0x40/0x90 [ 248.559174][ T8374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.559191][ T8374] RIP: 0033:0x7f3eeb39c819 [ 248.559206][ T8374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.559224][ T8374] RSP: 002b:00007f3eec30a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.559240][ T8374] RAX: ffffffffffffffda RBX: 00007f3eeb615fa0 RCX: 00007f3eeb39c819 [ 248.559251][ T8374] RDX: 0000200000000080 RSI: 00000000c0285628 RDI: 0000000000000003 [ 248.559261][ T8374] RBP: 00007f3eec30a090 R08: 0000000000000000 R09: 0000000000000000 [ 248.559271][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.559281][ T8374] R13: 00007f3eeb616038 R14: 00007f3eeb615fa0 R15: 00007fff382bd678 [ 248.559305][ T8374] [ 248.559665][ T8374] ERROR: Out of memory at tomoyo_realpath_from_path. [ 248.801600][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'. [ 249.044659][ T8388] usb usb9: usbfs: process 8388 (syz.2.633) did not claim interface 0 before use [ 249.048223][ T1212] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 249.076954][ T1212] usb 2-1: device descriptor read/8, error -71 [ 249.114862][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 249.268478][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.278862][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.288789][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 249.298218][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.306675][ T1212] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 249.314298][ T10] usb 6-1: SerialNumber: syz [ 249.333963][ T1212] usb 2-1: device descriptor read/8, error -71 [ 249.419820][ T791] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 249.440215][ T1212] usb usb2-port1: unable to enumerate USB device [ 249.449766][ T8383] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.535183][ T10] usb 6-1: 0:2 : does not exist [ 249.545631][ T10] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 249.573954][ T8405] FAULT_INJECTION: forcing a failure. [ 249.573954][ T8405] name failslab, interval 1, probability 0, space 0, times 0 [ 249.592157][ T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.606930][ T8405] CPU: 0 UID: 0 PID: 8405 Comm: syz.4.638 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.606959][ T8405] Tainted: [L]=SOFTLOCKUP [ 249.606965][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 249.606975][ T8405] Call Trace: [ 249.606981][ T8405] [ 249.606988][ T8405] dump_stack_lvl+0x100/0x190 [ 249.607014][ T8405] should_fail_ex.cold+0x5/0xa [ 249.607038][ T8405] ? tomoyo_encode2+0xfb/0x3c0 [ 249.607063][ T8405] should_failslab+0xc2/0x120 [ 249.607088][ T8405] __kmalloc_noprof+0xe0/0x850 [ 249.607107][ T8405] ? d_absolute_path+0x136/0x1b0 [ 249.607135][ T8405] tomoyo_encode2+0xfb/0x3c0 [ 249.607164][ T8405] tomoyo_encode+0x29/0x50 [ 249.607188][ T8405] tomoyo_realpath_from_path+0x18c/0x690 [ 249.607221][ T8405] tomoyo_path_number_perm+0x23c/0x580 [ 249.607243][ T8405] ? tomoyo_path_number_perm+0x22e/0x580 [ 249.607267][ T8405] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 249.607316][ T8405] ? find_held_lock+0x2b/0x80 [ 249.607340][ T8405] ? __fget_files+0x215/0x3d0 [ 249.607364][ T8405] ? hook_file_ioctl_common+0x149/0x410 [ 249.607380][ T8405] ? __fget_files+0x215/0x3d0 [ 249.607409][ T8405] ? __fget_files+0x21f/0x3d0 [ 249.607439][ T8405] security_file_ioctl+0xd3/0x230 [ 249.607464][ T8405] __x64_sys_ioctl+0xb7/0x210 [ 249.607488][ T8405] do_syscall_64+0x10b/0xf80 [ 249.607507][ T8405] ? clear_bhb_loop+0x40/0x90 [ 249.607529][ T8405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.607547][ T8405] RIP: 0033:0x7f3eeb39c819 [ 249.607561][ T8405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.607576][ T8405] RSP: 002b:00007f3eec30a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.607594][ T8405] RAX: ffffffffffffffda RBX: 00007f3eeb615fa0 RCX: 00007f3eeb39c819 [ 249.607605][ T8405] RDX: 0000000000000000 RSI: 000000000000540d RDI: 0000000000000003 [ 249.607615][ T8405] RBP: 00007f3eec30a090 R08: 0000000000000000 R09: 0000000000000000 [ 249.607625][ T8405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.607641][ T8405] R13: 00007f3eeb616038 R14: 00007f3eeb615fa0 R15: 00007fff382bd678 [ 249.607665][ T8405] [ 249.607682][ T8405] ERROR: Out of memory at tomoyo_realpath_from_path. [ 249.616624][ T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.619782][ T10] usb 6-1: USB disconnect, device number 2 [ 249.739683][ T791] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 249.887907][ T791] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 249.897602][ T791] usb 3-1: Manufacturer: syz [ 249.915366][ T791] usb 3-1: config 0 descriptor?? [ 250.113821][ T8413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.133752][ T8413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.557774][ T791] usbhid 3-1:0.0: can't add hid device: -71 [ 250.566843][ T791] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 250.591191][ T791] usb 3-1: USB disconnect, device number 21 [ 250.902513][ T8429] usb usb9: usbfs: process 8429 (syz.4.645) did not claim interface 0 before use [ 251.043879][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 251.043896][ T30] audit: type=1400 audit(1776329966.978:493): avc: denied { create } for pid=8434 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 251.105434][ T791] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 251.136471][ T30] audit: type=1400 audit(1776329967.010:494): avc: denied { create } for pid=8434 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.188103][ T30] audit: type=1400 audit(1776329967.010:495): avc: denied { getopt } for pid=8434 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.305311][ T791] usb 3-1: Using ep0 maxpacket: 8 [ 251.399495][ T30] audit: type=1400 audit(1776329967.115:496): avc: denied { getopt } for pid=8434 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 251.424310][ T791] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.477790][ T30] audit: type=1400 audit(1776329967.167:497): avc: denied { read } for pid=8440 comm="syz.4.649" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 251.489014][ T791] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.538548][ T791] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 251.582721][ T791] usb 3-1: config 0 interface 0 has no altsetting 0 [ 251.597722][ T30] audit: type=1400 audit(1776329967.167:498): avc: denied { open } for pid=8440 comm="syz.4.649" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 251.620898][ T791] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 251.890476][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.962954][ T791] usb 3-1: config 0 descriptor?? [ 251.976462][ T30] audit: type=1400 audit(1776329967.335:499): avc: denied { create } for pid=8440 comm="syz.4.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 252.036432][ T30] audit: type=1400 audit(1776329967.482:500): avc: denied { mounton } for pid=8440 comm="syz.4.649" path="/129/file0" dev="tmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 252.151477][ T30] audit: type=1400 audit(1776329967.482:501): avc: denied { mount } for pid=8440 comm="syz.4.649" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 252.234251][ T30] audit: type=1400 audit(1776329967.493:502): avc: denied { create } for pid=8447 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 252.272217][ T8455] random: crng reseeded on system resumption [ 252.414682][ T8455] FAT-fs (nbd0): unable to read boot sector [ 252.467452][ T791] hid_parser_main: 28 callbacks suppressed [ 252.467474][ T791] holtek_kbd 0003:04D9:A055.0005: unknown main item tag 0x0 [ 252.602651][ T791] holtek_kbd 0003:04D9:A055.0005: unknown main item tag 0x0 [ 252.657327][ T791] holtek_kbd 0003:04D9:A055.0005: unknown main item tag 0x0 [ 252.674967][ T791] holtek_kbd 0003:04D9:A055.0005: unknown main item tag 0x0 [ 252.709216][ T791] holtek_kbd 0003:04D9:A055.0005: unknown main item tag 0x0 [ 252.729360][ T791] holtek_kbd 0003:04D9:A055.0005: unknown main item tag 0x0 [ 252.856202][ T791] holtek_kbd 0003:04D9:A055.0005: unknown main item tag 0x0 [ 252.869159][ T791] holtek_kbd 0003:04D9:A055.0005: unknown main item tag 0x0 [ 252.882917][ T791] holtek_kbd 0003:04D9:A055.0005: unknown main item tag 0x0 [ 252.910041][ T791] holtek_kbd 0003:04D9:A055.0005: unknown main item tag 0x0 [ 252.953824][ T791] holtek_kbd 0003:04D9:A055.0005: hidraw0: USB HID v0.0b Device [HID 04d9:a055] on usb-dummy_hcd.2-1/input0 [ 253.098509][ T8470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.129468][ T8470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.525077][ T1212] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 253.677482][ T1212] usb 5-1: Using ep0 maxpacket: 16 [ 253.688192][ T1212] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.700144][ T1212] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 253.722503][ T1212] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 253.732640][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.743542][ T1212] usb 5-1: config 0 descriptor?? [ 253.757293][ T1212] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 254.464778][ T791] usb 3-1: USB disconnect, device number 22 [ 254.755946][ T8484] overlayfs: failed to resolve './file2': -2 [ 254.889267][ T8486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.962666][ T31] INFO: task kworker/1:3:5806 blocked for more than 143 seconds. [ 254.972905][ T8486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 255.009766][ T31] Tainted: G L syzkaller #0 [ 255.036632][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.067186][ T31] task:kworker/1:3 state:D stack:22504 pid:5806 tgid:5806 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 255.138309][ T31] Workqueue: usb_hub_wq hub_event [ 255.164844][ T31] Call Trace: [ 255.179613][ T31] [ 255.191353][ T31] __schedule+0x10e9/0x6820 [ 255.210515][ T31] ? device_initial_probe+0xaf/0xd0 [ 255.245200][ T31] ? __pfx___schedule+0x10/0x10 [ 255.268072][ T31] ? find_held_lock+0x2b/0x80 [ 255.299231][ T31] ? schedule+0x2bf/0x390 [ 255.317174][ T31] schedule+0xdd/0x390 [ 255.324925][ T31] schedule_timeout+0x1b2/0x280 [ 255.342942][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 255.357345][ T31] __wait_for_common+0x2e7/0x4c0 [ 255.374102][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 255.382119][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 255.401444][ T31] ? __pfx_device_del+0x10/0x10 [ 255.407056][ T31] ? kobject_put+0xb9/0x640 [ 255.418761][ T31] i2c_del_adapter+0x62d/0x820 [ 255.424560][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 255.430013][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 255.435474][ T31] ? dvb_usbv2_exit.isra.0+0x3f0/0xb70 [ 255.447649][ T31] ? dvb_usbv2_exit.isra.0+0x40c/0xb70 [ 255.454862][ T31] ? kfree+0x223/0x6c0 [ 255.460586][ T31] dvb_usbv2_exit.isra.0+0x4aa/0xb70 [ 255.466366][ T31] dvb_usbv2_probe+0x669/0x970 [ 255.472707][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 255.478424][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 255.484279][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 255.489724][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 255.495576][ T31] ? __pm_runtime_set_status+0x13c/0x970 [ 255.502211][ T31] usb_probe_interface+0x303/0x8f0 [ 255.508341][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 255.514035][ T31] really_probe+0x241/0xa60 [ 255.518692][ T31] __driver_probe_device+0x1de/0x400 [ 255.524026][ T31] driver_probe_device+0x4c/0x1b0 [ 255.529288][ T31] __device_attach_driver+0x1df/0x340 [ 255.534860][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 255.540797][ T31] bus_for_each_drv+0x159/0x1e0 [ 255.545724][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 255.551148][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 255.556476][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 255.562334][ T31] __device_attach+0x1e4/0x4d0 [ 255.567635][ T31] ? __pfx___device_attach+0x10/0x10 [ 255.574174][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 255.579478][ T31] device_initial_probe+0xaf/0xd0 [ 255.584731][ T31] bus_probe_device+0x64/0x160 [ 255.589577][ T31] device_add+0x11d9/0x1920 [ 255.594584][ T31] ? __pfx_device_add+0x10/0x10 [ 255.599543][ T31] usb_set_configuration+0xd97/0x1c60 [ 255.606294][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 255.613317][ T31] usb_generic_driver_probe+0xa1/0xe0 [ 255.618760][ T31] usb_probe_device+0xef/0x400 [ 255.623997][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 255.629463][ T31] really_probe+0x241/0xa60 [ 255.634267][ T31] __driver_probe_device+0x1de/0x400 [ 255.640168][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 255.645731][ T31] driver_probe_device+0x4c/0x1b0 [ 255.651232][ T31] __device_attach_driver+0x1df/0x340 [ 255.656653][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 255.662802][ T31] bus_for_each_drv+0x159/0x1e0 [ 255.667715][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 255.673338][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 255.680023][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 255.685909][ T31] __device_attach+0x1e4/0x4d0 [ 255.690948][ T31] ? __pfx___device_attach+0x10/0x10 [ 255.696287][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 255.701751][ T31] device_initial_probe+0xaf/0xd0 [ 255.707252][ T31] bus_probe_device+0x64/0x160 [ 255.712047][ T31] device_add+0x11d9/0x1920 [ 255.716865][ T31] ? __pfx_device_add+0x10/0x10 [ 255.722166][ T31] ? add_device_randomness+0xb7/0xf0 [ 255.727732][ T31] usb_new_device.cold+0x685/0x115c [ 255.733015][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 255.738983][ T31] hub_event+0x314d/0x4af0 [ 255.743638][ T31] ? __pfx_hub_event+0x10/0x10 [ 255.748622][ T31] ? __list_del_entry_valid_or_report+0x90/0x1d0 [ 255.755266][ T31] ? rcu_is_watching+0x12/0xc0 [ 255.760133][ T31] process_one_work+0xa0e/0x1980 [ 255.765617][ T31] ? __pfx_process_one_work+0x10/0x10 [ 255.771076][ T31] ? __pfx_hub_event+0x10/0x10 [ 255.776111][ T31] worker_thread+0x5ef/0xe50 [ 255.780784][ T31] ? __pfx_worker_thread+0x10/0x10 [ 255.786177][ T31] ? kthread+0x13a/0x450 [ 255.790436][ T31] ? __pfx_worker_thread+0x10/0x10 [ 255.796097][ T31] kthread+0x370/0x450 [ 255.800218][ T31] ? __pfx_kthread+0x10/0x10 [ 255.805075][ T31] ret_from_fork+0x72b/0xd50 [ 255.809721][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 255.815038][ T31] ? rcu_is_watching+0x12/0xc0 [ 255.819848][ T31] ? __switch_to+0x800/0x1100 [ 255.824973][ T31] ? __pfx_kthread+0x10/0x10 [ 255.829632][ T31] ret_from_fork_asm+0x1a/0x30 [ 255.835011][ T31] [ 255.838620][ T31] [ 255.838620][ T31] Showing all locks held in the system: [ 255.846792][ T31] 1 lock held by khungtaskd/31: [ 255.852223][ T31] #0: ffffffff8e7e6ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 255.862303][ T31] 3 locks held by kworker/1:2/791: [ 255.868609][ T31] #0: ffff88813feaf140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 255.915715][ T31] #1: ffffc90004727d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 255.955523][ T31] #2: ffffffff8e7f2628 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 256.001316][ T31] 2 locks held by getty/5563: [ 256.019530][ T31] #0: ffff88803b7c90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 256.068405][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 256.099196][ T31] 5 locks held by kworker/1:3/5806: [ 256.123360][ T31] #0: ffff888020af4940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 256.168361][ T31] #1: ffffc90002fe7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 256.206885][ T31] #2: ffff88802b91c1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 256.222347][ T31] #3: ffff888057dac1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 256.240132][ T31] #4: ffff888057f011a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 256.251490][ T31] 1 lock held by syz-executor/5812: [ 256.261535][ T31] #0: ffffffff90624b20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 256.287022][ T31] 4 locks held by udevd/5824: [ 256.301514][ T31] #0: ffff888076dbe098 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 256.325126][ T31] #1: ffff88807bf33480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 256.345846][ T31] #2: ffff8880765345a8 (kn->active#31){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 256.364464][ T31] #3: ffff888057dac1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 256.389491][ T31] 1 lock held by syz.3.487/7880: [ 256.400770][ T31] #0: ffff88802b91c1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 256.420608][ T31] 1 lock held by syz.0.600/8261: [ 256.434759][ T31] 1 lock held by syz.5.652/8459: [ 256.453362][ T31] 2 locks held by syz.4.657/8473: [ 256.465417][ T31] #0: ffffffff90624b20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 256.490706][ T31] #1: ffffffff8e7f2628 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 256.523268][ T31] [ 256.565754][ T31] ============================================= [ 256.565754][ T31] [ 256.583999][ T31] NMI backtrace for cpu 0 [ 256.584011][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 256.584026][ T31] Tainted: [L]=SOFTLOCKUP [ 256.584030][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.584036][ T31] Call Trace: [ 256.584040][ T31] [ 256.584045][ T31] dump_stack_lvl+0x100/0x190 [ 256.584061][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 256.584075][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 256.584090][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 256.584108][ T31] sys_info+0x141/0x190 [ 256.584121][ T31] watchdog+0xd18/0x1040 [ 256.584135][ T31] ? __pfx_watchdog+0x10/0x10 [ 256.584146][ T31] ? __kthread_parkme+0x18c/0x230 [ 256.584168][ T31] ? kthread+0x13a/0x450 [ 256.584178][ T31] ? __pfx_watchdog+0x10/0x10 [ 256.584196][ T31] kthread+0x370/0x450 [ 256.584206][ T31] ? __pfx_kthread+0x10/0x10 [ 256.584219][ T31] ret_from_fork+0x72b/0xd50 [ 256.584233][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 256.584247][ T31] ? __switch_to+0x800/0x1100 [ 256.584263][ T31] ? __pfx_kthread+0x10/0x10 [ 256.584275][ T31] ret_from_fork_asm+0x1a/0x30 [ 256.584297][ T31] [ 256.584307][ T31] Sending NMI from CPU 0 to CPUs 1: [ 256.711129][ C1] NMI backtrace for cpu 1 [ 256.711144][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.711163][ C1] Tainted: [L]=SOFTLOCKUP [ 256.711168][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.711175][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 256.711194][ C1] Code: 46 8c 02 e9 83 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 1c 18 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 256.711207][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 256.711218][ C1] RAX: 000000000116048f RBX: ffff88801e6fa500 RCX: ffffffff8b937045 [ 256.711227][ C1] RDX: 0000000000000000 RSI: ffffffff8df43ff3 RDI: ffffffff8c1b6fe0 [ 256.711235][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67ad [ 256.711243][ C1] R10: ffff8880b8533d6b R11: 0000000000000000 R12: 0000000000000001 [ 256.711251][ C1] R13: ffffed1003cdf4a0 R14: 0000000000000001 R15: ffffffff90db6910 [ 256.711260][ C1] FS: 0000000000000000(0000) GS:ffff888124406000(0000) knlGS:0000000000000000 [ 256.711273][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.711282][ C1] CR2: 000020000002c000 CR3: 000000000e598000 CR4: 00000000003526f0 [ 256.711291][ C1] Call Trace: [ 256.711295][ C1] [ 256.711299][ C1] default_idle+0x9/0x10 [ 256.711314][ C1] default_idle_call+0x6c/0xb0 [ 256.711329][ C1] do_idle+0x464/0x590 [ 256.711349][ C1] ? __pfx_do_idle+0x10/0x10 [ 256.711365][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 256.711386][ C1] cpu_startup_entry+0x4f/0x60 [ 256.711404][ C1] start_secondary+0x21d/0x2d0 [ 256.711418][ C1] ? __pfx_start_secondary+0x10/0x10 [ 256.711434][ C1] common_startup_64+0x13e/0x148 [ 256.711455][ C1] [ 256.892982][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 256.899828][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 256.910472][ T31] Tainted: [L]=SOFTLOCKUP [ 256.914766][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.924791][ T31] Call Trace: [ 256.928050][ T31] [ 256.930954][ T31] dump_stack_lvl+0x100/0x190 [ 256.935609][ T31] vpanic+0x552/0x970 [ 256.939562][ T31] ? __pfx_vpanic+0x10/0x10 [ 256.944033][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 256.950186][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 256.956324][ T31] panic+0xd1/0xe0 [ 256.960017][ T31] ? __pfx_panic+0x10/0x10 [ 256.964406][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 256.970544][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 256.976673][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 256.982803][ T31] ? watchdog.cold+0x1a0/0x1d2 [ 256.987543][ T31] ? watchdog+0xd28/0x1040 [ 256.991930][ T31] watchdog.cold+0x1b1/0x1d2 [ 256.996500][ T31] ? __pfx_watchdog+0x10/0x10 [ 257.001150][ T31] ? __kthread_parkme+0x18c/0x230 [ 257.006153][ T31] ? kthread+0x13a/0x450 [ 257.010375][ T31] ? __pfx_watchdog+0x10/0x10 [ 257.015021][ T31] kthread+0x370/0x450 [ 257.019063][ T31] ? __pfx_kthread+0x10/0x10 [ 257.023625][ T31] ret_from_fork+0x72b/0xd50 [ 257.028192][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 257.033276][ T31] ? __switch_to+0x800/0x1100 [ 257.037929][ T31] ? __pfx_kthread+0x10/0x10 [ 257.042492][ T31] ret_from_fork_asm+0x1a/0x30 [ 257.047237][ T31] [ 257.050510][ T31] Kernel Offset: disabled [ 257.054806][ T31] Rebooting in 86400 seconds..