last executing test programs: 1m42.505334621s ago: executing program 3 (id=1214): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x66ae, &(0x7f0000000200)={0x0, 0x3b02, 0x40, 0x80000, 0x80001bd}, &(0x7f0000001100), 0x0, &(0x7f00000002c0)) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m41.635893003s ago: executing program 3 (id=1218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, 0x0, 0x0, 0x10848a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) 1m40.21744037s ago: executing program 3 (id=1219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r7, 0x6, 0x8, 0x0, &(0x7f0000001040)) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r8, 0xb) 1m39.103778783s ago: executing program 3 (id=1223): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20004040) socket$rds(0x15, 0x5, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f00000001c0)={0x6, 0x4a}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2033c, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) socket$pppl2tp(0x18, 0x1, 0x1) 1m38.768482363s ago: executing program 3 (id=1224): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000000000000000800000cf563f8b801400000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000020000000000000006000000850000002800000018110000", @ANYRES32=r1, @ANYBLOB="0000000017ad17637a3774dc131700000000b70200000000000085000000860000009500000000000000c3d30b505a37249d2405343fee2fc7c7b387fb9077be50e0dcacbed2bd3d18f331fa6f9d133504f4a7181c7288a866e2bdd8066f2433ded8b2d610ea897ab1adfa25e18bd141422763e5ab217dc04672500bbdee794cc4cd5c5015b65cfb724c402d734fe569bd671eb3df1fdb0d617a44e8f0115cafa4f15a4dcb000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0xf, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000007c0)={@dev, @private, 0x0}, &(0x7f0000000800)=0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000003400008724666700080000000b0000000000001105000000070007b44cc3fe13dbad000300000000030000000100000000000000060000000000001010000000002e302e2e5f5f00"], &(0x7f00000008c0)=""/61, 0x54, 0x3d, 0x1, 0x9, 0x10000}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000003600e388951a0000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x1, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x18, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a900020020d9000008000240000000000900010073797a30000000000900020073797a3200000000140005800800014000000011080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES8=r8], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r10 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) r12 = accept$inet(r11, &(0x7f00000002c0)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@empty, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000600)=0xe8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r13, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r10, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0xda0aed30adf1751, 0x0, 0x0, 0x0}) 1m38.607087438s ago: executing program 3 (id=1226): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xc0, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) fcntl$getown(r0, 0x9) r1 = socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x70800, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c, 0x0}}], 0x1, 0x4000040) 1m37.612598424s ago: executing program 32 (id=1226): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xc0, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) fcntl$getown(r0, 0x9) r1 = socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x70800, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c, 0x0}}], 0x1, 0x4000040) 14.177760558s ago: executing program 1 (id=1425): openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0) r1 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='vuto_da_alloc', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x242040, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='wchan\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000340)=""/228, 0x132}], 0x1, 0xfffffff6, 0x9) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000007100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r6, r5, 0x25, 0x18, @val=@netkit={@void, @value=r6}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000002080)=ANY=[], 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"/306], 0x80}}, 0x4880) recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x40000040) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000000700000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x8e, 0x0, &(0x7f0000000500)="04115349ea66d4483bfff309b94395915485b896ecfd8d700c998173018d25a9d1005a2ccb9f6ede6e7c79e9b8870b647c079f2ac67f63b88cd1da22d56747f5d61fc4b7790ea288a42e281658bf3481cd3206ad04ec37bf1113659c9edc95cbcef39fc901669d89b43b5c97514cbc1843a8a790e64e4450816634caa8f0270ace3f29b6def4e53da69e11df4f82", 0x0, 0x1008, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x4, 0x9, 0xfffffffd}, 0x50) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0xfffffffffffffe4a, &(0x7f0000000280)=0xca) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x1, 0x5001) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 13.47681967s ago: executing program 4 (id=1428): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) writev(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000040)="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", 0x185}], 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) syz_usb_connect(0x3, 0x3b, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x400a00}]) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000980)=[0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd4, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d00)={'tunl0\x00', &(0x7f0000000c80)={'syztnl0\x00', r6, 0x1, 0x804f, 0xd, 0xe, {{0x16, 0x4, 0x2, 0x3f, 0x58, 0x66, 0x0, 0x9, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x22}, {[@timestamp={0x44, 0x2c, 0x93, 0x0, 0x0, [0x0, 0x10001, 0x5, 0x40, 0x3, 0x6, 0x1e, 0x9f3d, 0x7fffffff, 0x5]}, @timestamp={0x44, 0x18, 0x91, 0x0, 0x4, [0x1, 0x2a5b, 0x3, 0xfff, 0x81]}]}}}}}) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r8, 0x1}}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x2, 0xaa, 0xfa11, 0xffffffff}, 0x0) 13.476200606s ago: executing program 1 (id=1429): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f02ebbeea, 0x8031, 0xffffffffffffffff, 0x91b2f000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000003300)=[{{&(0x7f0000000200)=@ll={0x11, 0x37, 0x0, 0x1, 0x7e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)="6012bc3508eb44cb7d3824d682b05ac104dcc296b7424776578b64aaa52eab6ec1c5bf927d95c5", 0x27}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="95aa4da0fb0e21493f98877202c4", 0xe}], 0x1, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x30}}, {{&(0x7f0000000540)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f0000001740)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="f9823bfb257202179fb4499efd934b85a14e5bad7dc4a32be99bd93ea8f9d9366f04f8ef39cd030bd4a57efa618a11638c7fec41f585815d54b5cf77c69b1ecf3765de84b216ac14", 0x48}, {&(0x7f0000001640)="bde3847723d89d4059f2a4f97bcc552e3935900f68b8ab33c7b613f8f9217164ceae98dca210d670807023427d51604d98991f03c423f324a4ab740e78516c27e7094bbd03b5fe748e31f1a5756c910ec2832b46cc8568e859c2ea81f3a43bb6178e2cba216d395a73190d6d0df02924974149546e2db6b6e8cc7b99f66e6053e93c4d4212500babd1465e1bc49ff31390d1dfcbdcf22d32cf48ecf04ebdcaab1982fb4441a9702212c0ed8a860a425cee72c300674803a253c6f355e4ea0eccf58bb346c3763f49bbe430c449ff4999fc65a61d6aa9", 0xd6}], 0x3, &(0x7f0000001780)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x311}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001880)="c27c9e6854360594a35d5a988cdfae91af4077696b315b412f1d505c56e232173a89177913c1aedf517c957823f8e1cea6386d269a040f6583c44fc41f52bbff13b692184861e44ac1f189c6343809d112cbc4cec6a2eebc57994fc52e1e750f92b34c908c5f39c4cda19d41736c2743c8f2b9a0980bcdbc7b6b809129db89695cc94851c0040a22554d0e6ea35e5f8f5c9e65645c15", 0x96}, {&(0x7f0000001940)="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", 0xfa}], 0x2, &(0x7f0000001a80)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3459}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffb2f}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x60}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001b00)="d5820415edb3c1349aea8a6dfec5699b9924dcc9faf9f975ed1bbebe4a4de059082518675c9759bd38d65b6c6c68cac00f156349d7bef07c1b0dcfa8e4bcc3e18292747df7d25741816c833fdf25bbcc74db697ceeacd1fb068c6789421c7c26fcf1755f44ab58e2bc81b56a60348b3de0bb46a8df90835f46de410eb1e16cc9faa3d117a36fec0a693b82932e3d84ebe11735baa88ecc6b504135694fcf2ade6e90bb7dbb2cdad3bb4b422efd61b857526ef1654a83cbcec09f10936a61c4b0062fbd88267f8e90367380b9733368c9523fe6078711c2f88d929e95207eff", 0xdf}, {&(0x7f0000001c00)="dc329bc1875fff39359d59b07171bb94d3b39f5d7a76112e1a06c7a79f2503356b79943c30fac502eaf4f1690a2c7c17f5703c307bb3ee3b82953aba41d41b2a4db7536356c3be3fdcc3c96da32e6876c876c7ebf3f8239c3371077a639a8a207f7e640a64c8a8ea584949439fa1a9e1689912714bd49294f72f9b0db1f080193d212c0f2abf030eeee9ed022d33dd1063d06ac0d1de327e1cd7d6057f01ad160233b98fcf9e01bcf3b5e5a2154173cc812173a0afaf1e8608e861702b", 0xbd}, {&(0x7f0000001cc0)}, {&(0x7f0000001d00)="a32d10cf37308bf220e7304602e0db215626e649dcef928a75f8735561501c428c6001b08664294289461fb6f1665213526f008952e582b5ef15c51a8e370361f2f1ccbd79a57b8fb465e0cf5252724af2de6a4df73003b254a747d64131c6ce2da6b01b723c3a9b5a5d718ba92ad3cd9b5b2b66bdc63e0b3d26d1ef8bbd388bfc50e7b77f4c9b122bba3990fc090f2cfcd076b0f9b44273489e72cde30d54de7138534c87741db9932ed3d7e540ac1cab83d5253ea1fc85d4237423adf7554cd3a6e6be1c01f5f5", 0xc8}, {&(0x7f0000001e00)="145ce3371b258518dac1cc3836ce5c3558f578c067c47e09b48deb8840a1c58f161160daf2aa0beaabd165d771a88398d4e74a78f4cbe2311ca1c6e70e1c3da02f7b7c051b9a9e349d37", 0x4a}, {&(0x7f0000001e80)="6f47e421bc6125877938e367fe464fc715b3d82e9c092fadc5eba7dff294150aaf5341c2870909c2005cd93c0be514c03adaf7dc4f48df922e5e410df2e3f44ab993d4718acf0d9f25c59ab68f252e656aabf9b6c7a67b499afb66502b06a79c600b63a1483150525c2b919fe777397173067911d69244494df4dd7955146c1912e108f76d2ea4d0b45bcfafe6970ef2e4b95906a196adb259e84981678d3bc558b93109435ed5", 0xa7}, {&(0x7f0000001f40)="48d80f3392668f019f8c191e3385c887952241b23cb036d8c4756214379a71e94357b78495a6dafcc4ac216c40ab5bbca1a5e7fff202a43b4fb0968fc5e55672b4d4031aae1a10492d7a3c815dea409f74c514d161f5bf0cbdba6d9da8154559a2438c20ad75d4a324f4858ccce558576b6184d61d54471760ef31cfc2be7c64ed64d2a87ab820f1c60e44a97ca972af7b5f44f44785eb8eecf7f4be1082c03f2d793e7ed6", 0xa5}, {&(0x7f0000002000)="dad65265f164c60b0e77a522b0a35ddd015b06e4e908aa9bacecb4544930e380c255079b45a2c25cb4e484692c298738200748d9f4373b1ab2571ed0a3217ff3b05b49df7896af1ea9c6e0e949629a2c8f9b376765da580a03bcbea2299622c945db33162c7043780c059f4e3ed08c60f12b4951aa2fd5af3e146eddc5686a7069c07e7240336be89a3d0cf9f7de444cc9a7b9764bb1e4ae08281a05b88631771335f043ac70682c98f37600a0833d856cdb7191cd3190275e91c709c6669e0a211a9da4b8ce9b5e346310c4567cd10afc1a6d45f49063620cf94c0c16be1ad72e71500cc16cca670f", 0xe9}], 0x8}}, {{&(0x7f0000002180)=@sco, 0x80, &(0x7f0000003200)=[{&(0x7f0000002200)="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", 0x1000}], 0x1, &(0x7f0000003240)=[@timestamping={{0x14, 0x1, 0x25, 0xd8}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x400000}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0xa8}}], 0x6, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 11.702654731s ago: executing program 1 (id=1430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101120, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)) sendto$packet(r6, &(0x7f0000000100), 0x0, 0x804, 0x0, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000003b00)={'batadv0\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="a35bf2ec5a618659ac4fa0c26348660a94802c2cb3f547f4a509aedf02a2265d362bdd70bf1903a216091ff130ad0dca4d810ea83d426b99746a03642b75faa7a2d6eb416a1ac14b725dab90e9ba1192a381eea30bdba5a0ec40c354f1ad44379a3ab73ecc3825f885097bfa8d5bbb42afeab223c8087b9fa1277e761356b048228825b9d9cecd8141c3d5f4d3da894289501ab093717992bb", 0x99}, {&(0x7f0000001300)="cc6a49a9034ede42a834e7313a092101b8534c5095fc203fa788832963a912fe7370bf587700c83eb6444a81a1be80b1eb164503e84f6752ee87e7b49a363f7098c150728dbafc5a80ff33d7d501fd22a5495e1fd8313f40d3d692c196a074ab4b71e47659cac177788050b8d09dd657aba7a47b144f91748d8a51c5d9a8660dd84bea4068384f12580cfe8fe4242ed4b16d259a790bba86d2a075007e6ee0cc19ba59b96b176a22c93789b472df970c2ff1428324ee17a46b75ee6c80b64bebe1ba66bc615a0ea56aedf8b2077c319a29c94612a02e4ea183e9f5a857dabf386732ca6af2104b2a40607339c0b2cb05b30095b2d158110832", 0xf9}, {&(0x7f0000000440)="ce3d7d6acb0e8c5cad4befec587b8e2244024612dff3bbdd3853de0d7b4169f7ced2c91248441124aa5dfb7b67386337b3f4eb6d5c268cadb5936928e2941e4a5cb287e5327c0415b8e80ec3bbe5b924e9a65c0334f84096433e7833f880d90e8c7409132e1c6a5d9a844b6af9cb24586f42e00e911fbdc90a80c6c1", 0x7c}, {&(0x7f0000000540)="babaaa3e4bcf85217d70b4bfa2ceb21c271121de0193f6c7b9a87ef3f70047ffced31ae09c0b8e5aa20d21ec3e2ea7cac80ee46b4d6069615c1d4055438980ab8c01a2761cacdb8ae6de16db7105f2cf9abb2179ae3347c5fb3d8d87c29bb2e19dbcb65b343d4f277d3d7d9f0dbb868b0bb276ccf0e574fd18ec01b8886cacfae8a3c317f67baea83789bc9a7b22f3655eda7ace6724dca12fde9ceefbc8fe1c7a62075737bf242b5617f091aa45a03aee0149cd566d0487c10f5c81c384e3d7045e326bffc30c6eaf35da4c42f7b016600d32a65bc0bcbe8e66", 0xda}, {&(0x7f0000000640)="343577753f0ea0296d7ea143e521812168e0b21318ae76c1677a6cff59bbc4f3f37cf487028141547e517834cad2bf7d05b2907c793a5b2961158809cdd707ae29b566b65e519276c2e3685574a5d873f6331fd5cfd03c86e569ae32d34d62c015c1686068828fb7be45e0bb27deb7cec3d9387c29d7fa21c450569f35708b68fc57b7a843222f52fa1e872d338c9fe0cf9941c5c1ea8a0d", 0x98}], 0x5}}, {{&(0x7f0000000780)={0xa, 0x4e24, 0x800, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000e00)=[@hopopts_2292={{0x48, 0x29, 0x36, {0x33, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x28, {0x0, 0x8, 0x8, 0x4, [0x10001, 0xffffffffffffffff, 0x581e, 0x3c52c386]}}]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x32}}}], 0x60}}, {{&(0x7f0000001800)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x80000001}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000001840)}], 0x1}}, {{&(0x7f0000001a40)={0xa, 0x4e22, 0x696, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f0000002e80)=[{&(0x7f0000001a80)}, {&(0x7f0000002b00)="a70acf073357f044f0ff898403172c06ad36b2ff1dfd22b98512205c33cb1ee4a43591e6439d32d6990a30f7377a9a8c09e7a686abc876a37d80f476b34e6b0a812d0dd7b60d25e64aeda7067dfe5c00", 0x50}, {&(0x7f0000002c00)}, {&(0x7f0000002cc0)="802abafa6a586b62ccf9a7a1ad65e3e4504e5dc088519acb763c39df34059723a8a13211a59b0293205e17169e1c5be09d4128cf7de17d24392349ffaedc4577cd98ddc874c204acc8d5a931c0e31cbd519111320a66107ff3c6c62b0c4b0a044a99be88fa522eb51a57410de21176ba70427851414083950e46d6a9df049df13885fd9bce7b3d8e4349b4d43c174c731779c881e0ac02d08cf856c8ac67dffc8cf9850f6c72cb42990e4455bec9eb", 0xaf}, {&(0x7f0000002dc0)="fe2e1a698903afa4b1c0210a66389ba456f9389d6b8edd43bb2a2d62a7ec49a49fb9423f828a5bb232e5f3f86bb39f2d4d76dc8662d143d473d7bca44da44a1096412b7d6e9549388ea3f703f74fa8db1671c49279bb2d97a24a5e7d3a7055ff32e302378c1e8cd2f7a87203385908020f3022930b60db316e3d0d6bff5907b91853c16e7f26761f24a31cf3ea8c50", 0x8f}], 0x5, &(0x7f0000002f40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x10000}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}}}], 0x88}}, {{&(0x7f0000003040)={0xa, 0x4e22, 0x3, @loopback, 0xb}, 0x1c, &(0x7f0000003200), 0x0, &(0x7f0000003240)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x5e, 0x1, '\x00', [@pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xb65}}, @hopopts={{0x30, 0x29, 0x36, {0x33, 0x2, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0x9, [0x7fff]}}]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0xeefef1541c53bdc3}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x3a, 0x0, '\x00', [@ra={0x5, 0x2, 0xffff}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x6, 0xe, 0x0, 0x60, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x148}}, {{&(0x7f0000003440)={0xa, 0x4e22, 0x4, @mcast1, 0x1}, 0x1c, &(0x7f0000003a40)=[{&(0x7f0000003540)}, {&(0x7f00000035c0)="ff38ef1937b4e33dc9e253f24ec6e17be8716280e877adca560b7609cac94893bcd89a9f575b9dbf1395c33867ceff022fdf9df7448e040597c516930931902426f2e63137a9c7fbf4d6cab5072b87bafe9c66292d7b6eb56403004dc9163cdb99da919d43bcd274b1e566ae98aa930564d6aebb4e24a838ff69f6dddb9e0bf43cf84c7a686765c14bd56c9a8f28b86bdb2240df9c0b153e0cbbb8eb25aa803dd3b0fd8dcb72e19bb1e6ac441e79bfd0ecc5fd5f7b7f7ea709773845a74406bfbd356cbaa11acddfaaa77b", 0xcb}, {&(0x7f00000036c0)="33c94adb6649f66a600c1219388c07c4ddda6fc945f5d72937b0767adf0685e47396f0256113616c6580dc75bfcca95c929dedaa3c6b", 0x36}, {&(0x7f0000003780)}, {&(0x7f0000003840)}, {0x0}, {&(0x7f0000003900)="451bf36625c39f05bbf11909fe2ef27cf7ca00f601fded1cb120cdbff0380fe224faa334eac34e1a9630", 0x2a}, {&(0x7f0000003980)="297848b4d82594ff5837819a", 0xc}], 0x8, &(0x7f0000003b40)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r5}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xa}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r8}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8001}}], 0x98}}], 0x6, 0x2404c004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) r10 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x17b}}], 0x20}) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f0000000040)={0x1a, 0x1, 0xee}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_X86_SET_MCE(r10, 0x4040ae9e, &(0x7f0000000040)={0xbc80000000000000, 0xa000, 0x8000000000000001, 0x0, 0x13}) mremap(&(0x7f0000e34000/0x4000)=nil, 0x4000, 0x2000, 0x6, &(0x7f0000f0d000/0x2000)=nil) 11.008483063s ago: executing program 2 (id=1433): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000001500)=0x200000000) syz_emit_ethernet(0xbe, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x1}, {@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast2, 0x6}, {@multicast1, 0x8}, {@empty, 0x3ff}, {@multicast2, 0x8}, {@multicast1, 0x6}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0xfe}}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 10.799748221s ago: executing program 2 (id=1435): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x70bd2a, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008cd7}, 0x0) 10.708821996s ago: executing program 4 (id=1436): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e22, @local}], 0x10) (async) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000003c0)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x89, 0x6, 0x9, 0x85, 0x0, 0x4, 0x4c}, 0xe) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r3, 0x400454c8, 0x1b) (async) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3}) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) (async) r6 = socket(0x40000000015, 0x805, 0x0) socket$rds(0x15, 0x5, 0x0) (async) getsockopt(r6, 0x114, 0x271f, &(0x7f0000000340)=""/102393, &(0x7f00000000c0)=0x18ff9) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000640)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/242, 0xf2, 0x0, &(0x7f0000000540)=""/207, 0xcf}, &(0x7f0000000680)=0x40) r9 = socket(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r11, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x400000000000047, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) (async) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000040)=@nfc={0x27, r7, 0x0, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)="eebcb2e7af85ae67476a32a944a0e662697ebbaba890c1de344ef7", 0x1b}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="d0000000000000009a0000000400000029a64988a47421382f2e020f03058327f4b9b4c7fe702287e2b023465f5516abfaaa4b5993e809e186cbf8d5b20f7cd8c09aa3b90921c22dbd55fa22af31291b7366dae72ba62495dffb6f6a33dd84c68fb6c509224914012e9afdcd92a711711667e716931693e95bdc1941d2c7cddd05ed21d9a2dd49daf9610c2441087d6733e5be4d9e207f884c5458cb8b48e597313f3375cc676800e9dfa22fc67a61874fa1b8cf502207cab6e1ab2adb043f81000000000000000658b1b20000000000"], 0xd0}, 0x0) 10.62005172s ago: executing program 4 (id=1439): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/67, 0x43, 0x0, &(0x7f0000000080)=""/125, 0x7d}, &(0x7f0000000140)=0x40) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000180)=""/152, &(0x7f0000000240)=0x98) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x400) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000002c0)={0x8ec, 0x52fd, 0x0, 'queue0\x00', 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000440)={0x2, 0x4e24, @private=0xa010101}, 0x10) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x48800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0), 0xd3, 0x0, &(0x7f0000000500)="9d16604a6b2ac46a1ce881c08a14f81a45ca5b22b58ff228d14e5c4aba63af892a8b06e76f3531600ca41ec43b0ab6b43fa6b635435ea793da1b7bd078e5ecaf6edc486eeeb5a043be935c1ee8860d1c28cd40da56d386a6ad3d5eb8ec10733697baa3fdd97f1f3aeeba01ce01392d542b90edc29063d2ee95078cad82a05db55f134b25f690ed787b721288cd599d757d3192e148fbc19ce8c6db8d6a3dc8b73cacfdc7c80c674edf16c17d24a659733436cd9020ebabf29f6b1d0a2a55f97364912b856bcf6ca35b8b4808dbce3ce51be13d"}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r2) timer_create(0x3, &(0x7f0000000800)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000680)="6888cc51b4cbe26a0a62b17d34b3654af2f3384477cdf941ec58b30a8fbd80100281c03a74db5119258b854403d7fcbdaef336808be56c26116c6a9f10429185e553aec542f3a90912aa0cb7ee3d7bcd0f876c926cc188d854bddf5b233f6058e63a", &(0x7f0000000700)="772badfba6d64e8a7199c61299605fbd95c22468e074f831364b64f152b68643565264f857135618ab096052245878f6efdb4bca6458c343846edbb6cb5984d183c86b0a9a0d31d76420fcadc1538c49da9bd92443d1af36f5ef1e0d1c62618d7d79d8ad0640a8e32f518f7a1a968867a831d95999b548a597c36af3c1f061f372635d3d1655aaed5b731a839c34252724ff101181a947916e7402757614af422bb4b3777e3acad8bea32f45af3202f9bbac606e8850da1bfc536670455b4b9891d876b1c11959626fbfa5a89445734f02ed5fba806d53bc2fda062b38c2b7d304a18327cba9d8"}}, &(0x7f0000000840)=0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x10002) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x1d, r3}, 0x10, &(0x7f00000009c0)={&(0x7f0000000940)={0x2, 0x400, 0x8, {0x77359400}, {r7, r8/1000+60000}, {0x1, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x0, 0x1}, 0x1e, 0x2, 0x0, 0x0, "e1a809c66f96a47ad2c4581b289c37e51d0744247f9046351d12357c7b8e49fe69ef94f01e5e516b89443af6100671eedf60ac0ed94ab5aedf4e8bc4f29bbb08"}}, 0x80}, 0x1, 0x0, 0x0, 0x180}, 0x4000083) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r9, 0x8983, &(0x7f0000000a40)={0x8, 'ip6gretap0\x00', {'team_slave_0\x00'}, 0x4}) recvfrom$inet(r5, &(0x7f0000000a80)=""/105, 0x69, 0x40, &(0x7f0000000b00)={0x2, 0x4e20, @remote}, 0x10) timer_getoverrun(r6) write(r1, &(0x7f0000000b40)="00a8a327e489af797895ab48b509ffed7eb2757395764dc3df293ca3959b57bd9ba73c82337b52514424f8bbc46bf9c2a5da36f21a4f871ad4d5fcd76261f2e146a061dac6ae4f8332177d74a09327c169d2a97d42d4caa4f8c900d50060cdc7d4f92ffd4f36b58c85f1fb499d504c89b985efdf8880aa9efe5ba827542838828e0df1c2af8255c759d929e4d841312d477ad8413c9ab709294b9f9fd9149cebdbead10a1c5f9d07db6cde795d449e0ed134eb957efa9859ea75b7e0ee9d815cc4aa4c99ad11399e585a4ad950af0b9a563407ebc7d12b7e8e6a39f54180fafcd3330d11450b", 0xe6) setpriority(0x0, 0xffffffffffffffff, 0x10001) socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) sendto$inet(r10, &(0x7f0000000c80)="e0528d2a2a1e3de09e9fa738b02036389d9e18495e8cb6519e7db404a90db9cf01244e9d14b4a4c498e8732e943966814c7fd3b2b910d029879c43e1ca0b568a8a989f5888da61cefb4bc45ad5a70e3a1ab205398579fd0cfc8ba65b0ea6309fb4b5924e7a5d80de21de06b3c6eae057a9ad9dd1bedf36a70c3057f18e481f37c6c3e30ae18b557d87662955", 0x8c, 0x0, &(0x7f0000000d40)={0x2, 0x4e23, @empty}, 0x10) socket$pptp(0x18, 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r5, &(0x7f0000000d80)="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", 0x1000, 0x632963e5) 8.348256015s ago: executing program 0 (id=1441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x39, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x1, 0x0, 0x1000000}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000340)={[], [{@seclabel}, {@flag='async'}], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x6, 0x10, 0x73, 0x3}, &(0x7f0000000240)=0x18) 8.346898454s ago: executing program 2 (id=1442): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) timer_create(0x0, 0x0, &(0x7f0000000300)) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, 0x0, 0x0) connect$netlink(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804c844) mprotect(&(0x7f00008b5000/0x4000)=nil, 0x4000, 0x9) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x2, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x40, 0xa, 0x1c, {0x1c, 0x24, "24d7b2b42520bc75dbe2fabcedca88b2c4f5f9708978dbfd6cbe"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}}, &(0x7f00000009c0)={0x34, &(0x7f0000000340)={0x0, 0x14, 0xaf, "1557891305c3d204f510227e7b8858dc888bb17b9759a81cb64806c056d546706389543d977af9940701222810ed97c6cf192e33c29d26e181ea41a6e8aa58726136030a63e15d0775ae2a3176ba103698c8c4aa873f2ec1fe51c7e2c9892a6d82a1d2f5f1e0e06b96773417c29697028a72b5ccd337e79c583b21abdb51815cff07f97a90ba76a1cb61ff856c84d25f2e875d2e5de57a9d8201670a92d6b2a181db11038daf2613fcc5d2346b687a"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000900)={0xc0, 0xa1, 0x4, 0x9cc}, &(0x7f0000000940)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000980)={0xc0, 0xa2, 0x2f, "7209a412afbaa82425c2ed30dd318b501d27881c904647f01820d111a5107558354a2629143d1b854b1fc715784f7c"}}) 8.10444816s ago: executing program 4 (id=1443): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xa000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0x7, 0xa, 0x4, 0x15, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0xfa, 0x7, 0x15, 0x4, 0x3, 0x0, 0xfe, 0x7, 0x7f, 0x20c}, {0x1, 0x3, 0x24, 0x5, 0x6, 0x7, 0x3, 0x70, 0xfd, 0x70, 0x4, 0x2}], 0xffbfffff}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 7.196030141s ago: executing program 1 (id=1444): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x44) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x4ff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x181083) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x40045702, &(0x7f0000000040)) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x40, &(0x7f0000000040)=ANY=[]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1018, 0x8) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000100)={0x0, 0xaf1, 0x322, 0x0, 0x1}) 6.743460928s ago: executing program 5 (id=1445): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) (async) close(r0) (async) r1 = inotify_init1(0x80800) (async) fcntl$setstatus(r0, 0x4, 0x2c00) (async) r2 = gettid() fcntl$setown(r0, 0x8, r2) (async, rerun: 64) fcntl$setsig(r1, 0xa, 0xe) (rerun: 64) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) (async, rerun: 32) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) (rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xfb, 0x21, 0x419}}}, 0x7) (async) r3 = socket(0xa, 0x3, 0x3a) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r4, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async, rerun: 32) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (rerun: 32) recvfrom(r6, &(0x7f00000023c0)=""/231, 0xe7, 0x20, 0x0, 0x0) (async, rerun: 32) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) (async, rerun: 32) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) (async) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) rmdir(&(0x7f0000000100)='./control\x00') 6.073101258s ago: executing program 5 (id=1446): openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000040)={0x7fff, 0xfb6f, 0x5}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000068f000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000690000/0x4000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f000068d000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffffd7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40000) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x6097, 0x4, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi4\x00', 0x20000, 0x0) ioctl$COMEDI_CMDTEST(r3, 0x8050640a, &(0x7f00000032c0)={0x8, 0x80, 0x20, 0x8, 0x80, 0x0, 0x100, 0xb, 0x2, 0x2, 0x10, 0x80000001, 0x0, 0x0, 0x0}) 5.966924774s ago: executing program 2 (id=1447): syz_emit_ethernet(0x426, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) ppoll(&(0x7f0000000080)=[{r1, 0x800}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000580)=0x8) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e25f01403767010066de0102030109026800020002000009044a00037d998b07052406000005240000000d240f0100000000000000000009050e0300040200010905000000000000000905feff"], 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x1) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a54000000060a0b04000000000000000002000000200004801c0001800960ca674c84244af8c70001006d617371000000000c000280080003400000000a0900010073797a30000000000900020080797a3200000000050007400000000000000100000a00"/133], 0x7c}}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0xfff, 0x9, 0x0, 0x1, 0x100000001, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x3], 0x0, 0x8340}) ioctl$KVM_RUN(r6, 0xae80, 0xf00000000000000) 5.95962181s ago: executing program 5 (id=1448): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x93, 0x0, 0xf, "100056f200"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8002) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xfd7c0}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={0x3, 0xfffffff8, 0x0, 0x401, 0x7, "bb40af00008000"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x8070bd25, 0x6, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0xfffb, 0xfffffffd, @loopback}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x9, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0x7fff, @loopback, 0x3}}}, 0x118) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 5.621222803s ago: executing program 0 (id=1449): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) clock_gettime(0x0, &(0x7f0000000140)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x200a0204) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) syz_emit_ethernet(0xfdf, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r3, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="09032bbd7000000000001d0000001800018014000200697036746e6c30"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) 4.477249121s ago: executing program 0 (id=1450): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x60840, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000200)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) close(0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006180)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x11}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) fcntl$setlease(r1, 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r6 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0xadb, 0x8, 0x5, 0x8000080}, &(0x7f0000000400), &(0x7f0000000000), &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r7, 0x0) io_uring_register$IORING_REGISTER_NAPI(r6, 0x1b, &(0x7f0000000040)={0x0, 0x40}, 0x1) 2.648584802s ago: executing program 4 (id=1451): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x12) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x300b, 0x4}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x24, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 2.621455921s ago: executing program 2 (id=1452): r0 = syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cae, 0x40, 0x5, 0xd6}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, 0x0, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x11, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000003000), 0x0, 0x2}, 0x1) 2.484120437s ago: executing program 5 (id=1453): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x98}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x18}, 0x0) r7 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x80, 0x0, 0x8000399}) io_uring_register$IORING_UNREGISTER_RING_FDS(r7, 0x15, 0x0, 0x0) 1.913617007s ago: executing program 0 (id=1454): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x29, 0x37}], 0x10}}], 0x1, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) chdir(&(0x7f0000000300)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474203, 0x408}, 0x18) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4018aee2, &(0x7f0000000100)) write$binfmt_register(r2, &(0x7f0000000400)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x6, 0x3a, '\f8\x19\x9b\x81\xba%\xfb\x158\xd22C\xde\xd1\x9bf\xb3\xa6_Tt\x97\xe02t\x87\xd0\x14\xce\xeb\x12\x18\xab\xa6m\xc6\xbcN\x7f\xa0\x14\xd3i\xc2$\x89\x17\xae0H\xb4\xaeq\xba\xcd\xd1\xca8d@n<\x97\xafC\xbae\xb95I\x92\x7f\tM\xdf\xb2\xb1\xc4{fl\x0fe\xec\x95\x14}\xbbx\xd5S\xac3\xe0\xd9\xcfl\xddY\xe2\xa7\xbc8P^\xd2\xdd\x1d\xfe;\x93;\xbdu\x10\xf1Q\xda\xd5', 0x3a, 'syz0\x00', 0x3a, './file0', 0x3a, [0x5, 0x4f, 0x50, 0x46, 0x4f]}, 0xa9) 1.511651684s ago: executing program 1 (id=1455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x80000000, "14e6498c270e00e2fff9cc808000000000000000040000002be8ffffffffffff", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x80, "22b03e7eb2662fa53078e040754f4e7348e1d758c14e36dc359c17b263cd401d", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000005c0)={0x1, 0x0, [{0xb3d6f7a7dc543318, 0x0, 0x0}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty=0xff03, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0xfffffffffffffffe, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x40, 0x100008b}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) 1.407028042s ago: executing program 2 (id=1456): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b000003a3846000904"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000035000100fcff070004000000010000000800018004001080100003800c00478008005c00", @ANYRES32=0x0, @ANYBLOB="1ed1cedac05e3fd23a78040475c7cbecbacb03e3ceef1e63e0adccc5c4b8de9568d673d12b217af27982e8"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x80000003) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = dup2(r3, r3) read$FUSE(r5, &(0x7f0000008400)={0x2020}, 0x2020) 1.402294621s ago: executing program 4 (id=1457): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) unshare(0x62040200) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="318300000000000000001900000018000180140002006e6574644d7673"], 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xcf, 0x100, 0x30, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7800, 0x8, 0x80000001, 0x756}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x0, 0x101, 0x26, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8000, 0x8, 0x8}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @remote, @empty}, &(0x7f0000000480)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'pim6reg0\x00'}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) 312.998822ms ago: executing program 5 (id=1458): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) timer_create(0x0, 0x0, &(0x7f0000000300)) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, 0x0, 0x0) connect$netlink(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804c844) mprotect(&(0x7f00008b5000/0x4000)=nil, 0x4000, 0x9) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x2, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 268.234997ms ago: executing program 1 (id=1459): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x60840, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) io_setup(0x3, &(0x7f0000000200)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006180)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x11}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) fcntl$setlease(r1, 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0xadb, 0x8, 0x5, 0x8000080}, &(0x7f0000000400), &(0x7f0000000000), &(0x7f0000000000)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r8, 0x0) 251.63875ms ago: executing program 0 (id=1460): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1816c1, 0x1ff) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0xa, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x6, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000406010800739000000000000200000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) execve(&(0x7f0000000380)='./file1\x00', 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600"/20, @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) 1.857352ms ago: executing program 0 (id=1461): ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001740)='9', 0x1}, {&(0x7f00000002c0)='}', 0x1}], 0x2) r0 = getpid() syz_usb_connect(0x2, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, &(0x7f0000000180)={0x9, 0x6, 0x1, 0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a00)={0x238, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x26}}}}, [@NL80211_ATTR_TID_CONFIG={0x218, 0x11d, 0x0, 0x1, [{0x1c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0x7}, {0x7}, {0x4, 0x6}, {0x0, 0x2}, {0x1, 0x1}, {0x7}, {0x2, 0x3}, {0x3, 0xa}, {0x7, 0x3}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x5}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0x3}, {0x6, 0x7}, {0x6, 0x1}, {0x2, 0x7}, {0x1, 0x5}, {0x7, 0x7}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x9}, {0x5, 0x8}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x4}, {0x0, 0xa}, {0x6, 0x8}, {0x5, 0x5}, {0x4, 0x3}, {0x6, 0x2}, {0x6, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0xa}, {0x4}, {0x2, 0x1}, {0x0, 0x6}, {0x5, 0x3}, {0x0, 0x5}, {0x5, 0x4}, {0x2}, {0x6, 0x9}, {0x2, 0x2}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x0, 0x3}, {0x6, 0x3}, {0x1, 0x4}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x49, 0xfffe, 0x3, 0x6, 0x7fff, 0xe, 0x41]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0xa}, {0x5, 0x5}, {0x2, 0x7}, {0x5, 0x5}, {0x4, 0x2}, {0x1, 0x9}, {0x1}, {0x5, 0x7}, {0x2, 0x9}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x4, 0x6}, {0x6, 0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x7}, {0x5, 0x3}, {0x6, 0x6}, {0x4}, {0x5, 0x6}, {0x1, 0x5}, {0x3, 0x7}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x4}, {0x3, 0x6}, {0x4, 0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x3, 0x4}, {0x0, 0x1}, {0x3, 0x4}, {0x5, 0x6}, {0x4, 0x3}, {0x5, 0x2}, {0x1, 0x5}, {0x6, 0x2}, {0x1, 0x4}, {0x3, 0x8}, {0x6, 0xa}, {0x1, 0xa}, {0x3}, {0x2, 0x3}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x5}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x36, 0x6c, 0x6, 0xe, 0x1b, 0x6c, 0x0, 0xc, 0x30, 0x6c, 0x16, 0x48, 0x6c, 0x16, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x6, 0xb, 0x2, 0x47]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x403, 0x1, 0xc, 0xcbd9, 0x4, 0x9, 0x652]}}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x9}, {0x2}, {0x2, 0x7}, {0x2, 0x2}, {0x4, 0xa}, {0x3, 0x2}, {0x1, 0x9}, {0x1}, {0x3, 0x7}, {0x7, 0x2}, {0x3, 0x5}, {0x2, 0x3}, {0x5, 0x7}, {0x6}, {0x6}, {0x3}, {0x2, 0xa}, {0x0, 0x2}, {0x5}, {0x5, 0x3}, {0x7, 0x3}, {0x3, 0x4}, {0x6, 0x1}, {0x1, 0x5}, {0x3, 0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x4}, {}, {0x1, 0x3}, {0x0, 0x4}, {0x4}, {0x2, 0xa}, {0x1, 0x6}, {0x4, 0xa}, {0x2, 0x3}, {0x7, 0x2}, {0x3, 0x8}, {0x6}, {0x7, 0x4}, {0x7}, {0x2}, {0x0, 0x9}, {0x6, 0x2}, {0x7, 0x3}, {0x4, 0x2}, {0x2, 0x7}, {0x6, 0x5}, {0x6, 0x1}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x8}, {0x1, 0x9}, {0x3}, {0x4, 0x3}, {0x5}, {0x2, 0x5}, {0x0, 0x1}, {0x5, 0x8}, {0x3, 0x5}, {0x7, 0xa}, {0x4, 0x3}, {0x4, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x5}, {0x6, 0x5}, {0x1, 0x6}, {0x7, 0x5}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x4, 0x4, 0x2ee, 0x6, 0x0, 0x211, 0xffff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x2, 0x8, 0x5, 0x2, 0x8, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xec}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0xe0}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}]}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x20000010}, 0x40804) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@local}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'dummy0\x00'}}}, {{@uncond, 0x0, 0x2c8, 0x328, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x0, [{}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}]}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) move_pages(r0, 0xb, &(0x7f0000000300)=[&(0x7f0000900000/0x1000)=nil, &(0x7f00002f4000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006e0000/0x1000)=nil, &(0x7f000090f000/0x1000)=nil, &(0x7f00003c1000/0x4000)=nil, &(0x7f00006b9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000655000/0x1000)=nil, &(0x7f0000098000/0x3000)=nil], 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) memfd_create(0x0, 0x8) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0xb, 0x380000, 0x8, 0x7fffffff, 0xfffffffffffffff7, 0x9, 0x2, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04d, 0xffff, 0x80000000, 0xbb2, 0xffffffffffffffff, 0x4000000006, 0x0, 0x100, 0x4, 0x2, 0x80005, 0x3, 0xc, 0xb}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0x6, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffdfffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) shutdown(r4, 0x1) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r5, 0x8001af71, &(0x7f00000000c0)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xe) 0s ago: executing program 5 (id=1462): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x4, [0xd3, 0x7fff, 0x1, 0x400, 0x3, 0x4, 0x81a7, 0x400, 0x9, 0x8ca8, 0x3, 0x2, 0x8, 0x8fb, 0xd43, 0xf001, 0x1ff, 0x9, 0x3, 0x5, 0x3, 0x7, 0xc5, 0x2, 0x6, 0x32c, 0xff80, 0x1, 0x7, 0x10, 0x3, 0x2, 0xe, 0x8, 0x3, 0x3, 0x400, 0x5, 0x2, 0x0, 0x0, 0x300, 0xbdd6, 0x1, 0x7fff, 0x9, 0x7, 0x7], 0x6}) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x1019, &(0x7f0000001140)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x0, 0x0, 0x1}}, {@x25={0x805, {0x1, 0x3, 0x0, "6c7ab2a0282689373120a73a9ae5d78fb6edd3da4337e41a8dddb4116e4e43a0431cbb124ef9f162e0629118be447874c664159d640978fae5e7b3d737a4a113271a2fd75c2a8816dd7a50bf3fa5868df4d893b9e65646ae548e42ce6843715c270d8f9338d3fde88034bbe0d44aaca027e32b2948e65032be69199f39d13e67d3b9b306af2fe20d52b42c510b46ae4bb90ff5c5763499a4805c469ac31a6823d380cfd4ae1bae8110991f3b9b6636889ca0a01371a8ee65db250088a71311d49d43fb0044ec48768882b55ec7682a33dbd5ec606b519b564210a8c6aa8a480819b5ca697d7da157040d8e3d31bf668c1bafcc61a9600dda542295c13135f084ec6f4208f6e59e6f8b285b1214dfa8337fc7f20aae1bb7ba475a25ec61a08e50ffe1999579c3ee43980bddb6c1f3e882fca31ee0895dc01501e72b8c8556dac43a9b22e21467791b2b8431a50161472cd30660ba4e6d148e9387a6fc3f60544fc489d3c72a08bc78a96ebf94a5108c03a392dd2c250119d9feed68653bde7ad7844ce8791cd495ebbe5ad3ba6f8d0fcdbda72c65820709d6233bb7eb1aab90ae6c36a219b7ef383e3f9d5a717d817aacc7b9cba9b5bc3f4021dd59368f52be65494388f4665c4129091112ca5941a2cfb8849a79e8a181adeae8da76228449080877e8a937eb59ef672a28ea1679be183c3c09c8c51247c211878d874fc6625ea2673ccf5d55ea637d6fb46c99df3f3e2c20d65a09e778d68f182410a8afb714b1088eabbc45017d923aaaf547affbebff8a2a7435141916929ccf9939521e2d3c1d1f710de7be1cab36f800dff2e5490c3272d68d987cb8efcaaff8570f2fb3a686a688e1d7a446ae3ac141e217f00b3c986317ff0e234a555d802de3e8b1d01f5ea52c261763f93b900527aab352413b9ae94c8294ce7ad372310a5e11a137e7ed7e89900b1ee75174faf691a1388487ffef8870fe9d8dcd826bc2b4efdda1b9564c037db2a4bf74dcbd2e813bf3e649756dd1dbb78eff9322b14b9c97a876896b8b4aa8cbaed4621739e5bcd0d00317fd3d5eddd190d94badc5ec047f9d91980b10b7e37393585b30c228ed854fffff427bae784bbbc6897df75c7fabb4dc8227201b47515d01594577ec78d3e393ea9d68fafd579c448e3a01557f8fb715a1c9f3a8f2d66c1e2321da0059a0de39dc097ec9d11bc2133f41f72935d077d2b94f3b69bb2c0807e14bddc3d80043ae7b999054a39892eca0d42723e17168f0ecd52ddddbee52bb5532134221cc6bad733d3e2e89e62d65e1671c8b7d84788cdc5e7dfdb3fcb0faff0417336ba63d753d47a7cdf7a599b16ef7713a57e5f0fd0d5bc719912c7646fb8c1610d341f2813497837205968ca3addd42f90cfc13783231ef89a570a24d5967dd21d9ac64661db6d10d52b2a1d10f190254914d7f3c39ba17f44e1610cf76a51e436d7e2c644b64b5c57322b3b535b467517baceb99428737e10ab975c4d89b48509d227a6c601ca109bcc9ff48e933bc9971c2dbec0ad246a0e65647036eb62418ce3da7f452aa91b9ba39997ea5b0a82ac7bcff81a119d9dc1ebc7f3f82f4ad9009740ea4f38faa445033039820055b85739015f4b60a444d9aa41624274bc96ed2dd5c677a174962f1f404e55825cc4d9440f9a8ca93af4c164803d99bd967fc7e63cd85bf4f340a962fb59fc4aefd6f429b5ae4fbe3cf89a49ceb47eb2f38535147f12c957172c728b476cca37bbafaf9841112dfd9c3a9896990c733b204ecad5e3d4e121c7d711e74eb75bf8b723c327ae34c539b4062197099f3450a1093f5cad1073c294387f3eca3dd51e268d2324b20e5bb9768337818e22892f3e3e98d6f92350fb059129899b909e789e7e5e8459804d8eb674ad46a9d615f2219796a41c6f3e947312471763093b033a229976ccf40006262752c4e91f4af68d995b017bbfec41cc75227da8308bd7a502d3bbd5091cb13aaf195ae345dde98f2d4595723ff911e0442a536e8a45f28a049fe89f2fd316ec03b395e132706322525ed737ad6b1495c8167d95b421a93039dcdf53586d4fbb9ef379f3796eaa272d5708549d57d8c38732237898c1b125219c4b937de01c34e4eb57b6fccffb7bedbc66532854f1e084d90b6ce712f503e817025eb1aac8f19306ece6feb7ad7bfdee36fef2093fb683807b22107ebb6456779e6c7df620442d4b36a329f6968f23c1325cd547d3e0a6dca04bb8f05d4edefe5a0e7c466fe3afe833be61271c4aac0914cacb6bba9f9b9fc763bad7b6277abc6e97e00ad013c7f3a8146a639ce7610a8c4d01aa5b528d597e004c7a916ba55429bb0fe86fcfdd20b9d9e5ba306caed4fb629b1ad6d1d66ba95f61e919a31639634432dd2d8beeb98ec39575b83406f87a57d45a8c3277b75d2ddb8d8af5cede2ecf41bef8b257b3ee618de36c7230c11dc9928167e3f09233b38579b4628e665867affdfc2dad317385bb0d7e58125f62121b2f54b254042b960c8f1cb05521cc00dfc18ff6b1e95938f6a4b974cbce53eaaaa69e09ab060236e349a784701793d54eb0463850dd4f3fa0d37230a96ae6a125d51d5cb6b882a37d61b2363ecc12437ac2e40e893d75accee4209c09a4d23effae0e47058736fb1a69ee300dd3a75980051fc0c132a956a81b88bf56c7597f1bb29f188306bde5e9788a2a0a95cc8a98bb20de9a1ee790896bb8c0048c5d4d0c0afdf0e966cc5a785e48becb233e8bb029d15b7f1d158f65641aa139ca45d282d7503fd3061c87fea8bfeadd8db56e67da70a3854ca06c78c21b2440d049debb937b7dd4d55c1efd65887f55fca626d653cc170d5b7589816ef8d1a813d89860b1ee4047f0a00ddbad9782f7faee91f5220b6875f9f56e167fa17f1f2c69696bf457480d3f8f0d5aafd4e341ab21ac57fa623d0d25097b959d60d4eb787c313d1773cd6a7445e7f1620893dce50e64814219f2380e6f8f6368ed9ff2951f3a987cb378e784aa5cbfb3e808b31c0383d9b8afa15de27e25a2c7e5dc2e34c2a952cfcba3413c54c9d5537fdf26f533d7753bf6cc53c9a9e7dc8007bdeb4cf291d27c9bc7bb3a5aa090d6aa87ce6e9ad9937bee9de92d152d818498f4b7dffe09e77ac97cfb4680c0571b8b856d986225dd52eb18237b2a76fb8b8020e559cab708b33d0e0cf34cecd71a3db0787a8b59c71b53589e8eaf31c93dd22754416f4141bd359282b6aae7629b121f0b1b581b758e4ddd09c6b4357393e19e7b6252c2ec7154831fc327c0eb9165704d3dfbab1864a6bf0beb910cf0c72215b46f64c42dcfee52cf40d88ef559ffef3b33d01c2f394510feee0a00e56fca1ae34ef71983e6046e0663a47c0e802932b1bea5eefc2873756230bda0f17928b3d70706be3a77c24ab75019517f5a4c55f3b21a1159a8f81c70906c059d4794193a1d9659bc8298bd74e66d27598eb63679fd907d64c67b150520d71984b162b42ca09d8a77a1b2e42520183f976fc4a6c86f398e0f073b8aaf949d28dbdfcae25cc7177dd86c7b6e2ee16103ff85a59ab6b1e463722991c71ce493c6488fea324cc5b79754b51c4cbf5ae9279011ec9d5a82dd1f6b1308a4bf9836105b7d4c4be950eddae2c5be10e3165ea2ee337ecf2c20c0baad6d24d9dfb02fa092f6b5b640971ca74e93d27b84580a9e72793678026a864b27e9d6ebbe44ca59edfe2ba7f303dc30de1d798d019eebe5be8ce2b205d1e0ec4b9f5e7a67fbc1baebbfff386f2b1801d3537080a4e14e1840d65c6a5ef8a35ea89ca4cf6fb0dbaefed02f27de7fe34728dd666290c6785d7795eb710e488227abc674c0bbe465d080371ea8db892838fa183f52a9af8d96dd7cca15c030246743175300c69355caf78d3be2eb9b088c4ddaaa8cb7045e727c5baef1d7809e8cb9df28cf37d8d93d83f73390d7b943c6d00df15d017785249ce317a890d79f5b133342f569d4886aac3916947d489cc49a248ff3eb40588d2bd6f2a9e44b86cb3dcdede19c0d9d4a3e6e546418f6e7c97dea7b21dd1cad06bac0b73e20dbf0e3c291ec610a3399d3cc44a08ac961abc7f85d8c5992692c3ce4f01d36c35b1f41cf1bfa7353c5d46f79a01b6e1458a4cd6d90226e3d8fccbd4c41304c766ad630768a027c7c45fe3edf62ec10c9c3ccd11e86ff6400383fc108eecf5a6bae8c12706dee65409ac76dcd31b0deb00562061da0348b3460506450a979d067717824516d9d919357508f0ff630a12cc6ee6eef05620a60dff4c52543e33fa505ac522545e72b1d2309ebba1074e91f7dea5b0f428cada594f032cc4a2dad8e7836a89d5b22f68dd88119e60fa744493e5216fcc627781582142fca60efdef3a6d69bcbc5bf2f988869346cf6c95f610bb96f27a92c0cd2fd019ccfe3f91b160d5a59f31fb1881660e2e596a502f3f3d8734598dedeabcbe35b29f5a8e1fb1d968116eb01024be1d87977ba214bf697a135f2077d3cdd99a278b292e86f478ed513523a8279f22e6d205fb401f780e3931214c448f596d476d460a815eaee7b500ee4bae572bda8da822dcf2496c26e37ef6a3ff9faf0043c7085eabfe3b6b090e1ad956c1aac87061b3c145fe1e8fb8f835b87d1ee3282d16fa1556c609fa9c025870b83c4c1cb3c8ee395446bb1af884cd53f9ba877e195807181a581733191a58621841348920b757079daf30936b6a120c0ccbdcca60b7f5e96a01577747d95953e5fd6ee0b6b5d0bad0643cb7a0c33146676426633e6fae5901bf8a0d00f98734e507853d5bc3a95840374d0c469c43a67f46cb2ffab958fd8ae5d93cb93338688ebc44880544df7630c4d5f43aa6b1b4b6b04ed8c4a65a55ebcdb20321e6c73cff55ec8db36fca720f75c883e76ae814ca5a4471ecb73eb206b30186cd476d4a6b0b9ffca7e4a90b54890a45017280742474f0526d507771ddc6b5a2d8d89ae862a7d4ec5e89bea36061e081f656e5f3db7da582c53b3678d54ac6843c1bff9d59a4e5a7871003f14317d3a536691341dfaf7d509fb0d87d264aec7603baacd432e00e912b8f35db33274317893a7b326561f57a8e27fc629e3bb5a7abeeb029e5e6e4123f68a8f54d741323e52ec84aa905a37cdf030724f8035e8c1265e685a5d916f993dd2b4f60505181eba6aa7b5cb0e2df8c5eef6efb1b10358fb1251859aeaea9b80c57b8f7ff2a6d22dba205ca053e9da9474186842eb31061a4626e0fa9a9d75f58ec2ac280c4c3bfb8d942cfbf231b5ecc3cc8b2a02728598d0a190fe3dbaa7f1b10a80236f33f0d02a0fa3855c75d315a83049a743be3ae13e0308448320eda05cb1a859c3030b538f912bb30816f13eab3ed2955daced22b7a8d1a7b9f8c55ca3677974d59ffb55d68432cb2122d15cd1a844ff2fe88a625b5c2980b890af9c18ccbc69270d0f5f95eac73e1e0515833eee0da6f924d26a314d2f4102965dc42e94261bdcb6e9fe0a62d47c90e11283a7efebb566eb0263e9e8086f6225744ce3d5c6bb41e5711dfb9df402d572f519bf646a778836a9c4308c3bd91390296e4658d1d2caf7c9fa2be32e335790e61aef5c2b94e7672477c2e870339e6f552790212eac0e553d393ebcad2360ce8470db1edea4c8dc5bc46ecbf4955fd7edf08257c0000ad6dc59c338960db13d663d8189b8edc73ad72466b2fb77cddcda211d0b4c86f68768a5fc797e1d321f7b4345ab6e7389f51177d74f868a7bd35dedd5cc363f2d8c239bb4044e85fec8c43947d3d2b99d3264622a8d34f"}}}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r1, 0x0, 0xff00) kernel console output (not intermixed with test programs): 58 [ 423.775234][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.796338][ T9] usb 1-1: config 0 descriptor?? [ 423.802439][T11831] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 423.868880][T11840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.700294][T11852] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 426.049596][ T5612] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 426.078355][ T24] usb 1-1: USB disconnect, device number 25 [ 428.273182][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 428.811000][T11906] block nbd4: NBD_DISCONNECT [ 428.903224][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 428.915391][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.927099][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 428.973331][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 429.006664][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.062746][ T9] usb 3-1: config 0 descriptor?? [ 429.096509][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 429.393285][T11921] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1111'. [ 429.509555][T11925] 9pnet_fd: Insufficient options for proto=fd [ 430.232211][T11954] FAULT_INJECTION: forcing a failure. [ 430.232211][T11954] name failslab, interval 1, probability 0, space 0, times 0 [ 430.245153][T11954] CPU: 0 UID: 0 PID: 11954 Comm: syz.1.1107 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.245179][T11954] Tainted: [L]=SOFTLOCKUP [ 430.245186][T11954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 430.245196][T11954] Call Trace: [ 430.245202][T11954] [ 430.245209][T11954] dump_stack_lvl+0x100/0x190 [ 430.245235][T11954] should_fail_ex.cold+0x5/0xa [ 430.245259][T11954] should_failslab+0xc2/0x120 [ 430.245279][T11954] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 430.245305][T11954] ? alloc_inode+0x183/0x250 [ 430.245328][T11954] alloc_inode+0x183/0x250 [ 430.245346][T11954] new_inode+0x22/0x1c0 [ 430.245365][T11954] ramfs_get_inode+0x28/0x2f0 [ 430.245386][T11954] ? security_inode_create+0xc4/0x280 [ 430.245415][T11954] ramfs_mknod+0x56/0x170 [ 430.245437][T11954] ? __pfx_ramfs_create+0x10/0x10 [ 430.245458][T11954] lookup_open.isra.0+0xc47/0x11b0 [ 430.245483][T11954] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 430.245507][T11954] ? __pfx___might_resched+0x10/0x10 [ 430.245531][T11954] ? mnt_get_write_access+0x52/0x2f0 [ 430.245554][T11954] ? __pfx_down_write+0x10/0x10 [ 430.245569][T11954] ? mnt_get_write_access+0x1e9/0x2f0 [ 430.245591][T11954] path_openat+0x2291/0x31a0 [ 430.245617][T11954] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 430.245637][T11954] ? __pfx_path_openat+0x10/0x10 [ 430.245668][T11954] do_file_open+0x20e/0x430 [ 430.245693][T11954] ? __pfx_do_file_open+0x10/0x10 [ 430.245731][T11954] ? _raw_spin_unlock+0x28/0x50 [ 430.245753][T11954] ? alloc_fd+0x476/0x790 [ 430.245782][T11954] do_sys_openat2+0x10d/0x1e0 [ 430.245808][T11954] ? __pfx_do_sys_openat2+0x10/0x10 [ 430.245835][T11954] ? __fget_files+0x21f/0x3d0 [ 430.245862][T11954] __x64_sys_open+0xfe/0x1d0 [ 430.245885][T11954] ? __pfx___x64_sys_open+0x10/0x10 [ 430.245908][T11954] ? ksys_write+0x1ac/0x250 [ 430.245931][T11954] ? rcu_is_watching+0x12/0xc0 [ 430.245959][T11954] do_syscall_64+0x10b/0xf80 [ 430.245983][T11954] ? clear_bhb_loop+0x40/0x90 [ 430.246004][T11954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.246021][T11954] RIP: 0033:0x7fea15d9ce59 [ 430.246037][T11954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.246053][T11954] RSP: 002b:00007fea16cae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 430.246072][T11954] RAX: ffffffffffffffda RBX: 00007fea16016180 RCX: 00007fea15d9ce59 [ 430.246083][T11954] RDX: 0000000000000000 RSI: 40000400000006c2 RDI: 0000200000000840 [ 430.246093][T11954] RBP: 00007fea16cae090 R08: 0000000000000000 R09: 0000000000000000 [ 430.246104][T11954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.246119][T11954] R13: 00007fea16016218 R14: 00007fea16016180 R15: 00007ffc2e531ee8 [ 430.246144][T11954] [ 431.399288][ T5827] usb 3-1: USB disconnect, device number 30 [ 432.002463][T11971] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1115'. [ 432.302762][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 432.500001][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 432.561113][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.657963][ T24] usb 2-1: config 0 descriptor?? [ 432.866489][T12016] IPv6: NLM_F_REPLACE set, but no existing node found! [ 433.136882][ T24] ath6kl: Failed to submit usb control message: -71 [ 433.168396][ T5827] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 433.172187][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 433.224308][ T24] ath6kl: Unable to send get target info: -71 [ 433.258903][ T24] ath6kl: Failed to init ath6kl core: -71 [ 433.296430][ T24] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 433.380241][ T30] audit: type=1400 audit(1779408601.667:1404): avc: denied { read write } for pid=12054 comm="syz.0.1121" name="mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 433.416290][ T24] usb 2-1: USB disconnect, device number 35 [ 433.453120][ T5827] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 433.493480][ T30] audit: type=1400 audit(1779408601.667:1405): avc: denied { open } for pid=12054 comm="syz.0.1121" path="/dev/input/mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 433.533610][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.601816][ T5827] usb 5-1: config 0 descriptor?? [ 433.622645][ T30] audit: type=1400 audit(1779408601.780:1406): avc: denied { map } for pid=12054 comm="syz.0.1121" path="/dev/input/mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 434.857967][ T5612] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 435.034922][T12081] blktrace: Concurrent blktraces are not allowed on sg0 [ 435.185592][ T5827] ath6kl: Failed to submit usb control message: -110 [ 435.317053][ T5827] ath6kl: unable to send the bmi data to the device: -110 [ 435.324250][ T5827] ath6kl: Unable to send get target info: -110 [ 435.359837][ T5827] ath6kl: Failed to init ath6kl core: -110 [ 435.371487][ T5827] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 435.449706][ T5827] usb 5-1: USB disconnect, device number 35 [ 435.645791][T12103] binder: 12095:12103 ioctl c0306201 200000000040 returned -22 [ 435.659783][T12103] binder: 12095:12103 ioctl c0306201 200000000640 returned -22 [ 436.094643][ T30] audit: type=1400 audit(1779408604.212:1407): avc: denied { read } for pid=12095 comm="syz.2.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 436.187030][ T30] audit: type=1400 audit(1779408604.296:1408): avc: denied { read write } for pid=12108 comm="syz.0.1126" name="vbi1" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 436.306749][ T30] audit: type=1400 audit(1779408604.296:1409): avc: denied { open } for pid=12108 comm="syz.0.1126" path="/dev/vbi1" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 436.391121][ T30] audit: type=1400 audit(1779408604.343:1410): avc: denied { read } for pid=12108 comm="syz.0.1126" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 436.515129][ T30] audit: type=1400 audit(1779408604.343:1411): avc: denied { open } for pid=12108 comm="syz.0.1126" path="/dev/nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 436.626201][ T30] audit: type=1400 audit(1779408604.352:1412): avc: denied { read write } for pid=5611 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 436.730645][ T30] audit: type=1400 audit(1779408604.362:1413): avc: denied { open } for pid=5611 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 436.834859][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 437.027562][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 437.056541][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 437.094644][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.138145][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.179851][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.221367][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.255225][ T10] usb 5-1: Product: syz [ 437.278634][ T10] usb 5-1: Manufacturer: syz [ 437.464207][ T10] usb 5-1: SerialNumber: syz [ 437.820133][ T10] usb 5-1: 0:2 : does not exist [ 438.698409][ T2878] block nbd0: Possible stuck request ffff888027ee0000: control (read@0,1024B). Runtime 30 seconds [ 438.712284][ T2878] block nbd0: Possible stuck request ffff888027ee01c0: control (read@1024,1024B). Runtime 30 seconds [ 438.725032][ T2878] block nbd0: Possible stuck request ffff888027ee0380: control (read@2048,1024B). Runtime 30 seconds [ 438.736369][ T2878] block nbd0: Possible stuck request ffff888027ee0540: control (read@3072,1024B). Runtime 30 seconds [ 438.774526][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 438.774554][ T30] audit: type=1400 audit(1779408606.719:1458): avc: denied { read write } for pid=12154 comm="syz.0.1135" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 438.813934][ T30] audit: type=1400 audit(1779408606.757:1459): avc: denied { open } for pid=12154 comm="syz.0.1135" path="/dev/sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 438.841387][ T30] audit: type=1400 audit(1779408606.757:1460): avc: denied { create } for pid=12154 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 438.863480][ T30] audit: type=1400 audit(1779408606.757:1461): avc: denied { setopt } for pid=12154 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 438.884253][ T30] audit: type=1400 audit(1779408606.785:1462): avc: denied { write } for pid=12154 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 439.080116][T12161] blktrace: Concurrent blktraces are not allowed on sg0 [ 441.309694][ T30] audit: type=1400 audit(1779408607.000:1463): avc: denied { create } for pid=12154 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 441.335150][ T30] audit: type=1400 audit(1779408607.000:1464): avc: denied { write } for pid=12154 comm="syz.0.1135" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 441.400928][ T5741] usb 5-1: USB disconnect, device number 36 [ 441.545280][ T30] audit: type=1400 audit(1779408607.000:1465): avc: denied { ioctl } for pid=12154 comm="syz.0.1135" path="/dev/sg0" dev="devtmpfs" ino=747 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 441.655802][ T30] audit: type=1400 audit(1779408607.028:1466): avc: denied { create } for pid=12154 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 441.740968][ T30] audit: type=1400 audit(1779408607.028:1467): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 441.834352][T12187] netlink: 'syz.2.1139': attribute type 1 has an invalid length. [ 442.112031][T12187] 8021q: adding VLAN 0 to HW filter on device bond4 [ 442.275358][T12199] IPv6: NLM_F_REPLACE set, but no existing node found! [ 442.392370][T12253] FAULT_INJECTION: forcing a failure. [ 442.392370][T12253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.441330][T12253] CPU: 0 UID: 0 PID: 12253 Comm: syz.1.1141 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.441358][T12253] Tainted: [L]=SOFTLOCKUP [ 442.441364][T12253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.441373][T12253] Call Trace: [ 442.441378][T12253] [ 442.441388][T12253] dump_stack_lvl+0x100/0x190 [ 442.441413][T12253] should_fail_ex.cold+0x5/0xa [ 442.441436][T12253] _copy_from_user+0x2e/0xd0 [ 442.441463][T12253] copy_msghdr_from_user+0x9f/0x4f0 [ 442.441487][T12253] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 442.441520][T12253] ___sys_sendmsg+0x106/0x1e0 [ 442.441545][T12253] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.441592][T12253] __sys_sendmsg+0x170/0x220 [ 442.441611][T12253] ? __pfx___sys_sendmsg+0x10/0x10 [ 442.441637][T12253] ? rcu_is_watching+0x12/0xc0 [ 442.441665][T12253] do_syscall_64+0x10b/0xf80 [ 442.441688][T12253] ? clear_bhb_loop+0x40/0x90 [ 442.441708][T12253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.441725][T12253] RIP: 0033:0x7fea15d9ce59 [ 442.441739][T12253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.441755][T12253] RSP: 002b:00007fea16cf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.441772][T12253] RAX: ffffffffffffffda RBX: 00007fea16015fa0 RCX: 00007fea15d9ce59 [ 442.441783][T12253] RDX: 0000000020000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 442.441793][T12253] RBP: 00007fea16cf0090 R08: 0000000000000000 R09: 0000000000000000 [ 442.441802][T12253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.441811][T12253] R13: 00007fea16016038 R14: 00007fea16015fa0 R15: 00007ffc2e531ee8 [ 442.441834][T12253] [ 442.623097][T12245] binder: 12244:12245 ioctl c0306201 200000000040 returned -22 [ 442.631081][T12245] binder: 12244:12245 ioctl c0306201 200000000640 returned -22 [ 442.939965][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 443.219179][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 443.234218][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.323198][T12282] misc userio: Invalid payload size [ 443.328991][T12282] misc userio: No port type given on /dev/userio [ 444.285695][ T29] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 444.317855][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 444.317886][ T30] audit: type=1400 audit(1779408611.883:1516): avc: denied { create } for pid=12272 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 444.347852][ T5617] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 444.355257][ T5612] Bluetooth: hci5: command 0x1003 tx timeout [ 444.642852][ T10] usb 5-1: config 0 descriptor?? [ 444.819723][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 444.831912][ T29] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 444.841955][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.850680][ T29] usb 3-1: Product: syz [ 444.855413][ T29] usb 3-1: Manufacturer: syz [ 444.860498][ T29] usb 3-1: SerialNumber: syz [ 444.916637][ T29] usb 3-1: config 0 descriptor?? [ 444.960960][ T29] usb 3-1: selecting invalid altsetting 1 [ 444.974824][ T29] technisat-usb2: could not set alternate setting to 0 [ 445.033461][ T10] ath6kl: Failed to submit usb control message: -71 [ 445.060064][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 445.095680][ T10] ath6kl: Unable to send get target info: -71 [ 445.136017][ T30] audit: type=1400 audit(1779408612.669:1517): avc: denied { ioctl } for pid=12300 comm="syz.0.1146" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=27994 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 445.166607][ T10] ath6kl: Failed to init ath6kl core: -71 [ 445.434410][ T10] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 445.585027][ T10] usb 5-1: USB disconnect, device number 37 [ 445.878738][ T29] technisat-usb2: firmware version: 28.160 [ 446.338239][T12312] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.384614][ T29] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 446.433098][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 446.465862][ T29] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 446.492856][ T29] usb 3-1: media controller created [ 446.498634][ T29] technisat-usb2: i2c-error: out failed 53 = -22 [ 446.509233][ T29] dvb-usb: MAC address reading failed. [ 446.526297][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 446.604626][ T29] DVB: Unable to find symbol stv090x_attach() [ 446.616437][ T29] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 446.789585][ T29] rc_core: IR keymap rc-technisat-usb2 not found [ 446.813924][T12333] netlink: 'syz.4.1148': attribute type 10 has an invalid length. [ 446.822088][T12333] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1148'. [ 446.834448][ T29] Registered IR keymap rc-empty [ 446.851537][ T29] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 446.936194][ T30] audit: type=1400 audit(1779408614.287:1518): avc: denied { write } for pid=12324 comm="syz.4.1148" name="config" dev="proc" ino=4026533466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 446.962336][ T29] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input26 [ 446.985308][ T29] dvb-usb: schedule remote query interval to 100 msecs. [ 446.994460][ T30] audit: type=1400 audit(1779408614.400:1519): avc: denied { create } for pid=12335 comm="syz.1.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 447.023536][ T30] audit: type=1400 audit(1779408614.409:1520): avc: denied { create } for pid=12335 comm="syz.1.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 447.050261][ T30] audit: type=1400 audit(1779408614.437:1521): avc: denied { read } for pid=4964 comm="acpid" name="event4" dev="devtmpfs" ino=3361 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 447.075612][ T30] audit: type=1400 audit(1779408614.437:1522): avc: denied { open } for pid=4964 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3361 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 447.280657][ T30] audit: type=1400 audit(1779408614.437:1523): avc: denied { ioctl } for pid=4964 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3361 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 447.342706][ T30] audit: type=1400 audit(1779408614.596:1524): avc: denied { write } for pid=12335 comm="syz.1.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 447.366108][ T30] audit: type=1400 audit(1779408614.596:1525): avc: denied { nlmsg_write } for pid=12335 comm="syz.1.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 447.498296][T12333] team0: entered promiscuous mode [ 447.504183][T12333] team_slave_0: entered promiscuous mode [ 447.510209][T12333] team_slave_1: entered promiscuous mode [ 447.516646][T12333] team0: entered allmulticast mode [ 447.522248][T12333] team_slave_0: entered allmulticast mode [ 447.528551][T12333] team_slave_1: entered allmulticast mode [ 447.535275][T12333] bridge0: port 1(team0) entered blocking state [ 447.541871][T12333] bridge0: port 1(team0) entered disabled state [ 447.553481][T12333] bridge0: port 1(team0) entered blocking state [ 447.560069][T12333] bridge0: port 1(team0) entered forwarding state [ 447.589179][ T29] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 447.600853][ T24] dvb-usb: error -32 while querying for an remote control event. [ 447.729437][ T5614] dvb-usb: error -32 while querying for an remote control event. [ 447.796054][ T10] usb 3-1: USB disconnect, device number 31 [ 447.945532][ T5614] dvb-usb: error -19 while querying for an remote control event. [ 448.150951][ T10] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 448.616588][T12395] blktrace: Concurrent blktraces are not allowed on sg0 [ 450.040973][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 450.041002][ T30] audit: type=1400 audit(1779408617.262:1605): avc: denied { kexec_image_load } for pid=12396 comm="syz.0.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 450.170350][ T30] audit: type=1400 audit(1779408617.384:1606): avc: denied { create } for pid=12400 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 450.357999][ T30] audit: type=1400 audit(1779408617.384:1607): avc: denied { write } for pid=12400 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 450.380200][ T30] audit: type=1400 audit(1779408617.580:1608): avc: denied { listen } for pid=12403 comm="syz.1.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 451.475289][ T30] audit: type=1400 audit(1779408618.600:1609): avc: denied { mounton } for pid=12447 comm="syz.0.1160" path="/231" dev="tmpfs" ino=1249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 452.017589][ T30] audit: type=1400 audit(1779408618.656:1610): avc: denied { create } for pid=12400 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 452.073684][ T5614] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 452.096623][ T30] audit: type=1400 audit(1779408618.825:1611): avc: denied { listen } for pid=12447 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 452.151632][ T30] audit: type=1400 audit(1779408618.834:1612): avc: denied { shutdown } for pid=12447 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 452.210581][ T30] audit: type=1400 audit(1779408619.143:1613): avc: denied { read write } for pid=12458 comm="syz.3.1161" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 452.280960][ T30] audit: type=1400 audit(1779408619.143:1614): avc: denied { open } for pid=12458 comm="syz.3.1161" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 452.282497][ T5614] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 452.355772][ T5614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.400381][ T5614] usb 2-1: config 0 descriptor?? [ 453.101240][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.109455][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.420582][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'. [ 453.431542][T12487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.681987][ T5612] Bluetooth: hci5: command 0x1003 tx timeout [ 453.693985][ T5617] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 453.807679][ T5614] ath6kl: Failed to submit usb control message: -110 [ 453.909527][ T5614] ath6kl: unable to send the bmi data to the device: -110 [ 453.945927][ T5614] ath6kl: Unable to send get target info: -110 [ 454.004909][ T5614] ath6kl: Failed to init ath6kl core: -110 [ 454.068840][ T5614] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 454.362723][ T5614] usb 2-1: USB disconnect, device number 36 [ 455.766368][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 455.766396][ T30] audit: type=1400 audit(1779408622.614:1700): avc: denied { bind } for pid=12521 comm="syz.2.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 457.286880][ T30] audit: type=1400 audit(1779408622.716:1701): avc: denied { name_bind } for pid=12521 comm="syz.2.1172" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 457.321548][T12531] blktrace: Concurrent blktraces are not allowed on sg0 [ 458.076976][ T30] audit: type=1400 audit(1779408624.784:1702): avc: denied { read } for pid=12539 comm="syz.1.1175" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 458.128417][ T30] audit: type=1400 audit(1779408624.784:1703): avc: denied { open } for pid=12539 comm="syz.1.1175" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 458.156089][ T30] audit: type=1400 audit(1779408624.803:1704): avc: denied { ioctl } for pid=12539 comm="syz.1.1175" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 458.368216][T12547] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 458.476765][ T30] audit: type=1400 audit(1779408625.149:1705): avc: denied { write } for pid=12551 comm="syz.0.1177" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 458.532808][T12547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 458.617498][ T30] audit: type=1400 audit(1779408625.280:1706): avc: denied { read write } for pid=12551 comm="syz.0.1177" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 458.750819][ T30] audit: type=1400 audit(1779408625.280:1707): avc: denied { open } for pid=12551 comm="syz.0.1177" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 458.819969][ T30] audit: type=1400 audit(1779408625.308:1708): avc: denied { map } for pid=12551 comm="syz.0.1177" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 459.209294][ T30] audit: type=1400 audit(1779408625.308:1709): avc: denied { execute } for pid=12551 comm="syz.0.1177" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 460.388395][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1182'. [ 460.402025][T12610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.309110][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 461.309127][ T30] audit: type=1400 audit(1779408627.796:1784): avc: denied { setopt } for pid=12617 comm="syz.2.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 461.602807][ T30] audit: type=1400 audit(1779408628.068:1785): avc: denied { create } for pid=12620 comm="syz.2.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 461.828253][ T30] audit: type=1400 audit(1779408628.292:1786): avc: denied { mount } for pid=12626 comm="syz.3.1187" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 462.187876][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 462.238236][ T30] audit: type=1400 audit(1779408628.629:1787): avc: denied { connect } for pid=12620 comm="syz.2.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 462.261952][ T30] audit: type=1400 audit(1779408628.629:1788): avc: denied { ioctl } for pid=12620 comm="syz.2.1185" path="socket:[27541]" dev="sockfs" ino=27541 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 462.337141][ T30] audit: type=1400 audit(1779408628.751:1789): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 463.462772][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 463.664847][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 463.682428][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 463.722941][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 463.743337][T12658] netlink: 'syz.0.1193': attribute type 1 has an invalid length. [ 463.760606][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.802084][ T10] usb 2-1: config 0 descriptor?? [ 463.829426][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 463.925326][T12658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 463.951314][ T30] audit: type=1400 audit(1779408630.266:1790): avc: denied { ioctl } for pid=12637 comm="syz.4.1189" path="socket:[27567]" dev="sockfs" ino=27567 ioctlcmd=0x54d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 465.355991][ T30] audit: type=1326 audit(1779408631.576:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.2.1197" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773f19ce59 code=0x7ffc0000 [ 465.441674][ T30] audit: type=1326 audit(1779408631.594:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.2.1197" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773f19ce59 code=0x7ffc0000 [ 465.559715][ T30] audit: type=1326 audit(1779408631.594:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.2.1197" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773f19ce59 code=0x7ffc0000 [ 465.939737][ T5827] usb 2-1: USB disconnect, device number 37 [ 466.869712][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 466.869742][ T30] audit: type=1400 audit(1779408632.998:1893): avc: denied { accept } for pid=12712 comm="syz.3.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 466.928808][ T30] audit: type=1400 audit(1779408633.035:1894): avc: denied { write } for pid=12712 comm="syz.3.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 467.510323][ T30] audit: type=1400 audit(1779408633.596:1895): avc: denied { write } for pid=12739 comm="syz.1.1201" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 468.213647][ T30] audit: type=1400 audit(1779408634.139:1896): avc: denied { bind } for pid=12744 comm="syz.3.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 468.278903][ T30] audit: type=1400 audit(1779408634.139:1897): avc: denied { setopt } for pid=12744 comm="syz.3.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 468.614726][ T5741] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 468.829982][ T30] audit: type=1400 audit(1779408634.148:1898): avc: denied { ioctl } for pid=12744 comm="syz.3.1202" path="socket:[27595]" dev="sockfs" ino=27595 ioctlcmd=0x582a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 468.913887][ T5741] usb 4-1: Using ep0 maxpacket: 32 [ 468.950492][ T5741] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 468.982381][ T5741] usb 4-1: config 0 has no interface number 0 [ 469.257155][ T5741] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 469.293918][ T5741] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 469.317549][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 469.332323][T12763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.584043][ T5741] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 469.600833][ T5741] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 469.621308][ T5741] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 469.631443][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.640552][ T5741] usb 4-1: Product: syz [ 469.647457][ T5741] usb 4-1: Manufacturer: syz [ 469.652418][ T5741] usb 4-1: SerialNumber: syz [ 469.689016][ T5741] usb 4-1: config 0 descriptor?? [ 469.695274][T12748] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 469.716343][ T5741] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input27 [ 469.742403][ T4964] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 469.927462][T12745] ubi31: attaching mtd0 [ 469.939230][T12745] ubi31: scanning is finished [ 469.944055][T12745] ubi31: empty MTD device detected [ 469.961071][ T30] audit: type=1400 audit(1779408635.860:1899): avc: denied { append } for pid=12744 comm="syz.3.1202" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 470.133502][T12745] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 470.141139][T12745] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 470.148872][T12745] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 470.155985][T12745] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 470.163503][T12745] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 470.170535][T12745] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 470.178666][T12745] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4118258475 [ 470.188803][T12745] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 470.200626][T12774] ubi31: background thread "ubi_bgt31d" started, PID 12774 [ 470.221817][ C0] bcm5974 4-1:0.119: trackpad urb failed: -1 [ 470.266267][ C1] bcm5974 4-1:0.119: trackpad urb failed: -19 [ 470.310447][ T5741] usb 4-1: USB disconnect, device number 31 [ 470.857380][ T2878] block nbd0: Possible stuck request ffff888027ee0000: control (read@0,1024B). Runtime 60 seconds [ 470.871279][ T2878] block nbd0: Possible stuck request ffff888027ee01c0: control (read@1024,1024B). Runtime 60 seconds [ 470.882556][ T2878] block nbd0: Possible stuck request ffff888027ee0380: control (read@2048,1024B). Runtime 60 seconds [ 470.894056][ T2878] block nbd0: Possible stuck request ffff888027ee0540: control (read@3072,1024B). Runtime 60 seconds [ 471.368929][ T30] audit: type=1400 audit(1779408637.208:1900): avc: denied { map } for pid=12798 comm="syz.4.1209" path="socket:[27624]" dev="sockfs" ino=27624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 471.867120][ T30] audit: type=1400 audit(1779408637.208:1901): avc: denied { accept } for pid=12798 comm="syz.4.1209" path="socket:[27624]" dev="sockfs" ino=27624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 473.139726][ T30] audit: type=1400 audit(1779408638.873:1902): avc: denied { create } for pid=12812 comm="syz.2.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 473.205909][ T30] audit: type=1400 audit(1779408638.891:1903): avc: denied { ioctl } for pid=12812 comm="syz.2.1211" path="socket:[27643]" dev="sockfs" ino=27643 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 473.441066][ T30] audit: type=1326 audit(1779408639.153:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12829 comm="syz.3.1214" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60239ce59 code=0x7ffc0000 [ 473.525088][ T30] audit: type=1326 audit(1779408639.182:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12829 comm="syz.3.1214" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60239ce59 code=0x7ffc0000 [ 473.631791][ T30] audit: type=1326 audit(1779408639.182:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12829 comm="syz.3.1214" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60239ce59 code=0x7ffc0000 [ 473.781815][ T30] audit: type=1326 audit(1779408639.182:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12829 comm="syz.3.1214" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe60239ce59 code=0x7ffc0000 [ 474.030890][ T30] audit: type=1326 audit(1779408639.182:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12829 comm="syz.3.1214" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60239ce59 code=0x7ffc0000 [ 474.119826][ T30] audit: type=1326 audit(1779408639.228:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12829 comm="syz.3.1214" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60239ce59 code=0x7ffc0000 [ 474.151080][ T30] audit: type=1326 audit(1779408639.266:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12829 comm="syz.3.1214" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe60235d68e code=0x7ffc0000 [ 474.924566][ T30] audit: type=1326 audit(1779408639.266:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12829 comm="syz.3.1214" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe60235d68e code=0x7ffc0000 [ 475.768564][T12843] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 476.122576][T12857] ceph: No mds server is up or the cluster is laggy [ 476.133159][ T5741] libceph: connect (1)[c::]:6789 error -101 [ 476.146643][ T5741] libceph: mon0 (1)[c::]:6789 connect error [ 476.162308][T12840] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 476.260950][T12840] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 476.440560][T12840] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 476.503955][ T5827] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 476.883297][ T5827] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 476.925577][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 476.967676][ T5827] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 477.031887][ T5827] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 477.063718][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.111884][ T5827] usb 2-1: config 0 descriptor?? [ 477.127396][T12864] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 478.122175][T12864] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1220'. [ 478.154144][T12864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.241034][T12864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.854977][T12864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.900763][T12864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.010927][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 481.030284][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 481.043673][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 481.053507][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 481.063854][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 481.181118][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 481.196003][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 481.211530][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 481.224558][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 481.234329][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 481.258725][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 481.258740][ T30] audit: type=1400 audit(1779408646.460:1978): avc: denied { mounton } for pid=12903 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 481.444501][T12939] FAULT_INJECTION: forcing a failure. [ 481.444501][T12939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.462685][T12939] CPU: 0 UID: 0 PID: 12939 Comm: syz.2.1231 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.462711][T12939] Tainted: [L]=SOFTLOCKUP [ 481.462717][T12939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 481.462729][T12939] Call Trace: [ 481.462735][T12939] [ 481.462742][T12939] dump_stack_lvl+0x100/0x190 [ 481.462767][T12939] should_fail_ex.cold+0x5/0xa [ 481.462791][T12939] _copy_from_user+0x2e/0xd0 [ 481.462818][T12939] copy_msghdr_from_user+0x9f/0x4f0 [ 481.462842][T12939] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 481.462876][T12939] ___sys_sendmsg+0x106/0x1e0 [ 481.462900][T12939] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.462949][T12939] __sys_sendmsg+0x170/0x220 [ 481.462967][T12939] ? __pfx___sys_sendmsg+0x10/0x10 [ 481.462983][T12939] ? irqentry_exit+0x24d/0x7e0 [ 481.463021][T12939] do_syscall_64+0x10b/0xf80 [ 481.463043][T12939] ? clear_bhb_loop+0x40/0x90 [ 481.463063][T12939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.463079][T12939] RIP: 0033:0x7f773f19ce59 [ 481.463094][T12939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.463108][T12939] RSP: 002b:00007f773ff99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.463125][T12939] RAX: ffffffffffffffda RBX: 00007f773f416090 RCX: 00007f773f19ce59 [ 481.463136][T12939] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000009 [ 481.463145][T12939] RBP: 00007f773ff99090 R08: 0000000000000000 R09: 0000000000000000 [ 481.463155][T12939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.463164][T12939] R13: 00007f773f416128 R14: 00007f773f416090 R15: 00007ffe761bf1a8 [ 481.463186][T12939] [ 481.895232][ T5827] usbhid 2-1:0.0: can't add hid device: -71 [ 481.909326][ T5827] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 481.942225][ T5827] usb 2-1: USB disconnect, device number 38 [ 482.756011][ T5614] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 482.938647][ T5614] usb 2-1: Using ep0 maxpacket: 32 [ 482.961960][ T5614] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 482.990874][ T5614] usb 2-1: config 0 has no interface number 0 [ 483.016251][ T5614] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 483.045100][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.063860][ T5614] usb 2-1: Product: syz [ 483.095149][ T5614] usb 2-1: Manufacturer: syz [ 483.144252][ T5614] usb 2-1: SerialNumber: syz [ 483.169836][ T5614] usb 2-1: config 0 descriptor?? [ 483.210315][ T5614] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 483.232663][ T5614] usb 2-1: selecting invalid altsetting 1 [ 483.261731][ T5614] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 483.305222][ T5614] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 483.350560][ T5614] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 483.397441][ T5614] usb 2-1: media controller created [ 483.415904][T12969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.432835][T12969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.446250][ T30] audit: type=1400 audit(1779408648.509:1979): avc: denied { accept } for pid=12968 comm="syz.1.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 483.504720][ T5617] Bluetooth: hci4: command tx timeout [ 483.536745][ T5614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 483.646577][ T5614] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 483.684427][ T5614] zl10353_read_register: readreg error (reg=127, ret==-71) [ 483.727020][ T5614] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 483.947155][ T5614] usb 2-1: USB disconnect, device number 39 [ 483.963863][ T10] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 484.187733][ T10] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 484.265456][ T10] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 484.289620][T12903] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.311739][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.325545][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 484.341327][T12903] bridge_slave_0: entered allmulticast mode [ 484.370464][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 484.380157][T12903] bridge_slave_0: entered promiscuous mode [ 484.394208][ T10] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 484.404962][T12903] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.420155][ T10] usb 1-1: Product: syz [ 484.424606][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.441238][ T10] usb 1-1: Manufacturer: syz [ 484.448702][T12903] bridge_slave_1: entered allmulticast mode [ 484.457067][ T10] usb 1-1: SerialNumber: syz [ 484.473441][T12903] bridge_slave_1: entered promiscuous mode [ 484.482543][ T10] usb 1-1: config 0 descriptor?? [ 484.497908][T13042] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 484.548498][ T10] usb 1-1: selecting invalid altsetting 0 [ 484.584061][ T5714] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 484.615444][T12903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.653420][T12903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.761648][T12903] team0: Port device team_slave_0 added [ 484.767768][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 484.781797][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.803653][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.827217][T12903] team0: Port device team_slave_1 added [ 484.854605][ T5714] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 484.873666][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.927591][ T5714] usb 3-1: config 0 descriptor?? [ 484.962253][ T5714] hub 3-1:0.0: USB hub found [ 484.963626][ T5614] usb 1-1: USB disconnect, device number 26 [ 484.979868][T13042] usb 1-1: cannot submit urb 0, error -19: no device [ 485.006514][T12903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.029302][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.078963][T12903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.171488][T12903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.185817][ T5714] hub 3-1:0.0: 1 port detected [ 485.200341][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.246906][T12903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.316171][T12903] hsr_slave_0: entered promiscuous mode [ 486.986324][ T5617] Bluetooth: hci4: command tx timeout [ 486.987708][ T5714] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 487.053736][T12903] hsr_slave_1: entered promiscuous mode [ 487.075421][ T5714] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 489.021300][ T5714] usbhid 3-1:0.0: can't add hid device: -71 [ 489.042152][ T5714] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 489.138353][ T5714] usb 3-1: USB disconnect, device number 32 [ 489.148486][ T5617] Bluetooth: hci4: command tx timeout [ 489.492269][T13301] IPv6: NLM_F_REPLACE set, but no existing node found! [ 489.632606][T13341] netlink: 'syz.2.1245': attribute type 1 has an invalid length. [ 489.800864][ T5741] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 489.853449][T13341] 8021q: adding VLAN 0 to HW filter on device bond5 [ 489.976577][ T5741] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 489.989523][ T5741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.026311][ T5741] usb 1-1: config 0 descriptor?? [ 490.173035][T12903] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 490.210171][T12903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 490.218523][T12903] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 490.250963][T12903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 490.259048][T12903] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 490.293089][T12903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.303336][T12903] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 490.341468][T12903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.560023][ T29] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 490.585951][T12903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.637901][T12903] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.652040][T13423] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.659212][T13423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.696668][T13423] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.703866][T13423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.760427][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.925859][ T29] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 491.028460][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.057566][T13437] blktrace: Concurrent blktraces are not allowed on sg0 [ 491.112775][ T29] usb 3-1: Product: syz [ 491.151866][ T29] usb 3-1: Manufacturer: syz [ 491.230219][ T29] usb 3-1: SerialNumber: syz [ 491.255026][ T5741] ath6kl: Failed to submit usb control message: -110 [ 491.381719][ T5741] ath6kl: unable to send the bmi data to the device: -110 [ 491.490795][ T5612] Bluetooth: hci4: command tx timeout [ 491.542919][ T5741] ath6kl: Unable to send get target info: -110 [ 491.629831][ T5617] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 491.630556][ T29] usb 3-1: config 0 descriptor?? [ 491.672273][ T5741] ath6kl: Failed to init ath6kl core: -110 [ 491.735292][ T5741] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 491.921638][ T29] ums_eneub6250 3-1:0.0: USB Mass Storage device detected [ 492.100312][ T5741] usb 1-1: USB disconnect, device number 27 [ 492.632274][T12903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.292531][ T5714] usb 3-1: USB disconnect, device number 33 [ 494.738774][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'. [ 494.754780][T13488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.432050][ T30] audit: type=1400 audit(1779408659.716:1980): avc: denied { setopt } for pid=13500 comm="syz.0.1255" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 496.486277][T12903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.751407][T13529] blktrace: Concurrent blktraces are not allowed on sg0 [ 497.138912][T13500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.155041][ T30] audit: type=1326 audit(1779408661.344:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13521 comm="syz.4.1251" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a19ce59 code=0x7ffc0000 [ 497.264537][ T30] audit: type=1326 audit(1779408661.363:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13521 comm="syz.4.1251" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a19ce59 code=0x7ffc0000 [ 497.380715][ T5614] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 497.397806][ T30] audit: type=1326 audit(1779408661.363:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13521 comm="syz.4.1251" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a19ce59 code=0x7ffc0000 [ 497.570074][ T30] audit: type=1326 audit(1779408661.363:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13521 comm="syz.4.1251" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a19ce59 code=0x7ffc0000 [ 497.584031][ T5614] usb 2-1: config 92 has an invalid interface number: 76 but max is 2 [ 497.739795][ T5614] usb 2-1: config 92 has an invalid descriptor of length 0, skipping remainder of the config [ 497.769196][ T30] audit: type=1326 audit(1779408661.363:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13521 comm="syz.4.1251" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efc5a19ce59 code=0x7ffc0000 [ 497.835279][ T5614] usb 2-1: config 92 has 2 interfaces, different from the descriptor's value: 3 [ 497.891921][ T5614] usb 2-1: config 92 has no interface number 1 [ 497.941647][ T5614] usb 2-1: config 92 interface 0 has no altsetting 0 [ 497.986663][ T5614] usb 2-1: config 92 interface 76 has no altsetting 0 [ 498.002457][ T5614] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 498.033359][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.068589][ T5614] usb 2-1: Product: syz [ 498.070418][ T30] audit: type=1326 audit(1779408661.428:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13521 comm="syz.4.1251" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5a15d68e code=0x7ffc0000 [ 498.070460][ T30] audit: type=1326 audit(1779408661.428:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13521 comm="syz.4.1251" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5a15d68e code=0x7ffc0000 [ 498.089332][ T5614] usb 2-1: Manufacturer: syz [ 498.144216][ T5614] usb 2-1: SerialNumber: syz [ 498.378765][ T30] audit: type=1326 audit(1779408661.437:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13521 comm="syz.4.1251" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5a15d68e code=0x7ffc0000 [ 498.501179][ T30] audit: type=1326 audit(1779408661.475:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13521 comm="syz.4.1251" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5a15d68e code=0x7ffc0000 [ 498.515058][T13560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1262'. [ 498.544177][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 498.588367][T12903] veth0_vlan: entered promiscuous mode [ 499.034505][T12903] veth1_vlan: entered promiscuous mode [ 499.205610][T12903] veth0_macvtap: entered promiscuous mode [ 499.237558][T12903] veth1_macvtap: entered promiscuous mode [ 499.289943][T12903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.341501][T12903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.363673][ T3303] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.383117][T13572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1266'. [ 499.388734][ T3303] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.452129][ T9633] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.496520][ T9633] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.518947][T13578] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 499.557806][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.599004][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.656949][ T3303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.676185][ T3303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.681209][ T5741] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 499.866475][T13598] blktrace: Concurrent blktraces are not allowed on sg0 [ 500.126345][ T5741] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 500.559526][ T5614] uvcvideo 2-1:92.0: Found UVC 7.01 device syz (8086:0b07) [ 500.567373][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.580971][ T5614] uvcvideo 2-1:92.0: No valid video chain found. [ 500.601527][ T5741] usb 3-1: config 0 descriptor?? [ 500.621918][ T5741] ums-realtek 3-1:0.0: USB Mass Storage device detected [ 500.636800][ T5614] usb 2-1: USB disconnect, device number 40 [ 500.716020][ T5714] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 500.831785][T13574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28944 sclass=netlink_route_socket pid=13574 comm=syz.2.1265 [ 500.886055][ T5714] usb 6-1: too many configurations: 33, using maximum allowed: 8 [ 500.906270][ T5714] usb 6-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 500.915595][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.924168][ T5714] usb 6-1: Product: syz [ 500.928823][ T5714] usb 6-1: Manufacturer: syz [ 500.933486][ T5714] usb 6-1: SerialNumber: syz [ 500.949474][ T5827] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 500.969534][ T5714] usb 6-1: config 0 descriptor?? [ 500.977723][ T5714] go7007-loader 6-1:0.0: can't handle multiple config [ 500.984711][ T5714] go7007-loader 6-1:0.0: probe failed [ 501.365344][ T5614] usb 6-1: USB disconnect, device number 2 [ 501.424616][ T5827] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.577103][ T5827] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 501.592926][ T5827] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.603288][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.619172][ T5827] usb 1-1: config 0 descriptor?? [ 501.897692][T13628] FAULT_INJECTION: forcing a failure. [ 501.897692][T13628] name failslab, interval 1, probability 0, space 0, times 0 [ 502.352407][T13628] CPU: 0 UID: 0 PID: 13628 Comm: syz.0.1271 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.352436][T13628] Tainted: [L]=SOFTLOCKUP [ 502.352442][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 502.352451][T13628] Call Trace: [ 502.352457][T13628] [ 502.352463][T13628] dump_stack_lvl+0x100/0x190 [ 502.352487][T13628] should_fail_ex.cold+0x5/0xa [ 502.352508][T13628] ? sk_prot_alloc+0x10b/0x2a0 [ 502.352526][T13628] should_failslab+0xc2/0x120 [ 502.352541][T13628] __kmalloc_noprof+0xe0/0x850 [ 502.352564][T13628] sk_prot_alloc+0x10b/0x2a0 [ 502.352583][T13628] sk_alloc+0x36/0xe80 [ 502.352597][T13628] bpf_prog_test_run_skb+0x4db/0x3540 [ 502.352622][T13628] ? find_held_lock+0x2b/0x80 [ 502.352636][T13628] ? __fget_files+0x201/0x3d0 [ 502.352659][T13628] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 502.352681][T13628] ? fput+0x79/0x100 [ 502.352704][T13628] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 502.352723][T13628] __sys_bpf+0x1725/0x4b90 [ 502.352740][T13628] ? __pfx___sys_bpf+0x10/0x10 [ 502.352758][T13628] ? find_held_lock+0x2b/0x80 [ 502.352775][T13628] ? find_held_lock+0x2b/0x80 [ 502.352787][T13628] ? ksys_write+0x190/0x250 [ 502.352801][T13628] ? ksys_write+0x190/0x250 [ 502.352819][T13628] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 502.352840][T13628] ? vfs_write+0x3/0x1070 [ 502.352854][T13628] ? __fget_files+0x215/0x3d0 [ 502.352881][T13628] ? fput+0x79/0x100 [ 502.352899][T13628] ? ksys_write+0x1ac/0x250 [ 502.352913][T13628] ? __pfx_ksys_write+0x10/0x10 [ 502.352927][T13628] ? trace_irq_enable.constprop.0+0x31/0x160 [ 502.352950][T13628] __x64_sys_bpf+0x7b/0xc0 [ 502.352963][T13628] ? lockdep_hardirqs_on+0x78/0x100 [ 502.352982][T13628] do_syscall_64+0x10b/0xf80 [ 502.353001][T13628] ? clear_bhb_loop+0x40/0x90 [ 502.353019][T13628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.353033][T13628] RIP: 0033:0x7f4852f9ce59 [ 502.353045][T13628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.353059][T13628] RSP: 002b:00007f4853dc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 502.353073][T13628] RAX: ffffffffffffffda RBX: 00007f4853215fa0 RCX: 00007f4852f9ce59 [ 502.353082][T13628] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 502.353090][T13628] RBP: 00007f4853dc8090 R08: 0000000000000000 R09: 0000000000000000 [ 502.353098][T13628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.353106][T13628] R13: 00007f4853216038 R14: 00007f4853215fa0 R15: 00007fffce097558 [ 502.353126][T13628] [ 502.356072][ T5802] usb 1-1: USB disconnect, device number 28 [ 503.031672][ T2878] block nbd0: Possible stuck request ffff888027ee0000: control (read@0,1024B). Runtime 90 seconds [ 503.042991][ T2878] block nbd0: Possible stuck request ffff888027ee01c0: control (read@1024,1024B). Runtime 90 seconds [ 503.056063][ T2878] block nbd0: Possible stuck request ffff888027ee0380: control (read@2048,1024B). Runtime 90 seconds [ 503.068164][ T2878] block nbd0: Possible stuck request ffff888027ee0540: control (read@3072,1024B). Runtime 90 seconds [ 503.101088][ T5802] usb 3-1: USB disconnect, device number 34 [ 503.273017][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1275'. [ 503.547924][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 503.547987][ T30] audit: type=1400 audit(1779408667.312:2031): avc: denied { read } for pid=13684 comm="syz.2.1276" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 503.551786][ T30] audit: type=1400 audit(1779408667.312:2032): avc: denied { open } for pid=13684 comm="syz.2.1276" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 503.567952][ T30] audit: type=1400 audit(1779408667.312:2033): avc: denied { ioctl } for pid=13684 comm="syz.2.1276" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 504.613661][ T30] audit: type=1400 audit(1779408667.696:2034): avc: denied { shutdown } for pid=13696 comm="syz.0.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 504.726318][T13679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.834824][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 504.850790][ T30] audit: type=1400 audit(1779408667.715:2035): avc: denied { name_bind } for pid=13696 comm="syz.0.1278" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 504.891248][T13704] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1276'. [ 504.990417][T13704] comedi comedi2: dt2815: I/O base address or length out of range [ 505.171717][ T30] audit: type=1400 audit(1779408667.715:2036): avc: denied { node_bind } for pid=13696 comm="syz.0.1278" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 505.367620][ T30] audit: type=1400 audit(1779408668.454:2037): avc: denied { append } for pid=13684 comm="syz.2.1276" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 505.688233][ T30] audit: type=1400 audit(1779408668.463:2038): avc: denied { write } for pid=13684 comm="syz.2.1276" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 506.267529][ T30] audit: type=1400 audit(1779408668.697:2039): avc: denied { write } for pid=13684 comm="syz.2.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 507.588527][T13731] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1283'. [ 507.599213][T13731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.864620][T13737] blktrace: Concurrent blktraces are not allowed on sg0 [ 508.472436][T13747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1285'. [ 508.508130][T13747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.289829][ T30] audit: type=1400 audit(1779408672.692:2040): avc: denied { ioctl } for pid=13756 comm="syz.4.1287" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 509.347192][ T30] audit: type=1400 audit(1779408672.720:2041): avc: denied { connect } for pid=13756 comm="syz.4.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 509.422105][ T30] audit: type=1400 audit(1779408672.720:2042): avc: denied { read } for pid=13756 comm="syz.4.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 509.637117][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1288'. [ 509.787080][T13786] netlink: 'syz.4.1289': attribute type 1 has an invalid length. [ 509.886836][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'. [ 510.238447][ T5714] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 510.845306][T13786] 8021q: adding VLAN 0 to HW filter on device bond4 [ 510.898771][ T5714] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 510.907899][T13779] bond4: (slave ip6gretap1): making interface the new active one [ 510.921744][T13779] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 510.932214][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.944103][ T5714] usb 1-1: config 0 descriptor?? [ 511.204901][T13864] x_tables: duplicate underflow at hook 1 [ 511.281086][T13864] vlan2: entered allmulticast mode [ 511.287121][T13864] macsec0: entered allmulticast mode [ 511.292854][T13864] veth1_macvtap: entered allmulticast mode [ 511.475630][T13881] kvm: kvm [13877]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x800000001000000 [ 511.488530][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 511.536667][ T30] audit: type=1400 audit(1779408674.778:2043): avc: denied { append } for pid=13877 comm="syz.1.1293" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 511.626824][ T5714] ath6kl: Failed to submit usb control message: -71 [ 511.634093][ T5714] ath6kl: unable to send the bmi data to the device: -71 [ 511.643464][ T5714] ath6kl: Unable to send get target info: -71 [ 511.660719][ T5714] ath6kl: Failed to init ath6kl core: -71 [ 511.669725][ T5714] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 511.687704][ T5714] usb 1-1: USB disconnect, device number 29 [ 511.726414][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 511.738555][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.768850][ T9] usb 3-1: config 0 descriptor?? [ 511.804780][ T30] audit: type=1400 audit(1779408675.030:2044): avc: denied { create } for pid=13912 comm="syz.4.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 512.272866][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1296'. [ 512.921916][ T9] ath6kl: Failed to submit usb control message: -110 [ 512.937949][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 512.973721][ T9] ath6kl: Unable to send get target info: -110 [ 513.247315][T13934] blktrace: Concurrent blktraces are not allowed on sg0 [ 513.350318][ T5617] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 513.352138][ T5612] Bluetooth: hci5: command 0x1003 tx timeout [ 514.049997][ T9] ath6kl: Failed to init ath6kl core: -110 [ 514.056985][ T9] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 514.112806][ T9] usb 3-1: USB disconnect, device number 35 [ 514.554614][ T30] audit: type=1400 audit(1779408677.612:2045): avc: denied { write } for pid=13954 comm="syz.0.1300" path="socket:[29355]" dev="sockfs" ino=29355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 515.064255][ T30] audit: type=1400 audit(1779408677.640:2046): avc: denied { mounton } for pid=13954 comm="syz.0.1300" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 516.983011][T13958] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 517.314556][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 517.600696][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 517.884817][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 518.101274][ T5827] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 518.131712][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.144834][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.156916][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 518.170025][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 518.179120][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.203963][ T9] usb 6-1: config 0 descriptor?? [ 518.299432][ T5827] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.321428][ T5827] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 518.364435][ T5827] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 518.394294][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.448917][ T5827] usb 5-1: config 0 descriptor?? [ 518.482613][T13442] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 518.668090][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 518.674061][T13442] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.674100][T13442] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 518.674147][T13442] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 518.674182][T13442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.677155][T13442] usb 2-1: config 0 descriptor?? [ 518.705760][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 518.748573][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 518.755442][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 518.851078][ T9] usb 6-1: USB disconnect, device number 3 [ 519.032291][ T5741] usb 5-1: USB disconnect, device number 38 [ 519.210026][T13442] usb 2-1: USB disconnect, device number 41 [ 519.401924][ T30] audit: type=1400 audit(1779408682.150:2047): avc: denied { append } for pid=14038 comm="syz.5.1310" name="frontend0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 520.515790][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'. [ 520.580624][T14079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.205700][ T5714] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 521.277326][ T30] audit: type=1326 audit(1779408683.899:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.0.1317" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4852f9ce59 code=0x7ffc0000 [ 521.357830][ T30] audit: type=1326 audit(1779408683.927:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.0.1317" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4852f9ce59 code=0x7ffc0000 [ 521.408589][ T5741] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 521.430012][ T5714] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 521.467366][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.524905][ T30] audit: type=1326 audit(1779408683.936:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.0.1317" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4852f9ce59 code=0x7ffc0000 [ 521.564259][ T5714] usb 5-1: config 0 descriptor?? [ 521.687386][ T5741] usb 3-1: Using ep0 maxpacket: 16 [ 521.835462][ T30] audit: type=1326 audit(1779408683.965:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.0.1317" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4852f9ce59 code=0x7ffc0000 [ 521.870939][T14122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.002913][ T5741] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.231952][ T5741] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.270002][ T30] audit: type=1326 audit(1779408683.965:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.0.1317" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4852f9ce59 code=0x7ffc0000 [ 522.304744][ T5741] usb 3-1: config 0 interface 0 has no altsetting 0 [ 522.345136][ T5741] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 522.409359][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.410687][ T30] audit: type=1326 audit(1779408683.965:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.0.1317" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4852f9ce59 code=0x7ffc0000 [ 522.527282][ T30] audit: type=1326 audit(1779408683.965:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.0.1317" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4852f9ce59 code=0x7ffc0000 [ 522.535860][ T5741] usb 3-1: config 0 descriptor?? [ 522.693369][ T5714] ath6kl: Failed to submit usb control message: -110 [ 523.040582][ T5714] ath6kl: unable to send the bmi data to the device: -110 [ 523.048635][ T5714] ath6kl: Unable to send get target info: -110 [ 523.055052][ T30] audit: type=1326 audit(1779408683.965:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.0.1317" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4852f9ce59 code=0x7ffc0000 [ 523.102575][ T5612] Bluetooth: hci5: command 0x1003 tx timeout [ 523.114342][ T5617] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 523.174284][ T30] audit: type=1326 audit(1779408683.965:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.0.1317" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4852f9ce59 code=0x7ffc0000 [ 523.318034][ T5714] ath6kl: Failed to init ath6kl core: -110 [ 523.364407][ T5714] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 523.573643][ T5827] usb 5-1: USB disconnect, device number 39 [ 523.716085][ T30] audit: type=1400 audit(1779408686.182:2057): avc: denied { getopt } for pid=14139 comm="syz.1.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 523.746620][ T5741] usbhid 3-1:0.0: can't add hid device: -71 [ 523.769906][ T5741] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 523.870090][ T5741] usb 3-1: USB disconnect, device number 36 [ 524.301046][T14167] devpts: Bad value for 'max' [ 527.001653][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 527.202468][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 527.217046][ T9] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 527.226486][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 527.253977][ T9] usb 2-1: config 0 has no interface number 0 [ 527.280468][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 527.317732][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 527.340131][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 527.357344][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.781850][ T9] usb 2-1: Product: syz [ 527.786046][ T9] usb 2-1: Manufacturer: syz [ 527.791098][ T9] usb 2-1: SerialNumber: syz [ 527.800453][ T9] usb 2-1: config 0 descriptor?? [ 527.806463][T14179] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 527.814376][T14179] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 528.250410][T14179] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 528.345060][T14179] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 529.682977][T14201] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 529.931337][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 529.958575][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 529.982439][ T9] asix 2-1:0.251: probe with driver asix failed with error -71 [ 530.005935][ T9] usb 2-1: USB disconnect, device number 42 [ 530.077718][ T5714] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 530.347328][ T5714] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 530.384676][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1334'. [ 530.397944][T14256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.498305][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.567805][ T5714] usb 3-1: config 0 descriptor?? [ 530.777599][ T5741] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 530.949583][ T5714] usb 3-1: can't set config #0, error -71 [ 530.975672][ T5741] usb 6-1: Using ep0 maxpacket: 32 [ 530.998274][ T5741] usb 6-1: config index 0 descriptor too short (expected 3659, got 75) [ 531.026455][ T5714] usb 3-1: USB disconnect, device number 37 [ 531.086669][ T5741] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.142540][ T5741] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 531.194432][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.270883][ T5741] usb 6-1: Product: syz [ 531.303505][ T5741] usb 6-1: Manufacturer: syz [ 531.327874][ T5741] usb 6-1: SerialNumber: syz [ 531.346994][T14272] IPv6: NLM_F_REPLACE set, but no existing node found! [ 531.356011][ T5741] usb 6-1: config 0 descriptor?? [ 531.367322][ T5741] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 532.030107][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 532.030124][ T30] audit: type=1400 audit(1779408693.956:2059): avc: denied { create } for pid=14294 comm="syz.1.1337" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 532.162141][ T5614] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 532.348023][ T5614] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 532.360365][ T5614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.389989][ T5614] usb 5-1: config 0 descriptor?? [ 532.509650][T14344] input: syz0 as /devices/virtual/input/input28 [ 532.560293][ T30] audit: type=1400 audit(1779408694.386:2060): avc: denied { append } for pid=14341 comm="syz.0.1342" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 532.683346][ T30] audit: type=1400 audit(1779408694.386:2061): avc: denied { ioctl } for pid=14341 comm="syz.0.1342" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 532.708992][ T30] audit: type=1400 audit(1779408694.461:2062): avc: denied { unlink } for pid=5616 comm="syz-executor" name="file0" dev="tmpfs" ino=1497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 532.831522][T14355] overlay: Unknown parameter '/' [ 532.891110][ T30] audit: type=1400 audit(1779408694.667:2063): avc: denied { mount } for pid=14348 comm="syz.1.1343" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 533.111139][ T30] audit: type=1400 audit(1779408694.714:2064): avc: denied { mounton } for pid=14348 comm="syz.1.1343" path="/270/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 533.221126][ T5714] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 533.238420][T14359] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 533.272972][ T5741] gspca_sunplus: reg_w_1 err -71 [ 533.283611][T14359] 8021q: adding VLAN 0 to HW filter on device bond6 [ 533.302991][ T5741] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 533.351186][ T5741] usb 6-1: USB disconnect, device number 4 [ 533.444808][ T5612] Bluetooth: hci5: command 0x1003 tx timeout [ 533.444893][ T5617] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 533.486757][ T5614] ath6kl: Failed to submit usb control message: -71 [ 533.494764][ T5614] ath6kl: unable to send the bmi data to the device: -71 [ 533.504896][ T5614] ath6kl: Unable to send get target info: -71 [ 533.506830][ T5714] usb 1-1: unable to get BOS descriptor or descriptor too short [ 533.512669][ T5614] ath6kl: Failed to init ath6kl core: -71 [ 533.560407][ T30] audit: type=1400 audit(1779408695.387:2065): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 533.585141][ T5614] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 533.612777][ T5614] usb 5-1: USB disconnect, device number 40 [ 533.652839][ T5714] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 533.784612][T14416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'. [ 533.799332][T14416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.170036][ T5714] usb 1-1: can't read configurations, error -71 [ 534.871693][ T5614] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 535.163614][ T2878] block nbd0: Possible stuck request ffff888027ee0000: control (read@0,1024B). Runtime 120 seconds [ 535.175100][ T2878] block nbd0: Possible stuck request ffff888027ee01c0: control (read@1024,1024B). Runtime 120 seconds [ 535.187555][ T2878] block nbd0: Possible stuck request ffff888027ee0380: control (read@2048,1024B). Runtime 120 seconds [ 535.201180][ T2878] block nbd0: Possible stuck request ffff888027ee0540: control (read@3072,1024B). Runtime 120 seconds [ 535.213965][ T5614] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 535.218015][ T30] audit: type=1400 audit(1779408696.940:2066): avc: denied { sqpoll } for pid=14478 comm="syz.0.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 535.223997][ T5614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.257965][ T5614] usb 2-1: config 0 descriptor?? [ 536.034909][T14479] input: syz0 as /devices/virtual/input/input29 [ 536.442185][ T5614] ath6kl: Failed to submit usb control message: -110 [ 536.471658][ T5614] ath6kl: unable to send the bmi data to the device: -110 [ 536.521215][ T5614] ath6kl: Unable to send get target info: -110 [ 536.579387][ T5614] ath6kl: Failed to init ath6kl core: -110 [ 536.603565][ T5614] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 536.669822][T14508] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 536.694342][ T5612] Bluetooth: hci5: command 0x1003 tx timeout [ 536.696106][ T5617] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 536.734422][ T5614] usb 2-1: USB disconnect, device number 43 [ 536.749041][ T30] audit: type=1400 audit(1779408698.362:2067): avc: denied { ioctl } for pid=14507 comm="syz.0.1357" path="socket:[31657]" dev="sockfs" ino=31657 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 536.881481][ T30] audit: type=1400 audit(1779408698.437:2068): avc: denied { getopt } for pid=14507 comm="syz.0.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 537.068401][ T5714] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 537.121866][ T5802] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 537.228762][ T5714] usb 1-1: Using ep0 maxpacket: 8 [ 537.240949][ T5714] usb 1-1: config 0 has an invalid interface number: 96 but max is 0 [ 537.266537][ T5714] usb 1-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 537.293251][ T5802] usb 5-1: Using ep0 maxpacket: 16 [ 537.306779][ T5714] usb 1-1: config 0 has no interface number 0 [ 537.324190][ T5802] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.336674][ T5714] usb 1-1: config 0 interface 96 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.363342][ T5802] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.381005][ T5714] usb 1-1: config 0 interface 96 has no altsetting 0 [ 537.400227][ T5802] usb 5-1: config 0 interface 0 has no altsetting 0 [ 537.404344][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 537.404370][ T30] audit: type=1326 audit(1779408698.989:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.2.1355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f773f15d68e code=0x7ffc0000 [ 537.411345][ T5714] usb 1-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=31.74 [ 537.432353][ T30] audit: type=1326 audit(1779408699.008:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.2.1355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f773f15d68e code=0x7ffc0000 [ 537.454775][ T5802] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 537.542038][ T30] audit: type=1326 audit(1779408699.082:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.2.1355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f773f15d68e code=0x7ffc0000 [ 537.745111][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.777153][ T5714] usb 1-1: Product: syz [ 538.104085][ T30] audit: type=1326 audit(1779408699.082:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.2.1355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f773f15d68e code=0x7ffc0000 [ 538.133542][T14537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.168571][ T30] audit: type=1326 audit(1779408699.148:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.2.1355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f773f15d68e code=0x7ffc0000 [ 538.208571][ T30] audit: type=1326 audit(1779408699.157:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.2.1355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f773f15d68e code=0x7ffc0000 [ 538.215300][ T5714] usb 1-1: Manufacturer: syz [ 538.239710][ T30] audit: type=1326 audit(1779408699.157:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.2.1355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f773f15d68e code=0x7ffc0000 [ 538.278273][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.334047][ T5802] usb 5-1: config 0 descriptor?? [ 538.386692][ T5714] usb 1-1: SerialNumber: syz [ 538.402711][ T30] audit: type=1326 audit(1779408699.157:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.2.1355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f773f15d68e code=0x7ffc0000 [ 538.574804][ T5714] usb 1-1: config 0 descriptor?? [ 538.623095][ T5714] usbhid 1-1:0.96: couldn't find an input interrupt endpoint [ 538.663732][ T30] audit: type=1326 audit(1779408699.157:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.2.1355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f773f15d68e code=0x7ffc0000 [ 538.773679][ T30] audit: type=1326 audit(1779408699.167:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14506 comm="syz.2.1355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f773f15d68e code=0x7ffc0000 [ 538.842306][ T5802] usbhid 5-1:0.0: can't add hid device: -71 [ 538.890300][ T5741] usb 1-1: USB disconnect, device number 32 [ 538.898205][ T5802] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 538.984930][ T5802] usb 5-1: USB disconnect, device number 41 [ 539.657715][ T5714] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 539.937064][ T5714] usb 2-1: device descriptor read/64, error -71 [ 540.382560][ T5714] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 540.563825][ T5714] usb 2-1: device descriptor read/64, error -71 [ 540.681755][ T5714] usb usb2-port1: attempt power cycle [ 541.045819][T14606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 541.053293][T14606] IPv6: NLM_F_CREATE should be set when creating new route [ 541.063070][ T5714] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 541.573105][T14615] FAULT_INJECTION: forcing a failure. [ 541.573105][T14615] name failslab, interval 1, probability 0, space 0, times 0 [ 541.609442][T14607] netlink: 'syz.5.1366': attribute type 1 has an invalid length. [ 541.619421][ T5714] usb 2-1: device descriptor read/8, error -71 [ 541.634126][T14615] CPU: 0 UID: 0 PID: 14615 Comm: syz.4.1365 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.634153][T14615] Tainted: [L]=SOFTLOCKUP [ 541.634158][T14615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 541.634167][T14615] Call Trace: [ 541.634173][T14615] [ 541.634179][T14615] dump_stack_lvl+0x100/0x190 [ 541.634203][T14615] should_fail_ex.cold+0x5/0xa [ 541.634225][T14615] should_failslab+0xc2/0x120 [ 541.634244][T14615] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 541.634270][T14615] ? __alloc_skb+0x140/0x710 [ 541.634284][T14615] ? __alloc_skb+0x5b7/0x710 [ 541.634302][T14615] __alloc_skb+0x140/0x710 [ 541.634315][T14615] ? __alloc_skb+0x5b7/0x710 [ 541.634330][T14615] ? __pfx___alloc_skb+0x10/0x10 [ 541.634351][T14615] netlink_alloc_large_skb+0x69/0x150 [ 541.634376][T14615] netlink_sendmsg+0x680/0xda0 [ 541.634402][T14615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.634423][T14615] ? __might_fault+0x70/0x140 [ 541.634454][T14615] ____sys_sendmsg+0x9e1/0xb70 [ 541.634474][T14615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.634496][T14615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.634527][T14615] ___sys_sendmsg+0x190/0x1e0 [ 541.634551][T14615] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.634599][T14615] __sys_sendmsg+0x170/0x220 [ 541.634617][T14615] ? __pfx___sys_sendmsg+0x10/0x10 [ 541.634643][T14615] ? rcu_is_watching+0x12/0xc0 [ 541.634671][T14615] do_syscall_64+0x10b/0xf80 [ 541.634694][T14615] ? clear_bhb_loop+0x40/0x90 [ 541.634713][T14615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.634735][T14615] RIP: 0033:0x7efc5a19ce59 [ 541.634750][T14615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.634766][T14615] RSP: 002b:00007efc5b031028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.634782][T14615] RAX: ffffffffffffffda RBX: 00007efc5a416090 RCX: 00007efc5a19ce59 [ 541.634792][T14615] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 541.634802][T14615] RBP: 00007efc5b031090 R08: 0000000000000000 R09: 0000000000000000 [ 541.634812][T14615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.634821][T14615] R13: 00007efc5a416128 R14: 00007efc5a416090 R15: 00007ffd11ab7398 [ 541.634843][T14615] [ 542.019913][ T5714] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 542.050046][ T5714] usb 2-1: device descriptor read/8, error -71 [ 542.167405][ T5714] usb usb2-port1: unable to enumerate USB device [ 542.892463][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 542.892479][ T30] audit: type=1326 audit(1779408704.125:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.4.1368" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a19ce59 code=0x7ffc0000 [ 542.925952][ T30] audit: type=1326 audit(1779408704.125:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.4.1368" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a19ce59 code=0x7ffc0000 [ 543.018420][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1370'. [ 543.032357][T14636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.457846][ T30] audit: type=1326 audit(1779408704.125:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.4.1368" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a19ce59 code=0x7ffc0000 [ 543.556652][ T30] audit: type=1326 audit(1779408704.162:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.4.1368" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efc5a19ce59 code=0x7ffc0000 [ 543.677241][ T30] audit: type=1326 audit(1779408704.602:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.4.1368" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5a19ce59 code=0x7ffc0000 [ 543.775367][ T30] audit: type=1326 audit(1779408704.677:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.4.1368" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5a15d68e code=0x7ffc0000 [ 543.847121][T14639] netlink: 'syz.1.1372': attribute type 12 has an invalid length. [ 543.884946][ T30] audit: type=1326 audit(1779408704.677:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.4.1368" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5a15d68e code=0x7ffc0000 [ 544.090823][ T30] audit: type=1326 audit(1779408704.724:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.4.1368" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5a15d68e code=0x7ffc0000 [ 544.165043][ T30] audit: type=1326 audit(1779408704.724:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.4.1368" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5a15d68e code=0x7ffc0000 [ 544.346617][ T30] audit: type=1326 audit(1779408704.733:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="syz.4.1368" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5a15d68e code=0x7ffc0000 [ 545.432891][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1376'. [ 545.527716][T14666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.886095][T14668] fuse: Unknown parameter '0x0000000000000000' [ 546.431689][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1377'. [ 546.520227][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1379'. [ 546.964581][T14695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.554106][T14726] netlink: 'syz.2.1385': attribute type 1 has an invalid length. [ 548.596184][T14726] netlink: 'syz.2.1385': attribute type 2 has an invalid length. [ 548.613360][T14727] netlink: 'syz.4.1383': attribute type 1 has an invalid length. [ 548.633708][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1385'. [ 548.645993][ T5714] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 548.827855][T14727] 8021q: adding VLAN 0 to HW filter on device bond5 [ 548.846432][ T5714] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 548.873228][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 548.897509][T14730] tipc: Started in network mode [ 548.913910][ T5714] usb 6-1: Product: syz [ 548.916178][T14730] tipc: Node identity ac14140f, cluster identity 4711 [ 548.929055][ T5714] usb 6-1: Manufacturer: syz [ 548.945043][ T5827] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 548.958346][T14730] tipc: New replicast peer: 255.255.255.255 [ 548.971305][ T5714] usb 6-1: SerialNumber: syz [ 549.011102][ T5714] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 549.030302][T14730] tipc: Enabled bearer , priority 10 [ 549.147568][ T5827] usb 3-1: Using ep0 maxpacket: 16 [ 549.191477][ T5827] usb 3-1: config 73 has an invalid interface number: 118 but max is 0 [ 549.249504][ T5827] usb 3-1: config 73 has no interface number 0 [ 549.279291][ T5827] usb 3-1: config 73 interface 118 has no altsetting 0 [ 549.316978][ T5827] usb 3-1: New USB device found, idVendor=1608, idProduct=021a, bcdDevice=d8.ac [ 549.351774][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.394104][ T5827] usb 3-1: Product: syz [ 549.411751][ T5827] usb 3-1: Manufacturer: syz [ 549.431687][ T5827] usb 3-1: SerialNumber: syz [ 549.493831][ T5714] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 549.532215][ T5714] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 549.708165][ T5827] io_ti 3-1:73.118: required endpoints missing [ 549.738491][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 549.738513][ T30] audit: type=1326 audit(1779408710.524:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14786 comm="syz.1.1390" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea15d9ce59 code=0x7ffc0000 [ 549.781093][ T5827] usb 3-1: USB disconnect, device number 38 [ 549.807747][ T9] usb 6-1: USB disconnect, device number 5 [ 549.864151][ T30] audit: type=1326 audit(1779408710.524:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14786 comm="syz.1.1390" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea15d9ce59 code=0x7ffc0000 [ 549.968324][ T30] audit: type=1326 audit(1779408710.570:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14786 comm="syz.1.1390" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea15d9ce59 code=0x7ffc0000 [ 550.065390][ T30] audit: type=1326 audit(1779408710.570:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14786 comm="syz.1.1390" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea15d9ce59 code=0x7ffc0000 [ 550.178534][ T29] tipc: Node number set to 2886997007 [ 550.210073][ T30] audit: type=1326 audit(1779408710.570:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14786 comm="syz.1.1390" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fea15d9ce59 code=0x7ffc0000 [ 550.284739][ T30] audit: type=1326 audit(1779408710.617:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14786 comm="syz.1.1390" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fea15d5d68e code=0x7ffc0000 [ 550.401379][ T30] audit: type=1326 audit(1779408710.617:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14786 comm="syz.1.1390" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fea15d5d68e code=0x7ffc0000 [ 550.716270][ T30] audit: type=1326 audit(1779408710.617:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14786 comm="syz.1.1390" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fea15d5d68e code=0x7ffc0000 [ 550.773446][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1392'. [ 550.785707][T14818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.898419][ T30] audit: type=1326 audit(1779408710.627:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14786 comm="syz.1.1390" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fea15d5d68e code=0x7ffc0000 [ 551.236454][ T30] audit: type=1326 audit(1779408710.627:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14786 comm="syz.1.1390" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fea15d5d68e code=0x7ffc0000 [ 554.237578][T14858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1402'. [ 554.456041][T14860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1402'. [ 555.324473][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 555.324489][ T30] audit: type=1400 audit(1779408715.753:2210): avc: denied { create } for pid=14874 comm="syz.1.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 555.719379][ T30] audit: type=1400 audit(1779408716.118:2211): avc: denied { create } for pid=14891 comm="syz.1.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 555.900777][ T30] audit: type=1400 audit(1779408716.286:2212): avc: denied { bind } for pid=14891 comm="syz.1.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 555.922977][ T30] audit: type=1400 audit(1779408716.296:2213): avc: denied { listen } for pid=14891 comm="syz.1.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 556.738664][ T30] audit: type=1400 audit(1779408716.389:2214): avc: denied { create } for pid=14892 comm="syz.5.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 557.190832][ T30] audit: type=1400 audit(1779408717.503:2215): avc: denied { read } for pid=14914 comm="syz.4.1409" name="file0" dev="tmpfs" ino=1571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 557.271737][ T30] audit: type=1400 audit(1779408717.503:2216): avc: denied { open } for pid=14914 comm="syz.4.1409" path="/287/file0" dev="tmpfs" ino=1571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 557.378927][ T30] audit: type=1400 audit(1779408717.521:2217): avc: denied { ioctl } for pid=14914 comm="syz.4.1409" path="/287/file0" dev="tmpfs" ino=1571 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 557.968543][ T30] audit: type=1400 audit(1779408717.811:2218): avc: denied { firmware_load } for pid=14920 comm="syz.1.1411" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 558.159222][ T30] audit: type=1400 audit(1779408717.858:2219): avc: denied { setopt } for pid=14920 comm="syz.1.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 559.249625][T14967] xt_TPROXY: Can be used only with -p tcp or -p udp [ 559.276251][T14970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1417'. [ 559.304385][T14970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.516764][T14978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1420'. [ 559.944772][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 560.308256][T14981] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 560.504297][T14981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.830521][T14981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.461559][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 561.461576][ T30] audit: type=1400 audit(1779408721.479:2258): avc: denied { create } for pid=15001 comm="syz.1.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 561.636660][ T5614] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 561.717735][T15002] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 561.780777][ T30] audit: type=1400 audit(1779408721.787:2259): avc: denied { bind } for pid=15007 comm="syz.2.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 561.808950][ T5614] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 561.857853][ T5614] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 561.872767][T15008] Cannot find del_set index 1 as target [ 561.890999][ T5614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.916705][ T5614] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 561.947384][ T30] audit: type=1400 audit(1779408721.946:2260): avc: denied { write } for pid=15001 comm="syz.1.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 564.059684][ T29] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 564.149004][ T5614] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 564.287225][ T5614] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 564.298779][ T5614] stv0680 6-1:4.0: last error: 86, command = 0x78 [ 564.311458][ T5614] usb 6-1: USB disconnect, device number 6 [ 564.452048][ T29] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 564.479318][ T29] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 564.509266][ T29] usb 5-1: config 4 has no interface number 0 [ 564.528309][ T29] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 564.572736][ T29] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 564.583616][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.592283][ T29] usb 5-1: Product: syz [ 564.597147][ T29] usb 5-1: Manufacturer: syz [ 564.602184][ T29] usb 5-1: SerialNumber: syz [ 564.745302][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 564.791693][ T30] audit: type=1400 audit(1779408724.613:2261): avc: denied { ioctl } for pid=15045 comm="syz.0.1432" path="socket:[32242]" dev="sockfs" ino=32242 ioctlcmd=0x8927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 564.884734][ T29] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 565.007709][ T29] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 565.183843][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'. [ 565.208483][T15079] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 565.274233][ T29] dib0700: firmware download failed at 7 with -22 [ 565.289854][ T29] usb 5-1: USB disconnect, device number 42 [ 567.445668][ T30] audit: type=1400 audit(1779408727.092:2262): avc: denied { bind } for pid=15117 comm="syz.2.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 567.465433][ T2878] block nbd0: Possible stuck request ffff888027ee0000: control (read@0,1024B). Runtime 150 seconds [ 567.471756][T15121] tipc: Failed to remove unknown binding: 66,0,0/0:2972964066/2972964067 [ 567.477416][ T2878] block nbd0: Possible stuck request ffff888027ee01c0: control (read@1024,1024B). Runtime 150 seconds [ 567.499558][ T2878] block nbd0: Possible stuck request ffff888027ee0380: control (read@2048,1024B). Runtime 150 seconds [ 567.502404][ T5827] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 567.511778][ T2878] block nbd0: Possible stuck request ffff888027ee0540: control (read@3072,1024B). Runtime 150 seconds [ 567.581541][T15129] tipc: Failed to remove unknown binding: 66,0,0/0:2972964066/2972964067 [ 567.581928][T15096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'. [ 567.816416][ T5827] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 567.849951][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.901555][ T5827] usb 6-1: config 0 descriptor?? [ 567.972058][ T5714] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 568.009213][T15151] ubi: mtd0 is already attached to ubi31 [ 568.157423][ T5714] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 568.171633][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.180499][ T5714] usb 3-1: Product: syz [ 568.184785][ T5714] usb 3-1: Manufacturer: syz [ 568.190164][ T5714] usb 3-1: SerialNumber: syz [ 568.197005][ T5827] ath6kl: Failed to submit usb control message: -71 [ 568.203952][ T5827] ath6kl: unable to send the bmi data to the device: -71 [ 568.240131][ T5827] ath6kl: Unable to send get target info: -71 [ 568.251249][ T5827] ath6kl: Failed to init ath6kl core: -71 [ 568.273117][ T5827] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 568.304346][ T5827] usb 6-1: USB disconnect, device number 7 [ 568.684437][ T5714] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 568.731487][ T5714] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 568.772778][ T5714] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 568.829603][ T5714] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 568.850213][ T5714] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 568.888354][ T5714] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 568.946416][ T5714] usb 3-1: USB disconnect, device number 39 [ 568.970930][ T5614] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 569.180578][ T5614] usb 2-1: Using ep0 maxpacket: 32 [ 569.265344][T15188] overlay: Unknown parameter '/' [ 569.580135][ T5614] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 569.618767][ T5614] usb 2-1: config 0 has no interface number 0 [ 569.649088][ T5614] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 569.702450][ T5614] usb 2-1: config 0 interface 85 has no altsetting 0 [ 569.740050][ T5614] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 569.763275][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.775603][ T5614] usb 2-1: Product: syz [ 569.791118][ T5614] usb 2-1: Manufacturer: syz [ 569.796654][ T5614] usb 2-1: SerialNumber: syz [ 569.860297][ T5614] usb 2-1: config 0 descriptor?? [ 569.867796][ T30] audit: type=1400 audit(1779408729.365:2263): avc: denied { connect } for pid=15196 comm="syz.5.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 569.931999][ T30] audit: type=1400 audit(1779408729.421:2264): avc: denied { open } for pid=15195 comm="syz.2.1447" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 569.968157][ T30] audit: type=1400 audit(1779408729.449:2265): avc: denied { ioctl } for pid=15195 comm="syz.2.1447" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 570.591287][T15209] fuse: fd is not a fuse device [ 571.152128][ T5614] appletouch 2-1:0.85: Failed to read mode from device. [ 571.187532][ T5614] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 571.211458][ T5714] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 571.235760][T15204] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.243259][T15204] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.415479][ T5714] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 571.429185][ T5714] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.452735][T15204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.462105][ T5714] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 571.484453][ T5714] usb 3-1: config 0 has no interface number 0 [ 571.498571][ T5714] usb 3-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 571.525648][ T5714] usb 3-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 571.526301][T15204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.551064][ T5714] usb 3-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 571.573296][ T5714] usb 3-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 571.611302][ T5714] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 571.628991][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.669851][ T5714] usb 3-1: Product: syz [ 571.677500][ T5714] usb 3-1: Manufacturer: syz [ 571.691372][ T5714] usb 3-1: SerialNumber: syz [ 571.722139][ T5714] usb 3-1: config 0 descriptor?? [ 571.977731][T15198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1447'. [ 572.010613][T15198] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1447'. [ 572.032921][T15204] veth1_macvtap: left allmulticast mode [ 572.062031][ T5714] cypress_m8 3-1:0.74: HID->COM RS232 Adapter converter detected [ 572.096653][ T5714] usb 3-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 572.167821][ T5714] usb 3-1: USB disconnect, device number 40 [ 572.258885][ T5714] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 572.297002][ T5714] cypress_m8 3-1:0.74: device disconnected [ 572.539886][ T5614] usb 2-1: USB disconnect, device number 48 [ 572.550640][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'. [ 572.579529][T15237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.023606][T13424] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.045127][T13424] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.066232][T13424] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.089271][T13424] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.182786][ T30] audit: type=1400 audit(1779408732.461:2266): avc: denied { listen } for pid=15257 comm="syz.4.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 573.294762][T15262] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1452'. [ 573.688348][ T30] audit: type=1400 audit(1779408732.564:2267): avc: denied { read write } for pid=15254 comm="syz.2.1452" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 573.724061][T15263] binder: 15257:15263 ioctl c0306201 200000000040 returned -22 [ 573.755930][T15263] binder: 15257:15263 ioctl c0306201 200000000640 returned -22 [ 573.786366][ T30] audit: type=1400 audit(1779408732.564:2268): avc: denied { open } for pid=15254 comm="syz.2.1452" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 574.126591][ T30] audit: type=1400 audit(1779408732.564:2269): avc: denied { open } for pid=15254 comm="syz.2.1452" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 574.180467][ T30] audit: type=1400 audit(1779408733.023:2270): avc: denied { lock } for pid=15261 comm="syz.5.1453" path="socket:[32393]" dev="sockfs" ino=32393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 575.266828][T15279] x_tables: duplicate underflow at hook 1 [ 575.522001][T15294] tipc: Failed to remove unknown binding: 66,0,0/0:2911561609/2911561610 [ 575.553596][T15294] tipc: Failed to remove unknown binding: 66,0,0/0:2911561609/2911561610 [ 575.764091][ T5802] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 575.956645][ T5802] usb 3-1: Using ep0 maxpacket: 8 [ 575.969795][ T5802] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 575.988594][ T5802] usb 3-1: config 0 has no interface number 1 [ 575.994729][ T5802] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 576.004082][ T5802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.019771][ T5802] usb 3-1: config 0 descriptor?? [ 576.021456][ T29] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 576.026421][ T5827] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 576.052632][ T5714] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 576.208615][ T29] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 576.219158][ T29] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 576.235307][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 576.283217][ T5714] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 576.350471][ T5827] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 576.352985][ T29] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 576.405953][ T5827] usb 6-1: config 0 has no interface number 0 [ 576.413097][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.441927][T15352] netlink: 'syz.2.1456': attribute type 1 has an invalid length. [ 576.452571][T15352] netlink: 'syz.2.1456': attribute type 3 has an invalid length. [ 576.898266][ T5827] usb 6-1: config 0 interface 1 has no altsetting 0 [ 576.916886][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1459'. [ 576.925841][ T29] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 576.926164][ T29] usb 1-1: Product: syz [ 576.926265][ T29] usb 1-1: Manufacturer: syz [ 576.926409][ T29] usb 1-1: SerialNumber: syz [ 576.936989][ T29] usb 1-1: config 0 descriptor?? [ 577.002222][T15353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.057393][ T5714] usb 5-1: config 0 descriptor?? [ 577.258262][ T5827] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 577.302257][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.319340][ T29] hub 1-1:0.0: bad descriptor, ignoring hub [ 577.337353][ T5827] usb 6-1: Product: syz [ 577.338547][ T29] hub 1-1:0.0: probe with driver hub failed with error -5 [ 577.367787][ T29] usb 1-1: selecting invalid altsetting 0 [ 577.411319][ T5827] usb 6-1: Manufacturer: syz [ 577.442660][ T5827] usb 6-1: SerialNumber: syz [ 577.475039][ T5827] usb 6-1: config 0 descriptor?? [ 577.523226][ T5827] usb 6-1: selecting invalid altsetting 1 [ 577.703605][T15325] xt_bpf: check failed: parse error [ 595.369511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.035419][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 690.042386][ C0] rcu: 1-...!: (0 ticks this GP) idle=86bc/1/0x4000000000000000 softirq=58646/58646 fqs=0 [ 690.053258][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15348/1:b..l [ 690.061249][ C0] rcu: (detected by 0, t=10503 jiffies, g=60349, q=289 ncpus=2) [ 690.068964][ C0] Sending NMI from CPU 0 to CPUs 1: [ 690.068986][ C1] NMI backtrace for cpu 1 [ 690.069000][ C1] CPU: 1 UID: 0 PID: 15369 Comm: syz.0.1461 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.069019][ C1] Tainted: [L]=SOFTLOCKUP [ 690.069024][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 690.069032][ C1] RIP: 0010:rcu_is_watching+0x63/0xc0 [ 690.069056][ C1] Code: 48 c1 ea 03 80 3c 02 00 75 5c 48 03 1c ed 20 69 1d 8e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 <83> e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b 03 c1 e8 02 83 e0 01 [ 690.069069][ C1] RSP: 0018:ffffc90000a08dc0 EFLAGS: 00000802 [ 690.069081][ C1] RAX: ffff8880b8533da8 RBX: ffff8880b8533da8 RCX: ffffffff899c4a38 [ 690.069089][ C1] RDX: 0000000000000000 RSI: ffffffff8c1c4100 RDI: ffffffff8e1d6928 [ 690.069098][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 690.069105][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 690.069113][ C1] R13: 18b1bcbb6fd13241 R14: ffff888034ffd400 R15: ffff888034ffd400 [ 690.069122][ C1] FS: 00007f4853da76c0(0000) GS:ffff88812446d000(0000) knlGS:0000000000000000 [ 690.069136][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.069145][ C1] CR2: 0000000000000000 CR3: 000000002b477000 CR4: 00000000003526f0 [ 690.069153][ C1] Call Trace: [ 690.069158][ C1] [ 690.069165][ C1] advance_sched+0x9c7/0xd20 [ 690.069182][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 690.069201][ C1] ? __pfx_advance_sched+0x10/0x10 [ 690.069219][ C1] __hrtimer_run_queues+0x470/0xa00 [ 690.069242][ C1] hrtimer_interrupt+0x3e5/0x940 [ 690.069259][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 690.069280][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 690.069301][ C1] [ 690.069305][ C1] [ 690.069310][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 690.069326][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 690.069345][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 a2 56 f6 48 89 df e8 1e f2 56 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 bb 46 f6 65 8b 05 1e 3f 7d 08 85 c0 74 16 5b [ 690.069358][ C1] RSP: 0018:ffffc9000620fd78 EFLAGS: 00000246 [ 690.069369][ C1] RAX: 0000000000000006 RBX: ffffffff9b1ae118 RCX: 0000000000000000 [ 690.069378][ C1] RDX: 0000000000000000 RSI: ffffffff8df22fb5 RDI: ffffffff8c1c4180 [ 690.069387][ C1] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000000 [ 690.069395][ C1] R10: 0000000000000001 R11: 0000007800000000 R12: 1ffff92000c41fb6 [ 690.069403][ C1] R13: 000000000d25f49f R14: 000000000d25f49f R15: 0000000000000000 [ 690.069417][ C1] do_settimeofday64+0x326/0x4d0 [ 690.069435][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 690.069450][ C1] ? security_capable+0x80/0x260 [ 690.069464][ C1] ? hid_match_one_id+0xe7/0x2c0 [ 690.069481][ C1] ? capable+0xd3/0xf0 [ 690.069499][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 690.069517][ C1] __x64_sys_clock_settime+0x1c1/0x2a0 [ 690.069531][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 690.069546][ C1] ? rcu_is_watching+0x12/0xc0 [ 690.069567][ C1] do_syscall_64+0x10b/0xf80 [ 690.069584][ C1] ? clear_bhb_loop+0x40/0x90 [ 690.069599][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.069613][ C1] RIP: 0033:0x7f4852f9ce59 [ 690.069625][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.069637][ C1] RSP: 002b:00007f4853da7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 690.069650][ C1] RAX: ffffffffffffffda RBX: 00007f4853216090 RCX: 00007f4852f9ce59 [ 690.069658][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 690.069666][ C1] RBP: 00007f4853032d6f R08: 0000000000000000 R09: 0000000000000000 [ 690.069674][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.069682][ C1] R13: 00007f4853216128 R14: 00007f4853216090 R15: 00007fffce097558 [ 690.069696][ C1] [ 690.069981][ C0] task:syz.1.1459 state:R running task stack:27416 pid:15348 tgid:15345 ppid:5616 task_flags:0x40054c flags:0x00080001 [ 690.473877][ C0] Call Trace: [ 690.477151][ C0] [ 690.480074][ C0] __schedule+0x1295/0x67a0 [ 690.484590][ C0] ? __pfx___schedule+0x10/0x10 [ 690.489436][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 690.494800][ C0] preempt_schedule_common+0x42/0xc0 [ 690.500081][ C0] preempt_schedule_thunk+0x16/0x30 [ 690.505276][ C0] _raw_spin_unlock+0x3e/0x50 [ 690.509946][ C0] __zap_vma_range+0x1791/0x4ba0 [ 690.514896][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 690.520178][ C0] ? find_held_lock+0x2b/0x80 [ 690.524856][ C0] unmap_vmas+0x299/0x5f0 [ 690.529181][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 690.534031][ C0] ? mas_next_slot+0x10a3/0x1960 [ 690.538982][ C0] exit_mmap+0x1ef/0xa10 [ 690.543226][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 690.547981][ C0] ? rcu_is_watching+0x12/0xc0 [ 690.552752][ C0] ? exit_aio+0x287/0x350 [ 690.557077][ C0] ? kfree+0x223/0x6c0 [ 690.561161][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 690.566791][ C0] __mmput+0x12a/0x410 [ 690.570863][ C0] mmput+0x67/0x80 [ 690.574582][ C0] do_exit+0x8b2/0x2af0 [ 690.578730][ C0] ? __pfx___might_resched+0x10/0x10 [ 690.584016][ C0] ? __pfx_do_exit+0x10/0x10 [ 690.588596][ C0] ? do_raw_spin_lock+0x128/0x260 [ 690.593613][ C0] ? find_held_lock+0x2b/0x80 [ 690.598277][ C0] ? get_signal+0x7e5/0x2210 [ 690.602867][ C0] do_group_exit+0xd5/0x2a0 [ 690.607363][ C0] get_signal+0x20ff/0x2210 [ 690.611872][ C0] ? __pfx_get_signal+0x10/0x10 [ 690.616719][ C0] ? task_work_add+0x201/0x3b0 [ 690.621481][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 690.627026][ C0] ? sock_ioctl+0x2dc/0x6b0 [ 690.631527][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 690.637687][ C0] ? rcu_is_watching+0x12/0xc0 [ 690.642451][ C0] exit_to_user_mode_loop+0x8b/0x4f0 [ 690.647730][ C0] ? rcu_is_watching+0x12/0xc0 [ 690.652494][ C0] do_syscall_64+0x706/0xf80 [ 690.657078][ C0] ? clear_bhb_loop+0x40/0x90 [ 690.661749][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.667633][ C0] RIP: 0033:0x7fea15d9ce59 [ 690.672038][ C0] RSP: 002b:00007fea16cae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.680440][ C0] RAX: ffffffffffffffed RBX: 00007fea16016180 RCX: 00007fea15d9ce59 [ 690.688396][ C0] RDX: 0000200000000100 RSI: 0000000000008933 RDI: 0000000000000008 [ 690.696352][ C0] RBP: 00007fea15e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 690.704307][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.712263][ C0] R13: 00007fea16016218 R14: 00007fea16016180 R15: 00007ffc2e531ee8 [ 690.720239][ C0] [ 690.723246][ C0] rcu: rcu_preempt kthread starved for 10503 jiffies! g60349 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 690.734428][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 690.744377][ C0] rcu: RCU grace-period kthread stack dump: [ 690.750244][ C0] task:rcu_preempt state:R running task stack:28216 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 690.763719][ C0] Call Trace: [ 690.766982][ C0] [ 690.769902][ C0] __schedule+0x1295/0x67a0 [ 690.774427][ C0] ? __pfx___schedule+0x10/0x10 [ 690.779284][ C0] ? find_held_lock+0x2b/0x80 [ 690.783962][ C0] ? schedule+0x2bf/0x390 [ 690.788300][ C0] schedule+0xdd/0x390 [ 690.792368][ C0] schedule_timeout+0x127/0x280 [ 690.797211][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 690.802579][ C0] ? __pfx_process_timeout+0x10/0x10 [ 690.807857][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 690.813660][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 690.819118][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 690.823879][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 690.829158][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 690.834096][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 690.839297][ C0] rcu_gp_kthread+0x179/0x230 [ 690.843981][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 690.849173][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 690.854985][ C0] ? __kthread_parkme+0x18c/0x230 [ 690.860005][ C0] ? kthread+0x13a/0x450 [ 690.864241][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 690.869434][ C0] kthread+0x370/0x450 [ 690.873505][ C0] ? __pfx_kthread+0x10/0x10 [ 690.878093][ C0] ret_from_fork+0x72b/0xd50 [ 690.882690][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 690.887797][ C0] ? __switch_to+0x800/0x1100 [ 690.892473][ C0] ? __pfx_kthread+0x10/0x10 [ 690.897060][ C0] ret_from_fork_asm+0x1a/0x30 [ 690.901832][ C0] [ 690.904841][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 690.911152][ C0] CPU: 0 UID: 0 PID: 13425 Comm: kworker/u8:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.922337][ C0] Tainted: [L]=SOFTLOCKUP [ 690.926643][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 690.936684][ C0] Workqueue: events_unbound toggle_allocation_gate [ 690.943177][ C0] RIP: 0010:smp_call_function_many_cond+0x5a3/0x1700 [ 690.949851][ C0] Code: e4 07 49 01 c5 41 83 c4 03 e8 39 83 0c 00 f3 90 41 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 ff 83 e0 01 <41> 89 c6 89 c6 e8 c3 7d 0c 00 45 85 f6 75 d0 e8 09 83 0c 00 e8 04 [ 690.969445][ C0] RSP: 0018:ffffc900064a7870 EFLAGS: 00000202 [ 690.975498][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81fc2d8d [ 690.983457][ C0] RDX: ffff8880368e4a00 RSI: ffffffff81fc2d67 RDI: 0000000000000000 [ 690.991416][ C0] RBP: ffff8880b8540f40 R08: 0000000000000005 R09: 0000000000000000 [ 690.999374][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 691.007333][ C0] R13: ffffed10170a81e9 R14: 0000000000000001 R15: ffff8880b843c5c0 [ 691.015291][ C0] FS: 0000000000000000(0000) GS:ffff88812436d000(0000) knlGS:0000000000000000 [ 691.024208][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.030780][ C0] CR2: 00007f4853d86d58 CR3: 000000000e596000 CR4: 00000000003526f0 [ 691.038739][ C0] Call Trace: [ 691.042004][ C0] [ 691.044926][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 691.049952][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 691.056272][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 691.061644][ C0] ? __pfx___text_poke+0x10/0x10 [ 691.066579][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 691.071597][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 691.076700][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 691.083195][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 691.088908][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 691.095136][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 691.101363][ C0] ? find_held_lock+0x2b/0x80 [ 691.106033][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 691.112002][ C0] jump_label_update+0x37a/0x550 [ 691.116934][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 691.122820][ C0] static_key_enable+0x1a/0x20 [ 691.127572][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 691.132844][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 691.138728][ C0] ? rcu_is_watching+0x12/0xc0 [ 691.143495][ C0] process_one_work+0xa0e/0x1980 [ 691.148435][ C0] ? __pfx_process_one_work+0x10/0x10 [ 691.153808][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 691.159695][ C0] worker_thread+0x5ef/0xe50 [ 691.164286][ C0] ? kthread+0x13a/0x450 [ 691.168520][ C0] ? __pfx_worker_thread+0x10/0x10 [ 691.173624][ C0] kthread+0x370/0x450 [ 691.177683][ C0] ? __pfx_kthread+0x10/0x10 [ 691.182267][ C0] ret_from_fork+0x72b/0xd50 [ 691.186854][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 691.191960][ C0] ? __switch_to+0x800/0x1100 [ 691.196632][ C0] ? __pfx_kthread+0x10/0x10 [ 691.201218][ C0] ret_from_fork_asm+0x1a/0x30 [ 691.205988][ C0]