last executing test programs: 2m55.77643298s ago: executing program 3 (id=5063): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x5ffd, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x4e}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x7}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r5) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003b00)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e2a, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x5, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0xa, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x2}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0xc5, 0x4c, 0xd6, 0x10, 0x54c, 0x9a, 0xa97e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x9, 0x7f, 0x20, 0x1, "", [{{0x9, 0x4, 0x65, 0x8, 0x2, 0x2a, 0xbf, 0x10, 0x80, [], [{{0x9, 0x5, 0x3, 0x8, 0x200, 0xfd, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0xf9, 0x9, 0x5}}]}}]}}]}}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0}) 2m48.202151498s ago: executing program 3 (id=5074): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1f9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) write$cgroup_int(r0, &(0x7f0000000540)=0x1, 0x12) r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x100, 0x10004, 0x2c}, 0x50) 2m44.632023045s ago: executing program 3 (id=5081): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x500}) 2m44.27709196s ago: executing program 3 (id=5083): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c000280080004000240"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) mount$cgroup(0x0, 0x0, 0x0, 0x10012, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f00000011c0), 0xfffffffffffffffe) 2m44.16877877s ago: executing program 3 (id=5084): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000080)={'\x00', 0x974, 0x3, 0x491689d4}) write$khugepaged_scan(r0, &(0x7f0000000100), 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x4, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local, @initdev}, &(0x7f0000000300)=0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000380)={0x101ff, 0x3, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000003c0)={0x100}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='mountinfo\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000440)={0x4e90cdb3ed63bb41}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000480), &(0x7f00000004c0)={0x0, 0xfb, 0x67, 0x6, 0x0, "eeb7c494b47f5c2a7da6523a39611848", "265d0e45a6b800825ac14c74583b2b605aece74356010b80045a495d5d27da59c05ba41e871b20faca63d59f48b4b5eeb8f5b13e61847b7158e7d9b060961d5670b2f0359b79bc06d84f5a1ab637260b748e"}, 0x67, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x3a00000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r5, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "deed15be089229a8d62aa7851b9bac00"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a21982abc069d5986439b41028afd241"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "0bbf1bfac70424c8efaecd2ef4cae923"}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r0, 0x20, &(0x7f0000000980)={&(0x7f0000000840)=""/163, 0xa3, 0x0, &(0x7f0000000900)=""/92, 0x5c}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1d, 0x15, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x6eddf3d04b43dca2, 0x4, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0xece9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, r4, 0x8, &(0x7f00000007c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0xb, 0xfff, 0x2}, 0x10, r6, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000a00)=[{0x3, 0x2, 0x3, 0x3}]}, 0x94) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000b00)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x108, r5, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0x1c, 0x34, @random="b00c4dd0df834085f6a39996bfd2e4bf53cd8c2368cfe5f4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a1d5f67304"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "4c48853a0b973b6342"}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "c38cc520a58e"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e6edb2329ac738837acf65728c"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="80f04250cb33"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]]}, 0x108}, 0x1, 0x0, 0x0, 0x4c800}, 0x4000090) r10 = syz_clone(0x80000000, &(0x7f0000000dc0)="0fb779e5533db47a673564e8423a6295352a9ea5c6695521b10514c1b72449892e417afe16632be11a5065fd9375e25e24a4511800157d17bcea9aa04447c3bba63d068726", 0x45, &(0x7f0000000e40), &(0x7f0000000e80), &(0x7f0000000ec0)="de3a06cdb5e07874f2eeb1") write$P9_RGETLOCK(r4, &(0x7f0000000f00)={0x1f, 0x37, 0x2, {0x0, 0x8001, 0xcff, r10, 0x1, '\\'}}, 0x1f) fgetxattr(r4, &(0x7f0000000f40)=@known='security.apparmor\x00', &(0x7f0000000f80)=""/209, 0xd1) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001080), 0x422082, 0x0) write$P9_RAUTH(r11, &(0x7f00000010c0)={0x14, 0x67, 0x1, {0x16ec637894c8cfd0, 0x2}}, 0x14) recvfrom$inet_nvme(r4, &(0x7f0000001100)=""/208, 0xd0, 0x1, &(0x7f0000001200)=@caif=@util={0x25, "466e4c5effcce84ca18c3872c618ff62"}, 0x80) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x8, 0x3, &(0x7f0000001280)=@raw=[@alu={0x7, 0x1, 0xa, 0xa, 0x0, 0x30, 0x10}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xf}], &(0x7f00000012c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', r3, @cgroup_skb, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001340)={0x5, 0x8, 0xd, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000001400)=[0x1, r0, 0xffffffffffffffff], &(0x7f0000001440)=[{0x1, 0x4, 0x4, 0x2}, {0x0, 0x5, 0xb, 0x2}, {0x5, 0x2, 0xd, 0x5}], 0x10, 0x6}, 0x94) 2m42.428293133s ago: executing program 3 (id=5088): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004c604408b1432c88cea9e45007e219f4984fcc8d09b55acc591dfad26ea8d4ec5c3dc304b08086cc4134a1070674f00d5bd212edd36e841f2083da7b6ad3e21162dafa75a48a4a0dad9ddbb92ac6fec800a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000340)=r2}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r3, 0x26, 0x0, 0x2d23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sync() r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x20206, 0xac) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fstat(r8, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m27.408427508s ago: executing program 32 (id=5088): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004c604408b1432c88cea9e45007e219f4984fcc8d09b55acc591dfad26ea8d4ec5c3dc304b08086cc4134a1070674f00d5bd212edd36e841f2083da7b6ad3e21162dafa75a48a4a0dad9ddbb92ac6fec800a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000340)=r2}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r3, 0x26, 0x0, 0x2d23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sync() r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x20206, 0xac) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fstat(r8, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.401049133s ago: executing program 4 (id=5486): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000480)={0x2a, 0x2, 0x4000}, 0xc) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x4, 0x8000}, 0xc) r1 = socket(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = io_uring_setup(0x419f, &(0x7f00000004c0)={0x0, 0x8270, 0x40, 0x2, 0x117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000400)=[r1, 0xffffffffffffffff], 0x4244) syz_usb_connect(0x3, 0x34, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594", @ANYBLOB='k'], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x800) syz_usb_connect$midi(0x6, 0xe5, &(0x7f0000000080)=ANY=[@ANYBLOB="120110010000000030144b474000010203010902d300010131000d09040000060103000707240103000700072401050007000f24030008040d0802070404e32b32072401ff0307001524030003070907301607ad08ff069e040b069b0109050edf0800090b090f25010b41a2adcb8b1701d8659238090505104000042f080e25010a3449e6999b59b2b9287a0905070c70060303fd0a2501068f802cb17b3009050708100278ff7f0e25010a6c08d001bd0f50da9ade0905801008000b09030b250107463854cdd0b34a09050a100002e8f8081225010eb11d7efe7555c7550263491524dd"], &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x1, 0x8, 0x8, 0x80}, 0x25, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f250002141004076a16708e909200d1cfa70c100acc800000000f02"], 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0x91, &(0x7f0000000540)=@string={0x91, 0x3, "38d64b43c1b9cdb01965a98d1264e7008f5980dad4781bf9da3f6512b559a3f8f81c37855908a9cdf4b63c223abb25b3e6258444be2284f63d09b3bae914b1a8b16e1c7711ff33c2b18da9c74e2d45564f535027fcd1a146070c9569689dba3bb019bafec95d11b62a5aa50c1d228577ee73fcd67d62f79f937d464787a06a1791a32d401f6f146f4c4cc3afd8d79f"}}]}) socket(0x1d, 0x80000, 0x38) r3 = socket$inet(0x2b, 0x1, 0x1) listen(r3, 0x9) accept$inet(r3, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x3202, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0xd) setsockopt$inet_int(r1, 0x0, 0xb, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002180)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="20d5f71b3c1455d3137308e39fdaa69341e974a3be880aa6b966d28ae93918107a68109927361ccf0d043d4e917c1828d4e9a4c244fb1bab7383cafc2a670ce6874925d1c174b9288eebf241a5d8dd74752eb829f756d3aba15a5d28ee295d7f90f6059971abbc3759e383681effef17d0b8df71502c276f722416984a4988942ce851a20df6ba8cf80f618fd512a34da80b47b79e8b598db7133a13e25067f4eb822ef1a11dbf218bfc31dbb5", @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r2], 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 9.290700965s ago: executing program 0 (id=5489): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xde, &(0x7f0000000740)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @generic={{0x11, 0x4, 0x3, 0x22, 0xd0, 0x66, 0x0, 0x1, 0x29, 0x0, @empty, @remote, {[@timestamp_addr={0x44, 0x14, 0x86, 0x1, 0x1, [{@local, 0xffff}, {@broadcast, 0x3}]}, @timestamp_addr={0x44, 0xc, 0x45, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x8}]}, @ssrr={0x89, 0x3, 0xf0}, @end, @generic={0x89, 0x7, "fa3ee30708"}, @generic={0x89, 0x2}, @end]}}, "452b8a6ff0200a2f3c09dea05777a0477f3baada23bf054bbf7dd03f05018e37a5f06e3134217e977c9e00f779884a352c93fa3357bcb5d13ae9900f84117cd2e4bf7b7d69317371eb51998fbcb404e6558002eb218ab73b13e62c1bf5390c0752b1e8963065b53922bedfcf35715b5e411bf4d88ad9dc6a6c853f80411ac85854dcbf2119a8cf6bc0140c74"}}}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) syz_open_dev$usbfs(0x0, 0x6, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) io_uring_enter(0xffffffffffffffff, 0x6a8a, 0xffefffff, 0x21, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, 0x0, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, &(0x7f0000000580)={0x40, 0x30, 0x27, {0x27, 0x21, "385d2209a82805ab4aefa7976e5cac487ab834422fafe096a72a5bbc331d70497abbaf6f8e"}}, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x0, "8152c030"}, @local=@item_4={0x3, 0x2, 0x8, "e8a2056d"}, @main=@item_4={0x3, 0x0, 0xc, "2a8e4d64"}, @main=@item_4={0x3, 0x0, 0xb, "679074fe"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0xc92}}}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x6000, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1e74b11af0c80602ac906194acb1a1588304d5bf0675558bcba61848b15f95350e6feb341b58415dcc9f14bc5db6c6c4de6469b8830242ee907e1988110b0c31c4123985ff4d9b53e92f9f72345b7615b329afd9c04f91196088d16c63ddc42b07202e8120b8ec968058312df6d583e9c84f7ab3e9a6b86b0271c079b7638e18d904d83a37d073db81a88b37d6cdbc6002e343e9bcb9cb98b51a8f6c1ec5d671c866aca98182b06d098f2ecfe585dab3a0c", @ANYRESDEC], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) 8.993013737s ago: executing program 1 (id=5491): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@local, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0xd}, {0x0, 0xa, 0x1, 0x0, 0x8, 0x0, 0x4, 0x8}, {0x0, 0x0, 0x40000000000, 0x9}, {0x0, 0x1}, 0x0, 0x0, 0xa, 0x2}, 0x0, 0x796b82bf}}, 0xf8}, 0x1, 0x0, 0x0, 0xc1}, 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0xad, &(0x7f0000000400)={@empty, @broadcast, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x3, 0x0, 0x9f, 0x67, 0x0, 0xf8, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x32}, {[@ssrr={0x89, 0x17, 0x29, [@dev={0xac, 0x14, 0x14, 0x27}, @multicast2, @remote, @rand_addr=0x64010102, @broadcast]}, @generic={0x82, 0x2}]}}, {0x4e21, 0x4e20, 0x6f, 0x0, @gue={{0x2, 0x0, 0x3, 0xfc, 0x100}, "db7d66a970f6382905d6240ca7730ebfac54851d4ca89745182de1487f845308d03079be169f36df3c845ff0a213f814a002417652122b53aa7186ae273f2f936d27a25a33a2d87d1c3009c8acf0251e5e2a2f9f83d83fea6c6440d6ae6930"}}}}}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) 8.545376045s ago: executing program 1 (id=5493): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x5ffd, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x4e}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x7}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r6) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003b00)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e2a, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x5, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0xa, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x2}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0xc5, 0x4c, 0xd6, 0x10, 0x54c, 0x9a, 0xa97e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x9, 0x7f, 0x20, 0x1, "", [{{0x9, 0x4, 0x65, 0x8, 0x2, 0x2a, 0xbf, 0x10, 0x80, [], [{{0x9, 0x5, 0x3, 0x8, 0x200, 0xfd, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0xf9, 0x9, 0x5}}]}}]}}]}}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0}) 8.340658412s ago: executing program 2 (id=5495): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e01000606060509000600040007000300390c2402050302060254df000a092402050001031f04092403", @ANYRESHEX=0x0], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) eventfd(0xfffffffd) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9, 0x800a}]}}}, 0x8) unshare(0x6a040000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) timer_create(0x7, 0x0, &(0x7f0000000180)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x240808, &(0x7f00000005c0)) 7.915727797s ago: executing program 5 (id=5496): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f00000001c0)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000001a00), &(0x7f0000000280)=""/4096}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000007c0)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x2000841) sendmsg$TIPC_NL_KEY_SET(r2, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000140)={0x5e, @private=0xa010101, 0x4e24, 0x8, 'sh\x00', 0x25, 0xffffff83, 0x61}, 0x72) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x6) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfff, {0x0, 0x1}, {0x4f, 0x68ed}, @const={0xa9, {0xa, 0x2, 0x5, 0x8}}}) chroot(0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xe}}, './file0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000800)={{r4}, "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"}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54020000", @ANYRES16=r6, @ANYBLOB="050000000000feff01004400000008000300", @ANYRES32=r7, @ANYBLOB="0a0018000303030303030000080026006c0900000500240002"], 0x254}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x704, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000000)='./file0\x00') creat(0x0, 0x81) link(&(0x7f0000000140)='./file0\x00', 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3, 0x1200) 7.687798076s ago: executing program 5 (id=5497): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002e00090027ff0f0000000000040000002400118031f9e05e2f826cfc31dc2af824704f"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 7.428936603s ago: executing program 5 (id=5498): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0xffff, @local, 0x81}, 0x1c) 6.613196237s ago: executing program 2 (id=5499): r0 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000005c0)={0x0, @bt={0xa00, 0x63e, 0x1, 0x1, 0xd59f83, 0x7, 0x2, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x3f4d, 0xba3, 0x4, 0x0, {0x4, 0xffffffff}, 0xd0, 0x9}}) 6.584279699s ago: executing program 2 (id=5500): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002700)={0x0, 0x0, "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", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f3036db45ef0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x55}], 0x47, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r3, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}}, 0x0) 6.448403173s ago: executing program 5 (id=5501): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x120006200, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {0x1}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 6.329143173s ago: executing program 2 (id=5502): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fd\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, 0x0, &(0x7f00000000c0)=r3}, 0x20) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) mkdir(0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x80047437, 0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x985, 0x12) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001100)={r1, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f00000000c0)="b9cf00007f1b5b09b671fbb015d310473c9f3b4db3bd6b61e4bb3d36f7ece92006a9acd7fe143d2ae7e0dbf522", &(0x7f0000000000), 0x2}, 0x20) socket$netlink(0x10, 0x3, 0x8000000004) 6.321381422s ago: executing program 4 (id=5503): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x70bd29, 0x25dfdbfb, {0x80, 0x14, 0x10, 0x7, 0xff, 0x0, 0xff, 0x3, 0x400}}, 0x1c}}, 0x800) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f0000000180)={0x1178, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xd1, 0xa8, @random="e47fa3fc834a40b03b8186248915fefce7ef99363bb6225eb204e30eb91a2247fba14ff15e262b761cecb2c59969bc9ca590f741f8edbfe821f2010fbe8f2d7eefc12e0997112c33df65769f846c9538b9b6eeb3ffcd1fe915a9903aba7efe2e42b5b282429e2ed175ea677c8c706a64974da772f75968315232e70f426c30e559fadaa5e87d3c8422c41d697008d3f7c014b549ab4138e283af82fcd0d522cb5eb2c17b3b39d8de04a66ef1103f089739cef87b5af98e51069a3972573c4766d1b594b231b5d3d329b1f409e9"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1ff}, @DEVLINK_ATTR_RATE_NODE_NAME={0x70, 0xa8, @random="fff4bd6369d1a1667b2d14f96faf164e6c8624b77bf76c9ff77fbbbf3dcebaa219f3384f5c62b53b0b057e3dd3d548c6d5c830c6d284a02ced28d32ff9bfd6d6f531ef7c57b5cce3d59e8f31d786643944213774e90acd58a60c71c7687d2be11ba818529c8a750612d914e6"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1004, 0xa9, @random="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"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x1178}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) clock_gettime(0x0, &(0x7f0000005000)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004e80)=[{{&(0x7f0000001380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001400)=""/232, 0xe8}, {&(0x7f0000001500)=""/165, 0xa5}, {&(0x7f00000015c0)=""/219, 0xdb}, {&(0x7f00000016c0)=""/178, 0xb2}, {&(0x7f0000001780)=""/175, 0xaf}, {&(0x7f0000001840)=""/41, 0x29}, {&(0x7f0000001880)=""/181, 0xb5}, {&(0x7f0000001940)=""/178, 0xb2}, {&(0x7f0000001a00)=""/217, 0xd9}], 0x9, &(0x7f0000001bc0)=""/114, 0x72}, 0x1}, {{&(0x7f0000001c40)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000003140)=[{&(0x7f0000001cc0)=""/66, 0x42}, {&(0x7f0000001d40)=""/48, 0x30}, {&(0x7f0000001d80)=""/191, 0xbf}, {&(0x7f0000001e40)=""/230, 0xe6}, {&(0x7f0000001f40)=""/124, 0x7c}, {&(0x7f0000001fc0)=""/39, 0x27}, {&(0x7f0000002000)=""/135, 0x87}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/105, 0x69}], 0x9, &(0x7f0000003200)=""/132, 0x84}, 0xffffffff}, {{&(0x7f00000032c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003340)=""/175, 0xaf}, {&(0x7f0000003400)=""/102, 0x66}, {&(0x7f0000003480)=""/190, 0xbe}], 0x3, &(0x7f0000003580)=""/7, 0x7}, 0x7ff}, {{&(0x7f00000035c0)=@qipcrtr, 0x80, &(0x7f0000004840)=[{&(0x7f0000003640)=""/70, 0x46}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/136, 0x88}, {&(0x7f0000004780)=""/134, 0x86}], 0x4, &(0x7f0000004880)=""/106, 0x6a}, 0x7}, {{&(0x7f0000004900)=@generic, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004980)=""/132, 0x84}], 0x1, &(0x7f0000004a80)=""/171, 0xab}, 0x5}, {{&(0x7f0000004b40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004bc0)=""/27, 0x1b}, {&(0x7f0000004c00)=""/10, 0xa}, {&(0x7f0000004c40)=""/45, 0x2d}, {&(0x7f0000004c80)=""/92, 0x5c}, {&(0x7f0000004d00)=""/194, 0xc2}], 0x5}, 0x5}], 0x6, 0x2141, &(0x7f0000005040)={r2, r3+10000000}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000005080)={0xd, 0x33, 0x9, 0x2, 0x1, 0x6, 0x2, 0xa2, 0xffffffffffffffff}) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005100), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000051c0)={&(0x7f00000050c0)={0x10, 0x0, 0x0, 0x10020401}, 0xc, &(0x7f0000005180)={&(0x7f0000005140)={0x40, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000052) (async) ioctl$RTC_PIE_ON(r0, 0x7005) r6 = dup3(r4, r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000005240)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000005300)={'tunl0\x00', &(0x7f0000005280)={'gre0\x00', 0x0, 0x700, 0x7800, 0x8, 0x2, {{0x9, 0x4, 0x3, 0x8, 0x24, 0x65, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0x29, [@broadcast, @multicast2, @multicast2]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000005440)={&(0x7f0000005200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005400)={&(0x7f0000005340)={0x94, r5, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x22}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f00000055c0)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005580)={&(0x7f00000054c0)={0x88, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x884}, 0x1) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000005600)={0xb6, 0x0, 0x200}) (async) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f0000005680)="2486962489dc310b6981ea003adff0f74c4196675dc2f3d3a167") (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005700), r9) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000005740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000005800)={&(0x7f00000056c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000057c0)={&(0x7f0000005780)={0x24, r10, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000005840), &(0x7f0000005880), 0x2, 0x3) connect$unix(r4, &(0x7f00000058c0)=@abs={0x72d20bf432629a26, 0x0, 0x4e22}, 0x6e) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000005a00)={&(0x7f0000005940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000059c0)={&(0x7f0000005980)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c0885}, 0x4004820) (async) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000005b80)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005b40)={&(0x7f0000005a80)={0xa0, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) bind$alg(r4, &(0x7f0000005bc0)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) (async) fcntl$getownex(r6, 0x10, &(0x7f0000005c40)={0x0, 0x0}) sched_setscheduler(r12, 0x6, &(0x7f0000005c80)=0x526) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000005) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000005d80)={&(0x7f0000005cc0)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000005d40)={&(0x7f0000005d00)={0x3c, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 6.081794593s ago: executing program 5 (id=5504): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x34}}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB="02c92012000e0005001d7f0a00080020018100ff070400"], 0x17) write(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161182) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) 6.023898031s ago: executing program 0 (id=5505): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) eventfd2(0x0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) write$eventfd(r3, &(0x7f0000000040)=0x9, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4d93f3fec2205dd5, 0x10, r0, 0x3b7ab000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff0000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, r8}}, 0x30) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) 6.023462621s ago: executing program 4 (id=5506): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000600)={0x50, 0x0, r1, {0x7, 0x2b, 0x11, 0x13825248, 0x0, 0x0, 0x1, 0x2001}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff6, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80003, 0x5, {0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6000, 0xb, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x400000, 0xd04, 0x4, 0x0, 0x2, {0xffffffffffffffff, 0x8, 0xfffffffffffffffd, 0x2, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x404, 0x2000, 0x101, 0x0, r2, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x5802, 0x85) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) sendmsg$NFC_CMD_VENDOR(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20008010) 5.625012414s ago: executing program 0 (id=5507): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000"], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r3, &(0x7f0000000900)=[{&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/225, 0xe1}], 0x2) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x0, 0x65, 0x0, r0}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 4.533582428s ago: executing program 2 (id=5508): sched_setscheduler(0x0, 0x1, 0x0) r0 = gettid() r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)="08009946db2992d6", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007"], 0x40}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x6, 0xb, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x113}, 0x20) sendmmsg$inet(r4, &(0x7f0000000600), 0x0, 0x20008844) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000640)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000002b40)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000003700)=ANY=[@ANYBLOB="6d49d178199facccd01806fb35fe9796f2fafcc169718c0aaa655efab47a7423f1ccafebe2849aafd2b0d8aa5330219b9b9ec3357584f24458dee015ad5542bd64960939778a155ece97440286af96f0d174560bbfb99e0644b9ff1d6c1571712b316906a6a65833ceb7337af9828c9e969da7703e8d12266991d668b5b35d5da935ff82b459c749257982293b4412af17fda98055047a724ce5bff343a143d6", @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0800050001000000f4020880440000801400040002004e2000000000000000000000000006000500400000002400010000000000000000000000000000000000000000000000000000000000000000008c00008024000200b6d7d80b2a333d3aa8bdfee4b2790eafa65f1ba6fd0c4ba9ca1ede3b2aedb6971400040002004e21000000000000000000000000200004000a004e2300000072fe8000000000000000000000000000aa0200000008000300000000000600050000000000200004000a004e2100000001fc0100000000000000000000000000000b0000000400008084000080240002001116964b5a84f55929886d9ad5259b324ed67e225aec32aec5efbf20316f1e542c00098028000080060001000a00000014000200ff010000000000000000000000000001050003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a00010000000400098098010080080003000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050001800000060005000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b06000500060000000800030003000000240109801c000080060001000200000008000200ac1414aa050003000200000064000080060001000200000008000200e00000010500030002000000060001000a0000001400020000000000000000000000ffffe00000020500030002000000060001000a00000014000200fc0100000000000000000000000000010500030001000000a00000800600010002000000080002008000000005000300030000000600010002000000080002006401010205000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200640101010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200fe80000000000000000000000000001d0500030001000000000e08801400008008000300050000000600050097ca00000c0000800800030001000000e80000807400098070000080060001000a00000014000200000000000000000000000000000000010500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a0000001400020000000000000000000000ffff0a010102050003000000000024000200c6bf772e5e96d72178135fd6f129914a8ad373d7af8919f6def6b9dad6790d7308000a0001000000200004000a004e230000000bfe80000000000000000000000000001b0200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222800008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffac03008024000200c81cf1324a088945bb869750c7f6399dcdc0c61feb07bd9064c7757e4c32fec408000a000100000006000500104c00007403098094000080060001000200000008000200ac1e00010500030001000000060001000200000008000200ffffffff05000300010000000600010002000000080002007f0000010500030000000000060001000a00000014000200000000000000000000000000000000000500030001000000060001000a00000014000200ff010000000000000000000000000001050003000100000040000080060001000200000008000200e00000020500030003000000060001000a00000014000200000000000000000000000000000000000500030003000000340000800600010002000000080002000a010100050003000200000006000100020000000800020064010101050003000300000018010080060001000200000008000200640101010500030001000000060001000200000008000200e00000020500030003000000060001000a00000014000200000000000000000000000000000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200640101000500030002000000060001000200000008000200ac14140d0500030001000000060001000200000008000200ffffffff0500030000000000060001000200000008000200ac1414aa05000300000000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000f4000080060001000200000008000200ac1414180500030001000000060001000200000008000200ac14143d0500030001000000060001000a00000014000200fe80000000000000000000000000003c0500030003000000060001000200000008000200e00000020500030000000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000a00000014000200000000000000000000000000000000000500030001000000060001000a00000014000200fe8000000000000000000000000000bb05000300030000000600010002000000080002006401010105000300000000001c0000800600010002000000080002000a010101050003000300000040000080060001000200000008000200640101000500030000000000060001000a000000140002002001000000000000000000000000000005000300010000002009008090020980b8000080060001000a00000014000200fc0000000000000000000000000000010500030000000000060001000200000008000200ac1414bb05000300020000000600010002000000080002000a0101010500030001000000060001000200000008000200e00000020500030003000000060001000a00000014000200fe80000000000000000000000000003c0500030001000000060001000a00000014000200ff020000000000000000000000000001050003000100000094000080060001000a00000014000200000000000000000000000000000000010500030001000000060001000200000008000200640101000500030000000000060001000a00000014000200fc00000000000000000000000000000005000300000000000600010002000000080002007f0000010500030002000000060001000200000008000200e00000010500030000000000b8000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ffffffff0500030003000000060001000a00000014000200ff02000000000000000000000000000105000300000000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000aa050003000000000006000100020000000800020000000000050003000200000088000080060001000200000008000200640101000500030002000000060001000200000008000200ac1414bb0500030002000000060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e0000001050003000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff24000100000000000000000000000000000000000000000000000000000000000000000008000300000000001400040002004e24e0000001000000000000000008000300070000002402098058000080060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000200000008000200e00000020500030002000000060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200fe8800000000000000000000000001010500030001000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000a00000014000200fc0000000000000000000000000000000500030003000000b8000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030001000000060001000200000008000200ac1414bb0500030001000000060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000200000008000200000000000500030001000000060001000a00000014000200fc010000000000000000000000000001050003000100000028000080060001000a00000014000200fe8000000000000000000000000000330500030000000000f4030980e8000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000a00000014000200000000000000000000000000000000000500030003000000060001000200000008000200e00000020500030003000000060001000a00000014000200000000000000000000000000000000000500030003000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000a00000014000200fc020000000000000000000000000001050003000300000064000080060001000a00000014000200fc0100000000000000000000000000000500030003000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e000000205000300000000001c0000800600010002000000080002007f00000105000300030000000c010080060001000200000008000200000000000500030002000000060001000200000008000200e00000020500030000000000060001000a00000014000200000000000000000000000000000000000500030003000000060001000a00000014000200fc0000000000000000000000000000010500030001000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fc0000000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000010500030001000000e8000080060001000200000008000200e00000020500030001000000060001000200000008000200ac1e010105000300030000000600010002000000080002007f0000010500030003000000060001000200000008000200ffffffff0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000a00000014000200fc0000000000000000000000000000010500030002000000940000800600010002000000080002000a0101000500030003000000060001000200000008000200ac1414bb0500030002000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff0500030001000000060001000a00000014000200fc0200000000000000000000000000000500030000000000060005000300000008000700030300000800050001000000"], 0x1128}, 0x1, 0x0, 0x0, 0x11}, 0x4000810) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r6 = getpid() fcntl$setownex(r2, 0xf, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x35, 0x0, 0x0) sendto$inet(r4, &(0x7f00000000c0)="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", 0x503, 0x6000000000000000, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) migrate_pages(r6, 0x100000000, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.66235673s ago: executing program 0 (id=5509): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setresuid(0x0, r4, 0xee00) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@multicast2, @in=@local, 0x4e20, 0x62, 0x4e20, 0x7, 0x2, 0x70, 0x60, 0x2, 0x0, r4}, {0x1, 0x43604398, 0x2, 0x9f88, 0x8, 0x9, 0x3, 0x7}, {0x9, 0x6, 0x2, 0x7}, 0x4, 0x6e6bb3, 0x0, 0x0, 0x0, 0x2}, {{@in=@empty, 0x4d2, 0x6c}, 0x2, @in=@private=0xa010100, 0x3504, 0x1, 0x3, 0x9, 0x5, 0x4, 0x100}}, 0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r5, 0xfffffe4d}}, 0x48) syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f00000000c0)=0xa7) close(0x3) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e87"], 0x80}}, 0x24000000) 3.449243294s ago: executing program 4 (id=5510): r0 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000005c0)={0x0, @bt={0xa00, 0x63e, 0x1, 0x1, 0xd59f83, 0x7, 0x2, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x3f4d, 0xba3, 0x4, 0x0, {0x4, 0xffffffff}, 0xd0, 0x9}}) 2.931607542s ago: executing program 4 (id=5511): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000"], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r3, &(0x7f0000000900)=[{&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/225, 0xe1}], 0x2) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x0, 0x65, 0x0, r0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) 2.893710288s ago: executing program 1 (id=5512): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fd\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, 0x0, &(0x7f00000000c0)=r3}, 0x20) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) mkdir(0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x80047437, 0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r8 = syz_open_dev$sg(0x0, 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) write$sndseq(r9, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x985, 0x12) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001100)={r1, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$netlink(0x10, 0x3, 0x8000000004) 2.209586454s ago: executing program 5 (id=5513): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0xffff, @local, 0x81}, 0x1c) 1.872455929s ago: executing program 1 (id=5514): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x120006200, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {0x1}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1.634475123s ago: executing program 4 (id=5515): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xde, &(0x7f0000000740)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @generic={{0x11, 0x4, 0x3, 0x22, 0xd0, 0x66, 0x0, 0x1, 0x29, 0x0, @empty, @remote, {[@timestamp_addr={0x44, 0x14, 0x86, 0x1, 0x1, [{@local, 0xffff}, {@broadcast, 0x3}]}, @timestamp_addr={0x44, 0xc, 0x45, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x8}]}, @ssrr={0x89, 0x3, 0xf0}, @end, @generic={0x89, 0x7, "fa3ee30708"}, @generic={0x89, 0x2}, @end]}}, "452b8a6ff0200a2f3c09dea05777a0477f3baada23bf054bbf7dd03f05018e37a5f06e3134217e977c9e00f779884a352c93fa3357bcb5d13ae9900f84117cd2e4bf7b7d69317371eb51998fbcb404e6558002eb218ab73b13e62c1bf5390c0752b1e8963065b53922bedfcf35715b5e411bf4d88ad9dc6a6c853f80411ac85854dcbf2119a8cf6bc0140c74"}}}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) syz_open_dev$usbfs(0x0, 0x6, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) io_uring_enter(0xffffffffffffffff, 0x6a8a, 0xffefffff, 0x21, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, 0x0, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, &(0x7f0000000580)={0x40, 0x30, 0x27, {0x27, 0x21, "385d2209a82805ab4aefa7976e5cac487ab834422fafe096a72a5bbc331d70497abbaf6f8e"}}, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x0, "8152c030"}, @local=@item_4={0x3, 0x2, 0x8, "e8a2056d"}, @main=@item_4={0x3, 0x0, 0xc, "2a8e4d64"}, @main=@item_4={0x3, 0x0, 0xb, "679074fe"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0xc92}}}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x6000, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1e74b11af0c80602ac906194acb1a1588304d5bf0675558bcba61848b15f95350e6feb341b58415dcc9f14bc5db6c6c4de6469b8830242ee907e1988110b0c31c4123985ff4d9b53e92f9f72345b7615b329afd9c04f91196088d16c63ddc42b07202e8120b8ec968058312df6d583e9c84f7ab3e9a6b86b0271c079b7638e18d904d83a37d073db81a88b37d6cdbc6002e343e9bcb9cb98b51a8f6c1ec5d671c866aca98182b06d098f2ecfe585dab3a0c", @ANYRESDEC], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) 1.625582934s ago: executing program 0 (id=5516): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fd\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, 0x0, &(0x7f00000000c0)=r3}, 0x20) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) mkdir(0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x80047437, 0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r8, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x985, 0x12) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001100)={r1, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0)="b9cf00007f1b5b09b671fbb015d310473c9f3b4db3bd6b61e4bb3d36f7ece92006a9acd7fe143d2ae7e0dbf522", &(0x7f0000000000), 0x2}, 0x20) socket$netlink(0x10, 0x3, 0x8000000004) 1.57879635s ago: executing program 1 (id=5517): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}}, 0x0) (fail_nth: 8) 417.302391ms ago: executing program 1 (id=5518): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) eventfd(0xf68d) unshare(0x2a020400) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000300)={0xd, @pix={0x1, 0xfbc2, 0x32314142, 0x8, 0xb1, 0xff, 0x7, 0xffffffff, 0x1, 0x7, 0x0, 0x6}}) r3 = eventfd(0x200) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) unshare(0x32040800) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x0, r3}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) sched_setscheduler(0x0, 0x2, 0x0) ioctl$KVM_CAP_SYNC_REGS(r1, 0x4068aea3, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) getpid() read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0xa052) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x4000006, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @p_u16=&(0x7f00000003c0)=0x6}}) r8 = socket$key(0xf, 0x3, 0x2) recvmmsg(r8, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010001fff26bd7000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000e6001850000a24000e0006000000000001000000000000000080f5ff02000000ff070003060000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 13.84834ms ago: executing program 0 (id=5519): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x101080) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000540)=""/102400, 0x19000) getpid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x100) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 0s ago: executing program 2 (id=5520): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x703802, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) timerfd_create(0x9, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012102, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@int=0x1, 0x4) connect$netlink(r4, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x7d, 0x0, 0x60, @private2, @mcast1, 0x10, 0x20, 0x4, 0x9181}}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000280)={@rand_addr=0x64010101, @multicast1, r5}, 0xc) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xc, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @global=@item_012={0x1, 0x1, 0x2, "ed"}]}}, 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$HIDIOCGREPORT(r8, 0x400c4807, &(0x7f0000000040)={0x3, 0xffffffff, 0x8}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x3, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): 0 [ 1976.232404][ T24] usb 4-1: config 9 interface 101 altsetting 8 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1976.266300][ T24] usb 4-1: config 9 interface 101 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 1976.301420][ T24] usb 4-1: config 9 interface 101 has no altsetting 0 [ 1976.323604][ T24] usb 4-1: New USB device found, idVendor=054c, idProduct=009a, bcdDevice=a9.7e [ 1976.346870][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.368365][ T24] usb 4-1: Product: syz [ 1976.381500][ T24] usb 4-1: Manufacturer: syz [ 1976.394298][ T24] usb 4-1: SerialNumber: syz [ 1976.823052][T26362] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1976.832093][T26362] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1976.894150][ T30] audit: type=1400 audit(1976.872:5019): avc: denied { connect } for pid=26360 comm="syz.1.5066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1977.179611][ T5730] usb 5-1: USB disconnect, device number 38 [ 1977.676290][ T30] audit: type=1326 audit(1977.572:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.4.5068" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331699ce59 code=0x7ffc0000 [ 1977.736451][T26369] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1977.747267][T26369] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1977.756933][T26369] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1977.764667][T26369] UDF-fs: Scanning with blocksize 512 failed [ 1977.774920][T26369] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1977.785355][T26369] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1977.795017][T26369] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1977.802713][T26369] UDF-fs: Scanning with blocksize 1024 failed [ 1977.811952][T26369] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1977.821959][T26369] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1977.831569][T26369] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1977.839210][T26369] UDF-fs: Scanning with blocksize 2048 failed [ 1977.845969][T26369] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1977.855754][T26369] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1977.865360][T26369] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1977.873012][T26369] UDF-fs: Scanning with blocksize 4096 failed [ 1977.879077][T26369] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 1977.924149][ T30] audit: type=1326 audit(1977.572:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.4.5068" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331699ce59 code=0x7ffc0000 [ 1977.982106][ T30] audit: type=1326 audit(1977.582:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.4.5068" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f331699ce59 code=0x7ffc0000 [ 1978.019425][ T30] audit: type=1326 audit(1977.582:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.4.5068" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331699ce59 code=0x7ffc0000 [ 1978.049385][ T30] audit: type=1326 audit(1977.582:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.4.5068" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331699ce59 code=0x7ffc0000 [ 1978.056210][T26372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5069'. [ 1978.078846][ T30] audit: type=1326 audit(1977.582:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.4.5068" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f331699ce59 code=0x7ffc0000 [ 1978.111896][ T30] audit: type=1326 audit(1977.582:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.4.5068" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331699ce59 code=0x7ffc0000 [ 1978.139667][ T30] audit: type=1326 audit(1977.582:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.4.5068" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331699ce59 code=0x7ffc0000 [ 1978.171460][ T30] audit: type=1326 audit(1977.582:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.4.5068" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f331699ce59 code=0x7ffc0000 [ 1980.385433][ T5730] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1980.481380][ T24] usb 4-1: active config #9 != 1 ?? [ 1980.621375][T26174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1980.691711][ T24] usb 4-1: USB disconnect, device number 38 [ 1982.251881][T26392] tipc: Enabling of bearer rejected, failed to enable media [ 1983.109675][ T5722] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1983.227569][T26399] FAULT_INJECTION: forcing a failure. [ 1983.227569][T26399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1983.275998][T26399] CPU: 1 UID: 0 PID: 26399 Comm: syz.4.5072 Tainted: G L syzkaller #0 PREEMPT(full) [ 1983.276029][T26399] Tainted: [L]=SOFTLOCKUP [ 1983.276035][T26399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1983.276047][T26399] Call Trace: [ 1983.276053][T26399] [ 1983.276061][T26399] dump_stack_lvl+0x100/0x190 [ 1983.276086][T26399] should_fail_ex.cold+0x5/0xa [ 1983.276112][T26399] _copy_to_user+0x32/0xd0 [ 1983.276139][T26399] simple_read_from_buffer+0xcb/0x170 [ 1983.276163][T26399] proc_fail_nth_read+0x1af/0x230 [ 1983.276184][T26399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1983.276207][T26399] ? rw_verify_area+0xce/0x6d0 [ 1983.276223][T26399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1983.276243][T26399] vfs_read+0x1e4/0xb30 [ 1983.276267][T26399] ? __pfx_vfs_read+0x10/0x10 [ 1983.276285][T26399] ? __fget_files+0x215/0x3d0 [ 1983.276313][T26399] ? __fget_files+0x21f/0x3d0 [ 1983.276349][T26399] ksys_read+0x12a/0x250 [ 1983.276368][T26399] ? __pfx_ksys_read+0x10/0x10 [ 1983.276390][T26399] ? rcu_is_watching+0x12/0xc0 [ 1983.276420][T26399] do_syscall_64+0x115/0x870 [ 1983.276443][T26399] ? clear_bhb_loop+0x40/0x90 [ 1983.276465][T26399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1983.276483][T26399] RIP: 0033:0x7f331695d68e [ 1983.276499][T26399] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1983.276515][T26399] RSP: 002b:00007f3317935fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1983.276532][T26399] RAX: ffffffffffffffda RBX: 00007f33179366c0 RCX: 00007f331695d68e [ 1983.276543][T26399] RDX: 000000000000000f RSI: 00007f33179360a0 RDI: 0000000000000004 [ 1983.276554][T26399] RBP: 00007f3317936090 R08: 0000000000000000 R09: 0000000000000000 [ 1983.276565][T26399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1983.276575][T26399] R13: 00007f3316c16038 R14: 00007f3316c15fa0 R15: 00007ffd5372ab88 [ 1983.276599][T26399] [ 1983.487722][ T5722] usb 3-1: not running at top speed; connect to a high speed hub [ 1983.509838][ T5722] usb 3-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1983.560258][ T5722] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1983.592641][ T5722] usb 3-1: New USB device found, idVendor=0306, idProduct=ff3f, bcdDevice= 0.40 [ 1983.610472][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.665921][ T5722] usb 3-1: Product: 觻헦篒硌元加祚鈼孝誆臁楱Ὡ袅ꯈ嬥Ƿ្쿳变蓖厢쿣ӌ䔌轊ﺃ⎊慁ᱝ횝ꗿ똘ⅵ휐䵳힞ҏ [ 1983.736951][ T5722] usb 3-1: Manufacturer: Х [ 1983.768081][ T5722] usb 3-1: SerialNumber: 䠜䯘証靨렜⾴젋⌖䲀ⱃ [ 1983.803077][T26388] trusted_key: encrypted_key: insufficient parameters specified [ 1983.836002][T26395] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1984.170325][T26408] syzkaller1: entered promiscuous mode [ 1984.176597][T26408] syzkaller1: entered allmulticast mode [ 1985.195939][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1985.195972][ T30] audit: type=1326 audit(1985.152:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26414 comm="syz.1.5080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1985.263472][T26418] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1985.273884][T26418] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1985.283547][T26418] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1985.291224][T26418] UDF-fs: Scanning with blocksize 512 failed [ 1985.299999][T26418] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1985.310119][T26418] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1985.319743][T26418] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1985.327397][T26418] UDF-fs: Scanning with blocksize 1024 failed [ 1985.335444][T26418] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1985.345523][T26418] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1985.355207][T26418] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1985.362891][T26418] UDF-fs: Scanning with blocksize 2048 failed [ 1985.385314][T26418] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1985.395470][T26418] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1985.405087][T26418] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1985.412812][T26418] UDF-fs: Scanning with blocksize 4096 failed [ 1985.418921][T26418] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 1985.434193][ T30] audit: type=1326 audit(1985.152:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26414 comm="syz.1.5080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1985.461218][ T30] audit: type=1326 audit(1985.152:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26414 comm="syz.1.5080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1985.555065][ T5722] usbhid 3-1:1.0: can't add hid device: -71 [ 1985.569442][ T5722] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1985.593376][ T5722] usb 3-1: USB disconnect, device number 34 [ 1985.600985][ T30] audit: type=1326 audit(1985.152:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26414 comm="syz.1.5080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1985.662747][ T30] audit: type=1326 audit(1985.152:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26414 comm="syz.1.5080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1986.190229][T26429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5082'. [ 1986.575397][ T30] audit: type=1326 audit(1985.152:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26414 comm="syz.1.5080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1986.643277][ T30] audit: type=1326 audit(1985.152:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26414 comm="syz.1.5080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1986.648026][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1986.812701][ T30] audit: type=1326 audit(1985.152:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26414 comm="syz.1.5080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1986.821725][T26433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5085'. [ 1986.865505][ T30] audit: type=1326 audit(1985.152:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26414 comm="syz.1.5080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1986.922829][ T30] audit: type=1326 audit(1985.152:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26414 comm="syz.1.5080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1989.486961][T26458] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[20632] was attempted by "\x09   905C   /dev/vhost-net 8    \x09   "[26458] [ 1990.296989][T26470] usb usb8: usbfs: process 26470 (syz.2.5086) did not claim interface 0 before use [ 1990.828123][T26476] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1990.838715][T26476] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1990.848340][T26476] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1990.856046][T26476] UDF-fs: Scanning with blocksize 512 failed [ 1990.865440][T26476] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1990.875702][T26476] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1990.885365][T26476] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1990.893044][T26476] UDF-fs: Scanning with blocksize 1024 failed [ 1990.921607][T26476] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1990.932226][T26476] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1990.942150][T26476] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1990.949833][T26476] UDF-fs: Scanning with blocksize 2048 failed [ 1990.958015][T26476] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1990.968103][T26476] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1990.977719][T26476] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1990.985387][T26476] UDF-fs: Scanning with blocksize 4096 failed [ 1990.991516][T26476] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 1990.994392][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1990.994405][ T30] audit: type=1326 audit(1990.762:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26473 comm="syz.1.5095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1991.047485][ T30] audit: type=1326 audit(1990.762:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26473 comm="syz.1.5095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1991.116653][ T30] audit: type=1326 audit(1990.762:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26473 comm="syz.1.5095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1991.193726][ T30] audit: type=1326 audit(1990.772:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26473 comm="syz.1.5095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1991.263410][ T30] audit: type=1326 audit(1990.772:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26473 comm="syz.1.5095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1991.318693][ T30] audit: type=1326 audit(1990.772:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26473 comm="syz.1.5095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1991.399232][ T30] audit: type=1326 audit(1990.772:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26473 comm="syz.1.5095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1991.535575][ T30] audit: type=1326 audit(1990.772:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26473 comm="syz.1.5095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1991.589582][ T30] audit: type=1326 audit(1990.772:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26473 comm="syz.1.5095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1991.677399][ T30] audit: type=1326 audit(1990.772:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26473 comm="syz.1.5095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29bf9ce59 code=0x7ffc0000 [ 1991.759597][T16547] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1991.940115][T16547] usb 2-1: Using ep0 maxpacket: 16 [ 1992.230047][ T138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1993.245254][T16547] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1993.322520][T16547] usb 2-1: config 251 has an invalid interface number: 195 but max is 0 [ 1993.331318][T16547] usb 2-1: config 251 has no interface number 0 [ 1993.342899][T16547] usb 2-1: config 251 interface 195 has no altsetting 0 [ 1993.360285][T16547] usb 2-1: New USB device found, idVendor=0546, idProduct=3191, bcdDevice=9c.33 [ 1993.369646][T16547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.397322][T16547] usb 2-1: Product: syz [ 1993.408884][T16547] usb 2-1: Manufacturer: syz [ 1993.423939][T16547] usb 2-1: SerialNumber: syz [ 1994.448475][T16547] gspca_main: sunplus-2.14.0 probing 0546:3191 [ 1994.466446][T16547] gspca_sunplus: reg_w_riv err -71 [ 1994.479191][T16547] sunplus 2-1:251.195: probe with driver sunplus failed with error -71 [ 1994.514289][T16547] usb 2-1: USB disconnect, device number 57 [ 1995.314546][T26500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1996.020526][T26509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5105'. [ 1996.084267][T26509] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26509 comm=syz.1.5105 [ 1996.476716][T26517] FAULT_INJECTION: forcing a failure. [ 1996.476716][T26517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1996.489912][T26517] CPU: 1 UID: 0 PID: 26517 Comm: syz.1.5106 Tainted: G L syzkaller #0 PREEMPT(full) [ 1996.489941][T26517] Tainted: [L]=SOFTLOCKUP [ 1996.489948][T26517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1996.489959][T26517] Call Trace: [ 1996.489966][T26517] [ 1996.489974][T26517] dump_stack_lvl+0x100/0x190 [ 1996.490000][T26517] should_fail_ex.cold+0x5/0xa [ 1996.490026][T26517] _copy_to_user+0x32/0xd0 [ 1996.490051][T26517] simple_read_from_buffer+0xcb/0x170 [ 1996.490076][T26517] proc_fail_nth_read+0x1af/0x230 [ 1996.490097][T26517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1996.490119][T26517] ? rw_verify_area+0xce/0x6d0 [ 1996.490136][T26517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1996.490156][T26517] vfs_read+0x1e4/0xb30 [ 1996.490179][T26517] ? __pfx_vfs_read+0x10/0x10 [ 1996.490197][T26517] ? __fget_files+0x215/0x3d0 [ 1996.490225][T26517] ? __fget_files+0x21f/0x3d0 [ 1996.490254][T26517] ksys_read+0x12a/0x250 [ 1996.490273][T26517] ? __pfx_ksys_read+0x10/0x10 [ 1996.490291][T26517] ? exit_to_user_mode_loop+0xf3/0x670 [ 1996.490322][T26517] ? rcu_is_watching+0x12/0xc0 [ 1996.490351][T26517] do_syscall_64+0x115/0x870 [ 1996.490374][T26517] ? clear_bhb_loop+0x40/0x90 [ 1996.490396][T26517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1996.490415][T26517] RIP: 0033:0x7fc29bf5d68e [ 1996.490431][T26517] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1996.490448][T26517] RSP: 002b:00007fc29ce55fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1996.490465][T26517] RAX: ffffffffffffffda RBX: 00007fc29ce566c0 RCX: 00007fc29bf5d68e [ 1996.490478][T26517] RDX: 000000000000000f RSI: 00007fc29ce560a0 RDI: 0000000000000009 [ 1996.490489][T26517] RBP: 00007fc29ce56090 R08: 0000000000000000 R09: 0000000000000000 [ 1996.490500][T26517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1996.490512][T26517] R13: 00007fc29c216218 R14: 00007fc29c216180 R15: 00007ffda8c84e38 [ 1996.490537][T26517] [ 1996.760339][T14309] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1996.932390][T14309] usb 3-1: Using ep0 maxpacket: 8 [ 1996.960421][T14309] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1997.681325][T14309] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1997.694139][T14309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1997.706841][T14309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1997.717309][T14309] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1997.900552][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1998.038301][T14309] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1998.047525][T14309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.055650][T14309] usb 3-1: Product: syz [ 1998.059838][T14309] usb 3-1: Manufacturer: syz [ 1998.064421][T14309] usb 3-1: SerialNumber: syz [ 1998.090212][T14309] usb 3-1: config 0 descriptor?? [ 1998.193286][T14309] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input95 [ 1999.062366][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 1999.062384][ T30] audit: type=1400 audit(1999.042:5172): avc: denied { watch_sb } for pid=26532 comm="syz.0.5111" path="/459" dev="tmpfs" ino=2397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1999.533278][T26518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5108'. [ 1999.830030][ T5730] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2000.069627][T14309] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2000.239836][T14309] usb 2-1: Using ep0 maxpacket: 16 [ 2000.486432][T14309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2000.510548][ T24] usb 3-1: USB disconnect, device number 35 [ 2000.516965][T14309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2000.537876][T14309] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2000.580686][T14309] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2000.595898][T14309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.671303][T14309] usb 2-1: config 0 descriptor?? [ 2000.740099][T26555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5116'. [ 2000.827288][T26556] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[17143] was attempted by " [ 2001.173838][T26555] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26555 comm=syz.0.5116 [ 2001.174881][T26559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5117'. [ 2001.337383][T14309] microsoft 0003:045E:07DA.0054: item fetching failed at offset 6/34 [ 2001.350246][T26559] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26559 comm=syz.4.5117 [ 2001.355355][T14309] microsoft 0003:045E:07DA.0054: parse failed [ 2001.385143][T14309] microsoft 0003:045E:07DA.0054: probe with driver microsoft failed with error -22 [ 2001.425259][T26562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5118'. [ 2001.582907][T26562] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26562 comm=syz.0.5118 [ 2001.646699][T26566] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 2001.665288][T26567] loop9: detected capacity change from 0 to 524287936 [ 2001.673218][T16547] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2001.852185][T16547] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2001.861343][T16547] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2001.869303][T16547] usb 5-1: Product: syz [ 2001.873525][T16547] usb 5-1: SerialNumber: syz [ 2001.879681][T16547] usb 5-1: config 0 descriptor?? [ 2002.623058][T16547] usb 5-1: USB disconnect, device number 39 [ 2002.777187][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2002.796183][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2002.805473][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2002.817578][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2002.825217][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2002.857947][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2002.865135][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2002.874913][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2002.884711][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2003.187116][ T138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2003.211039][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2003.226587][T25119] block nbd0: Possible stuck request ffff888028387000: control (read@0,1024B). Runtime 60 seconds [ 2003.237727][T14309] usb 2-1: USB disconnect, device number 58 [ 2003.246400][T25119] block nbd0: Possible stuck request ffff8880283871c0: control (read@1024,1024B). Runtime 60 seconds [ 2003.257647][T25119] block nbd0: Possible stuck request ffff888028387380: control (read@2048,1024B). Runtime 60 seconds [ 2003.287319][T25119] block nbd0: Possible stuck request ffff888028387540: control (read@3072,1024B). Runtime 60 seconds [ 2003.309615][ T5730] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2003.952002][ T5730] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 2003.969869][ T5730] usb 3-1: config 0 has no interface number 0 [ 2003.977755][ T5730] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 2003.987333][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.996938][ T5730] usb 3-1: Product: syz [ 2004.007067][ T5730] usb 3-1: Manufacturer: syz [ 2004.019269][ T5730] usb 3-1: SerialNumber: syz [ 2004.029173][ T5730] usb 3-1: config 0 descriptor?? [ 2004.308764][T26606] overlayfs: missing 'lowerdir' [ 2004.697907][ T5730] uvcvideo 3-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 2004.710103][ T5730] uvcvideo 3-1:0.64: No valid video chain found. [ 2004.752736][ T5730] usb 3-1: USB disconnect, device number 36 [ 2004.800589][T26578] bridge0: port 1(bridge_slave_0) entered blocking state [ 2004.826741][T26578] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.842407][T26578] bridge_slave_0: entered allmulticast mode [ 2005.322344][T26578] bridge_slave_0: entered promiscuous mode [ 2005.329943][T26578] bridge0: port 2(bridge_slave_1) entered blocking state [ 2005.337548][T26578] bridge0: port 2(bridge_slave_1) entered disabled state [ 2005.344932][T26578] bridge_slave_1: entered allmulticast mode [ 2005.349743][ T50] Bluetooth: hci3: command tx timeout [ 2005.352483][T26578] bridge_slave_1: entered promiscuous mode [ 2005.367736][T26609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5127'. [ 2005.390242][T26578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2005.401388][T26578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2005.458651][T26578] team0: Port device team_slave_0 added [ 2005.479106][T26578] team0: Port device team_slave_1 added [ 2006.908770][T26630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5131'. [ 2007.425051][ T50] Bluetooth: hci3: command tx timeout [ 2007.773040][T26578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2007.789301][T26578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2007.954590][T26578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2008.480990][T26578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2008.511834][T26578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2008.708841][T26578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2008.790034][T12947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2008.938916][T26578] hsr_slave_0: entered promiscuous mode [ 2008.971720][T26578] hsr_slave_1: entered promiscuous mode [ 2008.985026][T26578] debugfs: 'hsr0' already exists in 'hsr' [ 2009.001452][T26578] Cannot create hsr debugfs directory [ 2009.499749][ T50] Bluetooth: hci3: command tx timeout [ 2010.181908][T26578] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2010.210109][T26578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2010.295392][T26578] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2010.335503][T26578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2010.362903][T26578] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2010.398009][T26578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2010.420676][T26578] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2010.444162][T26578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2010.601425][T26659] FAULT_INJECTION: forcing a failure. [ 2010.601425][T26659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2010.630834][T26659] CPU: 1 UID: 0 PID: 26659 Comm: syz.1.5139 Tainted: G L syzkaller #0 PREEMPT(full) [ 2010.630863][T26659] Tainted: [L]=SOFTLOCKUP [ 2010.630870][T26659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2010.630883][T26659] Call Trace: [ 2010.630890][T26659] [ 2010.630897][T26659] dump_stack_lvl+0x100/0x190 [ 2010.630924][T26659] should_fail_ex.cold+0x5/0xa [ 2010.630950][T26659] _copy_from_user+0x2e/0xd0 [ 2010.630972][T26659] snd_pcm_oss_write2+0x1c2/0x400 [ 2010.630996][T26659] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 2010.631017][T26659] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 2010.631050][T26659] snd_pcm_oss_write+0x729/0xa30 [ 2010.631074][T26659] ? security_file_permission+0x76/0x210 [ 2010.631108][T26659] vfs_write+0x2aa/0x1070 [ 2010.631129][T26659] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 2010.631166][T26659] ? __pfx_vfs_write+0x10/0x10 [ 2010.631184][T26659] ? find_held_lock+0x2b/0x80 [ 2010.631201][T26659] ? __fget_files+0x215/0x3d0 [ 2010.631228][T26659] ? __fget_files+0x215/0x3d0 [ 2010.631255][T26659] ? __fget_files+0x21f/0x3d0 [ 2010.631283][T26659] ksys_write+0x12a/0x250 [ 2010.631301][T26659] ? __pfx_ksys_write+0x10/0x10 [ 2010.631322][T26659] ? rcu_is_watching+0x12/0xc0 [ 2010.631350][T26659] do_syscall_64+0x115/0x870 [ 2010.631372][T26659] ? clear_bhb_loop+0x40/0x90 [ 2010.631394][T26659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2010.631411][T26659] RIP: 0033:0x7fc29bf9ce59 [ 2010.631427][T26659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2010.631443][T26659] RSP: 002b:00007fc29ce77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2010.631461][T26659] RAX: ffffffffffffffda RBX: 00007fc29c216090 RCX: 00007fc29bf9ce59 [ 2010.631471][T26659] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000007 [ 2010.631482][T26659] RBP: 00007fc29ce77090 R08: 0000000000000000 R09: 0000000000000000 [ 2010.631491][T26659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2010.631501][T26659] R13: 00007fc29c216128 R14: 00007fc29c216090 R15: 00007ffda8c84e38 [ 2010.631525][T26659] [ 2010.848871][T16547] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2010.860971][T26578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2010.873755][T26578] 8021q: adding VLAN 0 to HW filter on device team0 [ 2010.897129][T26578] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2010.907484][T26578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2010.936510][T12947] bridge0: port 1(bridge_slave_0) entered blocking state [ 2010.943597][T12947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2010.974123][T12947] bridge0: port 2(bridge_slave_1) entered blocking state [ 2010.981211][T12947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2011.125725][T16547] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2011.145304][T16547] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2011.162724][T16547] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2011.188358][T16547] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 2011.199706][T16547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.375813][T26658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5133'. [ 2011.518468][T16547] usb 5-1: config 0 descriptor?? [ 2011.584173][ T50] Bluetooth: hci3: command tx timeout [ 2011.915662][T26676] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5141'. [ 2013.555494][T26652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2013.602343][T16547] usbhid 5-1:0.0: can't add hid device: -71 [ 2013.633390][T16547] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2013.651733][T26578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2013.679914][T16547] usb 5-1: USB disconnect, device number 40 [ 2013.781754][ T30] audit: type=1400 audit(2013.762:5173): avc: denied { ioctl } for pid=26691 comm="syz.0.5143" path="socket:[108272]" dev="sockfs" ino=108272 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2013.983161][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2014.671440][T26578] veth0_vlan: entered promiscuous mode [ 2015.135592][T26578] veth1_vlan: entered promiscuous mode [ 2015.205211][T26578] veth0_macvtap: entered promiscuous mode [ 2015.224838][T26578] veth1_macvtap: entered promiscuous mode [ 2015.263972][T26578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2015.372186][T26578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2015.413180][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.452797][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.515387][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.569497][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.009761][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2016.047552][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2016.385380][T22662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2016.401854][T22662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2016.832616][T26730] loop9: detected capacity change from 0 to 524287936 [ 2018.671540][T26744] fuse: Bad value for 'user_id' [ 2018.713236][T26744] fuse: Bad value for 'user_id' [ 2019.021741][T22662] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2019.661831][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2020.040777][T26763] netlink: 'syz.2.5157': attribute type 4 has an invalid length. [ 2020.170348][ T50] Bluetooth: Unknown LE signaling command 0x1d [ 2020.185677][ T50] Bluetooth: Wrong link type (-22) [ 2021.624640][ T50] Bluetooth: Unknown LE signaling command 0x1d [ 2021.631179][ T50] Bluetooth: Wrong link type (-22) [ 2023.719824][ T5730] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2023.879712][ T5730] usb 3-1: Using ep0 maxpacket: 16 [ 2023.889053][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2023.944047][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2023.997149][ T5730] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2024.071620][ T5730] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2024.116401][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.266022][ T5730] usb 3-1: config 0 descriptor?? [ 2024.824577][ T1170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2024.847941][ T5730] microsoft 0003:045E:07DA.0055: item fetching failed at offset 6/34 [ 2024.866866][ T5730] microsoft 0003:045E:07DA.0055: parse failed [ 2025.304415][ T5730] microsoft 0003:045E:07DA.0055: probe with driver microsoft failed with error -22 [ 2025.370790][T26795] loop9: detected capacity change from 0 to 524287936 [ 2025.424271][ T1170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2026.039624][T25671] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2026.269882][T26809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5170'. [ 2026.781324][T25671] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2026.805626][T25671] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2026.828004][T25671] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2026.830367][T15313] usb 3-1: USB disconnect, device number 37 [ 2026.846858][T25671] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.879166][T25671] usb 6-1: config 0 descriptor?? [ 2027.917453][T26824] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2027.953626][T26824] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2028.002870][T26819] loop9: detected capacity change from 0 to 524287936 [ 2028.196825][T26824] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2028.252066][T25671] usbhid 6-1:0.0: can't add hid device: -71 [ 2028.258090][T25671] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2028.308147][T25671] usb 6-1: USB disconnect, device number 2 [ 2029.160418][T16547] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2029.529742][T25671] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 2029.834273][T25671] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2029.901608][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2029.912757][T25671] usb 2-1: config 6 has an invalid interface number: 201 but max is 0 [ 2029.934416][T25671] usb 2-1: config 6 has no interface number 0 [ 2029.952273][T25671] usb 2-1: config 6 interface 201 has no altsetting 0 [ 2029.979814][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 2029.992084][T25671] usb 2-1: string descriptor 0 read error: -22 [ 2030.445552][T26844] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5179'. [ 2030.454770][T26844] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5179'. [ 2030.463877][T26844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5179'. [ 2030.828735][T25671] usb 2-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=f1.30 [ 2030.839076][T25671] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.043694][T25671] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 2031.061818][T25671] gspca_mr97310a: reg write [21] error -22 [ 2031.069486][T25671] mr97310a 2-1:6.201: probe with driver mr97310a failed with error -22 [ 2031.083542][T26849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5181'. [ 2031.179856][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2031.899691][T26857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5182'. [ 2032.623315][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 2032.630960][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2033.278387][T22274] usb 2-1: USB disconnect, device number 59 [ 2033.744053][T25119] block nbd0: Possible stuck request ffff888028387000: control (read@0,1024B). Runtime 90 seconds [ 2033.758967][T25119] block nbd0: Possible stuck request ffff8880283871c0: control (read@1024,1024B). Runtime 90 seconds [ 2033.771510][T25119] block nbd0: Possible stuck request ffff888028387380: control (read@2048,1024B). Runtime 90 seconds [ 2033.784150][T25119] block nbd0: Possible stuck request ffff888028387540: control (read@3072,1024B). Runtime 90 seconds [ 2034.699652][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 2035.087998][T26867] netlink: 'syz.2.5185': attribute type 21 has an invalid length. [ 2035.096209][T26867] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5185'. [ 2035.584034][T26869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5186'. [ 2035.728285][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2037.159906][ T4984] udevd[4984]: worker [25601] /devices/virtual/block/nbd0 is taking a long time [ 2037.184568][ T1170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2038.963556][T26884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2039.445255][T26889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5191'. [ 2039.454392][T26889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5191'. [ 2039.463528][T26889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5191'. [ 2039.932095][T26892] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5193'. [ 2039.958445][T26892] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5193'. [ 2040.129909][T26897] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5195'. [ 2040.156306][T26897] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26897 comm=syz.5.5195 [ 2040.485357][T26895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5189'. [ 2040.517396][T26903] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5197'. [ 2040.590110][ T30] audit: type=1400 audit(2040.572:5174): avc: denied { setopt } for pid=26902 comm="syz.5.5197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2040.709300][ T30] audit: type=1400 audit(2040.682:5175): avc: denied { recv } for pid=26893 comm="syz.4.5194" saddr=10.128.0.169 src=30006 daddr=10.128.0.48 dest=58432 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2040.748646][T26903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5197'. [ 2040.790563][T26903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5197'. [ 2041.421578][T12947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2041.432349][ T30] audit: type=1400 audit(2041.402:5176): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 2041.459094][T25671] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2041.515173][ T30] audit: type=1400 audit(2041.402:5177): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 2041.641110][T25671] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 2041.654065][T25671] usb 2-1: config 0 has no interface number 0 [ 2041.682740][T25671] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 2041.696595][T25671] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.718877][T25671] usb 2-1: Product: syz [ 2041.730652][T25671] usb 2-1: Manufacturer: syz [ 2041.742904][T25671] usb 2-1: SerialNumber: syz [ 2041.761210][T25671] usb 2-1: config 0 descriptor?? [ 2042.040838][T26927] overlayfs: missing 'lowerdir' [ 2043.069274][T25671] uvcvideo 2-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 2043.082681][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2043.166875][T25671] uvcvideo 2-1:0.64: No valid video chain found. [ 2043.231455][T25671] usb 2-1: USB disconnect, device number 60 [ 2044.441953][T26946] loop9: detected capacity change from 0 to 524287936 [ 2044.847228][T26932] netlink: 'syz.0.5203': attribute type 10 has an invalid length. [ 2044.913685][T26932] __nla_validate_parse: 4 callbacks suppressed [ 2044.913701][T26932] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5203'. [ 2045.012232][T26932] bridge0: port 3(veth1_macvtap) entered blocking state [ 2045.077179][T26932] bridge0: port 3(veth1_macvtap) entered disabled state [ 2045.093305][T26953] SELinux: policydb magic number 0xf97cf28c does not match expected magic number 0xf97cff8c [ 2045.121302][T26953] SELinux: failed to load policy [ 2045.128166][T26932] veth1_macvtap: entered allmulticast mode [ 2045.147619][T26953] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5211'. [ 2045.163907][T26932] veth1_macvtap: left allmulticast mode [ 2045.176349][T26932] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 2045.351706][T26957] loop9: detected capacity change from 0 to 524287936 [ 2045.739024][T26961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2045.783499][T25671] kernel read not supported for file /mdstat (pid: 25671 comm: kworker/0:0) [ 2046.435642][T26968] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5214'. [ 2046.444739][T26968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5214'. [ 2046.453694][T26968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5214'. [ 2046.821813][T26171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2046.945433][T25671] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2047.101457][T25671] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2047.118096][T25671] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 2047.150358][T25671] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=d4.82 [ 2047.169597][T25671] usb 5-1: New USB device strings: Mfr=252, Product=223, SerialNumber=33 [ 2047.204620][T25671] usb 5-1: Product: syz [ 2047.219290][T25671] usb 5-1: Manufacturer: syz [ 2047.236677][T25671] usb 5-1: SerialNumber: syz [ 2047.270006][T15313] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2047.282674][T25671] usb 5-1: config 0 descriptor?? [ 2047.310223][T25671] smsusb:smsusb_probe: board id=8, interface number 0 [ 2047.334363][T25671] smsusb:smsusb_probe: Device initialized with return code -19 [ 2047.452862][T15313] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 2047.481253][T15313] usb 3-1: config 0 has no interface number 0 [ 2047.510336][T15313] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 2047.531310][T15313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.552235][T15313] usb 3-1: Product: syz [ 2047.566540][T15313] usb 3-1: Manufacturer: syz [ 2047.600439][T15313] usb 3-1: SerialNumber: syz [ 2047.627223][T15313] usb 3-1: config 0 descriptor?? [ 2047.944405][T26983] overlayfs: missing 'lowerdir' [ 2048.247990][T26986] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5215'. [ 2048.412244][T26989] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16981] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[26989] [ 2048.472579][T26171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2048.682163][T15313] uvcvideo 3-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 2048.713913][T15313] uvcvideo 3-1:0.64: No valid video chain found. [ 2048.752924][T15313] usb 3-1: USB disconnect, device number 38 [ 2048.765260][T26997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.790717][T26998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2048.851191][T26997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2049.027385][T27003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5225'. [ 2049.606988][T27012] loop9: detected capacity change from 0 to 524287936 [ 2052.332237][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2052.835499][T27073] loop9: detected capacity change from 0 to 524287936 [ 2052.933724][T27071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2053.395196][T25671] hid_parser_main: 7 callbacks suppressed [ 2053.395218][T25671] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 2053.463004][T25671] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 2053.497693][T25671] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 2053.524293][T25671] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 2053.554213][T25671] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 2053.591043][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2053.623820][T25671] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 2053.673802][T25671] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 2053.713266][T25671] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 2053.771423][T25671] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 2053.830702][T25671] hid-generic 0006:0008:0001.0056: unknown main item tag 0x0 [ 2053.950470][T25671] hid-generic 0006:0008:0001.0056: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 2054.290187][ T30] audit: type=1400 audit(2054.122:5178): avc: denied { open } for pid=27081 comm="syz.1.5239" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2055.113706][T27086] fido_id[27086]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2055.147736][ T24] usb 5-1: USB disconnect, device number 42 [ 2055.839832][ T30] audit: type=1400 audit(2055.802:5179): avc: denied { mount } for pid=27098 comm="syz.5.5244" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2056.066654][ T30] audit: type=1400 audit(2055.842:5180): avc: denied { search } for pid=27098 comm="syz.5.5244" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2056.116287][ T30] audit: type=1400 audit(2055.852:5181): avc: denied { search } for pid=27098 comm="syz.5.5244" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2056.145462][T27094] loop9: detected capacity change from 0 to 524287936 [ 2056.493085][ T30] audit: type=1400 audit(2055.852:5182): avc: denied { read } for pid=27098 comm="syz.5.5244" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2056.639183][ T30] audit: type=1400 audit(2055.852:5183): avc: denied { read open } for pid=27098 comm="syz.5.5244" path="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2056.728761][ T30] audit: type=1400 audit(2056.662:5184): avc: denied { name_bind } for pid=27114 comm="syz.2.5246" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 2056.876354][T27119] syz_tun: entered allmulticast mode [ 2057.018134][T27119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2057.050510][T27123] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5248'. [ 2058.064202][ T1170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2058.357838][T27122] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 2058.421514][T27122] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2058.482514][T27119] syz_tun: left allmulticast mode [ 2058.631352][T14309] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2058.802719][T14309] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 2058.994892][T14309] usb 3-1: config 0 has no interface number 0 [ 2059.003222][T14309] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 2059.017446][T14309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.026035][T14309] usb 3-1: Product: syz [ 2059.030429][T14309] usb 3-1: Manufacturer: syz [ 2059.035049][T14309] usb 3-1: SerialNumber: syz [ 2059.042614][T14309] usb 3-1: config 0 descriptor?? [ 2059.358235][T17142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2059.635713][T27148] overlayfs: missing 'lowerdir' [ 2059.861399][T27154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5259'. [ 2061.019141][T14309] uvcvideo 3-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 2061.296495][T14309] uvcvideo 3-1:0.64: No valid video chain found. [ 2061.480927][T27183] loop9: detected capacity change from 0 to 524287936 [ 2061.490487][T14309] usb 3-1: USB disconnect, device number 39 [ 2061.540105][T15313] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2061.846644][T15313] usb 2-1: Using ep0 maxpacket: 16 [ 2061.878416][T15313] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 2061.934144][T15313] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2061.997134][T15313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2062.022292][T15313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2062.039283][T15313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2062.060980][T15313] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 2062.085870][T15313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.124477][T15313] usb 2-1: config 0 descriptor?? [ 2062.165888][T15313] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input96 [ 2062.459339][ T4969] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 2062.598890][T16547] hid_parser_main: 7 callbacks suppressed [ 2062.598909][T16547] hid-generic 0006:0008:0001.0057: unknown main item tag 0x0 [ 2062.719637][T15313] usb 2-1: USB disconnect, device number 61 [ 2062.720298][T16547] hid-generic 0006:0008:0001.0057: unknown main item tag 0x0 [ 2062.747590][T27202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5271'. [ 2062.784333][T16547] hid-generic 0006:0008:0001.0057: unknown main item tag 0x0 [ 2063.073493][T16547] hid-generic 0006:0008:0001.0057: unknown main item tag 0x0 [ 2063.082911][T16547] hid-generic 0006:0008:0001.0057: unknown main item tag 0x0 [ 2063.097957][T16547] hid-generic 0006:0008:0001.0057: unknown main item tag 0x0 [ 2063.107457][T16547] hid-generic 0006:0008:0001.0057: unknown main item tag 0x0 [ 2063.134518][T16547] hid-generic 0006:0008:0001.0057: unknown main item tag 0x0 [ 2063.143824][T16547] hid-generic 0006:0008:0001.0057: unknown main item tag 0x0 [ 2063.151536][T16547] hid-generic 0006:0008:0001.0057: unknown main item tag 0x0 [ 2063.163545][T16547] hid-generic 0006:0008:0001.0057: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 2063.272977][T26179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2063.792147][T27218] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[18572] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[27218] [ 2063.822482][T25119] block nbd0: Possible stuck request ffff888028387000: control (read@0,1024B). Runtime 120 seconds [ 2063.833953][T25119] block nbd0: Possible stuck request ffff8880283871c0: control (read@1024,1024B). Runtime 120 seconds [ 2063.844947][T25119] block nbd0: Possible stuck request ffff888028387380: control (read@2048,1024B). Runtime 120 seconds [ 2063.855947][T25119] block nbd0: Possible stuck request ffff888028387540: control (read@3072,1024B). Runtime 120 seconds [ 2064.260317][T15313] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2064.500717][T15313] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 2064.548477][T15313] usb 2-1: config 0 has no interface number 0 [ 2064.601082][T14309] hid-generic 0006:0008:0001.0058: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 2064.666461][T15313] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 2064.776560][T15313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.858588][T15313] usb 2-1: Product: syz [ 2064.914531][T15313] usb 2-1: Manufacturer: syz [ 2064.960359][T15313] usb 2-1: SerialNumber: syz [ 2065.121685][T15313] usb 2-1: config 0 descriptor?? [ 2065.177994][T27236] FAULT_INJECTION: forcing a failure. [ 2065.177994][T27236] name failslab, interval 1, probability 0, space 0, times 0 [ 2065.352448][T27236] CPU: 1 UID: 0 PID: 27236 Comm: syz.4.5280 Tainted: G L syzkaller #0 PREEMPT(full) [ 2065.352480][T27236] Tainted: [L]=SOFTLOCKUP [ 2065.352488][T27236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2065.352499][T27236] Call Trace: [ 2065.352506][T27236] [ 2065.352513][T27236] dump_stack_lvl+0x100/0x190 [ 2065.352545][T27236] should_fail_ex.cold+0x5/0xa [ 2065.352571][T27236] should_failslab+0xc2/0x120 [ 2065.352592][T27236] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2065.352622][T27236] ? __alloc_skb+0x140/0x710 [ 2065.352647][T27236] ? __alloc_skb+0x5b7/0x710 [ 2065.352675][T27236] __alloc_skb+0x140/0x710 [ 2065.352700][T27236] ? __alloc_skb+0x5b7/0x710 [ 2065.352725][T27236] ? __pfx___alloc_skb+0x10/0x10 [ 2065.352757][T27236] netlink_alloc_large_skb+0x69/0x150 [ 2065.352782][T27236] netlink_sendmsg+0x680/0xda0 [ 2065.352808][T27236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2065.352828][T27236] ? __might_fault+0x60/0x140 [ 2065.352863][T27236] ____sys_sendmsg+0x9e1/0xb70 [ 2065.352883][T27236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2065.352908][T27236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2065.352940][T27236] ___sys_sendmsg+0x190/0x1e0 [ 2065.352965][T27236] ? __pfx____sys_sendmsg+0x10/0x10 [ 2065.352999][T27236] ? find_held_lock+0x2b/0x80 [ 2065.353032][T27236] __sys_sendmmsg+0x205/0x430 [ 2065.353073][T27236] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2065.353108][T27236] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2065.353145][T27236] ? fput+0x79/0x100 [ 2065.353170][T27236] ? ksys_write+0x1ac/0x250 [ 2065.353190][T27236] ? __pfx_ksys_write+0x10/0x10 [ 2065.353209][T27236] ? trace_irq_enable.constprop.0+0x31/0x160 [ 2065.353238][T27236] __x64_sys_sendmmsg+0x9c/0x100 [ 2065.353265][T27236] ? lockdep_hardirqs_on+0x78/0x100 [ 2065.353288][T27236] do_syscall_64+0x115/0x870 [ 2065.353311][T27236] ? clear_bhb_loop+0x40/0x90 [ 2065.353334][T27236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2065.353352][T27236] RIP: 0033:0x7f331699ce59 [ 2065.353368][T27236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2065.353385][T27236] RSP: 002b:00007f3317936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2065.353404][T27236] RAX: ffffffffffffffda RBX: 00007f3316c15fa0 RCX: 00007f331699ce59 [ 2065.353417][T27236] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 2065.353429][T27236] RBP: 00007f3317936090 R08: 0000000000000000 R09: 0000000000000000 [ 2065.353440][T27236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2065.353451][T27236] R13: 00007f3316c16038 R14: 00007f3316c15fa0 R15: 00007ffd5372ab88 [ 2065.353476][T27236] [ 2065.892647][T27242] overlayfs: missing 'lowerdir' [ 2066.153644][T27248] /dev/nullb0: Can't open blockdev [ 2066.206577][T27234] fido_id[27234]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2066.408444][T27244] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 2066.509861][T27252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2066.587059][T15313] uvcvideo 2-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 2066.613665][T15313] uvcvideo 2-1:0.64: No valid video chain found. [ 2066.664124][T15313] usb 2-1: USB disconnect, device number 62 [ 2067.334058][T27263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2068.558445][T27275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5292'. [ 2068.946998][T11433] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2068.947409][T17142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2069.652578][T27286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5295'. [ 2070.842841][T27289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2071.540641][T25671] hid_parser_main: 24 callbacks suppressed [ 2071.540660][T25671] hid-generic 0006:0008:0001.0059: unknown main item tag 0x0 [ 2071.639925][T25671] hid-generic 0006:0008:0001.0059: unknown main item tag 0x0 [ 2071.692253][T25671] hid-generic 0006:0008:0001.0059: unknown main item tag 0x0 [ 2071.739614][T25671] hid-generic 0006:0008:0001.0059: unknown main item tag 0x0 [ 2071.808032][T25671] hid-generic 0006:0008:0001.0059: unknown main item tag 0x0 [ 2071.875405][T25671] hid-generic 0006:0008:0001.0059: unknown main item tag 0x0 [ 2071.932978][T25671] hid-generic 0006:0008:0001.0059: unknown main item tag 0x0 [ 2072.008929][T25671] hid-generic 0006:0008:0001.0059: unknown main item tag 0x0 [ 2072.046138][T25671] hid-generic 0006:0008:0001.0059: unknown main item tag 0x0 [ 2072.104207][T25671] hid-generic 0006:0008:0001.0059: unknown main item tag 0x0 [ 2072.240549][T25671] hid-generic 0006:0008:0001.0059: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 2072.442545][T27297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5299'. [ 2072.980605][T27300] fido_id[27300]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2073.037784][T27304] input: syz1 as /devices/virtual/input/input97 [ 2073.599372][T27316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5300'. [ 2073.691413][T16547] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2074.000771][T16547] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 2074.009037][T16547] usb 2-1: config 0 has no interface number 0 [ 2074.017683][T16547] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 2074.028323][T16547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.037910][T16547] usb 2-1: Product: syz [ 2074.042322][T16547] usb 2-1: Manufacturer: syz [ 2074.046956][T16547] usb 2-1: SerialNumber: syz [ 2074.055223][T16547] usb 2-1: config 0 descriptor?? [ 2074.354872][T27327] overlayfs: missing 'lowerdir' [ 2074.522021][T16547] uvcvideo 2-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 2074.579320][T16547] uvcvideo 2-1:0.64: No valid video chain found. [ 2074.678752][T16547] usb 2-1: USB disconnect, device number 63 [ 2074.700168][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2074.711136][ T1170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2074.789602][T27185] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2074.926959][T27334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2074.959600][T27185] usb 5-1: Using ep0 maxpacket: 32 [ 2074.966765][T27185] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 2074.976613][T27185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 2074.988228][T27185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 2075.003144][T27185] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 2075.012495][T27185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.020654][T27185] usb 5-1: Product: syz [ 2075.024961][T27185] usb 5-1: Manufacturer: syz [ 2075.029766][T27185] usb 5-1: SerialNumber: syz [ 2075.063873][T27185] usb 5-1: config 0 descriptor?? [ 2075.071802][T27329] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2075.080961][T27185] hub 5-1:0.0: bad descriptor, ignoring hub [ 2075.090225][T27185] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2075.136795][T27185] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input98 [ 2075.424106][T25671] usb 5-1: USB disconnect, device number 43 [ 2075.424245][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 2075.508582][T27346] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5313'. [ 2075.787926][T25671] hid-generic 0006:0008:0001.005A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 2075.797907][T20208] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2076.069032][T20208] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2076.137151][T20208] usb 6-1: config index 0 descriptor too short (expected 18, got 9) [ 2076.174867][T20208] usb 6-1: config 7 has too many interfaces: 255, using maximum allowed: 32 [ 2076.284807][T20208] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 255 [ 2076.390745][T20208] usb 6-1: string descriptor 0 read error: -22 [ 2076.450991][T20208] usb 6-1: New USB device found, idVendor=3731, idProduct=0113, bcdDevice=dd.b4 [ 2076.556965][T20208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.750112][T27354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5315'. [ 2076.921567][T27351] fido_id[27351]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2078.005588][T27363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5316'. [ 2078.550537][T20208] usb 6-1: USB disconnect, device number 3 [ 2078.982475][T27374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2079.136975][T27376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2079.541903][T27390] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16981] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[27390] [ 2079.629623][T15313] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2079.799654][T15313] usb 6-1: Using ep0 maxpacket: 16 [ 2079.807547][T15313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2079.820732][T15313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2079.831847][T15313] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2079.832411][T27387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5324'. [ 2079.845203][T15313] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2079.864334][T15313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2079.877455][T15313] usb 6-1: config 0 descriptor?? [ 2080.291227][T15313] microsoft 0003:045E:07DA.005B: item fetching failed at offset 6/34 [ 2080.309337][T15313] microsoft 0003:045E:07DA.005B: parse failed [ 2080.319637][T15313] microsoft 0003:045E:07DA.005B: probe with driver microsoft failed with error -22 [ 2080.329635][T22274] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2080.449946][T25671] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2080.472015][ T1124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2080.483229][T11433] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2080.491691][T22274] usb 3-1: Using ep0 maxpacket: 32 [ 2080.504644][ T30] audit: type=1400 audit(2080.482:5185): avc: denied { shutdown } for pid=27399 comm="syz.1.5328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2080.512558][T22274] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 2080.540605][T22274] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2080.545698][ T30] audit: type=1400 audit(2080.482:5186): avc: denied { read } for pid=27399 comm="syz.1.5328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2080.549376][T22274] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2080.582284][T22274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2080.593802][T22274] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2080.603812][T22274] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2080.604530][T27403] loop9: detected capacity change from 0 to 524287936 [ 2080.617411][T22274] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2080.636340][T27404] netlink: 'syz.1.5328': attribute type 10 has an invalid length. [ 2080.659666][T25671] usb 5-1: Using ep0 maxpacket: 8 [ 2080.663194][T22274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.670630][T25671] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2080.680784][T22274] usb 3-1: config 0 descriptor?? [ 2080.696675][T25671] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2080.712055][T25671] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 2080.721873][T27404] netlink: 'syz.1.5328': attribute type 10 has an invalid length. [ 2080.730206][T25671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.739591][T25671] usb 5-1: Product: syz [ 2080.753305][T25671] usb 5-1: Manufacturer: syz [ 2080.764570][T25671] usb 5-1: SerialNumber: syz [ 2080.778362][T27404] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2080.789493][T25671] usb 5-1: config 0 descriptor?? [ 2080.805471][T27404] team0: Port device dummy0 removed [ 2080.808880][T25671] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 2080.815141][T27404] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2080.969399][T27406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5327'. [ 2080.978595][T27406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5327'. [ 2080.990497][T27406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5327'. [ 2080.999859][T27406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5327'. [ 2081.368030][T25671] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 2081.383078][T25671] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 2081.400430][T22274] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2081.422742][T25671] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2081.426300][T22274] usb 3-1: USB disconnect, device number 40 [ 2081.468097][T22274] usblp0: removed [ 2081.610606][T27394] binder: 27393:27394 ioctl 4018620d 0 returned -22 [ 2081.650182][T25671] usb 5-1: USB disconnect, device number 44 [ 2082.086370][T27409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5329'. [ 2082.181441][T27409] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27409 comm=syz.2.5329 [ 2083.422195][T22274] hid_parser_main: 24 callbacks suppressed [ 2083.422208][T22274] hid-generic 0006:0008:0001.005C: unknown main item tag 0x0 [ 2083.460980][T22274] hid-generic 0006:0008:0001.005C: unknown main item tag 0x0 [ 2083.477708][T27420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2083.499698][T27185] usb 6-1: USB disconnect, device number 4 [ 2083.568098][T22274] hid-generic 0006:0008:0001.005C: unknown main item tag 0x0 [ 2083.616005][T22274] hid-generic 0006:0008:0001.005C: unknown main item tag 0x0 [ 2083.648484][T22274] hid-generic 0006:0008:0001.005C: unknown main item tag 0x0 [ 2083.688369][T22274] hid-generic 0006:0008:0001.005C: unknown main item tag 0x0 [ 2083.715778][T22274] hid-generic 0006:0008:0001.005C: unknown main item tag 0x0 [ 2083.738762][T22274] hid-generic 0006:0008:0001.005C: unknown main item tag 0x0 [ 2083.762864][T22274] hid-generic 0006:0008:0001.005C: unknown main item tag 0x0 [ 2083.772718][T22274] hid-generic 0006:0008:0001.005C: unknown main item tag 0x0 [ 2083.851351][T22274] hid-generic 0006:0008:0001.005C: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 2085.194533][T27441] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5339'. [ 2085.307625][ T50] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2086.230443][ T1124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2086.241394][T17142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2086.463189][T27453] gtp0: entered allmulticast mode [ 2086.615923][T27459] loop9: detected capacity change from 0 to 524287936 [ 2088.017641][T27468] capability: warning: `syz.4.5344' uses 32-bit capabilities (legacy support in use) [ 2088.169592][T27475] FAULT_INJECTION: forcing a failure. [ 2088.169592][T27475] name failslab, interval 1, probability 0, space 0, times 0 [ 2088.242332][T27475] CPU: 0 UID: 0 PID: 27475 Comm: syz.4.5347 Tainted: G L syzkaller #0 PREEMPT(full) [ 2088.242363][T27475] Tainted: [L]=SOFTLOCKUP [ 2088.242370][T27475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2088.242381][T27475] Call Trace: [ 2088.242387][T27475] [ 2088.242395][T27475] dump_stack_lvl+0x100/0x190 [ 2088.242422][T27475] should_fail_ex.cold+0x5/0xa [ 2088.242447][T27475] ? tomoyo_encode2+0xfb/0x3c0 [ 2088.242473][T27475] should_failslab+0xc2/0x120 [ 2088.242494][T27475] __kmalloc_noprof+0xe0/0x850 [ 2088.242521][T27475] ? d_absolute_path+0x136/0x1b0 [ 2088.242546][T27475] tomoyo_encode2+0xfb/0x3c0 [ 2088.242576][T27475] tomoyo_encode+0x29/0x50 [ 2088.242602][T27475] tomoyo_realpath_from_path+0x18c/0x690 [ 2088.242636][T27475] tomoyo_path_number_perm+0x23c/0x580 [ 2088.242660][T27475] ? tomoyo_path_number_perm+0x22e/0x580 [ 2088.242684][T27475] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2088.242730][T27475] ? find_held_lock+0x2b/0x80 [ 2088.242747][T27475] ? __fget_files+0x215/0x3d0 [ 2088.242772][T27475] ? hook_file_ioctl_common+0x149/0x410 [ 2088.242791][T27475] ? __fget_files+0x215/0x3d0 [ 2088.242818][T27475] ? __fget_files+0x21f/0x3d0 [ 2088.242844][T27475] security_file_ioctl+0xd3/0x230 [ 2088.242872][T27475] __x64_sys_ioctl+0xb7/0x210 [ 2088.242893][T27475] do_syscall_64+0x115/0x870 [ 2088.242918][T27475] ? clear_bhb_loop+0x40/0x90 [ 2088.242945][T27475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2088.242964][T27475] RIP: 0033:0x7f331699ce59 [ 2088.242981][T27475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2088.242999][T27475] RSP: 002b:00007f3317936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2088.243017][T27475] RAX: ffffffffffffffda RBX: 00007f3316c15fa0 RCX: 00007f331699ce59 [ 2088.243029][T27475] RDX: 0000200000000240 RSI: 00000000c0185500 RDI: 0000000000000004 [ 2088.243040][T27475] RBP: 00007f3317936090 R08: 0000000000000000 R09: 0000000000000000 [ 2088.243051][T27475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2088.243062][T27475] R13: 00007f3316c16038 R14: 00007f3316c15fa0 R15: 00007ffd5372ab88 [ 2088.243088][T27475] [ 2088.248048][T27475] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2088.825427][T27478] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5348'. [ 2089.510316][T25671] hid_parser_main: 7 callbacks suppressed [ 2089.510336][T25671] hid-generic 0006:0008:0001.005D: unknown main item tag 0x0 [ 2089.571598][T25671] hid-generic 0006:0008:0001.005D: unknown main item tag 0x0 [ 2089.619677][T25671] hid-generic 0006:0008:0001.005D: unknown main item tag 0x0 [ 2089.664162][T25671] hid-generic 0006:0008:0001.005D: unknown main item tag 0x0 [ 2089.741642][T25671] hid-generic 0006:0008:0001.005D: unknown main item tag 0x0 [ 2089.776417][T27490] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2089.796419][T25671] hid-generic 0006:0008:0001.005D: unknown main item tag 0x0 [ 2089.843486][T25671] hid-generic 0006:0008:0001.005D: unknown main item tag 0x0 [ 2089.917824][T25671] hid-generic 0006:0008:0001.005D: unknown main item tag 0x0 [ 2089.986079][T25671] hid-generic 0006:0008:0001.005D: unknown main item tag 0x0 [ 2090.028966][T25671] hid-generic 0006:0008:0001.005D: unknown main item tag 0x0 [ 2090.172403][T25671] hid-generic 0006:0008:0001.005D: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 2090.808345][T27493] fido_id[27493]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2091.371198][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2091.371483][ T1170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2092.686035][T27515] loop9: detected capacity change from 0 to 524287936 [ 2093.060150][T22274] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2093.229576][T22274] usb 6-1: Using ep0 maxpacket: 8 [ 2093.252192][T22274] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2093.270184][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2093.281450][T22274] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2093.295940][T22274] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 2093.316751][T22274] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.336716][T22274] usb 6-1: Product: syz [ 2093.355655][T22274] usb 6-1: Manufacturer: syz [ 2093.369078][T27525] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[18572] was attempted by "\x09   905C   /dev/vhost-net 8    \x09   "[27525] [ 2093.441607][T22274] usb 6-1: SerialNumber: syz [ 2093.452349][T22274] usb 6-1: config 0 descriptor?? [ 2093.484175][T22274] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 2093.765189][ T30] audit: type=1400 audit(2093.732:5187): avc: denied { wake_alarm } for pid=27518 comm="syz.2.5357" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2093.985854][T25119] block nbd0: Possible stuck request ffff888028387000: control (read@0,1024B). Runtime 150 seconds [ 2093.996971][T25119] block nbd0: Possible stuck request ffff8880283871c0: control (read@1024,1024B). Runtime 150 seconds [ 2094.008040][T25119] block nbd0: Possible stuck request ffff888028387380: control (read@2048,1024B). Runtime 150 seconds [ 2094.020189][T25119] block nbd0: Possible stuck request ffff888028387540: control (read@3072,1024B). Runtime 150 seconds [ 2094.082639][T22274] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 2094.092700][T22274] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 2094.127189][T22274] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2094.146499][T27536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2094.395904][T27497] binder: 27496:27497 ioctl 4018620d 0 returned -22 [ 2094.421619][T27539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5362'. [ 2094.444180][T22274] usb 6-1: USB disconnect, device number 5 [ 2096.972847][T22274] hid_parser_main: 7 callbacks suppressed [ 2096.972911][T22274] hid-generic 0006:0008:0001.005E: unknown main item tag 0x0 [ 2097.028157][T22274] hid-generic 0006:0008:0001.005E: unknown main item tag 0x0 [ 2097.053453][T22274] hid-generic 0006:0008:0001.005E: unknown main item tag 0x0 [ 2097.100503][T22274] hid-generic 0006:0008:0001.005E: unknown main item tag 0x0 [ 2097.109408][ T161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2097.165680][T22274] hid-generic 0006:0008:0001.005E: unknown main item tag 0x0 [ 2097.209914][T22274] hid-generic 0006:0008:0001.005E: unknown main item tag 0x0 [ 2097.259827][T22274] hid-generic 0006:0008:0001.005E: unknown main item tag 0x0 [ 2097.304115][T22274] hid-generic 0006:0008:0001.005E: unknown main item tag 0x0 [ 2097.433117][T22274] hid-generic 0006:0008:0001.005E: unknown main item tag 0x0 [ 2097.509165][T22274] hid-generic 0006:0008:0001.005E: unknown main item tag 0x0 [ 2097.658616][T22274] hid-generic 0006:0008:0001.005E: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 2097.740894][ T1170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2098.555485][T27560] fido_id[27560]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2098.591223][T27568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5367'. [ 2098.759726][T22274] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 2099.409738][T27574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5369'. [ 2099.831118][T22274] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2100.566269][T27580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2100.973358][T27584] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[18572] was attempted by " 905C   /dev/vhost-net 8    \x09   "[27584] [ 2102.022910][T27593] SELinux: ebitmap: truncated map [ 2102.120676][T27593] SELinux: failed to load policy [ 2102.225458][T22274] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2102.253343][T22274] usb 3-1: can't read configurations, error -71 [ 2102.275653][ T5722] kernel write not supported for file /uinput (pid: 5722 comm: kworker/0:6) [ 2102.553913][T27602] loop9: detected capacity change from 0 to 524287936 [ 2102.669622][ T5722] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2102.850087][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 2102.860236][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2102.879899][ T5722] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 2102.911887][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2102.944616][ T161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2102.972028][ T5722] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2103.001856][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.033251][ T5722] usb 5-1: Product: syz [ 2103.051950][ T5722] usb 5-1: Manufacturer: syz [ 2103.176003][ T5722] usb 5-1: SerialNumber: syz [ 2103.209545][T27611] loop9: detected capacity change from 0 to 524287936 [ 2103.335172][ T5722] usb 5-1: config 0 descriptor?? [ 2103.362015][ T5722] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 2103.470388][T27605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5378'. [ 2103.611600][T27598] input: syz1 as /devices/virtual/input/input99 [ 2103.838225][T27625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2103.859739][ T5722] usb 5-1: USB disconnect, device number 45 [ 2104.019777][T15313] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2104.079259][T27626] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16981] was attempted by " 905C   /dev/vhost-net 8    \x09   "[27626] [ 2104.379695][T15313] usb 6-1: Using ep0 maxpacket: 32 [ 2104.429100][T15313] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 2104.448436][T15313] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2104.518530][T15313] usb 6-1: config 0 has no interface number 0 [ 2104.537886][T15313] usb 6-1: config 0 interface 89 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2104.575772][T15313] usb 6-1: config 0 interface 89 has no altsetting 0 [ 2104.594946][T15313] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 2104.617221][T15313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.650611][T15313] usb 6-1: Product: syz [ 2104.659669][T25671] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2104.669616][T15313] usb 6-1: Manufacturer: syz [ 2104.677395][T15313] usb 6-1: SerialNumber: syz [ 2104.690610][T15313] usb 6-1: config 0 descriptor?? [ 2104.707862][T15313] hub 6-1:0.89: bad descriptor, ignoring hub [ 2104.718545][T15313] hub 6-1:0.89: probe with driver hub failed with error -5 [ 2104.734504][T15313] option 6-1:0.89: GSM modem (1-port) converter detected [ 2104.869780][T25671] usb 3-1: Using ep0 maxpacket: 16 [ 2104.882834][T25671] usb 3-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 2104.935878][T27621] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 2104.935878][T27621] program syz.5.5382 not setting count and/or reply_len properly [ 2105.846363][T25671] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2105.858721][T25671] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 175, changing to 11 [ 2105.907806][T25671] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 2106.677275][T25671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.685989][T25671] usb 3-1: Product: syz [ 2106.692129][T25671] usb 3-1: Manufacturer: syz [ 2106.696770][T25671] usb 3-1: SerialNumber: syz [ 2106.711524][T25671] usb 3-1: config 0 descriptor?? [ 2106.843452][T15313] usb 6-1: USB disconnect, device number 6 [ 2106.868947][T15313] option 6-1:0.89: device disconnected [ 2106.960400][T25671] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 2107.002390][T25671] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71 [ 2107.054535][T25671] usb 3-1: USB disconnect, device number 43 [ 2107.355418][T27652] PKCS7: Unknown OID: [4] 0.0 [ 2107.360177][T27652] PKCS7: Only support pkcs7_signedData type [ 2107.853799][T27650] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[18572] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[27650] [ 2108.620062][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2108.620139][ T161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2109.946132][T27670] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[20632] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[27670] [ 2110.329725][T15313] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2110.486595][T15313] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 2110.555162][T15313] usb 3-1: config 0 has no interface number 0 [ 2110.706651][T15313] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 2110.727305][T15313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.757622][T15313] usb 3-1: Product: syz [ 2110.777458][T15313] usb 3-1: Manufacturer: syz [ 2110.786994][T15313] usb 3-1: SerialNumber: syz [ 2110.803809][T15313] usb 3-1: config 0 descriptor?? [ 2111.189386][T15313] uvcvideo 3-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 2111.239391][T15313] uvcvideo 3-1:0.64: No valid video chain found. [ 2111.281989][T27716] vivid-003: ================= START STATUS ================= [ 2111.290028][T27716] vivid-003: RDS Tx I/O Mode: Controls [ 2111.295745][T27716] vivid-003: RDS Program ID: 32904 [ 2111.301225][T27716] vivid-003: RDS Program Type: 3 [ 2111.306600][T27716] vivid-003: RDS PS Name: VIVID-TX [ 2111.311956][T27716] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 2111.322336][T27716] vivid-003: RDS Stereo: true [ 2111.327142][T27716] vivid-003: RDS Artificial Head: false [ 2111.375316][T27716] vivid-003: RDS Compressed: false [ 2111.385135][T27716] vivid-003: RDS Dynamic PTY: false [ 2111.390665][T27716] vivid-003: RDS Traffic Announcement: false [ 2111.396915][T27716] vivid-003: RDS Traffic Program: true [ 2111.402936][T27716] vivid-003: RDS Music: true [ 2111.407822][T27716] vivid-003: ================== END STATUS ================== [ 2111.425676][T15313] usb 3-1: USB disconnect, device number 44 [ 2112.079897][T27726] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5413'. [ 2113.011407][ T50] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2113.772493][T27738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5414'. [ 2113.908338][T27741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5414'. [ 2114.381630][ T1124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2114.398416][T11433] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2114.923411][T27745] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[18572] was attempted by " 905C   /dev/vhost-net 8    \x09   "[27745] [ 2117.243922][T27760] loop9: detected capacity change from 0 to 524287936 [ 2119.708771][T27794] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[20632] was attempted by "\x09   905C   /dev/vhost-net 8    \x09   "[27794] [ 2120.069615][T22274] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2120.140052][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2120.151480][T17142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2120.239631][T22274] usb 6-1: Using ep0 maxpacket: 8 [ 2120.246291][T22274] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2120.257624][T22274] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2120.269623][T22274] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 2120.280759][T22274] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2120.290637][T22274] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2120.306341][T22274] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2120.316240][T22274] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.324785][T22274] usb 6-1: Product: syz [ 2120.329166][T22274] usb 6-1: Manufacturer: syz [ 2120.335076][T22274] usb 6-1: SerialNumber: syz [ 2120.354482][T22274] usb 6-1: config 0 descriptor?? [ 2120.369217][T22274] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input100 [ 2120.869708][T27809] loop9: detected capacity change from 0 to 524287936 [ 2122.905169][T27185] usb 6-1: USB disconnect, device number 7 [ 2123.133953][T27834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5436'. [ 2124.344060][T27836] netlink: 'syz.4.5440': attribute type 1 has an invalid length. [ 2124.623877][T25119] block nbd0: Possible stuck request ffff888028387000: control (read@0,1024B). Runtime 180 seconds [ 2124.635050][T25119] block nbd0: Possible stuck request ffff8880283871c0: control (read@1024,1024B). Runtime 180 seconds [ 2124.646355][T25119] block nbd0: Possible stuck request ffff888028387380: control (read@2048,1024B). Runtime 180 seconds [ 2124.657803][T25119] block nbd0: Possible stuck request ffff888028387540: control (read@3072,1024B). Runtime 180 seconds [ 2125.036774][T27848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5437'. [ 2125.151913][T27856] FAULT_INJECTION: forcing a failure. [ 2125.151913][T27856] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.165414][T27856] CPU: 0 UID: 0 PID: 27856 Comm: syz.5.5446 Tainted: G L syzkaller #0 PREEMPT(full) [ 2125.165444][T27856] Tainted: [L]=SOFTLOCKUP [ 2125.165451][T27856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2125.165462][T27856] Call Trace: [ 2125.165469][T27856] [ 2125.165476][T27856] dump_stack_lvl+0x100/0x190 [ 2125.165508][T27856] should_fail_ex.cold+0x5/0xa [ 2125.165534][T27856] should_failslab+0xc2/0x120 [ 2125.165555][T27856] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2125.165581][T27856] ? skb_clone+0x190/0x400 [ 2125.165614][T27856] skb_clone+0x190/0x400 [ 2125.165641][T27856] netlink_deliver_tap+0xaed/0xcc0 [ 2125.165675][T27856] netlink_unicast+0x6a5/0x850 [ 2125.165700][T27856] ? __pfx_netlink_unicast+0x10/0x10 [ 2125.165726][T27856] netlink_ack+0x655/0xb80 [ 2125.165752][T27856] netlink_rcv_skb+0x333/0x420 [ 2125.165771][T27856] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2125.165790][T27856] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2125.165819][T27856] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2125.165843][T27856] netlink_unicast+0x585/0x850 [ 2125.165865][T27856] ? __pfx_netlink_unicast+0x10/0x10 [ 2125.165891][T27856] netlink_sendmsg+0x8b0/0xda0 [ 2125.165915][T27856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2125.165935][T27856] ? __might_fault+0x60/0x140 [ 2125.165968][T27856] ____sys_sendmsg+0x9e1/0xb70 [ 2125.165988][T27856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2125.166011][T27856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2125.166043][T27856] ___sys_sendmsg+0x190/0x1e0 [ 2125.166067][T27856] ? __pfx____sys_sendmsg+0x10/0x10 [ 2125.166118][T27856] __sys_sendmsg+0x170/0x220 [ 2125.166146][T27856] ? __pfx___sys_sendmsg+0x10/0x10 [ 2125.166183][T27856] ? rcu_is_watching+0x12/0xc0 [ 2125.166211][T27856] do_syscall_64+0x115/0x870 [ 2125.166234][T27856] ? clear_bhb_loop+0x40/0x90 [ 2125.166257][T27856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2125.166275][T27856] RIP: 0033:0x7f866ab9ce59 [ 2125.166292][T27856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2125.166309][T27856] RSP: 002b:00007f866bb2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2125.166327][T27856] RAX: ffffffffffffffda RBX: 00007f866ae15fa0 RCX: 00007f866ab9ce59 [ 2125.166338][T27856] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2125.166348][T27856] RBP: 00007f866bb2c090 R08: 0000000000000000 R09: 0000000000000000 [ 2125.166358][T27856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2125.166368][T27856] R13: 00007f866ae16038 R14: 00007f866ae15fa0 R15: 00007ffc6681fe88 [ 2125.166393][T27856] [ 2125.426668][ T161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2125.900229][ T1124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2129.730531][T15313] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2129.870868][T15313] usb 2-1: device descriptor read/64, error -71 [ 2130.117075][T27894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27894 comm=syz.5.5458 [ 2130.129640][T15313] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2130.215099][T27897] loop9: detected capacity change from 0 to 524287936 [ 2130.259702][T15313] usb 2-1: device descriptor read/64, error -71 [ 2130.391888][T15313] usb usb2-port1: attempt power cycle [ 2130.572006][T27902] FAULT_INJECTION: forcing a failure. [ 2130.572006][T27902] name failslab, interval 1, probability 0, space 0, times 0 [ 2130.586229][T27902] CPU: 1 UID: 0 PID: 27902 Comm: syz.4.5460 Tainted: G L syzkaller #0 PREEMPT(full) [ 2130.586258][T27902] Tainted: [L]=SOFTLOCKUP [ 2130.586265][T27902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2130.586276][T27902] Call Trace: [ 2130.586282][T27902] [ 2130.586289][T27902] dump_stack_lvl+0x100/0x190 [ 2130.586315][T27902] should_fail_ex.cold+0x5/0xa [ 2130.586340][T27902] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2130.586368][T27902] should_failslab+0xc2/0x120 [ 2130.586389][T27902] __kmalloc_noprof+0xe0/0x850 [ 2130.586413][T27902] ? kfree+0x1dd/0x6c0 [ 2130.586438][T27902] tomoyo_realpath_from_path+0xb6/0x690 [ 2130.586475][T27902] tomoyo_path_number_perm+0x23c/0x580 [ 2130.586496][T27902] ? tomoyo_path_number_perm+0x22e/0x580 [ 2130.586520][T27902] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2130.586564][T27902] ? find_held_lock+0x2b/0x80 [ 2130.586580][T27902] ? __fget_files+0x215/0x3d0 [ 2130.586602][T27902] ? hook_file_ioctl_common+0x149/0x410 [ 2130.586620][T27902] ? __fget_files+0x215/0x3d0 [ 2130.586645][T27902] ? __fget_files+0x21f/0x3d0 [ 2130.586668][T27902] security_file_ioctl+0xd3/0x230 [ 2130.586692][T27902] __x64_sys_ioctl+0xb7/0x210 [ 2130.586710][T27902] do_syscall_64+0x115/0x870 [ 2130.586733][T27902] ? clear_bhb_loop+0x40/0x90 [ 2130.586755][T27902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2130.586773][T27902] RIP: 0033:0x7f331699ce59 [ 2130.586788][T27902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2130.586805][T27902] RSP: 002b:00007f3317936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2130.586824][T27902] RAX: ffffffffffffffda RBX: 00007f3316c15fa0 RCX: 00007f331699ce59 [ 2130.586835][T27902] RDX: 0000200000000240 RSI: 000000004020ae76 RDI: 0000000000000004 [ 2130.586845][T27902] RBP: 00007f3317936090 R08: 0000000000000000 R09: 0000000000000000 [ 2130.586855][T27902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2130.586864][T27902] R13: 00007f3316c16038 R14: 00007f3316c15fa0 R15: 00007ffd5372ab88 [ 2130.586888][T27902] [ 2130.589254][T27902] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2130.769556][T27185] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2130.824682][T15313] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2130.872021][T15313] usb 2-1: device descriptor read/8, error -71 [ 2131.000654][T27185] usb 6-1: Using ep0 maxpacket: 8 [ 2131.016504][T27185] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 2131.026832][T27185] usb 6-1: config 0 has no interface number 0 [ 2131.043758][T27185] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 2131.059270][T27185] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.092042][T27185] usb 6-1: config 0 descriptor?? [ 2131.109603][T15313] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2131.175139][T15313] usb 2-1: device descriptor read/8, error -71 [ 2131.201426][T27185] viperboard 6-1:0.143: version 0.00 found at bus 006 address 008 [ 2131.284413][ T5722] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2131.292366][T15313] usb usb2-port1: unable to enumerate USB device [ 2131.375586][T27185] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 2131.390987][T27185] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 2131.510404][ T5722] usb 3-1: Using ep0 maxpacket: 16 [ 2131.519723][ T5722] usb 3-1: config 0 has no interfaces? [ 2131.525350][ T5722] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 2131.576179][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.596461][T27916] loop9: detected capacity change from 0 to 524287936 [ 2131.666439][ T5722] usb 3-1: config 0 descriptor?? [ 2131.676160][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2132.092598][T27921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2132.847428][ T30] audit: type=1326 audit(2132.822:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27918 comm="syz.0.5464" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0e779ce59 code=0x0 [ 2133.186549][T15313] usb 6-1: USB disconnect, device number 8 [ 2133.966083][T27943] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5469'. [ 2133.999786][T27943] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27943 comm=syz.5.5469 [ 2134.019241][T15313] usb 3-1: USB disconnect, device number 45 [ 2134.822322][T27956] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5472'. [ 2135.169815][T27961] loop9: detected capacity change from 0 to 524287936 [ 2135.513191][T27966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5474'. [ 2135.632669][T27967] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[16981] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[27967] [ 2135.681134][ T50] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2136.235398][T27974] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[17143] was attempted by "\x09   905C   /dev/vhost-net 8    \x09   "[27974] [ 2136.510045][ T5722] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2136.776221][ T5722] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 2136.843355][ T5722] usb 5-1: config 0 has no interface number 0 [ 2136.876718][ T5722] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 2136.885833][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2136.895687][ T5722] usb 5-1: Product: syz [ 2136.900112][ T5722] usb 5-1: Manufacturer: syz [ 2136.904725][ T5722] usb 5-1: SerialNumber: syz [ 2136.917071][ T5722] usb 5-1: config 0 descriptor?? [ 2136.939974][ T1170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2137.386429][T27983] overlayfs: missing 'lowerdir' [ 2137.619890][T27985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5479'. [ 2137.748296][ T5722] uvcvideo 5-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 2137.749134][T27988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2137.784597][T27985] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27985 comm=syz.0.5479 [ 2137.820094][ T5722] uvcvideo 5-1:0.64: No valid video chain found. [ 2137.848359][T27929] Set syz1 is full, maxelem 65536 reached [ 2137.865477][ T5722] usb 5-1: USB disconnect, device number 46 [ 2137.990897][T27993] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5481'. [ 2138.102807][T27996] loop9: detected capacity change from 0 to 524287936 [ 2138.259578][T15313] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2138.442079][T15313] usb 6-1: Using ep0 maxpacket: 8 [ 2138.488147][T15313] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2138.568156][T15313] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2138.636604][T15313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2138.707940][T15313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2138.814307][T15313] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2139.003818][T15313] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2139.108866][T15313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2139.275418][T15313] usb 6-1: Product: syz [ 2139.342755][T28007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2139.702012][T15313] usb 6-1: Manufacturer: syz [ 2139.738369][T15313] usb 6-1: SerialNumber: syz [ 2139.798359][T15313] usb 6-1: config 0 descriptor?? [ 2140.103500][T15313] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 2140.163461][T15313] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 2140.253709][T15313] usb 6-1: USB disconnect, device number 9 [ 2140.524180][T28013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5488'. [ 2140.567550][T28013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28013 comm=syz.1.5488 [ 2140.910676][ T5722] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2141.299550][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 2141.312043][ T5722] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2141.326265][ T5722] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2141.340252][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 2141.351517][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2141.362847][ T5722] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2141.378465][ T5722] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2141.387975][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.400198][ T5722] usb 5-1: Product: syz [ 2141.406177][ T5722] usb 5-1: Manufacturer: syz [ 2141.411109][ T5722] usb 5-1: SerialNumber: syz [ 2141.418499][ T5722] usb 5-1: config 0 descriptor?? [ 2141.428745][ T5722] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input103 [ 2141.849618][T20208] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2141.984715][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2142.010452][T16547] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 2142.052626][T20208] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 2142.073848][T28038] netlink: 540 bytes leftover after parsing attributes in process `syz.5.5496'. [ 2142.074013][T20208] usb 3-1: config 0 has no interface number 0 [ 2142.094046][T20208] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 2142.094078][T20208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.094099][T20208] usb 3-1: Product: syz [ 2142.094115][T20208] usb 3-1: Manufacturer: syz [ 2142.094130][T20208] usb 3-1: SerialNumber: syz [ 2142.099887][T20208] usb 3-1: config 0 descriptor?? [ 2142.202624][T16547] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2142.232410][T16547] usb 2-1: not running at top speed; connect to a high speed hub [ 2142.254501][T16547] usb 2-1: config 9 has an invalid interface number: 101 but max is 0 [ 2142.264428][T16547] usb 2-1: config 9 has no interface number 0 [ 2142.271224][T16547] usb 2-1: config 9 interface 101 altsetting 8 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2142.285733][T28041] debugfs: '1^!l1*$pO' already exists in 'ieee80211' [ 2142.298452][T16547] usb 2-1: config 9 interface 101 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 2142.309821][T16547] usb 2-1: config 9 interface 101 has no altsetting 0 [ 2142.423353][T16547] usb 2-1: New USB device found, idVendor=054c, idProduct=009a, bcdDevice=a9.7e [ 2142.447919][T16547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.462563][T16547] usb 2-1: Product: syz [ 2142.467018][T16547] usb 2-1: Manufacturer: syz [ 2142.473276][T16547] usb 2-1: SerialNumber: syz [ 2142.491433][T28044] overlayfs: missing 'lowerdir' [ 2142.667466][T20208] uvcvideo 3-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 2142.678058][T20208] uvcvideo 3-1:0.64: No valid video chain found. [ 2142.696522][T20208] usb 3-1: USB disconnect, device number 46 [ 2143.376518][T28051] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5500'. [ 2143.386582][T28051] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 2143.465120][T28054] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5501'. [ 2143.511098][T28054] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28054 comm=syz.5.5501 [ 2143.538032][ T5722] usb 5-1: USB disconnect, device number 47 [ 2143.716349][T28061] loop9: detected capacity change from 0 to 524287936 [ 2143.903053][ T50] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2144.003175][ T30] audit: type=1400 audit(2143.942:5189): avc: denied { map } for pid=28066 comm="syz.0.5505" path="socket:[114831]" dev="sockfs" ino=114831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2144.469402][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2144.520579][ T30] audit: type=1400 audit(2143.942:5190): avc: denied { accept } for pid=28066 comm="syz.0.5505" path="socket:[114831]" dev="sockfs" ino=114831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2146.097786][T16547] usb 2-1: active config #9 != 1 ?? [ 2146.635398][T16547] usb 2-1: USB disconnect, device number 68 [ 2146.802894][T28091] vivid-001: ================= START STATUS ================= [ 2146.810947][T28091] vivid-001: RDS Tx I/O Mode: Controls [ 2146.817797][T28090] netlink: 'syz.2.5508': attribute type 4 has an invalid length. [ 2146.827666][T28091] vivid-001: RDS Program ID: 32904 [ 2146.833151][T28091] vivid-001: RDS Program Type: 3 [ 2146.838199][T28091] vivid-001: RDS PS Name: VIVID-TX [ 2146.843409][T28091] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 2146.881661][T28091] vivid-001: RDS Stereo: true [ 2146.886861][T28091] vivid-001: RDS Artificial Head: false [ 2146.892680][T28091] vivid-001: RDS Compressed: false [ 2146.897886][T28091] vivid-001: RDS Dynamic PTY: false [ 2146.903247][T28091] vivid-001: RDS Traffic Announcement: false [ 2146.909355][T28091] vivid-001: RDS Traffic Program: true [ 2146.914972][T28091] vivid-001: RDS Music: true [ 2146.919740][T28091] vivid-001: ================== END STATUS ================== [ 2147.219554][ T1170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2147.268666][T28099] loop9: detected capacity change from 0 to 524287936 [ 2148.094461][T28104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5514'. [ 2148.194597][T28104] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28104 comm=syz.1.5514 [ 2148.375981][T28109] FAULT_INJECTION: forcing a failure. [ 2148.375981][T28109] name failslab, interval 1, probability 0, space 0, times 0 [ 2148.448641][T28109] CPU: 1 UID: 0 PID: 28109 Comm: syz.1.5517 Tainted: G L syzkaller #0 PREEMPT(full) [ 2148.448669][T28109] Tainted: [L]=SOFTLOCKUP [ 2148.448674][T28109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2148.448685][T28109] Call Trace: [ 2148.448691][T28109] [ 2148.448698][T28109] dump_stack_lvl+0x100/0x190 [ 2148.448721][T28109] should_fail_ex.cold+0x5/0xa [ 2148.448742][T28109] should_failslab+0xc2/0x120 [ 2148.448759][T28109] __kmalloc_cache_noprof+0x7a/0x6f0 [ 2148.448779][T28109] ? nf_nat_masq_schedule.part.0+0x3bb/0x7a0 [ 2148.448803][T28109] ? kasan_check_range+0x182/0x1e0 [ 2148.448825][T28109] nf_nat_masq_schedule.part.0+0x3bb/0x7a0 [ 2148.448844][T28109] ? __pfx_device_cmp+0x10/0x10 [ 2148.448862][T28109] ? __pfx_nf_nat_masq_schedule.part.0+0x10/0x10 [ 2148.448880][T28109] ? flow_offload_netdev_event+0x1e/0x70 [ 2148.448906][T28109] masq_device_event+0xfd/0x120 [ 2148.448925][T28109] notifier_call_chain+0x99/0x400 [ 2148.448949][T28109] call_netdevice_notifiers_info+0xbe/0x110 [ 2148.448971][T28109] __dev_notify_flags+0x1f7/0x2e0 [ 2148.448995][T28109] ? __pfx___dev_notify_flags+0x10/0x10 [ 2148.449021][T28109] ? __pfx___dev_change_flags+0x10/0x10 [ 2148.449052][T28109] netif_change_flags+0x108/0x160 [ 2148.449077][T28109] do_setlink.isra.0+0x1ac4/0x3e60 [ 2148.449105][T28109] ? find_held_lock+0x2b/0x80 [ 2148.449121][T28109] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 2148.449149][T28109] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 2148.449176][T28109] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 2148.449201][T28109] ? lockdep_hardirqs_on+0x78/0x100 [ 2148.449222][T28109] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 2148.449258][T28109] ? rcu_is_watching+0x12/0xc0 [ 2148.449281][T28109] ? trace_sched_exit_tp+0x11c/0x160 [ 2148.449301][T28109] ? __schedule+0x12a7/0x67a0 [ 2148.449332][T28109] ? __pfx___schedule+0x10/0x10 [ 2148.449358][T28109] ? irqentry_exit+0x24d/0x970 [ 2148.449378][T28109] ? lockdep_hardirqs_on+0x78/0x100 [ 2148.449400][T28109] ? irqentry_exit+0x24d/0x970 [ 2148.449421][T28109] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 2148.449451][T28109] ? rtnl_newlink+0xa0b/0x2380 [ 2148.449470][T28109] rtnl_newlink+0x11c2/0x2380 [ 2148.449493][T28109] ? __pfx_rtnl_newlink+0x10/0x10 [ 2148.449512][T28109] ? __lock_acquire+0x4a5/0x2630 [ 2148.449545][T28109] ? find_held_lock+0x2b/0x80 [ 2148.449560][T28109] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 2148.449583][T28109] ? rcu_is_watching+0x12/0xc0 [ 2148.449608][T28109] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2148.449629][T28109] ? lockdep_hardirqs_on+0x78/0x100 [ 2148.449651][T28109] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2148.449671][T28109] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 2148.449695][T28109] ? rcu_is_watching+0x12/0xc0 [ 2148.449725][T28109] ? __pfx_rtnl_newlink+0x10/0x10 [ 2148.449742][T28109] rtnetlink_rcv_msg+0x95e/0xe90 [ 2148.449762][T28109] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2148.449811][T28109] netlink_rcv_skb+0x159/0x420 [ 2148.449835][T28109] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2148.449854][T28109] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2148.449896][T28109] netlink_unicast+0x585/0x850 [ 2148.449923][T28109] ? __pfx_netlink_unicast+0x10/0x10 [ 2148.449951][T28109] netlink_sendmsg+0x8b0/0xda0 [ 2148.449976][T28109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2148.449996][T28109] ? __might_fault+0x60/0x140 [ 2148.450028][T28109] ____sys_sendmsg+0x9e1/0xb70 [ 2148.450047][T28109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2148.450069][T28109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2148.450087][T28109] ? do_raw_spin_unlock+0x145/0x1e0 [ 2148.450121][T28109] ___sys_sendmsg+0x190/0x1e0 [ 2148.450143][T28109] ? __pfx____sys_sendmsg+0x10/0x10 [ 2148.450195][T28109] __sys_sendmsg+0x170/0x220 [ 2148.450223][T28109] ? __pfx___sys_sendmsg+0x10/0x10 [ 2148.450274][T28109] ? trace_irq_enable.constprop.0+0x31/0x160 [ 2148.450300][T28109] ? rcu_is_watching+0x12/0xc0 [ 2148.450329][T28109] do_syscall_64+0x115/0x870 [ 2148.450351][T28109] ? clear_bhb_loop+0x40/0x90 [ 2148.450373][T28109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2148.450392][T28109] RIP: 0033:0x7fc29bf9ce59 [ 2148.450408][T28109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2148.450424][T28109] RSP: 002b:00007fc29ce98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2148.450442][T28109] RAX: ffffffffffffffda RBX: 00007fc29c215fa0 RCX: 00007fc29bf9ce59 [ 2148.450454][T28109] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 2148.450464][T28109] RBP: 00007fc29ce98090 R08: 0000000000000000 R09: 0000000000000000 [ 2148.450475][T28109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2148.450485][T28109] R13: 00007fc29c216038 R14: 00007fc29c215fa0 R15: 00007ffda8c84e38 [ 2148.450509][T28109] [ 2149.021750][T28109] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5517'. [ 2149.173968][T28109] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 2149.221287][T25671] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2149.264661][T28113] loop9: detected capacity change from 0 to 524287936 [ 2149.589583][T25671] usb 5-1: Using ep0 maxpacket: 16 [ 2149.598385][T25671] usb 5-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 2149.634086][T25671] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2149.670884][T25671] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 175, changing to 11 [ 2149.706008][T25671] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 2149.716681][T25671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2149.733241][T25671] usb 5-1: Product: syz [ 2149.744536][T25671] usb 5-1: Manufacturer: syz [ 2149.758501][T25671] usb 5-1: SerialNumber: syz [ 2149.780762][T25671] usb 5-1: config 0 descriptor?? [ 2149.810637][T14309] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2149.986472][T14309] usb 2-1: Using ep0 maxpacket: 8 [ 2150.012536][T14309] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 2150.029178][T25671] appledisplay 5-1:0.0: Error while getting initial brightness: -71 [ 2150.036457][T14309] usb 2-1: config 0 has no interface number 0 [ 2150.059267][T14309] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 2150.077513][T14309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.078575][T25671] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -71 [ 2150.114513][T14309] usb 2-1: config 0 descriptor?? [ 2150.148498][T25671] usb 5-1: USB disconnect, device number 48 [ 2150.219863][ T31] INFO: task syz.3.5088:26445 blocked for more than 143 seconds. [ 2150.220077][ T1170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2150.228373][ T31] Tainted: G L syzkaller #0 [ 2150.253776][T14309] viperboard 2-1:0.143: version 0.00 found at bus 002 address 069 [ 2150.263403][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2150.279592][T22274] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2150.311321][T14309] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 2150.329007][ T31] task:syz.3.5088 state:D stack:28136 pid:26445 tgid:26443 ppid:18090 task_flags:0x400040 flags:0x00080002 [ 2150.354651][T14309] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 2150.365522][ T31] Call Trace: [ 2150.387134][ T31] [ 2150.405799][ T31] __schedule+0x1295/0x67a0 [ 2150.431716][ T31] ? __pfx___schedule+0x10/0x10 [ 2150.456212][ T31] ? find_held_lock+0x2b/0x80 [ 2150.471064][T22274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2150.485806][ T31] ? schedule+0x2bf/0x390 [ 2150.493925][ T31] schedule+0xdd/0x390 [ 2150.504209][T22274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2150.515943][ T31] schedule_preempt_disabled+0x13/0x30 [ 2150.531714][ T31] __mutex_lock+0xced/0x1b10 [ 2150.539868][T22274] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2150.555433][ T31] ? sync_bdevs+0x153/0x480 [ 2150.564003][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2150.577566][ T31] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 2150.583679][T22274] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2150.596974][ T31] ? iput.part.0+0x1a0/0xf50 [ 2150.607146][T22274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.617969][ T31] ? sync_bdevs+0x153/0x480 [ 2150.632529][ T31] sync_bdevs+0x153/0x480 [ 2150.645601][T22274] usb 3-1: config 0 descriptor?? [ 2150.652205][ T31] ksys_sync+0xb0/0xf0 [ 2150.667635][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 2150.680641][ T31] ? kcov_ioctl+0x16a/0x720 [ 2150.692314][ T31] ? rcu_is_watching+0x12/0xc0 [ 2150.704184][ T31] ? do_syscall_64+0x90/0x870 [ 2150.713980][ T31] __do_sys_sync+0xe/0x20 [ 2150.730015][ T31] do_syscall_64+0x115/0x870 [ 2150.759109][ T31] ? clear_bhb_loop+0x40/0x90 [ 2150.774339][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2150.783175][ T31] RIP: 0033:0x7fc5d3b9ce59 [ 2150.794158][ T31] RSP: 002b:00007fc5d49d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 2150.807530][ T31] RAX: ffffffffffffffda RBX: 00007fc5d3e16090 RCX: 00007fc5d3b9ce59 [ 2150.819056][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2150.855323][ T31] RBP: 00007fc5d3e16090 R08: 0000000000000000 R09: 0000000000000000 [ 2150.912143][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2150.950839][ T31] R13: 00007fc5d3e16128 R14: 00007fc5d3e16090 R15: 00007ffc4bd52478 [ 2150.989695][ T31] [ 2150.998242][ T31] [ 2150.998242][ T31] Showing all locks held in the system: [ 2151.040052][ T31] 1 lock held by khungtaskd/31: [ 2151.047292][ T31] #0: ffffffff8e7e55e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2151.085305][ T31] 2 locks held by getty/5373: [ 2151.095658][ T31] #0: ffff88803a4b00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2151.127551][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 2151.159770][ T31] 5 locks held by kworker/1:4/22274: [ 2151.165959][ T31] #0: ffff88801f6c2140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 2151.218680][ T31] #1: ffffc900035a7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 2151.231488][ T31] #2: ffff88802b94d1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 2151.240931][ T31] #3: ffff88802caa11d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 2151.250637][ T31] #4: ffff88803649a1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 2151.260608][ T31] 1 lock held by udevd/25601: [ 2151.265450][ T31] #0: ffff88802835b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 2151.275224][ T31] 2 locks held by kworker/u8:13/26171: [ 2151.280858][ T31] #0: ffff88813fe94940 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 2151.292840][ T31] #1: ffffc9000558fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 2151.304852][ T31] 3 locks held by kworker/u8:14/26174: [ 2151.312736][ T31] 1 lock held by syz.3.5088/26445: [ 2151.318130][ T31] #0: ffff88802835b350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 2151.328242][ T31] 1 lock held by syz.1.5518/28134: [ 2151.333774][ T31] #0: ffffffff90840960 (pfkey_mutex){+.+.}-{4:4}, at: pfkey_create+0x222/0x600 [ 2151.343677][ T31] 2 locks held by syz.2.5520/28124: [ 2151.349035][ T31] #0: ffff888043e09bd0 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: pfkey_sendmsg+0x41a/0x840 [ 2151.360158][ T31] #1: ffffffff90840960 (pfkey_mutex){+.+.}-{4:4}, at: pfkey_register+0xf4/0x950 [ 2151.369995][ T31] 1 lock held by modprobe/28141: [ 2151.375185][ T31] [ 2151.377663][ T31] ============================================= [ 2151.377663][ T31] [ 2151.386644][ T31] NMI backtrace for cpu 1 [ 2151.386663][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2151.386687][ T31] Tainted: [L]=SOFTLOCKUP [ 2151.386693][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2151.386704][ T31] Call Trace: [ 2151.386711][ T31] [ 2151.386717][ T31] dump_stack_lvl+0x100/0x190 [ 2151.386741][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2151.386767][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2151.386789][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2151.386819][ T31] sys_info+0x141/0x190 [ 2151.386841][ T31] watchdog+0xcb1/0x1030 [ 2151.386864][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2151.386884][ T31] ? __pfx_watchdog+0x10/0x10 [ 2151.386903][ T31] ? __kthread_parkme+0x18c/0x230 [ 2151.386932][ T31] ? kthread+0x13a/0x450 [ 2151.386950][ T31] ? __pfx_watchdog+0x10/0x10 [ 2151.386965][ T31] kthread+0x370/0x450 [ 2151.386982][ T31] ? __pfx_kthread+0x10/0x10 [ 2151.387001][ T31] ret_from_fork+0x72b/0xd50 [ 2151.387023][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2151.387045][ T31] ? __switch_to+0x800/0x1100 [ 2151.387070][ T31] ? __pfx_kthread+0x10/0x10 [ 2151.387091][ T31] ret_from_fork_asm+0x1a/0x30 [ 2151.387126][ T31] [ 2151.387152][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2151.518300][ C0] NMI backtrace for cpu 0 [ 2151.518320][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2151.518340][ C0] Tainted: [L]=SOFTLOCKUP [ 2151.518345][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2151.518354][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2151.518376][ C0] Code: e5 92 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 41 22 00 fb f4 fc 43 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2151.518391][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 2151.518403][ C0] RAX: 000000000b59a27d RBX: ffffffff8e4955c0 RCX: ffffffff8b895285 [ 2151.518414][ C0] RDX: 0000000000000000 RSI: ffffffff8df0f560 RDI: ffffffff8c1c4480 [ 2151.518424][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 2151.518434][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 2151.518443][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d70d50 [ 2151.518453][ C0] FS: 0000000000000000(0000) GS:ffff888124383000(0000) knlGS:0000000000000000 [ 2151.518467][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2151.518477][ C0] CR2: 00007f7b5c32b340 CR3: 000000005afcd000 CR4: 00000000003526f0 [ 2151.518486][ C0] Call Trace: [ 2151.518491][ C0] [ 2151.518496][ C0] default_idle+0x9/0x10 [ 2151.518520][ C0] default_idle_call+0x6c/0xb0 [ 2151.518539][ C0] do_idle+0x464/0x590 [ 2151.518562][ C0] ? __pfx_do_idle+0x10/0x10 [ 2151.518585][ C0] cpu_startup_entry+0x4f/0x60 [ 2151.518597][ C0] rest_init+0x251/0x260 [ 2151.518608][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2151.518624][ C0] start_kernel+0x484/0x490 [ 2151.518637][ C0] x86_64_start_reservations+0x24/0x30 [ 2151.518651][ C0] x86_64_start_kernel+0x12b/0x130 [ 2151.518665][ C0] common_startup_64+0x13e/0x148 [ 2151.518689][ C0] [ 2151.712014][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2151.718881][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2151.729529][ T31] Tainted: [L]=SOFTLOCKUP [ 2151.733822][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2151.743861][ T31] Call Trace: [ 2151.747201][ T31] [ 2151.750114][ T31] dump_stack_lvl+0x100/0x190 [ 2151.754772][ T31] vpanic+0x552/0x970 [ 2151.758731][ T31] ? __pfx_vpanic+0x10/0x10 [ 2151.763204][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 2151.769348][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 2151.775485][ T31] panic+0xd1/0xe0 [ 2151.779179][ T31] ? __pfx_panic+0x10/0x10 [ 2151.783577][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2151.789710][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2151.795840][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2151.801970][ T31] ? watchdog.cold+0x1ec/0x234 [ 2151.806708][ T31] ? watchdog+0xcc1/0x1030 [ 2151.811099][ T31] watchdog.cold+0x1fd/0x234 [ 2151.815669][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2151.821448][ T31] ? __pfx_watchdog+0x10/0x10 [ 2151.826111][ T31] ? __kthread_parkme+0x18c/0x230 [ 2151.831114][ T31] ? kthread+0x13a/0x450 [ 2151.835327][ T31] ? __pfx_watchdog+0x10/0x10 [ 2151.839975][ T31] kthread+0x370/0x450 [ 2151.844017][ T31] ? __pfx_kthread+0x10/0x10 [ 2151.848596][ T31] ret_from_fork+0x72b/0xd50 [ 2151.853170][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2151.858269][ T31] ? __switch_to+0x800/0x1100 [ 2151.862922][ T31] ? __pfx_kthread+0x10/0x10 [ 2151.867498][ T31] ret_from_fork_asm+0x1a/0x30 [ 2151.872246][ T31] [ 2151.875516][ T31] Kernel Offset: disabled [ 2151.879814][ T31] Rebooting in 86400 seconds..