last executing test programs: 54.851225887s ago: executing program 0 (id=207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x26}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000180)={0x0, 0xe, 0x5, "e7e89482e7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff}}}}}]}}]}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$khugepaged_scan(r7, &(0x7f0000000180), 0x8) setsockopt$inet_tcp_int(r6, 0x6, 0x4, &(0x7f0000000080)=0x6, 0x4) setfsgid(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0x9, 'BQ'}]}}, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x14, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) 51.833312994s ago: executing program 0 (id=216): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macsec0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000000) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000ce76000000000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000500000094d230dba7ad64e91f4bde020000000000000000"], 0x50) r8 = socket(0x1e, 0x4, 0x0) r9 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x64, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x52, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001042000000000006ba9000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x1e, &(0x7f00000002c0)=""/30, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x1, 0x9, 0x6}, 0x10, r10, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000006c0)=[{0x1, 0x2, 0xb}], 0x10, 0x1}, 0x94) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 49.851072525s ago: executing program 0 (id=221): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet_buf(r0, 0x118, 0x4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mbind(&(0x7f00009f4000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000000c0)=0x6, 0x6a0e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000fdffffffffffffff1812a9fd9033efb6f22a"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x50) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2f, 0x28, 0xc, 0x2, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0x33, 0x18}}) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) recvmmsg(r3, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/246, 0xf6}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000005c0)=""/157, 0x9d}], 0x3}, 0x1}], 0x2, 0x0, 0x0) 48.973737658s ago: executing program 0 (id=225): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x8, 0x20000000, 0x1ff, 0x8}, 0x41}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x5, 0x2, 0xffffffffffffeffe, 0x1, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0xfffffffe, 0x1004cc80, 0x44, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000140)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) 45.851045098s ago: executing program 0 (id=229): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000500)="e3", 0x1}], 0x1) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x128, 0x33, 0x107, 0x0, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x104, 0x1, 0x0, 0x1, [@typed={0xff, 0x6, 0x0, 0x0, @binary="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"}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0x4, 0x18, 0x0, 0x0, @binary}, @typed={0x8, 0x1c, 0x0, 0x0, @pid}]}]}, 0x128}}, 0x4010) r8 = syz_io_uring_setup(0x2eeb, &(0x7f0000000400)={0x0, 0x8894, 0x0, 0x3, 0x2a7, 0x0, r5}, &(0x7f0000000100), &(0x7f0000000180)) io_uring_enter(r8, 0x74ae, 0xee2, 0x10, &(0x7f0000000480)={[0xdd1]}, 0x8) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x50}}, 0x0) 43.455140391s ago: executing program 0 (id=233): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) preadv(0xffffffffffffffff, &(0x7f0000004ec0), 0x0, 0x8000, 0x0) socket$inet6(0xa, 0x4, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x840) listen(r2, 0xfffffffd) r4 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0xa, 0x81, 0x0, 0x2, 0x20}, 0xe) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xe, 0x4}, {0xa315, 0xe}}}}, 0x11) 42.506696232s ago: executing program 32 (id=233): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x4}}, 0x9) preadv(0xffffffffffffffff, &(0x7f0000004ec0), 0x0, 0x8000, 0x0) socket$inet6(0xa, 0x4, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x840) listen(r2, 0xfffffffd) r4 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0xa, 0x81, 0x0, 0x2, 0x20}, 0xe) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xe, 0x4}, {0xa315, 0xe}}}}, 0x11) 24.827052779s ago: executing program 3 (id=286): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(0xffffffffffffffff, &(0x7f00000002c0)=""/153, 0x99) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000480)=""/60, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect$uac1(0x2, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902780003010990060904000000010100000a240108e3000802"], 0x0) 18.562782308s ago: executing program 3 (id=307): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x26}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000180)={0x0, 0xe, 0x5, "e7e89482e7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff}}}}}]}}]}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$khugepaged_scan(r7, &(0x7f0000000180), 0x8) setsockopt$inet_tcp_int(r6, 0x6, 0x4, &(0x7f0000000080)=0x6, 0x4) setfsgid(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r5], 0x7c}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x14, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) 15.218010034s ago: executing program 3 (id=315): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000000, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xde104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "f697663f39991b3da3431f89"}, 0x17) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "d2487b822050386f", "4946115b8e1acab11dda0ee7d5239a0ff818a4b776b238dccb81bfd9652cb934", "f728d519", "0cb42238c52f3b48"}, 0x38) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x6d, 0x0, &(0x7f0000001040)) sendfile(r0, r4, &(0x7f0000000100)=0x10, 0xfffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x15, 0x0, 0x0, 0xb7a}, {0x20, 0xe, 0x0, 0x17ba3b5}, {0x6, 0x0, 0x8, 0x7ffffcb9}]}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000090000006110040200009500f8ffffffffffffff003482f1227ef9fef639edcb238791c398adbbb961638749d1caa041469b185ad62178fb900f9ebde7500b64a13c3a24e43602db62285b2bb532fcf56e8a5fec0d6b29fbadc4ed1dd4749eec82707d7b84fbe1f700"/132], &(0x7f0000000040)='GPL\x00', 0x7fff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff3, 0xe}, {0x0, 0xe}, {0x8, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 13.900018668s ago: executing program 3 (id=320): r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r3, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x5, 0x10001, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x1, 0x2002) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) 12.430439256s ago: executing program 3 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() (async, rerun: 64) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) (async) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r3, 0x10, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, 0x0, 0x0) (async, rerun: 64) bind$inet6(r6, 0x0, 0x0) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async, rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 11.615593569s ago: executing program 2 (id=326): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000140)={0xc, r5}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) fcntl$notify(0xffffffffffffffff, 0x402, 0x1a) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x7fffffff}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x13, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3e7, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0xc1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x22ac}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000380)='syzkaller\x00', 0xbaed, 0x97, &(0x7f00000003c0)=""/151, 0x41000, 0x61, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xd, 0xffffffff, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[{0x1, 0x1, 0x7, 0x9}, {0x1, 0x1, 0xe, 0x1}], 0x10, 0x968}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7}) read$FUSE(0xffffffffffffffff, &(0x7f00000015c0)={0x2020}, 0x2020) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 9.541845526s ago: executing program 2 (id=327): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newchain={0x3c, 0x64, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x1}, {0x1, 0x8}, {0xffe0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @TCA_RATE={0x6, 0x5, {0x1b, 0xcd}}, @TCA_CHAIN={0x8, 0xb, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b2b, &(0x7f0000000100)={'wlan1\x00', @broadcast}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x4745504d, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000440)=@llc={0x1a, 0x201, 0x2, 0x2, 0x10, 0x8, @remote}, 0x80, &(0x7f0000000640)=[{&(0x7f00000014c0)="e7f70ac16f1d76f1ca255877274117e4fd9640f600bda4154b3eff90c70d5efbcc48e3782a3971daadd095f6441ea50c204c9999bf0e1932be8cbd6165e90bfc10644ddea051fd30c28f5b498b147888685786f25cf177f1f5ae023484581f48a8297d753d2aa39aae8e23cd0f7aece0267b7238840c6d8f460222be0acb02f994809b8cba31f43d2a0648f0cb7bb6f9425748f41da71d94b3eb08914d5e9b7e72a29787865305c0a6c8ea34bae965a155adc24aa5f39d851b86439474535cfae374998bce6a06123263c55cf7202cd149a2f9fd3db37973f2c5c935b4b0929202dde6e2c85332c1596c27657b75ac60d6b8710e90b61e0d2c969ee78d41aea9e2ac1b3d8848c88d72ec00c24b4d42c43a3ef70e6e0aac0bf06b4d379cad159b060b5ce46439424ace0fcf161cf1bc0761d5358e22d6f1c495e8526b99c9d75d2a3d6ade09df4b36a0582985897fdc730aa0a9e9c79985e556d877664f2b804dd65a5189b9a72a9aaa3ca5295aa7d3ebef1f7d1de6e5b00a53c2eefaabb6799e4411938c99cc1d31ee43b484043fff9a15ec58cc60409a9343999c0e2073c8bec503732983f5443f1ef48217a002df9d1e5c565a5d95cf00cb175957b28084f0fba56653e9fea65c3caafc5a0c8896dc285e3925dc7a008b5a7b52d5684cf980213a6cc0d04945a693b090d17b0eb340a96801feedd6e373c819c4b796a330a4df685897b20b670202d7ecdf6e6afeaff8efedb12f5f295ab9bdb04a9e3c147746e138d8c6433973c7b1d04b6c2f210e05500fb53bcaf9ec0085a20388859717f79b52db9d758170a1349168c6ce9cb17549fbcdd4273da9412477c11809bdc46a156218063d8a500aaf4f9fa7670f7de4175052465dbd76d8aacc6d36b9a29f33d298a75758bf5edae8b8321950c39aeadeab529ab2fedbbdaca5196e103b0ffe63caf81d5e705c239fe3282399fb30154cf6cf1bfae73aee21280670bf4b88c69cd2938400307e8feee568d19e60ab6c6ddeea5f568ded5f5f6907250f812b5dc3eaf357d1b82b92a26c1e501e453bd8692e8a68eeddf9919b41de30168d26e341f08851f2968a3cb24e7ea0fb458651a1b3fe8b50908289466c6033ca64e224917abc1c35715bbe7e1aa86bcb0e5e193fde758b40b72b3891e685fcffc224ecec33d8096d8b525928ea1d7935e66ed069aae391bc82ad073f1b1fa974787e5e908784159cb5b09641e6c30e5bcef7026224d023b3497bbc58e6eb4dbd03168940fbb48b88a88b86a8c0e95ef3c003756861ba7e491d55472c5352fcf0aeedd754bdb532e6e99f34e7322e994b8346b0a74c9191a343c7349b053353a3e7d28b67d6b07745949276934a82ad43aa3aa844bab879350a83407ee9911f4b3da5bc00f977b67d887c3114e46d4624a99717b58f4b33f164fbc42eb18d9119dc0b3f4b93b180ad2efced14b2e1e010b4ac82399b4d1e21f361a1960a01ff24ec402bb7f49cfc31adcc2d86a078e9caa68c415db756361dc1ccd7115382f4644b30998600afbfd1e64adbc8636194b0406b8ceeeb20aeece1546c1ddf81c1aad9c5d728005deef9be8584f31f8a89a824706d4b41b6e43ef76e6e478c850023d214d93a3bea145c26102c8da3531b6ecb096798f6377e8475a81028ac486ff60bb89fc743fe2f00babe89d9941a2098a22337d32191dc6f902ac3aba94a38560fee5b12c053cf1cf44e76833aad9a6321cce9dbb91c0e34bc6d3c4301813c50e3dd0c40ec11113893e56cf9b002e1e2e627846753942ab5594528d62d527d8234a8fae1adacaaa44e889aa757d5268c4af258361baeac67e71c1e151b23a12b997b4854cd1f4e4fa0835087fedca060d058ae09a254f38a1e0c2c968dc6886bf5034f2c500f27ee48536f432fa4a03aa0239ac710699d9dca78e61da6937822d623ac7d773d1345771e06ba9c7f7d06302b668a268bad7f7c48cbf0545254ee8b4802e8085eec559ab6ec88eff7500f82ec54b7b0c72bcb885ea11312a052de93b8f59a71ffa40ad7ced0fb46257e5564db2249abd5bab2adc1fda5f83e8f991700b3bf57372e911f276baa6eb7a5064e11507fe2e4061897b1a65d6f886a9d7aab0de59044a5b6c04216fc2d5f75fc5358466efb6b5a2e8edb11c04cadf390d0be7c411c857b13548d2d5a05c69e00c9e44f47733f50ee6b82239fdaab780e5ed5592ee692f441f95db06898c9664b6541c0030d465559d3e1013a181e27dd068c58a88159d27b064f201004d4eb32020cb9de7784018cea0d8220d0c1bd7d45e06f2d799116cc99b78d99fe87a42dce585d48cb965e07a718b411bc9ca469465ce25b2623bd5a4ba9ce6b693d1cfb7acca6ba3e3f7bad2271c7400be35c9b3f1b7254667098121664270475a65093491fa7e0bb1fec865e43ecaf7d08d0571b3b0322a69ace793732b51c2f82e7b409844cf5763c7525008d6ef72f6fdb781a274c8b6af6402c28c33e4ab08bf636a6e144031c0fc91b5ed06bc2459c5580b5f3208a6c2b6b14ec17b4a6db6c4595b307919ed2f8f40b3d1839d6a53d1dadee25f6109a425b453ce1065e4d750f9ada48b1134af4c6b1ae36a0b1ead41949297282ac141e7ee83e40dab23df9000e058af3ab3cab0f2cc12e264e6382571fdafdee668b22284f1584b4daf5f74d08709d178bdc26f8fee9b7cda8bc9fb23da817ad2a6719e5ff8af79fb3ed5cfd74c1f46584b019addc6777405b31f2a811ffcaf8f7ca662ec40191b4f7e4ab1dfdbfd9e383be040d628afc81ce98eec826b6f69d1e1dcf6563a465fe882ffa0e008282c52aae53194ac10323096f847072fd0c6c5454629210dbed165def807e5e646edffc5395c2c88bcad750eb03698aee9c7bb503c11aa1e92fccb2e7c3f2ba5bd73ccb6027de18d6e9bdade56b055c9667c6e9d5008a1432a9c3a88e4b436cbe3fa5d9f4a05af2f6e33e76e6b7138946e72e4258f0ab86f3c533cd115fd16da270e07d176f4c0dc45001275f308ad1cc82cb1030b7be63b9ee892b1501832103294461a5dc1093d239248f856e05acdecacbfd1dd067f25b9920667223eb177e681abb70bc73b9e08b32b8d1153903001a9ce6de8395b32c8888442f1c24ab1eb8a9707bcbf318d183b185b8a12963dd2e065c14d4d0a61a189580553c1b967f143e68b47cd60c7c5976ba25d363555c65ddec4d6cae65f48f6e8d478b7feb3ea3c7ab93d010b481a32d21414c1bbd79d7c3456ceba7d82cb2ce4cf73b96b3aa967d36d5f04878e4d5df49bab71b0ef55ffae2662ea0164a8b06ec2fcc1f0fe1e25d3c254b268ba2a1a1f3176ac35e940acb10d035cd83b6342eee01ddeeb96a8beb4a52220b0a575f87796a67e08660c2fa4da98283392578f6dc93a5c63dd85d209d0925c3fc7cf3c52e6832ae7246fa3adfa401214d74d89771059409e0f590dd16f2e4811629fc4b0b3a8b6d158a01152fd9efa5b1f9bb3e6fb2d2233e8df4c5d992edaf56e252d6ebc7863cfea90d1f3592a41b089c865da77c06a99901f5b9e2820dd3b95ee8c1511f0779c3ae2d3ea6829a7b61041c0c64172247254ac2ea8e06fb4916dd35eba07ff09d7fb6369a9111c1941145369b11cd5f49db965d5b8149794e32d5ae81663abf624daa47b49a063b54eddee35e0e43c9b89e90bb8aa8367f7962196e957570a03e1c1c4e36b19fb75c0278b8fe917395c828cd73071ea692fe584d8d8519f26b67dd56e640ef0c6cc3f53924126f3d5c213c5d9c8e5a74879b5a23e225db4899025ca59e47f69e9439f6a6409b547aac9e6db2ecd32e80fff41731b34f7e29181e50c823d236079e6b75db5cca5c6b0cf90f856a7f2c9e26fc6901fae29da03ca3efc05905f691505169456b7eebed4aa73f28ee6fc511a337ed41c016e31681b38863cdf2d7b3ea002e537f4e33750b1ff82cc9e8af63f5535ced36d4de795026483fe7a9c8119bae759e65791abda49cbc3760a7165c05d96594f7bb53b3f7c327099db970561a20694b6a2ed6a35556e261e9b06917dc47d146549e84e1a71e15036ea8d815e5e46ef188fbdd01f08c7dc0e3f9ca81af6cdda5a5da40dd8e52420090b8740a4d6b2b0b1bda7d55891f1173d31d16df54e4a7cb186ecc27586b179c577ff489159de6e529cf55a867a9e33e02db6c42c41fdc974733b2be3d0b32787dfda3644d82aa4c5fa2515b17d289dbb36e245812a8c3d562d534c34b9259d280b828af225f21e2f8d77642667a7c4de1f70e1c554dcd5c0b9ae61e9bbcee3963cd13c633f1acc6d9321b782062a91841e4e5bc3500292b9e8b89bfe221aaf941f8c29e09a74c172ba586b19d8fb43d05c03bb5c1f290c8755141a1f9a245c9579539ba770d76ebf29f375a5d90c41cc3803c7d29d47f510cbc4ede1d19050fa08f3303933d4bed53b9b5a729cc68d7edfcaed35efbc1a3dc287acd9e6f42b35b750b8b15c1b11441b7a7a0266ae99f5c1202ee588040d98c82153cb7d6c959276e23513341c28b2a26b296dff6fbd32600b5740378b7547b9f3ff5e684c63275b47b249ec6979496d8a6478666d8a67f9ca33662a6cf38d27994bcc3f4286f1ca27b901b08e1e8e7d21391e587f0f660da2daf4a7c820408d41f1045c31f1a95d895a2564bf30df75f1493bd096fdb0d924d12ba4b225f15575b3496702acdea77eb8328aadc86f5fbf695b8f1a715786e96e99b73a947f9c945c2548d500d42fc528c062a37fc46613e8c4939cb33381ca7ddf2654f3702d5b5b90de5f4920f9b34277e5827ff9f403159fe1546cef74ff32856ef2a82c1313306cd720c4f81b60e4982d49a271df7e61e695aa7a25a71d110657b55a8d0946a9e634d738759cc691d0fc1cbab0763266a939938b2099085009904881729ae0859b4f5fa697bff169a58716a3f4f58a030816344a92b3f352b907c6c3d6fd6b6359ac967695ef3a6f0a18eb1eb134fce1ddcd467fc8d3282cf75c3d3fa57b4f96bfcfd2448755564424d3062acd35d7d87b9280222f6021a5ac132e33b41a91d529ef081ecd8b1f69a956597820267b373061f4bde3c0fcffe2ceb803f5c2abe422712c327cda11db948bd55a21f6f0cac3cd0db31045118a7d9d48642972d7fda4838732e004ce3dbce9f2b28691d4dd61bb6fd3576f5576928a884c68a28ff137ba80f88c6baeefcd0a206552848e2d09581af1110bc6bcf3b129c0f785e99e0c1ae23fe38942c491edb67484807efc82f28693707964a93f28e13d8675641438498a9d9423c93193de5f2dbd0df5531261dcce76629d274961a154768ca263ea0c3179f1e37cb4bec4290adf51677dc9f8369c37b61e1ff71e2673e6e288c86f4a52e8f6ab084b611384efd20094ad962f8d04a492ac967ba0485de4b1352630c7f5b77d67126b92159c67913e8f1a4b9769600897be75940649e6afb962376672f8f6781b7a0eb060dd468116fbca4ca18082401fa516835cbc15d773e7f51705ceb700a9af36ef3cce27da1abc13de3b81380c04e5e9e26f1ff417fc551e4464684e8ad61797f14042e79c181bdb80522bd88f65da38a707aea001e6e0b375ee68ef20e634872fa730fe370b6eae3198ce25c1be0721faf6d12691dfdc1fdae23ba79d23bbdc8eb198eb21899b04058ca66a1293565ea086867b40c04e523a4326d4e9d757254483041323e4ee88f9947667211f04830c642eb61425fb5da2a130ac28fe57ff0c13c8d6fa294931f1f2d583720f0b01dbb994f78ac2863ffce5c614b49", 0x1000}, {&(0x7f0000000500)="d82444d436ec43d4c7502986b60c9cb7358e973550ca1d8b6d20dff5f4306c89e7f2", 0x22}, {&(0x7f0000000540)="cab4004bcf2b1d9a038715aed9072b1c0bdbb9a1ee607d79653d9e98987894bbf4c6397a727ee27224f5b5a0d6072426bffe5f2d65a4ec32b7e9f304bd7401a8333858049225c0f77d60a56b94438ba480c4e5cac9498b291316ec47c51c09702b1b480839179343260b214780b5a611f091331b8dbbe2a8febb40bedb957c876bd4ddb4ab59306e2aa4e67170e019db18ac2be868522c5b1832368c0fbe8ffcefd47ba454447e0a0945ae67e53fb991d82faa3ebd459f073d", 0xb9}, {&(0x7f0000000600)="2e8a33693228e503944a1259", 0xc}], 0x4}}], 0x1, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000001f) r7 = open(0x0, 0x0, 0x4) close_range(r6, r7, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x703abce51d429a6b) 8.607266968s ago: executing program 3 (id=328): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000557588b9d789bb4498078e70a263c44a51510091cd0c8ccd6248acb6d6457bb480", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet(0x2, 0x80000, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000300)={0x0, 0x80, 0x6}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, r4, 0x25, 0x2, @void}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300060c1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00003c333ae0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xc) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802caf1dff19e39da20ff4594939b428d0f00000000000000e800000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0xe, &(0x7f0000000200)={0x7ff, 0x2}) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x3d, 0x103, 0x100, 0x0, 0x590043}) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5, &(0x7f0000000340)=[{0x5a717210, 0x6, 0x401}, {0xffffffffffffc6f9, 0x8, 0x3ff}], 0x2, 0x3, 0x6, 0x8, 0x0, 0xb}) 7.790323174s ago: executing program 33 (id=328): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000557588b9d789bb4498078e70a263c44a51510091cd0c8ccd6248acb6d6457bb480", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet(0x2, 0x80000, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000300)={0x0, 0x80, 0x6}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, r4, 0x25, 0x2, @void}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300060c1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00003c333ae0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xc) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802caf1dff19e39da20ff4594939b428d0f00000000000000e800000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0xe, &(0x7f0000000200)={0x7ff, 0x2}) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x3d, 0x103, 0x100, 0x0, 0x590043}) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5, &(0x7f0000000340)=[{0x5a717210, 0x6, 0x401}, {0xffffffffffffc6f9, 0x8, 0x3ff}], 0x2, 0x3, 0x6, 0x8, 0x0, 0xb}) 7.706653192s ago: executing program 5 (id=331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x26}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000180)={0x0, 0xe, 0x5, "e7e89482e7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff}}}}}]}}]}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$khugepaged_scan(r7, &(0x7f0000000180), 0x8) setsockopt$inet_tcp_int(r6, 0x6, 0x4, &(0x7f0000000080)=0x6, 0x4) setfsgid(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r5], 0x7c}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x14, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) 7.679295494s ago: executing program 2 (id=333): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000080)='\xef\x00', 0x40, 0x0, 0x0) mq_getsetattr(r0, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000000)={0xc}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00)=r5, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, 0x0}) sched_setaffinity(r7, 0x8, &(0x7f0000000200)=0xa) 7.595154718s ago: executing program 4 (id=334): r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r3, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x5, 0x10001, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x1, 0x2002) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) 6.826793966s ago: executing program 2 (id=336): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008c81) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000840)={0x10, 0x2, {0x52, 0x9, 0xfff9, {0x8, 0x98f}, {0x4, 0x2}, @period={0x2e, 0x1, 0xc, 0x8, 0x3, {0x7ffd, 0xfe00}, 0x0, 0x0}}, {0x55, 0x4, 0x27, {0x3, 0x101}, {0x3, 0xa5}, @const={0x200, {0x5, 0x8, 0x1009, 0x2}}}}) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000010401013100000000000000000004000500010001"], 0x24}}, 0x0) close(0x3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd3000fddbdf250700000001000400e4118932c60757acc63b2aa464007770616e33000000080005000000000008000500000000000800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r10, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.719503365s ago: executing program 4 (id=337): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(0x0, 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r5, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3fc, 0x34325241, 0x2, [r6, 0x0, r7, r8], [0x2b8], [], [0x0, 0x10000]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r10, 0x29, 0x3, &(0x7f0000000040)=0x207, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r10, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x4020, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000180), 0x0, 0x0, 0x0, 0x1, 0x5b, 0x0, 0xfffffffffffffca2}) 5.736222658s ago: executing program 4 (id=338): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000000, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xde104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "f697663f39991b3da3431f89"}, 0x17) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "d2487b822050386f", "4946115b8e1acab11dda0ee7d5239a0ff818a4b776b238dccb81bfd9652cb934", "f728d519", "0cb42238c52f3b48"}, 0x38) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x6d, 0x0, &(0x7f0000001040)) sendfile(r0, r4, &(0x7f0000000100)=0x10, 0xfffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x15, 0x0, 0x0, 0xb7a}, {0x20, 0xe, 0x0, 0x17ba3b5}, {0x6, 0x0, 0x8, 0x7ffffcb9}]}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000090000006110040200009500f8ffffffffffffff003482f1227ef9fef639edcb238791c398adbbb961638749d1caa041469b185ad62178fb900f9ebde7500b64a13c3a24e43602db62285b2bb532fcf56e8a5fec0d6b29fbadc4ed1dd4749eec82707d7b84fbe1f700"/132], &(0x7f0000000040)='GPL\x00', 0x7fff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff3, 0xe}, {0x0, 0xe}, {0x8, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.799516301s ago: executing program 4 (id=339): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000000, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xde104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "f697663f39991b3da3431f89"}, 0x17) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "d2487b822050386f", "4946115b8e1acab11dda0ee7d5239a0ff818a4b776b238dccb81bfd9652cb934", "f728d519", "0cb42238c52f3b48"}, 0x38) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x6d, 0x0, &(0x7f0000001040)) sendfile(r0, r4, &(0x7f0000000100)=0x10, 0xfffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x15, 0x0, 0x0, 0xb7a}, {0x20, 0xe, 0x0, 0x17ba3b5}, {0x6, 0x0, 0x8, 0x7ffffcb9}]}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000090000006110040200009500f8ffffffffffffff003482f1227ef9fef639edcb238791c398adbbb961638749d1caa041469b185ad62178fb900f9ebde7500b64a13c3a24e43602db62285b2bb532fcf56e8a5fec0d6b29fbadc4ed1dd4749eec82707d7b84fbe1f700"/132], &(0x7f0000000040)='GPL\x00', 0x7fff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff3, 0xe}, {0x0, 0xe}, {0x8, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.982803703s ago: executing program 1 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000004c00)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x98, 0x0, 0x130, 0x288, 0x288, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@multicast1, @local, 0xffffffff, 0xff, 'team_slave_0\x00', 'pim6reg0\x00', {0xff}, {}, 0x32, 0x1, 0x8}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0x0, 'ip6gre0\x00', 'veth1_virt_wifi\x00', {}, {}, 0xff, 0x3, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf2}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x8}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x3, 0x3}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @loopback}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x94, @empty}}}, 0x108) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000002c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x6, 0x2, &(0x7f0000000280)="caba2a7dec38b8b9e34f", 0xa, 0x340ceaf4, 0xfffffffd, 0x4, 0xa8, 0x2, &(0x7f0000001a80)="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"}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240)="f5135e2c98"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000006c6a3d54c1f5e31867dd7017e769ee8c4df24ed1da041cd164f4368ca188aab5f3131575487a1b21891b17d3ce32c7565d76b43c519890d5fb30983540ad7f9b4890826059ed23d11977054f61bb21b37d154b59e77b8d726a20af9d2ca8307d7d7108f69d8590a8a7963d2cc0881699fd9bfe5fb3dc758d1ddb9d51b9c684054e241156fe097b051e646c3e9a5abf54"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x4078850, r5, 0x51f82000) syz_emit_ethernet(0xa2, &(0x7f0000000740)={@multicast, @broadcast, @void, {@x25={0x805, {0x1, 0x6, 0xf3, "0dab51a1af94d7be78cec33d7d039c3ed01b47b463b103e0b1d77d023e6fa67e0a941fc04f888ee817b873f953137e1c8391e8857c63dba0ab93aa96fbc6494aa387bb5a2178a2c04bed6732c3c3f7ff42d683706348a744daf1046e7e1147f4606dfcd61f4e9d5abb052b8d56852927e6a5ec1039fe536b696da064d436c7b6b19af68dfe99398fef22b1f8e71bed9c85"}}}}, 0x0) 3.915066712s ago: executing program 1 (id=342): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, 0x0) set_tid_address(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x50, 0x1, 0x0, "d02067046edd9a2ad5b4f84e565c6f0f30807278f8983c3c0a31965ebd9ca8ac"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_fuse_handle_req(r5, &(0x7f0000009680)="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", 0x2000, &(0x7f0000002540)={&(0x7f0000004200)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x20, 0xa, 0xc, 0x7, 0xcdd, 0x0, 0x0, 0x80, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x2, 0x5, 0xfffffffffffffff9, 0x400, 0xc, {0x0, 0xb, 0x7, 0x1, 0x1, 0x4, 0x9, 0x0, 0x4, 0xa000, 0x0, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r5, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000006400)={0x10, 0x0, r6}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') 3.90261979s ago: executing program 5 (id=343): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newchain={0x3c, 0x64, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x1}, {0x1, 0x8}, {0xffe0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @TCA_RATE={0x6, 0x5, {0x1b, 0xcd}}, @TCA_CHAIN={0x8, 0xb, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b2b, &(0x7f0000000100)={'wlan1\x00', @broadcast}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x4745504d, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000440)=@llc={0x1a, 0x201, 0x2, 0x2, 0x10, 0x8, @remote}, 0x80, &(0x7f0000000640)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000500)="d82444d436ec43d4c7502986b60c9cb7358e973550ca1d8b6d20dff5f4306c89e7f2", 0x22}, {&(0x7f0000000540)="cab4004bcf2b1d9a038715aed9072b1c0bdbb9a1ee607d79653d9e98987894bbf4c6397a727ee27224f5b5a0d6072426bffe5f2d65a4ec32b7e9f304bd7401a8333858049225c0f77d60a56b94438ba480c4e5cac9498b291316ec47c51c09702b1b480839179343260b214780b5a611f091331b8dbbe2a8febb40bedb957c876bd4ddb4ab59306e2aa4e67170e019db18ac2be868522c5b1832368c0fbe8ffcefd47ba454447e0a0945ae67e53fb991d82faa3ebd459f073d", 0xb9}, {&(0x7f0000000600)="2e8a33693228e503944a1259", 0xc}], 0x4}}], 0x1, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000001f) r7 = open(0x0, 0x0, 0x4) close_range(r6, r7, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x703abce51d429a6b) 3.782500497s ago: executing program 2 (id=344): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008c81) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000840)={0x10, 0x2, {0x52, 0x9, 0xfff9, {0x8, 0x98f}, {0x4, 0x2}, @period={0x2e, 0x1, 0xc, 0x8, 0x3, {0x7ffd, 0xfe00}, 0x0, 0x0}}, {0x55, 0x4, 0x27, {0x3, 0x101}, {0x3, 0xa5}, @const={0x200, {0x5, 0x8, 0x1009, 0x2}}}}) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000010401013100000000000000000004000500010001"], 0x24}}, 0x0) close(0x3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd3000fddbdf250700000001000400e4118932c60757acc63b2aa464007770616e33000000080005000000000008000500000000000800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r10, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.780312634s ago: executing program 4 (id=345): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000080)='\xef\x00', 0x40, 0x0, 0x0) mq_getsetattr(r0, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000000)={0xc}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00)=r5, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, 0x0}) sched_setaffinity(r7, 0x8, &(0x7f0000000200)=0xa) 2.610686868s ago: executing program 1 (id=346): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x3, 0xe0000, {{0x1b, 0x4, 0x1, 0x22, 0x6c, 0x64, 0x0, 0xb7, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0xf9, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010101, 0xc1f5}, {@empty, 0x1}, {@remote, 0x61}]}, @timestamp={0x44, 0x14, 0xa6, 0x0, 0x3, [0x7, 0x5, 0xeb, 0xa]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x8c, [@multicast1]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001d00)=@nat={'nat\x00', 0x19, 0x4, 0x166, [0x2000000017c0, 0x0, 0x0, 0x200000001a6c, 0x200000001cd0], 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000040000000000000000000000000000000000ffffffff01000000110000001c0000000015736974300000000000000000000000007465616d30000000000000000000000064766d727031000000000000000000007465616d5f736c6176655f3000000000aaaaaaaaaaaa0000000000ffaaaaaaaaaabbffff0000ffff6e0000009e000000d60000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000005d07541c95bf0000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000ee02000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff00000000"]}, 0x1de) r8 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r10 = syz_io_uring_setup(0x1938, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x85\x99\xab\xa7AkQ\x16$\x15\xcf\x14#\xad\x1f\xce}K\xea\x90.!\xd6z\x9e\xc3\xe5\xbf\xc2c\x02\xdc\x86\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xdc)\x82\xeb\b\xa9\x14\xf86\xdc\x8e$B\xa0\x12Zqeo\xb8Z\xa1{\x9ewcbQ[O\xf3y\x99\xc7\xd29\xb7R\xc4:5wV\x86\xef\x95\xa8\x8f2TmN]0\xb8K\x95vP~\xbd\f>m\n\xb3\xe5\x94\xa7\xd3\xc3_\xc9\xcc\xa0nN\xc14k\xcd\xad\x9d}\xd5$\xaaf\xe8\xdd\xcf\t\xb8\x89\xb5\x94t_\xf0\xfc\x18\xa2\xa2rm@\x9b1~3\xbc8\xde\xe3n~\xd2\xd2') syz_io_uring_submit(r11, r12, 0x0) io_uring_enter(r10, 0x6e2, 0x3900, 0x3, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000090", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x8}, {0xfff1, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_getaddrlabel={0x70, 0x4a, 0x400, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x20, 0x0, r3}, [@IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 2.555179873s ago: executing program 4 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r0, &(0x7f0000000800)="5b8529ae2468f4df9c", 0x9, 0x7) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/27, 0x1b}], 0x1, 0x9, 0x3dfc) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sched_setattr(0x0, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0xcf43, 0x4c9, 0xffff, 0xfffc, 0x81, "8003e3ffff072000"}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) keyctl$session_to_parent(0x12) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) 2.366419073s ago: executing program 5 (id=348): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000080)=0x80000049, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88df2569bdc6a56ae97fbb7886f9f2d7d5a800008100000086dd600000000028000120010000000000000000000000000000000000000000000000002f04000000000000071800000000040400d604001b00000000000000000000000000000100010100000000000000"], 0x0) 2.219245797s ago: executing program 5 (id=349): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000000, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xde104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "f697663f39991b3da3431f89"}, 0x17) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "d2487b822050386f", "4946115b8e1acab11dda0ee7d5239a0ff818a4b776b238dccb81bfd9652cb934", "f728d519", "0cb42238c52f3b48"}, 0x38) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x6d, 0x0, &(0x7f0000001040)) sendfile(r0, r4, &(0x7f0000000100)=0x10, 0xfffd) r6 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000090000006110040200009500f8ffffffffffffff003482f1227ef9fef639edcb238791c398adbbb961638749d1caa041469b185ad62178fb900f9ebde7500b64a13c3a24e43602db62285b2bb532fcf56e8a5fec0d6b29fbadc4ed1dd4749eec82707d7b84fbe1f700"/132], &(0x7f0000000040)='GPL\x00', 0x7fff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff3, 0xe}, {0x0, 0xe}, {0x8, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.264979931s ago: executing program 5 (id=350): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES8=r2, @ANYRES32=0x0, @ANYRES32=r2], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000700795119f30100080000009b180000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioprio_set$pid(0x3, 0x0, 0x2000) munlockall() madvise(&(0x7f0000243000/0x4000)=nil, 0x4000, 0x8) socket$key(0xf, 0x3, 0x2) 1.042019513s ago: executing program 1 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000004c00)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x98, 0x0, 0x130, 0x288, 0x288, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@multicast1, @local, 0xffffffff, 0xff, 'team_slave_0\x00', 'pim6reg0\x00', {0xff}, {}, 0x32, 0x1, 0x8}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0x0, 'ip6gre0\x00', 'veth1_virt_wifi\x00', {}, {}, 0xff, 0x3, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf2}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x8}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x3, 0x3}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @loopback}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x94, @empty}}}, 0x108) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000002c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x6, 0x2, &(0x7f0000000280)="caba2a7dec38b8b9e34f", 0xa, 0x340ceaf4, 0xfffffffd, 0x4, 0xa8, 0x2, &(0x7f0000001a80)="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"}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240)="f5135e2c98"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000006c6a3d54c1f5e31867dd7017e769ee8c4df24ed1da041cd164f4368ca188aab5f3131575487a1b21891b17d3ce32c7565d76b43c519890d5fb30983540ad7f9b4890826059ed23d11977054f61bb21b37d154b59e77b8d726a20af9d2ca8307d7d7108f69d8590a8a7963d2cc0881699fd9bfe5fb3dc758d1ddb9d51b9c684054e241156fe097b051e646c3e9a5abf54"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x4078850, r5, 0x51f82000) syz_emit_ethernet(0xa2, &(0x7f0000000740)={@multicast, @broadcast, @void, {@x25={0x805, {0x1, 0x6, 0xf3, "0dab51a1af94d7be78cec33d7d039c3ed01b47b463b103e0b1d77d023e6fa67e0a941fc04f888ee817b873f953137e1c8391e8857c63dba0ab93aa96fbc6494aa387bb5a2178a2c04bed6732c3c3f7ff42d683706348a744daf1046e7e1147f4606dfcd61f4e9d5abb052b8d56852927e6a5ec1039fe536b696da064d436c7b6b19af68dfe99398fef22b1f8e71bed9c85"}}}}, 0x0) 277.217145ms ago: executing program 1 (id=352): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 158.369326ms ago: executing program 5 (id=353): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008c81) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000840)={0x10, 0x2, {0x52, 0x9, 0xfff9, {0x8, 0x98f}, {0x4, 0x2}, @period={0x2e, 0x1, 0xc, 0x8, 0x3, {0x7ffd, 0xfe00}, 0x0, 0x0}}, {0x55, 0x4, 0x27, {0x3, 0x101}, {0x3, 0xa5}, @const={0x200, {0x5, 0x8, 0x1009, 0x2}}}}) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000010401013100000000000000000004000500010001"], 0x24}}, 0x0) close(0x3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd3000fddbdf250700000001000400e4118932c60757acc63b2aa464007770616e33000000080005000000000008000500000000000800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r10, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.720121ms ago: executing program 2 (id=354): syz_emit_ethernet(0x3a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08000000000000009305eb78ac554eff0ab815988902000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="00000000987800006dcc579d163d0fb2d2e238"], 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xfe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r4, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000100", @ANYRES16=r6, @ANYBLOB="00042abd7000fbdbdf25020000001000040004000000040000000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x4044}, 0xc040) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, r8, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9}}}}, 0x30}}, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd30, 0x25dfdc01, {0x60, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000030000004c000180380004001400010002000000ac1414110000000000000000200002000a004e200000a181fe8000000000000000000000000000bb000400000d000100f564703a73797a310000"], 0x60}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 1 (id=355): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) kernel console output (not intermixed with test programs): d { ioctl } for pid=6075 comm="syz.2.31" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x55c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.927235][ T30] audit: type=1400 audit(1766931318.706:189): avc: denied { write } for pid=6075 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.935930][ T5813] usb 2-1: USB disconnect, device number 2 [ 93.948579][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 93.960089][ T5931] usb 4-1: config 7 has an invalid interface number: 185 but max is 0 [ 93.969677][ T5931] usb 4-1: config 7 has no interface number 0 [ 93.976013][ T5931] usb 4-1: config 7 interface 185 has no altsetting 0 [ 94.074913][ T5976] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 94.107818][ T5931] usb 4-1: Dual-Role OTG device on HNP port [ 94.114248][ T5931] usb 4-1: New USB device found, idVendor=1199, idProduct=0019, bcdDevice=82.41 [ 94.124491][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.132499][ T5931] usb 4-1: Product: syz [ 94.136835][ T5931] usb 4-1: Manufacturer: syz [ 94.148288][ T5931] usb 4-1: SerialNumber: syz [ 94.344376][ T6085] fuse: Unknown parameter 'fd•0x0000000000000009' [ 94.685241][ T5976] usbhid 5-1:0.0: can't add hid device: -71 [ 94.691273][ T5976] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 94.726848][ T5976] usb 5-1: USB disconnect, device number 2 [ 94.909987][ T30] audit: type=1400 audit(1766931319.876:190): avc: denied { read write } for pid=6087 comm="syz.0.34" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 94.995204][ T30] audit: type=1400 audit(1766931319.876:191): avc: denied { open } for pid=6087 comm="syz.0.34" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 95.915036][ T5931] sierra 4-1:7.185: Sierra USB modem converter detected [ 96.071564][ T5931] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 96.086809][ T5931] usb 4-1: USB disconnect, device number 3 [ 96.124741][ T5931] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 96.135352][ T5931] sierra 4-1:7.185: device disconnected [ 96.246902][ T6096] fuse: Unknown parameter 'fd•0x0000000000000009' [ 97.172928][ T5976] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 97.562346][ T5976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.586819][ T5976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 97.596771][ T5976] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 97.826326][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'. [ 97.863375][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'. [ 98.570191][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 98.570205][ T30] audit: type=1400 audit(1766931323.536:199): avc: denied { create } for pid=6104 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.608110][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.643638][ T5976] usb 5-1: config 0 descriptor?? [ 98.904762][ T5976] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 98.963653][ T5976] dvb-usb: bulk message failed: -22 (3/0) [ 98.996897][ T5976] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 99.122299][ T30] audit: type=1400 audit(1766931323.986:200): avc: denied { append } for pid=6095 comm="syz.4.38" name="i2c-1" dev="devtmpfs" ino=2799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.953933][ T6128] netlink: 'syz.1.43': attribute type 10 has an invalid length. [ 99.961824][ T6128] netlink: 40 bytes leftover after parsing attributes in process `syz.1.43'. [ 100.259135][ T6128] batman_adv: batadv0: Adding interface: virt_wifi0 [ 100.269096][ T6128] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.294925][ T6128] batman_adv: batadv0: Interface activated: virt_wifi0 [ 100.344405][ T30] audit: type=1400 audit(1766931324.746:201): avc: denied { watch watch_reads } for pid=6120 comm="syz.1.43" path="pipe:[4601]" dev="pipefs" ino=4601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 100.349424][ T5976] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 100.391855][ T30] audit: type=1400 audit(1766931324.756:202): avc: denied { relabelfrom } for pid=6120 comm="syz.1.43" name="" dev="pipefs" ino=8167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 100.522029][ T5976] usb 5-1: media controller created [ 100.581946][ T5976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.613302][ T6132] FAULT_INJECTION: forcing a failure. [ 100.613302][ T6132] name failslab, interval 1, probability 0, space 0, times 1 [ 100.768798][ T5930] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.840234][ T30] audit: type=1400 audit(1766931324.776:203): avc: denied { create } for pid=6120 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.993902][ T6132] CPU: 0 UID: 0 PID: 6132 Comm: syz.2.47 Not tainted syzkaller #0 PREEMPT(full) [ 100.993928][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.993944][ T6132] Call Trace: [ 100.993950][ T6132] [ 100.993960][ T6132] dump_stack_lvl+0x16c/0x1f0 [ 100.993993][ T6132] should_fail_ex+0x512/0x640 [ 100.994016][ T6132] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 100.994034][ T6132] should_failslab+0xc2/0x120 [ 100.994053][ T6132] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 100.994067][ T6132] ? __d_alloc+0x35/0xa80 [ 100.994082][ T6132] ? __d_alloc+0x35/0xa80 [ 100.994090][ T6132] __d_alloc+0x35/0xa80 [ 100.994101][ T6132] d_alloc_pseudo+0x1c/0xc0 [ 100.994117][ T6132] alloc_file_pseudo+0xcf/0x230 [ 100.994131][ T6132] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 100.994142][ T6132] ? _raw_spin_unlock+0x28/0x50 [ 100.994157][ T6132] ? alloc_fd+0x471/0x7d0 [ 100.994176][ T6132] __anon_inode_getfile+0xe8/0x280 [ 100.994195][ T6132] __anon_inode_getfd+0x5c/0x160 [ 100.994208][ T6132] __x64_sys_fsopen+0x18b/0x240 [ 100.994225][ T6132] do_syscall_64+0xcd/0xf80 [ 100.994245][ T6132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.994262][ T6132] RIP: 0033:0x7f0a5c98f749 [ 100.994273][ T6132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.994284][ T6132] RSP: 002b:00007f0a5d859038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 100.994300][ T6132] RAX: ffffffffffffffda RBX: 00007f0a5cbe5fa0 RCX: 00007f0a5c98f749 [ 100.994328][ T6132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 100.994335][ T6132] RBP: 00007f0a5d859090 R08: 0000000000000000 R09: 0000000000000000 [ 100.994342][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.994349][ T6132] R13: 00007f0a5cbe6038 R14: 00007f0a5cbe5fa0 R15: 00007ffc94276618 [ 100.994366][ T6132] [ 101.344031][ T6113] [U] é [ 101.389154][ T5976] dvb-usb: bulk message failed: -22 (6/0) [ 101.405196][ T5930] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 101.414188][ T5930] usb 2-1: config 0 has no interface number 0 [ 101.420470][ T5930] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 101.420803][ T5976] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 101.431816][ T5930] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 101.442688][ T30] audit: type=1400 audit(1766931324.776:204): avc: denied { shutdown } for pid=6120 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.455663][ T5930] usb 2-1: config 0 interface 255 has no altsetting 0 [ 101.511884][ T5976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 101.523207][ T30] audit: type=1400 audit(1766931324.786:205): avc: denied { bind } for pid=6120 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.592346][ T5930] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 101.610149][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.620686][ T5976] dvb-usb: schedule remote query interval to 150 msecs. [ 101.692084][ T30] audit: type=1400 audit(1766931326.616:206): avc: denied { mounton } for pid=6135 comm="syz.2.48" path="/proc/44/task" dev="proc" ino=9162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 101.714579][ T5930] usb 2-1: config 0 descriptor?? [ 101.724856][ T5976] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 101.751774][ T5930] cp210x 2-1:0.255: cp210x converter detected [ 101.757120][ T5976] usb 5-1: USB disconnect, device number 3 [ 101.772666][ T30] audit: type=1400 audit(1766931326.616:207): avc: denied { associate } for pid=6137 comm="syz.2.48" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 101.869553][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 101.891254][ T6142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.49'. [ 102.291552][ T5976] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 102.642778][ T5976] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.665580][ T30] audit: type=1400 audit(1766931327.626:208): avc: denied { write } for pid=6144 comm="syz.3.50" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 102.862977][ T5976] usb 5-1: Using ep0 maxpacket: 8 [ 102.872724][ T5976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 102.908876][ T5976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.934989][ T5976] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.966714][ T5976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 102.999488][ T5976] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 103.011245][ T5976] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 103.023535][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.037759][ T5976] usb 5-1: config 0 descriptor?? [ 103.056932][ T5930] cp210x 2-1:0.255: failed to get vendor val 0x370b size 1: -71 [ 103.074140][ T6134] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 103.134805][ T5930] cp210x 2-1:0.255: querying part number failed [ 103.154230][ T5930] usb 2-1: cp210x converter now attached to ttyUSB0 [ 103.170332][ T5930] usb 2-1: USB disconnect, device number 3 [ 103.212270][ T5930] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 103.282402][ T5930] cp210x 2-1:0.255: device disconnected [ 103.398096][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.012805][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 104.020509][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 104.036213][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 104.192717][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.222404][ T24] usb 4-1: Product: syz [ 104.230110][ T24] usb 4-1: Manufacturer: syz [ 104.240198][ T24] usb 4-1: SerialNumber: syz [ 104.270293][ T24] usb 4-1: config 0 descriptor?? [ 104.296374][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 104.350753][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 104.350776][ T30] audit: type=1400 audit(1766931329.316:210): avc: denied { read write } for pid=6133 comm="syz.4.46" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.397825][ T24] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 104.417640][ T30] audit: type=1400 audit(1766931329.316:211): avc: denied { open } for pid=6133 comm="syz.4.46" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.446215][ T30] audit: type=1400 audit(1766931329.326:212): avc: denied { ioctl } for pid=6133 comm="syz.4.46" path="/dev/sg0" dev="devtmpfs" ino=758 ioctlcmd=0x227d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.479215][ T30] audit: type=1400 audit(1766931329.356:213): avc: denied { ioctl } for pid=6159 comm="syz.1.54" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9205 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.648371][ T30] audit: type=1400 audit(1766931329.366:214): avc: denied { mounton } for pid=6133 comm="syz.4.46" path="/8/file0" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.677488][ T30] audit: type=1400 audit(1766931329.406:215): avc: denied { mount } for pid=6133 comm="syz.4.46" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 104.707309][ T30] audit: type=1400 audit(1766931329.676:216): avc: denied { create } for pid=6163 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.743506][ T52] Bluetooth: hci5: unexpected event 0x04 length: 3 < 10 [ 104.751342][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.756992][ T30] audit: type=1400 audit(1766931329.706:217): avc: denied { read write } for pid=6159 comm="syz.1.54" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 104.763531][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.790810][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.801671][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.811839][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.818961][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.825943][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.834035][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.841005][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.848134][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.855110][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.861999][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.870559][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.877611][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.884695][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.892868][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.902901][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.909880][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.916802][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.923863][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.930741][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.937709][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.944804][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.951702][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.958717][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.965732][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.974450][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 104.990891][ T5976] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 105.022444][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 105.033803][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 105.077985][ T30] audit: type=1400 audit(1766931329.706:218): avc: denied { open } for pid=6159 comm="syz.1.54" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 105.164612][ T30] audit: type=1400 audit(1766931329.716:219): avc: denied { ioctl } for pid=6159 comm="syz.1.54" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 105.204505][ T5976] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.224267][ T5976] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.264640][ T5976] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.294061][ T5138] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 105.324291][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.342713][ T5976] usb 2-1: Product: syz [ 105.347195][ T5976] usb 2-1: Manufacturer: syz [ 105.351878][ T5976] usb 2-1: SerialNumber: syz [ 105.516841][ T24] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 105.665164][ T24] em28xx 4-1:0.0: board has no eeprom [ 105.691369][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 105.732680][ T24] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 105.741143][ T24] em28xx 4-1:0.0: dvb set to bulk mode. [ 105.747441][ T5887] em28xx 4-1:0.0: Binding DVB extension [ 105.770382][ T24] usb 4-1: USB disconnect, device number 4 [ 105.778358][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 105.787974][ T6176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.56'. [ 105.868737][ T5887] em28xx 4-1:0.0: Registering input extension [ 105.917288][ T24] em28xx 4-1:0.0: Closing input extension [ 106.126885][ T90] usb 5-1: USB disconnect, device number 4 [ 106.218164][ T24] em28xx 4-1:0.0: Freeing device [ 106.264924][ T5976] usb 2-1: USB disconnect, device number 4 [ 106.396981][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.676515][ T24] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 107.196715][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.282452][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 107.302884][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 107.312056][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.346657][ T24] usb 4-1: config 0 descriptor?? [ 107.408300][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 107.415929][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 107.431480][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 107.447186][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 107.511793][ T24] usb 4-1: media controller created [ 107.544479][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.689416][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 107.702397][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 107.713455][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 107.729956][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 107.740412][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 108.249465][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 108.292714][ T24] dvb-usb: error while querying for an remote control event. [ 108.465788][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 108.475585][ T24] dvb-usb: error while querying for an remote control event. [ 108.761838][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 108.771110][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.62'. [ 109.398094][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 109.490184][ T24] dvb-usb: error while querying for an remote control event. [ 109.506886][ T5887] usb 4-1: USB disconnect, device number 5 [ 109.879441][ T5887] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 110.000249][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 110.061775][ T6228] netlink: 36 bytes leftover after parsing attributes in process `syz.2.67'. [ 110.080708][ T6228] tipc: Started in network mode [ 110.086607][ T6228] tipc: Node identity ac1414aa, cluster identity 4711 [ 110.096748][ T6228] tipc: Enabled bearer , priority 10 [ 110.487679][ T6231] capability: warning: `syz.1.68' uses deprecated v2 capabilities in a way that may be insecure [ 110.619932][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 110.619962][ T30] audit: type=1400 audit(1766931335.586:223): avc: denied { name_connect } for pid=6230 comm="syz.1.68" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 110.672593][ T6232] netlink: 'syz.1.68': attribute type 8 has an invalid length. [ 110.722982][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 110.847206][ T30] audit: type=1400 audit(1766931335.746:224): avc: denied { create } for pid=6230 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.023178][ T30] audit: type=1400 audit(1766931335.956:225): avc: denied { write } for pid=6230 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.144244][ T5887] tipc: Node number set to 2886997162 [ 111.592744][ T5887] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.792680][ T5992] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.822675][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 111.830037][ T5887] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.853000][ T5887] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.872841][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 111.879783][ T5887] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 111.909755][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.926172][ T5887] usb 2-1: config 0 descriptor?? [ 111.952762][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.962708][ T5992] usb 3-1: Using ep0 maxpacket: 32 [ 111.989780][ T5992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 112.054723][ T5992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 112.094316][ T5992] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 112.128572][ T5992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.152886][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 112.195048][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 112.258158][ T5992] usb 3-1: config 0 descriptor?? [ 112.275078][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 112.334481][ T5992] hub 3-1:0.0: USB hub found [ 112.340190][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 112.354370][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.390476][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.401213][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.412087][ T10] usb 1-1: config 0 descriptor?? [ 112.424660][ T10] hub 1-1:0.0: USB hub found [ 112.441251][ T5887] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 112.453608][ T5887] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 112.460919][ T5887] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 112.468770][ T5887] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 112.476327][ T5887] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 112.485485][ T5887] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 112.493850][ T5887] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 112.503173][ T5887] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 112.511924][ T5887] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 112.522853][ T5887] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 112.539340][ T5887] cougar 0003:060B:500A.0001: collection stack underflow [ 112.547206][ T5887] cougar 0003:060B:500A.0001: item 0 0 0 12 parsing failed [ 112.557447][ T5887] cougar 0003:060B:500A.0001: parse failed [ 112.567413][ T5887] cougar 0003:060B:500A.0001: probe with driver cougar failed with error -22 [ 112.630088][ T10] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 112.747185][ T5992] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 113.207780][ T5992] usbhid 3-1:0.0: can't add hid device: -71 [ 113.216539][ T5930] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.231810][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 113.239731][ T5992] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 113.248248][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 113.276611][ T5992] usb 3-1: USB disconnect, device number 4 [ 113.282914][ T10] usb 1-1: USB disconnect, device number 3 [ 113.382685][ T5930] usb 4-1: device descriptor read/64, error -71 [ 113.622769][ T5930] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.737767][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'. [ 113.769453][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'. [ 114.216071][ T5930] usb 4-1: device descriptor read/64, error -71 [ 114.290774][ T5992] usb 2-1: USB disconnect, device number 5 [ 114.328562][ T5930] usb usb4-port1: attempt power cycle [ 114.507896][ T6265] ip6gretap0: entered promiscuous mode [ 114.516457][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 114.525594][ T6265] ip6gretap0: left promiscuous mode [ 114.600136][ T6270] Bluetooth: MGMT ver 1.23 [ 114.613836][ T30] audit: type=1400 audit(1766931339.556:226): avc: denied { create } for pid=6269 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.641983][ T30] audit: type=1400 audit(1766931339.566:227): avc: denied { bind } for pid=6269 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.692831][ T5930] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 114.748888][ T6275] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6275 comm=syz.1.78 [ 114.769904][ T30] audit: type=1400 audit(1766931339.566:228): avc: denied { write } for pid=6269 comm="syz.2.80" path="socket:[10543]" dev="sockfs" ino=10543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.261733][ T5930] usb 4-1: device descriptor read/8, error -71 [ 115.514800][ T5930] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 115.568211][ T30] audit: type=1400 audit(1766931340.536:229): avc: denied { name_bind } for pid=6280 comm="syz.0.81" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 115.667262][ T30] audit: type=1400 audit(1766931340.556:230): avc: denied { node_bind } for pid=6280 comm="syz.0.81" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 115.764713][ T30] audit: type=1400 audit(1766931340.636:231): avc: denied { create } for pid=6285 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 115.793063][ T5930] usb 4-1: device not accepting address 9, error -71 [ 115.806920][ T5930] usb usb4-port1: unable to enumerate USB device [ 115.896363][ T6284] netlink: 'syz.2.82': attribute type 12 has an invalid length. [ 115.904369][ T6284] netlink: 132 bytes leftover after parsing attributes in process `syz.2.82'. [ 117.200117][ T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 117.398667][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.424225][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 117.466211][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.502900][ T5930] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 117.510672][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.520221][ T24] usb 3-1: config 0 descriptor?? [ 117.538200][ T30] audit: type=1400 audit(1766931342.506:232): avc: denied { getopt } for pid=6310 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.947970][ T24] usbhid 3-1:0.0: can't add hid device: -22 [ 117.962276][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 118.062897][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 118.074001][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 118.115425][ T6315] ======================================================= [ 118.115425][ T6315] WARNING: The mand mount option has been deprecated and [ 118.115425][ T6315] and is ignored by this kernel. Remove the mand [ 118.115425][ T6315] option from the mount to silence this warning. [ 118.115425][ T6315] ======================================================= [ 118.186632][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 118.213845][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 118.226032][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 118.244722][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 118.258755][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 118.268475][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.280631][ T5930] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 118.301677][ T9] usb 5-1: config 0 descriptor?? [ 118.312393][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.324582][ T9] hub 5-1:0.0: USB hub found [ 118.334476][ T5930] usb 4-1: config 0 descriptor?? [ 118.369661][ T5930] hub 4-1:0.0: USB hub found [ 118.573344][ T5930] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 118.662745][ T5992] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.745114][ T9] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 118.926639][ T5992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.938127][ T5930] usbhid 4-1:0.0: can't add hid device: -71 [ 118.944653][ T5930] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 118.952855][ T5992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.970793][ T9] hid-generic 0003:046D:C31C.0002: item fetching failed at offset 0/1 [ 118.979135][ T5992] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a14, bcdDevice= 0.00 [ 118.990391][ T5930] usb 4-1: USB disconnect, device number 10 [ 118.997245][ T9] hid-generic 0003:046D:C31C.0002: probe with driver hid-generic failed with error -22 [ 119.015006][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.045601][ T5992] usb 2-1: config 0 descriptor?? [ 119.392941][ T5894] usb 5-1: USB disconnect, device number 5 [ 119.472322][ T30] audit: type=1400 audit(1766931344.436:233): avc: denied { create } for pid=6317 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.612733][ T30] audit: type=1400 audit(1766931344.546:234): avc: denied { write } for pid=6317 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.634943][ T30] audit: type=1400 audit(1766931344.556:235): avc: denied { create } for pid=6317 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 119.670347][ T30] audit: type=1400 audit(1766931344.566:236): avc: denied { connect } for pid=6317 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 119.777776][ T5894] usb 3-1: USB disconnect, device number 5 [ 119.817328][ T30] audit: type=1400 audit(1766931344.706:237): avc: denied { ioctl } for pid=6327 comm="syz.3.94" path="socket:[9632]" dev="sockfs" ino=9632 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.853566][ T5992] hid-corsair-void 0003:1B1C:0A14.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:0a14] on usb-dummy_hcd.1-1/input0 [ 119.901976][ T6329] kvm: emulating exchange as write [ 119.959567][ T5992] usb 2-1: USB disconnect, device number 6 [ 120.022080][ T6331] fido_id[6331]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 120.425732][ T6341] syz_tun: entered allmulticast mode [ 120.440395][ T6341] pimreg: entered allmulticast mode [ 121.213870][ T30] audit: type=1400 audit(1766931345.396:238): avc: denied { bind } for pid=6332 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.247588][ T30] audit: type=1400 audit(1766931345.396:239): avc: denied { create } for pid=6332 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.269111][ T6341] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 123.429641][ T6341] syz_tun: left allmulticast mode [ 123.445964][ T30] audit: type=1400 audit(1766931345.396:240): avc: denied { setopt } for pid=6332 comm="syz.2.95" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.794200][ T30] audit: type=1400 audit(1766931348.766:241): avc: denied { ioctl } for pid=6352 comm="syz.1.99" path="socket:[10744]" dev="sockfs" ino=10744 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.942734][ T5992] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 124.377158][ T5992] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.403713][ T5992] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 124.434887][ T5992] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 124.446259][ T30] audit: type=1400 audit(1766931349.416:242): avc: denied { getopt } for pid=6373 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.593386][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.062040][ T5992] usb 1-1: config 0 descriptor?? [ 125.069596][ T30] audit: type=1400 audit(1766931349.636:243): avc: denied { shutdown } for pid=6373 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.070262][ T5992] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 125.096240][ T5992] dvb-usb: bulk message failed: -22 (3/0) [ 125.104269][ T6379] ceph: No mds server is up or the cluster is laggy [ 125.104527][ T5992] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 125.121062][ T5992] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 125.127491][ T5866] libceph: connect (1)[c::]:6789 error -101 [ 125.144257][ T5866] libceph: mon0 (1)[c::]:6789 connect error [ 125.175329][ T5992] usb 1-1: media controller created [ 125.203915][ T5992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.252461][ T5992] dvb-usb: bulk message failed: -22 (6/0) [ 125.283548][ T5992] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 125.430447][ T5992] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 125.542205][ T6387] netlink: 'syz.2.108': attribute type 12 has an invalid length. [ 125.550492][ T6387] netlink: 132 bytes leftover after parsing attributes in process `syz.2.108'. [ 125.603226][ T30] audit: type=1400 audit(1766931350.546:244): avc: denied { write } for pid=6383 comm="syz.2.108" name="ip6_flowlabel" dev="proc" ino=4026533290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 125.766443][ T5992] dvb-usb: schedule remote query interval to 150 msecs. [ 125.893795][ T5992] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 126.413548][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 126.440225][ T5992] dvb-usb: error while querying for an remote control event. [ 126.523133][ T24] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 126.636594][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 126.719544][ T5992] dvb-usb: error while querying for an remote control event. [ 126.720005][ T5866] usb 1-1: USB disconnect, device number 4 [ 126.922810][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.962026][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.111'. [ 126.990538][ T6401] netlink: 36 bytes leftover after parsing attributes in process `syz.4.111'. [ 127.009582][ T6401] tipc: Started in network mode [ 127.014637][ T6401] tipc: Node identity ac1414aa, cluster identity 4711 [ 127.023308][ T6401] tipc: Enabled bearer , priority 10 [ 127.054543][ T30] audit: type=1400 audit(1766931351.926:245): avc: denied { ioctl } for pid=6398 comm="syz.4.111" path="socket:[9801]" dev="sockfs" ino=9801 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.117257][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 127.129604][ T30] audit: type=1400 audit(1766931352.086:246): avc: denied { create } for pid=6395 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 127.155771][ T5866] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 127.262801][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.301158][ T24] usb 3-1: config 0 descriptor?? [ 127.397994][ T24] usbhid 3-1:0.0: can't add hid device: -22 [ 127.405116][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 127.614921][ T6407] syz.0.115 uses obsolete (PF_INET,SOCK_PACKET) [ 127.932900][ T30] audit: type=1400 audit(1766931352.896:247): avc: denied { create } for pid=6406 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.194017][ T5866] tipc: Node number set to 2886997162 [ 128.204261][ T30] audit: type=1400 audit(1766931352.896:248): avc: denied { write } for pid=6406 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.433464][ T30] audit: type=1400 audit(1766931352.896:249): avc: denied { nlmsg_write } for pid=6406 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.666807][ T30] audit: type=1400 audit(1766931352.956:250): avc: denied { create } for pid=6406 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.688391][ T30] audit: type=1400 audit(1766931352.986:251): avc: denied { write } for pid=6408 comm="syz.3.116" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 128.693296][ T6391] [U] é [ 128.714278][ T30] audit: type=1400 audit(1766931353.076:252): avc: denied { getopt } for pid=6408 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 129.307007][ T6419] FAULT_INJECTION: forcing a failure. [ 129.307007][ T6419] name failslab, interval 1, probability 0, space 0, times 0 [ 129.348617][ T5930] usb 3-1: USB disconnect, device number 6 [ 129.363216][ T6419] CPU: 1 UID: 0 PID: 6419 Comm: syz.0.119 Not tainted syzkaller #0 PREEMPT(full) [ 129.363248][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.363258][ T6419] Call Trace: [ 129.363264][ T6419] [ 129.363273][ T6419] dump_stack_lvl+0x16c/0x1f0 [ 129.363308][ T6419] should_fail_ex+0x512/0x640 [ 129.363335][ T6419] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 129.363358][ T6419] should_failslab+0xc2/0x120 [ 129.363382][ T6419] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 129.363400][ T6419] ? dquot_alloc_inode+0x51b/0xb90 [ 129.363420][ T6419] ? __dquot_initialize+0x299/0xd50 [ 129.363439][ T6419] ? __d_alloc+0x35/0xa80 [ 129.363460][ T6419] ? __d_alloc+0x35/0xa80 [ 129.363474][ T6419] __d_alloc+0x35/0xa80 [ 129.363493][ T6419] d_alloc_pseudo+0x1c/0xc0 [ 129.363515][ T6419] alloc_file_pseudo+0xcf/0x230 [ 129.363535][ T6419] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 129.363561][ T6419] __shmem_file_setup+0x1a8/0x350 [ 129.363591][ T6419] shmem_zero_setup+0x93/0x1b0 [ 129.363612][ T6419] __mmap_region+0x2271/0x2a00 [ 129.363635][ T6419] ? __lock_acquire+0x436/0x2890 [ 129.363658][ T6419] ? __pfx___mmap_region+0x10/0x10 [ 129.363696][ T6419] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 129.363717][ T6419] ? is_bpf_text_address+0x94/0x1a0 [ 129.363785][ T6419] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 129.363816][ T6419] mmap_region+0x1ab/0x3f0 [ 129.363833][ T6419] ? __get_unmapped_area+0x267/0x3f0 [ 129.363857][ T6419] do_mmap+0xa3e/0x1210 [ 129.363884][ T6419] ? __pfx_do_mmap+0x10/0x10 [ 129.363905][ T6419] ? __pfx_down_write_killable+0x10/0x10 [ 129.363938][ T6419] vm_mmap_pgoff+0x29e/0x470 [ 129.363966][ T6419] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 129.363990][ T6419] ? __fget_files+0x20e/0x3c0 [ 129.364024][ T6419] ksys_mmap_pgoff+0x7d/0x5c0 [ 129.364053][ T6419] ? __pfx_ksys_write+0x10/0x10 [ 129.364080][ T6419] __x64_sys_mmap+0x125/0x190 [ 129.364107][ T6419] do_syscall_64+0xcd/0xf80 [ 129.364134][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.364155][ T6419] RIP: 0033:0x7fd92918f749 [ 129.364172][ T6419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.364190][ T6419] RSP: 002b:00007fd92a0af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 129.364218][ T6419] RAX: ffffffffffffffda RBX: 00007fd9293e5fa0 RCX: 00007fd92918f749 [ 129.364230][ T6419] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 129.364241][ T6419] RBP: 00007fd92a0af090 R08: ffffffffffffffff R09: 0000000000000000 [ 129.364251][ T6419] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 129.364260][ T6419] R13: 00007fd9293e6038 R14: 00007fd9293e5fa0 R15: 00007fffe9072228 [ 129.364282][ T6419] [ 130.202504][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.123'. [ 130.752702][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.833802][ T5931] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 130.842735][ T5930] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 130.970003][ T30] audit: type=1400 audit(1766931355.916:253): avc: denied { setopt } for pid=6434 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 131.015396][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.076250][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 131.076314][ T5930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.101816][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.101928][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.183765][ T24] usb 3-1: config 0 descriptor?? [ 131.185588][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.270087][ T5931] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 131.299950][ T5931] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 131.324207][ T5930] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.333781][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.354714][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.368695][ T5930] usb 5-1: Product: syz [ 131.375100][ T5930] usb 5-1: Manufacturer: syz [ 131.380898][ T5931] usb 1-1: config 0 descriptor?? [ 131.386156][ T5930] usb 5-1: SerialNumber: syz [ 131.399944][ T5931] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 131.407768][ T5931] dvb-usb: bulk message failed: -22 (3/0) [ 131.443572][ T5931] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 131.458055][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 131.465725][ T5931] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 131.478310][ T5931] usb 1-1: media controller created [ 131.484670][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 131.486123][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.508447][ T5931] dvb-usb: bulk message failed: -22 (6/0) [ 131.560622][ T24] usb 3-1: USB disconnect, device number 7 [ 131.955765][ T5931] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 131.985313][ T5931] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 132.030684][ T5930] usb 5-1: USB disconnect, device number 6 [ 132.072020][ T5931] dvb-usb: schedule remote query interval to 150 msecs. [ 132.544525][ T5931] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 132.660295][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.670148][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.726655][ T5931] dvb-usb: bulk message failed: -22 (1/0) [ 133.057186][ T5931] dvb-usb: error while querying for an remote control event. [ 133.142292][ T5930] usb 1-1: USB disconnect, device number 5 [ 133.833820][ T5930] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 133.876080][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 134.010391][ T6460] netlink: 36 bytes leftover after parsing attributes in process `syz.1.128'. [ 134.248777][ T6471] netlink: 'syz.2.131': attribute type 12 has an invalid length. [ 134.257875][ T6471] netlink: 132 bytes leftover after parsing attributes in process `syz.2.131'. [ 134.273050][ T5930] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 134.432643][ T5930] usb 1-1: Using ep0 maxpacket: 8 [ 134.919667][ T5930] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 134.928141][ T5930] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 135.042418][ T5930] usb 1-1: config 179 has no interface number 0 [ 135.060177][ T5930] usb 1-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.072720][ T5866] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 135.083442][ T5930] usb 1-1: config 179 interface 65 has no altsetting 0 [ 135.090432][ T5930] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 135.235382][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.755476][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.809113][ T5866] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 135.858666][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.892913][ T5866] usb 3-1: config 0 descriptor?? [ 135.934264][ T5866] usbhid 3-1:0.0: can't add hid device: -22 [ 135.962442][ T5866] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 136.048990][ T30] audit: type=1400 audit(1766931361.016:254): avc: denied { create } for pid=6480 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 136.174663][ T6447] [U] é [ 136.780288][ T5866] usb 1-1: USB disconnect, device number 6 [ 137.126876][ T24] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 137.163021][ T6006] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 137.304886][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 137.319512][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 137.566333][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.775139][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 137.785298][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 137.799261][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.815040][ T24] usb 4-1: config 0 descriptor?? [ 137.845537][ T6006] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.848751][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 137.864220][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 137.887910][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 137.898558][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 137.906425][ T24] usb 4-1: media controller created [ 137.919310][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.920631][ T6006] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.958767][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 137.971144][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 137.985097][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 138.004526][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 138.127436][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 138.283391][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 138.291074][ T24] dvb-usb: error while querying for an remote control event. [ 138.291227][ T6006] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.341866][ T6006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.360160][ T6006] usb 2-1: Product: syz [ 138.370245][ T6006] usb 2-1: Manufacturer: syz [ 138.378811][ T6006] usb 2-1: SerialNumber: syz [ 138.452794][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 138.459837][ T24] dvb-usb: error while querying for an remote control event. [ 138.672846][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 138.697953][ T24] dvb-usb: error while querying for an remote control event. [ 138.719635][ T5930] usb 3-1: USB disconnect, device number 8 [ 138.873504][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 138.917363][ T6006] usb 2-1: USB disconnect, device number 7 [ 139.057273][ T24] dvb-usb: error while querying for an remote control event. [ 139.162374][ T30] audit: type=1400 audit(1766931364.126:255): avc: denied { ioctl } for pid=6514 comm="syz.2.144" path="socket:[11031]" dev="sockfs" ino=11031 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.178469][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.222721][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 139.228778][ T24] dvb-usb: error while querying for an remote control event. [ 139.280355][ T6515] Illegal XDP return value 4294967282 on prog (id 38) dev syz_tun, expect packet loss! [ 139.454118][ T6522] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20004 [ 139.512809][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 139.519078][ T24] dvb-usb: error while querying for an remote control event. [ 139.683262][ T5930] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 139.692224][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 139.725542][ T24] dvb-usb: error while querying for an remote control event. [ 139.950258][ T5866] dvb-usb: bulk message failed: -22 (1/0) [ 140.031032][ T5866] dvb-usb: error while querying for an remote control event. [ 140.145349][ T5931] usb 4-1: USB disconnect, device number 11 [ 140.184871][ T5931] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 140.251366][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 140.263697][ T6532] netlink: 36 bytes leftover after parsing attributes in process `syz.2.147'. [ 140.342481][ T5930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.355293][ T5138] Bluetooth: Unexpected continuation frame (len 4) [ 140.393598][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.410456][ T5930] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.422814][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.431075][ T5930] usb 5-1: Product: syz [ 140.435319][ T5930] usb 5-1: Manufacturer: syz [ 140.439937][ T5930] usb 5-1: SerialNumber: syz [ 141.011119][ T5138] Bluetooth: Wrong link type (-57) [ 141.771076][ T5930] usb 5-1: USB disconnect, device number 7 [ 142.343072][ T6561] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.531318][ T30] audit: type=1400 audit(1766931367.396:256): avc: denied { write } for pid=6552 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 142.553230][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.574582][ T30] audit: type=1400 audit(1766931367.396:257): avc: denied { bind } for pid=6554 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.669046][ T30] audit: type=1400 audit(1766931367.396:258): avc: denied { name_bind } for pid=6554 comm="syz.2.155" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 142.694645][ T6565] netlink: 'syz.1.154': attribute type 12 has an invalid length. [ 142.712842][ T30] audit: type=1400 audit(1766931367.396:259): avc: denied { node_bind } for pid=6554 comm="syz.2.155" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 142.737494][ T6565] netlink: 132 bytes leftover after parsing attributes in process `syz.1.154'. [ 142.741553][ T30] audit: type=1400 audit(1766931367.456:260): avc: denied { name_bind } for pid=6554 comm="syz.2.155" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 142.772931][ T6568] trusted_key: encrypted_key: insufficient parameters specified [ 142.907123][ T30] audit: type=1400 audit(1766931367.456:261): avc: denied { node_bind } for pid=6554 comm="syz.2.155" saddr=172.30.1.3 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 142.978469][ T30] audit: type=1400 audit(1766931367.456:262): avc: denied { write } for pid=6554 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.219276][ T30] audit: type=1326 audit(1766931368.186:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.3.157" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ccd18f749 code=0x0 [ 143.720619][ T5931] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 144.066742][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.120943][ T5931] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 144.120985][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.123216][ T5931] usb 2-1: config 0 descriptor?? [ 144.130810][ T5931] usbhid 2-1:0.0: can't add hid device: -22 [ 144.130863][ T5931] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 144.806916][ T30] audit: type=1400 audit(1766931369.756:264): avc: denied { name_connect } for pid=6587 comm="syz.0.162" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 145.349355][ T30] audit: type=1400 audit(1766931370.316:265): avc: denied { mount } for pid=6594 comm="syz.3.163" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 146.739678][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 147.069064][ T48] usb 2-1: USB disconnect, device number 8 [ 147.185605][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 147.286165][ T6598] [U] é [ 147.445014][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 147.583981][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.612662][ T10] usb 5-1: config 0 has no interface number 0 [ 147.633902][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.679036][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.695569][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 147.860108][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.881549][ T10] usb 5-1: config 0 descriptor?? [ 147.929758][ T5138] Bluetooth: Unexpected continuation frame (len 4) [ 148.093144][ T48] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 148.542650][ T6614] netlink: 'syz.4.168': attribute type 10 has an invalid length. [ 148.580731][ T6614] team0: Port device dummy0 added [ 149.252698][ T48] usb 3-1: device not accepting address 9, error -71 [ 149.425858][ T5138] Bluetooth: Unexpected continuation frame (len 4) [ 149.558024][ T6614] openvswitch: netlink: Key type 4127 is out of range max 32 [ 150.041931][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 150.041959][ T30] audit: type=1400 audit(1766931374.736:272): avc: denied { read write } for pid=6642 comm="syz.2.175" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 150.099466][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 150.142319][ T6651] netlink: 36 bytes leftover after parsing attributes in process `syz.3.173'. [ 150.159297][ T6651] tipc: Started in network mode [ 150.164441][ T6651] tipc: Node identity ac1414aa, cluster identity 4711 [ 150.172766][ T6651] tipc: Enabled bearer , priority 10 [ 150.191355][ T10] uclogic 0003:28BD:0071.0004: pen parameters not found [ 150.225439][ T10] uclogic 0003:28BD:0071.0004: interface is invalid, ignoring [ 150.238887][ T30] audit: type=1400 audit(1766931374.736:273): avc: denied { open } for pid=6642 comm="syz.2.175" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 150.342910][ T10] usb 5-1: USB disconnect, device number 8 [ 150.420767][ T5138] Bluetooth: Wrong link type (-57) [ 150.844114][ T6658] FAULT_INJECTION: forcing a failure. [ 150.844114][ T6658] name failslab, interval 1, probability 0, space 0, times 0 [ 150.857677][ T6658] CPU: 1 UID: 0 PID: 6658 Comm: syz.2.176 Not tainted syzkaller #0 PREEMPT(full) [ 150.857707][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.857719][ T6658] Call Trace: [ 150.857726][ T6658] [ 150.857734][ T6658] dump_stack_lvl+0x16c/0x1f0 [ 150.857772][ T6658] should_fail_ex+0x512/0x640 [ 150.857808][ T6658] ? kmem_cache_alloc_noprof+0x62/0x770 [ 150.857832][ T6658] should_failslab+0xc2/0x120 [ 150.857859][ T6658] kmem_cache_alloc_noprof+0x83/0x770 [ 150.857877][ T6658] ? key_alloc+0x3e0/0x1330 [ 150.857909][ T6658] ? key_alloc+0x3e0/0x1330 [ 150.857930][ T6658] key_alloc+0x3e0/0x1330 [ 150.857963][ T6658] ? __pfx_key_alloc+0x10/0x10 [ 150.857988][ T6658] ? hook_cred_prepare+0x269/0x310 [ 150.858020][ T6658] keyring_alloc+0x44/0xc0 [ 150.858049][ T6658] lookup_user_key+0xa3f/0x1300 [ 150.858080][ T6658] ? __pfx_lookup_user_key+0x10/0x10 [ 150.858101][ T6658] ? rcu_is_watching+0x12/0xc0 [ 150.858121][ T6658] ? irqentry_exit+0x1dd/0x8c0 [ 150.858146][ T6658] ? lockdep_hardirqs_on+0x7c/0x110 [ 150.858173][ T6658] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 150.858204][ T6658] ? __do_sys_add_key+0x1d7/0x470 [ 150.858225][ T6658] __do_sys_add_key+0x25b/0x470 [ 150.858244][ T6658] ? __pfx___do_sys_add_key+0x10/0x10 [ 150.858273][ T6658] do_syscall_64+0xcd/0xf80 [ 150.858299][ T6658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.858320][ T6658] RIP: 0033:0x7f0a5c98f749 [ 150.858336][ T6658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.858354][ T6658] RSP: 002b:00007f0a5d817038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 150.858376][ T6658] RAX: ffffffffffffffda RBX: 00007f0a5cbe6180 RCX: 00007f0a5c98f749 [ 150.858388][ T6658] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 150.858400][ T6658] RBP: 00007f0a5d817090 R08: fffffffffffffffe R09: 0000000000000000 [ 150.858412][ T6658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.858423][ T6658] R13: 00007f0a5cbe6218 R14: 00007f0a5cbe6180 R15: 00007ffc94276618 [ 150.858451][ T6658] [ 151.202702][ T5992] tipc: Node number set to 2886997162 [ 151.764245][ T5992] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 152.527157][ T5992] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 152.537767][ T5992] usb 5-1: config 0 has no interface number 0 [ 152.546730][ T5992] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 152.563576][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.581264][ T5992] usb 5-1: Product: syz [ 152.590755][ T5992] usb 5-1: Manufacturer: syz [ 152.643004][ T5930] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 152.650836][ T5992] usb 5-1: SerialNumber: syz [ 152.806183][ T5992] usb 5-1: config 0 descriptor?? [ 152.983853][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 153.002356][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 153.518101][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 153.547420][ T5930] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 153.556281][ T5930] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 153.568600][ T5930] usb 4-1: config 179 has no interface number 0 [ 153.580572][ T5930] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 153.592788][ T5930] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 153.607638][ T5930] usb 4-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 153.627494][ T5930] usb 4-1: config 179 interface 65 has no altsetting 0 [ 153.680683][ T5930] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 153.684547][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 153.741430][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 153.761128][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.273253][ T5992] usb 5-1: Firmware version (0.0) predates our first public release. [ 154.281399][ T5992] usb 5-1: Please update to version 0.2 or newer [ 154.340115][ T5992] usb 5-1: Firmware: build n[Lc¶« [ 154.675628][ T5992] usb 5-1: USB disconnect, device number 9 [ 155.628003][ T5976] usb 4-1: USB disconnect, device number 12 [ 155.730064][ T6701] FAULT_INJECTION: forcing a failure. [ 155.730064][ T6701] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 155.761399][ T6701] CPU: 1 UID: 0 PID: 6701 Comm: syz.3.188 Not tainted syzkaller #0 PREEMPT(full) [ 155.761427][ T6701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.761437][ T6701] Call Trace: [ 155.761444][ T6701] [ 155.761451][ T6701] dump_stack_lvl+0x16c/0x1f0 [ 155.761482][ T6701] should_fail_ex+0x512/0x640 [ 155.761512][ T6701] _copy_to_user+0x32/0xd0 [ 155.761539][ T6701] simple_read_from_buffer+0xcb/0x170 [ 155.761565][ T6701] proc_fail_nth_read+0x197/0x240 [ 155.761586][ T6701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.761607][ T6701] ? rw_verify_area+0xcf/0x6c0 [ 155.761627][ T6701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.761646][ T6701] vfs_read+0x1e4/0xcf0 [ 155.761670][ T6701] ? __pfx___mutex_lock+0x10/0x10 [ 155.761695][ T6701] ? __pfx_vfs_read+0x10/0x10 [ 155.761724][ T6701] ? __fget_files+0x20e/0x3c0 [ 155.761757][ T6701] ksys_read+0x12a/0x250 [ 155.761778][ T6701] ? __pfx_ksys_read+0x10/0x10 [ 155.761807][ T6701] do_syscall_64+0xcd/0xf80 [ 155.761832][ T6701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.761851][ T6701] RIP: 0033:0x7f4ccd18e15c [ 155.761867][ T6701] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 155.761884][ T6701] RSP: 002b:00007f4cce048030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.761902][ T6701] RAX: ffffffffffffffda RBX: 00007f4ccd3e5fa0 RCX: 00007f4ccd18e15c [ 155.761913][ T6701] RDX: 000000000000000f RSI: 00007f4cce0480a0 RDI: 0000000000000004 [ 155.761923][ T6701] RBP: 00007f4cce048090 R08: 0000000000000000 R09: 0000000000000000 [ 155.761934][ T6701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.761944][ T6701] R13: 00007f4ccd3e6038 R14: 00007f4ccd3e5fa0 R15: 00007fff5c61e2f8 [ 155.761972][ T6701] [ 156.011204][ T6709] netlink: 165 bytes leftover after parsing attributes in process `syz.3.190'. [ 156.011579][ T30] audit: type=1400 audit(1766931380.976:274): avc: denied { create } for pid=6708 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.092688][ T6006] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 156.134613][ T30] audit: type=1400 audit(1766931380.986:275): avc: denied { ioctl } for pid=6708 comm="syz.3.190" path="socket:[11417]" dev="sockfs" ino=11417 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.314541][ T6006] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.329568][ T6006] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.372284][ T6006] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.400865][ T6006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.422916][ T6707] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 156.429940][ T6707] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 156.446492][ T6006] usb 2-1: Product: syz [ 156.450736][ T6006] usb 2-1: Manufacturer: syz [ 156.454002][ T6707] vhci_hcd vhci_hcd.0: Device attached [ 156.467074][ T6006] usb 2-1: SerialNumber: syz [ 156.536485][ T30] audit: type=1400 audit(1766931381.506:276): avc: denied { read } for pid=6714 comm="syz.0.191" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.670166][ T6716] vhci_hcd: connection closed [ 156.693179][ T5992] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 156.727701][ T4888] vhci_hcd vhci_hcd.4: stop threads [ 156.772986][ T5930] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 156.829247][ T4888] vhci_hcd vhci_hcd.4: release socket [ 156.841213][ T4888] vhci_hcd vhci_hcd.4: disconnect device [ 156.893380][ T5992] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 156.903667][ T5992] usb 41-1: enqueue for inactive port 0 [ 156.929024][ T6727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.193'. [ 156.940154][ T30] audit: type=1400 audit(1766931381.906:277): avc: denied { ioctl } for pid=6726 comm="syz.3.193" path="socket:[11440]" dev="sockfs" ino=11440 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.983182][ T5992] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 156.992644][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 157.000909][ T5930] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 157.009593][ T5930] usb 3-1: config 0 has no interface number 0 [ 157.016338][ T5930] usb 3-1: config 0 interface 29 has no altsetting 0 [ 157.026799][ T5930] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 157.037497][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.046132][ T5930] usb 3-1: Product: syz [ 157.051065][ T5930] usb 3-1: Manufacturer: syz [ 157.057628][ T5930] usb 3-1: SerialNumber: syz [ 157.065590][ T5930] usb 3-1: config 0 descriptor?? [ 158.492512][ T5930] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 158.533762][ T5930] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 158.541208][ T5930] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 158.578588][ T6006] usb 2-1: USB disconnect, device number 9 [ 158.607465][ T30] audit: type=1400 audit(1766931383.576:278): avc: denied { mounton } for pid=6737 comm="syz.0.196" path="/46/file0" dev="tmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 158.642794][ T5930] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 158.669735][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.764562][ T5930] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -8 [ 158.781886][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.801204][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.495622][ T48] usb 3-1: USB disconnect, device number 11 [ 159.602715][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.769108][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 159.793143][ T6753] netlink: 36 bytes leftover after parsing attributes in process `syz.1.199'. [ 159.812666][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 159.827850][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 159.848592][ T24] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 159.869245][ T24] usb 1-1: config 179 has no interface number 0 [ 159.878943][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 159.900028][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 159.923035][ T24] usb 1-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 160.038831][ T24] usb 1-1: config 179 interface 65 has no altsetting 0 [ 160.063629][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 160.079109][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.701516][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 161.277963][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 161.295906][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.314018][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.342758][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 161.359459][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.401469][ T24] usb 3-1: config 0 descriptor?? [ 161.447819][ T24] hub 3-1:0.0: USB hub found [ 161.488695][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'. [ 161.717851][ T6771] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.754299][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.204'. [ 161.764470][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.204'. [ 161.982890][ T24] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 162.156647][ T5979] usb 1-1: USB disconnect, device number 7 [ 162.222938][ T6767] netlink: 36 bytes leftover after parsing attributes in process `syz.3.202'. [ 162.366851][ T24] hid-generic 0003:046D:C31C.0005: item fetching failed at offset 0/1 [ 162.393469][ T24] hid-generic 0003:046D:C31C.0005: probe with driver hid-generic failed with error -22 [ 162.683074][ T24] usb 3-1: USB disconnect, device number 12 [ 162.772741][ T5979] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 162.932679][ T5979] usb 1-1: Using ep0 maxpacket: 32 [ 162.939907][ T5979] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 162.967314][ T5979] usb 1-1: config 0 has no interface number 0 [ 162.992737][ T5979] usb 1-1: config 0 interface 29 has no altsetting 0 [ 163.011962][ T5979] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 163.023146][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.037117][ T5979] usb 1-1: Product: syz [ 163.043873][ T5979] usb 1-1: Manufacturer: syz [ 163.048636][ T5979] usb 1-1: SerialNumber: syz [ 163.060133][ T6790] FAULT_INJECTION: forcing a failure. [ 163.060133][ T6790] name failslab, interval 1, probability 0, space 0, times 0 [ 163.074883][ T5979] usb 1-1: config 0 descriptor?? [ 163.084174][ T6790] CPU: 1 UID: 0 PID: 6790 Comm: syz.4.209 Not tainted syzkaller #0 PREEMPT(full) [ 163.084206][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.084218][ T6790] Call Trace: [ 163.084226][ T6790] [ 163.084235][ T6790] dump_stack_lvl+0x16c/0x1f0 [ 163.084273][ T6790] should_fail_ex+0x512/0x640 [ 163.084299][ T6790] ? __kvmalloc_node_noprof+0x129/0xa40 [ 163.084326][ T6790] should_failslab+0xc2/0x120 [ 163.084354][ T6790] __kvmalloc_node_noprof+0x14a/0xa40 [ 163.084376][ T6790] ? __pfx___mutex_lock+0x10/0x10 [ 163.084400][ T6790] ? nf_hook_entries_grow+0x28f/0x860 [ 163.084429][ T6790] ? nf_hook_entries_grow+0x28f/0x860 [ 163.084446][ T6790] nf_hook_entries_grow+0x28f/0x860 [ 163.084463][ T6790] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 163.084496][ T6790] __nf_register_net_hook+0x1cd/0x730 [ 163.084517][ T6790] nf_register_net_hook+0x109/0x160 [ 163.084535][ T6790] nf_register_net_hooks+0x5d/0xd0 [ 163.084554][ T6790] nf_defrag_ipv6_enable+0xc1/0x130 [ 163.084574][ T6790] nf_ct_netns_do_get+0x225/0x620 [ 163.084596][ T6790] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 163.084613][ T6790] ? xt_find_match+0x1f1/0x290 [ 163.084638][ T6790] ? __mutex_unlock_slowpath+0x161/0x790 [ 163.084666][ T6790] nf_ct_netns_get+0x39/0x150 [ 163.084683][ T6790] helper_mt_check+0x8b/0x190 [ 163.084698][ T6790] ? __pfx_helper_mt_check+0x10/0x10 [ 163.084712][ T6790] xt_check_match+0x286/0xa50 [ 163.084736][ T6790] ? __pfx_xt_check_match+0x10/0x10 [ 163.084759][ T6790] ? xt_find_match+0x1f6/0x290 [ 163.084781][ T6790] ? xt_find_match+0x1f6/0x290 [ 163.084806][ T6790] find_check_entry.constprop.0+0x34e/0xa20 [ 163.084834][ T6790] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 163.084865][ T6790] ? kfree+0x2f8/0x6e0 [ 163.084877][ T6790] ? xt_alloc_entry_offsets+0x3f/0x60 [ 163.084895][ T6790] ? translate_table+0xc0e/0x17b0 [ 163.084921][ T6790] translate_table+0xd0b/0x17b0 [ 163.084952][ T6790] ? __pfx_translate_table+0x10/0x10 [ 163.084979][ T6790] do_ip6t_set_ctl+0x603/0xc50 [ 163.084998][ T6790] ? find_held_lock+0x2b/0x80 [ 163.085020][ T6790] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 163.085041][ T6790] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 163.085066][ T6790] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.085096][ T6790] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 163.085117][ T6790] nf_setsockopt+0x8d/0xf0 [ 163.085138][ T6790] ipv6_setsockopt+0x135/0x170 [ 163.085162][ T6790] rawv6_setsockopt+0xd1/0x6a0 [ 163.085183][ T6790] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 163.085205][ T6790] ? selinux_socket_setsockopt+0x6a/0x80 [ 163.085222][ T6790] ? sock_common_setsockopt+0x2e/0xf0 [ 163.085242][ T6790] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 163.085261][ T6790] do_sock_setsockopt+0xf3/0x1d0 [ 163.085282][ T6790] __sys_setsockopt+0x1a0/0x230 [ 163.085301][ T6790] __x64_sys_setsockopt+0xbd/0x160 [ 163.085314][ T6790] ? do_syscall_64+0x91/0xf80 [ 163.085333][ T6790] ? lockdep_hardirqs_on+0x7c/0x110 [ 163.085351][ T6790] do_syscall_64+0xcd/0xf80 [ 163.085370][ T6790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.085386][ T6790] RIP: 0033:0x7f0d6018f749 [ 163.085400][ T6790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.085415][ T6790] RSP: 002b:00007f0d61094038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 163.085432][ T6790] RAX: ffffffffffffffda RBX: 00007f0d603e5fa0 RCX: 00007f0d6018f749 [ 163.085442][ T6790] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 163.085450][ T6790] RBP: 00007f0d61094090 R08: 00000000000005f8 R09: 0000000000000000 [ 163.085460][ T6790] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000002 [ 163.085469][ T6790] R13: 00007f0d603e6038 R14: 00007f0d603e5fa0 R15: 00007ffe12805bc8 [ 163.085491][ T6790] [ 163.475707][ T6790] xt_helper: cannot load conntrack support for proto=10 [ 163.521542][ T5979] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 163.622763][ T5951] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 163.724106][ T5979] peak_usb 1-1:0.29 can0: sending command failure: -8 [ 163.731089][ T5979] peak_usb 1-1:0.29 can0: sending command failure: -8 [ 163.739151][ T5979] peak_usb 1-1:0.29 can0: sending command failure: -8 [ 163.784707][ T5951] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.795553][ T5979] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -8 [ 163.804519][ T5951] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.904316][ T5951] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.983373][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.991421][ T5951] usb 2-1: Product: syz [ 164.043858][ T5951] usb 2-1: Manufacturer: syz [ 164.061304][ T5951] usb 2-1: SerialNumber: syz [ 164.078397][ T6784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.096425][ T6784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.966497][ T90] usb 1-1: USB disconnect, device number 8 [ 165.176961][ T30] audit: type=1400 audit(1766931390.116:279): avc: denied { watch watch_reads } for pid=6803 comm="syz.2.214" path="/47" dev="tmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 165.490092][ T5951] usb 2-1: USB disconnect, device number 10 [ 165.632864][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.074437][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 166.098617][ T6823] netlink: 36 bytes leftover after parsing attributes in process `syz.2.217'. [ 166.121104][ T6823] tipc: Enabling of bearer rejected, already enabled [ 166.887468][ T30] audit: type=1400 audit(1766931391.856:280): avc: denied { create } for pid=6810 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 166.956687][ T30] audit: type=1400 audit(1766931391.856:281): avc: denied { ioctl } for pid=6810 comm="syz.3.215" path="socket:[12773]" dev="sockfs" ino=12773 ioctlcmd=0x61d0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 167.080749][ T6811] lec:lec_atm_close: lec0: Shut down! [ 167.098384][ T30] audit: type=1400 audit(1766931391.906:282): avc: denied { write } for pid=6810 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 167.246790][ T30] audit: type=1400 audit(1766931392.096:283): avc: denied { search } for pid=5482 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.304523][ T30] audit: type=1400 audit(1766931392.096:284): avc: denied { search } for pid=5482 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.397212][ T30] audit: type=1400 audit(1766931392.096:285): avc: denied { search } for pid=5482 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.503438][ T30] audit: type=1400 audit(1766931392.096:286): avc: denied { read } for pid=5482 comm="dhcpcd" name="n103" dev="tmpfs" ino=2967 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.629133][ T30] audit: type=1400 audit(1766931392.096:287): avc: denied { open } for pid=5482 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2967 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.682741][ T30] audit: type=1400 audit(1766931392.096:288): avc: denied { getattr } for pid=5482 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2967 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.704875][ T48] lec:lec_start_xmit: lec0:No lecd attached [ 170.732838][ T90] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 170.756380][ T6883] netlink: 'syz.4.219': attribute type 12 has an invalid length. [ 170.865936][ T6883] netlink: 132 bytes leftover after parsing attributes in process `syz.4.219'. [ 171.329143][ T90] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.332563][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 171.332578][ T30] audit: type=1400 audit(1766931396.246:299): avc: denied { create } for pid=6892 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 171.342657][ T90] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 171.479947][ T6902] capability: warning: `syz.3.227' uses 32-bit capabilities (legacy support in use) [ 171.562421][ T90] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.599252][ T90] usb 5-1: config 0 descriptor?? [ 171.663024][ T90] usbhid 5-1:0.0: can't add hid device: -22 [ 171.669291][ T90] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 172.083499][ T6898] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 172.223222][ T48] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 172.695275][ T48] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.726707][ T48] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.789061][ T48] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.802010][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.814399][ T48] usb 2-1: Product: syz [ 172.818897][ T48] usb 2-1: Manufacturer: syz [ 172.824116][ T48] usb 2-1: SerialNumber: syz [ 173.069048][ T6908] [U] é [ 173.203789][ T90] usb 5-1: USB disconnect, device number 10 [ 173.244967][ T48] usb 2-1: USB disconnect, device number 11 [ 173.990655][ T5969] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.860872][ T5969] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.892568][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 174.901519][ C1] lec:lec_tx_timeout: lec0 [ 174.906302][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 175.113603][ T5969] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.137417][ T48] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 175.334747][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 175.396274][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.435919][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.447351][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.743966][ T48] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 175.761509][ T48] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 175.769713][ T6923] [U] é [ 175.774710][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 175.789041][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 175.792903][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.849863][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.863899][ T48] usb 2-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.884430][ T48] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 175.893959][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.906377][ T48] usb 2-1: Product: syz [ 175.910777][ T48] usb 2-1: Manufacturer: syz [ 176.020341][ T5969] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.048183][ T48] usb 2-1: SerialNumber: syz [ 176.087275][ T48] usb 2-1: config 0 descriptor?? [ 176.709005][ T48] iowarrior 2-1:0.0: IOWarrior product=0x1505, serial= interface=0 now attached to iowarrior0 [ 176.730624][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 176.750516][ T6973] netlink: 36 bytes leftover after parsing attributes in process `syz.3.238'. [ 176.775876][ T5969] bridge_slave_1: left allmulticast mode [ 176.797356][ T5969] bridge_slave_1: left promiscuous mode [ 176.811612][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.855243][ T48] usb 2-1: USB disconnect, device number 12 [ 176.880799][ T5969] bridge_slave_0: left allmulticast mode [ 176.914372][ T5969] bridge_slave_0: left promiscuous mode [ 176.934549][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.197637][ T6982] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.932875][ T52] Bluetooth: hci0: command tx timeout [ 178.553423][ T7004] netlink: 48 bytes leftover after parsing attributes in process `syz.1.243'. [ 178.939474][ T5969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.954259][ T5969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.967483][ T5969] bond0 (unregistering): Released all slaves [ 179.037339][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.046199][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.066293][ T7007] bridge0: entered allmulticast mode [ 179.135604][ T7011] bridge_slave_1: left allmulticast mode [ 179.142663][ T7011] bridge_slave_1: left promiscuous mode [ 179.166331][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.513778][ T7011] bridge_slave_0: left allmulticast mode [ 179.519587][ T7011] bridge_slave_0: left promiscuous mode [ 179.547887][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.013247][ T52] Bluetooth: hci0: command tx timeout [ 180.187359][ T7014] [U] é [ 180.652578][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 180.660680][ C1] lec:lec_tx_timeout: lec0 [ 180.665655][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 180.707189][ T48] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 181.125238][ T5969] hsr_slave_0: left promiscuous mode [ 181.182840][ T5969] hsr_slave_1: left promiscuous mode [ 181.196827][ T48] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.198116][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.405721][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.412925][ T48] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.415427][ T48] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.439701][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.441505][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.478605][ T48] usb 5-1: Product: syz [ 181.482692][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.498161][ T48] usb 5-1: Manufacturer: syz [ 181.512263][ T5969] veth1_macvtap: left promiscuous mode [ 181.521128][ T48] usb 5-1: SerialNumber: syz [ 181.529382][ T5969] veth0_macvtap: left promiscuous mode [ 181.540003][ T5969] veth1_vlan: left promiscuous mode [ 181.556115][ T5969] veth0_vlan: left promiscuous mode [ 181.979432][ T48] usb 5-1: USB disconnect, device number 11 [ 182.076428][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.094036][ T52] Bluetooth: hci0: command tx timeout [ 182.366492][ T7054] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7054 comm=syz.1.253 [ 182.652403][ T7059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.747714][ T5969] team0 (unregistering): Port device team_slave_1 removed [ 182.810870][ T5969] team0 (unregistering): Port device team_slave_0 removed [ 183.652802][ T7050] ip6gretap0: entered promiscuous mode [ 183.659469][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 183.702880][ T7051] ip6gretap0: left promiscuous mode [ 183.728379][ T6956] chnl_net:caif_netlink_parms(): no params data found [ 184.242716][ T52] Bluetooth: hci0: command tx timeout [ 184.413908][ T7070] xt_connbytes: Forcing CT accounting to be enabled [ 184.454041][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 184.488117][ T7070] Cannot find del_set index 1 as target [ 184.493435][ T7079] netlink: 36 bytes leftover after parsing attributes in process `syz.3.260'. [ 184.621540][ T7079] tipc: Enabling of bearer rejected, already enabled [ 184.883092][ T6956] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.933583][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.080660][ T6956] bridge_slave_0: entered allmulticast mode [ 185.105283][ T6956] bridge_slave_0: entered promiscuous mode [ 185.131830][ T6956] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.161224][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.189216][ T6956] bridge_slave_1: entered allmulticast mode [ 185.203080][ T6956] bridge_slave_1: entered promiscuous mode [ 185.362506][ T6956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.416857][ T6956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.554518][ T6956] team0: Port device team_slave_0 added [ 185.568143][ T6956] team0: Port device team_slave_1 added [ 185.692814][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 185.700867][ C1] lec:lec_tx_timeout: lec0 [ 185.705593][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 185.768310][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.791598][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.830425][ T6956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.939607][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.977525][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.026274][ T30] audit: type=1400 audit(1766931410.996:300): avc: denied { open } for pid=7114 comm="syz.2.265" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 186.072610][ T6956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.117158][ T7118] ip6gretap0: entered promiscuous mode [ 186.149332][ T30] audit: type=1400 audit(1766931411.026:301): avc: denied { ioctl } for pid=7114 comm="syz.2.265" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 186.186416][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 186.197879][ T7120] ip6gretap0: left promiscuous mode [ 186.276245][ T7120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7120 comm=syz.1.267 [ 186.306682][ T6956] hsr_slave_0: entered promiscuous mode [ 186.315693][ T6956] hsr_slave_1: entered promiscuous mode [ 186.400202][ T7128] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 186.482693][ T48] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 186.644874][ T48] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.661228][ T48] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.676854][ T48] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.770680][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.780274][ T48] usb 5-1: Product: syz [ 186.787273][ T48] usb 5-1: Manufacturer: syz [ 186.792019][ T48] usb 5-1: SerialNumber: syz [ 186.828826][ T30] audit: type=1400 audit(1766931411.796:302): avc: denied { map } for pid=7139 comm="syz.1.269" path="socket:[12196]" dev="sockfs" ino=12196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.896289][ T30] audit: type=1400 audit(1766931411.816:303): avc: denied { read accept } for pid=7139 comm="syz.1.269" path="socket:[12196]" dev="sockfs" ino=12196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 187.079633][ T48] usb 5-1: USB disconnect, device number 12 [ 187.346389][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.411967][ T6956] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 187.424971][ T6956] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 187.437628][ T6956] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 187.450958][ T6956] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 187.640044][ T6956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.671495][ T6956] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.711818][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.718994][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.904864][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.912199][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.949884][ T6956] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.962086][ T6956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.024555][ T7198] FAULT_INJECTION: forcing a failure. [ 190.024555][ T7198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.040474][ T7198] CPU: 1 UID: 0 PID: 7198 Comm: syz.2.279 Not tainted syzkaller #0 PREEMPT(full) [ 190.040503][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.040514][ T7198] Call Trace: [ 190.040521][ T7198] [ 190.040529][ T7198] dump_stack_lvl+0x16c/0x1f0 [ 190.040561][ T7198] should_fail_ex+0x512/0x640 [ 190.040592][ T7198] _copy_from_iter+0x2a4/0x16c0 [ 190.040621][ T7198] ? __pfx__copy_from_iter+0x10/0x10 [ 190.040644][ T7198] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 190.040680][ T7198] copy_page_from_iter+0xde/0x180 [ 190.040709][ T7198] tun_build_skb.constprop.0+0x2e8/0x1560 [ 190.040755][ T7198] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 190.040776][ T7198] ? arch_stack_walk+0xa6/0x100 [ 190.040819][ T7198] ? _kstrtoull+0x145/0x200 [ 190.040841][ T7198] tun_get_user+0x149c/0x3cc0 [ 190.040875][ T7198] ? __pfx_tun_get_user+0x10/0x10 [ 190.040900][ T7198] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 190.040925][ T7198] ? find_held_lock+0x2b/0x80 [ 190.040952][ T7198] ? tun_get+0x191/0x370 [ 190.040981][ T7198] tun_chr_write_iter+0xdc/0x210 [ 190.041006][ T7198] vfs_write+0x7d3/0x11d0 [ 190.041033][ T7198] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 190.041060][ T7198] ? __pfx_vfs_write+0x10/0x10 [ 190.041078][ T7198] ? find_held_lock+0x2b/0x80 [ 190.041116][ T7198] ksys_write+0x12a/0x250 [ 190.041136][ T7198] ? __pfx_ksys_write+0x10/0x10 [ 190.041165][ T7198] do_syscall_64+0xcd/0xf80 [ 190.041189][ T7198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.041206][ T7198] RIP: 0033:0x7f0a5c98e1ff [ 190.041222][ T7198] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 190.041241][ T7198] RSP: 002b:00007f0a5d859000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 190.041262][ T7198] RAX: ffffffffffffffda RBX: 00007f0a5cbe5fa0 RCX: 00007f0a5c98e1ff [ 190.041276][ T7198] RDX: 0000000000000022 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 190.041285][ T7198] RBP: 00007f0a5d859090 R08: 0000000000000000 R09: 0000000000000000 [ 190.041296][ T7198] R10: 0000000000000022 R11: 0000000000000293 R12: 0000000000000001 [ 190.041307][ T7198] R13: 00007f0a5cbe6038 R14: 00007f0a5cbe5fa0 R15: 00007ffc94276618 [ 190.041335][ T7198] [ 190.041803][ T6956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.433334][ T7206] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 190.443549][ T7206] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 190.454578][ T7206] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 190.464486][ T7206] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 190.701659][ T7206] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 190.711761][ T7206] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 190.721362][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 190.721480][ C1] lec:lec_tx_timeout: lec0 [ 190.721753][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 190.741335][ T7206] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 190.751261][ T7206] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 190.768572][ T7206] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 190.840501][ T30] audit: type=1400 audit(1766931415.386:304): avc: denied { name_bind } for pid=7199 comm="syz.3.278" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 191.838251][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 191.858239][ T7229] netlink: 36 bytes leftover after parsing attributes in process `syz.1.284'. [ 192.412692][ T7229] tipc: Started in network mode [ 192.417742][ T7229] tipc: Node identity ac1414aa, cluster identity 4711 [ 192.460668][ T7229] tipc: Enabled bearer , priority 10 [ 192.847749][ T30] audit: type=1400 audit(1767455705.813:305): avc: denied { create } for pid=7249 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 192.887902][ T6956] veth0_vlan: entered promiscuous mode [ 192.911936][ T6956] veth1_vlan: entered promiscuous mode [ 193.035570][ T6956] veth0_macvtap: entered promiscuous mode [ 193.070576][ T6956] veth1_macvtap: entered promiscuous mode [ 193.143398][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.221918][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.271391][ T3900] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.297906][ T3900] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.332689][ T3900] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.662909][ T3900] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.683018][ T5880] tipc: Node number set to 2886997162 [ 193.886675][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.919510][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.024022][ T6006] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 194.088000][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.146058][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.155227][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.188180][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.369060][ T6006] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.435888][ T30] audit: type=1400 audit(1767455707.341:306): avc: denied { mounton } for pid=6956 comm="syz-executor" path="/root/syzkaller.C6vQK8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 194.439894][ T6006] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.512608][ T30] audit: type=1400 audit(1767455707.399:307): avc: denied { unmount } for pid=6956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 194.615540][ T6006] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.631348][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.639676][ T6006] usb 4-1: Product: syz [ 194.644071][ T6006] usb 4-1: Manufacturer: syz [ 194.648697][ T6006] usb 4-1: SerialNumber: syz [ 194.982130][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 195.321298][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 195.353052][ T24] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 195.411305][ T24] usb 3-1: config 179 has no interface number 0 [ 195.667753][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 195.703728][ T6006] usb 4-1: USB disconnect, device number 13 [ 195.804510][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 195.812639][ C1] lec:lec_tx_timeout: lec0 [ 195.818282][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 196.180753][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.198812][ T24] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 196.229724][ T24] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 196.266318][ T24] usb 3-1: config 179 interface 65 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 196.275047][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 196.293256][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 196.301568][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 196.308257][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 196.332614][ T24] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 197.182725][ T24] usb 3-1: config 179 interface 65 has no altsetting 0 [ 197.189696][ T24] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 197.321190][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.362045][ T7286] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 198.457864][ T5951] usb 3-1: USB disconnect, device number 13 [ 199.350942][ T5930] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 199.433241][ T5951] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 199.524837][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 199.537573][ T5930] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 199.647282][ T5951] usb 6-1: Using ep0 maxpacket: 32 [ 199.654562][ T5951] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 199.672607][ T5930] usb 4-1: config 0 has no interface number 0 [ 199.679767][ T5951] usb 6-1: config 0 has no interface number 0 [ 199.685917][ T5951] usb 6-1: config 0 interface 29 has no altsetting 0 [ 199.696425][ T5930] usb 4-1: config 0 interface 29 has no altsetting 0 [ 199.713308][ T5930] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 199.732122][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.749645][ T5951] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 199.758968][ T5930] usb 4-1: Product: syz [ 199.763246][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.780742][ T5930] usb 4-1: Manufacturer: syz [ 199.785680][ T5930] usb 4-1: SerialNumber: syz [ 199.795973][ T5951] usb 6-1: Product: syz [ 199.800206][ T5951] usb 6-1: Manufacturer: syz [ 199.807706][ T5930] usb 4-1: config 0 descriptor?? [ 199.816727][ T5951] usb 6-1: SerialNumber: syz [ 199.845077][ T5951] usb 6-1: config 0 descriptor?? [ 200.032935][ T5930] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 200.083426][ T5951] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 200.238368][ T5930] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 200.259163][ T5930] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 200.285014][ T5930] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 200.294939][ T7359] sp0: Synchronizing with TNC [ 200.298772][ T5951] peak_usb 6-1:0.29 can1: sending command failure: -8 [ 200.331007][ T5951] peak_usb 6-1:0.29 can1: sending command failure: -8 [ 200.348549][ T5951] peak_usb 6-1:0.29 can1: sending command failure: -8 [ 200.359544][ T5930] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -8 [ 200.380223][ T7370] zonefs (nullb0) ERROR: Not a zoned block device [ 200.471384][ T5951] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -8 [ 200.558660][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.584738][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.633047][ T7343] Bluetooth: MGMT ver 1.23 [ 200.714746][ T5951] usb 4-1: USB disconnect, device number 14 [ 200.721690][ T7347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.810806][ T7347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.846647][ T7376] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 200.943713][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 200.948467][ T7376] kvm: pic: level sensitive irq not supported [ 200.951810][ C1] lec:lec_tx_timeout: lec0 [ 200.951998][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 200.959116][ T7376] kvm: pic: non byte read [ 200.974215][ T7376] kvm: pic: level sensitive irq not supported [ 200.974547][ T7376] kvm: pic: non byte read [ 201.192948][ T5880] usb 6-1: USB disconnect, device number 2 [ 202.299437][ T5951] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 203.550969][ T5951] usb 3-1: Using ep0 maxpacket: 8 [ 203.557982][ T5951] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 203.566915][ T5951] usb 3-1: config 179 has no interface number 0 [ 203.576601][ T5951] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 203.588865][ T5951] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 204.096982][ T5951] usb 3-1: config 179 interface 65 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 204.277791][ T5951] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 204.307035][ T5951] usb 3-1: config 179 interface 65 has no altsetting 0 [ 204.421245][ T5951] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 204.443364][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.736291][ T5951] usb 3-1: can't set config #179, error -71 [ 204.794868][ T5951] usb 3-1: USB disconnect, device number 14 [ 205.101898][ T7434] netlink: 120 bytes leftover after parsing attributes in process `syz.2.321'. [ 206.049310][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 206.053979][ T7410] [U] é [ 206.057382][ C1] lec:lec_tx_timeout: lec0 [ 206.064772][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 207.789194][ T30] audit: type=1400 audit(1767455720.443:308): avc: denied { read } for pid=7437 comm="syz.5.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 209.154174][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.334266][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.510652][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.649135][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.201590][ T48] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 210.442034][ T13] bridge_slave_1: left allmulticast mode [ 210.458315][ T13] bridge_slave_1: left promiscuous mode [ 210.458408][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.468854][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.485940][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.495387][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.502654][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 210.509058][ T13] bridge_slave_0: left allmulticast mode [ 210.509628][ T48] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 210.518141][ T13] bridge_slave_0: left promiscuous mode [ 210.531095][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.531949][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.545810][ T48] usb 6-1: config 0 has no interface number 0 [ 210.552770][ T48] usb 6-1: config 0 interface 29 has no altsetting 0 [ 210.569944][ T48] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 210.585573][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.599290][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.618265][ T48] usb 6-1: Product: syz [ 210.623114][ T48] usb 6-1: Manufacturer: syz [ 210.628572][ T48] usb 6-1: SerialNumber: syz [ 210.640718][ T48] usb 6-1: config 0 descriptor?? [ 210.955533][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 211.141061][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 211.149121][ C1] lec:lec_tx_timeout: lec0 [ 211.161270][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 211.458415][ T7504] netlink: 36 bytes leftover after parsing attributes in process `syz.2.336'. [ 211.692738][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.719238][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.469158][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.500693][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.527929][ T13] bond0 (unregistering): Released all slaves [ 212.696673][ T48] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 212.708198][ T5825] Bluetooth: hci4: command tx timeout [ 212.756412][ T48] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 212.891322][ T48] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 212.904056][ T48] peak_usb 6-1:0.29 can0: sending command failure: -22 [ 213.410034][ T13] tipc: Disabling bearer [ 213.421091][ T13] tipc: Left network mode [ 213.614255][ T48] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -22 [ 213.646908][ T48] usb 6-1: USB disconnect, device number 3 [ 214.794601][ T5825] Bluetooth: hci4: command tx timeout [ 214.936753][ T30] audit: type=1326 audit(1767455727.520:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5518f749 code=0x7ffc0000 [ 214.952403][ T7495] chnl_net:caif_netlink_parms(): no params data found [ 214.975861][ T7548] netlink: 24 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 214.989143][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 215.016523][ T7542] netlink: 36 bytes leftover after parsing attributes in process `syz.2.344'. [ 215.073167][ T30] audit: type=1326 audit(1767455727.550:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1a5518f749 code=0x7ffc0000 [ 215.138251][ T30] audit: type=1326 audit(1767455727.550:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a5518f783 code=0x7ffc0000 [ 215.167553][ T6006] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 215.197528][ T7555] tipc: Enabling of bearer rejected, already enabled [ 215.307586][ T30] audit: type=1326 audit(1767455727.550:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a5518f783 code=0x7ffc0000 [ 215.341530][ T30] audit: type=1326 audit(1767455727.550:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5518f749 code=0x7ffc0000 [ 215.841771][ T6006] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 215.863329][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 215.878668][ T30] audit: type=1326 audit(1767455727.550:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1a5518f749 code=0x7ffc0000 [ 215.903388][ T30] audit: type=1326 audit(1767455727.550:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5518f749 code=0x7ffc0000 [ 215.929641][ T30] audit: type=1326 audit(1767455727.550:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5518f749 code=0x7ffc0000 [ 215.953402][ T6006] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.965839][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 215.978762][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 216.042814][ T6006] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 216.059693][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 216.071164][ T6006] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.132598][ T30] audit: type=1326 audit(1767455727.550:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5518f749 code=0x7ffc0000 [ 216.151768][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 216.161958][ T30] audit: type=1326 audit(1767455727.550:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5518f749 code=0x7ffc0000 [ 216.217057][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 216.225161][ C1] lec:lec_tx_timeout: lec0 [ 216.226436][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 216.240138][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 216.247636][ T6006] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 216.257162][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 216.269650][ T6006] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.281873][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 216.293404][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 216.312185][ T6006] usb 5-1: string descriptor 0 read error: -22 [ 216.321520][ T6006] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 216.331630][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.438568][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.350'. [ 216.514010][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.350'. [ 216.897724][ T5825] Bluetooth: hci4: command tx timeout [ 216.923031][ T6006] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 217.007707][ T13] hsr_slave_0: left promiscuous mode [ 217.038788][ T13] hsr_slave_1: left promiscuous mode [ 217.058662][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.078615][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.108601][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.131140][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.301080][ T7575] No control pipe specified [ 217.338635][ T13] veth1_macvtap: left promiscuous mode [ 217.359144][ T13] veth0_macvtap: left promiscuous mode [ 217.424968][ T13] veth1_vlan: left promiscuous mode [ 217.430357][ T13] veth0_vlan: left promiscuous mode [ 217.514086][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.353'. [ 217.536142][ T7585] netlink: 36 bytes leftover after parsing attributes in process `syz.5.353'. [ 219.150963][ T5827] Bluetooth: hci4: command tx timeout [ 221.287655][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 221.295717][ C1] lec:lec_tx_timeout: lec0 [ 221.300359][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 227.103615][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 227.111642][ C1] lec:lec_tx_timeout: lec0 [ 227.116255][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 232.169561][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 232.177567][ C1] lec:lec_tx_timeout: lec0 [ 232.182538][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 237.201016][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 237.209035][ C1] lec:lec_tx_timeout: lec0 [ 237.213673][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 242.229298][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 242.237348][ C1] lec:lec_tx_timeout: lec0 [ 242.241880][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 247.265332][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 247.273384][ C1] lec:lec_tx_timeout: lec0 [ 247.278028][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 252.289572][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 252.297610][ C1] lec:lec_tx_timeout: lec0 [ 252.302158][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 257.312939][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 257.320998][ C1] lec:lec_tx_timeout: lec0 [ 257.325505][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 262.344980][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 262.353043][ C1] lec:lec_tx_timeout: lec0 [ 262.357843][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 267.376631][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 267.384682][ C1] lec:lec_tx_timeout: lec0 [ 267.389222][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 273.317991][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5930 ms [ 273.326035][ C1] lec:lec_tx_timeout: lec0 [ 273.330521][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 278.348784][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 278.356842][ C1] lec:lec_tx_timeout: lec0 [ 278.361353][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 283.379365][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 283.387422][ C1] lec:lec_tx_timeout: lec0 [ 283.392038][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 289.329823][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5940 ms [ 289.337852][ C1] lec:lec_tx_timeout: lec0 [ 289.342704][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 294.350123][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 294.358135][ C1] lec:lec_tx_timeout: lec0 [ 294.362634][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 299.380398][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 299.388485][ C1] lec:lec_tx_timeout: lec0 [ 299.393011][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 305.330490][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5930 ms [ 305.338509][ C1] lec:lec_tx_timeout: lec0 [ 305.343042][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 310.360618][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 310.368683][ C1] lec:lec_tx_timeout: lec0 [ 310.373441][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 315.390680][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 315.398706][ C1] lec:lec_tx_timeout: lec0 [ 315.403202][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 321.320769][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5920 ms [ 321.329011][ C1] lec:lec_tx_timeout: lec0 [ 321.333609][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 325.030780][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 325.037797][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13/2:b..l [ 325.045984][ C0] rcu: (detected by 0, t=10502 jiffies, g=19245, q=823 ncpus=2) [ 325.053725][ C0] task:kworker/u8:1 state:R running task stack:23960 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 325.068572][ C0] Workqueue: netns cleanup_net [ 325.073370][ C0] Call Trace: [ 325.076649][ C0] [ 325.079601][ C0] ? __schedule+0x10b9/0x6150 [ 325.084303][ C0] __schedule+0x1139/0x6150 [ 325.088821][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 325.095009][ C0] ? __pfx___schedule+0x10/0x10 [ 325.099873][ C0] ? mark_held_locks+0x49/0x80 [ 325.104650][ C0] preempt_schedule_irq+0x51/0x90 [ 325.109683][ C0] irqentry_exit+0x1d8/0x8c0 [ 325.114379][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 325.120384][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 325.125596][ C0] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 22 b9 ee 0e 0f 82 74 02 00 00 8b 35 ba e9 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 39 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 325.145239][ C0] RSP: 0018:ffffc90000126f30 EFLAGS: 00000206 [ 325.151337][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 0000000088cd519a [ 325.159308][ C0] RDX: 0000000000000000 RSI: ffffffff8daa7ea1 RDI: ffffffff8bf2b400 [ 325.167294][ C0] RBP: 0000000000000002 R08: 000000005691354e R09: 00000000e5691354 [ 325.175284][ C0] R10: 0000000000000002 R11: ffff88801d6f0b30 R12: 0000000000000000 [ 325.183277][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.191298][ C0] ? unwind_next_frame+0x3f4/0x20b0 [ 325.196528][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 325.202716][ C0] unwind_next_frame+0xd1/0x20b0 [ 325.207705][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 325.212871][ C0] ? kasan_save_track+0x14/0x30 [ 325.217776][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 325.223957][ C0] arch_stack_walk+0x94/0x100 [ 325.228671][ C0] ? kasan_save_track+0x14/0x30 [ 325.233625][ C0] stack_trace_save+0x8e/0xc0 [ 325.238353][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 325.243783][ C0] ? __lock_acquire+0x436/0x2890 [ 325.248757][ C0] ? fib6_clean_node+0x3ac/0x5d0 [ 325.253713][ C0] kasan_save_stack+0x33/0x60 [ 325.258418][ C0] ? kasan_save_stack+0x33/0x60 [ 325.263284][ C0] ? kasan_save_track+0x14/0x30 [ 325.268199][ C0] kasan_save_track+0x14/0x30 [ 325.272887][ C0] __kasan_kmalloc+0xaa/0xb0 [ 325.277488][ C0] addr_event.constprop.0+0xcc/0x560 [ 325.282886][ C0] inet6addr_event+0x116/0x180 [ 325.287658][ C0] ? __pfx_inet6addr_event+0x10/0x10 [ 325.292965][ C0] notifier_call_chain+0xbc/0x3e0 [ 325.298009][ C0] ? __pfx_inet6addr_event+0x10/0x10 [ 325.303325][ C0] atomic_notifier_call_chain+0x71/0x1c0 [ 325.308985][ C0] addrconf_ifdown.isra.0+0xea7/0x1b90 [ 325.314470][ C0] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 325.320393][ C0] addrconf_notify+0x220/0x19f0 [ 325.325268][ C0] ? ip6mr_device_event+0x1bc/0x230 [ 325.330477][ C0] notifier_call_chain+0xbc/0x3e0 [ 325.335554][ C0] ? __pfx_addrconf_notify+0x10/0x10 [ 325.340910][ C0] call_netdevice_notifiers_info+0xbe/0x110 [ 325.346842][ C0] netif_close_many+0x319/0x630 [ 325.351722][ C0] ? __pfx_netif_close_many+0x10/0x10 [ 325.357103][ C0] ? netif_close_many_and_unlock+0x109/0x270 [ 325.363103][ C0] unregister_netdevice_many_notify+0x56e/0x2590 [ 325.369465][ C0] ? batadv_tt_local_event+0x455/0x7f0 [ 325.375042][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 325.381816][ C0] ? unregister_netdevice_queue+0x22e/0x3c0 [ 325.387733][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 325.394088][ C0] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 325.399933][ C0] default_device_exit_batch+0x995/0xc80 [ 325.405604][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 325.411770][ C0] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 325.417235][ C0] ? __pfx___might_resched+0x10/0x10 [ 325.422541][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 325.428719][ C0] ops_undo_list+0x363/0xab0 [ 325.433325][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 325.438467][ C0] cleanup_net+0x41b/0x830 [ 325.442906][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 325.447864][ C0] process_one_work+0x9ba/0x1b20 [ 325.452828][ C0] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 325.460392][ C0] ? __pfx_process_one_work+0x10/0x10 [ 325.465794][ C0] ? assign_work+0x1a0/0x250 [ 325.470404][ C0] worker_thread+0x6c8/0xf10 [ 325.475029][ C0] ? __pfx_worker_thread+0x10/0x10 [ 325.480150][ C0] kthread+0x3c5/0x780 [ 325.484232][ C0] ? __pfx_kthread+0x10/0x10 [ 325.488840][ C0] ? rcu_is_watching+0x12/0xc0 [ 325.493620][ C0] ? __pfx_kthread+0x10/0x10 [ 325.498225][ C0] ret_from_fork+0x983/0xb10 [ 325.502817][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 325.507930][ C0] ? __switch_to+0x7af/0x10d0 [ 325.512617][ C0] ? __pfx_kthread+0x10/0x10 [ 325.517222][ C0] ret_from_fork_asm+0x1a/0x30 [ 325.522010][ C0] [ 325.525036][ C0] rcu: rcu_preempt kthread starved for 10358 jiffies! g19245 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 325.536240][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 325.546234][ C0] rcu: RCU grace-period kthread stack dump: [ 325.552126][ C0] task:rcu_preempt state:R running task stack:28440 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 325.565647][ C0] Call Trace: [ 325.568928][ C0] [ 325.571867][ C0] ? __schedule+0x10b9/0x6150 [ 325.576654][ C0] __schedule+0x1139/0x6150 [ 325.581188][ C0] ? __pfx___schedule+0x10/0x10 [ 325.586149][ C0] ? find_held_lock+0x2b/0x80 [ 325.590851][ C0] ? schedule+0x2d7/0x3a0 [ 325.595195][ C0] schedule+0xe7/0x3a0 [ 325.599278][ C0] schedule_timeout+0x123/0x290 [ 325.604134][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 325.609516][ C0] ? __pfx_process_timeout+0x10/0x10 [ 325.614903][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 325.620733][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 325.626254][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 325.631036][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 325.636332][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 325.641542][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 325.646506][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 325.651373][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 325.657205][ C0] rcu_gp_kthread+0x26d/0x380 [ 325.661923][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 325.667140][ C0] ? rcu_is_watching+0x12/0xc0 [ 325.671924][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 325.677225][ C0] ? __kthread_parkme+0x19e/0x250 [ 325.682298][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 325.687687][ C0] kthread+0x3c5/0x780 [ 325.691802][ C0] ? __pfx_kthread+0x10/0x10 [ 325.696519][ C0] ? rcu_is_watching+0x12/0xc0 [ 325.701303][ C0] ? __pfx_kthread+0x10/0x10 [ 325.705905][ C0] ret_from_fork+0x983/0xb10 [ 325.710514][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 325.715630][ C0] ? __switch_to+0x7af/0x10d0 [ 325.720315][ C0] ? __pfx_kthread+0x10/0x10 [ 325.725205][ C0] ret_from_fork_asm+0x1a/0x30 [ 325.730007][ C0] [ 325.733021][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 325.739370][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 325.748587][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 325.758658][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 325.764316][ C0] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 39 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 325.784024][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 325.790112][ C0] RAX: 00000000008f958d RBX: 0000000000000000 RCX: ffffffff8b7826d9 [ 325.798098][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 325.806088][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 325.814087][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 325.822087][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 325.830168][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 325.839112][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.845726][ C0] CR2: 000055e26b1aebe0 CR3: 00000000202f5000 CR4: 00000000003526f0 [ 325.853710][ C0] Call Trace: [ 325.856983][ C0] [ 325.859905][ C0] default_idle+0x13/0x20 [ 325.864271][ C0] default_idle_call+0x6c/0xb0 [ 325.869046][ C0] do_idle+0x38d/0x510 [ 325.873139][ C0] ? __pfx_do_idle+0x10/0x10 [ 325.877759][ C0] cpu_startup_entry+0x4f/0x60 [ 325.882531][ C0] rest_init+0x16b/0x2b0 [ 325.886785][ C0] ? acpi_subsystem_init+0x133/0x180 [ 325.892077][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 325.897632][ C0] start_kernel+0x3ef/0x4d0 [ 325.902161][ C0] x86_64_start_reservations+0x18/0x30 [ 325.907633][ C0] x86_64_start_kernel+0x130/0x190 [ 325.912765][ C0] common_startup_64+0x13e/0x148 [ 325.917738][ C0] [ 326.340780][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 326.348838][ C1] lec:lec_tx_timeout: lec0 [ 326.353365][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 331.370782][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 331.378812][ C1] lec:lec_tx_timeout: lec0 [ 331.383351][ C1] lec:lec_start_xmit: lec0:No lecd attached