last executing test programs: 12m49.285546338s ago: executing program 1 (id=1752): socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019380)=0x7) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000001c0)={0xb, {0x1, 0xa, 0x6, 0x5, 0x5, 0x7}}) 12m48.377948589s ago: executing program 1 (id=1753): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000046680d65c0", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r0}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x1a30c1, 0x4) r1 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000500)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r3, &(0x7f00000005c0)=""/102392, 0x18ff8) inotify_init1(0x80000) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000195c0)={0x28, 0x0, 0x2711, @local}, 0xfffffffffffffe6d) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000019600)={0x81, 0xffffffff, 0x20000}, 0x10) write(r1, &(0x7f0000019640)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000019680), 0x0, 0x10002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000196c0)='oom_adj\x00') munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r5 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r5, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000140)="c21cfb", 0x3}, {&(0x7f0000000180), 0x320}, {&(0x7f00000001c0), 0x4000}], 0xe) writev(r4, 0x0, 0x0) 12m47.524613631s ago: executing program 1 (id=1754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004841}, 0x20044000) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) 12m41.091385702s ago: executing program 2 (id=1760): syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x15020, 0x3, 0x1}, 0x18, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) landlock_restrict_self(r4, 0xb) io_uring_enter(0xffffffffffffffff, 0x1fff, 0x2a7e, 0x8, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x3f00) 12m37.695814902s ago: executing program 2 (id=1762): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)={0x80000001, 0x37f}) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, 0x0) fsopen(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x143102) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x59) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendto$inet6(r2, &(0x7f00000003c0)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000400)=0x2100e6d4, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 12m37.685248515s ago: executing program 1 (id=1763): socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 12m35.640854603s ago: executing program 3 (id=1764): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r1, &(0x7f0000001640), 0x0) 12m34.384722095s ago: executing program 4 (id=1767): syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x5, &(0x7f0000000240)) inotify_init() syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2020000}, 0x20000000) setresuid(0xee01, 0x0, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) 12m33.526355833s ago: executing program 4 (id=1768): open(&(0x7f00000000c0)='.\x00', 0x5ca00, 0x70) socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 12m31.417179394s ago: executing program 2 (id=1769): socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r1, 0x2, 0x7fff) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000019400)={0x6, 0xb, &(0x7f00000194c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000019540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019580)={r4, 0x0, 0xe, 0x0, &(0x7f0000019600)="030d099b688bbf0f5a5400000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 12m30.714910005s ago: executing program 2 (id=1770): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x807, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000340)=0x2000006, 0x4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 12m30.65985068s ago: executing program 4 (id=1771): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a1a20ab74e0ff0ff4072985405669abda0a47119f8f861dac842296db06fa2b52678140f68074090d790745fe9ede23955570023e52c547c9d90c20917ff0afbd2266de056e1b5a7d6484611318fe09fc7a335047ad58cc7f9"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000046680d65c0", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r0}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x1a30c1, 0x4) r1 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000500)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r3, &(0x7f00000005c0)=""/102392, 0x18ff8) inotify_init1(0x80000) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000195c0)={0x28, 0x0, 0x2711, @local}, 0xfffffffffffffe6d) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000019600)={0x81, 0xffffffff, 0x20000}, 0x10) write(r1, &(0x7f0000019640)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000019680), 0x0, 0x10002, 0x0) r4 = syz_open_procfs(0x0, 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r5 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r5, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000140)="c21cfb", 0x3}, {&(0x7f0000000180), 0x320}, {&(0x7f00000001c0), 0x4000}], 0xe) writev(r4, 0x0, 0x0) 12m29.838590267s ago: executing program 4 (id=1772): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xfffe, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x2, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8) r4 = add_key$keyring(&(0x7f0000019340), &(0x7f0000019380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f00000193c0), &(0x7f0000019400)={'fscrypt:', @desc3}, 0x0, 0x0, r4) add_key$keyring(0x0, &(0x7f0000019480)={'syz', 0x0}, 0x0, 0x0, r4) lstat(0x0, &(0x7f00000194c0)) sched_setaffinity(r2, 0x8, &(0x7f0000019540)=0x40003) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000019580)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f00000195c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000019600), 0xffffffffffffff94, 0x0, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') 12m29.781326226s ago: executing program 1 (id=1773): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xfffe, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x2, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8) r4 = add_key$keyring(&(0x7f0000019340), &(0x7f0000019380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f00000193c0), &(0x7f0000019400)={'fscrypt:', @desc3}, 0x0, 0x0, r4) add_key$keyring(0x0, &(0x7f0000019480)={'syz', 0x0}, 0x0, 0x0, r4) lstat(0x0, &(0x7f00000194c0)) sched_setaffinity(r2, 0x8, &(0x7f0000019540)=0x40003) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000019580)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f00000195c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000019600), 0xffffffffffffff94, 0x0, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') 12m28.558367008s ago: executing program 3 (id=1774): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000023c0)=@delchain={0x24, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 12m28.341684824s ago: executing program 3 (id=1775): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010003704ffffffff0000000000000000", @ANYBLOB="02800000a30002002c0012800900010079706970000000001c00028008001400040000a317000100a1458892b1767ba8960b457bfb7541a1492542625251ee9da676f994b9f39fc9959578b60244003ed961893aac2ec162cedaff"], 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004"], 0x50) rename(0x0, &(0x7f00000000c0)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="080002691ceef6a0b0d82c0004"], 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x10000800040068], 0xd000, 0x80}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0xeeee8000, 0xeeee0000, 0xe, 0x9, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12m26.8265279s ago: executing program 3 (id=1776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x23, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 12m26.402163613s ago: executing program 2 (id=1777): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001b80)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f000001abc0), 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f000001ac00)='./dev\x00', &(0x7f000001ac40)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000001ac80)='./dev/kmsg\x00', 0x81, 0x0) 12m25.118158358s ago: executing program 4 (id=1778): socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019380)=0x7) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000001c0)={0xb, {0x1, 0xa, 0x6, 0x5, 0x5, 0x7}}) 12m25.032683153s ago: executing program 3 (id=1779): syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, &(0x7f0000000240)) inotify_init() syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2020000}, 0x20000000) setresuid(0xee01, 0x0, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) 12m24.052756973s ago: executing program 2 (id=1780): socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r1, 0x2, 0x7fff) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000019400)={0x6, 0xb, &(0x7f00000194c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000019540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019580)={r4, 0x0, 0xe, 0x0, &(0x7f0000019600)="030d099b688bbf0f5a5400000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 12m22.91707308s ago: executing program 3 (id=1781): open(&(0x7f00000000c0)='.\x00', 0x5ca00, 0x70) socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 12m19.987368018s ago: executing program 1 (id=1783): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a1a20ab74e0ff0ff4072985405669abda0a47119f8f861dac842296db06fa2b52678140f68074090d790745fe9ede23955570023e52c547c9d90c20917ff0afbd2266de056e1b5a7d6484611318fe09fc7a335047ad58cc7f9"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000046680d65c0", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r0}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x1a30c1, 0x4) r1 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000500)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r3, &(0x7f00000005c0)=""/102392, 0x18ff8) inotify_init1(0x80000) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000195c0)={0x28, 0x0, 0x2711, @local}, 0xfffffffffffffe6d) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000019600)={0x81, 0xffffffff, 0x20000}, 0x10) write(r1, &(0x7f0000019640)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000019680), 0x0, 0x10002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000196c0)='oom_adj\x00') munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r5 = syz_open_dev$vcsa(0x0, 0x1, 0x40402) writev(r5, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000140)="c21cfb", 0x3}, {&(0x7f0000000180), 0x320}, {&(0x7f00000001c0), 0x4000}], 0xe) writev(r4, 0x0, 0x0) 12m11.423358543s ago: executing program 4 (id=1786): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001b80)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f000001abc0), 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) mount(0x0, &(0x7f000001ac00)='./dev\x00', &(0x7f000001ac40)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000001ac80)='./dev/kmsg\x00', 0x81, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 12m4.566204119s ago: executing program 32 (id=1780): socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r1, 0x2, 0x7fff) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000019400)={0x6, 0xb, &(0x7f00000194c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000019540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019580)={r4, 0x0, 0xe, 0x0, &(0x7f0000019600)="030d099b688bbf0f5a5400000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 12m4.346008885s ago: executing program 33 (id=1783): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a1a20ab74e0ff0ff4072985405669abda0a47119f8f861dac842296db06fa2b52678140f68074090d790745fe9ede23955570023e52c547c9d90c20917ff0afbd2266de056e1b5a7d6484611318fe09fc7a335047ad58cc7f9"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000046680d65c0", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r0}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x1a30c1, 0x4) r1 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000500)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r3, &(0x7f00000005c0)=""/102392, 0x18ff8) inotify_init1(0x80000) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000195c0)={0x28, 0x0, 0x2711, @local}, 0xfffffffffffffe6d) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000019600)={0x81, 0xffffffff, 0x20000}, 0x10) write(r1, &(0x7f0000019640)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000019680), 0x0, 0x10002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000196c0)='oom_adj\x00') munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r5 = syz_open_dev$vcsa(0x0, 0x1, 0x40402) writev(r5, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000140)="c21cfb", 0x3}, {&(0x7f0000000180), 0x320}, {&(0x7f00000001c0), 0x4000}], 0xe) writev(r4, 0x0, 0x0) 12m2.077276852s ago: executing program 34 (id=1781): open(&(0x7f00000000c0)='.\x00', 0x5ca00, 0x70) socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11m54.51584107s ago: executing program 35 (id=1786): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001b80)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f000001abc0), 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) mount(0x0, &(0x7f000001ac00)='./dev\x00', &(0x7f000001ac40)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000001ac80)='./dev/kmsg\x00', 0x81, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 11.265615681s ago: executing program 5 (id=3162): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2000010, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002340)={0x50, 0x0, r1, {0x7, 0x1f, 0xb, 0x30449040, 0x40, 0x68, 0x6, 0x1000009, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000023c0)="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", 0x2000, &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x20, 0x0, 0x4, {0x0, 0x17}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000004640)=0x0) io_submit(r3, 0x1, &(0x7f0000004680)=[&(0x7f00000046c0)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f0000004700)='1', 0x1, 0xf}]) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000004740)=ANY=[@ANYBLOB="2d0000000400000000000000000000000100000000000000000000800000230005"], 0x2d) dup3(r2, r0, 0x80000) 10.621751068s ago: executing program 5 (id=3164): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000a80)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000b00)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 10.470134177s ago: executing program 5 (id=3165): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xfffe, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r5, &(0x7f0000000340)=""/102392, 0x18ff8) add_key$fscrypt_v1(&(0x7f00000193c0), &(0x7f0000019400)={'fscrypt:', @desc3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000019440), 0x0, 0x0, 0x0, 0x0) lstat(0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000019580)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f00000195c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000019600), 0xffffffffffffff94, 0x0, 0x0, 0x0) 9.637186717s ago: executing program 0 (id=3166): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xfffe, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r5, &(0x7f0000000340)=""/102392, 0x18ff8) add_key$fscrypt_v1(&(0x7f00000193c0), &(0x7f0000019400)={'fscrypt:', @desc3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000019440), 0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000194c0)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000019580)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f00000195c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000019600), 0xffffffffffffff94, 0x0, 0x0, 0x0) 9.572442748s ago: executing program 6 (id=3167): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x8, 0x0, 0x1000f4) 8.506254986s ago: executing program 0 (id=3169): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000380)=""/102392, 0x18ff8) dup3(r2, r2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000019400)={0x6, 0x3, &(0x7f00000194c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019580)={r3, 0x0, 0xe, 0x0, &(0x7f0000019600)="030d099b688bbf0f5a5400000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.504769259s ago: executing program 5 (id=3170): open(&(0x7f00000000c0)='.\x00', 0x5ca00, 0x70) socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.360464814s ago: executing program 6 (id=3172): r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff) mount(&(0x7f0000000300), &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0xfffffffffffff802, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000280)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000300)=0x1) ppoll(&(0x7f0000000600)=[{r1, 0x1004}], 0x1, 0x0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000040), 0x402, &(0x7f0000000080)=ANY=[@ANYRES32=r0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x800004, 0xffffffffdf310f4f, 0x9a64, 0x8000, 0x200, 0xffeffffa, 0x0, 0x0, 0x4, 0x103}}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) write(r4, &(0x7f00000005c0)='naa.', 0x4) 8.002910239s ago: executing program 6 (id=3173): openat$kvm(0xffffffffffffff9c, 0x0, 0xa2200, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)={0xa4, 0x0, 0xa01, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1, 0x0, 0x6, 0x0, {0x7, 0x5, 0x0, 0x5, 0x0, 0x0, 0x1, 0x2}, 0x1, 0x200, 0x6}}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xa}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x17}]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x5ae, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0xf8b0, 0x8480, 0x8f, 0x20a, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x67, 0x0, 0xfd, 0x4, 0x0, @local, @broadcast, {[@rr={0x7, 0x17, 0xf8, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0x9f, 0x1, 0xb, [{@loopback, 0xd5}, {@loopback, 0x8001}, {@empty}, {@multicast1, 0x100}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}]}]}}}}}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) sendmsg$nl_route_sched(r0, 0x0, 0x40) socket$nl_audit(0x10, 0x3, 0x9) ppoll(0x0, 0x0, &(0x7f0000000700)={0x0, 0x3938700}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000002"], &(0x7f0000000840)='syzkaller\x00', 0x8}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'veth0_to_batadv\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f0000000500)="eab66c62f0bfb23005ccd6af60decfbe6c2c1b53618a81a6db4e46fdec0843cf6ff4710ead135b09b1ad67670eb89771ec25671b12390dd4a8c06d275aa8f5c5275f3d9796d99fe9021711fd09b3da09a334cfdeedf916436660f1040b737210f5376b2e069045d299acedc9edb1aa40094a476f4dbc5de096582669a4d3eff4da87fc520f974eab27ffbf3bc0cbb864f5f5661d0642b29228bf3f66a8675bc7fd3451fbff0f0610bb8308a8cdc86cc06a70e23509749698dcb75ecbce4b836ef43b05e18bab0116f3ad9d819bc4bbc3d408268bf7c5f1257371", 0xda) sendto$packet(r6, &(0x7f0000000980)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f00000009c0)={0x11, 0x300, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) io_uring_setup(0x80003077, &(0x7f0000000080)={0x0, 0x0, 0x200, 0xffffffff}) mremap(&(0x7f00002f9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000162000/0x2000)=nil) 6.777794379s ago: executing program 0 (id=3176): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={&(0x7f0000001600)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (fail_nth: 4) 6.777455045s ago: executing program 7 (id=3177): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x1000) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r4, &(0x7f0000000380)='7', 0x1) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000400)={0x0, 0x81, [0x5a4, 0xded, 0x1, 0x8000, 0xa8f, 0xa57]}) semop(0x0, &(0x7f0000000440)=[{0x0, 0xffff, 0x1000}], 0x1f4) 6.562430458s ago: executing program 6 (id=3179): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000200), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000240), 0x43) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[], 0x101d0) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x1458}, 0x48800) syz_emit_vhci(&(0x7f0000000340)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb5}, "6cabc641fac0533f12455b54e5ed6bb378a7e183afa531d29631376aa9b1a18be0c87e5c6cefcf4d36d8d8504e0a927601686afa2ac9e492a8fa10b34bfc4066daadd5170d1d44746a4321b5561001029f533486360bd815d3a6d1c9e8c4651853c7cc482f9607b2abf2ae908187885bc7ffdcc11f0d4c7a24422650b3de8ccfdc449e70e52b211849372f67d8625e66f55b6bbe28c6e6b44d8b0d52ac97b767ab1c8157af52d5741ee5f6f08d7417f652209e6a4c"}, 0xb9) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0) close(0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r4, 0x0, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "390b8a867517b6a36b5029c7a8"}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x2, 0x1, 0x0, {0x4, 0x8, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2}, 0x800, 0xa, 0x7e}}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008080}, 0x20008000) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000400)) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000000314010000000000000000002500020073797a5f6465766963655f6e616d655f33325f63686172735f31323334353637000000000800410073697700070033006c6f0000", @ANYRESOCT=r0], 0x48}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="9e1e9bfe443857b184d1b7448f05fb987508780269998882780250569bc7a9f5442f", 0x22, 0x8800, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x7fff}, 0x1c) 5.040456047s ago: executing program 8 (id=3180): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) r3 = io_uring_setup(0x1, &(0x7f0000000140)={0x0, 0x2000, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r3, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000300)={&(0x7f0000000340), 0x1000}, &(0x7f0000000380)={&(0x7f00000003c0), 0x1000, 0x1}}, 0x1) lseek(r2, 0x80000000000002, 0x0) sendmmsg(r1, &(0x7f0000000100), 0x4000000000001f2, 0xfc) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) 5.039335674s ago: executing program 5 (id=3181): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000013c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001400), 0x2, 0x141102) writev(r0, &(0x7f0000001440)=[{&(0x7f0000001480)="94", 0xf000}, {0x0}], 0x2) gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="c8ed0ec2aff22b790000000000000000", 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44800}, 0x4048000) 3.841885713s ago: executing program 8 (id=3182): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x8, 0x0, 0x1000f4) 3.765301167s ago: executing program 0 (id=3183): r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff) mount(&(0x7f0000000300), &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0xfffffffffffff802, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000280)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000300)=0x1) ppoll(&(0x7f0000000600)=[{r1, 0x1004}], 0x1, 0x0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000040), 0x402, &(0x7f0000000080)=ANY=[@ANYRES32=r0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x800004, 0xffffffffdf310f4f, 0x9a64, 0x8000, 0x200, 0xffeffffa, 0x0, 0x0, 0x4, 0x103}}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) write(r4, &(0x7f00000005c0)='naa.', 0x4) 3.593479339s ago: executing program 8 (id=3184): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x17b) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/damon_reclaim/parameters/quota_mem_pressure_us\x00', 0x2, 0x0) (fail_nth: 4) 3.469842205s ago: executing program 8 (id=3185): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2000010, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002340)={0x50, 0x0, r1, {0x7, 0x1f, 0xb, 0x30449040, 0x40, 0x68, 0x6, 0x1000009, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000023c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x20, 0x0, 0x4, {0x0, 0x17}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000004640)=0x0) io_submit(r3, 0x1, &(0x7f0000004680)=[&(0x7f00000046c0)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f0000004700)='1', 0x1, 0xf}]) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000004740)=ANY=[@ANYBLOB="2d0000000400000000000000000000000100000000000000000000800000230005"], 0x2d) dup3(r2, r0, 0x80000) 3.098320423s ago: executing program 6 (id=3186): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000380)=""/102392, 0x18ff8) dup3(r2, r2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000019400)={0x6, 0x3, &(0x7f00000194c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019580)={r3, 0x0, 0xe, 0x0, &(0x7f0000019600)="030d099b688bbf0f5a5400000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.959012563s ago: executing program 7 (id=3187): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x1000f) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x4001af84, &(0x7f0000000400)) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) close(r5) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000880)}, 0x10000}, {{&(0x7f0000000900)=@hci, 0x80, &(0x7f0000001a40)=[{0xffffffffffffffff}, {&(0x7f0000000240)=""/93, 0x5d}, {0x0}], 0x3, &(0x7f0000000300)=""/227, 0xe3}, 0xb6}], 0x2, 0x42, &(0x7f0000001c40)) syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) 2.756234013s ago: executing program 8 (id=3188): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, 0x0, &(0x7f0000000640)) (fail_nth: 1) 2.669646731s ago: executing program 0 (id=3189): openat$kvm(0xffffffffffffff9c, 0x0, 0xa2200, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)={0xa4, 0x0, 0xa01, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1, 0x0, 0x6, 0x0, {0x7, 0x5, 0x0, 0x5, 0x0, 0x0, 0x1, 0x2}, 0x1, 0x200, 0x6}}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xa}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x17}]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x5ae, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0xf8b0, 0x8480, 0x8f, 0x20a, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x67, 0x0, 0xfd, 0x4, 0x0, @local, @broadcast, {[@rr={0x7, 0x17, 0xf8, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0x9f, 0x1, 0xb, [{@loopback, 0xd5}, {@loopback, 0x8001}, {@empty}, {@multicast1, 0x100}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}]}]}}}}}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) sendmsg$nl_route_sched(r0, 0x0, 0x40) socket$nl_audit(0x10, 0x3, 0x9) ppoll(0x0, 0x0, &(0x7f0000000700)={0x0, 0x3938700}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000002"], &(0x7f0000000840)='syzkaller\x00', 0x8}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'veth0_to_batadv\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f0000000500)="eab66c62f0bfb23005ccd6af60decfbe6c2c1b53618a81a6db4e46fdec0843cf6ff4710ead135b09b1ad67670eb89771ec25671b12390dd4a8c06d275aa8f5c5275f3d9796d99fe9021711fd09b3da09a334cfdeedf916436660f1040b737210f5376b2e069045d299acedc9edb1aa40094a476f4dbc5de096582669a4d3eff4da87fc520f974eab27ffbf3bc0cbb864f5f5661d0642b29228bf3f66a8675bc7fd3451fbff0f0610bb8308a8cdc86cc06a70e23509749698dcb75ecbce4b836ef43b05e18bab0116f3ad9d819bc4bbc3d408268bf7c5f1257371", 0xda) sendto$packet(r6, &(0x7f0000000980)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f00000009c0)={0x11, 0x300, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) io_uring_setup(0x80003077, &(0x7f0000000080)={0x0, 0x0, 0x200, 0xffffffff}) mremap(&(0x7f00002f9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000162000/0x2000)=nil) 1.630180698s ago: executing program 6 (id=3190): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x84, &(0x7f0000000200)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000b14010026bd7000fcdbdf2508003f000400000008003f00030000000800010000000000080003000300"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1000001, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0]) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000680), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000006c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000170000005400068014000300303132333435363738393031323334353c00040067636d2861657329000000000000000000000000000000000000000000000000140000"], 0x68}}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x45) fallocate(r6, 0x0, 0x837e9, 0x2f92) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1}, 0x0) tee(r6, r7, 0x81, 0x5) statfs(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)=""/129) 1.592209191s ago: executing program 5 (id=3191): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x1dcd6500}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000380)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(r1, 0x1, &(0x7f0000000280)={0x100000000}, 0x0) 1.324680821s ago: executing program 7 (id=3192): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000013c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001400), 0x2, 0x141102) writev(r0, &(0x7f0000001440)=[{&(0x7f0000001480)="94", 0xf000}, {0x0}], 0x2) gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="c8ed0ec2aff22b790000000000000000", 0x10) sendmsg$NFT_BATCH(r2, 0x0, 0x4048000) 1.322773305s ago: executing program 8 (id=3193): syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bdfd0bd7000fefbdf250100090000fbb03643b42c9ffe8f258e63a32493c2e81a56d3ecd5a347ae209201964efd87dedd99105462e6ed2cb0401ea5e5"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000640), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000680)={&(0x7f00000006c0)=[{0x0, 0x2000, 0x0, 0x0}], 0x1}) syz_usb_ep_read(0xffffffffffffffff, 0xd, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xd, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='filter'], &(0x7f0000000040)=0x28) openat$snapshot(0xffffff9c, &(0x7f00000000c0), 0x185301, 0x0) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000280)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0xa7c, r4}, 0x38) socket$inet(0x2, 0x0, 0xfffffffb) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in=@remote, @in6=@initdev}}, {{@in6=@initdev}}}, &(0x7f00000001c0)=0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='0 4 0 2', 0x7) read$FUSE(r5, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000140)) mount(&(0x7f0000000480)=@filename='mtd0\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='jffs2\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/fillfile\x00', 0x42, 0x9f) write(r6, &(0x7f0000000580)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f", 0x20) 217.983158ms ago: executing program 7 (id=3194): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x8, 0x0, 0x1000f4) 117.903415ms ago: executing program 7 (id=3195): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000019700), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000019740)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000019780)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000019800)={0x28, 0x5, r1, 0x0, &(0x7f00002ce000/0x1000)=nil, 0x1000, 0x1020800}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000019840)={0x8, r2}) 114.293952ms ago: executing program 0 (id=3196): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010003704ffffffff00", @ANYBLOB="02800000a30002002c0012800900010079706970000000001c00028008001400040000a317000100a1458892b1767ba8960b457bfb7541a1492542625251ee9da676"], 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004"], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x60, 0x24, 0x5a63096154571fb7, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xfff1}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x34, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x4800, 0x5dfbad83, 0x0, 0x8, 0x15, 0x9, 0x7}}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x0, 0x1, 0x13, 0x5}}, @TCA_RED_MAX_P={0x8}]}}]}, 0x60}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x10000800040068], 0xd000, 0x80}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0xeeee8000, 0xeeee0000, 0xe, 0x9, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 7 (id=3197): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)={0x80000001, 0x37f}) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x143102) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x59) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000500)=@gcm_256={{0x303}, "e1091d9abca8a10c", "60b8d9b429db61cce77ede61f8abbb9052ba09245ed69f0d41de5b35fdafd4fa", "b328b2de", "14c1c641eb15a067"}, 0x38) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendto$inet6(r2, &(0x7f00000003c0)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000400)=0x2100e6d4, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) kernel console output (not intermixed with test programs): 0 [ 1599.206595][T17594] bond0: option downdelay: invalid value (18446744071562067968) [ 1599.206626][T17594] bond0: option downdelay: allowed values 0 - 2147483647 [ 1599.248075][T17594] bond0 (unregistering): Released all slaves [ 1599.449424][ T9726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1599.450932][ T9726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1599.451900][ T9726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1599.480822][ T9726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1599.481849][ T9726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1599.541686][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 1599.541702][ T31] audit: type=1400 audit(1792107890.033:577): avc: denied { mounton } for pid=17621 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1599.737728][ T31] audit: type=1400 audit(1792107890.233:578): avc: denied { sys_module } for pid=17621 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1600.644805][ T254] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.903626][T17621] rxe_eth0 speed is unknown, defaulting to 1000 [ 1601.003220][ T254] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.637931][ T52] Bluetooth: hci2: command tx timeout [ 1601.676814][T17649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2885'. [ 1601.676831][T17649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2885'. [ 1601.716791][T17654] net_ratelimit: 147 callbacks suppressed [ 1601.716812][T17654] ip_tables: iptables: counters copy to user failed while replacing table [ 1601.724272][ T31] audit: type=1400 audit(1792107892.223:579): avc: denied { associate } for pid=17651 comm="syz.7.2886" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1601.817333][ T254] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.628497][T17658] vivid-000: kernel_thread() failed [ 1603.189424][ T9784] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1603.364030][ T9784] usb 9-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 1603.365036][ T9784] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1603.366325][ T9784] usb 9-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 1603.366348][ T9784] usb 9-1: Product: syz [ 1603.366360][ T9784] usb 9-1: SerialNumber: syz [ 1603.368586][ T9784] usb 9-1: config 0 descriptor?? [ 1603.451182][ T254] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.597591][ T31] audit: type=1400 audit(1792107894.093:580): avc: denied { ioctl } for pid=17666 comm="syz.8.2888" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=64195 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1603.660315][T17667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1603.660637][T17667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1603.688664][ T5601] usb 9-1: USB disconnect, device number 6 [ 1603.713441][ T52] Bluetooth: hci2: command tx timeout [ 1604.516600][ T31] audit: type=1400 audit(1792107895.013:581): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1604.572314][ T31] audit: type=1400 audit(1792107895.063:582): avc: denied { mount } for pid=17685 comm="syz.6.2895" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1604.704090][ T31] audit: type=1400 audit(1792107895.203:583): avc: denied { search } for pid=5263 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1604.704131][ T31] audit: type=1400 audit(1792107895.203:584): avc: denied { search } for pid=5263 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1604.704163][ T31] audit: type=1400 audit(1792107895.203:585): avc: denied { search } for pid=5263 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1604.704197][ T31] audit: type=1400 audit(1792107895.203:586): avc: denied { read } for pid=5263 comm="dhcpcd" name="n47" dev="tmpfs" ino=4691 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1604.704228][ T31] audit: type=1400 audit(1792107895.203:587): avc: denied { open } for pid=5263 comm="dhcpcd" path="/run/udev/data/n47" dev="tmpfs" ino=4691 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1604.704260][ T31] audit: type=1400 audit(1792107895.203:588): avc: denied { getattr } for pid=5263 comm="dhcpcd" path="/run/udev/data/n47" dev="tmpfs" ino=4691 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1604.806997][ T254] bridge_slave_1: left allmulticast mode [ 1604.807020][ T254] bridge_slave_1: left promiscuous mode [ 1604.807173][ T254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.857473][ T254] bridge_slave_0: left allmulticast mode [ 1604.857494][ T254] bridge_slave_0: left promiscuous mode [ 1604.857646][ T254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.358762][ T254] bond_slave_0: left promiscuous mode [ 1605.358846][ T254] bond_slave_1: left promiscuous mode [ 1605.687744][T17697] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 1605.747214][ T31] audit: type=1400 audit(1792107896.203:589): avc: denied { ioctl } for pid=17685 comm="syz.6.2895" path="socket:[64228]" dev="sockfs" ino=64228 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1605.792198][ T52] Bluetooth: hci2: command tx timeout [ 1606.661942][ T31] audit: type=1400 audit(1792107897.153:590): avc: denied { read } for pid=17700 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1606.663424][ T31] audit: type=1400 audit(1792107897.153:591): avc: denied { read open } for pid=17700 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1607.020860][ T254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1607.022086][ T254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1607.046504][ T254] bond0 (unregistering): Released all slaves [ 1607.051522][T17691] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2895'. [ 1607.074205][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.074263][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.182229][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1607.304793][T12997] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1607.337170][ T10] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1607.338052][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1607.338079][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1607.338940][ T10] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1607.338961][ T10] usb 6-1: Manufacturer: syz [ 1607.352099][ T10] usb 6-1: config 0 descriptor?? [ 1607.455214][T12997] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1607.455256][T12997] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 1607.456093][T12997] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.457807][T12997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.457831][T12997] usb 9-1: Product: syz [ 1607.457844][T12997] usb 9-1: Manufacturer: syz [ 1607.457857][T12997] usb 9-1: SerialNumber: syz [ 1607.468857][T17717] FAULT_INJECTION: forcing a failure. [ 1607.468857][T17717] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.468887][T17717] CPU: 1 UID: 0 PID: 17717 Comm: syz.6.2899 Not tainted syzkaller #0 PREEMPT(full) [ 1607.468908][T17717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1607.468918][T17717] Call Trace: [ 1607.468924][T17717] [ 1607.468930][T17717] dump_stack_lvl+0x100/0x190 [ 1607.468959][T17717] should_fail_ex.cold+0x5/0xa [ 1607.468984][T17717] should_failslab+0xc2/0x120 [ 1607.469008][T17717] __kmalloc_cache_noprof+0x91/0x6d0 [ 1607.469027][T17717] ? shrinker_alloc+0xf5/0xd00 [ 1607.469048][T17717] shrinker_alloc+0xf5/0xd00 [ 1607.469068][T17717] ? mark_held_locks+0x40/0x70 [ 1607.469088][T17717] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1607.469112][T17717] ? rcu_is_watching+0x13/0xc0 [ 1607.469136][T17717] ? __pfx_shrinker_alloc+0x10/0x10 [ 1607.469157][T17717] ? lockdep_init_map_type+0x5c/0x250 [ 1607.469176][T17717] ? lockdep_init_map_type+0x5c/0x250 [ 1607.469195][T17717] ? __raw_spin_lock_init+0x3a/0x110 [ 1607.469216][T17717] ? __init_rwsem+0x10e/0x180 [ 1607.469240][T17717] sget_fc+0x97d/0x1f70 [ 1607.469264][T17717] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1607.469283][T17717] ? __pfx_sget_fc+0x10/0x10 [ 1607.469300][T17717] ? refcount_dec_not_one+0x136/0x1c0 [ 1607.469323][T17717] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 1607.469344][T17717] ? __kasan_kmalloc+0xaa/0xb0 [ 1607.469365][T17717] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1607.469388][T17717] ? __kasan_kmalloc+0xaa/0xb0 [ 1607.469411][T17717] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1607.469429][T17717] get_tree_nodev+0x28/0x190 [ 1607.469450][T17717] mqueue_get_tree+0xf1/0x130 [ 1607.469470][T17717] vfs_get_tree+0x92/0x320 [ 1607.469488][T17717] fc_mount_longterm+0x1a/0x270 [ 1607.469513][T17717] mq_init_ns+0x482/0x820 [ 1607.469538][T17717] copy_ipcs+0x3dd/0x7e0 [ 1607.469561][T17717] create_new_namespaces+0x20a/0xac0 [ 1607.469581][T17717] ? security_capable+0x80/0x260 [ 1607.469603][T17717] unshare_nsproxy_namespaces+0xf2/0x220 [ 1607.469624][T17717] ksys_unshare+0x4a2/0xb30 [ 1607.469644][T17717] ? __pfx_ksys_unshare+0x10/0x10 [ 1607.469672][T17717] __x64_sys_unshare+0x31/0x40 [ 1607.469692][T17717] do_syscall_64+0x123/0x790 [ 1607.469716][T17717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.469733][T17717] RIP: 0033:0x7fa1f8d9e559 [ 1607.469747][T17717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1607.469762][T17717] RSP: 002b:00007fa1f9cc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1607.469779][T17717] RAX: ffffffffffffffda RBX: 00007fa1f9025fa0 RCX: 00007fa1f8d9e559 [ 1607.469790][T17717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1607.469800][T17717] RBP: 00007fa1f8e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1607.469810][T17717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1607.469820][T17717] R13: 00007fa1f9026038 R14: 00007fa1f9025fa0 R15: 00007ffea3623c88 [ 1607.469843][T17717] [ 1607.807133][T12997] kvaser_usb 9-1:4.0: error -ENODEV: Cannot get usb endpoint(s) [ 1607.872350][ T52] Bluetooth: hci2: command tx timeout [ 1607.949718][T17724] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2889'. [ 1608.072829][T12997] usb 9-1: USB disconnect, device number 7 [ 1608.423743][T17724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1608.425093][T17724] batadv_slave_1: entered promiscuous mode [ 1608.425107][T17724] batadv_slave_1: entered allmulticast mode [ 1608.643018][ T5263] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1608.649370][T17621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.649447][T17621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.649559][T17621] bridge_slave_0: entered allmulticast mode [ 1608.680138][T17621] bridge_slave_0: entered promiscuous mode [ 1608.706835][T17621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.706913][T17621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.707049][T17621] bridge_slave_1: entered allmulticast mode [ 1608.710205][T17621] bridge_slave_1: entered promiscuous mode [ 1608.954031][T17621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.987880][T17621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1609.177117][T17737] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2896'. [ 1609.255070][T17621] team0: Port device team_slave_0 added [ 1609.256500][T17621] team0: Port device team_slave_1 added [ 1609.414850][ T254] hsr_slave_0: left promiscuous mode [ 1609.416277][ T254] hsr_slave_1: left promiscuous mode [ 1609.417555][ T254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1609.417572][ T254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1609.419746][ T254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1609.419757][ T254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1609.532221][T17324] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1609.570417][ T254] veth1_macvtap: left promiscuous mode [ 1609.583964][ T254] veth0_macvtap: left promiscuous mode [ 1609.584084][ T254] veth1_vlan: left promiscuous mode [ 1609.584158][ T254] veth0_vlan: left promiscuous mode [ 1609.614575][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 1609.614591][ T31] audit: type=1400 audit(1792107900.113:611): avc: denied { write } for pid=17728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1609.809194][ T31] audit: type=1400 audit(1792107900.303:612): avc: denied { write } for pid=17750 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1610.732712][ T31] audit: type=1400 audit(1792107901.223:613): avc: denied { map } for pid=17738 comm="syz.8.2901" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1610.737890][ T31] audit: type=1400 audit(1792107901.233:614): avc: denied { execute } for pid=17738 comm="syz.8.2901" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1610.757954][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1610.758037][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1610.775842][ T10] usb 6-1: USB disconnect, device number 9 [ 1610.791633][ T31] audit: type=1400 audit(1792107901.273:615): avc: denied { mount } for pid=17738 comm="syz.8.2901" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1610.791674][ T31] audit: type=1400 audit(1792107901.273:616): avc: denied { search } for pid=17738 comm="syz.8.2901" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1610.791707][ T31] audit: type=1400 audit(1792107901.273:617): avc: denied { search } for pid=17738 comm="syz.8.2901" name="usb_gadget" dev="configfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1610.791762][ T31] audit: type=1400 audit(1792107901.273:618): avc: denied { write search } for pid=17738 comm="syz.8.2901" name="usb_gadget" dev="configfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1610.791799][ T31] audit: type=1400 audit(1792107901.283:619): avc: denied { add_name } for pid=17738 comm="syz.8.2901" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1610.791832][ T31] audit: type=1400 audit(1792107901.283:620): avc: denied { create } for pid=17738 comm="syz.8.2901" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1612.885084][ T254] team0 (unregistering): Port device team_slave_1 removed [ 1612.900984][ T254] team0 (unregistering): Port device team_slave_0 removed [ 1613.811011][T17777] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.996517][T17621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1613.996533][T17621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1613.996556][T17621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1614.000873][T17731] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2896'. [ 1614.002022][ T5263] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1614.041637][T17324] usb 8-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=b7.1d [ 1614.042476][T17324] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1614.042501][T17324] usb 8-1: can't read configurations, error -71 [ 1614.113376][T17770] pimreg: entered allmulticast mode [ 1614.125713][T17621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1614.125737][T17621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1614.125757][T17621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1614.341367][T17621] hsr_slave_0: entered promiscuous mode [ 1614.345405][T17621] hsr_slave_1: entered promiscuous mode [ 1614.882571][T17324] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1615.034355][T17324] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1615.055411][T17324] usb 8-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 1615.055576][T17324] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1615.055605][T17324] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1615.055633][T17324] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1615.056208][T17324] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 51348, setting to 64 [ 1615.056651][T17324] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1615.191752][T17324] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.192096][T17324] usb 8-1: Product: syz [ 1615.208440][T17324] usb 8-1: Manufacturer: syz [ 1615.215080][T17324] usb 8-1: SerialNumber: syz [ 1615.341090][T17324] usb 8-1: config 0 descriptor?? [ 1615.389819][T17782] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1615.390336][T17782] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1615.716487][T17782] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2909'. [ 1615.942279][T17800] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2913'. [ 1615.942304][T17800] netlink: 'syz.5.2913': attribute type 6 has an invalid length. [ 1615.999010][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 1615.999027][ T31] audit: type=1400 audit(1792107906.493:644): avc: denied { write } for pid=17796 comm="syz.5.2913" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1616.070246][ T31] audit: type=1400 audit(1792107906.563:645): avc: denied { write } for pid=17781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1616.183562][ T31] audit: type=1400 audit(1792107906.683:646): avc: denied { write } for pid=17809 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1616.319501][ T5935] IPVS: starting estimator thread 0... [ 1616.350864][ T5263] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1616.359899][ T254] IPVS: stop unused estimator thread 0... [ 1616.401626][T17814] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 1616.409789][T17817] IPVS: using max 39 ests per chain, 93600 per kthread [ 1617.432625][T17324] rc_core: IR keymap rc-snapstream-firefly not found [ 1617.433729][T17324] Registered IR keymap rc-empty [ 1617.435713][T17324] rc rc0: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1617.436624][T17324] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input112 [ 1617.623907][ T31] audit: type=1400 audit(1792107908.123:647): avc: denied { read } for pid=4953 comm="acpid" name="event4" dev="devtmpfs" ino=3212 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1617.623952][ T31] audit: type=1400 audit(1792107908.123:648): avc: denied { open } for pid=4953 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3212 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1617.623988][ T31] audit: type=1400 audit(1792107908.123:649): avc: denied { ioctl } for pid=4953 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3212 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1617.629536][T17324] input: syz syz mouse as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input113 [ 1617.764988][T17324] usb 8-1: USB disconnect, device number 7 [ 1617.765086][ C1] ati_remote 8-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 1618.148458][ T4953] ati_remote 8-1:0.0: ati_remote_open: usb_submit_urb failed! [ 1618.615983][ T31] audit: type=1400 audit(1792107909.113:650): avc: denied { create } for pid=17837 comm="syz.6.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1618.625481][ T31] audit: type=1400 audit(1792107909.123:651): avc: denied { setopt } for pid=17837 comm="syz.6.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1618.692111][ T31] audit: type=1400 audit(1792107909.183:652): avc: denied { bind } for pid=17837 comm="syz.6.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1620.360062][T17863] FAULT_INJECTION: forcing a failure. [ 1620.360062][T17863] name failslab, interval 1, probability 0, space 0, times 0 [ 1620.360093][T17863] CPU: 0 UID: 0 PID: 17863 Comm: syz.5.2923 Not tainted syzkaller #0 PREEMPT(full) [ 1620.360115][T17863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1620.360125][T17863] Call Trace: [ 1620.360132][T17863] [ 1620.360139][T17863] dump_stack_lvl+0x100/0x190 [ 1620.360177][T17863] should_fail_ex.cold+0x5/0xa [ 1620.360199][T17863] ? __netlink_lookup+0x652/0x900 [ 1620.360227][T17863] should_failslab+0xc2/0x120 [ 1620.360255][T17863] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1620.360279][T17863] ? skb_clone+0x190/0x400 [ 1620.360302][T17863] skb_clone+0x190/0x400 [ 1620.360321][T17863] netlink_deliver_tap+0xaed/0xcc0 [ 1620.360352][T17863] netlink_unicast+0x62b/0x850 [ 1620.360382][T17863] ? __pfx_netlink_unicast+0x10/0x10 [ 1620.360417][T17863] netlink_sendmsg+0x8b0/0xda0 [ 1620.360449][T17863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1620.360478][T17863] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1620.360508][T17863] sock_write_iter+0x53a/0x5b0 [ 1620.360530][T17863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1620.360556][T17863] ? __pfx_sock_write_iter+0x10/0x10 [ 1620.360585][T17863] ? bpf_lsm_file_permission+0x9/0x10 [ 1620.360610][T17863] ? security_file_permission+0x76/0x210 [ 1620.360638][T17863] ? rw_verify_area+0xce/0x6d0 [ 1620.360660][T17863] vfs_write+0x6af/0x1050 [ 1620.360682][T17863] ? __pfx_sock_write_iter+0x10/0x10 [ 1620.360706][T17863] ? __pfx_vfs_write+0x10/0x10 [ 1620.360726][T17863] ? find_held_lock+0x2b/0x80 [ 1620.360768][T17863] ksys_write+0x1f8/0x250 [ 1620.360791][T17863] ? __pfx_ksys_write+0x10/0x10 [ 1620.360821][T17863] do_syscall_64+0x123/0x790 [ 1620.360849][T17863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.360868][T17863] RIP: 0033:0x7fb351d9e559 [ 1620.360884][T17863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1620.360901][T17863] RSP: 002b:00007fb34fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1620.360919][T17863] RAX: ffffffffffffffda RBX: 00007fb352025fa0 RCX: 00007fb351d9e559 [ 1620.360930][T17863] RDX: 0000000000000030 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1620.360942][T17863] RBP: 00007fb34fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1620.360952][T17863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1620.360963][T17863] R13: 00007fb352026038 R14: 00007fb352025fa0 R15: 00007ffd57ff73e8 [ 1620.360988][T17863] [ 1620.416317][ T31] audit: type=1400 audit(1792107910.893:653): avc: denied { write } for pid=17825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1621.082615][T17876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1621.116865][T17878] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1621.136044][ T31] audit: type=1400 audit(1792107911.633:654): avc: denied { write } for pid=17877 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1621.413342][ T10] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1621.542898][ T10] usb 6-1: device descriptor read/64, error -71 [ 1621.782219][ T10] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1621.886981][T17621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1621.984080][ T10] usb 6-1: device descriptor read/64, error -71 [ 1622.054641][T17621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1622.057798][T17621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1622.092704][ T10] usb usb6-port1: attempt power cycle [ 1622.242029][T17621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1622.258982][T17621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1622.498519][T17621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1622.537639][T17621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1622.778049][ T10] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1622.819566][T17621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1622.879085][ T10] usb 6-1: device descriptor read/8, error -71 [ 1623.395191][ T10] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1623.423224][ T10] usb 6-1: device descriptor read/8, error -71 [ 1623.476497][ T31] audit: type=1400 audit(1792107913.953:655): avc: denied { write } for pid=17889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1623.497996][ T31] audit: type=1400 audit(1792107913.993:656): avc: denied { mount } for pid=17912 comm="syz.8.2933" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1623.567161][ T10] usb usb6-port1: unable to enumerate USB device [ 1623.744172][T17621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1623.765840][T17621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1624.026464][T12503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.026513][T12503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1624.030416][T12503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.030462][T12503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1624.069447][ T31] audit: type=1400 audit(1792107914.563:657): avc: denied { write } for pid=17920 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1628.472344][T17970] FAULT_INJECTION: forcing a failure. [ 1628.472344][T17970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1628.472376][T17970] CPU: 1 UID: 0 PID: 17970 Comm: syz.7.2943 Not tainted syzkaller #0 PREEMPT(full) [ 1628.472397][T17970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1628.472408][T17970] Call Trace: [ 1628.472414][T17970] [ 1628.472422][T17970] dump_stack_lvl+0x100/0x190 [ 1628.472454][T17970] should_fail_ex.cold+0x5/0xa [ 1628.472479][T17970] _copy_from_iter+0x1f4/0x1690 [ 1628.472508][T17970] ? __asan_memset+0x23/0x50 [ 1628.472530][T17970] ? __pfx__copy_from_iter+0x10/0x10 [ 1628.472556][T17970] ? __pfx___alloc_skb+0x10/0x10 [ 1628.472594][T17970] netlink_sendmsg+0x808/0xda0 [ 1628.472625][T17970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1628.472654][T17970] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1628.472683][T17970] ____sys_sendmsg+0xa4d/0xbe0 [ 1628.472704][T17970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1628.472733][T17970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1628.472761][T17970] ? lock_acquire+0x1d1/0x380 [ 1628.472782][T17970] ? get_pid_task+0x2a/0x250 [ 1628.472808][T17970] ___sys_sendmsg+0x190/0x1e0 [ 1628.472832][T17970] ? __pfx____sys_sendmsg+0x10/0x10 [ 1628.472854][T17970] ? get_pid_task+0x106/0x250 [ 1628.472883][T17970] ? find_held_lock+0x2b/0x80 [ 1628.472922][T17970] __sys_sendmsg+0x160/0x210 [ 1628.472940][T17970] ? __pfx___sys_sendmsg+0x10/0x10 [ 1628.472978][T17970] do_syscall_64+0x123/0x790 [ 1628.473007][T17970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.473024][T17970] RIP: 0033:0x7f6b2db9e559 [ 1628.473040][T17970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1628.473056][T17970] RSP: 002b:00007f6b2ea77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1628.473075][T17970] RAX: ffffffffffffffda RBX: 00007f6b2de25fa0 RCX: 00007f6b2db9e559 [ 1628.473087][T17970] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 1628.473098][T17970] RBP: 00007f6b2ea77090 R08: 0000000000000000 R09: 0000000000000000 [ 1628.473108][T17970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1628.473119][T17970] R13: 00007f6b2de26038 R14: 00007f6b2de25fa0 R15: 00007ffc452ddf78 [ 1628.473143][T17970] [ 1628.792359][ T31] audit: type=1400 audit(1792107919.283:658): avc: denied { write } for pid=17931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1628.828607][T17621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1628.934134][T17975] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1629.027475][T17981] FAULT_INJECTION: forcing a failure. [ 1629.027475][T17981] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1629.027504][T17981] CPU: 1 UID: 0 PID: 17981 Comm: syz.5.2947 Not tainted syzkaller #0 PREEMPT(full) [ 1629.027525][T17981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1629.027536][T17981] Call Trace: [ 1629.027542][T17981] [ 1629.027549][T17981] dump_stack_lvl+0x100/0x190 [ 1629.027579][T17981] should_fail_ex.cold+0x5/0xa [ 1629.027600][T17981] ? prepare_alloc_pages+0x16d/0x5b0 [ 1629.027629][T17981] should_fail_alloc_page+0xeb/0x140 [ 1629.027655][T17981] prepare_alloc_pages+0x1f0/0x5b0 [ 1629.027683][T17981] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1629.027705][T17981] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1629.027726][T17981] ? prepare_alloc_pages+0x1f0/0x5b0 [ 1629.027753][T17981] ? rcu_is_watching+0x13/0xc0 [ 1629.027779][T17981] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 1629.027803][T17981] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1629.027827][T17981] ? find_held_lock+0x2b/0x80 [ 1629.027853][T17981] ? is_bpf_text_address+0x8a/0x1a0 [ 1629.027878][T17981] ? is_bpf_text_address+0x8a/0x1a0 [ 1629.027904][T17981] ? bpf_ksym_find+0x128/0x1c0 [ 1629.027922][T17981] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1629.027942][T17981] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1629.027963][T17981] ? is_bpf_text_address+0x94/0x1a0 [ 1629.027990][T17981] ? __kernel_text_address+0xd/0x30 [ 1629.028025][T17981] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 1629.028046][T17981] ? find_held_lock+0x2b/0x80 [ 1629.028083][T17981] ? policy_nodemask+0xed/0x4f0 [ 1629.028112][T17981] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1629.028147][T17981] __kasan_populate_vmalloc+0xf0/0x210 [ 1629.028176][T17981] alloc_vmap_area+0x95d/0x2bb0 [ 1629.028208][T17981] ? kasan_save_track+0x14/0x30 [ 1629.028232][T17981] ? __kasan_kmalloc+0xaa/0xb0 [ 1629.028254][T17981] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1629.028280][T17981] ? __get_vm_area_node+0x124/0x350 [ 1629.028308][T17981] __get_vm_area_node+0x1ed/0x350 [ 1629.028338][T17981] __vmalloc_node_range_noprof+0x268/0x1420 [ 1629.028366][T17981] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1629.028393][T17981] ? up_write+0x2dc/0x5b0 [ 1629.028418][T17981] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1629.028443][T17981] ? lock_acquire+0x1d1/0x380 [ 1629.028465][T17981] ? find_held_lock+0x2b/0x80 [ 1629.028492][T17981] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1629.028521][T17981] ? avc_has_perm_noaudit+0x11e/0x470 [ 1629.028546][T17981] ? avc_has_perm_noaudit+0x145/0x470 [ 1629.028565][T17981] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1629.028587][T17981] __vmalloc_node_noprof+0xad/0xf0 [ 1629.028610][T17981] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1629.028635][T17981] __vmalloc_noprof+0xa3/0x120 [ 1629.028659][T17981] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1629.028686][T17981] ? rcu_is_watching+0x13/0xc0 [ 1629.028711][T17981] ? cap_capable+0x107/0x430 [ 1629.028733][T17981] bpf_prog_alloc_no_stats+0x59/0x690 [ 1629.028755][T17981] ? security_capable+0x80/0x260 [ 1629.028777][T17981] bpf_prog_alloc+0x3b/0x200 [ 1629.028797][T17981] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1629.028821][T17981] bpf_prog_load+0x49e/0x2ab0 [ 1629.028852][T17981] ? __pfx_bpf_prog_load+0x10/0x10 [ 1629.028896][T17981] __sys_bpf+0x1f46/0x4a30 [ 1629.028922][T17981] ? __pfx___sys_bpf+0x10/0x10 [ 1629.028938][T17981] ? find_held_lock+0x2b/0x80 [ 1629.028960][T17981] ? get_pid_task+0xfc/0x250 [ 1629.028982][T17981] ? get_pid_task+0xfc/0x250 [ 1629.029010][T17981] ? find_held_lock+0x2b/0x80 [ 1629.029039][T17981] ? rcu_read_lock_any_held+0x6a/0x90 [ 1629.029070][T17981] ? find_held_lock+0x2b/0x80 [ 1629.029093][T17981] ? ksys_write+0x190/0x250 [ 1629.029113][T17981] ? ksys_write+0x190/0x250 [ 1629.029133][T17981] ? lock_acquire+0x1d1/0x380 [ 1629.029166][T17981] ? fput+0x7c/0x100 [ 1629.029191][T17981] ? ksys_write+0x1ac/0x250 [ 1629.029214][T17981] ? __x64_sys_bpf+0xce/0x140 [ 1629.029232][T17981] __x64_sys_bpf+0xce/0x140 [ 1629.029252][T17981] ? do_syscall_64+0xae/0x790 [ 1629.029277][T17981] do_syscall_64+0x123/0x790 [ 1629.029304][T17981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.029321][T17981] RIP: 0033:0x7fb351d9e559 [ 1629.029336][T17981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1629.029353][T17981] RSP: 002b:00007fb34fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1629.029370][T17981] RAX: ffffffffffffffda RBX: 00007fb352025fa0 RCX: 00007fb351d9e559 [ 1629.029381][T17981] RDX: 0000000000000094 RSI: 0000200000019300 RDI: 0000000000000005 [ 1629.029391][T17981] RBP: 00007fb34fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1629.029402][T17981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1629.029412][T17981] R13: 00007fb352026038 R14: 00007fb352025fa0 R15: 00007ffd57ff73e8 [ 1629.029436][T17981] [ 1629.029675][T17981] syz.5.2947: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1629.029810][T17981] CPU: 1 UID: 0 PID: 17981 Comm: syz.5.2947 Not tainted syzkaller #0 PREEMPT(full) [ 1629.029830][T17981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1629.029840][T17981] Call Trace: [ 1629.029846][T17981] [ 1629.029853][T17981] dump_stack_lvl+0x100/0x190 [ 1629.029880][T17981] warn_alloc.cold+0x9e/0xb2 [ 1629.029899][T17981] ? __pfx_warn_alloc+0x10/0x10 [ 1629.029918][T17981] ? lockdep_hardirqs_on+0x7d/0x110 [ 1629.029945][T17981] ? __get_vm_area_node+0x2f0/0x350 [ 1629.029975][T17981] ? __get_vm_area_node+0x22b/0x350 [ 1629.030004][T17981] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 1629.030033][T17981] ? up_write+0x2dc/0x5b0 [ 1629.030059][T17981] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1629.030093][T17981] ? lock_acquire+0x1d1/0x380 [ 1629.030113][T17981] ? find_held_lock+0x2b/0x80 [ 1629.030138][T17981] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1629.030164][T17981] ? avc_has_perm_noaudit+0x11e/0x470 [ 1629.030188][T17981] ? avc_has_perm_noaudit+0x145/0x470 [ 1629.030208][T17981] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1629.030229][T17981] __vmalloc_node_noprof+0xad/0xf0 [ 1629.030252][T17981] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 1629.030277][T17981] __vmalloc_noprof+0xa3/0x120 [ 1629.030313][T17981] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1629.030358][T17981] ? rcu_is_watching+0x13/0xc0 [ 1629.030383][T17981] ? cap_capable+0x107/0x430 [ 1629.030404][T17981] bpf_prog_alloc_no_stats+0x59/0x690 [ 1629.030427][T17981] ? security_capable+0x80/0x260 [ 1629.030450][T17981] bpf_prog_alloc+0x3b/0x200 [ 1629.030469][T17981] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1629.030491][T17981] bpf_prog_load+0x49e/0x2ab0 [ 1629.030521][T17981] ? __pfx_bpf_prog_load+0x10/0x10 [ 1629.030560][T17981] __sys_bpf+0x1f46/0x4a30 [ 1629.030583][T17981] ? __pfx___sys_bpf+0x10/0x10 [ 1629.030602][T17981] ? find_held_lock+0x2b/0x80 [ 1629.030625][T17981] ? get_pid_task+0xfc/0x250 [ 1629.030648][T17981] ? get_pid_task+0xfc/0x250 [ 1629.030680][T17981] ? find_held_lock+0x2b/0x80 [ 1629.030712][T17981] ? rcu_read_lock_any_held+0x6a/0x90 [ 1629.030740][T17981] ? find_held_lock+0x2b/0x80 [ 1629.030766][T17981] ? ksys_write+0x190/0x250 [ 1629.030788][T17981] ? ksys_write+0x190/0x250 [ 1629.030810][T17981] ? lock_acquire+0x1d1/0x380 [ 1629.030847][T17981] ? fput+0x7c/0x100 [ 1629.030873][T17981] ? ksys_write+0x1ac/0x250 [ 1629.030898][T17981] ? __x64_sys_bpf+0xce/0x140 [ 1629.030917][T17981] __x64_sys_bpf+0xce/0x140 [ 1629.030938][T17981] ? do_syscall_64+0xae/0x790 [ 1629.030965][T17981] do_syscall_64+0x123/0x790 [ 1629.030992][T17981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.031011][T17981] RIP: 0033:0x7fb351d9e559 [ 1629.031025][T17981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1629.031041][T17981] RSP: 002b:00007fb34fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1629.031057][T17981] RAX: ffffffffffffffda RBX: 00007fb352025fa0 RCX: 00007fb351d9e559 [ 1629.031118][T17981] RDX: 0000000000000094 RSI: 0000200000019300 RDI: 0000000000000005 [ 1629.031129][T17981] RBP: 00007fb34fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1629.031139][T17981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1629.031149][T17981] R13: 00007fb352026038 R14: 00007fb352025fa0 R15: 00007ffd57ff73e8 [ 1629.031173][T17981] [ 1629.632272][T17981] Mem-Info: [ 1629.632285][T17981] active_anon:77079 inactive_anon:0 isolated_anon:0 [ 1629.632285][T17981] active_file:0 inactive_file:66933 isolated_file:0 [ 1629.632285][T17981] unevictable:0 dirty:260 writeback:0 [ 1629.632285][T17981] slab_reclaimable:12639 slab_unreclaimable:104263 [ 1629.632285][T17981] mapped:45921 shmem:68224 pagetables:1779 [ 1629.632285][T17981] sec_pagetables:0 bounce:0 [ 1629.632285][T17981] kernel_misc_reclaimable:0 [ 1629.632285][T17981] free:1188768 free_pcp:21901 free_cma:0 [ 1629.632328][T17981] Node 0 active_anon:308316kB inactive_anon:0kB active_file:0kB inactive_file:267528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:183684kB dirty:1036kB writeback:0kB shmem:272896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13428kB pagetables:6960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1629.632373][T17981] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1629.632414][T17981] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1629.632461][T17981] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 1629.632491][T17981] Node 0 DMA32 free:793004kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:308316kB inactive_anon:0kB active_file:0kB inactive_file:267528kB unevictable:0kB writepending:1036kB zspages:0kB present:3129332kB managed:2510920kB mlocked:0kB bounce:0kB free_pcp:87604kB local_pcp:12192kB free_cma:0kB [ 1629.632539][T17981] lowmem_reserve[]: 0 0 0 0 0 [ 1629.632565][T17981] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1629.632609][T17981] lowmem_reserve[]: 0 0 0 0 0 [ 1629.632637][T17981] Node 1 Normal free:3946708kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1629.632684][T17981] lowmem_reserve[]: 0 0 0 0 0 [ 1629.632712][T17981] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1629.633285][T17981] Node 0 DMA32: 2331*4kB (UE) 1967*8kB (UME) 1708*16kB (UE) 1199*32kB (UME) 374*64kB (UME) 87*128kB (UME) 328*256kB (UME) 135*512kB (UM) 40*1024kB (UME) 13*2048kB (UM) 109*4096kB (UM) = 792964kB [ 1629.633407][T17981] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1629.633479][T17981] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 5*16kB (UM) 7*32kB (UM) 4*64kB (UM) 7*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3946708kB [ 1629.633606][T17981] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1629.633618][T17981] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1629.633629][T17981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1629.633641][T17981] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1629.633653][T17981] 135153 total pagecache pages [ 1629.633658][T17981] 0 pages in swap cache [ 1629.633663][T17981] Free swap = 124996kB [ 1629.633669][T17981] Total swap = 124996kB [ 1629.633675][T17981] 2097051 pages RAM [ 1629.633680][T17981] 0 pages HighMem/MovableOnly [ 1629.633685][T17981] 437690 pages reserved [ 1629.633690][T17981] 0 pages cma reserved [ 1629.759010][ T31] audit: type=1400 audit(1792107920.253:659): avc: denied { write } for pid=17976 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1629.874417][T17621] veth0_vlan: entered promiscuous mode [ 1630.007176][T17621] veth1_vlan: entered promiscuous mode [ 1630.028755][T17978] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2946'. [ 1630.242534][T17987] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2949'. [ 1630.245818][T17987] tmpfs: Unknown parameter '0x0000000000000003' [ 1630.498553][T17989] tipc: Started in network mode [ 1630.498645][T17989] tipc: Node identity 0010000000000000002, cluster identity 4711 [ 1630.875375][T17621] veth0_macvtap: entered promiscuous mode [ 1631.142852][T17621] veth1_macvtap: entered promiscuous mode [ 1631.176523][T17621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1631.221309][T17621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1632.103060][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.103108][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.103136][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.103161][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.233049][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.233069][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.459224][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.477693][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.481820][T18006] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2953'. [ 1632.490204][ T31] audit: type=1400 audit(1792107922.983:660): avc: denied { ioctl } for pid=18005 comm="syz.5.2953" path="socket:[66896]" dev="sockfs" ino=66896 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1632.549217][ T31] audit: type=1400 audit(1792107923.043:661): avc: denied { setopt } for pid=18005 comm="syz.5.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1632.641140][T18006] fuse: Bad value for 'fd' [ 1632.648355][T18006] fuse: Bad value for 'fd' [ 1632.648620][T18006] fuse: Bad value for 'fd' [ 1632.648799][T18006] fuse: Bad value for 'fd' [ 1632.667953][T18006] fuse: Bad value for 'fd' [ 1632.669311][T18006] fuse: Bad value for 'fd' [ 1632.678100][T18006] fuse: Bad value for 'fd' [ 1632.690981][T18006] fuse: Bad value for 'fd' [ 1632.696873][T18006] fuse: Bad value for 'fd' [ 1632.700188][T18006] fuse: Bad value for 'fd' [ 1632.713499][T18006] fuse: Bad value for 'fd' [ 1632.713722][T18006] fuse: Bad value for 'fd' [ 1632.727204][T18006] fuse: Bad value for 'fd' [ 1632.731120][T18006] fuse: Bad value for 'fd' [ 1632.745226][T18006] fuse: Bad value for 'fd' [ 1632.748509][ T31] audit: type=1400 audit(1792107923.243:662): avc: denied { mounton } for pid=17621 comm="syz-executor" path="/root/syzkaller.nsTLJ3/syz-tmp" dev="sda1" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1632.749607][T18006] fuse: Bad value for 'fd' [ 1632.750395][T18006] fuse: Bad value for 'fd' [ 1632.750897][ T31] audit: type=1400 audit(1792107923.243:663): avc: denied { mount } for pid=17621 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1632.760278][T18006] fuse: Bad value for 'fd' [ 1632.820763][ T31] audit: type=1400 audit(1792107923.313:664): avc: denied { mounton } for pid=17621 comm="syz-executor" path="/root/syzkaller.nsTLJ3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1632.821362][ T31] audit: type=1400 audit(1792107923.313:665): avc: denied { ioctl } for pid=18007 comm="syz.6.2952" path="socket:[66894]" dev="sockfs" ino=66894 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1632.852322][T18006] fuse: Bad value for 'fd' [ 1632.875187][ T31] audit: type=1400 audit(1792107923.343:666): avc: denied { mounton } for pid=17621 comm="syz-executor" path="/root/syzkaller.nsTLJ3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=68165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1632.882341][T18006] fuse: Bad value for 'fd' [ 1632.891478][T18006] fuse: Bad value for 'fd' [ 1632.891658][T18006] fuse: Bad value for 'fd' [ 1632.891824][T18006] fuse: Bad value for 'fd' [ 1632.891990][T18006] fuse: Bad value for 'fd' [ 1632.892200][T18006] fuse: Bad value for 'fd' [ 1632.892389][T18006] fuse: Bad value for 'fd' [ 1632.892555][T18006] fuse: Bad value for 'fd' [ 1632.892726][T18006] fuse: Bad value for 'fd' [ 1632.892891][T18006] fuse: Bad value for 'fd' [ 1632.893056][T18006] fuse: Bad value for 'fd' [ 1632.893221][T18006] fuse: Bad value for 'fd' [ 1632.893384][T18006] fuse: Bad value for 'fd' [ 1632.893551][T18006] fuse: Bad value for 'fd' [ 1632.991572][ T31] audit: type=1400 audit(1792107923.483:667): avc: denied { mounton } for pid=17621 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1633.322003][T18021] fuse: Unknown parameter 'user_id00000000000000000000' [ 1634.120972][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1634.120990][ T31] audit: type=1400 audit(1792107924.613:671): avc: denied { create } for pid=18030 comm="syz.0.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1634.172462][ T31] audit: type=1400 audit(1792107924.673:672): avc: denied { setopt } for pid=18030 comm="syz.0.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1634.232382][T17324] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1634.235427][ T31] audit: type=1400 audit(1792107924.733:673): avc: denied { write } for pid=18030 comm="syz.0.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1634.361911][ T31] audit: type=1400 audit(1792107924.853:674): avc: denied { read write } for pid=18030 comm="syz.0.2956" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1634.386504][ T31] audit: type=1400 audit(1792107924.853:675): avc: denied { open } for pid=18030 comm="syz.0.2956" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1634.411460][ T31] audit: type=1400 audit(1792107924.883:676): avc: denied { ioctl } for pid=18030 comm="syz.0.2956" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1634.437960][T17324] usb 6-1: New USB device found, idVendor=0846, idProduct=e301, bcdDevice= 0.10 [ 1634.456980][T18035] ======================================================= [ 1634.456980][T18035] WARNING: The mand mount option has been deprecated and [ 1634.456980][T18035] and is ignored by this kernel. Remove the mand [ 1634.456980][T18035] option from the mount to silence this warning. [ 1634.456980][T18035] ======================================================= [ 1634.457107][T18035] fuse: blksize only supported for fuseblk [ 1634.457153][T17324] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1634.457184][T17324] usb 6-1: can't read configurations, error -61 [ 1634.530192][ T31] audit: type=1400 audit(1792107925.023:677): avc: denied { write } for pid=17990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1634.582596][T17324] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1634.663541][ T31] audit: type=1400 audit(1792107925.163:678): avc: denied { create } for pid=18030 comm="syz.0.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1634.666047][ T31] audit: type=1400 audit(1792107925.163:679): avc: denied { write } for pid=18040 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1634.671844][ T31] audit: type=1400 audit(1792107925.163:680): avc: denied { connect } for pid=18030 comm="syz.0.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1634.736398][T17324] usb 6-1: New USB device found, idVendor=0846, idProduct=e301, bcdDevice= 0.10 [ 1634.737659][T17324] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1634.737687][T17324] usb 6-1: can't read configurations, error -61 [ 1634.739235][T17324] usb usb6-port1: attempt power cycle [ 1634.849806][T18042] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1634.849832][T18042] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1634.849855][T18042] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1634.923634][T18042] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 1635.077877][T17324] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1635.093268][T17324] usb 6-1: New USB device found, idVendor=0846, idProduct=e301, bcdDevice= 0.10 [ 1635.094533][T17324] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1635.094562][T17324] usb 6-1: can't read configurations, error -61 [ 1635.168514][ T10] infiniband s`z1: ib_query_port failed (-19) [ 1635.200445][ T12] smbdirect: ib_dev[s`z1] removed [ 1635.222241][T17324] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1635.245123][T17324] usb 6-1: New USB device found, idVendor=0846, idProduct=e301, bcdDevice= 0.10 [ 1635.248196][T17324] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1635.248232][T17324] usb 6-1: can't read configurations, error -61 [ 1635.249945][T17324] usb usb6-port1: unable to enumerate USB device [ 1635.284644][T18053] binder: Unknown parameter 'ÿÿÿÿ' [ 1635.338087][T18042] siw: device registration error -19 [ 1635.456910][T18055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1636.274218][T18058] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2961'. [ 1636.274319][T18058] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2961'. [ 1637.323485][T18062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2963'. [ 1638.487142][T18077] fuse: Unknown parameter '0xffffffffffffffff' [ 1639.185347][T18080] FAULT_INJECTION: forcing a failure. [ 1639.185347][T18080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1639.185377][T18080] CPU: 0 UID: 0 PID: 18080 Comm: syz.8.2958 Not tainted syzkaller #0 PREEMPT(full) [ 1639.185398][T18080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1639.185408][T18080] Call Trace: [ 1639.185414][T18080] [ 1639.185422][T18080] dump_stack_lvl+0x100/0x190 [ 1639.185452][T18080] should_fail_ex.cold+0x5/0xa [ 1639.185479][T18080] _copy_from_user+0x2e/0xd0 [ 1639.185505][T18080] move_addr_to_kernel+0x65/0x170 [ 1639.185530][T18080] __sys_sendto+0x1b8/0x4e0 [ 1639.185558][T18080] ? __pfx___sys_sendto+0x10/0x10 [ 1639.185592][T18080] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1639.185629][T18080] ? ksys_write+0x1ac/0x250 [ 1639.185652][T18080] ? __pfx_ksys_write+0x10/0x10 [ 1639.185676][T18080] __x64_sys_sendto+0xe0/0x1c0 [ 1639.185702][T18080] ? do_syscall_64+0xae/0x790 [ 1639.185727][T18080] ? lockdep_hardirqs_on+0x7d/0x110 [ 1639.185751][T18080] do_syscall_64+0x123/0x790 [ 1639.185778][T18080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.185797][T18080] RIP: 0033:0x7f3999d9e559 [ 1639.185812][T18080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1639.185828][T18080] RSP: 002b:00007f399ab80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1639.185845][T18080] RAX: ffffffffffffffda RBX: 00007f399a025fa0 RCX: 00007f3999d9e559 [ 1639.185856][T18080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1639.185866][T18080] RBP: 00007f399ab80090 R08: 0000200000001740 R09: 0000000000000014 [ 1639.185875][T18080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1639.185885][T18080] R13: 00007f399a026038 R14: 00007f399a025fa0 R15: 00007ffd26844a78 [ 1639.185907][T18080] [ 1639.242287][T12994] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1639.553609][T12994] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1639.667814][T12994] usb 7-1: not running at top speed; connect to a high speed hub [ 1639.667835][T12994] usb 7-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 1639.879321][T12994] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 39, changing to 4 [ 1639.879365][T12994] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 4 [ 1640.732429][T12994] usb 7-1: string descriptor 0 read error: -22 [ 1640.732535][T12994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.236118][T12994] usb 7-1: Can't get UAC3 power state for id 10 [ 1641.247138][T12994] usb 7-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 1641.247473][T12994] usb 7-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 1641.551710][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 1641.551723][ T31] audit: type=1400 audit(1792107932.043:691): avc: denied { create } for pid=18089 comm="syz.8.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1641.834841][T12994] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1641.869705][T12994] usb 7-1: USB disconnect, device number 5 [ 1641.958087][ T10] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1642.856113][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 1642.856144][ T10] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 1642.883773][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1642.883798][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.923528][ T10] cyberjack 8-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 1642.952689][ T10] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1643.508880][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2972'. [ 1643.509110][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2972'. [ 1644.065443][ T31] audit: type=1400 audit(1792107934.563:692): avc: denied { create } for pid=18101 comm="syz.7.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1644.077414][ T31] audit: type=1400 audit(1792107934.563:693): avc: denied { setopt } for pid=18101 comm="syz.7.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1644.803130][T18102] bridge_slave_0: left allmulticast mode [ 1644.803152][T18102] bridge_slave_0: left promiscuous mode [ 1644.805170][T18102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.808580][ T31] audit: type=1400 audit(1792107935.303:694): avc: denied { setopt } for pid=18101 comm="syz.7.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1644.876372][T18102] bridge_slave_1: left allmulticast mode [ 1644.876389][T18102] bridge_slave_1: left promiscuous mode [ 1644.876487][T18102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.904933][ T31] audit: type=1400 audit(1792107935.403:695): avc: denied { write } for pid=18101 comm="syz.7.2962" name="rdma_cm" dev="configfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1644.904996][ T31] audit: type=1400 audit(1792107935.403:696): avc: denied { create } for pid=18101 comm="syz.7.2962" name="syz0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1645.323739][T18102] bond0: (slave bond_slave_0): Releasing backup interface [ 1645.416619][T18102] bond0: (slave bond_slave_1): Releasing backup interface [ 1645.510976][T18102] team0: Port device team_slave_0 removed [ 1645.559554][T18102] team0: Port device team_slave_1 removed [ 1645.573596][T18102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1645.573644][T18102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1645.610007][T18102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1645.610086][T18102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1645.680318][T18102] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1645.741767][T18111] team0: Mode changed to "loadbalance" [ 1646.720373][ T10] syz1: Port: 1 Link DOWN [ 1646.847854][ T10] usb 8-1: USB disconnect, device number 8 [ 1646.893474][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1646.894021][ T10] cyberjack 8-1:1.0: device disconnected [ 1647.231471][T18126] CIFS: Attempting to mount //127.0.0.1/share [ 1647.304554][T18128] CIFS: VFS: smb2_get_data_area_len: invalid data area (off=24929 len=24929) [ 1647.304630][T18128] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 1647.304810][T18128] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x61 [ 1647.317751][T18126] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1647.370033][ T31] audit: type=1400 audit(1792107937.863:697): avc: denied { getopt } for pid=18125 comm="syz.5.2978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1647.374211][T18126] IPVS: set_ctl: invalid protocol: 24929 97.97.97.97:24929 [ 1648.219409][ T986] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1648.230050][T18133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2976'. [ 1648.392399][T18136] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1648.408279][ T986] usb 8-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 1648.412049][ T986] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.412088][ T986] usb 8-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x81, skipping [ 1648.412139][ T986] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1648.412171][ T986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.505108][ T986] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 1648.612781][ T31] audit: type=1400 audit(1792107939.113:698): avc: denied { ioctl } for pid=18138 comm="syz.8.2974" path="/newroot/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1648.696886][ T2342] pvrusb2: Invalid read control endpoint [ 1648.754015][ T2342] usb 8-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 1648.754033][ T2342] usb 8-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 1649.637082][ T31] audit: type=1400 audit(1792107940.133:699): avc: denied { ioctl } for pid=18144 comm="syz.0.2975" path="socket:[68560]" dev="sockfs" ino=68560 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1650.547254][ T31] audit: type=1400 audit(1792107941.043:700): avc: denied { bind } for pid=18130 comm="syz.7.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1650.555392][T18157] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2979'. [ 1650.888569][T18164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1651.357564][ T31] audit: type=1400 audit(1792107941.413:701): avc: denied { create } for pid=18158 comm="syz.5.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1651.357618][ T31] audit: type=1400 audit(1792107941.463:702): avc: denied { sys_admin } for pid=18158 comm="syz.5.2984" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1652.160345][T12994] usb 8-1: USB disconnect, device number 9 [ 1653.303237][T18178] comedi comedi3: board detection failed [ 1653.432088][T18180] netlink: 'syz.6.2981': attribute type 10 has an invalid length. [ 1653.434716][T18180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.435338][T18180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.460753][T18180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.460856][T18180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1653.461124][T18180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.461219][T18180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1653.571143][T18180] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1654.932985][T18194] capability: warning: `syz.5.2992' uses deprecated v2 capabilities in a way that may be insecure [ 1655.514829][T18211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1655.514845][T18211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1655.552557][T17324] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1655.703667][T17324] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1655.704625][T17324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1655.704649][T17324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1655.705485][T17324] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1655.705499][T17324] usb 1-1: Manufacturer: syz [ 1655.706866][T17324] usb 1-1: config 0 descriptor?? [ 1655.842233][ T5601] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1655.898796][T18211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.077959][ T5601] usb 9-1: Using ep0 maxpacket: 8 [ 1656.082286][ T5601] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1656.082323][ T5601] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1656.088262][ T5601] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1656.088298][ T5601] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1656.088317][ T5601] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1656.088338][ T5601] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1656.088362][ T5601] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1656.088378][ T5601] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1656.088394][ T5601] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1656.096345][ T5601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.096374][ T5601] usb 9-1: Product: syz [ 1656.096387][ T5601] usb 9-1: Manufacturer: syz [ 1656.096400][ T5601] usb 9-1: SerialNumber: syz [ 1656.485515][ T5601] usb 9-1: config 0 descriptor?? [ 1656.486181][T18219] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1656.564785][ T5601] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1657.107149][T18236] FAULT_INJECTION: forcing a failure. [ 1657.107149][T18236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1657.107180][T18236] CPU: 0 UID: 0 PID: 18236 Comm: syz.8.2987 Not tainted syzkaller #0 PREEMPT(full) [ 1657.107198][T18236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1657.107207][T18236] Call Trace: [ 1657.107211][T18236] [ 1657.107216][T18236] dump_stack_lvl+0x100/0x190 [ 1657.107243][T18236] should_fail_ex.cold+0x5/0xa [ 1657.107268][T18236] _copy_from_user+0x2e/0xd0 [ 1657.107293][T18236] do_tcp_setsockopt+0x73e/0x2b50 [ 1657.107311][T18236] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1657.107330][T18236] ? __pfx_sock_has_perm+0x10/0x10 [ 1657.107344][T18236] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 1657.107361][T18236] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1657.107389][T18236] ? find_held_lock+0x2b/0x80 [ 1657.107414][T18236] ? __fget_files+0x215/0x3d0 [ 1657.107442][T18236] tcp_setsockopt+0xe2/0x100 [ 1657.107459][T18236] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1657.107481][T18236] do_sock_setsockopt+0xf3/0x1d0 [ 1657.107503][T18236] __sys_setsockopt+0x195/0x220 [ 1657.107523][T18236] __x64_sys_setsockopt+0xbd/0x160 [ 1657.107539][T18236] ? do_syscall_64+0xae/0x790 [ 1657.107563][T18236] ? lockdep_hardirqs_on+0x7d/0x110 [ 1657.107586][T18236] do_syscall_64+0x123/0x790 [ 1657.107607][T18236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.107618][T18236] RIP: 0033:0x7f3999d9e559 [ 1657.107628][T18236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.107639][T18236] RSP: 002b:00007f3997fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1657.107649][T18236] RAX: ffffffffffffffda RBX: 00007f399a026180 RCX: 00007f3999d9e559 [ 1657.107656][T18236] RDX: 0000000000000020 RSI: 0000000000000006 RDI: 0000000000000029 [ 1657.107664][T18236] RBP: 00007f3999e358b0 R08: 00000000000000d8 R09: 0000000000000000 [ 1657.107674][T18236] R10: 0000200000000840 R11: 0000000000000246 R12: 0000000000000000 [ 1657.107685][T18236] R13: 00007f399a026218 R14: 00007f399a026180 R15: 00007ffd26844a78 [ 1657.107708][T18236] [ 1657.319657][ T986] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1657.494696][ T986] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1657.499283][ T986] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1657.499310][ T986] usb 6-1: Product: syz [ 1657.544411][ T986] usb 6-1: config 0 descriptor?? [ 1657.585199][ T986] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1657.588675][ T986] usb 6-1: Detected FT232H [ 1657.791547][ T986] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1657.942237][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1658.004462][ T986] ftdi_sio 6-1:0.0: GPIO initialisation failed: -5 [ 1658.033745][ T986] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1658.104574][ T25] usb 7-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 1658.105591][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1658.105620][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1658.105652][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.385500][ T5601] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1658.861969][T17324] usbhid 1-1:0.0: can't add hid device: -71 [ 1658.862073][T17324] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1658.889802][T17324] usb 1-1: USB disconnect, device number 31 [ 1659.014351][T18257] udevd[18257]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1659.029611][ T10] usb 9-1: USB disconnect, device number 8 [ 1659.059530][T18258] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1659.059555][T18258] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1659.060336][T18258] vhci_hcd vhci_hcd.0: Device attached [ 1659.109531][ T25] usbhid 7-1:1.0: can't add hid device: -71 [ 1659.109635][ T25] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1659.132869][ T25] usb 7-1: USB disconnect, device number 6 [ 1659.216198][ T31] audit: type=1400 audit(1792107949.713:703): avc: denied { listen } for pid=18256 comm="syz.0.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1659.216834][ T31] audit: type=1400 audit(1792107949.713:704): avc: denied { write } for pid=18256 comm="syz.0.3002" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1659.297320][T17110] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1659.352265][T17110] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 1659.834912][T18259] vhci_hcd: connection reset by peer [ 1659.856596][ T5932] vhci_hcd vhci_hcd.0: stop threads [ 1659.871616][ T5932] vhci_hcd vhci_hcd.0: release socket [ 1659.886030][ T5932] vhci_hcd vhci_hcd.0: disconnect device [ 1660.060538][ T5601] usb 6-1: USB disconnect, device number 18 [ 1660.132842][ T5601] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1660.133269][ T5601] ftdi_sio 6-1:0.0: device disconnected [ 1660.221130][T18271] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3005'. [ 1662.338485][T18293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1664.609218][T17110] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1664.918816][T18305] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1664.954248][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3016'. [ 1665.021404][T18309] netlink: 'syz.0.3016': attribute type 1 has an invalid length. [ 1665.073653][T18313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3016'. [ 1665.185099][T18319] FAULT_INJECTION: forcing a failure. [ 1665.185099][T18319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1665.185129][T18319] CPU: 1 UID: 0 PID: 18319 Comm: syz.6.3018 Not tainted syzkaller #0 PREEMPT(full) [ 1665.185150][T18319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1665.185161][T18319] Call Trace: [ 1665.185168][T18319] [ 1665.185175][T18319] dump_stack_lvl+0x100/0x190 [ 1665.185213][T18319] should_fail_ex.cold+0x5/0xa [ 1665.185239][T18319] _copy_from_user+0x2e/0xd0 [ 1665.185266][T18319] __sys_bpf+0x2f5/0x4a30 [ 1665.185294][T18319] ? __pfx___sys_bpf+0x10/0x10 [ 1665.185313][T18319] ? find_held_lock+0x2b/0x80 [ 1665.185340][T18319] ? get_pid_task+0xfc/0x250 [ 1665.185363][T18319] ? get_pid_task+0xfc/0x250 [ 1665.185394][T18319] ? find_held_lock+0x2b/0x80 [ 1665.185426][T18319] ? rcu_read_lock_any_held+0x6a/0x90 [ 1665.185455][T18319] ? find_held_lock+0x2b/0x80 [ 1665.185481][T18319] ? ksys_write+0x190/0x250 [ 1665.185503][T18319] ? ksys_write+0x190/0x250 [ 1665.185525][T18319] ? lock_acquire+0x1d1/0x380 [ 1665.185563][T18319] ? fput+0x7c/0x100 [ 1665.185589][T18319] ? ksys_write+0x1ac/0x250 [ 1665.185614][T18319] ? __x64_sys_bpf+0xce/0x140 [ 1665.185633][T18319] __x64_sys_bpf+0xce/0x140 [ 1665.185655][T18319] ? do_syscall_64+0xae/0x790 [ 1665.185682][T18319] do_syscall_64+0x123/0x790 [ 1665.185707][T18319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.185726][T18319] RIP: 0033:0x7fa1f8d9e559 [ 1665.185742][T18319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1665.185758][T18319] RSP: 002b:00007fa1f9cc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1665.185776][T18319] RAX: ffffffffffffffda RBX: 00007fa1f9025fa0 RCX: 00007fa1f8d9e559 [ 1665.185788][T18319] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 000000000000001c [ 1665.185799][T18319] RBP: 00007fa1f9cc0090 R08: 0000000000000000 R09: 0000000000000000 [ 1665.185810][T18319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1665.185820][T18319] R13: 00007fa1f9026038 R14: 00007fa1f9025fa0 R15: 00007ffea3623c88 [ 1665.185846][T18319] [ 1665.519749][T18310] vlan2: entered promiscuous mode [ 1665.519847][T18310] bridge0: entered promiscuous mode [ 1665.553507][T10207] IPVS: starting estimator thread 0... [ 1665.662625][T18322] IPVS: using max 75 ests per chain, 180000 per kthread [ 1665.812209][T17110] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1665.942415][ T31] audit: type=1400 audit(1792107956.423:705): avc: denied { create } for pid=18334 comm="syz.0.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1665.976446][T17110] usb 7-1: Using ep0 maxpacket: 16 [ 1665.983737][T17110] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1666.057133][T17110] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.057168][T17110] usb 7-1: Product: syz [ 1666.057194][T17110] usb 7-1: Manufacturer: syz [ 1666.057267][T17110] usb 7-1: SerialNumber: syz [ 1666.083447][ T5601] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1666.125664][T18337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3022'. [ 1666.243418][ T5601] usb 9-1: Using ep0 maxpacket: 8 [ 1666.245853][ T5601] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1666.278682][ T5601] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1666.278748][ T5601] usb 9-1: config 179 has no interface number 0 [ 1666.279044][ T5601] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1666.279100][ T5601] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1666.279132][ T5601] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1666.279160][ T5601] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1666.279188][ T5601] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1666.279259][ T5601] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.379911][T17110] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1666.379972][T17110] r8152-cfgselector 7-1: config 0 descriptor?? [ 1666.659605][T18333] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1667.048069][T17110] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1667.051602][T17110] r8152-cfgselector 7-1: No union descriptors [ 1667.959190][T17110] r8152-cfgselector 7-1: USB disconnect, device number 7 [ 1668.057484][ T986] usb 9-1: USB disconnect, device number 9 [ 1668.057484][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1668.057519][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1668.124257][T18345] netlink: 'syz.7.3024': attribute type 2 has an invalid length. [ 1668.166686][ T31] audit: type=1400 audit(1792107958.663:706): avc: denied { unmount } for pid=17621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1668.528600][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.528665][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.051346][T18358] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1669.343535][T18365] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1670.103960][T18372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3026'. [ 1670.106580][T18372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3026'. [ 1670.758206][ T31] audit: type=1400 audit(1792107961.253:707): avc: denied { bind } for pid=18383 comm="syz.6.3037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1670.819914][T18385] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3037'. [ 1670.851753][T18384] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1671.844845][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3036'. [ 1671.848004][T18394] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1672.579528][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1672.629223][T18406] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.3042'. [ 1672.629239][T18406] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3042'. [ 1672.722639][ T10] usb 7-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 1672.723816][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1672.727854][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.727877][ T10] usb 7-1: Product: syz [ 1672.727891][ T10] usb 7-1: Manufacturer: syz [ 1672.727904][ T10] usb 7-1: SerialNumber: syz [ 1672.785990][ T10] keyspan 7-1:1.0: Keyspan 1 port adapter converter detected [ 1672.786144][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 1672.788175][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 1672.788212][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 82 [ 1672.788248][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 1672.788280][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 1672.788311][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 83 [ 1672.788343][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 3 [ 1672.790298][ T10] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1672.922221][ T5601] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1672.935028][ T25] usb 7-1: USB disconnect, device number 8 [ 1672.998927][ T25] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1673.046877][ T25] keyspan 7-1:1.0: device disconnected [ 1673.706544][ T5601] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1673.742918][ T5601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1673.743277][ T5601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1673.748714][ T5601] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1673.748738][ T5601] usb 1-1: Manufacturer: syz [ 1673.866766][ T5601] usb 1-1: config 0 descriptor?? [ 1675.285192][ T31] audit: type=1400 audit(1792107965.663:708): avc: denied { setattr } for pid=18424 comm="syz.8.3047" name="sequencer2" dev="devtmpfs" ino=1284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1675.351251][T18429] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3048'. [ 1675.351994][T18429] tmpfs: Unknown parameter '0x0000000000000003' [ 1675.431248][T18431] geneve2: entered allmulticast mode [ 1675.562428][T17110] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1675.614432][T18433] tipc: Started in network mode [ 1675.614536][T18433] tipc: Node identity 0010000000000000002, cluster identity 4711 [ 1675.824068][T17110] usb 9-1: device descriptor read/64, error -71 [ 1676.148224][ T5601] usbhid 1-1:0.0: can't add hid device: -71 [ 1676.148325][ T5601] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1676.150394][ T5601] usb 1-1: USB disconnect, device number 32 [ 1676.272502][T17110] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1676.402189][T17110] usb 9-1: device descriptor read/64, error -71 [ 1676.512637][T17110] usb usb9-port1: attempt power cycle [ 1677.005568][T17110] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1677.024079][T17110] usb 9-1: device descriptor read/8, error -71 [ 1677.300904][T18444] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3053'. [ 1677.301580][T18444] tmpfs: Unknown parameter '0x0000000000000003' [ 1677.303624][T17110] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1677.401534][T17110] usb 9-1: device descriptor read/8, error -71 [ 1677.509312][T17110] usb usb9-port1: unable to enumerate USB device [ 1677.628633][T18447] tipc: Cannot configure node identity twice [ 1678.169698][T18454] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3056'. [ 1678.170203][T18454] tmpfs: Unknown parameter '0x0000000000000003' [ 1678.324390][T18451] FAULT_INJECTION: forcing a failure. [ 1678.324390][T18451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1678.324428][T18451] CPU: 1 UID: 0 PID: 18451 Comm: syz.7.3055 Not tainted syzkaller #0 PREEMPT(full) [ 1678.324449][T18451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1678.324461][T18451] Call Trace: [ 1678.324467][T18451] [ 1678.324474][T18451] dump_stack_lvl+0x100/0x190 [ 1678.324506][T18451] should_fail_ex.cold+0x5/0xa [ 1678.324533][T18451] _copy_from_user+0x2e/0xd0 [ 1678.324561][T18451] get_bitmap+0xde/0x1a0 [ 1678.324589][T18451] get_nodes+0x1df/0x210 [ 1678.324614][T18451] ? __pfx_get_nodes+0x10/0x10 [ 1678.324643][T18451] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1678.324673][T18451] ? __fget_files+0x21f/0x3d0 [ 1678.324703][T18451] kernel_migrate_pages+0xf2/0x700 [ 1678.324732][T18451] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 1678.324761][T18451] ? __pfx_ksys_write+0x10/0x10 [ 1678.324788][T18451] __x64_sys_migrate_pages+0x96/0x100 [ 1678.324806][T18451] ? lockdep_hardirqs_on+0x7d/0x110 [ 1678.324831][T18451] do_syscall_64+0x123/0x790 [ 1678.324859][T18451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.324878][T18451] RIP: 0033:0x7f6b2db9e559 [ 1678.324894][T18451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1678.324911][T18451] RSP: 002b:00007f6b2ea77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 1678.324929][T18451] RAX: ffffffffffffffda RBX: 00007f6b2de25fa0 RCX: 00007f6b2db9e559 [ 1678.324940][T18451] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 1678.324951][T18451] RBP: 00007f6b2ea77090 R08: 0000000000000000 R09: 0000000000000000 [ 1678.324962][T18451] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 1678.324973][T18451] R13: 00007f6b2de26038 R14: 00007f6b2de25fa0 R15: 00007ffc452ddf78 [ 1678.325004][T18451] [ 1678.872246][ T31] audit: type=1400 audit(1792107969.273:709): avc: denied { append } for pid=18459 comm="syz.6.3058" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1680.326718][T18473] xt_ecn: cannot match TCP bits for non-tcp packets [ 1680.463488][T18471] tipc: Started in network mode [ 1680.463507][T18471] tipc: Node identity 0010000000000000002, cluster identity 4711 [ 1681.005016][T18473] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3061'. [ 1682.848155][T18486] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3066'. [ 1682.848335][T18486] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3066'. [ 1684.248450][T18501] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3068'. [ 1684.249152][T18501] tmpfs: Unknown parameter '0x0000000000000003' [ 1684.580204][T18504] tipc: Cannot configure node identity twice [ 1685.181598][T18506] netlink: 'syz.0.3069': attribute type 12 has an invalid length. [ 1685.181614][T18506] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3069'. [ 1686.426845][T18525] fuse: Unknown parameter 'use00000000000000000000' [ 1686.529595][ T31] audit: type=1400 audit(1792107977.023:710): avc: denied { bind } for pid=18522 comm="syz.6.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1686.530762][ T31] audit: type=1400 audit(1792107977.023:711): avc: denied { node_bind } for pid=18522 comm="syz.6.3074" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1686.580063][T17110] kernel read not supported for file /video9 (pid: 17110 comm: kworker/0:0) [ 1688.560944][ T52] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1688.743896][ T25] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1688.982302][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 1688.983222][ T25] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1688.984099][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.984125][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1688.984156][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.099821][ T31] audit: type=1400 audit(1792107979.593:712): avc: denied { read } for pid=18546 comm="syz.5.3084" path="socket:[69441]" dev="sockfs" ino=69441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1689.211899][ T25] usb 1-1: config 0 descriptor?? [ 1689.693404][ T25] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 1689.693434][ T25] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 1689.962331][T18228] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1690.002264][ T31] audit: type=1400 audit(1792107980.423:713): avc: denied { mount } for pid=18560 comm="syz.8.3085" name="/" dev="rpc_pipefs" ino=69994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1690.113503][T18228] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1690.117037][T18228] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.117098][T18228] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.121595][T18228] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1690.121786][T18228] usb 7-1: Manufacturer: syz [ 1690.265844][T18228] usb 7-1: config 0 descriptor?? [ 1690.304766][ T25] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 1690.347431][ T25] ft260 0003:0403:6030.0003: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1690.553100][ T25] ft260 0003:0403:6030.0003: failed to retrieve status: -5, no wakeup [ 1690.592213][ T9726] Bluetooth: hci3: command 0x1003 tx timeout [ 1690.595162][ T52] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1691.258071][ T25] ft260 0003:0403:6030.0003: failed to retrieve status: -71 [ 1691.258408][ T25] ft260 0003:0403:6030.0003: failed to reset I2C controller: -71 [ 1691.676345][ T25] usb 1-1: USB disconnect, device number 33 [ 1692.978652][T18228] usbhid 7-1:0.0: can't add hid device: -71 [ 1692.978998][T18228] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1693.194462][T18228] usb 7-1: USB disconnect, device number 9 [ 1694.213926][ T31] audit: type=1400 audit(1792107984.713:714): avc: denied { create } for pid=18591 comm="syz.6.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1694.216979][ T31] audit: type=1400 audit(1792107984.713:715): avc: denied { bind } for pid=18591 comm="syz.6.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1694.217426][ T31] audit: type=1400 audit(1792107984.713:716): avc: denied { node_bind } for pid=18591 comm="syz.6.3097" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1694.335479][T18598] netlink: 'syz.6.3097': attribute type 15 has an invalid length. [ 1694.335496][T18598] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3097'. [ 1694.398032][T18598] FAULT_INJECTION: forcing a failure. [ 1694.398032][T18598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1694.398073][T18598] CPU: 1 UID: 0 PID: 18598 Comm: syz.6.3097 Not tainted syzkaller #0 PREEMPT(full) [ 1694.398094][T18598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1694.398103][T18598] Call Trace: [ 1694.398109][T18598] [ 1694.398117][T18598] dump_stack_lvl+0x100/0x190 [ 1694.398148][T18598] should_fail_ex.cold+0x5/0xa [ 1694.398175][T18598] _copy_from_user+0x2e/0xd0 [ 1694.398202][T18598] io_register_resize_rings+0x13b/0x14c0 [ 1694.398221][T18598] ? __lock_acquire+0x5c0/0x1f40 [ 1694.398248][T18598] ? __lock_acquire+0x5c0/0x1f40 [ 1694.398269][T18598] ? __pfx_io_register_resize_rings+0x10/0x10 [ 1694.398322][T18598] ? __fget_files+0x21f/0x3d0 [ 1694.398357][T18598] __do_sys_io_uring_register+0xb74/0x1c20 [ 1694.398380][T18598] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1694.398409][T18598] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 1694.398436][T18598] ? __fget_files+0x21f/0x3d0 [ 1694.398467][T18598] ? fput+0x7c/0x100 [ 1694.398494][T18598] ? ksys_write+0x1ac/0x250 [ 1694.398516][T18598] ? __pfx_ksys_write+0x10/0x10 [ 1694.398545][T18598] do_syscall_64+0x123/0x790 [ 1694.398573][T18598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.398591][T18598] RIP: 0033:0x7fa1f8d9e559 [ 1694.398606][T18598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1694.398623][T18598] RSP: 002b:00007fa1f9c9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1694.398642][T18598] RAX: ffffffffffffffda RBX: 00007fa1f9026090 RCX: 00007fa1f8d9e559 [ 1694.398654][T18598] RDX: 0000200000000cc0 RSI: 0000000000000021 RDI: 000000000000000c [ 1694.398665][T18598] RBP: 00007fa1f9c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1694.398675][T18598] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1694.398686][T18598] R13: 00007fa1f9026128 R14: 00007fa1f9026090 R15: 00007ffea3623c88 [ 1694.398712][T18598] [ 1694.435836][ T25] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1694.713476][ T25] usb 1-1: not running at top speed; connect to a high speed hub [ 1694.713497][ T25] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=ef.ca [ 1694.714206][ T25] usb 1-1: config 3 has an invalid interface number: 52 but max is 0 [ 1694.714220][ T25] usb 1-1: config 3 has no interface number 0 [ 1694.714239][ T25] usb 1-1: config 3 interface 52 has no altsetting 0 [ 1694.715639][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.715653][ T25] usb 1-1: Product: syz [ 1694.715662][ T25] usb 1-1: Manufacturer: syz [ 1694.715670][ T25] usb 1-1: SerialNumber: syz [ 1694.945412][ T25] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 1694.945599][ T25] usb 1-1: selecting invalid altsetting 0 [ 1694.950189][ T25] usb 1-1: USB disconnect, device number 34 [ 1694.981698][ T25] pvrusb2: Device being rendered inoperable [ 1695.117141][T18605] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 1696.238347][T18627] binder: Unknown parameter 'ÿÿÿÿ' [ 1697.122443][ T9726] Bluetooth: hci1: command 0x1003 tx timeout [ 1697.124411][ T52] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1697.508678][T18639] FAULT_INJECTION: forcing a failure. [ 1697.508678][T18639] name failslab, interval 1, probability 0, space 0, times 0 [ 1697.508710][T18639] CPU: 1 UID: 0 PID: 18639 Comm: syz.6.3111 Not tainted syzkaller #0 PREEMPT(full) [ 1697.508731][T18639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1697.508742][T18639] Call Trace: [ 1697.508749][T18639] [ 1697.508756][T18639] dump_stack_lvl+0x100/0x190 [ 1697.508790][T18639] should_fail_ex.cold+0x5/0xa [ 1697.508817][T18639] should_failslab+0xc2/0x120 [ 1697.508844][T18639] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1697.508872][T18639] ? security_file_alloc+0x34/0x2c0 [ 1697.508904][T18639] security_file_alloc+0x34/0x2c0 [ 1697.508932][T18639] init_file+0x95/0x480 [ 1697.508959][T18639] alloc_empty_file+0x79/0x1c0 [ 1697.508978][T18639] path_openat+0xdb/0x2440 [ 1697.509008][T18639] ? __pfx_path_openat+0x10/0x10 [ 1697.509042][T18639] do_file_open+0x20e/0x430 [ 1697.509069][T18639] ? __pfx_do_file_open+0x10/0x10 [ 1697.509112][T18639] ? _raw_spin_unlock+0x28/0x50 [ 1697.509135][T18639] ? alloc_fd+0x471/0x7a0 [ 1697.509168][T18639] do_sys_openat2+0x10f/0x1e0 [ 1697.509186][T18639] ? __pfx_do_sys_openat2+0x10/0x10 [ 1697.509202][T18639] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1697.509236][T18639] __x64_sys_openat+0x12d/0x210 [ 1697.509255][T18639] ? __pfx___x64_sys_openat+0x10/0x10 [ 1697.509282][T18639] do_syscall_64+0x123/0x790 [ 1697.509311][T18639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.509330][T18639] RIP: 0033:0x7fa1f8d5ed8e [ 1697.509345][T18639] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1697.509361][T18639] RSP: 002b:00007fa1f9cbfb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1697.509379][T18639] RAX: ffffffffffffffda RBX: 00007fa1f9cc06c0 RCX: 00007fa1f8d5ed8e [ 1697.509397][T18639] RDX: 0000000000141102 RSI: 00007fa1f9cbfc00 RDI: ffffffffffffff9c [ 1697.509409][T18639] RBP: 00007fa1f9cbfc00 R08: 0000000000000000 R09: 0000000000000000 [ 1697.509419][T18639] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1697.509430][T18639] R13: 00007fa1f9026038 R14: 00007fa1f9025fa0 R15: 00007ffea3623c88 [ 1697.509454][T18639] [ 1697.759006][T18643] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3113'. [ 1697.759692][T18643] tmpfs: Unknown parameter '0x0000000000000003' [ 1697.989469][T18646] tipc: Cannot configure node identity twice [ 1698.441311][ T31] audit: type=1800 audit(1792107988.933:717): pid=18645 uid=60929 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3112" name="syzkaller1" dev="sda1" ino=2057 res=0 errno=0 [ 1698.563618][T18649] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3114'. [ 1698.568337][T18649] tmpfs: Unknown parameter '0x0000000000000003' [ 1698.768903][ T31] audit: type=1400 audit(1792107989.263:718): avc: denied { read } for pid=18651 comm="syz.0.3115" laddr=::1 lport=60 faddr=::1 fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1698.859891][T18653] tipc: Cannot configure node identity twice [ 1700.709821][T18666] binder: Unknown parameter 'ÿÿÿÿ' [ 1701.004321][T18668] mac80211_hwsim hwsim18 96UZþ^: renamed from wlan0 (while UP) [ 1701.328095][T18672] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1701.522629][T17110] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1701.589957][ T31] audit: type=1800 audit(1792107992.063:719): pid=18687 uid=60929 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3125" name="syzkaller1" dev="sda1" ino=2057 res=0 errno=0 [ 1701.699683][T17110] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1701.700583][T17110] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1701.700609][T17110] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1701.701466][T17110] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1701.701487][T17110] usb 9-1: Manufacturer: syz [ 1701.753318][T17110] usb 9-1: config 0 descriptor?? [ 1702.237820][T18697] FAULT_INJECTION: forcing a failure. [ 1702.237820][T18697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1702.237851][T18697] CPU: 1 UID: 0 PID: 18697 Comm: syz.6.3128 Not tainted syzkaller #0 PREEMPT(full) [ 1702.237879][T18697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1702.237890][T18697] Call Trace: [ 1702.237896][T18697] [ 1702.237904][T18697] dump_stack_lvl+0x100/0x190 [ 1702.237934][T18697] should_fail_ex.cold+0x5/0xa [ 1702.237960][T18697] _copy_from_user+0x2e/0xd0 [ 1702.237986][T18697] copy_msghdr_from_user+0x9f/0x4c0 [ 1702.238012][T18697] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1702.238041][T18697] ? lock_acquire+0x1d1/0x380 [ 1702.238062][T18697] ? get_pid_task+0x2a/0x250 [ 1702.238088][T18697] ___sys_sendmsg+0x106/0x1e0 [ 1702.238114][T18697] ? __pfx____sys_sendmsg+0x10/0x10 [ 1702.238138][T18697] ? get_pid_task+0x106/0x250 [ 1702.238171][T18697] ? find_held_lock+0x2b/0x80 [ 1702.238213][T18697] __sys_sendmsg+0x160/0x210 [ 1702.238232][T18697] ? __pfx___sys_sendmsg+0x10/0x10 [ 1702.238264][T18697] do_syscall_64+0x123/0x790 [ 1702.238292][T18697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.238310][T18697] RIP: 0033:0x7fa1f8d9e559 [ 1702.238326][T18697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.238343][T18697] RSP: 002b:00007fa1f9c7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1702.238360][T18697] RAX: ffffffffffffffda RBX: 00007fa1f9026180 RCX: 00007fa1f8d9e559 [ 1702.238371][T18697] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000006 [ 1702.238383][T18697] RBP: 00007fa1f9c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1702.238393][T18697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1702.238404][T18697] R13: 00007fa1f9026218 R14: 00007fa1f9026180 R15: 00007ffea3623c88 [ 1702.238429][T18697] [ 1703.091313][ T52] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1703.698148][ T31] audit: type=1400 audit(1792107994.193:720): avc: denied { read write } for pid=18702 comm="syz.6.3129" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1703.698509][ T31] audit: type=1400 audit(1792107994.193:721): avc: denied { open } for pid=18702 comm="syz.6.3129" path="/267/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1703.756871][ T31] audit: type=1400 audit(1792107994.253:722): avc: denied { ioctl } for pid=18702 comm="syz.6.3129" path="/267/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1703.927659][ T31] audit: type=1400 audit(1792107994.413:723): avc: denied { connect } for pid=18706 comm="syz.7.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1704.746862][T17110] usbhid 9-1:0.0: can't add hid device: -71 [ 1704.746951][T17110] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1704.749082][T17110] usb 9-1: USB disconnect, device number 14 [ 1704.750176][T18689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3126'. [ 1704.750188][T18689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3126'. [ 1705.240954][T18720] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3135'. [ 1705.250767][T18720] tmpfs: Unknown parameter '0x0000000000000003' [ 1705.453414][T18724] tipc: Cannot configure node identity twice [ 1708.344313][T18748] binder: Unknown parameter 'ÿÿÿÿ' [ 1708.361916][T18746] FAULT_INJECTION: forcing a failure. [ 1708.361916][T18746] name failslab, interval 1, probability 0, space 0, times 0 [ 1708.361944][T18746] CPU: 0 UID: 0 PID: 18746 Comm: syz.6.3142 Not tainted syzkaller #0 PREEMPT(full) [ 1708.361965][T18746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1708.361975][T18746] Call Trace: [ 1708.361981][T18746] [ 1708.361989][T18746] dump_stack_lvl+0x100/0x190 [ 1708.362020][T18746] should_fail_ex.cold+0x5/0xa [ 1708.362045][T18746] should_failslab+0xc2/0x120 [ 1708.362074][T18746] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1708.362099][T18746] ? alloc_empty_file+0x5b/0x1c0 [ 1708.362121][T18746] alloc_empty_file+0x5b/0x1c0 [ 1708.362139][T18746] dentry_open+0x46/0xd0 [ 1708.362166][T18746] pidfs_alloc_file+0x18e/0x290 [ 1708.362192][T18746] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 1708.362226][T18746] pidfd_prepare+0x107/0x1b0 [ 1708.362258][T18746] __x64_sys_pidfd_open+0x105/0x1a0 [ 1708.362286][T18746] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 1708.362318][T18746] do_syscall_64+0x123/0x790 [ 1708.362346][T18746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.362366][T18746] RIP: 0033:0x7fa1f8d9e559 [ 1708.362382][T18746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1708.362398][T18746] RSP: 002b:00007fa1f9cc0018 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 1708.362417][T18746] RAX: ffffffffffffffda RBX: 00007fa1f9025fa0 RCX: 00007fa1f8d9e559 [ 1708.362430][T18746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000003e9 [ 1708.362440][T18746] RBP: 00007fa1f8e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1708.362452][T18746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1708.362462][T18746] R13: 00007fa1f9026038 R14: 00007fa1f9025fa0 R15: 00007ffea3623c88 [ 1708.362486][T18746] [ 1708.432596][ T31] audit: type=1400 audit(1792107998.933:724): avc: denied { name_connect } for pid=18745 comm="syz.6.3142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1708.632637][T18228] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1708.717185][T18755] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3144'. [ 1708.784560][ T31] audit: type=1800 audit(1792107999.283:725): pid=18759 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3136" name="syzkaller1" dev="sda1" ino=2057 res=0 errno=0 [ 1708.796170][T18228] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1708.803530][T18228] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.803560][T18228] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1708.811651][T18228] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1708.811677][T18228] usb 9-1: Manufacturer: syz [ 1708.829392][T18228] usb 9-1: config 0 descriptor?? [ 1709.175821][T18769] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3146'. [ 1709.176027][T18769] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3146'. [ 1709.910975][ T2342] pvrusb2: request_firmware fatal error with code=-110 [ 1709.910991][ T2342] pvrusb2: Failure uploading firmware1 [ 1709.910997][ T2342] pvrusb2: Device initialization was not successful. [ 1709.911004][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1709.911011][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1709.976798][T12994] pvrusb2: Device being rendered inoperable [ 1710.192234][ T9726] Bluetooth: hci1: command 0x1003 tx timeout [ 1710.194573][ T52] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1710.221224][ T31] audit: type=1400 audit(1792108000.693:726): avc: denied { block_suspend } for pid=18762 comm="syz.0.3145" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1710.796092][T18773] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input114 [ 1711.686298][T18780] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1711.686324][T18780] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1711.691996][T18780] vhci_hcd vhci_hcd.0: Device attached [ 1711.798609][T18781] vhci_hcd: connection closed [ 1711.804422][ T5934] vhci_hcd vhci_hcd.6: stop threads [ 1711.804445][ T5934] vhci_hcd vhci_hcd.6: release socket [ 1711.806636][ T5934] vhci_hcd vhci_hcd.6: disconnect device [ 1711.827897][T18228] usbhid 9-1:0.0: can't add hid device: -71 [ 1711.827991][T18228] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1711.830287][T18228] usb 9-1: USB disconnect, device number 15 [ 1711.866243][ T5601] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1711.916695][ T31] audit: type=1400 audit(1792108002.413:727): avc: denied { shutdown } for pid=18784 comm="syz.8.3150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1712.054609][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3151'. [ 1713.124827][ T31] audit: type=1800 audit(1792108003.593:728): pid=18803 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3156" name="syzkaller1" dev="sda1" ino=2057 res=0 errno=0 [ 1713.261909][T12994] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1714.237587][ T31] audit: type=1400 audit(1792108004.733:729): avc: denied { mounton } for pid=18809 comm="syz.7.3158" path="/273/config" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1714.265508][ T31] audit: type=1400 audit(1792108004.743:730): avc: denied { write } for pid=18809 comm="syz.7.3158" name="nullb" dev="configfs" ino=3486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1714.272791][T18813] netlink: 260 bytes leftover after parsing attributes in process `syz.7.3158'. [ 1714.290309][ T31] audit: type=1400 audit(1792108004.763:731): avc: denied { connect } for pid=18809 comm="syz.7.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1714.290350][ T31] audit: type=1400 audit(1792108004.763:732): avc: denied { read } for pid=18809 comm="syz.7.3158" laddr=fe80::2445:bfff:fee0:1c1b lport=60780 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1714.290380][ T31] audit: type=1400 audit(1792108004.763:733): avc: denied { write } for pid=18809 comm="syz.7.3158" laddr=fe80::2445:bfff:fee0:1c1b lport=60780 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1714.290561][T12994] usb 9-1: Using ep0 maxpacket: 16 [ 1714.291240][T12994] usb 9-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1714.375703][T12994] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 1714.375748][T12994] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.413333][T12994] usb 9-1: config 0 descriptor?? [ 1714.582529][ T5601] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1714.624211][T18797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.624548][T18797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.630408][T18797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.630808][T18797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.734411][ T5601] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1714.735303][ T5601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1714.735330][ T5601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1714.736261][ T5601] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1714.736288][ T5601] usb 7-1: Manufacturer: syz [ 1714.741386][ T5601] usb 7-1: config 0 descriptor?? [ 1714.858886][T12994] apple 0003:05AC:027D.0004: unknown main item tag 0x0 [ 1714.858918][T12994] apple 0003:05AC:027D.0004: unknown main item tag 0x0 [ 1714.858938][T12994] apple 0003:05AC:027D.0004: unknown main item tag 0x0 [ 1714.858957][T12994] apple 0003:05AC:027D.0004: unknown main item tag 0x0 [ 1714.858976][T12994] apple 0003:05AC:027D.0004: unknown main item tag 0x0 [ 1714.858995][T12994] apple 0003:05AC:027D.0004: unknown main item tag 0x0 [ 1714.859013][T12994] apple 0003:05AC:027D.0004: unknown main item tag 0x0 [ 1714.859031][T12994] apple 0003:05AC:027D.0004: unknown main item tag 0x0 [ 1714.859049][T12994] apple 0003:05AC:027D.0004: unknown main item tag 0x0 [ 1714.859068][T12994] apple 0003:05AC:027D.0004: unknown main item tag 0x0 [ 1714.859966][T12994] apple 0003:05AC:027D.0004: reserved main item tag 0xe [ 1714.883577][T18823] binder: Unknown parameter 'ÿÿÿÿ' [ 1714.951712][T12994] apple 0003:05AC:027D.0004: hidraw0: USB HID v7e.ff Device [HID 05ac:027d] on usb-dummy_hcd.8-1/input0 [ 1715.084708][T12994] usb 9-1: USB disconnect, device number 16 [ 1715.147222][T18826] fido_id[18826]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1715.795275][T18835] fuse: Bad value for 'fd' [ 1716.723655][T18831] Can't find ip_set type hash [ 1717.410977][ T5601] usbhid 7-1:0.0: can't add hid device: -71 [ 1717.411067][ T5601] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1717.428173][ T5601] usb 7-1: USB disconnect, device number 10 [ 1718.690534][T18862] binder: Unknown parameter 'ÿÿÿÿ' [ 1719.073439][T18871] fuse: Unknown parameter '0x0000000000000003' [ 1719.185960][T18873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1719.185984][T18873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1719.207698][T18873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1719.207722][T18873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1720.243151][T18886] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3178'. [ 1720.243661][T18886] tmpfs: Unknown parameter '0x0000000000000003' [ 1721.152845][T18892] tipc: Cannot configure node identity twice [ 1721.373458][T18888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3170'. [ 1721.373474][T18888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3170'. [ 1721.830529][ T5601] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1722.012779][ T5601] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1722.013678][ T5601] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1722.013705][ T5601] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1722.014554][ T5601] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1722.014574][ T5601] usb 8-1: Manufacturer: syz [ 1722.016855][ T5601] usb 8-1: config 0 descriptor?? [ 1722.029896][T18897] lo speed is unknown, defaulting to 1000 [ 1722.029940][T18897] lo speed is unknown, defaulting to 1000 [ 1722.030508][T18897] lo speed is unknown, defaulting to 1000 [ 1722.031826][ T31] audit: type=1400 audit(1792108012.523:734): avc: denied { getopt } for pid=18893 comm="syz.6.3179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1722.035700][T18897] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1722.035732][T18897] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1722.035767][T18897] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1722.045260][T18897] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 1722.148203][T18897] lo speed is unknown, defaulting to 1000 [ 1722.157198][T18897] lo speed is unknown, defaulting to 1000 [ 1722.165779][T18897] lo speed is unknown, defaulting to 1000 [ 1722.173970][T18897] lo speed is unknown, defaulting to 1000 [ 1722.180599][T18897] lo speed is unknown, defaulting to 1000 [ 1723.137021][T18903] FAULT_INJECTION: forcing a failure. [ 1723.137021][T18903] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.137051][T18903] CPU: 0 UID: 0 PID: 18903 Comm: syz.0.3176 Not tainted syzkaller #0 PREEMPT(full) [ 1723.137071][T18903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1723.137083][T18903] Call Trace: [ 1723.137090][T18903] [ 1723.137097][T18903] dump_stack_lvl+0x100/0x190 [ 1723.137127][T18903] should_fail_ex.cold+0x5/0xa [ 1723.137159][T18903] should_failslab+0xc2/0x120 [ 1723.137185][T18903] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1723.137208][T18903] ? dst_alloc+0x99/0x1a0 [ 1723.137240][T18903] dst_alloc+0x99/0x1a0 [ 1723.137269][T18903] rt_dst_alloc+0x35/0x3a0 [ 1723.137293][T18903] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 1723.137329][T18903] ip_route_output_key_hash+0x118/0x2b0 [ 1723.137356][T18903] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1723.137388][T18903] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 1723.137415][T18903] ? tcp_sendmsg+0x2e/0x50 [ 1723.137446][T18903] tcp_v4_connect+0x86b/0x1b40 [ 1723.137480][T18903] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1723.137513][T18903] __inet_stream_connect+0x208/0xf90 [ 1723.137545][T18903] ? __pfx___inet_stream_connect+0x10/0x10 [ 1723.137569][T18903] ? kasan_save_track+0x14/0x30 [ 1723.137592][T18903] ? __kasan_kmalloc+0xaa/0xb0 [ 1723.137617][T18903] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1723.137636][T18903] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 1723.137668][T18903] tcp_sendmsg_fastopen+0x3ed/0x750 [ 1723.137700][T18903] tcp_sendmsg_locked+0x27da/0x4420 [ 1723.137732][T18903] ? __lock_acquire+0x5c0/0x1f40 [ 1723.137759][T18903] ? reacquire_held_locks+0xdd/0x1f0 [ 1723.137780][T18903] ? release_sock+0x21/0x280 [ 1723.137799][T18903] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1723.137825][T18903] ? lock_acquire+0x1d1/0x380 [ 1723.137846][T18903] ? do_raw_spin_lock+0x128/0x260 [ 1723.137870][T18903] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1723.137899][T18903] ? __local_bh_enable_ip+0xa5/0x120 [ 1723.137923][T18903] tcp_sendmsg+0x2e/0x50 [ 1723.137946][T18903] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1723.137971][T18903] inet_sendmsg+0xb9/0x140 [ 1723.137995][T18903] ____sys_sendmsg+0x9c9/0xbe0 [ 1723.138016][T18903] ? __pfx_inet_sendmsg+0x10/0x10 [ 1723.138043][T18903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1723.138071][T18903] ? lock_acquire+0x1d1/0x380 [ 1723.138091][T18903] ? get_pid_task+0x2a/0x250 [ 1723.138117][T18903] ___sys_sendmsg+0x190/0x1e0 [ 1723.138148][T18903] ? __pfx____sys_sendmsg+0x10/0x10 [ 1723.138171][T18903] ? get_pid_task+0x106/0x250 [ 1723.138204][T18903] ? find_held_lock+0x2b/0x80 [ 1723.138246][T18903] __sys_sendmsg+0x160/0x210 [ 1723.138266][T18903] ? __pfx___sys_sendmsg+0x10/0x10 [ 1723.138297][T18903] do_syscall_64+0x123/0x790 [ 1723.138325][T18903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.138345][T18903] RIP: 0033:0x7fcd6a59e559 [ 1723.138361][T18903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.138378][T18903] RSP: 002b:00007fcd6b397028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1723.138396][T18903] RAX: ffffffffffffffda RBX: 00007fcd6a825fa0 RCX: 00007fcd6a59e559 [ 1723.138407][T18903] RDX: 0000000020000811 RSI: 00002000000015c0 RDI: 0000000000000003 [ 1723.138418][T18903] RBP: 00007fcd6b397090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.138429][T18903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.138440][T18903] R13: 00007fcd6a826038 R14: 00007fcd6a825fa0 R15: 00007fff76a23588 [ 1723.138466][T18903] [ 1723.266662][T18906] binder: Unknown parameter 'ÿÿÿÿ' [ 1723.435996][T18911] FAULT_INJECTION: forcing a failure. [ 1723.435996][T18911] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.436043][T18911] CPU: 0 UID: 0 PID: 18911 Comm: syz.8.3184 Not tainted syzkaller #0 PREEMPT(full) [ 1723.436061][T18911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1723.436071][T18911] Call Trace: [ 1723.436076][T18911] [ 1723.436083][T18911] dump_stack_lvl+0x100/0x190 [ 1723.436111][T18911] should_fail_ex.cold+0x5/0xa [ 1723.436139][T18911] should_failslab+0xc2/0x120 [ 1723.436164][T18911] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1723.436185][T18911] ? security_file_alloc+0x34/0x2c0 [ 1723.436212][T18911] security_file_alloc+0x34/0x2c0 [ 1723.436235][T18911] init_file+0x95/0x480 [ 1723.436260][T18911] alloc_empty_file+0x79/0x1c0 [ 1723.436276][T18911] path_openat+0xdb/0x2440 [ 1723.436302][T18911] ? __pfx_path_openat+0x10/0x10 [ 1723.436329][T18911] do_file_open+0x20e/0x430 [ 1723.436353][T18911] ? __pfx_do_file_open+0x10/0x10 [ 1723.436389][T18911] ? _raw_spin_unlock+0x28/0x50 [ 1723.436408][T18911] ? alloc_fd+0x471/0x7a0 [ 1723.436437][T18911] do_sys_openat2+0x10f/0x1e0 [ 1723.436452][T18911] ? __pfx_do_sys_openat2+0x10/0x10 [ 1723.436468][T18911] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1723.436491][T18911] ? __fget_files+0x21f/0x3d0 [ 1723.436516][T18911] __x64_sys_openat+0x12d/0x210 [ 1723.436531][T18911] ? __pfx___x64_sys_openat+0x10/0x10 [ 1723.436546][T18911] ? ksys_write+0x1ac/0x250 [ 1723.436571][T18911] do_syscall_64+0x123/0x790 [ 1723.436595][T18911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.436611][T18911] RIP: 0033:0x7f3999d9e559 [ 1723.436625][T18911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.436640][T18911] RSP: 002b:00007f399ab80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1723.436657][T18911] RAX: ffffffffffffffda RBX: 00007f399a025fa0 RCX: 00007f3999d9e559 [ 1723.436667][T18911] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1723.436678][T18911] RBP: 00007f399ab80090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.436688][T18911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.436697][T18911] R13: 00007f399a026038 R14: 00007f399a025fa0 R15: 00007ffd26844a78 [ 1723.436719][T18911] [ 1723.768787][T18915] fuse: Unknown parameter '0x0000000000000003' [ 1724.186387][ T5601] usbhid 8-1:0.0: can't add hid device: -71 [ 1724.186477][ T5601] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1725.381931][ T5601] usb 8-1: USB disconnect, device number 10 [ 1725.441444][T18924] FAULT_INJECTION: forcing a failure. [ 1725.441444][T18924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.441474][T18924] CPU: 1 UID: 0 PID: 18924 Comm: syz.8.3188 Not tainted syzkaller #0 PREEMPT(full) [ 1725.441493][T18924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1725.441503][T18924] Call Trace: [ 1725.441509][T18924] [ 1725.441515][T18924] dump_stack_lvl+0x100/0x190 [ 1725.441546][T18924] should_fail_ex.cold+0x5/0xa [ 1725.441573][T18924] _copy_from_user+0x2e/0xd0 [ 1725.441597][T18924] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 1725.441621][T18924] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1725.441650][T18924] do_sock_getsockopt+0x530/0x6e0 [ 1725.441673][T18924] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1725.441705][T18924] ? __fget_files+0x34/0x3d0 [ 1725.441729][T18924] ? find_held_lock+0x2b/0x80 [ 1725.441761][T18924] ? __fget_files+0x21f/0x3d0 [ 1725.441790][T18924] __sys_getsockopt+0x148/0x260 [ 1725.441812][T18924] ? __x64_sys_getsockopt+0xbd/0x160 [ 1725.441827][T18924] __x64_sys_getsockopt+0xbd/0x160 [ 1725.441842][T18924] ? do_syscall_64+0xae/0x790 [ 1725.441866][T18924] ? lockdep_hardirqs_on+0x7d/0x110 [ 1725.441889][T18924] do_syscall_64+0x123/0x790 [ 1725.441914][T18924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.441931][T18924] RIP: 0033:0x7f3999d9e559 [ 1725.441945][T18924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1725.441961][T18924] RSP: 002b:00007f399ab80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1725.441978][T18924] RAX: ffffffffffffffda RBX: 00007f399a025fa0 RCX: 00007f3999d9e559 [ 1725.441989][T18924] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 1725.441999][T18924] RBP: 00007f399ab80090 R08: 0000200000000640 R09: 0000000000000000 [ 1725.442010][T18924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.442020][T18924] R13: 00007f399a026038 R14: 00007f399a025fa0 R15: 00007ffd26844a78 [ 1725.442044][T18924] [ 1725.683173][T18931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1725.683199][T18931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1725.712671][T18931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1725.712694][T18931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1726.729340][T17110] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1726.885810][T18944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1726.902312][T17110] usb 9-1: Using ep0 maxpacket: 32 [ 1726.903013][T17110] usb 9-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 1726.904048][T17110] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1726.904085][T17110] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.906245][T17110] usb 9-1: config 0 descriptor?? [ 1726.920786][T17110] usb 9-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 1726.998438][T17110] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1726.998824][T17110] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 1726.998851][T17110] usb 9-1: media controller created [ 1727.260752][T18937] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN NOPTI [ 1727.272863][T18937] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 1727.281372][T18937] CPU: 0 UID: 0 PID: 18937 Comm: syz.8.3193 Not tainted syzkaller #0 PREEMPT(full) [ 1727.290747][T18937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1727.300887][T18937] RIP: 0010:__mutex_lock+0x15d/0x1bd0 [ 1727.306276][T18937] Code: 08 84 d2 0f 85 62 14 00 00 44 8b 0d 7d d7 c4 10 45 85 c9 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 59 14 00 00 48 3b 5b 58 0f 85 88 07 00 00 bf 01 [ 1727.325916][T18937] RSP: 0018:ffffc900060477c0 EFLAGS: 00010206 [ 1727.331995][T18937] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 0000000000000001 [ 1727.339963][T18937] RDX: 0000000000000018 RSI: ffffffff8e3bd2c3 RDI: 00000000000000c0 [ 1727.347932][T18937] RBP: ffffc90006047930 R08: ffffffff884434a5 R09: 0000000000000000 [ 1727.355900][T18937] R10: ffffc90006047948 R11: 0000000000000001 R12: 0000000000000000 [ 1727.363891][T18937] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 1727.371858][T18937] FS: 00007f399ab806c0(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 1727.380813][T18937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1727.387425][T18937] CR2: 00007f3997ff3f60 CR3: 000000005a95a000 CR4: 00000000003526f0 [ 1727.395408][T18937] Call Trace: [ 1727.398688][T18937] [ 1727.401616][T18937] ? dvb_usbv2_generic_write+0x25/0x50 [ 1727.407079][T18937] ? __mutex_lock+0x8f4/0x1bd0 [ 1727.411873][T18937] ? mxl111sf_ctrl_msg+0xb8/0x2b0 [ 1727.416900][T18937] ? __pfx___schedule+0x10/0x10 [ 1727.421754][T18937] ? __pfx___mutex_lock+0x10/0x10 [ 1727.426782][T18937] ? __pfx___mutex_lock+0x10/0x10 [ 1727.431811][T18937] ? preempt_schedule_thunk+0x16/0x40 [ 1727.437205][T18937] ? preempt_schedule_common+0x3c/0xb0 [ 1727.442767][T18937] ? dvb_usbv2_generic_write+0x25/0x50 [ 1727.448231][T18937] dvb_usbv2_generic_write+0x25/0x50 [ 1727.453518][T18937] mxl111sf_ctrl_msg+0x179/0x2b0 [ 1727.458469][T18937] mxl111sf_write_reg+0x96/0x130 [ 1727.463427][T18937] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 1727.468992][T18937] mxl111sf_i2c_start+0x6e/0x220 [ 1727.473933][T18937] mxl111sf_i2c_xfer+0x178e/0x3240 [ 1727.479051][T18937] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1727.484951][T18937] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 1727.490844][T18937] ? rcu_is_watching+0x13/0xc0 [ 1727.495616][T18937] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 1727.501079][T18937] ? __pfx___schedule+0x10/0x10 [ 1727.505948][T18937] ? preempt_schedule_thunk+0x16/0x40 [ 1727.511356][T18937] __i2c_transfer+0x5d4/0x1740 [ 1727.516142][T18937] ? __pfx___i2c_transfer+0x10/0x10 [ 1727.521350][T18937] ? rt_mutex_slowtrylock+0x93/0x100 [ 1727.526637][T18937] i2c_transfer+0x158/0x380 [ 1727.531150][T18937] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 1727.536101][T18937] i2cdev_ioctl+0x19d/0x830 [ 1727.540612][T18937] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1727.545661][T18937] ? __x64_sys_ioctl+0xc3/0x210 [ 1727.550509][T18937] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1727.555540][T18937] __x64_sys_ioctl+0x18e/0x210 [ 1727.560325][T18937] do_syscall_64+0x123/0x790 [ 1727.564920][T18937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.570812][T18937] RIP: 0033:0x7f3999d9e559 [ 1727.575226][T18937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1727.594834][T18937] RSP: 002b:00007f399ab80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1727.603431][T18937] RAX: ffffffffffffffda RBX: 00007f399a025fa0 RCX: 00007f3999d9e559 [ 1727.611406][T18937] RDX: 0000200000000680 RSI: 0000000000000707 RDI: 0000000000000005 [ 1727.619376][T18937] RBP: 00007f3999e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.627344][T18937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1727.635315][T18937] R13: 00007f399a026038 R14: 00007f399a025fa0 R15: 00007ffd26844a78 [ 1727.643298][T18937] [ 1727.646312][T18937] Modules linked in: [ 1727.651197][T18937] ---[ end trace 0000000000000000 ]--- [ 1727.704566][T17110] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1727.867074][ T31] audit: type=1400 audit(1792108018.363:735): avc: denied { write } for pid=18935 comm="syz.8.3193" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1727.867218][ T31] audit: type=1400 audit(1792108018.363:736): avc: denied { open } for pid=18935 comm="syz.8.3193" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1727.867241][T18950] random: crng reseeded on system resumption [ 1727.962611][T18937] RIP: 0010:__mutex_lock+0x15d/0x1bd0 [ 1727.962649][T18937] Code: 08 84 d2 0f 85 62 14 00 00 44 8b 0d 7d d7 c4 10 45 85 c9 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 59 14 00 00 48 3b 5b 58 0f 85 88 07 00 00 bf 01 [ 1727.962663][T18937] RSP: 0018:ffffc900060477c0 EFLAGS: 00010206 [ 1727.962677][T18937] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 0000000000000001 [ 1727.962687][T18937] RDX: 0000000000000018 RSI: ffffffff8e3bd2c3 RDI: 00000000000000c0 [ 1727.962696][T18937] RBP: ffffc90006047930 R08: ffffffff884434a5 R09: 0000000000000000 [ 1727.962706][T18937] R10: ffffc90006047948 R11: 0000000000000001 R12: 0000000000000000 [ 1727.962715][T18937] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 1727.962725][T18937] FS: 00007f399ab806c0(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 1727.962740][T18937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1727.962752][T18937] CR2: 00007ffea362402c CR3: 000000005a95a000 CR4: 00000000003526f0 [ 1727.962893][T18937] Kernel panic - not syncing: Fatal exception [ 1728.063347][T18937] Kernel Offset: disabled [ 1728.067666][T18937] Rebooting in 86400 seconds..