last executing test programs: 2m9.9277044s ago: executing program 0 (id=492): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) futex(0x0, 0x85, 0x2, 0x0, 0x0, 0x7fffff01) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@multicast, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x11, 0x1c, 0x66, 0x0, 0x4, 0x11, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x4e20, 0x4e24, 0x8}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000852}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x91, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 2m8.726039232s ago: executing program 0 (id=494): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) sendmmsg$inet(r0, 0x0, 0x0, 0x20008000) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f00000000c0), &(0x7f0000000200)=0x4) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x189042, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x2e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000001000100fd7f0000b627000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040002000000000000000000000000000000000000000000e8156b5b2e8706b69c09a01a7e8c30f60c77f214b928aaa370454178e04b8eec38e43b939341109e945be0c9224cf9dc720594adf5c4c15fd2e521d00c0000cf386f2894cb07950ff6bd1dca0af6b02e0ef811bf055d57eabf5882e6047b09b9e3cc1183ac7ee5922e99b53f8978262e84dd706adff3c7bbe9f84363744cbfc24130be002de6f08fdb90a7cc1ca20c4e565153ef6bbb7dc7bedf1c705f5e4432a5e3d5e24aa416756988e86a908daadf28e26d33f7f17958b92a6b4ca769d521599a65cf0be716261974fe4d6ae48fb0760269e9"], 0x50) r12 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x0) getsockopt$PNPIPE_INITSTATE(r12, 0x113, 0x4, &(0x7f00000001c0), &(0x7f0000000380)=0x4) 2m7.541849753s ago: executing program 0 (id=499): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x84}, 0x0) inotify_init() sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000003c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x1a, 0x0, 0x0) 2m4.660141058s ago: executing program 0 (id=510): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000180)={r0, r0, 0xc, 0xb4, &(0x7f0000000000)="b2252aadd86ceedc5a7729871b27ed1f96ecccb54a8a7c8baad1af1d2a553e91e80933237c67fc0d93df89900d7ceac36aa68f9aa95f5bdcb79ca2d5ebb8c20e2d06a15b1ac1defc2593f6d5dc2da76805801f12cb60680ab45d56b46cf8ed1d0f3ba635a984df2b442252f3bd4d0c3fe08758e347d4e5fc9e98ef126b138199fe3d10eef0c8481efa1a2530506168bfc692e493cf1839f83515bbc1277e21fb2ad073d1e80003df054bf8db437ff241590cacdc", 0x6, 0x9, 0x97d3, 0x7330, 0x2, 0x0, 0x7fffffff, 'syz1\x00'}) r2 = gettid() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1a010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x44000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) writev(r4, &(0x7f0000000640)=[{&(0x7f0000000400)='xWj', 0x3}], 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc046}, 0x20044000) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r5 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) fcntl$setlease(r0, 0x400, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 2m4.245759488s ago: executing program 0 (id=511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x3f48, 0xe, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2474, 0x3, 0x0, 0x1, [{0x2220, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc, 0x1, "5b1aac827e39392b"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_DATA={0x112c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd2, 0x1, "d64e3fe5c4e982c7a30639f6b63d6340a1db368fcab58b234486d52d8cc578ba8fb4aaae3d654412bd4a39b54832c835831ec6d462d2c3f4eafe75f609fdc05caad06d59608d33eed0f492ede1b2aacc78ca488c1b8c756a43e1a0f9e02d227145036904075128da23e50307cd753d2d8ad5904971316ec7973d72174bba9b875bde30a9225edbba8ad41aca95ff2c24f27e79ffe57a3dea1a3ae3cfbf32a445c7e985db8a51a95c86f7c5394ec9c06669a5d5184198850898c40d979ab0a525a42429433669c6ab84e5308cd3e6"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x4}, {0x24c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_ELEM_DATA={0x200, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa9, 0x1, "cbfba811573b80c27e12d0b7e3109452934d44e180d716d404c89ae05271d9a007c7084ad7039ae14718233eb2366568e3e236e5309aaf4370da0a29069068f8bbc671e91f7b6fa04f8c0404486615df15ba1e949bd8468d93911f70b9a98cbddc7e22757519155ed0799d39c1433f8fd23b83844ef45a8870ca2ba95bb4f416e0ce5d052697ff50ccdf0229ffedd185edbb986c94ffa24022449a942927b9f065644e4d1a"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x42, 0x1, "5a18c10207657b5226cd2f52b44c04a3160c540c562bb0817b2aea92fb09e72c144474d2396b8b737b75ef0f86204b7a07cdaa856cab83676b9f9dbc69e6"}, @NFTA_DATA_VALUE={0xe3, 0x1, "41e63265837b016f09ff2357f3d5660dcc7e374575bf78a12f03e6c182d0cba6cdc66070fc756295e8b8f2038f0a8e30e052fd7e7b570943b65fcc935f695242c9c0f45cf300139db2f059b7e6616be3ad6f3584b879fd20895d45bb5bc23d73e91b6af2f4c43f4cfd9a0cd3adaa0f82b25f570c7be27fd5fb9e47a759a35b13a8a529ee579fafc306dd34fd43eb3564bf92a044d2e63014eed2ab297ed9049e3c6e1263b09587d6ba6abb5745e530da6e73f1b7d241b1cf7dfbfc9f4aa14b54464cebbb5630628555c23859a12f68ee101fed00a7f0e4d83a1166a77a993c"}]}, @NFTA_SET_ELEM_USERDATA={0x23, 0x6, 0x1, 0x0, "19c12cf2be178a8190b3851292387ff2d14e94a1f586e0816f658e8b75f179"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a7c, 0x3, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x92, 0x6, 0x1, 0x0, "f20fae2dbb212305ebc7b6081422e8641381a405f1469360e2947130cdbb65347e8dc2a75e5880c428d43548563d09559727cda1585ca82183e3caa782f01aea8ddc65e875749d4647e4bdc317f9f3e817adee900437b569e29a780d43d17fc7832f4c4ad090c2af366347c43fdca97e3b762f55a33f68c35a3eb8b0b2ce56fa0617cfa6ace822802d8222949f9b"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x38, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x4}]}]}, {0x1988, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x10e8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc5, 0x1, "a8cd1a5709647583c042fe410b226f6ea4d7a63176cb0d1559e4a29290c39163d29aa9e2cd7cd81c96d3476ff133757719cd58dd8deb65e4d2dba3022a4a45e62780f2b59d6005eb640634c932b2b5d23766d6faafc80f96b71821e3d71cf798ca16bbf290da76e75ab11121fb3d8a5ae1407fb753a514781d2c693cbda90b09e19117d4675a3b515f6eafb42c36b9b405c3cdb04c0c7b1fa3867c50939aa669241ae38c655d6612665bc15008595e244b892bbe1e1e752a7b37fbaf16cf7f5fa3"}, @NFTA_DATA_VALUE={0x1004, 0x1, "c09a233145114029ea1bfbebac431bd2b2aa563407aeaacc5d184ee8dea48f6f5cf6e437a5db0078e300c01890222582040a03ff9e80fcc7945a71caf3294ca9ea155fc39505152c426998b2f3921bca1dfd597e7160b26cdf56a1f74164908c3a0817fb2d142177167665d228d49eca6dbd8b5927f1619903038fbfd196c3c0a7c9c4c97cc899cd46d12cd60a267d093a9599ba2a881edb628fd6e29820980cafc4786f7aeac7731c529d5d168032687c84443698130bebb715026484a21b5c1c8d3f15ce4f3e4d11fb272478b7fbcb6c1e1ad4e333baf960135e4392d92141c476e090d2e7bb6847c181c2041048270d955676acdde5bf4799bf26720503dc3842742ae4c6c3bd1063da2da583be7360036ba2f9c9418d73baacbd9ae2a76296f186ffb34324da220158b6ab38e248200fc53a32acf2cf1f90e8e399bea54716a4a5712af5f048a021378fe811eba3e1e5f7b1701dab5e40fd01eefb1a1b47484d67ccba2b5a1a25405d8b1cf569418b41d28488b4404ff67d370afcaf395d2d2108c50804ca65da6b716248432738f00270b9bfba0a5b7613ec84e06f9c00c97c93dbc64df78c7f39350859642dae6593670a003e7b2b46b6fb7f2b92584fff4fcbb427cc898304846ee0f16f08ff2ef731413f1995247592edddc2d8bce72f7252e30695e88d30c7e958f35be8b7f9dd97c467eedf53335d7c7353de872f81bfa67871e9683fa18718767a18197bf965abb1e88dd2cd9fa17baf94ffbf0fd2cfb320cf2f82f69236885c0aa65dc7051d6ed6934de98dfe3ce4e41c089ff4ae7bd016438b0a171aa8bca601b833d0c34e9f5488fa754fec185cd8b3e364ab3d04173cc2b146957a3be8ad3217eccdf29e816f7a65f7b83273283c30ac65c6386f79785f882c244fb696c82d22313d673121a64504cb5fbf4c36658b94ed114e4fc506bfd4e74cc50fc6e016fb3ab9fe23fb053b78b9d6e22131776ce9f167b67c8e941f21b592a2ab892453c95dc60c8aa8f3a689658d8694434076b530b0c8f3c1ad09d9e6dbf6a168f8043fe2f77cc82d7d6b24714a1c07aa82798c67977b714d11ae2e61fba5d0ba93f3864703b3c6f53f8c7dd41f55a3ec9d1995743609397b790026dbe3c8c7c6f36690cb2b2eeca496538928e309f07a1b362be8223de6ad40be4eb6304f7fffe9f56430ac8a05f17cf4284b52b1dace2eac04946c123878831b4bb885b3c745025b7157c5afa9a61006033eb94f26f9828fd97a83be789e34b39f3f19ba8b2ad47413f485d5fda9ab2452584bb437992f86d36a48e10da34c9c364d6c80f7dc1f767737cef7450135236a322749c6fdc2fb3143830666efb6309593de1740ad4e6dd62a7ca9890117486070ac0fd9b686d38c278ae8144fb1f770ee40f8f8f68c839ded20b239ad806813355cefe3254968a040ab7310a3f3ca63b0f084520f03e7a63bcd2be27b4d4f2a59a7b2a14fe5264cd546527f7a1d0b1500d9a4c484dd0c2295a22e3a7aba92964b5075b5a588cb2377fa9e81d0aa2c3c1659abf2496e761ee3e1ffd5ab152e9da2e98eccf353c87c94b16c307e62665c68eddaca504946c6808ed2bee96111ed1858272e76da021a81299562ca764089f9d0f0d8820429eda180a12d4f31829c2d3d569e6f46dc1308a300a613ed372f6973f370de9be7b9a32d9681622b4611853a84ddcf8f02db2275d20f82c3e76affad6332742fd9e8fe352188d66a1b274ec6523f7cddfad29c63eb220160a07584c062a6a1e3a805ca8fbb09bb95b6c3cfae8c2f5d822171af3c70783f6c554f60fa6bb6c43c44a25a3ecf6f16df6c84399312b5c97cecd80ef14aba779b6f05bcfb533bc5a3af8312e1d1fb7320a671a2876de804fa923cd35e96efe88493797142f2deaea9c8ad1af3c3ccff3bcf9d8733605575c2fbdeb65f524ce75943909947b9485fe7da107f487761700adf3b7cbe90c6676adfbbfc89c74d37ea87edd1e11fed22dd6acd46b01639f81eff696d03c06af3b9301210de664f6d0d8038cd7cbd558864ab0cc092a8f223081583811a4dc29f8b9f7c26b6660f057e76fe963901cadf2a0159a0d21f791f89c725244fd35db40409536bbdaec0bd890a5b4108517c13f0f0ef58726095cd26b2f8c139f7fcd527b6124dab9d5f5657cb043050a5684ed4f9593fa68171ae63d78877aac16978bf6e882561a5bf264675ff6251d3bf0337521755b77b4bd1bffbe0b1ccd509c1992fd70dfaf621ad6a9195b19b8064758898805d8697436f5098c9d661251827164a08598d0467c0ca9f808e0b8570585c6936abe142ce9a37849d384be9092e8634af57d2c8f27f7b20e014218214a3738d745d2ac44207ca80d33e4796c476ed00e1c8e431e7e3255b16c318f509d96ad813f30fb412649cab22225b49b1a950e140be2cc2265589647e705be49e0ce6511f0af8744f70166c8f56be6877a5e24483833634e9f06012c1f514275662def2aad30deafef23f26379997a6c1c3f004f8935918748205551b6cb5aad697bce15a40e32d008a9c68513eb42d74f851af1cce12b5043595ced635dbdc359851a76cbe47ea7c29426ec3c6b4904f9dfe09ef7a40da7dab713580a0147277ec6a9ffa66c904b1b6632e61433dcbdde697f948bccdfed7b0c4a0f8c34217e9546cb9a54729fd1a462c4ed813a0c14fec45357727f59bb969093c40998b87afadde09469128ce3b1326ecc3688209870f36b060d2f41aacc69b44f2153025456e3e9b1ad58cb13122b2c2e24a236d6bcbd4488e72465c9b6ca72d446adca4a99883606088368d323135c4e03c00214b08eca14ea9d245ac3af7043d7076ac8a550faf8a339a6f2d08f0ca7fc4b57f1b0f92f002893a5c580c7278f3b456ed2f266efdc48a3b4b3b7c9888d736b978496136390710a6f3327e019bff8a3f7f0d9ef9ab50eeee8cd58dfcbaf2250839913aa2a5132a6d07a705339db0cb1731a4408eee6261dbd6a8a35e69f6b99811489fa37ceca504285a0982685eb1e8a61ab2e0f039ee3e3fac3b874d17a285ab8fa9c2f5df06ece82361bb2cb129e760c4863e5d8a2fa3416d7965eaee0d6e944848ddb51741884a7ba6a4bb9d5fe8e77f10a8b60de66a3889fd5f641b543a494d5bb946f5a8daf371fbc13351eecf93c6c7340af370b414f6d2f045658f54e6d22fcc32b73350280dae5215d901bf15c5bf9661ff796d144d77baca4284073b227856f1786f6581525363068d97babf5985e7a5e4113d4cc0f5b7959b4efd08967f07aebbf04d62a0c5e116f8331b578430b356430084f66349ea91f2bdf2b724efe37d2f8623d77d36a0beaf074d5e9b6f2c4d7820156cfae72b6b364772d8f495448781bb795058adf97ad5ab646ea80580fdbdd0d304b3f771d3a613df5c9e6b61fcbf4ca4427441095e82f37fbb44e1502fb327f0681265cf7ef265ba36fec2902dd8cb0920eddeaee58a0380e581b3e8d71ce1463a00dfd406fedb2ac6cd1609f072dae442e84e9e57285d6b249dba155e8e1ea6f4399e4a9a46f1af1e800bfcac32e90c6e7e000f31def0160393b03813c4e0018c3b339b157d5b0b4625fb6ff634f3931adbe9bbade073aa4caa611370c6042096a405154551b105258b2dcd75182a6dd9b86822fb0077f2a6a11ae06837f27e8094d689c152f955666071d102ff164530305b4d280169697c0c349f6db0c9f551e06d001f826587696d2d602ed6b27c6d786d601f1f8d35a1fe62930912bc07b5cdf035d1b08f24aed0df3e880d64c30582b493715ee592ecfb9817b2ebadd979d071fbfb838a2c10f5e686635a212e986e46037f4a0a975f778cb0f28fb3a1b1c34b48a59f2314c884242fd47d2009a143834732b7e7824478ae0643deb01a907d709cb6faae09fbce60aff4657b07c955f5cafbc42e5274a4be6987dbd52b79e7e4eafe3e4d855f4c706650554c2a7d32e0ee397466438a56cdb17cdc9e2b1d183a4ed6011bbcf8a863a80919a0f89192663966342045ccedc037c1e6cd3f64aca8ad878b545dc5d56e4d989b871a8b2ee6eb62c3110f1a26f6d2d07b6d2b93a7eb268fac09a48cf5622517dd164b48a443748eb73d25e0ee54d3444014ff3d622f03fb6e1c95cb2106114efa601fa87aae062d04cbe7a8de84368289915a264e6d45862e509db7dcde1646390e8556b0702fab03d1e9c8802134fe836f8d297f9ab139c7bce38bf5bb1432ae0804f95fbdc51e510392bdce0521eda55025bd98b556ee45974421b0daaac69083f28ed286ce1ea979694ddd1e90631b56e4192f2574bd617f64503734ec4152e5f6185896ca7501bf330612344782319b862b5d06e6ed149e2c11a160be2357c1e0146cb69276346d3f5ab2bec23627bf953130dc018058e43ec5d8ea6c6aabf23bbd64bbd98c78a258f1760e8111789d1456bfc9fb69bece58341695ed06c40f88067c6399060357564fed08d3ec1cfeadef4eb989c53fbd62b00dbccaeb6eaeeeb7a6842b037361c336e5016e484178e0b37e047059265a324819af863698cfc28b829b9547ef97cda9ec7b4cc6102f5f65c3b18fb2118a3a56f5e0500ab100dc0596dfbad0c7fc5de1ee88c526eeb5bed2ea948e75ad75b2639d0c8e2f516855a8712c26b5d3d8833fbac78d95736afdc200ce8252a8d68a5e346382ea844aee525f33a5bec8f8dfdcdde7277bf4f397b964a03b69981688b82b4209c4a33b3ccaaea4399ed597e3a4bfa8a49cd471525d84086c8d253d690dba61b227b12f89eb27fbd7c6aeab58e38441714840d76c22a14fba18d9fe01a461dc5ed65ea31b4637ae0270cf0159ae02c712c9a4f02da141ca399b21bf50ffb29512ed8d148f3f568720bde585895070457eb1b8ad129a60540cb758d02699a5329a0ad05b040f9a6a67336b3674583feb8002a4c3626976a82b42519423c20c129329dd5c7803a8373f47ef366a29abc825901fb03e3e3599da28ed5dc87fe7ffd7bf860e5e3980f0c29341951e90e7d38f17c0ab8fa415b7b2540570905f1ed00ec6a4f8c0ad332f7a8523919e0a806962065911736ded116d6c7aab84d498f219d584f9edf67729bf8c6d2bd356bd4d2fae14c8f8d47f05927f3619b8937f696e3420c60024e4522716078e8b462c4bc4ce7d9548b9109bb9384612fc8f187082c42e36efc4b86cc4bbd80d0514d9a95f8f72e4cf784d1e9c170ffb12fa0ec0eb698b85049a58d4416d08611902bd74cc3aac2346c01c570779a1244a613addaf2aa4f36b77563ae08559b1c29ca8264412a7e4b2c4d996d32502c36a8bee2cf245122ccadfcc0fae2e9aa7e311cbe0feaf278a4bc6bd31fd7f0452e678e576b4933f0d68e4c3619c4e8ab194ae805647183867c2dc3df14ae9ed73dd37406e0a27e682361140abffa2ecd31a7ddb6a971ff5045d845ec2e28b0f5ee894ebd073140636170a4da7e23469d88d725c5d18088b43cbd78b059f6c021f8e71634c7c81176a706901a5ba6658b959725b0cffe29f1d8901f366a4cfec91edc0aaae3549196ce8a8ecb559813125eed9773fec77b8c6f05465f4d55dd260c53056e26d02cbaeae7d1d86bd71aef2a0d2a3b35dbfdbdde389a3c46166ab726fd464709c7d69360e6dbbf31eb525f907cea2ac26f00111150dc61052ba835b55237906fda2b6c32bea72db06a3275b716d5300f6963540ce0ba906aacfeeeaa795a6ddcd8cc4b7c9a24edeefe2048da257bd63286c4152a8c838d018f51fb04a39e11a6017743d76"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY_END={0x78, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x72, 0x1, "0706bc9e09d1c17a87945c106193c445754da328d0d09131577572331c9f17e97c4cc84d98e00220b07545f2643d2da60f8621b3fac0d7e81977426ad2a4da5fcbbc316debc8618b9c6d290cb58f5b8ddad5b95922d42cb5f987cb91147070a5bd677d24814388a5b6837d869082"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}, @NFTA_SET_ELEM_USERDATA={0xbc, 0x6, 0x1, 0x0, "b1f01e09742c64c82189203e24715426f1d5ce798bcc2ac788702fccd8966f87853b78080ff3169f3a56802d3e6a811c3ada26e0eb73b33007ec640a721779af0a77e6fa565891074feedd356d8dcc60acc9fe02195572a6e14df260252d07fc26014ff31aca27788aedba49150683dbb528b8bd689b87f8192061078e1ebbfec734c538b91e0d24a8f26c0b10a4a1a12d2938ae40765a8126e0d8cbb94b5507d9c6ba3d12378654df58f0e34f1a4bbf64b84f312055e693"}, @NFTA_SET_ELEM_USERDATA={0xb9, 0x6, 0x1, 0x0, "a838e42a7f13f8fa264a1f883e9d20bbc57297277d9c8e8cadba2855e4e49aa0b33b7d486d1d91836317171acffa08a7ed3c2d84d33e175eade5dae22b3bf3869b10ddf52d819ac8f9e2f6634a54725985fb5adcd463f55e89b7fb005f2b9b291b16453bc24fe99e8b8db9c6113ada611e360359ffc680a208400cf9338afe465effc47deb41521f259fdc51d5a6f081b0bd7832da180c7d8b0e1d908a5b5d8fdd76ba900f55d3d9cefc05c7f95dc8e4cb2711742b"}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_ELEM_KEY={0x380, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xb2, 0x1, "df7c99a030e5013abf3a504d6c20be042f9a890184b18a3088469606fd93a4148c5c0c3437354efcc24e38cdffee46c75c1d4dfee0cee666cd0e621849fb5396501f6fffe4cde660d01436f7382213833ec691749b0ccfd87dc360439271444210364da1bda624a164860905b90c0a8f5f480a1b08852360c6a047c6a94755de3bfb7a14c00332a0dc82a7067cd59e142f5cb5fbb08380b344331bdc809b613e2bd19f8fcd506906a019831f105d"}, @NFTA_DATA_VALUE={0x29, 0x1, "c1c8769ecfa1bd331b68915e04ba3a574ecaedebae63d9fcb9a37389a4351d5effdd92bc48"}, @NFTA_DATA_VALUE={0x7a, 0x1, "58bebfe72133cee693cd2928298b41e0d5db4692b8d8d9bbbd65ceda56a769a6168b208381314ccd6b76775ae7970962671bea8d3d42d2122a736d7bc6a7ed469eddfa54d4568b8b50eac659cd8c5273fc0470ab267ff799064bf46f8db393e0acbc3ef7d7c78807cb904d225a137046721e8fbd8fbb"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xb6, 0x1, "901a2f917aeedc534c4c584d4e3708d97b20b71db005fef5f707f923e61b0e2bd81596863ff49c827c8f243612e0190955decaf59e64a51536ef1a9ff60b32d06317eb1d0a23351c088c7c35b05cb2b9a560d0262694e809c25e4929212474727079b7c5a92c14a3ab780713e01aa9bcfaa21fb445ddfe39466b59d60714881e25efb72fed74bce4ffb9d89b1ce541ea0cd6622430dd9e7fd093b7f1de866b0a15b86914688a97a6a4a05e06c40faa2d4e01"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, @NFTA_SET_ELEM_KEY_END={0x2d4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4b, 0x1, "054dbf47eb016e0595118b18334447e896fc94bc47086a3b521e4d57517b71770d10182143685190c39ac91758997ebc7598344a1de8b6f2650007db6f8dd30b776547f159f47a"}, @NFTA_DATA_VALUE={0xb8, 0x1, "6205494eb70b6f9e82e7d10879525ebb4ac0c0481a25a1e691aa6aafbec6416e1077f039107cf571c087e6576d349e430a2ce0c7072a377abc68ef6a96ed857d30f9670f86638f935f249df29910ebba57f057ea8cf89751edd4549bb0311220dc24545809284140defbd22e1d51792c039cb463ef0cd21872a542c4036a41110cff1baa1982a828730268b225b98a080002b01a8905dc5c5c9890d682fc450f3081f362caba185b682c981d16ce62f4ff48b26d"}, @NFTA_DATA_VALUE={0x9d, 0x1, "357f9f036cafd913b44c425a3a38d688db6535f18fda4ce180bc34ac112868d0a4570c015da99284df27e77142fa42f1b8ae4c17af919c4c0fd6a52aaf38fa3c033fbe4d561378674f2b2e82f8f758ea7283d0106d8ec38edd5fe43d4b633b0564602cb0653ed454169f120fc3058ba7e159ca5dbc4ca0e1da07252d8619a7dd8f73d3a3e5fbf6c3d140972d50cb62c62b4db4c00fa9f2a36a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x70, 0x1, "9deb756df9665d80830ee844b1d5ac24daf3a18553cd765783ae8401e0b04b6126b734532c571c6a7b22e1b556cb5c57733b704b6fcf9a428f7aae1272cf013a378889874545de9d17d4277572ae3bf121ed35ea90a4780a496858683bc6255c051eab27cf1ebad5d98636f5"}]}]}]}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}, @NFT_MSG_DELTABLE={0x284, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x9b, 0x6, "036a30fc9d9dff6d6fd6d010b45d639d71c7217847dc09738614a2f554610baff725ae448141c3b5759ec290935668588605caed2372cd64850c2d946490734998fa2e951d10cab792d27352a2da32fc9deba945abd3d900ddd0c28bda1e2d68b98080df2fb7626d2742b539008b9ad65f3899259508d937f9ce973c8fdcc46f15e2b0b376ff13a0364383952b7aa15a88471f53b4cd56"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x8c, 0x6, "4d277406ee0a024aea7602221ee8e5b57e9af9f6330ac8593f9189d33f9f0b8c90cb0d43d4faaa59dd67adb2175b9542fd995df1a971d7773bf85ee493747b0bb205c127c506f494baf208e97b72212f28a8e84d70e4248d2934a429e1f23ee00b9ad7d02c5cf83e9ac96f771109466729f89bd85d9ff8111ca068abd21b80fea8f611928f003e68"}, @NFTA_TABLE_USERDATA={0x7c, 0x6, "82d682f288f114c17f472dd9c51e2b6b347874b13e93a33d1e47d0d7d9cd099950cf805681f3f9116e4a46bb19de2779e63daf3b71566bf38ae524658e77e48c669bec8c88bbfaae4888f1027ba4680e08cfe17b3681ec9a4ef283edddcad3b6efedf75cd19c1f176ff4779417d6654c0ecf5c5bc9384244"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x86, 0x6, "49d9eb764870aa35cde8d07336a7921763afa553aee95aa620f31cea985b6194958754bfd369bf46db24abdc809dd2cfb25be1caa0682a54b9ee1f296cd3ec3a2d7d71c00e6248b4621b174db66087cd8e5d9c146aee9eadc4e858c4db9ced06f1f31db3ddb6bf909aec718be0bf95d95f7a91adc7ca96646e898ed3f9c45dc0dc30"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x4378}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffc, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @remote}}}}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0xd) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 2m2.23020452s ago: executing program 0 (id=515): prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) r0 = gettid() open(0x0, 0x1e5240, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) tkill(r0, 0x1b) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8004, 0x0, 0xb49, 0x1fffffffffff, 0x6, 0x8, 0xe10}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x11100, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0xe00, 0x0) (fail_nth: 11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m46.811391911s ago: executing program 32 (id=515): prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) r0 = gettid() open(0x0, 0x1e5240, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) tkill(r0, 0x1b) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8004, 0x0, 0xb49, 0x1fffffffffff, 0x6, 0x8, 0xe10}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x11100, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0xe00, 0x0) (fail_nth: 11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 26.392303303s ago: executing program 4 (id=819): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_usb_connect(0x2, 0x3b, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010102a39ab910b80c0bc9ae0d01020301090229000101f8400409048afc0101033e080724010205050009050c02"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000003c0)={r3, 0x2000005, {0x0, 0x0, 0x0, 0xb8f6, 0xcdb1, 0x0, 0x5, 0x20, 0x1c, "45a2d0c3e435a5a47e6ebeb77f90ee067fe37829b114a40153ed95ad21a0f30368f5494262a913bdb652f054acb739cbb967e3d5b46de36f35a90434d3995950", "5728a7d98c29276bce17a231fdd0fdffffff880ae9ffffebeadb7784d60f4b060000f1204fbab9b4b77e32a610d4545a29deb86adeb23b92f86ff5163fdaa64a", "50e3add9e23216ee809ded57f853f3da854d588a7b2d11391d59be26ab2527dc", [0x5, 0x4]}}) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r5, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240), 0x0, &(0x7f0000000280), 0x0, 0xe32fc555515638e2}, 0x38, 0x1) read$FUSE(r4, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000040)=0xf4240) (async) write$FUSE_LSEEK(r2, &(0x7f0000000180)={0x18, 0x0, r6, {0x8001}}, 0x18) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xb, 0xffff}, {0xe, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x583}]}}]}, 0x38}}, 0x0) (async) prctl$PR_SET_SECCOMP(0x41, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x81, 0x40, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4000000) 25.359889363s ago: executing program 1 (id=820): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000004c0)={0x80}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0xfffffffffffffdd0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x24, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4040010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 24.620347152s ago: executing program 1 (id=823): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) lsm_set_self_attr(0x65, &(0x7f0000000800)=ANY=[], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000240)=0x1e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r4 = epoll_create1(0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000180)={0xc0002000}) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x4, 0x40100000, 0x5, 0x0, 0x1, "362e851f84882fb90efa3fa665d2eb144970e2", 0x8, 0x81}) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r9}, 0x10) 24.5931416s ago: executing program 4 (id=824): syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x2, 0x4, 0xfff7}]}, 0x7, [{0x49, &(0x7f0000000280)=@string={0x49, 0x3, "6eb1a7d22590a4233600b7c42d64852a43100a08836d6459685f13669677230168c2cf6672329fdd78b6f3c30eeddfef3f5e5b789c4eb47104b28159c56e36e0f47548736ea43c"}}, {0x0, 0x0}, {0x6f, &(0x7f0000000340)=@string={0x6f, 0x3, "25907780018c2d11ae7906c9a1c902d1fee088a3bd408214528d702f9496eb5a6f61a94e9ee95b483adfe72cdf701945a8bda5e915378a6fe8fc134395f993e7af4406bbd6957c47e5c026a52b7a89f1753bf8fed232e5ef641965edbde928d7c57e49b0deb76d057775c5a526"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x401}}, {0x2, &(0x7f00000004c0)=@string={0x2}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x3801}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000010100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) landlock_restrict_self(0xffffffffffffffff, 0x0) getrusage(0x0, 0x0) getrusage(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140), 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000030701030000006a7f177453000000030000000c0002400bff7f0000000000420cffa3364dba4c6754b5d5585e"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 23.053786269s ago: executing program 1 (id=828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x11, 0x4, 0x4, 0x8}, 0x50) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x13, &(0x7f0000001c80)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000001100)={0x0, 0xaee2, 0x0, 0x3, 0x1f0}, &(0x7f0000001180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x4d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x48}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f00000004c0)={0x9, &(0x7f0000000ac0)=[{0x3bf5dd38, 0x37, &(0x7f0000000080)="3ad88cf8bce85ddf5edad3aa4eae4541d81482fe69bf4e8df49e2cb65979ede8dc52e60b3c0ee5b3f17517e9f60a24a7494720b07463be", 0x1}, {0x1, 0xfe, &(0x7f0000000700)="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", 0x1}, {0x0, 0xaa, &(0x7f00000001c0)="0b7dcb922303639775579c40026b09ab93d21656308cf1ea9273d24b2256a532dcee27123bb146abe1e07f8368204e22123456bafe706218535fffc65df6304f65e6a8e9c96beb466e8887d221f90b2c8768ef888979082dec85975d78f254bab992a16f5b3699dd18f36e72369db60585ef49f03ae00c7c8a7e37c61f07d3135c799b009f06fcfb05c0ac0f7bba46578bdf8b5570d6ad7200f062418bf77392454f3557827703c2658c", 0x1, 0x1}, {0x7fff, 0x3d, &(0x7f0000000300)="d3d428d0f908f783740fc62fdb56fdb1bb90f2b803ae940b465960161141373fa41590656d7bbf58583e672bef317c5b6ae52530c00c8e4db889af5d73", 0x0, 0x1}, {0x0, 0x47, &(0x7f00000003c0)="f6f6e9769b9abbd4ae9ea9a982eb9cf04b73c73da77d1150bc9c09eaff4d3ab19834da9382bf8515598f60e5f1b1a976f76b4848469f26ae0b2a68c6463e87332ed3569fbf887c", 0x1, 0x1}, {0x10000, 0x1000, &(0x7f0000000c80)="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"}, {0x1, 0xde, &(0x7f0000000800)="3a875872d9afc7157f0d57361adf278e06edc4d0916a3f7c47f386cd4a3f995871d6fa1ad9f19a52562189c79cd2c4f3d0a2a79328f027ee635ebe29dea451e89cf9db4c6f7a77c2f9712b6196f2eb1b5d31a91d3acd554a393549e1e0cd50ad8dfdd63a72513538e6b165df5f618eece7c72e360efb0107e3e43db14f823d2c867a018041448e6ee29cea19a57091752f7707d75537fd12c33dce1d73790ff9ec4d608576841d44e41602473fc33ffc2ed5195c115e0439ca3f9ddf980a42c214ac5871a2d4a3dfd1ef2458582ecf40fde9b70b0e80b96c4e861bac9a7b", 0x1}, {0x9, 0xb3, &(0x7f0000000900)="c330ffba2b3dc2ebd90a0b93095bb93492dc1b3ed4f4575a6e6c48981d11c0e5d8dfd5277d2fc4a35e6e56c06fe429f952f2b4c6b5e3962aa688b6d832d53151a1faaabd3f86cd364571553830736e512eb87b5d15b0aa17299e1125edd16a0709c2a9ae89f0f6233563485af8ea1d1a34a12448eece5b07024d9eb7ed55f1d1396920eb3169bd1ff3165b79d5596fcf8356888a5f75ba1b65ef38fbfed70648616bc2ad2a2c1fd985ee3ac78920f2db79b1e2"}, {0x0, 0xfd, &(0x7f00000009c0)="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", 0x0, 0x1}]}) 22.770819845s ago: executing program 4 (id=830): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$inet6_mptcp(0xa, 0x1, 0x106) 22.275757822s ago: executing program 3 (id=832): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_cancel(0x0, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x25, &(0x7f0000000040)=0x800000, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sync_file_range(r2, 0x80000002, 0x4, 0x7fb8e73d3af00af7) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) 22.054389254s ago: executing program 1 (id=833): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000540), 0x10) listen(r0, 0xb7) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x5) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/67, 0x43}], 0x1}, 0x40000142) 20.956933807s ago: executing program 4 (id=835): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0xe0000000) 20.864341262s ago: executing program 1 (id=836): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x2, 0x3f, &(0x7f0000000880)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x80, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0xe, 0x90, 0x19, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7b0e, 0xc0, 0x2}, {0x6, 0x24, 0x1a, 0x3, 0x25}, [@country_functional={0x12, 0x24, 0x7, 0x9, 0x3, [0x7ff, 0xfa, 0x2, 0x7, 0x8, 0x12e9]}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0xf6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x5, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x81, 0x9, 0x7f}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x310, 0x5, 0x3, 0x7, 0x20, 0x3}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x4, [{0x36, &(0x7f0000000740)=@string={0x36, 0x3, "81444a441f3c203c9dd6a0db834c80cb1e9ba18b3258da9937ae37c7102277aa41b8be4815babd81d598a95d91046c31a7357986"}}, {0x2a, &(0x7f0000000780)=@string={0x2a, 0x3, "b38b8eeef07563e16e0596ef37239c44f12f280fbdbc3087783e91995930c148067a03ac610f3257"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x424}}, {0x4e, &(0x7f0000000800)=@string={0x4e, 0x3, "d5dcaa2c1e15509e97f9a00fce3ba32c8eb0018ced8e5570010260fad6a10db8e3567085d2589e83e94210f7cc9a4b67c7364a4c8d121b095639694ae21574662ad29f140012fd4732d6b6a0"}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x3, 0xe, 0x8, @local, @loopback, 0x1, 0x7800, 0xdafc, 0x1ff}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f003d1d4c0b39a3b52908a1d24d0d5587dbc646d0bfe8556ff438f776755e43cb865065fc0a8c7d7845af483b6d44f0b39ff10f00c41b2c09b703e26fcb733f6e324562cd0196f17b8cdd0475eead3ec1c4305e4d75e6001bd9b4063d079b917fdb85a6ee27c8aad9f60c6c6d5a1665684b7fc5c743df3485723ea85741c62b3b650000000001000000b1e454b5b26993ae39a01f032bfbda7b19541f3719cbbe3a6a4425446c320db383f11c373a0fa12ad70a6e4dce8fe12b"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r4, r5, 0x4, 0x3, 0x1}, 0x50) syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) msgget$private(0x0, 0x4) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/237}, 0xf5, 0x0, 0x2000) msgsnd(0x0, &(0x7f0000000100)={0x2}, 0x8, 0x0) 20.832382298s ago: executing program 4 (id=837): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x180000000000000) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/38, 0x26}], 0x1, &(0x7f0000000240)=""/214, 0xd6}}, {{&(0x7f00000006c0)=@ethernet={0x0, @random}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/100, 0x64}], 0x1, &(0x7f0000000500)=""/161, 0xa1}, 0x8}, {{&(0x7f0000000640)=@un=@abs, 0x80, &(0x7f0000001ec0), 0x0, &(0x7f00000005c0)=""/4, 0x4}, 0xa888}, {{&(0x7f0000000b40)=@alg, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/195, 0xc3}], 0x1, &(0x7f0000000d00)=""/4096, 0x1000}, 0x4f74}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) epoll_pwait2(r4, &(0x7f0000001d80)=[{}], 0x1, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cdafda, 0x103) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004340)=""/102376, 0x18fe8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x540, 0xd2) close(r6) socket$phonet_pipe(0x23, 0x5, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0xc1) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x11d) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0xffffff81) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 20.528613539s ago: executing program 3 (id=838): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) socket(0x28, 0xa, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0), 0x63, 0x24004040) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES64=r6, @ANYRES16=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:s{z \t0000000000000004093\x00'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 20.315687623s ago: executing program 2 (id=839): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) lsm_set_self_attr(0x65, &(0x7f0000000800)=ANY=[], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000240)=0x1e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r4 = epoll_create1(0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000180)={0xc0002000}) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x4, 0x40100000, 0x5, 0x0, 0x1, "362e851f84882fb90efa3fa665d2eb144970e2", 0x8, 0x81}) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r9}, 0x10) 19.645389497s ago: executing program 3 (id=840): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) sendmmsg$inet(r0, 0x0, 0x0, 0x20008000) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f00000000c0), &(0x7f0000000200)=0x4) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x189042, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x2e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb250500"], 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000001000100fd7f0000b627000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040002000000000000000000000000000000000000000000e8156b5b2e8706b69c09a01a7e8c30f60c77f214b928aaa370454178e04b8eec38e43b939341109e945be0c9224cf9dc720594adf5c4c15fd2e521d00c0000cf386f2894cb07950ff6bd1dca0af6b02e0ef811bf055d57eabf5882e6047b09b9e3cc1183ac7ee5922e99b53f8978262e84dd706adff3c7bbe9f84363744cbfc24130be002de6f08fdb90a7cc1ca20c4e565153ef6bbb7dc7bedf1c705f5e4432a5e3d5e24aa416756988e86a908daadf28e26d33f7f17958b92a6b4ca769d521599a65cf0be716261974fe4d6ae48fb0760269e9"], 0x50) r12 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x0) getsockopt$PNPIPE_INITSTATE(r12, 0x113, 0x4, &(0x7f00000001c0), &(0x7f0000000380)=0x4) 18.69234925s ago: executing program 3 (id=841): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r1 = fsopen(&(0x7f0000000280)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x18) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r2, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) close_range(r2, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f00000000c0)) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) 18.664212749s ago: executing program 4 (id=842): socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000140)=0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_open_dev$usbfs(0x0, 0x775, 0x8000) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f00000000c0)={0x2, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000180)={0x0, @aes128, 0x0, @desc4}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x60, 0x1e, 0x109, 0x100, 0x0, {}, [{0x4c, 0x1, [@m_mpls={0x48, 0x12, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x3}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_LABEL={0x8, 0x5, 0x41b06}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x60}, 0x1, 0x2b1e}, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 18.530119206s ago: executing program 2 (id=843): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r0, 0x1c243811) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x1015a, 0x10002, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$overlay(0x0, 0x0, 0x0, 0x1204011, &(0x7f00000011c0)={[], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 18.440313773s ago: executing program 3 (id=844): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), 0x0, 0x1}, 0x20) bind$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x2, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_secret(0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r6, 0x0, 0x0) write$vhost_msg(r6, &(0x7f0000000a40)={0x1, {&(0x7f0000000500)=""/82, 0xfffffea4, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f00000009c0)={0x2, 0x0, {&(0x7f00000007c0)=""/225, 0xe1, 0x0, 0x3, 0x2}}, 0x48) 17.770368602s ago: executing program 1 (id=845): r0 = socket$inet6(0xa, 0x3, 0x4) sendfile(r0, r0, &(0x7f00000000c0)=0x6, 0x8) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) prctl$PR_SET_THP_DISABLE(0x42, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f00000001c0)={0x8f, 0x0, 0xe}) 17.02274695s ago: executing program 2 (id=846): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x492492492492846, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = geteuid() mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x2000405, &(0x7f0000002780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r8, @ANYBLOB="2cd77102dde54ce0c53862ff72de50705f69643d", @ANYRESDEC=r9, @ANYBLOB=',max_read=0x0000000000000017,default_permissions,blksize=0x0000000000000400,blksize=0x0000000000000800,default_permissions,blksize=0x0000000000000a00,allow_other,allow_other,default_permissions,func=CREDS_CHECK,func=CREDS_CHECK,euid>', @ANYRESDEC=r10, @ANYBLOB=',seclabel,mask=^MAY_READ,\x00']) fcntl$setstatus(r6, 0x4, 0x42000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r11 = signalfd(r5, &(0x7f0000000040)={[0x4064]}, 0x8) ioctl$RTC_UIE_OFF(r11, 0x7004) 16.187932383s ago: executing program 3 (id=847): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, 0x0, 0x0) r2 = getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r3, r0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0xbac1, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000000c0), &(0x7f0000000600)) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001d40)=ANY=[@ANYBLOB="78030000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8], 0x378}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000001700)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000640)="4b69643ebc1fc82d9bfed8a2ed307d6da9acc3e25a49e8e548d174dea492671e037603cae01762e7bdb5f492057fd7f604cb3f86378d1bb0863ce56e228e24f469f084797aab48fed58856352c77c15ae0fcbd54ffc6ab05eef57901ad116a8152a409a30104d6cb9ed97a2d4dfbcfbe631fbdd0d290e58899634e1062cefb276fcf9ab0c32415f329e8450ede1b1bdc0f3f935674e532e28312f7b9bab43945c0f8ed727c06ce622ed97c35a8c256114c76362d345f2da63ee7ca182f221f76c13bf8", 0xc3}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f0000000740)="e95dec62c631f3c504b03e4cc5be4cf208ff0f539acfd2934b5b2bd60cb6ebe1720c7d2a2ec1c16f08f5ddf791b82a7ce31f6f7cb456e9e64f35a7f06c563c06a2b12f94efd457bf65576cff1ad053faa0bc51697cdfb58396a1f52597f020e095edcd9d9a9b16c8ef9b71c3bbc5ed0919f35c191fadeb1ac411443025f1ee96d27f83cce48af96c6cde1897dffe8e4e7ce228d4e4cb379f43851ae8d937169791561c42d251cf76909f0d976831a5f25b5e0dcdc395c794704e76f196c83e45ef160233eb1826a25275ace8d97aec", 0xcf}, {&(0x7f0000000840)="a2fb12f7d5d36d41b0505f5faf98156b7ddf807ce27087724d80822afe4b08ef8f45f637440a249de0f1149981922e573f2addb8dda8f1e801721bfde086bf7e013c07eb473f5ebc3ceca4eda3ce15b1754ba3954e3ac877dc718b0af5b2db04caf9e6d1178443d5b0a138bcfebcac544b8b45c2ef29c5325547ed6e16c034f80534e0dc33ea9e37c0dd21d33cdbb3637e57eb4101bc4d9dd965f05e6f104f27", 0xa0}], 0x4, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xffffffffffffffff}}}], 0x40, 0x2400c002}}, {{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000ac0)="1ba713559c05f249bb039505770e55db642c83d66942d6b3c42076dbc70329205345d796bc93b0ed34077f6ee8090fd5a7568e421c804449dbd464c3cf1919ac9e964c8fee25c9739377a0a76285ca292172d047572d952b75b8b5c2544c700a8a0ab4aa7b6f07f205d79eb103043adcbd0aacfe1426edca1c4e3af2029c5270883b499935498ec9f7cae83b8fe3dd7b82b89f2ef1e81652de2116945ec7d6795a55bb1d8fe6f3bef78aba1ff51ed551c797f1e668919869e74c41973674dc4ffb8d08d27a4f8133f71ea530726dbadfd23edc6ae0c5", 0xd6}], 0x1, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r6, r0]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r4, r4, r4, r10, r1, 0xffffffffffffffff, r8, r0, r9]}}], 0x98, 0x4004011}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0), 0x0, &(0x7f0000000f00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x18, 0x1, 0x1, [r8, r5]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r9, 0xffffffffffffffff]}}], 0xd8, 0x4000010}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001000)="8a461981b62491ba18a156df0ee10264f942e4ee43538041d8c5ca9f0595b9295506866700be9527beb37038e680344c76ef815365c14858aa6b0959f232ddf26e04455713f6c3deba2ed3b36de9224b84140c0452a81cafa30d0524ada59dc3720c3a2486ec4d61b7c648ce6f455b43a4cbc698c8b2ad384ded72fe4db2abf9e8c9dc70317774f8c8e194ec", 0x8c}, {&(0x7f0000001180)="8afe67af89d2b5fd7006e5b0c3a074077fca4f7857f48534a4bc6480513c9bfb7225a0e421aca1991d1310b25f9fb650b5702230aefde8f149ffe942aeac230eab902ab4332130e397a2808e93cfb2924fbe897627e4c4f35084082dcb6d16c7c97b8bd2f83dc2ea55e3d1b66f2b4bb66b97b6d0c9b8b3e7617ab6d6861ad9569940815c11b5cccb1cf7284323b6a9352ca01f2e3a058259f4290b45c57bb359cecac3efaba4e7e406eac48c07f28eb0d8cb80ed4a5bd6b4", 0xb8}, {&(0x7f00000014c0)="d61e961f10065939ef387508dc28fea9f2846c8a5232f61261c3cc83d154f17ec978a1a2974f19347fca8e9ee1110997b7f7a4b7e9ea4c6c7b2fdb814ba9cf464443be1fd9bc8da8e7408042575eb7f2a2ca8a1fbb3e27b6d8213dc730f4fcc18ec984b5e8abf672ef6e4c1f36a9b4c7e77977d4288a5bd1a97cb85eae6049b02ddfb1ddda26842de40c3bd0a62692f93d205bb4bef17eb0824e87c41fddfb0a169e8fa8e603f7fe9e2af8822427c07b592a891db3b84fc326c3cd6f76baec3fc435b55b8802fe89efa97524829c50c597ea7351519025d01b97325d0d4d90a5691c69bd129cdd429fcfccf9d13b6f9328bbe31275", 0xf5}], 0x3, &(0x7f00000015c0)=[@rights={{0x20, 0x1, 0x1, [r1, r8, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5]}}], 0x120, 0x80}}], 0x4, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56551, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x5, 0x8}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x13740f33}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xfffffff9}]}}]}, 0x54}}, 0x10) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) socket$kcm(0x10, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 15.964414967s ago: executing program 2 (id=848): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df0, 0x401, 0x0, 0x2b2, 0x0, r0}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r0, 0xffffffffffffffff, 0x0) 15.862818433s ago: executing program 2 (id=849): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xa}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r2 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000040)={0x0, 0x3, 0x12}) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x5, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136700b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]}) 15.82172751s ago: executing program 2 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x2004, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeea, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) writev(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xec}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000100001000000000000000000e900000a20000000000a01020000000000000000050000000900010073797a10000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000e0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x400) bind$netrom(r2, &(0x7f0000000180)={{0x3, @null, 0x7}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast]}, 0x48) 3.501510716s ago: executing program 33 (id=842): socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000140)=0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_open_dev$usbfs(0x0, 0x775, 0x8000) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f00000000c0)={0x2, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000180)={0x0, @aes128, 0x0, @desc4}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x60, 0x1e, 0x109, 0x100, 0x0, {}, [{0x4c, 0x1, [@m_mpls={0x48, 0x12, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x3}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_LABEL={0x8, 0x5, 0x41b06}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x60}, 0x1, 0x2b1e}, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 2.003749627s ago: executing program 34 (id=845): r0 = socket$inet6(0xa, 0x3, 0x4) sendfile(r0, r0, &(0x7f00000000c0)=0x6, 0x8) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) prctl$PR_SET_THP_DISABLE(0x42, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f00000001c0)={0x8f, 0x0, 0xe}) 1.002072451s ago: executing program 35 (id=847): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, 0x0, 0x0) r2 = getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r3, r0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0xbac1, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000000c0), &(0x7f0000000600)) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001d40)=ANY=[@ANYBLOB="78030000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8], 0x378}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000001700)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000640)="4b69643ebc1fc82d9bfed8a2ed307d6da9acc3e25a49e8e548d174dea492671e037603cae01762e7bdb5f492057fd7f604cb3f86378d1bb0863ce56e228e24f469f084797aab48fed58856352c77c15ae0fcbd54ffc6ab05eef57901ad116a8152a409a30104d6cb9ed97a2d4dfbcfbe631fbdd0d290e58899634e1062cefb276fcf9ab0c32415f329e8450ede1b1bdc0f3f935674e532e28312f7b9bab43945c0f8ed727c06ce622ed97c35a8c256114c76362d345f2da63ee7ca182f221f76c13bf8", 0xc3}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f0000000740)="e95dec62c631f3c504b03e4cc5be4cf208ff0f539acfd2934b5b2bd60cb6ebe1720c7d2a2ec1c16f08f5ddf791b82a7ce31f6f7cb456e9e64f35a7f06c563c06a2b12f94efd457bf65576cff1ad053faa0bc51697cdfb58396a1f52597f020e095edcd9d9a9b16c8ef9b71c3bbc5ed0919f35c191fadeb1ac411443025f1ee96d27f83cce48af96c6cde1897dffe8e4e7ce228d4e4cb379f43851ae8d937169791561c42d251cf76909f0d976831a5f25b5e0dcdc395c794704e76f196c83e45ef160233eb1826a25275ace8d97aec", 0xcf}, {&(0x7f0000000840)="a2fb12f7d5d36d41b0505f5faf98156b7ddf807ce27087724d80822afe4b08ef8f45f637440a249de0f1149981922e573f2addb8dda8f1e801721bfde086bf7e013c07eb473f5ebc3ceca4eda3ce15b1754ba3954e3ac877dc718b0af5b2db04caf9e6d1178443d5b0a138bcfebcac544b8b45c2ef29c5325547ed6e16c034f80534e0dc33ea9e37c0dd21d33cdbb3637e57eb4101bc4d9dd965f05e6f104f27", 0xa0}], 0x4, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xffffffffffffffff}}}], 0x40, 0x2400c002}}, {{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000ac0)="1ba713559c05f249bb039505770e55db642c83d66942d6b3c42076dbc70329205345d796bc93b0ed34077f6ee8090fd5a7568e421c804449dbd464c3cf1919ac9e964c8fee25c9739377a0a76285ca292172d047572d952b75b8b5c2544c700a8a0ab4aa7b6f07f205d79eb103043adcbd0aacfe1426edca1c4e3af2029c5270883b499935498ec9f7cae83b8fe3dd7b82b89f2ef1e81652de2116945ec7d6795a55bb1d8fe6f3bef78aba1ff51ed551c797f1e668919869e74c41973674dc4ffb8d08d27a4f8133f71ea530726dbadfd23edc6ae0c5", 0xd6}], 0x1, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r6, r0]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r4, r4, r4, r10, r1, 0xffffffffffffffff, r8, r0, r9]}}], 0x98, 0x4004011}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0), 0x0, &(0x7f0000000f00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x18, 0x1, 0x1, [r8, r5]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r9, 0xffffffffffffffff]}}], 0xd8, 0x4000010}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001000)="8a461981b62491ba18a156df0ee10264f942e4ee43538041d8c5ca9f0595b9295506866700be9527beb37038e680344c76ef815365c14858aa6b0959f232ddf26e04455713f6c3deba2ed3b36de9224b84140c0452a81cafa30d0524ada59dc3720c3a2486ec4d61b7c648ce6f455b43a4cbc698c8b2ad384ded72fe4db2abf9e8c9dc70317774f8c8e194ec", 0x8c}, {&(0x7f0000001180)="8afe67af89d2b5fd7006e5b0c3a074077fca4f7857f48534a4bc6480513c9bfb7225a0e421aca1991d1310b25f9fb650b5702230aefde8f149ffe942aeac230eab902ab4332130e397a2808e93cfb2924fbe897627e4c4f35084082dcb6d16c7c97b8bd2f83dc2ea55e3d1b66f2b4bb66b97b6d0c9b8b3e7617ab6d6861ad9569940815c11b5cccb1cf7284323b6a9352ca01f2e3a058259f4290b45c57bb359cecac3efaba4e7e406eac48c07f28eb0d8cb80ed4a5bd6b4", 0xb8}, {&(0x7f00000014c0)="d61e961f10065939ef387508dc28fea9f2846c8a5232f61261c3cc83d154f17ec978a1a2974f19347fca8e9ee1110997b7f7a4b7e9ea4c6c7b2fdb814ba9cf464443be1fd9bc8da8e7408042575eb7f2a2ca8a1fbb3e27b6d8213dc730f4fcc18ec984b5e8abf672ef6e4c1f36a9b4c7e77977d4288a5bd1a97cb85eae6049b02ddfb1ddda26842de40c3bd0a62692f93d205bb4bef17eb0824e87c41fddfb0a169e8fa8e603f7fe9e2af8822427c07b592a891db3b84fc326c3cd6f76baec3fc435b55b8802fe89efa97524829c50c597ea7351519025d01b97325d0d4d90a5691c69bd129cdd429fcfccf9d13b6f9328bbe31275", 0xf5}], 0x3, &(0x7f00000015c0)=[@rights={{0x20, 0x1, 0x1, [r1, r8, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5]}}], 0x120, 0x80}}], 0x4, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56551, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x5, 0x8}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x13740f33}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xfffffff9}]}}]}, 0x54}}, 0x10) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) socket$kcm(0x10, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 0s ago: executing program 36 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x2004, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeea, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) writev(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xec}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000100001000000000000000000e900000a20000000000a01020000000000000000050000000900010073797a10000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000e0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x400) bind$netrom(r2, &(0x7f0000000180)={{0x3, @null, 0x7}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast]}, 0x48) kernel console output (not intermixed with test programs): e [ 271.724071][ T8173] netlink: 'syz.4.482': attribute type 4 has an invalid length. [ 271.750160][ T9] usb 1-1: USB disconnect, device number 18 [ 271.853179][ T5962] lo speed is unknown, defaulting to 1000 [ 271.862191][ T5962] 3yz0: Port: 1 Link DOWN [ 271.985040][ T30] audit: type=1400 audit(1758599033.681:724): avc: denied { setopt } for pid=8177 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 272.385200][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 272.464618][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 272.465734][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 272.609929][ T5901] usb 3-1: USB disconnect, device number 16 [ 272.698335][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 272.807577][ T5962] kernel write not supported for file /sg0 (pid: 5962 comm: kworker/1:6) [ 272.982462][ T9] usb 2-1: config 0 has an invalid interface number: 127 but max is 1 [ 272.985478][ T8202] FAULT_INJECTION: forcing a failure. [ 272.985478][ T8202] name failslab, interval 1, probability 0, space 0, times 0 [ 272.993606][ T9] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 273.004566][ T8202] CPU: 1 UID: 0 PID: 8202 Comm: syz.2.490 Not tainted syzkaller #0 PREEMPT(full) [ 273.004586][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 273.004595][ T8202] Call Trace: [ 273.004600][ T8202] [ 273.004606][ T8202] dump_stack_lvl+0x16c/0x1f0 [ 273.004630][ T8202] should_fail_ex+0x512/0x640 [ 273.004649][ T8202] ? fs_reclaim_acquire+0xae/0x150 [ 273.004673][ T8202] ? tomoyo_encode2+0x100/0x3e0 [ 273.004694][ T8202] should_failslab+0xc2/0x120 [ 273.004713][ T8202] __kmalloc_noprof+0xd2/0x510 [ 273.004729][ T8202] ? d_absolute_path+0x136/0x1a0 [ 273.004755][ T8202] tomoyo_encode2+0x100/0x3e0 [ 273.004780][ T8202] tomoyo_encode+0x29/0x50 [ 273.004801][ T8202] tomoyo_realpath_from_path+0x18f/0x6e0 [ 273.004830][ T8202] tomoyo_path_number_perm+0x245/0x580 [ 273.004849][ T8202] ? tomoyo_path_number_perm+0x237/0x580 [ 273.004870][ T8202] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 273.004890][ T8202] ? find_held_lock+0x2b/0x80 [ 273.004930][ T8202] ? find_held_lock+0x2b/0x80 [ 273.004948][ T8202] ? hook_file_ioctl_common+0x145/0x410 [ 273.004968][ T8202] ? __fget_files+0x20e/0x3c0 [ 273.004990][ T8202] security_file_ioctl+0x9b/0x240 [ 273.005013][ T8202] __x64_sys_ioctl+0xb7/0x210 [ 273.005042][ T8202] do_syscall_64+0xcd/0x4e0 [ 273.005065][ T8202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.005080][ T8202] RIP: 0033:0x7f8eba78eec9 [ 273.005093][ T8202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.005107][ T8202] RSP: 002b:00007f8ebb613038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.005122][ T8202] RAX: ffffffffffffffda RBX: 00007f8eba9e5fa0 RCX: 00007f8eba78eec9 [ 273.005133][ T8202] RDX: 0000200000000200 RSI: 00000000c0745645 RDI: 0000000000000004 [ 273.005142][ T8202] RBP: 00007f8ebb613090 R08: 0000000000000000 R09: 0000000000000000 [ 273.005151][ T8202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.005160][ T8202] R13: 00007f8eba9e6038 R14: 00007f8eba9e5fa0 R15: 00007ffcd6c9e418 [ 273.005181][ T8202] [ 273.005256][ T8202] ERROR: Out of memory at tomoyo_realpath_from_path. [ 273.019557][ T9] usb 2-1: config 0 has no interface number 1 [ 273.399726][ T9] usb 2-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 273.414630][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 273.455040][ T9] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 273.526820][ T9] usb 2-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 273.535250][ T9] usb 2-1: Product: syz [ 273.674320][ T9] usb 2-1: Manufacturer: syz [ 273.693980][ T9] usb 2-1: config 0 descriptor?? [ 273.721353][ T9] usb-storage 2-1:0.127: USB Mass Storage device detected [ 273.738494][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.767375][ T9] usb-storage 2-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 273.786646][ T8214] __nla_validate_parse: 140 callbacks suppressed [ 273.786658][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'. [ 273.837083][ T9] usbhid 2-1:0.127: couldn't find an input interrupt endpoint [ 273.847587][ T9] usb-storage 2-1:0.0: USB Mass Storage device detected [ 273.866854][ T9] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 273.960754][ T5962] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 274.640299][ T5962] usb 3-1: Using ep0 maxpacket: 16 [ 274.679725][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'. [ 274.773096][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 274.782027][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 274.856098][ T8207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.872142][ T8207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.936000][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.494'. [ 275.517178][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 275.534119][ T9] usb 2-1: USB disconnect, device number 16 [ 275.828246][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 275.927240][ T30] audit: type=1400 audit(1758599037.621:725): avc: denied { add_name } for pid=8234 comm="syz.4.497" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 275.963144][ T8238] o2cb: This node has not been configured. [ 275.991555][ T8238] o2cb: Cluster check failed. Fix errors before retrying. [ 276.040897][ T30] audit: type=1400 audit(1758599037.661:726): avc: denied { create } for pid=8234 comm="syz.4.497" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 276.051701][ T8238] (syz.4.497,8238,1):user_dlm_register:674 ERROR: status = -22 [ 276.087442][ T8238] (syz.4.497,8238,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 276.188360][ T30] audit: type=1400 audit(1758599037.661:727): avc: denied { associate } for pid=8234 comm="syz.4.497" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 276.858239][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 277.527097][ T8252] hub 8-0:1.0: USB hub found [ 277.532700][ T8252] hub 8-0:1.0: 1 port detected [ 277.750813][ T5962] usb 3-1: unable to get BOS descriptor or descriptor too short [ 277.769020][ T5962] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 277.844718][ T5962] usb 3-1: can't read configurations, error -71 [ 277.908240][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 278.464058][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.505'. [ 278.633081][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 278.808365][ T5962] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 278.865979][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 278.885127][ T30] audit: type=1400 audit(1758599040.561:728): avc: denied { create } for pid=8271 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 278.906764][ T30] audit: type=1400 audit(1758599040.561:729): avc: denied { write } for pid=8271 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 278.938242][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 278.945265][ T5901] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 278.978695][ T30] audit: type=1400 audit(1758599040.561:730): avc: denied { write } for pid=8271 comm="syz.3.509" name="rt_acct" dev="proc" ino=4026532947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 279.048440][ T30] audit: type=1400 audit(1758599040.581:731): avc: denied { connect } for pid=8271 comm="syz.3.509" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.052964][ T5962] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.113249][ T30] audit: type=1400 audit(1758599040.581:732): avc: denied { name_connect } for pid=8271 comm="syz.3.509" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 279.202621][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 279.214260][ T5962] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 279.279906][ T5901] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 279.291719][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.303379][ T5901] usb 2-1: config 0 has an invalid descriptor of length 145, skipping remainder of the config [ 279.319578][ T30] audit: type=1400 audit(1758599040.581:733): avc: denied { ioctl } for pid=8269 comm="syz.1.508" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 279.347208][ T5962] usb 3-1: Product: syz [ 279.369755][ T5962] usb 3-1: Manufacturer: syz [ 279.376655][ T5901] usb 2-1: config 0 has no interface number 0 [ 279.387105][ T5962] usb 3-1: SerialNumber: syz [ 279.397715][ T5901] usb 2-1: New USB device found, idVendor=2304, idProduct=0243, bcdDevice=21.07 [ 279.425548][ T5962] usb 3-1: config 0 descriptor?? [ 279.686700][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.698722][ T5962] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 279.717149][ T30] audit: type=1400 audit(1758599040.631:734): avc: denied { execute } for pid=8273 comm="syz.0.510" path="/100/cpu.stat" dev="tmpfs" ino=551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 279.740491][ T5901] usb 2-1: config 0 descriptor?? [ 279.871608][ T30] audit: type=1400 audit(1758599040.711:735): avc: denied { setopt } for pid=8271 comm="syz.3.509" laddr=::ffff:172.20.20.20 lport=20001 faddr=::ffff:172.20.20.20 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.897900][ T30] audit: type=1400 audit(1758599040.911:736): avc: denied { read write } for pid=5842 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.938304][ T30] audit: type=1400 audit(1758599040.911:737): avc: denied { open } for pid=5842 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.978373][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.077486][ T8270] binder: 8269:8270 ioctl c0306201 200000001a80 returned -14 [ 280.249397][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.512'. [ 280.317194][ T5962] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 280.328969][ T5962] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 280.935591][ T5962] usb 3-1: USB disconnect, device number 18 [ 281.018238][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 281.448307][ T5962] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 281.612480][ T5962] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 281.620129][ T5962] usb 3-1: can't read configurations, error -61 [ 281.705777][ T5901] dvb-usb: found a 'Pinnacle PCTV 73A' in cold state, will try to load a firmware [ 281.797183][ T5901] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 281.810314][ T5901] dib0700: firmware download failed at 7 with -22 [ 281.850112][ T5901] usb 2-1: USB disconnect, device number 17 [ 282.058557][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.071040][ T8308] FAULT_INJECTION: forcing a failure. [ 282.071040][ T8308] name failslab, interval 1, probability 0, space 0, times 0 [ 282.117438][ T8308] CPU: 0 UID: 0 PID: 8308 Comm: syz.0.515 Not tainted syzkaller #0 PREEMPT(full) [ 282.117464][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.117474][ T8308] Call Trace: [ 282.117480][ T8308] [ 282.117487][ T8308] dump_stack_lvl+0x16c/0x1f0 [ 282.117514][ T8308] should_fail_ex+0x512/0x640 [ 282.117535][ T8308] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 282.117565][ T8308] should_failslab+0xc2/0x120 [ 282.117586][ T8308] __kmalloc_cache_noprof+0x6a/0x3e0 [ 282.117612][ T8308] ? mark_held_locks+0x49/0x80 [ 282.117638][ T8308] ? rfkill_fop_open+0x1b6/0x750 [ 282.117660][ T8308] rfkill_fop_open+0x1b6/0x750 [ 282.117681][ T8308] ? __pfx_rfkill_fop_open+0x10/0x10 [ 282.117699][ T8308] misc_open+0x35a/0x420 [ 282.117717][ T8308] ? __pfx_misc_open+0x10/0x10 [ 282.117732][ T8308] chrdev_open+0x231/0x6a0 [ 282.117755][ T8308] ? __pfx_chrdev_open+0x10/0x10 [ 282.117778][ T8308] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 282.117804][ T8308] do_dentry_open+0x982/0x1530 [ 282.117824][ T8308] ? __pfx_chrdev_open+0x10/0x10 [ 282.117851][ T8308] vfs_open+0x82/0x3f0 [ 282.117878][ T8308] path_openat+0x1de4/0x2cb0 [ 282.117908][ T8308] ? __pfx_path_openat+0x10/0x10 [ 282.117935][ T8308] do_filp_open+0x20b/0x470 [ 282.117956][ T8308] ? __pfx_do_filp_open+0x10/0x10 [ 282.117997][ T8308] ? alloc_fd+0x471/0x7d0 [ 282.118033][ T8308] do_sys_openat2+0x11b/0x1d0 [ 282.118057][ T8308] ? __pfx_do_sys_openat2+0x10/0x10 [ 282.118085][ T8308] ? __fget_files+0x20e/0x3c0 [ 282.118109][ T8308] __x64_sys_openat+0x174/0x210 [ 282.118134][ T8308] ? __pfx___x64_sys_openat+0x10/0x10 [ 282.118157][ T8308] ? ksys_write+0x1ac/0x250 [ 282.118187][ T8308] do_syscall_64+0xcd/0x4e0 [ 282.118211][ T8308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.118228][ T8308] RIP: 0033:0x7fd275d8eec9 [ 282.118242][ T8308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.118259][ T8308] RSP: 002b:00007fd276c0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 282.118276][ T8308] RAX: ffffffffffffffda RBX: 00007fd275fe6090 RCX: 00007fd275d8eec9 [ 282.118288][ T8308] RDX: 0000000000000e00 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 282.118298][ T8308] RBP: 00007fd276c0b090 R08: 0000000000000000 R09: 0000000000000000 [ 282.118309][ T8308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.118319][ T8308] R13: 00007fd275fe6128 R14: 00007fd275fe6090 R15: 00007ffe8dd9e358 [ 282.118344][ T8308] [ 283.098234][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 283.487770][ T8330] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 283.499712][ T8330] overlayfs: missing 'lowerdir' [ 283.832460][ T8335] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 284.131830][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 284.131845][ T30] audit: type=1400 audit(1758599045.471:801): avc: denied { open } for pid=8331 comm="syz.4.523" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 284.161492][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 284.176017][ T30] audit: type=1400 audit(1758599045.471:802): avc: denied { ioctl } for pid=8331 comm="syz.4.523" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 284.201208][ T30] audit: type=1400 audit(1758599045.871:803): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 284.280808][ T30] audit: type=1400 audit(1758599045.981:804): avc: denied { name_bind } for pid=8337 comm="syz.1.524" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 284.313054][ T30] audit: type=1400 audit(1758599045.981:805): avc: denied { node_bind } for pid=8337 comm="syz.1.524" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 284.340070][ T30] audit: type=1400 audit(1758599045.981:806): avc: denied { map_create } for pid=8337 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 284.366429][ T30] audit: type=1400 audit(1758599045.981:807): avc: denied { map_read map_write } for pid=8337 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 284.419760][ T30] audit: type=1400 audit(1758599046.091:808): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 284.550860][ T8340] netlink: 'syz.1.524': attribute type 2 has an invalid length. [ 285.178340][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 285.202927][ T30] audit: type=1400 audit(1758599046.391:809): avc: denied { create } for pid=8341 comm="syz.3.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.228362][ T30] audit: type=1400 audit(1758599046.401:810): avc: denied { bind } for pid=8341 comm="syz.3.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.806784][ T8350] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 286.218304][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.779979][ T8350] orangefs_mount: mount request failed with -4 [ 286.820653][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.828231][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.089578][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'. [ 287.258331][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 287.516134][ T8339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.532480][ T8339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.630952][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.661874][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.690883][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.715934][ T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.298321][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.001929][ T8376] netlink: 124 bytes leftover after parsing attributes in process `syz.1.532'. [ 289.338256][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 290.031728][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 290.031745][ T30] audit: type=1400 audit(1758599051.421:831): avc: denied { setopt } for pid=8367 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 290.378254][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 291.315802][ T30] audit: type=1400 audit(1758599052.641:832): avc: denied { create } for pid=8381 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 291.347324][ T30] audit: type=1400 audit(1758599052.701:833): avc: denied { ioctl } for pid=8381 comm="syz.2.535" path="socket:[17398]" dev="sockfs" ino=17398 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 291.418235][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 291.482449][ T30] audit: type=1400 audit(1758599052.811:834): avc: denied { read write } for pid=8381 comm="syz.2.535" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 291.493000][ T8394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.536'. [ 291.638076][ T30] audit: type=1400 audit(1758599052.811:835): avc: denied { open } for pid=8381 comm="syz.2.535" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 291.689980][ T8394] input: syz1 as /devices/virtual/input/input9 [ 291.848267][ T30] audit: type=1400 audit(1758599052.821:836): avc: denied { read write } for pid=8381 comm="syz.2.535" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 292.137005][ T8402] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 292.171296][ T30] audit: type=1400 audit(1758599052.821:837): avc: denied { open } for pid=8381 comm="syz.2.535" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 292.194908][ T30] audit: type=1326 audit(1758599052.881:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.1.534" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ed938eec9 code=0x0 [ 292.458235][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 292.534711][ T30] audit: type=1400 audit(1758599053.191:839): avc: denied { ioctl } for pid=8393 comm="syz.2.536" path="socket:[17858]" dev="sockfs" ino=17858 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.584719][ T30] audit: type=1400 audit(1758599053.321:840): avc: denied { read write } for pid=8393 comm="syz.2.536" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 293.498303][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 294.294251][ C1] hrtimer: interrupt took 14325 ns [ 294.538355][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 295.578224][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 296.618231][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 296.781063][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 296.781073][ T30] audit: type=1400 audit(1758599058.481:852): avc: denied { execute } for pid=8450 comm="syz.4.550" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 296.828337][ T30] audit: type=1400 audit(1758599058.511:853): avc: denied { setopt } for pid=8450 comm="syz.4.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 296.915630][ T30] audit: type=1400 audit(1758599058.511:854): avc: denied { read } for pid=8450 comm="syz.4.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 296.941450][ T30] audit: type=1400 audit(1758599058.571:855): avc: denied { write } for pid=8450 comm="syz.4.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 296.965124][ T30] audit: type=1400 audit(1758599058.571:856): avc: denied { write } for pid=8450 comm="syz.4.550" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 297.136293][ T30] audit: type=1400 audit(1758599058.821:857): avc: denied { getopt } for pid=8460 comm="syz.1.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 297.477962][ T30] audit: type=1400 audit(1758599059.171:858): avc: denied { read write } for pid=8473 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 297.505820][ T30] audit: type=1400 audit(1758599059.171:859): avc: denied { open } for pid=8473 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 297.658238][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 297.665187][ T5962] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 298.351543][ T5962] usb 2-1: config 0 has an invalid interface number: 127 but max is 1 [ 298.360412][ T5962] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 298.375247][ T5962] usb 2-1: config 0 has no interface number 1 [ 298.381994][ T5962] usb 2-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 298.398654][ T5962] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 298.451719][ T5962] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 298.468242][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 298.525803][ T5962] usb 2-1: Product: syz [ 298.598337][ T5962] usb 2-1: Manufacturer: syz [ 298.614386][ T5962] usb 2-1: config 0 descriptor?? [ 298.639139][ T5962] usb-storage 2-1:0.127: USB Mass Storage device detected [ 298.658013][ T5962] usb-storage 2-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 298.708234][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 298.735817][ T30] audit: type=1400 audit(1758599060.431:860): avc: denied { create } for pid=8490 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 298.740994][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 298.758224][ T5962] usbhid 2-1:0.127: couldn't find an input interrupt endpoint [ 298.766958][ T30] audit: type=1400 audit(1758599060.471:861): avc: denied { getopt } for pid=8490 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 298.774546][ T5962] usb-storage 2-1:0.0: USB Mass Storage device detected [ 298.795876][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.563'. [ 298.805392][ T5962] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 298.910567][ T10] usb 4-1: config 0 has an invalid interface number: 127 but max is 1 [ 298.921134][ T10] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 298.936536][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 298.966946][ T10] usb 4-1: config 0 has no interface number 1 [ 298.974394][ T10] usb 4-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 298.999670][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 299.225162][ T10] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 299.235992][ T10] usb 4-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 299.245876][ T10] usb 4-1: Product: syz [ 299.258356][ T10] usb 4-1: Manufacturer: syz [ 299.293480][ T10] usb 4-1: config 0 descriptor?? [ 299.302361][ T10] usb-storage 4-1:0.127: USB Mass Storage device detected [ 299.312291][ T10] usb-storage 4-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 299.388399][ T10] usbhid 4-1:0.127: couldn't find an input interrupt endpoint [ 299.467281][ T10] usb-storage 4-1:0.0: USB Mass Storage device detected [ 299.669881][ T10] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 299.715529][ T5962] usb 2-1: USB disconnect, device number 18 [ 299.738233][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 300.778226][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 300.898485][ T5927] usb 4-1: USB disconnect, device number 21 [ 300.937717][ T8512] Mount JFS Failure: -22 [ 300.942219][ T8512] jfs_mount failed w/return code = -22 [ 301.153939][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.567'. [ 301.422466][ T8518] afs: Unknown parameter 'dy„' [ 301.639776][ T8520] loop6: detected capacity change from 0 to 63 [ 301.649464][ T8520] Buffer I/O error on dev loop6, logical block 0, async page read [ 301.657550][ T8520] Buffer I/O error on dev loop6, logical block 0, async page read [ 301.665721][ T8520] Buffer I/O error on dev loop6, logical block 0, async page read [ 301.673940][ T8520] Buffer I/O error on dev loop6, logical block 0, async page read [ 301.709067][ T6079] Buffer I/O error on dev loop6, logical block 0, async page read [ 301.719174][ T8522] Buffer I/O error on dev loop6, logical block 0, async page read [ 301.729156][ T6079] Buffer I/O error on dev loop6, logical block 0, async page read [ 301.758558][ T6079] Buffer I/O error on dev loop6, logical block 0, async page read [ 301.801473][ T8520] Buffer I/O error on dev loop6, logical block 0, async page read [ 301.818242][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 301.819792][ T8519] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.036232][ T8533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.573'. [ 302.236846][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 302.236861][ T30] audit: type=1400 audit(1758599063.931:873): avc: denied { ioctl } for pid=8535 comm="syz.2.575" path="socket:[18792]" dev="sockfs" ino=18792 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 302.488390][ T5962] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 302.505924][ T30] audit: type=1400 audit(1758599064.081:874): avc: denied { remount } for pid=8540 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 302.731994][ T30] audit: type=1400 audit(1758599064.091:875): avc: denied { write } for pid=8540 comm="syz.3.577" path="socket:[18801]" dev="sockfs" ino=18801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 302.858233][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.985941][ T30] audit: type=1400 audit(1758599064.101:876): avc: denied { read } for pid=8540 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 303.236297][ T30] audit: type=1400 audit(1758599064.931:877): avc: denied { listen } for pid=8552 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 303.259695][ T8555] FAULT_INJECTION: forcing a failure. [ 303.259695][ T8555] name failslab, interval 1, probability 0, space 0, times 0 [ 303.279929][ T8555] CPU: 0 UID: 0 PID: 8555 Comm: syz.2.579 Not tainted syzkaller #0 PREEMPT(full) [ 303.279954][ T8555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 303.279964][ T8555] Call Trace: [ 303.279970][ T8555] [ 303.279976][ T8555] dump_stack_lvl+0x16c/0x1f0 [ 303.280004][ T8555] should_fail_ex+0x512/0x640 [ 303.280026][ T8555] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 303.280048][ T8555] should_failslab+0xc2/0x120 [ 303.280068][ T8555] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 303.280086][ T8555] ? skb_clone+0x190/0x3f0 [ 303.280122][ T8555] skb_clone+0x190/0x3f0 [ 303.280145][ T8555] nfnetlink_rcv_batch+0x1cf/0x2330 [ 303.280170][ T8555] ? __lock_acquire+0x62e/0x1ce0 [ 303.280200][ T8555] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 303.280234][ T8555] ? avc_has_perm_noaudit+0x149/0x3b0 [ 303.280256][ T8555] ? __asan_memset+0x23/0x50 [ 303.280281][ T8555] ? __nla_validate_parse+0x600/0x2880 [ 303.280314][ T8555] ? __pfx___nla_validate_parse+0x10/0x10 [ 303.280344][ T8555] ? cap_capable+0xb3/0x250 [ 303.280369][ T8555] ? __nla_parse+0x40/0x60 [ 303.280398][ T8555] nfnetlink_rcv+0x3c1/0x430 [ 303.280415][ T8555] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 303.280438][ T8555] netlink_unicast+0x5aa/0x870 [ 303.280465][ T8555] ? __pfx_netlink_unicast+0x10/0x10 [ 303.280497][ T8555] netlink_sendmsg+0x8d1/0xdd0 [ 303.280524][ T8555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.280556][ T8555] ____sys_sendmsg+0xa98/0xc70 [ 303.280581][ T8555] ? copy_msghdr_from_user+0x10a/0x160 [ 303.280601][ T8555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.280637][ T8555] ___sys_sendmsg+0x134/0x1d0 [ 303.280660][ T8555] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.280711][ T8555] __sys_sendmsg+0x16d/0x220 [ 303.280733][ T8555] ? __pfx___sys_sendmsg+0x10/0x10 [ 303.280770][ T8555] do_syscall_64+0xcd/0x4e0 [ 303.280795][ T8555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.280812][ T8555] RIP: 0033:0x7f8eba78eec9 [ 303.280827][ T8555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.280844][ T8555] RSP: 002b:00007f8ebb613038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.280860][ T8555] RAX: ffffffffffffffda RBX: 00007f8eba9e5fa0 RCX: 00007f8eba78eec9 [ 303.280871][ T8555] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 303.280882][ T8555] RBP: 00007f8ebb613090 R08: 0000000000000000 R09: 0000000000000000 [ 303.280892][ T8555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.280901][ T8555] R13: 00007f8eba9e6038 R14: 00007f8eba9e5fa0 R15: 00007ffcd6c9e418 [ 303.280925][ T8555] [ 303.305054][ T5962] usb 5-1: unable to get BOS descriptor or descriptor too short [ 303.523275][ T30] audit: type=1400 audit(1758599065.221:878): avc: denied { mount } for pid=8556 comm="syz.3.580" name="/" dev="ramfs" ino=18822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 303.532124][ T5962] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 303.587903][ T5962] usb 5-1: can't read configurations, error -71 [ 303.594722][ T30] audit: type=1400 audit(1758599065.251:879): avc: denied { execute } for pid=8556 comm="syz.3.580" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=18823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 303.618084][ T30] audit: type=1400 audit(1758599065.251:880): avc: denied { ioctl } for pid=8556 comm="syz.3.580" path="socket:[18825]" dev="sockfs" ino=18825 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 303.647790][ T30] audit: type=1400 audit(1758599065.341:881): avc: denied { setopt } for pid=8556 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 303.794942][ T30] audit: type=1400 audit(1758599065.491:882): avc: denied { read } for pid=8563 comm="syz.1.582" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 303.908231][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 303.997229][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 304.175604][ T8577] input: syz1 as /devices/virtual/input/input10 [ 304.197275][ T8577] netlink: 68 bytes leftover after parsing attributes in process `syz.3.583'. [ 304.222697][ T8574] nvme_fabrics: missing parameter 'transport=%s' [ 304.233035][ T8574] nvme_fabrics: missing parameter 'nqn=%s' [ 304.701612][ T5962] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 304.724215][ T8580] netlink: 56 bytes leftover after parsing attributes in process `syz.2.585'. [ 304.868448][ T5962] usb 5-1: Using ep0 maxpacket: 8 [ 304.874785][ T5962] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.883307][ T5962] usb 5-1: config 0 has no interface number 0 [ 304.898348][ T5962] usb 5-1: config 0 interface 1 has no altsetting 0 [ 304.906550][ T5962] usb 5-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=da.9a [ 304.916153][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.935693][ T5962] usb 5-1: Product: syz [ 304.940223][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 304.955912][ T5962] usb 5-1: Manufacturer: syz [ 304.966024][ T5962] usb 5-1: SerialNumber: syz [ 305.002591][ T5920] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 305.029761][ T5962] usb 5-1: config 0 descriptor?? [ 305.165142][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.190293][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 305.207590][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 305.216726][ T8586] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 305.220005][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 305.241976][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 305.261571][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.263862][ T8585] overlayfs: failed to resolve './file1': -2 [ 305.286117][ T5920] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 305.295742][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.304903][ T5920] usb 3-1: Product: syz [ 305.307310][ T5962] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -22 [ 305.311681][ T5920] usb 3-1: Manufacturer: syz [ 305.321787][ T5962] usb 5-1: USB disconnect, device number 20 [ 305.324734][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.347777][ T5920] usb 3-1: SerialNumber: syz [ 305.363151][ T5920] usb 3-1: config 0 descriptor?? [ 305.388997][ T8582] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 305.403399][ T5920] ati_remote 3-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 305.488458][ T5901] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 305.651694][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 305.661475][ T5901] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 305.672658][ T8582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.685580][ T5901] usb 4-1: config 0 has no interface number 0 [ 305.696228][ T5901] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 305.700537][ T8582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.714621][ T5901] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 305.725095][ T5901] usb 4-1: config 0 interface 126 has no altsetting 0 [ 305.735981][ T5901] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 305.745921][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.756454][ T5901] usb 4-1: Product: syz [ 305.855023][ T5901] usb 4-1: Manufacturer: syz [ 305.860072][ T5901] usb 4-1: SerialNumber: syz [ 305.874904][ T5901] usb 4-1: config 0 descriptor?? [ 305.885999][ T8586] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 305.893270][ T8586] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 305.978402][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 306.325739][ T8586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.334728][ T8586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.549989][ T5901] ir_usb 4-1:0.126: IR Dongle converter detected [ 306.559868][ T5901] usb 4-1: IRDA class descriptor not found, device not bound [ 306.599178][ T5901] usb 4-1: USB disconnect, device number 22 [ 306.795709][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.593'. [ 306.807068][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 307.018217][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 307.276166][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.594'. [ 307.389741][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 307.389756][ T30] audit: type=1400 audit(1758599069.081:913): avc: denied { read } for pid=8602 comm="syz.4.593" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 307.421810][ T30] audit: type=1400 audit(1758599069.091:914): avc: denied { open } for pid=8602 comm="syz.4.593" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 307.446233][ T30] audit: type=1400 audit(1758599069.151:915): avc: denied { ioctl } for pid=8602 comm="syz.4.593" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 308.058238][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 308.245760][ T5920] usb 3-1: USB disconnect, device number 21 [ 308.273783][ T30] audit: type=1400 audit(1758599069.971:916): avc: denied { append } for pid=8619 comm="syz.2.596" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 308.780468][ T30] audit: type=1400 audit(1758599070.451:917): avc: denied { write } for pid=8619 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 309.098234][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 309.113568][ T30] audit: type=1400 audit(1758599070.811:918): avc: denied { mounton } for pid=8631 comm="syz.4.598" path="/127/file0" dev="tmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 309.299424][ T30] audit: type=1400 audit(1758599070.811:919): avc: denied { mount } for pid=8631 comm="syz.4.598" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 309.806492][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 309.815364][ T8640] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 309.822016][ T8640] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 309.834238][ T8640] vhci_hcd vhci_hcd.0: Device attached [ 309.860947][ T8643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.599'. [ 309.888283][ T8644] vhci_hcd: connection closed [ 309.890265][ T1323] vhci_hcd: stop threads [ 309.903608][ T1323] vhci_hcd: release socket [ 309.919683][ T1323] vhci_hcd: disconnect device [ 310.023882][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.601'. [ 310.112397][ T30] audit: type=1400 audit(1758599071.811:920): avc: denied { unmount } for pid=5856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 310.138480][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 310.216969][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 310.488337][ T10] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 310.787043][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 310.796088][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 310.805129][ T10] usb 5-1: config 129 has an invalid interface number: 28 but max is 0 [ 310.813835][ T10] usb 5-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 310.825396][ T10] usb 5-1: config 129 has no interface number 0 [ 310.831947][ T10] usb 5-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 310.900051][ T8668] o2cb: This node has not been configured. [ 310.905940][ T8668] o2cb: Cluster check failed. Fix errors before retrying. [ 310.913230][ T8668] (syz.2.604,8668,1):user_dlm_register:674 ERROR: status = -22 [ 310.920849][ T8668] (syz.2.604,8668,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 310.954207][ T30] audit: type=1400 audit(1758599072.591:921): avc: denied { mount } for pid=8661 comm="syz.2.604" name="/" dev="ocfs2_dlmfs" ino=18375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 311.178222][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 311.181095][ T10] usb 5-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid wMaxPacketSize 0 [ 311.197724][ T10] usb 5-1: config 129 interface 28 has no altsetting 0 [ 311.207495][ T10] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 311.216757][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.237968][ T30] audit: type=1400 audit(1758599072.591:922): avc: denied { add_name } for pid=8661 comm="syz.2.604" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 311.261562][ T10] usb 5-1: Product: syz [ 311.269914][ T10] usb 5-1: Manufacturer: syz [ 311.274921][ T10] usb 5-1: SerialNumber: syz [ 311.412621][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'. [ 311.439317][ T8671] team1: entered promiscuous mode [ 311.444544][ T8671] team1: entered allmulticast mode [ 311.709479][ T10] etas_es58x 5-1:129.28: Starting syz syz (Serial Number syz) [ 311.791717][ T10] etas_es58x 5-1:129.28: could not retrieve the product info string [ 311.906174][ T10] usb 5-1: USB disconnect, device number 21 [ 312.074029][ T10] etas_es58x 5-1:129.28: Disconnecting syz syz [ 312.109764][ T5962] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 312.218231][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 312.308254][ T5962] usb 3-1: Using ep0 maxpacket: 16 [ 312.741691][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 312.766593][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.775674][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.233290][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 313.233301][ T30] audit: type=1400 audit(1758599074.931:936): avc: denied { add_name } for pid=8681 comm="dhcpcd-run-hook" name="resolv.conf.can1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.261856][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 313.325742][ T30] audit: type=1400 audit(1758599074.991:937): avc: denied { create } for pid=8693 comm="syz.4.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 313.359619][ T5928] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 313.588544][ T30] audit: type=1400 audit(1758599074.991:938): avc: denied { ioctl } for pid=8693 comm="syz.4.611" path="socket:[19462]" dev="sockfs" ino=19462 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 313.623994][ T30] audit: type=1400 audit(1758599075.001:939): avc: denied { create } for pid=8681 comm="dhcpcd-run-hook" name="resolv.conf.can1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.651097][ T30] audit: type=1400 audit(1758599075.001:940): avc: denied { write } for pid=8681 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can1.link" dev="tmpfs" ino=4649 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.677107][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.683357][ T8710] netlink: 108 bytes leftover after parsing attributes in process `syz.1.613'. [ 313.698271][ T30] audit: type=1400 audit(1758599075.001:941): avc: denied { append } for pid=8681 comm="dhcpcd-run-hook" name="resolv.conf.can1.link" dev="tmpfs" ino=4649 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.698283][ T8710] openvswitch: netlink: Flow key attr not present in new flow. [ 313.698320][ T30] audit: type=1400 audit(1758599075.011:942): avc: denied { accept } for pid=8702 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 313.722366][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.817071][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 313.846334][ T30] audit: type=1400 audit(1758599075.221:943): avc: denied { remove_name } for pid=8707 comm="rm" name="resolv.conf.can1.link" dev="tmpfs" ino=4649 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.871969][ T30] audit: type=1400 audit(1758599075.221:944): avc: denied { unlink } for pid=8707 comm="rm" name="resolv.conf.can1.link" dev="tmpfs" ino=4649 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.919540][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 313.956311][ T30] audit: type=1400 audit(1758599075.651:945): avc: denied { create } for pid=8708 comm="syz.1.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 314.114202][ T8688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.136180][ T8688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.298286][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 314.742144][ T5962] usb 3-1: unable to get BOS descriptor or descriptor too short [ 314.787100][ T5962] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 314.820954][ T5962] usb 3-1: can't read configurations, error -71 [ 314.885219][ T8727] netlink: 'syz.2.614': attribute type 10 has an invalid length. [ 315.338229][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 315.476303][ T5928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 315.484817][ T5928] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 315.521041][ T5928] usb 4-1: can't read configurations, error -71 [ 315.704668][ T8746] FAULT_INJECTION: forcing a failure. [ 315.704668][ T8746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.731929][ T8746] CPU: 0 UID: 0 PID: 8746 Comm: syz.4.620 Not tainted syzkaller #0 PREEMPT(full) [ 315.731955][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 315.731966][ T8746] Call Trace: [ 315.731972][ T8746] [ 315.731979][ T8746] dump_stack_lvl+0x16c/0x1f0 [ 315.732005][ T8746] should_fail_ex+0x512/0x640 [ 315.732031][ T8746] _copy_from_user+0x2e/0xd0 [ 315.732057][ T8746] ucma_write+0x128/0x330 [ 315.732079][ T8746] ? __pfx_ucma_write+0x10/0x10 [ 315.732101][ T8746] ? bpf_lsm_file_permission+0x9/0x10 [ 315.732122][ T8746] ? security_file_permission+0x71/0x210 [ 315.732150][ T8746] ? rw_verify_area+0xcf/0x6c0 [ 315.732178][ T8746] ? __pfx_ucma_write+0x10/0x10 [ 315.732198][ T8746] vfs_writev+0x5dc/0xde0 [ 315.732220][ T8746] ? __pfx_vfs_writev+0x10/0x10 [ 315.732254][ T8746] ? __fget_files+0x20e/0x3c0 [ 315.732272][ T8746] ? __fget_files+0x190/0x3c0 [ 315.732296][ T8746] ? do_writev+0x28c/0x340 [ 315.732311][ T8746] do_writev+0x28c/0x340 [ 315.732327][ T8746] ? __pfx_do_writev+0x10/0x10 [ 315.732351][ T8746] do_syscall_64+0xcd/0x4e0 [ 315.732375][ T8746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.732393][ T8746] RIP: 0033:0x7f4ccfd8eec9 [ 315.732407][ T8746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.732422][ T8746] RSP: 002b:00007f4cd0cc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 315.732440][ T8746] RAX: ffffffffffffffda RBX: 00007f4ccffe5fa0 RCX: 00007f4ccfd8eec9 [ 315.732452][ T8746] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 315.732462][ T8746] RBP: 00007f4cd0cc1090 R08: 0000000000000000 R09: 0000000000000000 [ 315.732473][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.732484][ T8746] R13: 00007f4ccffe6038 R14: 00007f4ccffe5fa0 R15: 00007fffec8fad78 [ 315.732508][ T8746] [ 316.378240][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 316.861801][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.894881][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.933946][ T55] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 317.098238][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 317.111951][ T55] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 317.120560][ T55] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.130851][ T55] usb 3-1: config 0 has no interface number 0 [ 317.137921][ T55] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 317.161842][ T55] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 317.174123][ T55] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 317.186252][ T55] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 317.200010][ T55] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 317.211387][ T55] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 317.223681][ T55] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 317.235032][ T55] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 317.245743][ T55] usb 3-1: config 0 interface 239 has no altsetting 0 [ 317.256381][ T55] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 317.265869][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.274491][ T55] usb 3-1: Product: syz [ 317.318881][ T55] usb 3-1: Manufacturer: syz [ 317.323653][ T55] usb 3-1: SerialNumber: syz [ 317.334344][ T55] usb 3-1: config 0 descriptor?? [ 317.348683][ T8752] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 317.356212][ T8752] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 317.418242][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 317.470027][ T8774] FAULT_INJECTION: forcing a failure. [ 317.470027][ T8774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.493811][ T8774] CPU: 1 UID: 0 PID: 8774 Comm: syz.4.628 Not tainted syzkaller #0 PREEMPT(full) [ 317.493830][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.493837][ T8774] Call Trace: [ 317.493841][ T8774] [ 317.493846][ T8774] dump_stack_lvl+0x16c/0x1f0 [ 317.493864][ T8774] should_fail_ex+0x512/0x640 [ 317.493881][ T8774] _copy_from_user+0x2e/0xd0 [ 317.493897][ T8774] do_sock_getsockopt+0x3ca/0x440 [ 317.493915][ T8774] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 317.493930][ T8774] ? __fget_files+0x204/0x3c0 [ 317.493949][ T8774] __sys_getsockopt+0x12f/0x260 [ 317.493965][ T8774] __x64_sys_getsockopt+0xbd/0x160 [ 317.493977][ T8774] ? do_syscall_64+0x91/0x4e0 [ 317.493993][ T8774] ? lockdep_hardirqs_on+0x7c/0x110 [ 317.494006][ T8774] do_syscall_64+0xcd/0x4e0 [ 317.494021][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.494032][ T8774] RIP: 0033:0x7f4ccfd8eec9 [ 317.494041][ T8774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.494052][ T8774] RSP: 002b:00007f4cd0cc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 317.494063][ T8774] RAX: ffffffffffffffda RBX: 00007f4ccffe5fa0 RCX: 00007f4ccfd8eec9 [ 317.494070][ T8774] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 317.494077][ T8774] RBP: 00007f4cd0cc1090 R08: 0000200000000100 R09: 0000000000000000 [ 317.494083][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.494090][ T8774] R13: 00007f4ccffe6038 R14: 00007f4ccffe5fa0 R15: 00007fffec8fad78 [ 317.494103][ T8774] [ 317.629773][ T8775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.622'. [ 318.458230][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 318.781911][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 318.781928][ T30] audit: type=1400 audit(1758599080.481:952): avc: denied { mounton } for pid=8792 comm="syz.2.631" path="/130/file0" dev="tmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 318.851350][ T30] audit: type=1400 audit(1758599080.531:953): avc: denied { bind } for pid=8788 comm="syz.3.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 318.938348][ T30] audit: type=1400 audit(1758599080.531:954): avc: denied { setopt } for pid=8788 comm="syz.3.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 319.020378][ T30] audit: type=1400 audit(1758599080.541:955): avc: denied { ioctl } for pid=8792 comm="syz.2.631" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 319.187843][ T8803] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20003 [ 319.188620][ T8805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.202403][ T30] audit: type=1400 audit(1758599080.901:956): avc: denied { ioctl } for pid=8802 comm="syz.4.635" path="socket:[19732]" dev="sockfs" ino=19732 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.498227][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 319.888244][ T5928] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 320.056922][ T30] audit: type=1326 audit(1758599081.751:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.2.639" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8eba78eec9 code=0x0 [ 320.088272][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 320.100523][ T5928] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 320.110921][ T5928] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.135705][ T5928] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.160973][ T5928] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.173287][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.181655][ T5928] usb 4-1: Product: syz [ 320.185835][ T5928] usb 4-1: Manufacturer: syz [ 320.193721][ T5928] usb 4-1: SerialNumber: syz [ 320.313525][ T30] audit: type=1400 audit(1758599082.011:958): avc: denied { create } for pid=8823 comm="syz.4.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.352065][ T30] audit: type=1400 audit(1758599082.011:959): avc: denied { bind } for pid=8823 comm="syz.4.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.388227][ T30] audit: type=1400 audit(1758599082.011:960): avc: denied { listen } for pid=8823 comm="syz.4.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.410747][ T30] audit: type=1400 audit(1758599082.011:961): avc: denied { connect } for pid=8823 comm="syz.4.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.520961][ T8826] binder: 8825:8826 ioctl c0306201 0 returned -14 [ 320.538237][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 320.671531][ T5928] usb 4-1: 0:2 : does not exist [ 321.578234][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 322.618215][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 322.859499][ T5928] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 322.897460][ T8847] bond0: (slave bond_slave_0): Releasing backup interface [ 322.926416][ T8847] bond0: (slave bond_slave_1): Releasing backup interface [ 322.940910][ T5928] usb 4-1: USB disconnect, device number 25 [ 322.976266][ T8847] team0: Port device team_slave_0 removed [ 322.997817][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.018936][ T8853] netlink: 'syz.4.646': attribute type 10 has an invalid length. [ 323.044355][ T8847] team0: Port device team_slave_1 removed [ 323.051410][ T8847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.059212][ T8847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.068695][ T8847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.076113][ T8847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.081360][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 323.107610][ T8851] team0: Mode changed to "loadbalance" [ 323.125659][ T8853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.140891][ T8853] team0: Port device bond0 added [ 323.249809][ T8854] team0 (unregistering): Port device bond0 removed [ 323.348421][ T5928] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 323.461552][ T8857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.648'. [ 323.508398][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 323.542087][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.605400][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.617154][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 323.631693][ T5928] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 323.658221][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 323.684158][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.773659][ T5928] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 323.838228][ T5928] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 323.847383][ T5928] usb 4-1: Manufacturer: syz [ 323.855878][ T5928] usb 4-1: config 0 descriptor?? [ 324.088521][ T8852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.098622][ T8852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.178353][ T5928] rc_core: IR keymap rc-hauppauge not found [ 324.185896][ T5928] Registered IR keymap rc-empty [ 324.191038][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 324.219886][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 324.240598][ T5928] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 324.256282][ T5928] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 324.372657][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 324.400591][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 324.419025][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 324.458489][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 324.488722][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 324.518348][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 324.551496][ T8870] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 324.558776][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 324.582141][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 324.609727][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 324.638332][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 324.659315][ T8852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.667911][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 324.667924][ T30] audit: type=1400 audit(1758599086.351:970): avc: denied { create } for pid=8869 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 324.698296][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 324.703748][ T8852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.733514][ T30] audit: type=1400 audit(1758599086.401:971): avc: denied { connect } for pid=8869 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 324.765373][ T5928] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 324.788483][ T5928] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 324.806054][ T30] audit: type=1400 audit(1758599086.401:972): avc: denied { watch } for pid=8869 comm="syz.1.651" path="/132/file0" dev="tmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 324.840714][ T5928] usb 4-1: USB disconnect, device number 26 [ 325.422595][ T8881] syz.4.654: attempt to access beyond end of device [ 325.422595][ T8881] ram201: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 325.737853][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 326.777344][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 327.171071][ T8893] hub 8-0:1.0: USB hub found [ 327.176677][ T8893] hub 8-0:1.0: 1 port detected [ 327.497157][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 327.517254][ T5927] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 327.685385][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 327.696904][ T5927] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 327.715458][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.726751][ T5927] usb 4-1: config 8 has no interface number 0 [ 327.732903][ T5927] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 327.746376][ T10] usb 5-1: config 0 descriptor?? [ 327.751578][ T5927] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 327.761953][ T5927] usb 4-1: config 8 interface 177 has no altsetting 0 [ 327.771272][ T5927] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 327.780437][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.797525][ T8897] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 327.816813][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 327.875831][ T8902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'. [ 328.009485][ T30] audit: type=1400 audit(1758599345.718:973): avc: denied { create } for pid=8896 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 328.012716][ T5927] usb 4-1: string descriptor 0 read error: -71 [ 328.037669][ T5927] ir_toy 4-1:8.177: required endpoints not found [ 328.047607][ T5927] usb 4-1: USB disconnect, device number 27 [ 328.176011][ T10] ath6kl: Unsupported hardware version: 0x0 [ 328.186200][ T10] ath6kl: Failed to init ath6kl core: -22 [ 328.192999][ T10] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 328.856293][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 329.631826][ T30] audit: type=1400 audit(1758599346.358:974): avc: denied { setopt } for pid=8894 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 329.895841][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 329.961807][ T8917] ufs: You didn't specify the type of your ufs filesystem [ 329.961807][ T8917] [ 329.961807][ T8917] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 329.961807][ T8917] [ 329.961807][ T8917] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 330.744007][ T5962] usb 5-1: USB disconnect, device number 22 [ 330.935265][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 331.098765][ T30] audit: type=1400 audit(1758599348.769:975): avc: denied { ioctl } for pid=8929 comm="syz.2.668" path="socket:[20523]" dev="sockfs" ino=20523 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 331.923884][ T30] audit: type=1400 audit(1758599349.619:976): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 331.974731][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 332.427016][ T30] audit: type=1400 audit(1758599350.130:977): avc: denied { map } for pid=8955 comm="syz.1.675" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 333.014213][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 333.461017][ T8963] SELinux: Context is not valid (left unmapped). [ 333.462362][ T30] audit: type=1400 audit(1758599351.160:978): avc: denied { relabelfrom } for pid=8962 comm="syz.1.677" name="NETLINK" dev="sockfs" ino=20608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 333.510239][ T30] audit: type=1400 audit(1758599351.160:979): avc: denied { mac_admin } for pid=8962 comm="syz.1.677" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 333.579884][ T30] audit: type=1400 audit(1758599351.270:980): avc: denied { setopt } for pid=8962 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 333.623955][ T30] audit: type=1400 audit(1758599351.270:982): avc: denied { ioctl } for pid=8962 comm="syz.1.677" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 333.717370][ T30] audit: type=1400 audit(1758599351.270:981): avc: denied { relabelto } for pid=8962 comm="syz.1.677" name="NETLINK" dev="sockfs" ino=20608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="" [ 333.753614][ T8971] overlay: Unknown parameter '/' [ 333.783144][ T30] audit: type=1400 audit(1758599351.450:983): avc: denied { mount } for pid=8966 comm="syz.3.678" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 333.813026][ T30] audit: type=1400 audit(1758599351.450:984): avc: denied { mounton } for pid=8966 comm="syz.3.678" path="/138/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 334.053700][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 334.851961][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 335.103162][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 335.480585][ T8989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.684'. [ 335.664052][ T8990] ptrace attach of "./syz-executor exec"[8992] was attempted by "./syz-executor exec"[8990] [ 336.132666][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 336.197610][ T9006] input: syz1 as /devices/virtual/input/input12 [ 336.268275][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 336.268286][ T30] audit: type=1400 audit(1758599353.972:989): avc: denied { execute_no_trans } for pid=9002 comm="syz.4.688" path="/152/file1" dev="tmpfs" ino=818 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 336.532690][ T30] audit: type=1400 audit(1758599354.092:990): avc: denied { ioctl } for pid=9002 comm="syz.4.688" path="socket:[20317]" dev="sockfs" ino=20317 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 337.062502][ T9018] FAULT_INJECTION: forcing a failure. [ 337.062502][ T9018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.112428][ T9018] CPU: 0 UID: 0 PID: 9018 Comm: syz.1.690 Not tainted syzkaller #0 PREEMPT(full) [ 337.112453][ T9018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 337.112463][ T9018] Call Trace: [ 337.112470][ T9018] [ 337.112476][ T9018] dump_stack_lvl+0x16c/0x1f0 [ 337.112503][ T9018] should_fail_ex+0x512/0x640 [ 337.112529][ T9018] _copy_from_user+0x2e/0xd0 [ 337.112554][ T9018] do_sock_getsockopt+0x3ca/0x440 [ 337.112581][ T9018] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 337.112604][ T9018] ? __fget_files+0x204/0x3c0 [ 337.112636][ T9018] __sys_getsockopt+0x12f/0x260 [ 337.112668][ T9018] __x64_sys_getsockopt+0xbd/0x160 [ 337.112687][ T9018] ? do_syscall_64+0x91/0x4e0 [ 337.112711][ T9018] ? lockdep_hardirqs_on+0x7c/0x110 [ 337.112731][ T9018] do_syscall_64+0xcd/0x4e0 [ 337.112756][ T9018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.112773][ T9018] RIP: 0033:0x7f2ed938eec9 [ 337.112788][ T9018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.112803][ T9018] RSP: 002b:00007f2ed75ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 337.112821][ T9018] RAX: ffffffffffffffda RBX: 00007f2ed95e5fa0 RCX: 00007f2ed938eec9 [ 337.112831][ T9018] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000003 [ 337.112842][ T9018] RBP: 00007f2ed75ee090 R08: 0000200000000000 R09: 0000000000000000 [ 337.112852][ T9018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.112862][ T9018] R13: 00007f2ed95e6038 R14: 00007f2ed95e5fa0 R15: 00007fff54ee7d98 [ 337.112885][ T9018] [ 337.172617][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 337.515230][ T9023] input: syz1 as /devices/virtual/input/input13 [ 338.211612][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 338.801402][ T842] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 338.991838][ T842] usb 5-1: Using ep0 maxpacket: 32 [ 339.002598][ T842] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 339.010880][ T842] usb 5-1: config 0 has no interface number 0 [ 339.017659][ T842] usb 5-1: config 0 interface 184 has no altsetting 0 [ 339.037134][ T842] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 339.046676][ T842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.071548][ T842] usb 5-1: Product: syz [ 339.081647][ T842] usb 5-1: Manufacturer: syz [ 339.091197][ T5962] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 339.111287][ T842] usb 5-1: SerialNumber: syz [ 339.135278][ T842] usb 5-1: config 0 descriptor?? [ 339.163982][ T842] smsc75xx v1.0.0 [ 339.244861][ T5962] usb 2-1: config 0 has an invalid interface number: 127 but max is 1 [ 339.253178][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 339.264085][ T5962] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 339.488847][ T5962] usb 2-1: config 0 has no interface number 1 [ 339.495193][ T30] audit: type=1400 audit(1758599357.043:991): avc: denied { read } for pid=9047 comm="syz.3.697" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 339.499465][ T5962] usb 2-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 339.528187][ T30] audit: type=1400 audit(1758599357.043:992): avc: denied { open } for pid=9047 comm="syz.3.697" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 339.571178][ T5962] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 339.704939][ T5962] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 339.716338][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 339.729411][ T5962] usb 2-1: Product: syz [ 339.739737][ T5962] usb 2-1: Manufacturer: syz [ 339.802180][ T5962] usb 2-1: config 0 descriptor?? [ 339.875462][ T5962] usb-storage 2-1:0.127: USB Mass Storage device detected [ 340.031355][ T842] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 340.057504][ T842] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 340.290683][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 340.598929][ T5962] usb-storage 2-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 340.652170][ T5962] usbhid 2-1:0.127: couldn't find an input interrupt endpoint [ 340.693258][ T5962] usb-storage 2-1:0.0: USB Mass Storage device detected [ 340.760669][ T5962] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 340.942094][ T5927] usb 2-1: USB disconnect, device number 19 [ 341.141524][ T30] audit: type=1400 audit(1758599358.844:993): avc: denied { sqpoll } for pid=9065 comm="syz.3.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 341.330134][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 341.608419][ T842] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 341.634679][ T842] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 341.668227][ T842] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 341.679765][ T842] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 341.696409][ T842] usb 5-1: USB disconnect, device number 23 [ 341.849208][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 341.883210][ T9074] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 341.889749][ T9074] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 341.905884][ T30] audit: type=1400 audit(1758599359.614:994): avc: denied { bind } for pid=9076 comm="syz.2.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 342.029844][ T9074] vhci_hcd vhci_hcd.0: Device attached [ 342.194132][ T5920] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 342.219821][ T30] audit: type=1400 audit(1758599359.825:995): avc: denied { write } for pid=9076 comm="syz.2.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 342.369607][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 342.474201][ T30] audit: type=1400 audit(1758599359.845:996): avc: denied { bind } for pid=9076 comm="syz.2.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 342.493760][ T30] audit: type=1400 audit(1758599359.845:997): avc: denied { node_bind } for pid=9076 comm="syz.2.703" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 342.528444][ T30] audit: type=1326 audit(1758599360.235:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccfd8eec9 code=0x7fc00000 [ 342.786800][ T30] audit: type=1326 audit(1758599360.485:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ccfd8eec9 code=0x7fc00000 [ 342.810552][ T9078] vhci_hcd: connection reset by peer [ 342.824300][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.706'. [ 342.864370][ T12] vhci_hcd: stop threads [ 342.877351][ T12] vhci_hcd: release socket [ 342.881642][ T30] audit: type=1326 audit(1758599360.485:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccfd8eec9 code=0x7fc00000 [ 342.913287][ T30] audit: type=1326 audit(1758599360.485:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccfd8eec9 code=0x7fc00000 [ 342.938060][ T30] audit: type=1326 audit(1758599360.485:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccfd8eec9 code=0x7fc00000 [ 342.969781][ T30] audit: type=1326 audit(1758599360.485:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccfd8eec9 code=0x7fc00000 [ 342.994789][ T12] vhci_hcd: disconnect device [ 343.064600][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'. [ 343.130884][ T9093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.705'. [ 343.140323][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 343.409098][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.710882][ T9102] netdevsim0: mtu less than device minimum [ 344.146231][ T9115] 9pnet_fd: Insufficient options for proto=fd [ 344.386756][ T9112] Bluetooth: MGMT ver 1.23 [ 344.448676][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.488005][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.771710][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.719'. [ 346.070366][ T9143] sp0: Synchronizing with TNC [ 346.527486][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 346.764714][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 347.128009][ T30] kauditd_printk_skb: 1032 callbacks suppressed [ 347.128026][ T30] audit: type=1400 audit(1758599364.837:2036): avc: denied { unmount } for pid=5856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 347.154770][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.206286][ T9157] netlink: 14 bytes leftover after parsing attributes in process `syz.4.724'. [ 347.222568][ T30] audit: type=1400 audit(1758599364.937:2037): avc: denied { ioctl } for pid=9155 comm="syz.4.724" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 347.266232][ T30] audit: type=1400 audit(1758599364.937:2038): avc: denied { name_bind } for pid=9155 comm="syz.4.724" src=65535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 347.287109][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.340728][ T9161] lo speed is unknown, defaulting to 1000 [ 347.354117][ T9162] lo speed is unknown, defaulting to 1000 [ 347.373359][ T9163] netlink: 5 bytes leftover after parsing attributes in process `syz.4.726'. [ 347.396061][ T5927] lo speed is unknown, defaulting to 1000 [ 347.401909][ T5920] vhci_hcd: vhci_device speed not set [ 347.410609][ T5927] 3yz0: Port: 1 Link ACTIVE [ 347.559272][ T5927] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 347.568045][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 347.967329][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 347.992319][ T5927] usb 2-1: unable to get BOS descriptor or descriptor too short [ 348.001427][ T5927] usb 2-1: config 15 has an invalid interface number: 174 but max is 0 [ 348.009896][ T5927] usb 2-1: config 15 has an invalid descriptor of length 136, skipping remainder of the config [ 348.020524][ T5927] usb 2-1: config 15 has no interface number 0 [ 348.036889][ T5927] usb 2-1: config 15 interface 174 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.070607][ T5927] usb 2-1: config 15 interface 174 has no altsetting 0 [ 348.106475][ T5927] usb 2-1: language id specifier not provided by device, defaulting to English [ 348.129336][ T5927] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 348.144461][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.158062][ T5927] usb 2-1: Product: syz [ 348.162814][ T5927] usb 2-1: Manufacturer: syz [ 348.170275][ T5927] usb 2-1: SerialNumber: syz [ 348.299698][ T5844] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 348.354686][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'. [ 348.461831][ T5927] sierra 2-1:15.174: Sierra USB modem converter detected [ 348.496559][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 348.505069][ T5927] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 348.519264][ T5844] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 348.545260][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.555916][ T5927] usb 2-1: USB disconnect, device number 20 [ 348.578451][ T5927] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 348.616432][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 348.741759][ T5844] usb 5-1: config 0 descriptor?? [ 348.746768][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 348.756875][ T5927] sierra 2-1:15.174: device disconnected [ 348.771582][ T5844] cp210x 5-1:0.0: cp210x converter detected [ 348.793146][ T10] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 348.828492][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.842078][ T10] usb 4-1: Product: syz [ 348.846867][ T10] usb 4-1: Manufacturer: syz [ 348.851514][ T10] usb 4-1: SerialNumber: syz [ 348.859084][ T10] usb 4-1: config 0 descriptor?? [ 348.995232][ T5844] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 349.004027][ T5844] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 349.016676][ T5844] usb 5-1: cp210x converter now attached to ttyUSB0 [ 349.043965][ T5844] usb 5-1: USB disconnect, device number 24 [ 349.056997][ T5844] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 349.078554][ T5844] cp210x 5-1:0.0: device disconnected [ 349.081640][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 349.117974][ T10] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate [ 349.143027][ T10] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 349.179126][ T10] usb 4-1: USB disconnect, device number 28 [ 349.426085][ T842] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 349.587484][ T842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.598824][ T842] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 349.610785][ T842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 349.633385][ T842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 349.645048][ T842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 349.654782][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.692182][ T30] audit: type=1400 audit(1758599367.378:2039): avc: denied { execute } for pid=9184 comm="syz.2.733" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 349.716183][ T842] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.763867][ T842] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 349.773468][ T842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.781850][ T842] usb 2-1: Product: syz [ 349.786204][ T842] usb 2-1: Manufacturer: syz [ 349.790781][ T842] usb 2-1: SerialNumber: syz [ 349.801661][ T842] usb 2-1: config 0 descriptor?? [ 349.992075][ T9182] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.007464][ T842] ati_remote 2-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 350.043105][ T30] audit: type=1400 audit(1758599367.749:2040): avc: denied { create } for pid=9195 comm="syz.4.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 350.076208][ T9197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.735'. [ 350.369892][ T30] audit: type=1400 audit(1758599367.779:2041): avc: denied { write } for pid=9195 comm="syz.4.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 350.440507][ T30] audit: type=1400 audit(1758599367.789:2042): avc: denied { read } for pid=9195 comm="syz.4.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 350.477799][ T9182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.535919][ T9182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.695393][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 351.325145][ T5928] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 351.485105][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 351.548234][ T5928] usb 5-1: config 0 has an invalid interface number: 53 but max is 0 [ 351.556868][ T5928] usb 5-1: config 0 has no interface number 0 [ 351.570473][ T5928] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 351.582712][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.734911][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 351.769509][ T5928] usb 5-1: Product: syz [ 351.774900][ T5928] usb 5-1: Manufacturer: syz [ 351.780618][ T5928] usb 5-1: SerialNumber: syz [ 352.017417][ T5928] usb 5-1: config 0 descriptor?? [ 352.313673][ T10] usb 2-1: USB disconnect, device number 21 [ 352.774318][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 352.808123][ T30] audit: type=1400 audit(1758599370.510:2043): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 352.835756][ T30] audit: type=1400 audit(1758599370.550:2044): avc: denied { read } for pid=9200 comm="syz.4.736" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 352.837652][ T842] usb 5-1: USB disconnect, device number 25 [ 352.876739][ T30] audit: type=1400 audit(1758599370.550:2045): avc: denied { open } for pid=9200 comm="syz.4.736" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 353.194340][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 353.357147][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.368212][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 353.375012][ T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 353.384178][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.393645][ T10] usb 2-1: config 0 descriptor?? [ 353.727892][ T30] audit: type=1400 audit(1758599371.440:2046): avc: denied { write } for pid=9226 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 353.803810][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 353.814316][ T10] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 353.823308][ T10] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 353.834817][ T10] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 353.842774][ T10] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 353.851251][ T10] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0 [ 353.869620][ T10] sunplus 0003:04FC:05D8.0005: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.1-1/input0 [ 354.030932][ T30] audit: type=1400 audit(1758599371.711:2047): avc: denied { map } for pid=9226 comm="syz.4.743" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 354.057751][ T30] audit: type=1400 audit(1758599371.711:2048): avc: denied { execute } for pid=9226 comm="syz.4.743" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 354.152590][ T9233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.741'. [ 354.171938][ T9233] geneve2: entered allmulticast mode [ 354.843293][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.986542][ T30] audit: type=1400 audit(1758599372.681:2049): avc: denied { write } for pid=9243 comm="syz.3.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 355.629890][ T30] audit: type=1326 audit(1758599373.341:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9250 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eba78eec9 code=0x7ffc0000 [ 355.848446][ T30] audit: type=1326 audit(1758599373.341:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9250 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8eba78eec9 code=0x7ffc0000 [ 355.872833][ T30] audit: type=1326 audit(1758599373.341:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9250 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eba78eec9 code=0x7ffc0000 [ 355.896245][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 356.068961][ T5927] usb 2-1: USB disconnect, device number 22 [ 356.555228][ T5920] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 356.922250][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 357.113760][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.137601][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.230004][ T5920] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 357.331786][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 357.444142][ T5920] usb 4-1: SerialNumber: syz [ 357.770470][ T5920] usb 4-1: 0:2 : does not exist [ 357.784827][ T5920] usb 4-1: unit 5: unexpected type 0x0a [ 357.920492][ T5920] usb 4-1: USB disconnect, device number 29 [ 357.961739][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 358.144790][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.755685][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 358.755703][ T30] audit: type=1400 audit(1758599376.473:2096): avc: denied { execute } for pid=9293 comm="syz.2.760" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 358.820898][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.759'. [ 359.001207][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 359.101194][ T5927] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 359.252623][ T5927] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 359.267115][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.288836][ T5927] usb 2-1: config 0 descriptor?? [ 359.306112][ T5927] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 359.508025][ T5927] gp8psk: usb in 128 operation failed. [ 359.725415][ T30] audit: type=1400 audit(1758599377.433:2097): avc: denied { setopt } for pid=9306 comm="syz.4.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 359.786103][ T5927] gp8psk: FW Version = 151.00.11 (0x97000b) Build 2233/232/89 [ 359.972692][ T9290] i2c i2c-0: Invalid block write size 34 [ 359.996454][ T5927] gp8psk: FPGA Version = 235 [ 360.040703][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.113877][ T5920] IPVS: starting estimator thread 0... [ 360.302075][ T9315] IPVS: using max 49 ests per chain, 117600 per kthread [ 360.365819][ T9320] netlink: 48 bytes leftover after parsing attributes in process `syz.4.765'. [ 360.522426][ T5927] gp8psk: usb out operation failed. [ 360.545240][ T5927] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 360.556186][ T5927] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 360.576311][ T5927] usb 2-1: USB disconnect, device number 23 [ 360.987233][ T30] audit: type=1400 audit(1758599378.704:2098): avc: denied { read write } for pid=9323 comm="syz.3.766" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 361.012848][ T30] audit: type=1400 audit(1758599378.704:2099): avc: denied { open } for pid=9323 comm="syz.3.766" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 361.080174][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 361.620949][ T30] audit: type=1400 audit(1758599379.344:2100): avc: denied { create } for pid=9330 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 361.709894][ T5927] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 361.719682][ T30] audit: type=1326 audit(1758599379.434:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9330 comm="syz.3.769" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d5a98eec9 code=0x0 [ 361.771276][ T9333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.769'. [ 361.791842][ T30] audit: type=1400 audit(1758599379.514:2102): avc: denied { accept } for pid=9330 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 361.843140][ T30] audit: type=1400 audit(1758599379.534:2103): avc: denied { append } for pid=9330 comm="syz.3.769" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 361.869794][ T5927] usb 5-1: device descriptor read/64, error -71 [ 361.989048][ T9337] FAULT_INJECTION: forcing a failure. [ 361.989048][ T9337] name failslab, interval 1, probability 0, space 0, times 0 [ 362.001911][ T9337] CPU: 0 UID: 0 PID: 9337 Comm: syz.1.768 Not tainted syzkaller #0 PREEMPT(full) [ 362.001927][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 362.001934][ T9337] Call Trace: [ 362.001937][ T9337] [ 362.001941][ T9337] dump_stack_lvl+0x16c/0x1f0 [ 362.001960][ T9337] should_fail_ex+0x512/0x640 [ 362.001974][ T9337] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 362.001988][ T9337] should_failslab+0xc2/0x120 [ 362.002001][ T9337] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 362.002012][ T9337] ? radix_tree_node_alloc.constprop.0+0x1b8/0x350 [ 362.002024][ T9337] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 362.002039][ T9337] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 362.002053][ T9337] idr_get_free+0x528/0xa30 [ 362.002072][ T9337] idr_alloc_u32+0x190/0x2f0 [ 362.002086][ T9337] ? __pfx_idr_alloc_u32+0x10/0x10 [ 362.002100][ T9337] ? __pfx___mutex_lock+0x10/0x10 [ 362.002118][ T9337] idr_alloc+0xc0/0x130 [ 362.002130][ T9337] ? __pfx_idr_alloc+0x10/0x10 [ 362.002146][ T9337] shrinker_alloc+0x2dd/0xbf0 [ 362.002159][ T9337] ? mark_held_locks+0x49/0x80 [ 362.002176][ T9337] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 362.002190][ T9337] ? __pfx_shrinker_alloc+0x10/0x10 [ 362.002204][ T9337] ? lockdep_init_map_type+0x5c/0x280 [ 362.002215][ T9337] ? __raw_spin_lock_init+0x3a/0x110 [ 362.002226][ T9337] ? __init_rwsem+0x12d/0x1b0 [ 362.002239][ T9337] alloc_super+0x7c8/0xbd0 [ 362.002254][ T9337] sget_fc+0x116/0xc20 [ 362.002265][ T9337] ? __pfx_set_anon_super_fc+0x10/0x10 [ 362.002283][ T9337] ? __pfx_shmem_fill_super+0x10/0x10 [ 362.002298][ T9337] get_tree_nodev+0x28/0x190 [ 362.002310][ T9337] vfs_get_tree+0x8e/0x340 [ 362.002327][ T9337] path_mount+0x1513/0x2000 [ 362.002344][ T9337] ? __pfx_path_mount+0x10/0x10 [ 362.002359][ T9337] ? kmem_cache_free+0x2d1/0x4d0 [ 362.002369][ T9337] ? putname+0x154/0x1a0 [ 362.002385][ T9337] ? putname+0x154/0x1a0 [ 362.002401][ T9337] ? __x64_sys_mount+0x28d/0x310 [ 362.002414][ T9337] __x64_sys_mount+0x28d/0x310 [ 362.002428][ T9337] ? __pfx___x64_sys_mount+0x10/0x10 [ 362.002447][ T9337] do_syscall_64+0xcd/0x4e0 [ 362.002463][ T9337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.002474][ T9337] RIP: 0033:0x7f2ed938eec9 [ 362.002483][ T9337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.002494][ T9337] RSP: 002b:00007f2ed75ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 362.002505][ T9337] RAX: ffffffffffffffda RBX: 00007f2ed95e5fa0 RCX: 00007f2ed938eec9 [ 362.002512][ T9337] RDX: 00002000000002c0 RSI: 0000200000000200 RDI: 0000000000000000 [ 362.002519][ T9337] RBP: 00007f2ed75ee090 R08: 0000200000000300 R09: 0000000000000000 [ 362.002525][ T9337] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 362.002531][ T9337] R13: 00007f2ed95e6038 R14: 00007f2ed95e5fa0 R15: 00007fff54ee7d98 [ 362.002545][ T9337] [ 362.119646][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 362.189614][ T5927] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 362.457421][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.772'. [ 362.489495][ T5927] usb 5-1: device descriptor read/64, error -71 [ 362.647964][ T30] audit: type=1326 audit(1758599380.365:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.1.771" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ed938eec9 code=0x0 [ 362.682703][ T5927] usb usb5-port1: attempt power cycle [ 363.079352][ T5927] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 363.109634][ T5927] usb 5-1: device descriptor read/8, error -71 [ 363.159125][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 363.315484][ T30] audit: type=1400 audit(1758599381.035:2105): avc: denied { setopt } for pid=9349 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 363.359122][ T5927] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 363.395001][ T5927] usb 5-1: device descriptor read/8, error -71 [ 363.509480][ T5927] usb usb5-port1: unable to enumerate USB device [ 364.062873][ T9362] vlan2: entered promiscuous mode [ 364.068012][ T9362] bridge0: entered promiscuous mode [ 364.155546][ T9362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9362 comm=syz.1.776 [ 364.171934][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 364.208737][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 364.528657][ T842] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 365.106881][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 365.106899][ T30] audit: type=1400 audit(1758599382.476:2107): avc: denied { ioctl } for pid=9374 comm="syz.4.780" path="/dev/ttyqd" dev="devtmpfs" ino=388 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 365.198154][ T5928] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 365.238134][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.328340][ T842] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 365.336996][ T842] usb 2-1: config 0 has no interface number 0 [ 365.344960][ T842] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 365.360647][ T842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.368739][ T842] usb 2-1: Product: syz [ 365.373053][ T842] usb 2-1: Manufacturer: syz [ 365.377792][ T842] usb 2-1: SerialNumber: syz [ 365.880418][ T5928] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 365.900312][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.910032][ T842] usb 2-1: config 0 descriptor?? [ 365.924318][ T5928] usb 4-1: config 0 descriptor?? [ 365.933950][ T30] audit: type=1400 audit(1758599383.656:2108): avc: denied { ioctl } for pid=9382 comm="syz.4.782" path="socket:[21420]" dev="sockfs" ino=21420 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 365.974058][ T5928] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 366.170812][ T5928] gp8psk: usb in 128 operation failed. [ 366.199845][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'. [ 366.287565][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 366.355548][ T9393] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 366.365964][ T9393] SELinux: failed to load policy [ 366.397680][ T30] audit: type=1400 audit(1758599384.067:2109): avc: denied { connect } for pid=9389 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 366.419160][ T5928] gp8psk: FW Version = 151.00.11 (0x97000b) Build 2233/232/89 [ 366.495223][ T30] audit: type=1400 audit(1758599384.077:2110): avc: denied { load_policy } for pid=9389 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 367.317035][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 367.356371][ T842] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 367.373198][ T842] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 367.398347][ T842] asix 2-1:0.251: probe with driver asix failed with error -71 [ 367.401302][ T9369] i2c i2c-0: Invalid block write size 34 [ 367.409250][ T842] usb 2-1: USB disconnect, device number 24 [ 367.480892][ T5928] gp8psk: FPGA Version = 235 [ 367.581271][ T9404] trusted_key: encrypted_key: insufficient parameters specified [ 367.911012][ T5928] gp8psk: usb out operation failed. [ 367.916248][ T5928] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 367.933318][ T5928] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 367.953638][ T5928] usb 4-1: USB disconnect, device number 30 [ 368.056715][ T842] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 368.356526][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 368.650390][ T842] usb 5-1: unable to get BOS descriptor or descriptor too short [ 368.658728][ T842] usb 5-1: not running at top speed; connect to a high speed hub [ 368.667759][ T842] usb 5-1: config 56 interface 0 has no altsetting 0 [ 368.676904][ T842] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=96.21 [ 368.685999][ T842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.694119][ T842] usb 5-1: Product: syz [ 368.698354][ T842] usb 5-1: Manufacturer: syz [ 368.702942][ T842] usb 5-1: SerialNumber: syz [ 368.921548][ T9410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.933142][ T9410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.943264][ T30] audit: type=1400 audit(1758599386.668:2111): avc: denied { map } for pid=9409 comm="syz.4.788" path="socket:[22029]" dev="sockfs" ino=22029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 368.962474][ T842] adutux 5-1:56.0: interrupt endpoints not found [ 368.980652][ T842] usb 5-1: USB disconnect, device number 30 [ 369.396002][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 369.609760][ T30] audit: type=1400 audit(1758599387.328:2112): avc: denied { bind } for pid=9425 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 370.255781][ T5920] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 370.405619][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 370.413377][ T5920] usb 4-1: config 0 has an invalid interface number: 25 but max is 0 [ 370.427507][ T5920] usb 4-1: config 0 has an invalid descriptor of length 145, skipping remainder of the config [ 370.445493][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 370.454612][ T5920] usb 4-1: config 0 has no interface number 0 [ 370.467233][ T5920] usb 4-1: New USB device found, idVendor=2304, idProduct=0243, bcdDevice=21.07 [ 370.482366][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.530594][ T5920] usb 4-1: config 0 descriptor?? [ 370.673944][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.795'. [ 370.776788][ T9430] binder: 9429:9430 ioctl c0306201 200000001a80 returned -14 [ 371.129857][ T30] audit: type=1400 audit(1758599388.839:2113): avc: denied { listen } for pid=9436 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 371.256456][ T30] audit: type=1400 audit(1758599388.849:2114): avc: denied { bind } for pid=9436 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 371.474968][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 372.326981][ T5979] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.329122][ T30] audit: type=1400 audit(1758599390.050:2115): avc: denied { append } for pid=9450 comm="syz.4.800" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 372.353616][ T9451] netlink: 'syz.4.800': attribute type 2 has an invalid length. [ 372.364178][ T30] audit: type=1400 audit(1758599390.070:2116): avc: denied { ioctl } for pid=9450 comm="syz.4.800" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 372.370559][ T9451] netlink: 132 bytes leftover after parsing attributes in process `syz.4.800'. [ 372.514467][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 372.702219][ T9458] vlan2: entered allmulticast mode [ 372.710062][ T9458] veth1: entered allmulticast mode [ 372.873543][ T30] audit: type=1400 audit(1758599390.590:2117): avc: denied { compute_member } for pid=9460 comm="syz.1.803" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 373.165194][ T9465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.437587][ T5920] dvb-usb: found a 'Pinnacle PCTV 73A' in cold state, will try to load a firmware [ 373.471625][ T9467] loop6: detected capacity change from 0 to 524287999 [ 373.507214][ T5920] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 373.520358][ T5920] dib0700: firmware download failed at 7 with -22 [ 373.536904][ T5920] usb 4-1: USB disconnect, device number 31 [ 373.553983][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 373.711745][ T30] audit: type=1400 audit(1758599391.430:2118): avc: denied { ioctl } for pid=9469 comm="syz.4.805" path="socket:[22207]" dev="sockfs" ino=22207 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 373.743603][ T9471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.765717][ T30] audit: type=1400 audit(1758599391.490:2119): avc: denied { bind } for pid=9469 comm="syz.4.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 373.773380][ T9471] bond0: (slave rose0): Enslaving as an active interface with an up link [ 373.801546][ T30] audit: type=1400 audit(1758599391.490:2120): avc: denied { connect } for pid=9469 comm="syz.4.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 373.821354][ T30] audit: type=1400 audit(1758599391.490:2121): avc: denied { write } for pid=9469 comm="syz.4.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 373.991162][ T9484] tipc: Enabling of bearer rejected, failed to enable media [ 374.593412][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 375.632892][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.028300][ T9534] netlink: 'syz.2.812': attribute type 4 has an invalid length. [ 376.116914][ T9534] netlink: 'syz.2.812': attribute type 4 has an invalid length. [ 376.622721][ T9544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.630309][ T9544] IPv6: NLM_F_CREATE should be set when creating new route [ 376.637667][ T9544] IPv6: NLM_F_CREATE should be set when creating new route [ 376.644909][ T9544] IPv6: NLM_F_CREATE should be set when creating new route [ 376.659220][ T9544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.672392][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.921753][ T30] audit: type=1400 audit(1758599394.632:2122): avc: denied { write } for pid=9553 comm="syz.2.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 377.271156][ T30] audit: type=1326 audit(1758599394.972:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.2.818" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8eba78eec9 code=0x0 [ 377.367485][ T30] audit: type=1400 audit(1758599395.072:2124): avc: denied { read } for pid=9564 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 377.561977][ T5920] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 377.711845][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.724297][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 377.735854][ T5920] usb 5-1: config 1 has an invalid interface number: 138 but max is 0 [ 377.744654][ T5920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.778521][ T5920] usb 5-1: config 1 has no interface number 0 [ 377.806529][ T5920] usb 5-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid wMaxPacketSize 0 [ 377.849569][ T5920] usb 5-1: config 1 interface 138 has no altsetting 0 [ 377.864389][ T5920] usb 5-1: string descriptor 0 read error: -22 [ 377.886367][ T5920] usb 5-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 377.909415][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.951634][ T5920] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.228546][ T5927] usb 5-1: USB disconnect, device number 31 [ 378.275320][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.281709][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.751367][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.812391][ T9581] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 379.468566][ T9598] syzkaller1: entered promiscuous mode [ 379.483087][ T9598] syzkaller1: entered allmulticast mode [ 379.544235][ T9598] loop4: detected capacity change from 0 to 524255232 [ 379.737851][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.824'. [ 379.790831][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 380.592686][ T30] audit: type=1400 audit(1758599398.294:2125): avc: denied { write } for pid=9602 comm="syz.3.827" path="socket:[22723]" dev="sockfs" ino=22723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 380.745877][ T30] audit: type=1400 audit(1758599398.474:2126): avc: denied { mounton } for pid=9610 comm="syz.2.829" path="/170/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 380.820422][ T30] audit: type=1400 audit(1758599398.504:2127): avc: denied { getattr } for pid=9610 comm="syz.2.829" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 380.843203][ T30] audit: type=1400 audit(1758599398.504:2128): avc: denied { mount } for pid=9610 comm="syz.2.829" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 380.850268][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 380.909903][ T30] audit: type=1400 audit(1758599398.634:2129): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 381.167369][ T9618] TCP: TCP_TX_DELAY enabled [ 381.568898][ T30] audit: type=1400 audit(1758599399.294:2130): avc: denied { write } for pid=9624 comm="syz.1.833" path="socket:[22339]" dev="sockfs" ino=22339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 381.717078][ T30] audit: type=1400 audit(1758599399.354:2131): avc: denied { read } for pid=9624 comm="syz.1.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 381.869766][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.824902][ T9630] netlink: 64 bytes leftover after parsing attributes in process `syz.2.834'. [ 382.851506][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 382.869342][ T5928] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 382.882013][ T9630] dummy0: entered promiscuous mode [ 382.901883][ T9630] gretap0: entered promiscuous mode [ 382.909323][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.992988][ T9642] netlink: 'syz.3.838': attribute type 4 has an invalid length. [ 383.070819][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.088843][ T9642] netlink: 'syz.3.838': attribute type 4 has an invalid length. [ 383.099269][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 383.150400][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 383.152458][ T9639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.837'. [ 383.163320][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 383.183759][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 383.183855][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'. [ 383.193715][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.220910][ T5928] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 383.249093][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.257481][ T5928] usb 2-1: Product: syz [ 383.261775][ T5928] usb 2-1: Manufacturer: syz [ 383.266496][ T5928] usb 2-1: SerialNumber: syz [ 383.440306][ T5928] usb 2-1: config 0 descriptor?? [ 383.495165][ T9634] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 383.508402][ T5928] ati_remote 2-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 383.785041][ T9634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.845258][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.840'. [ 383.851612][ T9634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.948756][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 384.041002][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.840'. [ 384.860475][ T30] audit: type=1400 audit(1758599402.596:2132): avc: denied { mount } for pid=9660 comm="syz.3.841" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 384.865796][ T9661] ALSA: mixer_oss: invalid OSS volume 'u' [ 384.882651][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.988222][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 385.216360][ T30] audit: type=1326 audit(1758599402.876:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9664 comm="syz.2.843" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8eba78eec9 code=0x0 [ 385.475825][ T9669] netlink: 'syz.4.842': attribute type 6 has an invalid length. [ 385.669782][ T5927] usb 2-1: USB disconnect, device number 25 [ 386.027685][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 387.067168][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 387.651806][ T30] audit: type=1400 audit(1758599405.387:2134): avc: denied { setopt } for pid=9701 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 388.106939][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 389.146392][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 390.185802][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 390.646113][ T5219] udevd[5219]: worker [6079] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 391.235273][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.264791][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 393.304255][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 394.343866][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 395.383194][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.422732][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.462229][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 398.501734][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.541178][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.580556][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.620076][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 402.659566][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 403.699097][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.738511][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 405.777995][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.827486][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.856972][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.896439][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 409.935927][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 410.975449][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.014877][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 413.054475][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.093845][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.133277][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.172774][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.212297][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 418.251732][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 419.291368][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.330726][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 421.370232][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 422.409798][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 423.449096][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 424.488671][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 425.528119][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 426.567629][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.607096][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 428.646569][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.446092][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 429.453595][ T31] Not tainted syzkaller #0 [ 429.458588][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.467279][ T31] task:kworker/0:0 state:D stack:21912 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 429.479282][ T31] Workqueue: events rfkill_sync_work [ 429.484563][ T31] Call Trace: [ 429.487950][ T31] [ 429.490879][ T31] __schedule+0x1190/0x5de0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 429.495397][ T31] ? find_held_lock+0x2b/0x80 [ 429.500175][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 429.506359][ T30] audit: type=1400 audit(1758599447.258:2135): avc: denied { write } for pid=5832 comm="syz-executor" path="pipe:[4078]" dev="pipefs" ino=4078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 429.530792][ T31] ? __pfx___schedule+0x10/0x10 [ 429.535672][ T31] ? find_held_lock+0x2b/0x80 [ 429.566294][ T31] ? schedule+0x2d7/0x3a0 [ 429.570682][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 429.575277][ T31] schedule+0xe7/0x3a0 [ 429.588457][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.593957][ T31] __mutex_lock+0x81b/0x1060 [ 429.599001][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 429.604044][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 429.608966][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.614008][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 429.619198][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 429.623899][ T31] ? mark_held_locks+0x49/0x80 [ 429.628714][ T31] nfc_dev_down+0x2d/0x2e0 [ 429.633127][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 429.638177][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 429.643890][ T31] rfkill_set_block+0x1fb/0x550 [ 429.648823][ T31] rfkill_sync+0x10a/0x1c0 [ 429.653229][ T31] rfkill_sync_work+0x27/0x40 [ 429.657943][ T31] process_one_work+0x9cc/0x1b70 [ 429.662881][ T31] ? __pfx_process_one_work+0x10/0x10 [ 429.668366][ T31] ? assign_work+0x1a0/0x250 [ 429.672948][ T31] worker_thread+0x6c8/0xf10 [ 429.677574][ T31] ? __pfx_worker_thread+0x10/0x10 [ 429.682675][ T31] kthread+0x3c2/0x780 [ 429.686113][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.687481][ T31] ? __pfx_kthread+0x10/0x10 [ 429.698176][ T31] ? rcu_is_watching+0x12/0xc0 [ 429.702934][ T31] ? __pfx_kthread+0x10/0x10 [ 429.707684][ T31] ret_from_fork+0x56a/0x730 [ 429.712287][ T31] ? __pfx_kthread+0x10/0x10 [ 429.716924][ T31] ret_from_fork_asm+0x1a/0x30 [ 429.721710][ T31] [ 429.724818][ T31] INFO: task kworker/0:6:5960 blocked for more than 143 seconds. [ 429.732633][ T31] Not tainted syzkaller #0 [ 429.737610][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.746453][ T31] task:kworker/0:6 state:D stack:23048 pid:5960 tgid:5960 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 429.758614][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 429.765312][ T31] Call Trace: [ 429.768661][ T31] [ 429.771581][ T31] __schedule+0x1190/0x5de0 [ 429.776177][ T31] ? __ip6_finish_output+0x115/0x1010 [ 429.781551][ T31] ? __pfx___schedule+0x10/0x10 [ 429.786448][ T31] ? find_held_lock+0x2b/0x80 [ 429.791118][ T31] ? schedule+0x2d7/0x3a0 [ 429.795427][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 429.801778][ T31] schedule+0xe7/0x3a0 [ 429.805881][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.811330][ T31] __mutex_lock+0x81b/0x1060 [ 429.816233][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 429.822558][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 429.827578][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.832606][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 429.838503][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 429.844849][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 429.851059][ T31] process_one_work+0x9cc/0x1b70 [ 429.856055][ T31] ? __pfx_process_one_work+0x10/0x10 [ 429.861435][ T31] ? assign_work+0x1a0/0x250 [ 429.866079][ T31] worker_thread+0x6c8/0xf10 [ 429.870678][ T31] ? __kthread_parkme+0x19e/0x250 [ 429.875765][ T31] ? __pfx_worker_thread+0x10/0x10 [ 429.880872][ T31] kthread+0x3c2/0x780 [ 429.884915][ T31] ? __pfx_kthread+0x10/0x10 [ 429.889567][ T31] ? rcu_is_watching+0x12/0xc0 [ 429.894326][ T31] ? __pfx_kthread+0x10/0x10 [ 429.898928][ T31] ret_from_fork+0x56a/0x730 [ 429.903508][ T31] ? __pfx_kthread+0x10/0x10 [ 429.908116][ T31] ret_from_fork_asm+0x1a/0x30 [ 429.912885][ T31] [ 429.915959][ T31] INFO: task syz.0.515:8305 blocked for more than 143 seconds. [ 429.923502][ T31] Not tainted syzkaller #0 [ 429.929553][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.938261][ T31] task:syz.0.515 state:D stack:26264 pid:8305 tgid:8305 ppid:5842 task_flags:0x400040 flags:0x00004004 [ 429.950228][ T31] Call Trace: [ 429.953502][ T31] [ 429.956496][ T31] __schedule+0x1190/0x5de0 [ 429.961012][ T31] ? __pfx___schedule+0x10/0x10 [ 429.965917][ T31] ? find_held_lock+0x2b/0x80 [ 429.970612][ T31] ? schedule+0x2d7/0x3a0 [ 429.974925][ T31] schedule+0xe7/0x3a0 [ 429.979008][ T31] schedule_timeout+0x257/0x290 [ 429.983881][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 429.989342][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.994539][ T31] __wait_for_common+0x2ff/0x4e0 [ 429.999537][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 430.004913][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 430.010420][ T31] ? find_held_lock+0x2b/0x80 [ 430.015096][ T31] ? __flush_work+0x938/0xcc0 [ 430.019810][ T31] ? __flush_work+0x4d0/0xcc0 [ 430.024489][ T31] __flush_work+0x7d7/0xcc0 [ 430.029024][ T31] ? __pfx___might_resched+0x10/0x10 [ 430.034307][ T31] ? __pfx___flush_work+0x10/0x10 [ 430.039484][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 430.044769][ T31] ? __pfx___might_resched+0x10/0x10 [ 430.050105][ T31] __cancel_work_sync+0x10c/0x130 [ 430.055135][ T31] rfkill_unregister+0x95/0x2c0 [ 430.060055][ T31] nfc_unregister_device+0x94/0x330 [ 430.065268][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 430.071021][ T31] virtual_ncidev_close+0x4b/0xa0 [ 430.076068][ T31] __fput+0x3ff/0xb70 [ 430.080052][ T31] task_work_run+0x150/0x240 [ 430.084640][ T31] ? __pfx_task_work_run+0x10/0x10 [ 430.091167][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 430.096950][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 430.102347][ T31] do_syscall_64+0x41c/0x4e0 [ 430.107121][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.113090][ T31] RIP: 0033:0x7fd275d8eec9 [ 430.117639][ T31] RSP: 002b:00007ffe8dd9e4b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 430.126096][ T31] RAX: 0000000000000000 RBX: 00007fd275fe7da0 RCX: 00007fd275d8eec9 [ 430.134058][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 430.142077][ T31] RBP: 00007fd275fe7da0 R08: 0000000000000000 R09: 000000138dd9e7af [ 430.150213][ T31] R10: 00007fd275fe7cb0 R11: 0000000000000246 R12: 0000000000044ea5 [ 430.158228][ T31] R13: 00007ffe8dd9e5b0 R14: ffffffffffffffff R15: 00007ffe8dd9e5d0 [ 430.166373][ T31] [ 430.169420][ T31] [ 430.169420][ T31] Showing all locks held in the system: [ 430.177186][ T31] 4 locks held by kworker/0:0/9: [ 430.182109][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 430.192630][ T31] #1: ffffc900000e7d10 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 430.204440][ T31] #2: ffffffff90822928 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x1b/0x40 [ 430.214391][ T31] #3: ffff88803106a100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 430.223374][ T31] 1 lock held by khungtaskd/31: [ 430.228232][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 430.238075][ T31] 6 locks held by kworker/0:2/55: [ 430.243079][ T31] #0: ffff888145687148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 430.253972][ T31] #1: ffffc9000130fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 430.265317][ T31] #2: ffff8880295ba198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 430.274256][ T31] #3: ffff8880250d7198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 430.283571][ T31] #4: ffff8880538d5160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 430.292916][ T31] #5: ffffffff90822928 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 430.302938][ T31] 5 locks held by kworker/u8:4/60: [ 430.308098][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 430.318043][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 430.327023][ T31] #2: ffffffff9b1066c8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 430.337427][ T31] #3: ffffffff9b09ccc0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 430.347845][ T31] #4: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 430.357586][ T31] 2 locks held by getty/5612: [ 430.362245][ T31] #0: ffff88814cff70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 430.372133][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 430.382311][ T31] 3 locks held by kworker/0:6/5960: [ 430.387524][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 430.397985][ T31] #1: ffffc9000461fd10 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 430.410933][ T31] #2: ffffffff90822928 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 430.422420][ T31] 4 locks held by udevd/6079: [ 430.427137][ T31] #0: ffff88804e39e9e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 430.436059][ T31] #1: ffff8880568ed488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 430.445497][ T31] #2: ffff888032826788 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 430.454985][ T31] #3: ffff8880250d7198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 430.464313][ T31] 1 lock held by syz.0.515/8305: [ 430.469256][ T31] #0: ffff88803106a100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 430.479134][ T31] 2 locks held by syz-executor/8473: [ 430.484416][ T31] #0: ffff88805671e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 430.493934][ T31] #1: ffffffff90822928 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 430.503906][ T31] 2 locks held by syz-executor/9280: [ 430.509206][ T31] #0: ffff888032c02918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 430.518620][ T31] #1: ffffffff90822928 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 430.528568][ T31] 2 locks held by syz.4.842/9669: [ 430.533566][ T31] #0: ffffffff8f304968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 430.542082][ T31] #1: ffffffff90822928 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x136/0x750 [ 430.552136][ T31] 1 lock held by syz.1.845/9681: [ 430.557095][ T31] #0: ffffffff8f304968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 430.565577][ T31] 1 lock held by syz.3.847/9689: [ 430.570506][ T31] #0: ffffffff8f304968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 430.578998][ T31] 1 lock held by syz.3.847/9690: [ 430.583918][ T31] #0: ffffffff8f304968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 430.592524][ T31] 1 lock held by syz.2.850/9702: [ 430.597483][ T31] #0: ffffffff8f304968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 430.605977][ T31] 1 lock held by syz-executor/9719: [ 430.611154][ T31] #0: ffffffff8f304968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 430.619609][ T31] 1 lock held by syz-executor/9721: [ 430.624789][ T31] #0: ffffffff8f304968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 430.633251][ T31] 1 lock held by syz-executor/9723: [ 430.638457][ T31] #0: ffffffff8f304968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 430.646968][ T31] 1 lock held by syz-executor/9725: [ 430.652166][ T31] #0: ffffffff8f304968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 430.660624][ T31] 1 lock held by syz-executor/9727: [ 430.665845][ T31] #0: ffffffff8f304968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 430.674297][ T31] [ 430.676660][ T31] ============================================= [ 430.676660][ T31] [ 430.685047][ T31] NMI backtrace for cpu 1 [ 430.685057][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 430.685071][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 430.685077][ T31] Call Trace: [ 430.685081][ T31] [ 430.685085][ T31] dump_stack_lvl+0x116/0x1f0 [ 430.685103][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 430.685115][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.685134][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 430.685146][ T31] watchdog+0xf0e/0x1260 [ 430.685161][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.685172][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 430.685186][ T31] ? __kthread_parkme+0x19e/0x250 [ 430.685203][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.685215][ T31] kthread+0x3c2/0x780 [ 430.685227][ T31] ? __pfx_kthread+0x10/0x10 [ 430.685238][ T31] ? rcu_is_watching+0x12/0xc0 [ 430.685252][ T31] ? __pfx_kthread+0x10/0x10 [ 430.685263][ T31] ret_from_fork+0x56a/0x730 [ 430.685279][ T31] ? __pfx_kthread+0x10/0x10 [ 430.685294][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.685325][ T31] [ 430.795096][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 430.802059][ T31] Sending NMI from CPU 1 to CPUs 0: [ 430.807380][ C0] NMI backtrace for cpu 0 [ 430.807392][ C0] CPU: 0 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 430.807407][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 430.807416][ C0] Workqueue: bond1 bond_alb_monitor [ 430.807437][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x26/0x40 [ 430.807456][ C0] Code: 90 90 90 90 f3 0f 1e fa 8b 05 16 a7 16 05 85 c0 74 20 8b 05 e0 d7 16 05 85 c0 74 16 65 48 8b 05 98 0f 42 08 8b 80 ec 0a 00 00 <85> c0 0f 94 c0 0f b6 c0 e9 cd ff 02 00 66 2e 0f 1f 84 00 00 00 00 [ 430.807467][ C0] RSP: 0018:ffffc9000211f3e0 EFLAGS: 00000202 [ 430.807477][ C0] RAX: 0000000000000000 RBX: ffffc9000211f7a8 RCX: ffffc90002120001 [ 430.807485][ C0] RDX: ffffc9000211f7b0 RSI: ffffc9000211f790 RDI: ffffc9000211f468 [ 430.807494][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 430.807501][ C0] R10: 0000000000000003 R11: 00000000000121cf R12: ffffc9000211f4a8 [ 430.807509][ C0] R13: ffffc9000211f458 R14: ffffc9000211f7a8 R15: ffffc9000211f48c [ 430.807518][ C0] FS: 0000000000000000(0000) GS:ffff8881246b2000(0000) knlGS:0000000000000000 [ 430.807531][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.807540][ C0] CR2: 0000565539ab3b48 CR3: 000000000e380000 CR4: 00000000003526f0 [ 430.807548][ C0] Call Trace: [ 430.807552][ C0] [ 430.807556][ C0] unwind_next_frame+0x3de/0x20a0 [ 430.807572][ C0] ? kasan_save_stack+0x33/0x60 [ 430.807587][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 430.807604][ C0] arch_stack_walk+0x94/0x100 [ 430.807620][ C0] ? kasan_save_track+0x14/0x30 [ 430.807633][ C0] stack_trace_save+0x8e/0xc0 [ 430.807648][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 430.807664][ C0] ? stack_trace_save+0x8e/0xc0 [ 430.807680][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 430.807696][ C0] ? stack_depot_save_flags+0x29/0x9c0 [ 430.807712][ C0] kasan_save_stack+0x33/0x60 [ 430.807723][ C0] ? kasan_save_stack+0x33/0x60 [ 430.807749][ C0] kasan_save_track+0x14/0x30 [ 430.807760][ C0] __kasan_slab_alloc+0x89/0x90 [ 430.807773][ C0] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 430.807786][ C0] ? kmalloc_reserve+0x18b/0x2c0 [ 430.807804][ C0] ? trace_kmem_cache_alloc+0x28/0xc0 [ 430.807821][ C0] kmalloc_reserve+0x18b/0x2c0 [ 430.807839][ C0] __alloc_skb+0x166/0x380 [ 430.807852][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 430.807865][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 430.807879][ C0] ? sched_clock+0x38/0x60 [ 430.807896][ C0] ? lock_acquire+0x179/0x350 [ 430.807909][ C0] __netdev_alloc_skb+0x213/0x920 [ 430.807924][ C0] alb_send_lp_vid+0x12d/0x520 [ 430.807940][ C0] ? finish_task_switch.isra.0+0x221/0xc10 [ 430.807955][ C0] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 430.807973][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 430.807992][ C0] alb_send_learning_packets+0xe0/0x2f0 [ 430.808009][ C0] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 430.808031][ C0] bond_alb_monitor+0x99e/0x1600 [ 430.808051][ C0] ? __pfx_bond_alb_monitor+0x10/0x10 [ 430.808068][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 430.808088][ C0] process_one_work+0x9cc/0x1b70 [ 430.808105][ C0] ? __pfx_process_one_work+0x10/0x10 [ 430.808127][ C0] ? assign_work+0x1a0/0x250 [ 430.808140][ C0] worker_thread+0x6c8/0xf10 [ 430.808156][ C0] ? __pfx_worker_thread+0x10/0x10 [ 430.808169][ C0] kthread+0x3c2/0x780 [ 430.808181][ C0] ? __pfx_kthread+0x10/0x10 [ 430.808193][ C0] ? rcu_is_watching+0x12/0xc0 [ 430.808209][ C0] ? __pfx_kthread+0x10/0x10 [ 430.808221][ C0] ret_from_fork+0x56a/0x730 [ 430.808232][ C0] ? __pfx_kthread+0x10/0x10 [ 430.808243][ C0] ret_from_fork_asm+0x1a/0x30 [ 430.808262][ C0] [ 430.809650][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 431.172429][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 431.181515][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 431.191544][ T31] Call Trace: [ 431.194808][ T31] [ 431.197716][ T31] dump_stack_lvl+0x3d/0x1f0 [ 431.202298][ T31] vpanic+0x6e8/0x7a0 [ 431.206260][ T31] ? __pfx_vpanic+0x10/0x10 [ 431.210742][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 431.216610][ T31] panic+0xca/0xd0 [ 431.220319][ T31] ? __pfx_panic+0x10/0x10 [ 431.224724][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 431.230073][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 431.236200][ T31] ? watchdog+0xd78/0x1260 [ 431.240595][ T31] ? watchdog+0xd6b/0x1260 [ 431.244984][ T31] watchdog+0xd89/0x1260 [ 431.249215][ T31] ? __pfx_watchdog+0x10/0x10 [ 431.253872][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 431.259046][ T31] ? __kthread_parkme+0x19e/0x250 [ 431.264058][ T31] ? __pfx_watchdog+0x10/0x10 [ 431.268721][ T31] kthread+0x3c2/0x780 [ 431.272765][ T31] ? __pfx_kthread+0x10/0x10 [ 431.277327][ T31] ? rcu_is_watching+0x12/0xc0 [ 431.282065][ T31] ? __pfx_kthread+0x10/0x10 [ 431.286638][ T31] ret_from_fork+0x56a/0x730 [ 431.291201][ T31] ? __pfx_kthread+0x10/0x10 [ 431.295762][ T31] ret_from_fork_asm+0x1a/0x30 [ 431.300509][ T31] [ 431.303733][ T31] Kernel Offset: disabled [ 431.308046][ T31] Rebooting in 86400 seconds..