last executing test programs: 11.134986889s ago: executing program 2 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) r1 = accept4$unix(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000500)=0x6e, 0x80000) connect$unix(r1, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x1f9) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x2) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x5, {0x7, 0x29, 0x2, 0x1122070, 0x9, 0x0, 0x0, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') stat(&(0x7f00000087c0)='./file0/../file0\x00', 0x0) syz_fuse_handle_req(r3, &(0x7f0000006140)="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", 0x2000, &(0x7f00000090c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008440)={0x78, 0x0, 0x0, {0xc, 0x3, 0x0, {0x1, 0x6, 0x6, 0x7, 0x8, 0xffffffffffffff01, 0x80000001, 0x7, 0xffffffff, 0x4000, 0x2, 0x0, 0x0, 0x80, 0x3ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.639395591s ago: executing program 4 (id=821): syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x4180) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) syz_emit_ethernet(0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="aac0f5db6ab9"], 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) setfsuid(0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r6, 0x402, 0x1a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r7, 0x1, r3, 0x4}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000000000)={0x8, 0x8000, 0xc0}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x1, 0x0, 0x3, 0x5}}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x7fffffff}, &(0x7f0000000540)=0x8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0x11}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 10.158489388s ago: executing program 2 (id=822): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xb8}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @uid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004}, 0x4040) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) timerfd_create(0x1, 0x800) socket$packet(0x11, 0x3, 0x300) r5 = fsopen(&(0x7f0000000040)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, r4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) 8.891516864s ago: executing program 3 (id=826): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000200)={0x0, 0xf, 0x4, "da9483aa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x54, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x1, 0x3, 0xa0, 0xc7, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0xc2f}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0x5c4, 0x3}, [@dmm={0x7, 0x24, 0x14, 0x81, 0xb62}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0xd7, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xfa, 0x9, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB='@0+'], 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000580)={0x0, 0x30, 0x4, "e8725b22"}, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x10}}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) 8.85663284s ago: executing program 2 (id=827): syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, 0x0) getpgid(r2) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x200002e6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) pipe2(&(0x7f0000000000), 0x0) 8.778020459s ago: executing program 4 (id=828): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = memfd_create(&(0x7f0000000300)='+\x88\xc7s\x00\x00\x942nodev\x01\x00\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2h\x1c\n\xb8\xd3\x82\x1c>\x13Je\xed\xe7;<\x15\xde\x036;\x90\xcc\xb5\x02\xc2<\xcf\x1c\x1b', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) fcntl$addseals(r1, 0x409, 0x12) syz_emit_ethernet(0x42, &(0x7f0000000280)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x7, 0x72, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4, 0x57}]}}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001}}}}}, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000004c0)=0x2, 0x4) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6d}, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r1, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @private1, 0xce5}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], 0x10b8}, 0x588) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 8.375286443s ago: executing program 2 (id=830): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x37}, 0x24}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x89d, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7, 0x0, r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x5, 0x80000) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'gre0\x00'}}, 0x1e) r5 = io_uring_setup(0xa71, &(0x7f0000000340)={0x0, 0x4086a2, 0x1, 0xfffffffe, 0x276}) socket$pppoe(0x18, 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7.028002776s ago: executing program 2 (id=833): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82\xea\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee\x00\x04\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x81, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="200f280000002830f70ba381020000000000000000cb4fdca056fb7041b91b6ba2add43ee44fbf6fc93f0808251f"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x2020) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000340)='/dev/comedi0\x00', 0x2c83, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0xe}) 6.55816334s ago: executing program 0 (id=834): syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a3318000048110020010000000000000000000000000002ff020000ff7f000000000000000000014e194e20004890780300000000b3000000dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027fd646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e5ca540e4ba089c856bd94fa3fc1c8a5"], 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x82, 0x0, &(0x7f0000000000)) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req={0x10000, 0x8002, 0x8001, 0x8d}, 0x10) recvmmsg$unix(r1, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0xd6, 0x10}, &(0x7f00000006c0)) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000100), 0x20000, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x24, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x48805) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x80000, {0x7, 0x0, 0x0, r8, 0x80, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) 6.515047526s ago: executing program 2 (id=835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESOCT], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) 5.135437276s ago: executing program 1 (id=836): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}, {}, 0x4, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) r2 = gettid() sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x932) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x14004841) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0x1000000d}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xd}, @hci_ev_le_ltk_req={{}, {0xc9, 0x80000000, 0xfff7}}}}, 0x10) recvmsg(r4, 0x0, 0x22) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) socket$kcm(0x29, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/43, 0x2b) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x48, r8, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x800, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 5.135073416s ago: executing program 4 (id=837): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff00b00200000c0a03000000000000000000070000000900020073797a31000000000900010073797a300000000084020380800200800800034000"], 0x344}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x1000000, &(0x7f0000000280)=[@request_death, @clear_death], 0x0, 0x1000000, 0x0}) 5.134876542s ago: executing program 3 (id=838): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) (fail_nth: 10) 5.102866589s ago: executing program 0 (id=839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast2}], 0x30) socket(0x10, 0x803, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04030b005b010000000000"], 0xe) write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) setsockopt$inet_opts(r2, 0x0, 0xb, &(0x7f00000002c0)="8beb3083ed69fcff3ebc3ed133003ae5702a879ea1592b0aed9c4e23162e1d78be4ac20fe4b3ac379316a72cecc84e1d67a70edfb4829e2272600e006187b10eeb450dab84c07ef729d850f65a622a6e24ce85a7872684589a19248d228fe0dca52b866a006841781b9e03ca3cda830acac2a038877d5062590fe96bd38c8559257463e02f590fa50795dc4f484ce2992d976ed997ed113abc7717dda4de89669a2b616906ece1577cb484dbe79c4711586250510783f40d6e660878af928bea1b3eea", 0xc3) 4.894977956s ago: executing program 3 (id=840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000940)={0x60, 0x163eb1b24d6be96d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x5, r2, 0x1, 0x3, 0x6, @remote}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="08ac0f000aac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 4.488754329s ago: executing program 0 (id=841): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfe, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x20004084}, 0x20004814) (fail_nth: 5) 4.363371911s ago: executing program 1 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="190c0500400200102f", @ANYRES16=r2, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x20, 0x0, 0xfffffb81}, {0xff, 0x0, 0x9}, 0x0, 0x1}}, @TCA_TBF_BURST={0x5, 0x6, 0x9}]}}]}, 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES64=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x200400d1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000440)='./bus\x00', 0xf2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r5) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r7], 0x64}, 0x1, 0x0, 0x0, 0x24040055}, 0x0) 3.953907377s ago: executing program 3 (id=843): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x4000000) 3.937448939s ago: executing program 4 (id=844): sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f000000f840)=@deltfilter={0x2354, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0x9, 0x3}, {0x6, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x2324, 0x2, [@TCA_BASIC_ACT={0x398, 0x3, [@m_csum={0x148, 0x7, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9ba, 0x0, 0x5, 0xc}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0x7fffffff, 0x8, 0xf59f1516, 0x9}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x54a4, 0x1c, 0x4, 0x6, 0x4}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0xfd, 0x8, 0x3, 0x9}, 0x2f}}]}, {0xa9, 0x6, "942d8a768ad74f1037ff015636af6cf24c6fd7e38a89d78a98dfa51fc84771965508235fce6c48bee52662cb3c4cc81a10af030b1daa60f3903b7daad41191a3e2e0cc620cec9f397dbefe4ee0f3703a1dba3d96d63961192d23668b7cafc9411f1a4fb3a3d067871fde9c789b93f8dbf7c3b5e4c22525c81824ed48fcd3a013c919957ad740123d0e402e97645dbb4f075b426b7bf53703a941552f5ea752b37defc7ccc4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_ct={0x13c, 0x18, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010102}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_PARMS={0x18, 0x1, {0xffffe47f, 0x10, 0x6, 0x2, 0x9}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010101}, @TCA_CT_LABELS={0x14, 0x7, "b8bedf312152e88146bc8047d6fa79bd"}]}, {0xb9, 0x6, "62d738238387d05bf4dbbcc557b5a07fe2141881f69b52623700a81f5fa6fa7b1baad7858b1be25217d0da3f0ddbb2ecd39de6ce8a7ab0857a58fd5751759fd2746550b6e4d38506e748924f802bbf0956e8b339eafa7f6647f5960f11887b4cd87231f43a660612602d21764a8518d5c56ae7097230235e19e347513388762a3391504dd673e36f6d4610042b6b18ed4681c1a5cdf42608205ec54fdd8b4ec5c85c0ff8bb9bb0464a8e08df50699136ff9a4d14b0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x110, 0x5, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x0, 0x9}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x644}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0xf, 0x8, 0x9, 0x11bec165}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x100, 0x8, 0x22b6, 0x7}, 0x2}}]}, {0x5d, 0x6, "163dfcabe5c8aeb4f6ac7b873f9c90c8d33d4edc031049e95d0cca9f1a7e3b33a079464cd7c480da2f591bc4d88ac7be9ebc4c6ac733f05173749f2708dc9f41e20f545af2799f2a78a33100b26032bad0f8ff649e7366663e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BASIC_ACT={0x1f88, 0x3, [@m_mirred={0xec, 0xe, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x3cb2, 0xffffffffffffffff, 0xfffffff9, 0x7c69}, 0x7626fcca1576c82a}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8, 0x0, 0x8001, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6, 0x6, 0x0, 0x6}, 0x2}}]}, {0x5d, 0x6, "aa3a03cf7b8eb290b94db59c3f3fcb086a5c9a1fbcf087c7fe8faf3053a2d9b1a3fa880b12aa3a863dca933a5d7b910f5da29c8408a356dcf7564f6b56bbf15b9052ca747360a130655d0f97bfb4362c1d791f0051b9a53292"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x50, 0x14, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x80, 0x10000000, 0x333, 0xa0000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x1e48, 0x18, 0x0, 0x0, {{0xa}, {0x1e1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x12c, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x4}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x34, 0x5, 0x0, 0x1, [{0x4}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x2, 0x1, 0x3, 0x7d, 0xfffffffe}, 0x60, 0x7, [{0x6, 0x7, 0x8, 0x6, 0x8}, {0x8, 0x8, 0x80000000, 0x8, 0x10, 0x9}, {0x2, 0x4, 0x8001, 0x8, 0x5, 0x9}]}, [{0x915f, 0x100, 0x3, 0xb, 0x5, 0x3}, {0x5, 0x7fff, 0x6, 0x9, 0x1b1b49d4, 0x5}, {0x1, 0x8137, 0x81, 0x334, 0x3, 0x9}, {0xffff, 0x7ff, 0xc56, 0x5, 0x7, 0x28e}, {0x84, 0x1, 0x1, 0xd1fd, 0xb, 0x1000}, {0xffffffff, 0x101, 0x7, 0x400, 0x3, 0x6}, {0x9, 0x8, 0x1, 0x4, 0x1, 0x80000000}, {0x6, 0x8, 0x0, 0xe, 0x671123c8, 0xffffffff}, {0x5, 0x8, 0x9, 0x3, 0x2, 0xfffffe01}, {0x2bac, 0x4, 0x8, 0x8, 0x6, 0x6}, {0x10000, 0x5, 0x10, 0x8, 0x4, 0xfffffff8}, {0x200, 0x7ff, 0x81, 0x4, 0x3, 0x5e7}, {0x1, 0x2, 0x173, 0x21c, 0x4, 0x4}, {0x1, 0xff, 0x0, 0x4, 0x3dff, 0x1ff}, {0x1, 0x3, 0x5, 0x5, 0x7, 0x3}, {0x2, 0x9, 0x2, 0x8, 0x6}, {0x5, 0x6, 0x3, 0x9, 0x4, 0x8}, {0x3ff, 0x5, 0x71b, 0x1, 0x1, 0xffffff80}, {0xfffff5ba, 0x81, 0x1, 0x3, 0x6e20, 0xd}, {0x7, 0x2, 0x8b000, 0x1, 0x5, 0xffff7711}, {0x4, 0xff, 0x4, 0x2, 0x7f, 0xdb}, {0x4, 0x38, 0x2, 0x5d7, 0x8, 0x10}, {0x4, 0x9, 0x82, 0x1, 0x0, 0x1}, {0x1000, 0x8001, 0x3, 0x6, 0x362, 0xf7}, {0xf, 0x789, 0x5, 0x4, 0xbf, 0x4}, {0x72b, 0x3, 0x7, 0x101, 0xfe, 0x1}, {0x1, 0x4, 0x6, 0x1, 0x6, 0x4}, {0x7, 0x3, 0x569, 0x200, 0x1, 0x78e4}, {0x9, 0xf1fc, 0x5, 0x6, 0xfffffffe, 0x1}, {0x4, 0x134c, 0x800, 0x5, 0x4, 0x6}, {0x7f, 0x1, 0x6, 0x2, 0x400, 0x3e13}, {0x8000, 0x9, 0x7d5, 0x2, 0x1}, {0x2, 0x2, 0x7, 0x8, 0x3, 0x9}, {0x2, 0x3, 0x2f7, 0x5, 0x5, 0xf7e}, {0x9, 0x9, 0x7305, 0x0, 0x7, 0x9}, {0x8, 0x1, 0x8, 0x0, 0x6, 0x3}, {0x10000, 0x9, 0x80000001, 0x3, 0x1d3d, 0x10}, {0x7f, 0x800, 0x5, 0xc58f, 0x3ff, 0xf}, {0x6, 0xa318, 0xe, 0x7, 0x4, 0x7}, {0x200, 0x1, 0x0, 0x3, 0xbc35}, {0x9, 0x5, 0x4, 0x2, 0xf, 0x5}, {0x91, 0x8, 0x2, 0x57, 0xe028, 0x6}, {0x4, 0x1ff, 0x2ec, 0xd, 0x7, 0x2}, {0xd4a, 0x8, 0x8, 0x2, 0x8, 0x4}, {0x274d, 0x2, 0x968, 0x7c, 0x9, 0x80}, {0x10001, 0xa, 0x40, 0x45, 0xe, 0x1}, {0x5, 0xabba, 0xd, 0x2, 0x6, 0x5}, {0x6, 0x3, 0x9, 0xfffffffb, 0x10001}, {0x80, 0x5, 0x800, 0x5, 0x4, 0x6}, {0x80000001, 0x8, 0x3, 0x1, 0x280, 0x7}, {0xfff4, 0x6, 0x1d, 0x9, 0xffffffff, 0xcc6c}, {0x6, 0x6, 0x7, 0xa1, 0x40, 0xc0000000}, {0x7fffffff, 0x40, 0x9, 0x3, 0x10001, 0x7}, {0x80000000, 0xeb, 0x10001, 0x8, 0x3, 0x3}, {0x5, 0x4763, 0x10000, 0x400, 0x800, 0x9}, {0xfffff450, 0xa, 0x0, 0xd, 0x0, 0x5a219c22}, {0x4, 0x5, 0xfffffff9, 0x1000, 0x1}, {0xffff, 0xd, 0xe, 0x7, 0xe2440000, 0x80}, {0x8, 0xffffffff, 0x2, 0xa, 0xc46, 0x1}, {0x8, 0x10000, 0x9bc, 0x3ff, 0x1, 0x9}, {0x5, 0x2, 0x9, 0x6, 0x6, 0x7}, {0x6, 0x8, 0x80000001, 0x2, 0x8, 0x237}, {0x0, 0xf3, 0x2, 0x6a, 0x12, 0xffffffff}, {0x0, 0x5, 0x7, 0x1, 0xffffff01, 0x8}, {0x2, 0x6, 0xe9cc0000, 0xfffffffe, 0x5297, 0x1}, {0x7, 0x1ff, 0x57fe, 0x3, 0x800, 0x8}, {0xe, 0x7, 0x80, 0x7, 0x9, 0x200}, {0x500000, 0x3f, 0x5, 0x4408, 0x8, 0x13}, {0x5, 0x8, 0xfffff001, 0x0, 0x9, 0x4}, {0xfff, 0x5, 0x974, 0x3d, 0x5, 0x7}, {0x7, 0x483, 0x4, 0x0, 0xf119, 0xfffffc01}, {0x0, 0x0, 0x80, 0x3ff, 0xea0, 0x5}, {0x6, 0x7, 0x6, 0x7, 0xfffffff8, 0x1}, {0x8, 0x100, 0x10, 0x3, 0x9, 0x400}, {0x5, 0xfffe0000, 0x880e4e1, 0x8, 0x101, 0x3}, {0x3ff, 0x0, 0x5, 0x2, 0x5, 0x7ff}, {0x35, 0x7, 0x2, 0x80, 0x80, 0x7}, {0x8000, 0x5, 0x5, 0x9, 0x3, 0x800}, {0xd4, 0x1, 0xffffffff, 0x100, 0x9, 0x5}, {0x1, 0x3, 0x4, 0x5, 0x8, 0x4}, {0x1, 0x9, 0x1, 0x48, 0x80, 0x3d}, {0x3ff, 0x162, 0x9, 0x3, 0x1ff, 0x100}, {0x2, 0x86, 0x1, 0x2, 0x7, 0x3}, {0x6, 0x1, 0x8, 0x8001, 0x6, 0x5}, {0x6, 0x1, 0x1, 0x2, 0x81, 0x80}, {0x100, 0xe, 0x5, 0x81, 0x7, 0x3ff}, {0x4, 0x127, 0x3, 0x1, 0xdd39, 0x4000000}, {0x1ff, 0x6, 0x800, 0xfffffffb, 0x7, 0x1ff}, {0x1, 0x80, 0x7, 0x5, 0x6, 0x8}, {0x3, 0x6, 0x5, 0x8001, 0x7fff, 0x47}, {0x7, 0x8001, 0x8, 0x9, 0x2, 0x8}, {0x0, 0x200, 0x4, 0x80, 0xffe00000, 0x8}, {0x0, 0x10000, 0x462b, 0x4, 0x10, 0x1}, {0x39, 0x50, 0xe, 0x8, 0xfffffff4, 0x3}, {0x24, 0x5, 0x7, 0x5, 0x2, 0xa36}, {0x5555, 0xff, 0xc0000, 0x6, 0xfffffff7, 0x7fffffff}, {0x4, 0x1, 0x7fff, 0x8, 0x0, 0x8}, {0xb, 0x3, 0x8000, 0x1, 0x0, 0x3}, {0xb1, 0x5028ec8f, 0x2, 0x2, 0x5, 0xff}, {0x0, 0x3, 0x4, 0x2, 0x6c, 0x2}, {0x1, 0xd, 0x5c2faec7, 0x6, 0x2, 0x572f}, {0x6, 0x1, 0x9, 0x9, 0x6, 0x722}, {0xdd, 0xee, 0x8, 0x3, 0x0, 0x2ef}, {0x7, 0x9, 0x8, 0x0, 0x5, 0xcb}, {0x676, 0x7f, 0x3, 0xe76, 0xd, 0x4}, {0x4, 0xc84, 0x7f7, 0x44e2, 0x200, 0x8}, {0x2, 0x7, 0x800, 0xc, 0x1000, 0x8}, {0x8, 0xfffffffc, 0x0, 0x9, 0xa, 0x50}, {0x1, 0x4, 0x7, 0x7, 0x2, 0x8}, {0x80, 0x40, 0x2, 0x6, 0x40, 0x6}, {0xf, 0x2, 0x8000, 0x30, 0xfffffff9, 0x7ff}, {0x6, 0xffffffff, 0x7, 0x1, 0x1, 0x50}, {0x8, 0xff, 0x6, 0x10, 0x0, 0x9}, {0x3, 0x2, 0x9, 0x5e838f4e, 0x2, 0x1ec}, {0x10000, 0xc, 0x5, 0x5fb9a1ff, 0xc8, 0x4}, {0x4, 0x2, 0x0, 0x3, 0xaaf, 0x9}, {0x10, 0x3, 0xa17, 0x5bb2, 0xe81, 0x2}, {0x8000, 0x7fffffff, 0x400, 0x3, 0xffff0000, 0x2}, {0x7fff, 0x6, 0x3ff, 0xe, 0x75, 0x3}, {0x7, 0x0, 0x5, 0xfffffffc, 0xb188, 0x3}, {0xf494, 0x5, 0x9, 0x5, 0x1}, {0x3, 0x1, 0x7, 0x10, 0x7, 0x1e6a}, {0x4, 0x7, 0x7fffffff, 0x81, 0x7ff, 0x4}, {0x5, 0x0, 0x3, 0x100, 0xfffffff7, 0x4}, {0xe3, 0x9, 0x6, 0xd9, 0x2, 0x400}, {0x10001, 0xa000, 0x9, 0xfffeffff, 0x100, 0xe3}, {0xb009, 0x61b, 0x0, 0x4, 0x1, 0xc7}, {0x34, 0x8000, 0x0, 0x4, 0x9, 0x1}], [{0x2}, {0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x2}, {0x6, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x5}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {}, {0x3}, {0x3, 0x1}, {0x6}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x5}, {0x2, 0x1925ad28dfeceefc}, {0x3, 0x1}, {0x4}, {}, {0x4}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x7}, {0x3, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x5}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0xe0, 0xa, 0x7, 0xfffffffb, 0x2311b9c7}, 0x71, 0x0, [{0x836f, 0x1, 0x4, 0xef8, 0x4, 0x5}, {0x2, 0xfdfa, 0x4, 0x80000001, 0x1000000, 0xffffff7f}]}, [{0xe, 0x100, 0x1, 0x4, 0x7, 0x33}, {0x7, 0xad, 0xfffff201, 0x800, 0x39, 0xfffffffb}, {0x7, 0x81, 0x6, 0x0, 0x10001, 0x8001}, {0xf, 0x3, 0x4, 0x1, 0x3, 0x17}, {0xc22d, 0x8, 0x259f4d72, 0x2, 0x0, 0x101}, {0x8, 0x0, 0x76, 0x10001, 0xa807}, {0x5, 0x0, 0x1c, 0x9, 0x2c9a, 0x8}, {0x0, 0x8, 0x4, 0x7fff, 0x0, 0x100}, {0x2, 0x0, 0x3, 0xffffffff, 0xfffffffa, 0x1}, {0x0, 0x3, 0x9, 0x7, 0xfffffffa}, {0xfffffff8, 0xfffffffc, 0x9, 0x80, 0x80000000, 0xff8d}, {0x22, 0x2, 0xf2, 0x0, 0x10000, 0x7}, {0x26c0, 0x100, 0x9, 0x547b, 0x7fffffff, 0x59}, {0x2, 0x6, 0x1, 0x6, 0x916f, 0x6}, {0x1, 0x9, 0xe3a, 0x6, 0x2, 0xfff}, {0x3, 0x3, 0x3, 0x80000001, 0x4, 0x5}, {0x7e, 0x1, 0x1, 0x8001, 0x8, 0x80}, {0x5, 0x6aa, 0x3, 0x80000000, 0x1, 0x62c9}, {0x9, 0x0, 0x6, 0x8, 0x5, 0x6}, {0xce7, 0x7, 0x1, 0x10, 0x0, 0x3}, {0x9, 0x7, 0x0, 0x5, 0x311b}, {0x0, 0x5, 0x7ff, 0x5, 0x7, 0x100}, {0x2, 0x0, 0xffffff71, 0x3, 0x7e, 0x4}, {0xa, 0x4, 0x4, 0x9, 0x5, 0x6e}, {0x0, 0x5, 0x0, 0x40, 0x4, 0xe504}, {0x4, 0x5, 0x80000001, 0x1, 0x15c, 0x5}, {0x3ff, 0x2, 0x8, 0xf, 0x4}, {0x7, 0x898c, 0x7fffffff, 0x8, 0x7}, {0x5, 0x0, 0x4a2, 0xfff, 0x7f, 0x17a960c2}, {0x8, 0x8, 0x7, 0x4, 0x401, 0x6d386fad}, {0x8, 0x29, 0x6, 0x8, 0x800, 0x2}, {0x5, 0xfffffff9, 0x3, 0x9, 0x3, 0x5}, {0x9, 0x6, 0x1874, 0xc, 0x8, 0x1}, {0x3, 0x1, 0x3ff, 0x2, 0x3, 0x6}, {0x1, 0x2, 0x3, 0xfffffff7, 0x200, 0x6}, {0xfffffffe, 0xb, 0x7, 0xf82d, 0xfb6, 0x6}, {0x3, 0x9, 0x6, 0xc6, 0xfffffffa, 0x1}, {0x5, 0x1, 0x34, 0x1000, 0x6, 0x7}, {0x5, 0x5, 0x8, 0x8, 0x2a5, 0xd}, {0xc, 0x2, 0x6, 0x1, 0x0, 0x9}, {0xb6b, 0xfa, 0x5, 0x6, 0x8, 0x8}, {0x3, 0x10, 0x2, 0x80000000, 0x9735, 0x2}, {0x1ff, 0x9, 0x8, 0x101, 0x10}, {0x40, 0x80000000, 0x130, 0x9, 0x62c800, 0x3}, {0x2b2, 0x7, 0x6, 0xec26, 0x1, 0x3}, {0x1, 0x100, 0x3ff, 0x7f, 0x0, 0x7}, {0x8000, 0x7, 0xab02, 0x4, 0x6, 0x1}, {0x8, 0x8001, 0x3140, 0xe, 0x100, 0x7}, {0xa27, 0x8, 0x1, 0xe, 0x5, 0x3}, {0x7, 0x3, 0x3, 0x1ff, 0x3, 0x1}, {0x0, 0xfff, 0xbbf, 0x2, 0xd416, 0x100}, {0x2, 0x81, 0x0, 0x10000, 0x81}, {0xaa90, 0x5, 0x401, 0x72c, 0x1, 0x5}, {0x9, 0x4, 0x8, 0x7, 0x71, 0x401}, {0x10000, 0x2, 0x3, 0xb, 0x1f73, 0x7fffffff}, {0x5, 0x3, 0x207, 0x4, 0x1000, 0x9}, {0x8, 0x9, 0x6, 0x9, 0x1ff, 0x7}, {0x5, 0xffff86c2, 0x4, 0x5, 0x0, 0x101}, {0xff, 0x7, 0x0, 0x8, 0x79a, 0x7ff}, {0x7, 0x4, 0x7, 0x1, 0xfff, 0x2}, {0x2, 0x7ff, 0x40, 0x7ff, 0xa8d, 0x3ff}, {0x6, 0x1, 0xfb, 0x4, 0x4, 0x66}, {0x7, 0x2, 0xf, 0x7, 0x6, 0x80000000}, {0xaf38, 0x3, 0x3, 0x7, 0xfff, 0x4}, {0x6, 0x200, 0x3, 0x4, 0x0, 0x1}, {0x1, 0x3, 0x3, 0x10, 0xd8d, 0x5c207cc1}, {0x0, 0x7ab, 0x6, 0x8, 0x7, 0x3}, {0x9947, 0x1, 0x1000, 0x9, 0xfffffffa, 0x9}, {0x7fffffff, 0xffffffff, 0xb83, 0x6, 0x0, 0x6}, {0x4, 0x3, 0x6, 0xfa, 0x6}, {0x800, 0x4, 0x45, 0x1, 0x7f, 0x9}, {0x0, 0x28, 0x4, 0xa59, 0x4, 0x40}, {0x4, 0x4, 0x74e6, 0xc, 0x8, 0x3a}, {0x6, 0xd, 0x6, 0x1ff, 0x5b24, 0x3}, {0xf1, 0x8, 0x7fff, 0x2, 0x2, 0x3}, {0x1, 0x5, 0x7fffffff, 0x8000, 0x0, 0x200}, {0x9, 0x5, 0xa372, 0xfff, 0x7fff, 0x297}, {0x1ff, 0x2, 0x6, 0x8, 0xfffffff9, 0x7d5ab19c}, {0xa5, 0x80000001, 0x3, 0x0, 0x9}, {0xc, 0x4, 0x4, 0x5, 0x3, 0x4}, {0x1ff, 0x4, 0x4, 0x9, 0x6, 0xfffffff8}, {0x27, 0x9, 0x8000, 0xe, 0xfb8, 0x3}, {0x0, 0x9, 0xa6c3, 0x0, 0x4, 0x4}, {0x8900, 0x6, 0x1000, 0xe242, 0x8f, 0x7}, {0x3, 0x7, 0x3, 0x1ff, 0x5, 0x79}, {0x2, 0x6, 0x1000, 0x34e3, 0x5}, {0xffff8000, 0x5, 0x7, 0x80, 0x4, 0x1000}, {0x3ff, 0xffffffff, 0xe9f, 0x3ff, 0x101, 0xfffffff9}, {0x6, 0x6, 0x3, 0x6, 0x3, 0x7f}, {0xfffffff9, 0x3, 0xed, 0x3, 0x0, 0x3}, {0x9000000, 0x1, 0x6, 0x1, 0x7, 0xff}, {0x5, 0xae68, 0xfffffff7, 0xfffffff9, 0x6, 0x8d1}, {0x1, 0x1, 0x1, 0x2, 0x1, 0x4}, {0x7, 0x3f800, 0x6, 0x9, 0x2, 0x19}, {0x9, 0x4e6, 0x9, 0x0, 0x1, 0x2}, {0xed, 0x6, 0x4, 0x9, 0x4, 0x757}, {0x2, 0x8001, 0x6, 0x8, 0xec, 0xfffffff6}, {0x4, 0xa, 0x48, 0x10, 0x451, 0x4221}, {0xffff, 0x2, 0x10, 0xd50a, 0x1000, 0x7}, {0x6, 0x7, 0x0, 0x3ff, 0x7, 0x100}, {0x1, 0x7, 0x7, 0x1, 0xd12e, 0x6}, {0x10001, 0x7, 0x7, 0xffff, 0x4, 0x7b}, {0x401, 0x54, 0x1000, 0x3, 0x9c61, 0x2}, {0x422, 0x9, 0xd85, 0xa, 0x0, 0x4}, {0x9, 0xf, 0xc0c5, 0xda, 0x10, 0x10001}, {0x6, 0x64, 0x7b63, 0x6, 0x7, 0x80000000}, {0x401, 0x9, 0x0, 0x1000000, 0x8, 0x7}, {0x6, 0x2, 0x7, 0x71b, 0x3, 0x6}, {0x7, 0x0, 0x2, 0xc, 0x0, 0x9}, {0x94, 0x3ff, 0xf, 0xf, 0x8, 0x1}, {0x81, 0xfffffff9, 0x6, 0x4, 0x1ff, 0x400}, {0x9, 0x0, 0x3, 0x7, 0x7f, 0x10001}, {0x6, 0x1, 0x1ff, 0x7, 0x4}, {0x100, 0x4, 0xfffffffc, 0x7, 0x76, 0x81}, {0x8000, 0xc, 0x742, 0x200, 0x79, 0xc}, {0x8, 0x1, 0xfffffff9, 0x0, 0x0, 0xf}, {0x9, 0x1, 0x80000000, 0x352, 0xffff, 0x1}, {0x2, 0x9, 0x364f, 0x8, 0x1, 0x3}, {0x3, 0xe, 0x5dd, 0x1, 0x4f22, 0x4}, {0x0, 0x9423, 0x6, 0x271, 0x1, 0xad}, {0x5b1, 0x2, 0x5, 0x5, 0x864, 0x4f}, {0x3, 0x3, 0x81, 0xe2, 0x3, 0x3}, {0x9f01, 0x800, 0x200, 0xffff, 0xc, 0xd79}, {0x7fffffff, 0x2, 0x5, 0x4, 0x80000000, 0xb2d}, {0x1f6, 0x7ff, 0x4935, 0x7672, 0x10001, 0x1}, {0x10001, 0x81, 0xd, 0xfffffffa, 0xc}, {0x2, 0x4, 0x1, 0xfffffffa, 0x2, 0x4}, {0x8001, 0x81, 0x1000, 0x8, 0x2, 0x4}], [{0x1}, {}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {}, {0x7, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x5}, {0x5}, {0x4, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0xd3319f567be9e238, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x5}, {}, {0x5c403cc736f9a9, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {}, {}, {0x4}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x9ea4f1694a38a4}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x4, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x2354}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) accept4(r1, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000240)=0x80, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002e00090027ff0f000000000004000000240011"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 3.875585565s ago: executing program 0 (id=845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, '\x00', @raw_data=[0x1, 0x2, 0xf76, 0x9, 0x7ff, 0x7, 0x0, 0x10, 0x76, 0x50, 0x0, 0x31f2, 0x7, 0x7, 0x19, 0xfffffff1, 0xd149, 0xfffffff8, 0x2, 0x5, 0x80000000, 0x1, 0x4, 0x6, 0x1, 0xb, 0x8, 0x80000000, 0x75b, 0x2, 0x80000000, 0x7f]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) r4 = socket$l2tp(0x2, 0x2, 0x73) accept$inet(r4, 0x0, &(0x7f0000000180)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x8, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$KVM_CAP_STEAL_TIME(r2, 0x4068aea3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES16=r5, @ANYBLOB="2f00000012"], 0x20) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x5, 0x400, 0x8}) ioperm(0x8, 0xa8, 0x9) syz_usbip_server_init(0x5) 3.79122774s ago: executing program 3 (id=846): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xefff, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x2}], 0x2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) fanotify_init(0x1, 0x80000) syz_usb_control_io(r4, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x4400, 0x0) setresuid(0x0, 0xee00, 0xee00) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x4, 0x43, 0x2000001, 0x0, 0x2004ce, 0x0, 0xa7c, 0x68ff, 0x80, 0x9, 0x83], 0xeeeb9000, 0x202}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x9, 0xf9, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x6, 0x9, 0x9, 0xf7, 0x97}, {0x2000, 0x3000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x2, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x4000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x3, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.702154947s ago: executing program 1 (id=847): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="000010c20800"}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x9, 0x7, 0x2}, {0x8001, 0x0, 0x6, 0x3}, {0x4bd2, 0x2, 0x7f, 0x132}, {0x7, 0x7, 0xe, 0x1717}]}) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x38b, 0x800}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000a40)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, &(0x7f00000001c0)='discard') 3.672902146s ago: executing program 4 (id=848): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7, 0x3, 0x200, "11010000001400000f4cb8ffffffff00000000001c00", 0x3231564e}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) pselect6(0x40, &(0x7f00000005c0)={0xa9, 0x2, 0x100000800, 0x1, 0x3, 0x4, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000010c0)={0xffffffffffffffff, 0x4bd, 0x10}, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200012, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) pipe2$9p(0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) openat(0xffffffffffffff9c, 0x0, 0x2, 0x128) io_setup(0x9, &(0x7f0000001d00)) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') readv(r6, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.823812891s ago: executing program 0 (id=849): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x89, 0x626442) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000000)={0x0, 0xfffffffffffffe12, 0x800}) 2.751044734s ago: executing program 1 (id=850): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x111) r2 = socket(0x2c, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x25dfdb7b, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000200)={0x131, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000240)={r4, 0x80000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 2.676930503s ago: executing program 0 (id=851): syz_usb_connect(0x2, 0x3f0, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3cef0ffffff93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29bc61cf090aa1e112da07250101000300090507080800040406b505bce3"], 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="20b11f341290f6abfa6422555fc8b5a0fdbc483c4e273bbdc158cf1c0208b0bf398dc85cbaa1c92a2e2287129d82ad", 0x2f) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000100)=0x798, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) 2.120002052s ago: executing program 1 (id=852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast2}], 0x30) socket(0x10, 0x803, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04030b005b010000000000"], 0xe) write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) setsockopt$inet_opts(r2, 0x0, 0xb, &(0x7f00000002c0)="8beb3083ed69fcff3ebc3ed133003ae5702a879ea1592b0aed9c4e23162e1d78be4ac20fe4b3ac379316a72cecc84e1d67a70edfb4829e2272600e006187b10eeb450dab84c07ef729d850f65a622a6e24ce85a7872684589a19248d228fe0dca52b866a006841781b9e03ca3cda830acac2a038877d5062590fe96bd38c8559257463e02f590fa50795dc4f484ce2992d976ed997ed113abc7717dda4de89669a2b616906ece1577cb484dbe79c4711586250510783f40d6e660878af928bea1b3eea", 0xc3) 1.522229002s ago: executing program 1 (id=853): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r7, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x2e}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02000000", @ANYRES16=r7, @ANYBLOB="000225bd7000fcdbdf258600000008000300", @ANYRES32=r9, @ANYBLOB="05001801110000000800a100240000000800270002000000050018011900000008002600a80900000800a0000300000008009f00020000000800270003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48814) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0x30}}, 0x0) r10 = socket(0x10, 0x3, 0x0) write(r10, 0x0, 0x0) rename(0x0, &(0x7f0000000340)='./file0\x00') r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r14], 0x1c}}, 0x4008054) write$nci(r11, &(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)) 519.181569ms ago: executing program 3 (id=854): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0xf8, 0x0, 0xfc, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0x5, [0x0, 0x200089ff]}}) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, 0x0, 0x300060c1) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="bf16000000000000b707000001009fa35070000000000000280000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3010100bd2321afb56fa54f26fb0b71d0e6adff07f1d8f7faf75e0f226bd99eea7960707142fa2dc79b9723741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988ee99fbfbf9b0a4def23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967dec6e802f5ab3eea57b09a2ed4048d3b867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837079e468ee207d2f73902fbcfcf49822775985bf31b715f5888b24efa000000000000ffffffdf0000000000000000000000000000020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b9349e31aa3701c38c527d3237c18e521ab219efdebb7b3de8f67581cf796a1d4223b90b80fcad3f6c962b9f292324b7ab7f7da31cf41ab12012fb1e0a494034127de745409e35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d307db98ca112874ec309baed0499104dcfe7c0f694bd5fc9e66d058b75fa4c81e5c9f42d9383e41d277b10392a96286744f049c3f128f8f92ef992239eafce5b43b4ec1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b2e00916de48a4e70f03cc415ba77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b638c234bbb55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bf6cf8809c3a0d46ff7f000000000000ad1e1f493354b2822b9837421134c0167d78e6c24ed0a2768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4cc302b52e2101de18a1f1f7c551b3fa00055cc1c46c5fd9c26a54d43fa050645bd6109b113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e378a9b15bc20f49e298727340e97c870800000047546103f123f661c84726e7c7c55eff231a1b033d8f841ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef7be184f5e93ba5c8c2a4c04450b652b8d4c2ff030000000000000007c6bbd6cb2b240ce7d47ae636a5dbe9864a117d27326850a7c3b57086a4482c218b10af13d7be94987005088a83880ccab9c99220002af8c5e13d52c87c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a700a86c814459f3cdaaf99000000000000000000bf2130d1b32c826563c718d0ad23bc83ba3f3757210a057e177615c0683f000000000000006d4e0413ab52f5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fcff030000629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa63966945d93c33b038ce0d890f85f8a6ab8487c383e24d4a8051f80e1811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f207ea3df3d6c0002a41783078e56c70afe8016b3dd9dc7785b36e609f173cc747837d600283b3452c57a5d44cacd363589845637071320921d32c1663964eddec97cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c81eb7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dcb0c42c4d719347f3d16304fa000008ffffffffffffff003049ca923d059c0ab5d886a491adacb7e4b43b1b57586e5fe2aa611f6232a9b71882ce24fce75cf105fa57f000756755b7230e2c0c1fed5487271c4f2981cf8f4351ef5d08641dacaed000080000000000000000000000fa36bbac00bb77c933d3961556f3fe647b05643b0000000000000000000000967aef9c5706e13d5889e77dab80a2548ec31629b7355a2bb8b93e4b6323061f545b26accc4621b568ab0bfaf30aa4f60705532c4a09c0a4a5487c762167edf362be35b9c90ad7e372a66bbb1471aa21000000000000104061c66a7432f25687618e31dcef8c5d4a2457a93f3fc6d3d7131746c75ccf400fc1a7a51826832ef7f5fbc78827d937768443a1c1ca3aba930826fd21aa1201d9225256df8de405d1f12c17cdaff3ad675aa333aa7e919459babd3cc1000000000000000000000000000000000000000000000000000000000000000059fdc6a54a2a8b28fa7d9b92aeb58e78e3b8594a5ef6bb67e52bf43b6145f544273a8f62852706c0abef368bfc72f92fa99a7bf121019cff8001fd7d2f6c2c295a5cab383235fec4c1decbed258ee9df8963c0fc828ad2119ffefe36c78692fffb6942b9da0922b2aa8f6b66c14ee7f42d5951edcc986356b41c0de3549f851ca340d9e425e355c1decb785a1042a72c1c98a084b04b1d9be473e50a15d76b110eda3b7cc1f2501211773cf510a43888422c1328476dd6f42659c61a18618fd28d5cd342c276aa9c4cc035077fa09d672b8dcfb3ac1751628647047d07338a8619037e3449a173ddd697f541a0795a2de7ef1396d70675341ebf004be122de04b5275fe7e53d28ebdc5051cec00759d73ca97229d93b965926060b6f91d01324bd458b425ea51c5d5b69551d599188fc6040370ac9ca7ae9eea9e5ede79bd66bd3d616dd7d7dd4c3a8fd055a3585af6fe7f5046c61154598cd33c33a48ece1072afd04b1fd85eb1655d9f3f813392c9634200d892dc6810b436820a1e0f6b464855e28953eb63cd3d6fc1b7bfb588ce28a51af1658d45d759a8399da55a3ff6597bb9f47167fe55ca240623a001e5fe15d9ddefea06a3750501916163844106c4ce662f418d9fc509e5447f712048d53e7e36ee7de083c5ea1119969d858eb6785395fc5a2c551de9a086cb458"], &(0x7f0000000140)='GPL\x00'}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a\\\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, &(0x7f0000000240)={[&(0x7f0000000840)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde6\xfd\vQM`\x8f\xec\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0e}\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13?\x87\'S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) socket(0x10, 0x3, 0x0) 0s ago: executing program 4 (id=855): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001080)="a96a428426d96522dbf395b96cda5289bbfe3d97be8f413c48ec17c91194c66443ac9ed513c32242f54abb9a8ad671c6786dd7161962a8cf0dc4c7c0a1f86f7d1b17cc1660980f64e0b66a61b77eed3c8497ff551a20db0aa749c5ed3d49", 0x5e}], 0x1}}], 0x1, 0x4044805) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) close(0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 000A: unknown main item tag 0x3 [ 208.796552][ T5741] hid-picolcd 0003:04D8:C002.000A: unexpected long global item [ 208.818577][ T5741] hid-picolcd 0003:04D8:C002.000A: device report parse failed [ 208.856078][ T5741] hid-picolcd 0003:04D8:C002.000A: probe with driver hid-picolcd failed with error -22 [ 208.878530][ T7378] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 208.950841][ T7380] netlink: 'syz.3.402': attribute type 21 has an invalid length. [ 208.965080][ T7380] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 209.075429][ T7380] netlink: 144 bytes leftover after parsing attributes in process `syz.3.402'. [ 209.555226][ T7386] netlink: 'syz.0.396': attribute type 10 has an invalid length. [ 209.574783][ T7386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 209.624493][ T7386] team0: Port device netdevsim1 added [ 209.658814][ T7390] netlink: 'syz.0.396': attribute type 10 has an invalid length. [ 209.684166][ T7390] team0: Port device netdevsim1 removed [ 209.696938][ T7390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 209.758075][ T7362] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 210.242310][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 210.291250][ T7392] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 210.402538][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 210.418673][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.441757][ T5741] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 210.451213][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 210.478353][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 210.491235][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.508677][ T10] usb 3-1: config 0 descriptor?? [ 210.621821][ T5741] usb 5-1: Using ep0 maxpacket: 16 [ 210.633757][ T5741] usb 5-1: config 251 has an invalid interface number: 202 but max is 0 [ 210.642258][ T5741] usb 5-1: config 251 has no interface number 0 [ 210.648685][ T5741] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 210.659641][ T5741] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 210.671625][ T5741] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 210.686758][ T5741] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 210.698914][ T5741] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.709728][ T5741] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 210.719930][ T5741] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.733508][ T5741] usb 5-1: config 251 interface 202 has no altsetting 0 [ 210.742686][ T5741] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 210.752025][ T5741] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 210.760555][ T5741] usb 5-1: Product: syz [ 210.765378][ T5741] usb 5-1: SerialNumber: syz [ 210.774213][ T7401] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 210.863361][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 210.863373][ T30] audit: type=1400 audit(1780088234.120:1919): avc: denied { write } for pid=7417 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.990277][ T7401] io-wq is not configured for unbound workers [ 211.004275][ T5741] cxacru 5-1:251.202: submit of read urb for cm 0x90 failed (-90) [ 211.030563][ T9] usb 1-1: USB disconnect, device number 14 [ 211.039523][ T5741] cxacru 5-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 211.055456][ T5741] cxacru 5-1:251.202: probe with driver cxacru failed with error -22 [ 211.098714][ T5741] usb 5-1: USB disconnect, device number 18 [ 211.192275][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 211.208211][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 211.226168][ T10] usb 3-1: USB disconnect, device number 14 [ 211.269779][ T7424] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 212.922258][ T5741] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 213.154157][ T7461] gfs2: gfs2 mount does not exist [ 213.613256][ T5741] usb 3-1: unable to get BOS descriptor or descriptor too short [ 213.930273][ T5741] usb 3-1: not running at top speed; connect to a high speed hub [ 213.967698][ T5741] usb 3-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config [ 213.989859][ T5741] usb 3-1: config 194 has 0 interfaces, different from the descriptor's value: 1 [ 214.026468][ T5741] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.85 [ 214.056248][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.089059][ T5741] usb 3-1: Product: syz [ 214.094295][ T5741] usb 3-1: Manufacturer: syz [ 214.099741][ T5741] usb 3-1: SerialNumber: syz [ 214.171638][ T7474] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 215.529014][ T7487] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 215.652831][ T30] audit: type=1326 audit(1780088238.900:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fe19ce59 code=0x7ffc0000 [ 215.969696][ T5741] usb 3-1: USB disconnect, device number 15 [ 216.006219][ T30] audit: type=1326 audit(1780088238.900:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fe19ce59 code=0x7ffc0000 [ 216.054913][ T7496] syzkaller0: entered promiscuous mode [ 216.061816][ T7496] syzkaller0: entered allmulticast mode [ 216.075244][ T30] audit: type=1326 audit(1780088238.950:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fe19ce59 code=0x7ffc0000 [ 216.135898][ T30] audit: type=1326 audit(1780088238.950:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fe19ce59 code=0x7ffc0000 [ 216.203022][ T30] audit: type=1326 audit(1780088238.970:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f29fe19ce59 code=0x7ffc0000 [ 216.265863][ T30] audit: type=1326 audit(1780088239.000:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fe19ce59 code=0x7ffc0000 [ 216.441756][ T30] audit: type=1326 audit(1780088239.000:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f29fe19cbc2 code=0x7ffc0000 [ 216.904637][ T30] audit: type=1326 audit(1780088239.000:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f29fe19cc57 code=0x7ffc0000 [ 216.961445][ T30] audit: type=1326 audit(1780088239.000:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f29fe159b51 code=0x7ffc0000 [ 217.000115][ T30] audit: type=1326 audit(1780088239.010:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f29fe19dc49 code=0x7ffc0000 [ 217.057677][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'. [ 217.067008][ T30] audit: type=1326 audit(1780088239.040:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7497 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f29fe159bbb code=0x7ffc0000 [ 217.134463][ T7499] Cannot find add_set index 0 as target [ 217.757610][ T7527] gfs2: gfs2 mount does not exist [ 217.993801][ T7529] tc_dump_action: action bad kind [ 218.702048][ T7534] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.902348][ T7540] ubi: mtd0 is already attached to ubi16 [ 220.357471][ T7553] process 'syz.4.455' launched './file2' with NULL argv: empty string added [ 220.713271][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 220.862041][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 221.020682][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 221.020697][ T30] audit: type=1400 audit(1780088244.280:2059): avc: denied { getopt } for pid=7556 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 221.047955][ T30] audit: type=1400 audit(1780088244.280:2060): avc: denied { getopt } for pid=7556 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.075187][ T30] audit: type=1400 audit(1780088244.280:2061): avc: denied { ioctl } for pid=7556 comm="syz.2.458" path="socket:[15750]" dev="sockfs" ino=15750 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.101515][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 221.157795][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 74, changing to 7 [ 221.211267][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 221.221616][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.231771][ T9] usb 2-1: Product: syz [ 221.238101][ T9] usb 2-1: Manufacturer: syz [ 221.245880][ T9] usb 2-1: SerialNumber: syz [ 221.909546][ T7555] FAULT_INJECTION: forcing a failure. [ 221.909546][ T7555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.676981][ T7555] CPU: 1 UID: 0 PID: 7555 Comm: syz.1.457 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.677010][ T7555] Tainted: [L]=SOFTLOCKUP [ 222.677017][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.677027][ T7555] Call Trace: [ 222.677033][ T7555] [ 222.677040][ T7555] dump_stack_lvl+0x100/0x190 [ 222.677065][ T7555] should_fail_ex.cold+0x5/0xa [ 222.677090][ T7555] _copy_from_user+0x2e/0xd0 [ 222.677112][ T7555] copy_msghdr_from_user+0x9f/0x4f0 [ 222.677136][ T7555] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 222.677169][ T7555] ___sys_sendmsg+0x106/0x1e0 [ 222.677193][ T7555] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.677244][ T7555] __sys_sendmsg+0x170/0x220 [ 222.677272][ T7555] ? __pfx___sys_sendmsg+0x10/0x10 [ 222.677309][ T7555] ? rcu_is_watching+0x12/0xc0 [ 222.677339][ T7555] do_syscall_64+0x115/0x870 [ 222.677360][ T7555] ? clear_bhb_loop+0x40/0x90 [ 222.677382][ T7555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.677405][ T7555] RIP: 0033:0x7f871a39ce59 [ 222.677419][ T7555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.677436][ T7555] RSP: 002b:00007f871b28c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.677453][ T7555] RAX: ffffffffffffffda RBX: 00007f871a615fa0 RCX: 00007f871a39ce59 [ 222.677465][ T7555] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000008 [ 222.677475][ T7555] RBP: 00007f871b28c090 R08: 0000000000000000 R09: 0000000000000000 [ 222.677486][ T7555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.677496][ T7555] R13: 00007f871a616038 R14: 00007f871a615fa0 R15: 00007ffecbe75b08 [ 222.677520][ T7555] [ 222.757843][ T7568] gfs2: gfs2 mount does not exist [ 222.908098][ T7570] vxfs: WRONG superblock magic 00000000 at 1 [ 222.919115][ T7555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.457'. [ 222.933468][ T7570] vxfs: WRONG superblock magic 00000000 at 8 [ 222.943375][ T7570] vxfs: can't find superblock. [ 223.259565][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 223.519447][ T9] usb 2-1: unit 3 not found! [ 223.793631][ T9] usb 2-1: USB disconnect, device number 17 [ 224.302933][ T7591] random: crng reseeded on system resumption [ 224.374308][ T30] audit: type=1400 audit(1780088247.560:2062): avc: denied { write } for pid=7588 comm="syz.1.468" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 224.684947][ T30] audit: type=1400 audit(1780088247.560:2063): avc: denied { open } for pid=7588 comm="syz.1.468" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 225.032546][ T30] audit: type=1400 audit(1780088248.290:2064): avc: denied { getopt } for pid=7569 comm="syz.0.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 225.981272][ T7593] ubi: mtd0 is already attached to ubi16 [ 226.532296][ T5816] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 226.560612][ T7617] gfs2: gfs2 mount does not exist [ 227.067470][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 227.079168][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 227.093550][ T5816] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 227.112053][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.220436][ T5816] usb 3-1: Product: syz [ 227.236110][ T5816] usb 3-1: Manufacturer: syz [ 227.255001][ T5816] usb 3-1: SerialNumber: syz [ 227.264496][ T5816] usb 3-1: config 0 descriptor?? [ 227.280568][ T7626] netlink: 'syz.1.480': attribute type 1 has an invalid length. [ 227.299566][ T7626] bond1: entered promiscuous mode [ 227.305046][ T7626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.338416][ T7626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.348647][ T7626] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 227.363868][ T7626] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 227.405888][ T7626] bond1: (slave vti0): making interface the new active one [ 227.413429][ T7626] vti0: entered promiscuous mode [ 227.425719][ T7626] bond1: (slave vti0): Enslaving as an active interface with an up link [ 227.482284][ T30] audit: type=1400 audit(1780088250.750:2065): avc: denied { create } for pid=7607 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 227.524735][ T7629] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 227.541127][ T30] audit: type=1400 audit(1780088250.750:2066): avc: denied { write } for pid=7607 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 227.686426][ T5816] usb 3-1: USB disconnect, device number 16 [ 228.105039][ T5741] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 228.114193][ T30] audit: type=1400 audit(1780088251.370:2067): avc: denied { write } for pid=7641 comm="syz.1.484" name="/" dev="ocfs2_dlmfs" ino=16996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.115296][ T7644] o2cb: This node has not been configured. [ 228.142986][ T7644] o2cb: Cluster check failed. Fix errors before retrying. [ 228.151460][ T7644] (syz.1.484,7644,0):user_dlm_register:674 ERROR: status = -22 [ 228.177296][ T7644] (syz.1.484,7644,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 228.187260][ T30] audit: type=1400 audit(1780088251.380:2068): avc: denied { add_name } for pid=7641 comm="syz.1.484" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.297360][ T30] audit: type=1400 audit(1780088251.380:2069): avc: denied { create } for pid=7641 comm="syz.1.484" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 228.338756][ T30] audit: type=1400 audit(1780088251.380:2070): avc: denied { associate } for pid=7641 comm="syz.1.484" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 228.442214][ T5741] usb 4-1: Using ep0 maxpacket: 8 [ 228.459858][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.481791][ T5741] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 228.498334][ T5741] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 228.529491][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.559942][ T5741] usb 4-1: config 0 descriptor?? [ 228.613476][ T30] audit: type=1400 audit(1780088251.880:2071): avc: denied { read } for pid=5278 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 228.761778][ T29] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 228.922055][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 229.169105][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.182491][ T5741] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x3 [ 229.190031][ T5741] hid-picolcd 0003:04D8:C002.000B: unexpected long global item [ 229.204628][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 229.223053][ T5741] hid-picolcd 0003:04D8:C002.000B: device report parse failed [ 229.236377][ T29] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 229.247216][ T5741] hid-picolcd 0003:04D8:C002.000B: probe with driver hid-picolcd failed with error -22 [ 229.261753][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.299371][ T29] usb 3-1: config 0 descriptor?? [ 229.480500][ T30] audit: type=1400 audit(1780088252.740:2072): avc: denied { write } for pid=7652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.700204][ T7664] ubi: mtd0 is already attached to ubi16 [ 229.853257][ T30] audit: type=1400 audit(1780088253.090:2073): avc: denied { connect } for pid=7670 comm="syz.4.489" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.906011][ T7640] netlink: 'syz.3.483': attribute type 10 has an invalid length. [ 229.987147][ T7677] netlink: 'syz.3.483': attribute type 10 has an invalid length. [ 230.233381][ T29] hid-picolcd 0003:04D8:C002.000C: unknown main item tag 0x3 [ 230.302658][ T29] hid-picolcd 0003:04D8:C002.000C: unexpected long global item [ 230.324964][ T30] audit: type=1400 audit(1780088253.590:2074): avc: denied { write } for pid=7675 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.499208][ T29] hid-picolcd 0003:04D8:C002.000C: device report parse failed [ 230.546543][ T7686] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 230.574190][ T29] hid-picolcd 0003:04D8:C002.000C: probe with driver hid-picolcd failed with error -22 [ 230.611083][ T7677] team0: Port device netdevsim1 removed [ 230.651599][ T7677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.852929][ T7648] netlink: 'syz.2.485': attribute type 10 has an invalid length. [ 231.328174][ T7687] netlink: 'syz.2.485': attribute type 10 has an invalid length. [ 231.341443][ T7648] bond0: (slave netdevsim1): Releasing backup interface [ 231.460676][ T7709] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 231.486241][ T7648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.517752][ T7648] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 231.565772][ T7648] team0: Port device netdevsim1 added [ 231.587118][ T7687] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 231.645826][ T7687] team0: Port device netdevsim1 removed [ 231.679826][ T7687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.718808][ T7687] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 231.876639][ T5720] usb 4-1: USB disconnect, device number 24 [ 232.301944][ T7726] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 232.391960][ T804] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 232.571888][ T804] usb 5-1: Using ep0 maxpacket: 16 [ 232.610269][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.649150][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.695689][ T804] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 232.742308][ T804] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 232.777174][ T804] usb 5-1: Manufacturer: syz [ 232.810613][ T804] usb 5-1: config 0 descriptor?? [ 232.963134][ T5720] usb 3-1: USB disconnect, device number 17 [ 233.351369][ T7734] netlink: 'syz.2.500': attribute type 2 has an invalid length. [ 233.359987][ T7734] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 233.369354][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 233.468954][ T7735] 9p: Bad value for 'wfdno' [ 233.748648][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 233.748678][ T30] audit: type=1400 audit(1780088257.010:2079): avc: denied { bind } for pid=7714 comm="syz.4.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.841784][ T30] audit: type=1400 audit(1780088257.040:2080): avc: denied { setopt } for pid=7714 comm="syz.4.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.862069][ T804] creative-sb0540 0003:041E:3100.000D: unknown main item tag 0x0 [ 233.882629][ T804] creative-sb0540 0003:041E:3100.000D: unknown main item tag 0x0 [ 233.898387][ T804] creative-sb0540 0003:041E:3100.000D: unknown main item tag 0x0 [ 233.915711][ T804] creative-sb0540 0003:041E:3100.000D: unknown main item tag 0x0 [ 233.940041][ T804] creative-sb0540 0003:041E:3100.000D: unknown main item tag 0x0 [ 234.030520][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880385be000: rx timeout, send abort [ 234.047087][ T30] audit: type=1400 audit(1780088257.310:2081): avc: denied { read } for pid=4965 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 234.072493][ T30] audit: type=1400 audit(1780088257.310:2082): avc: denied { search } for pid=4965 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.098774][ T804] creative-sb0540 0003:041E:3100.000D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 234.143568][ T30] audit: type=1400 audit(1780088257.310:2083): avc: denied { write search } for pid=4965 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.211292][ T30] audit: type=1400 audit(1780088257.310:2084): avc: denied { add_name } for pid=4965 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.261753][ T5816] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 234.261759][ T30] audit: type=1400 audit(1780088257.310:2085): avc: denied { create } for pid=4965 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 234.261800][ T30] audit: type=1400 audit(1780088257.310:2086): avc: denied { append open } for pid=4965 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 234.369122][ T30] audit: type=1400 audit(1780088257.310:2087): avc: denied { getattr } for pid=4965 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 234.422566][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 234.439371][ T5816] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 234.451782][ T804] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 234.456916][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.504106][ T5816] pvrusb2: Hardware description: Terratec Grabster AV400 [ 234.524671][ T5816] pvrusb2: ********** [ 234.533190][ T5816] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 234.543442][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880385be000: abort rx timeout. Force session deactivation [ 234.571720][ T5816] pvrusb2: Important functionality might not be entirely working. [ 234.588404][ T5816] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 234.599969][ T5816] pvrusb2: ********** [ 234.644024][ T5720] usb 5-1: USB disconnect, device number 19 [ 234.691749][ T804] usb 2-1: Using ep0 maxpacket: 8 [ 234.698645][ T804] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 74, changing to 7 [ 234.721270][ T2362] pvrusb2: Invalid write control endpoint [ 234.730017][ T804] usb 2-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 234.744431][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.767550][ T804] usb 2-1: Product: syz [ 234.796099][ T804] usb 2-1: Manufacturer: syz [ 234.860491][ T7749] tc_dump_action: action bad kind [ 234.898895][ T804] usb 2-1: SerialNumber: syz [ 235.119641][ T7737] pvrusb2: Invalid write control endpoint [ 235.186920][ T2362] pvrusb2: Invalid write control endpoint [ 235.194384][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 235.204043][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 235.211588][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 235.222704][ T2362] pvrusb2: Device being rendered inoperable [ 235.244054][ T5816] usb 1-1: USB disconnect, device number 15 [ 235.247302][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 235.274360][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 235.289070][ T30] audit: type=1400 audit(1780088258.550:2088): avc: denied { write } for pid=7740 comm="syz.1.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 235.326186][ T2362] pvrusb2: Attached sub-driver cx25840 [ 235.334785][ T7741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.499'. [ 235.343842][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 235.359076][ T7741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.499'. [ 235.372379][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 235.479778][ T804] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 235.494068][ T804] usb 2-1: unit 3 not found! [ 235.542970][ T7753] loop7: detected capacity change from 0 to 16384 [ 235.729474][ T804] usb 2-1: USB disconnect, device number 18 [ 235.808879][ T7753] loop7: detected capacity change from 16384 to 0 [ 236.008408][ T6137] udevd[6137]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.571845][ T5816] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 237.940410][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 238.092873][ T5816] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.431243][ T5816] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.864841][ T5816] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 238.874000][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.086563][ T7811] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.110794][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.130566][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.595641][ T5816] usbhid 4-1:128.0: can't add hid device: -71 [ 239.601903][ T5816] usbhid 4-1:128.0: probe with driver usbhid failed with error -71 [ 239.615945][ T5816] usb 4-1: USB disconnect, device number 25 [ 239.710759][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 239.710791][ T30] audit: type=1400 audit(1780088262.970:2094): avc: denied { wake_alarm } for pid=7799 comm="syz.0.517" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 239.786714][ T7823] ieee802154 phy1 wpan1: encryption failed: -22 [ 239.953494][ T30] audit: type=1400 audit(1780088263.210:2095): avc: denied { mount } for pid=7799 comm="syz.0.517" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 240.529981][ T7828] netlink: 112 bytes leftover after parsing attributes in process `syz.2.525'. [ 240.692139][ T804] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 240.990187][ T30] audit: type=1400 audit(1780088264.250:2096): avc: denied { create } for pid=7840 comm="syz.1.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 241.012733][ T30] audit: type=1400 audit(1780088264.280:2097): avc: denied { write } for pid=7840 comm="syz.1.528" path="socket:[17334]" dev="sockfs" ino=17334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 241.012941][ T7841] netlink: 72 bytes leftover after parsing attributes in process `syz.1.528'. [ 241.043009][ T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.058958][ T804] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 241.070321][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.078731][ T804] usb 1-1: Product: syz [ 241.083044][ T804] usb 1-1: Manufacturer: syz [ 241.088091][ T804] usb 1-1: SerialNumber: syz [ 241.096124][ T30] audit: type=1400 audit(1780088264.360:2098): avc: denied { connect } for pid=7842 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.150044][ T804] usb 1-1: config 0 descriptor?? [ 241.157068][ T30] audit: type=1400 audit(1780088264.360:2099): avc: denied { bind } for pid=7842 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 241.187661][ T30] audit: type=1400 audit(1780088264.450:2100): avc: denied { write } for pid=7840 comm="syz.1.528" path="socket:[17456]" dev="sockfs" ino=17456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 241.213116][ T804] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 241.502080][ T5816] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 241.757022][ T5816] usb 2-1: config 1 has an invalid descriptor of length 208, skipping remainder of the config [ 241.854453][ T5816] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.955631][ T5816] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 242.027291][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.102379][ T5816] usb 2-1: Product: syz [ 242.227632][ T7851] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 242.331982][ T5816] usb 2-1: Manufacturer: syz [ 242.383108][ T5816] usb 2-1: SerialNumber: syz [ 242.924220][ T10] usb 1-1: USB disconnect, device number 16 [ 242.960804][ T30] audit: type=1400 audit(1780088266.220:2101): avc: denied { create } for pid=7857 comm="syz.4.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 243.074009][ T7860] raw_sendmsg: syz.4.534 forgot to set AF_INET. Fix it! [ 243.130262][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 243.140204][ T30] audit: type=1400 audit(1780088266.400:2102): avc: denied { ioctl } for pid=7861 comm="syz.0.535" path="socket:[17386]" dev="sockfs" ino=17386 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 243.189280][ T30] audit: type=1400 audit(1780088266.430:2103): avc: denied { write } for pid=7861 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 243.651794][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 243.682838][ T7876] netlink: 'syz.4.537': attribute type 1 has an invalid length. [ 243.690558][ T7876] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.537'. [ 243.801814][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 243.821596][ T10] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.850463][ T10] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.889263][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 244.194145][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.300988][ T5816] usb 2-1: 0:1 : does not exist [ 244.431930][ T5816] usb 2-1: unit 4 not found! [ 244.459965][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.483232][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.507461][ T5816] usb 2-1: USB disconnect, device number 19 [ 244.584948][ T7887] ieee802154 phy1 wpan1: encryption failed: -22 [ 244.721815][ T5720] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 245.128215][ T10] usbhid 1-1:128.0: can't add hid device: -71 [ 245.134487][ T10] usbhid 1-1:128.0: probe with driver usbhid failed with error -71 [ 245.144244][ T5720] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 245.156351][ T10] usb 1-1: USB disconnect, device number 17 [ 245.162358][ T5720] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 245.180436][ T5720] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 245.190589][ T5816] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 245.200103][ T5720] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 245.209311][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.217888][ T5720] usb 5-1: Product: syz [ 245.222174][ T5720] usb 5-1: Manufacturer: syz [ 245.226804][ T5720] usb 5-1: SerialNumber: syz [ 245.234145][ T5720] usb 5-1: config 0 descriptor?? [ 245.239629][ T7883] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 245.247119][ T7883] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 245.255178][ T5720] usb 5-1: ucan: probing device on interface #0 [ 245.343764][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 245.360816][ T5816] usb 2-1: config 3 has an invalid interface number: 188 but max is 2 [ 245.373533][ T5816] usb 2-1: config 3 has an invalid interface number: 193 but max is 2 [ 245.385271][ T5816] usb 2-1: config 3 has an invalid interface number: 227 but max is 2 [ 245.395405][ T5816] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 245.405935][ T5816] usb 2-1: config 3 has an invalid descriptor of length 233, skipping remainder of the config [ 245.432487][ T5816] usb 2-1: config 3 has no interface number 0 [ 245.442856][ T5816] usb 2-1: config 3 has no interface number 1 [ 245.449095][ T5816] usb 2-1: config 3 has no interface number 2 [ 245.456439][ T5816] usb 2-1: config 3 interface 193 altsetting 199 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 245.468666][ T5720] usb 5-1: ucan: device protocol version 0 is not supported [ 245.476366][ T5816] usb 2-1: config 3 interface 193 altsetting 199 has an invalid descriptor for endpoint zero, skipping [ 245.488027][ T5720] usb 5-1: ucan: probe failed; try to update the device firmware [ 245.498749][ T5816] usb 2-1: config 3 interface 193 altsetting 199 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 245.515629][ T5816] usb 2-1: config 3 interface 227 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 245.535751][ T5816] usb 2-1: config 3 interface 227 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 245.551204][ T5816] usb 2-1: config 3 interface 188 has no altsetting 0 [ 245.559329][ T5816] usb 2-1: config 3 interface 193 has no altsetting 0 [ 245.566995][ T5816] usb 2-1: config 3 interface 227 has no altsetting 0 [ 245.578033][ T5816] usb 2-1: New USB device found, idVendor=067b, idProduct=0001, bcdDevice=7a.d0 [ 245.587651][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.595775][ T5816] usb 2-1: Product: syz [ 245.599978][ T5816] usb 2-1: Manufacturer: Ó¿ [ 245.604679][ T5816] usb 2-1: SerialNumber: syz [ 245.756140][ T7898] syzkaller0: entered promiscuous mode [ 245.762172][ T7898] syzkaller0: entered allmulticast mode [ 245.818026][ T5816] plusb 2-1:3.188: probe with driver plusb failed with error -22 [ 245.833559][ T5816] plusb 2-1:3.193: probe with driver plusb failed with error -22 [ 245.846771][ T5816] plusb 2-1:3.227: probe with driver plusb failed with error -22 [ 245.860863][ T5816] usb 2-1: USB disconnect, device number 20 [ 246.011947][ T5720] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 246.021722][ T5743] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 246.161729][ T5720] usb 1-1: Using ep0 maxpacket: 16 [ 246.168087][ T5720] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 246.176264][ T5720] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 246.186565][ T5720] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 48, using maximum allowed: 30 [ 246.192976][ T5743] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.197373][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 246.209618][ T5743] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 246.221353][ T5720] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 246.230609][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.238765][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.256871][ T5743] usb 3-1: Product: syz [ 246.261292][ T5743] usb 3-1: Manufacturer: syz [ 246.262001][ T5720] usb 1-1: config 0 descriptor?? [ 246.266435][ T5743] usb 3-1: SerialNumber: syz [ 246.282183][ T5743] usb 3-1: config 0 descriptor?? [ 246.290131][ T5743] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 246.479381][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 246.479398][ T30] audit: type=1400 audit(1780088269.740:2106): avc: denied { read write } for pid=7897 comm="syz.0.546" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 246.512714][ T5720] usb 1-1: string descriptor 0 read error: -71 [ 246.531434][ T5720] pxrc 1-1:0.0: Could not find endpoint [ 246.534590][ T30] audit: type=1400 audit(1780088269.740:2107): avc: denied { open } for pid=7897 comm="syz.0.546" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 246.562186][ T30] audit: type=1400 audit(1780088269.750:2108): avc: denied { ioctl } for pid=7897 comm="syz.0.546" path="/dev/sg0" dev="devtmpfs" ino=744 ioctlcmd=0x2272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 246.569386][ T5720] usb 1-1: USB disconnect, device number 18 [ 247.531322][ T5720] usb 5-1: USB disconnect, device number 20 [ 248.621522][ T5743] usb 3-1: USB disconnect, device number 18 [ 249.244196][ T5743] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 249.436017][ T30] audit: type=1400 audit(1780088272.680:2109): avc: denied { getopt } for pid=7937 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 249.675272][ T5743] usb 2-1: unable to get BOS descriptor or descriptor too short [ 249.711106][ T7942] FAULT_INJECTION: forcing a failure. [ 249.711106][ T7942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.852410][ T5743] usb 2-1: not running at top speed; connect to a high speed hub [ 249.937923][ T7942] CPU: 1 UID: 0 PID: 7942 Comm: syz.3.559 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.937954][ T7942] Tainted: [L]=SOFTLOCKUP [ 249.937961][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.937971][ T7942] Call Trace: [ 249.937977][ T7942] [ 249.937984][ T7942] dump_stack_lvl+0x100/0x190 [ 249.938012][ T7942] should_fail_ex.cold+0x5/0xa [ 249.938038][ T7942] _copy_from_user+0x2e/0xd0 [ 249.938062][ T7942] kstrtouint_from_user+0xd6/0x1d0 [ 249.938089][ T7942] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 249.938114][ T7942] ? __lock_acquire+0x4a5/0x2630 [ 249.938142][ T7942] ? lock_acquire+0x1b1/0x370 [ 249.938168][ T7942] proc_fail_nth_write+0x83/0x220 [ 249.938189][ T7942] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 249.938217][ T7942] vfs_write+0x2aa/0x1070 [ 249.938239][ T7942] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 249.938261][ T7942] ? __pfx_vfs_write+0x10/0x10 [ 249.938283][ T7942] ? __fget_files+0x215/0x3d0 [ 249.938312][ T7942] ? __fget_files+0x21f/0x3d0 [ 249.938343][ T7942] ksys_write+0x12a/0x250 [ 249.938362][ T7942] ? __pfx_ksys_write+0x10/0x10 [ 249.938384][ T7942] ? rcu_is_watching+0x12/0xc0 [ 249.938414][ T7942] do_syscall_64+0x115/0x870 [ 249.938437][ T7942] ? clear_bhb_loop+0x40/0x90 [ 249.938460][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.938478][ T7942] RIP: 0033:0x7f09ff95d68e [ 249.938493][ T7942] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 249.938510][ T7942] RSP: 002b:00007f0a008fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.938527][ T7942] RAX: ffffffffffffffda RBX: 00007f0a008fe6c0 RCX: 00007f09ff95d68e [ 249.938539][ T7942] RDX: 0000000000000001 RSI: 00007f0a008fe0a0 RDI: 0000000000000003 [ 249.938549][ T7942] RBP: 00007f0a008fe090 R08: 0000000000000000 R09: 0000000000000000 [ 249.938559][ T7942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.938569][ T7942] R13: 00007f09ffc16038 R14: 00007f09ffc15fa0 R15: 00007ffe99a88c48 [ 249.938595][ T7942] [ 250.403499][ T5743] usb 2-1: config 194 has an invalid interface number: 4 but max is 0 [ 250.409452][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.418842][ T5743] usb 2-1: config 194 has no interface number 0 [ 250.432217][ T5743] usb 2-1: config 194 interface 4 has no altsetting 0 [ 250.576091][ T5743] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.85 [ 250.658720][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.738197][ T5743] usb 2-1: Product: syz [ 250.787963][ T5743] usb 2-1: Manufacturer: syz [ 250.803343][ T5743] usb 2-1: SerialNumber: syz [ 250.814479][ T30] audit: type=1400 audit(1780088274.080:2110): avc: denied { shutdown } for pid=7945 comm="syz.2.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 250.842984][ T30] audit: type=1400 audit(1780088274.100:2111): avc: denied { getopt } for pid=7945 comm="syz.2.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 251.142628][ T5720] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 251.386251][ T5720] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 251.454880][ T5720] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 251.495834][ T5720] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 251.525534][ T5720] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 251.541178][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.550060][ T5720] usb 4-1: Product: syz [ 251.552869][ T7957] FAULT_INJECTION: forcing a failure. [ 251.552869][ T7957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.554654][ T5720] usb 4-1: Manufacturer: syz [ 251.567720][ T7957] CPU: 1 UID: 0 PID: 7957 Comm: syz.4.564 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.567745][ T7957] Tainted: [L]=SOFTLOCKUP [ 251.567751][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.567762][ T7957] Call Trace: [ 251.567767][ T7957] [ 251.567773][ T7957] dump_stack_lvl+0x100/0x190 [ 251.567797][ T7957] should_fail_ex.cold+0x5/0xa [ 251.567819][ T7957] _copy_from_user+0x2e/0xd0 [ 251.567838][ T7957] copy_msghdr_from_user+0x9f/0x4f0 [ 251.567858][ T7957] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 251.567887][ T7957] ___sys_sendmsg+0x106/0x1e0 [ 251.567907][ T7957] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.567952][ T7957] __sys_sendmsg+0x170/0x220 [ 251.567975][ T7957] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.568007][ T7957] ? rcu_is_watching+0x12/0xc0 [ 251.568033][ T7957] do_syscall_64+0x115/0x870 [ 251.568052][ T7957] ? clear_bhb_loop+0x40/0x90 [ 251.568071][ T7957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.568087][ T7957] RIP: 0033:0x7fbba099ce59 [ 251.568100][ T7957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.568115][ T7957] RSP: 002b:00007fbba1892028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.568131][ T7957] RAX: ffffffffffffffda RBX: 00007fbba0c15fa0 RCX: 00007fbba099ce59 [ 251.568141][ T7957] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000006 [ 251.568151][ T7957] RBP: 00007fbba1892090 R08: 0000000000000000 R09: 0000000000000000 [ 251.568160][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.568169][ T7957] R13: 00007fbba0c16038 R14: 00007fbba0c15fa0 R15: 00007ffd48c84078 [ 251.568191][ T7957] [ 251.748021][ T5720] usb 4-1: SerialNumber: syz [ 251.755395][ T5720] usb 4-1: config 0 descriptor?? [ 251.761236][ T7952] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 251.768646][ T7952] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 251.778756][ T5720] usb 4-1: ucan: probing device on interface #0 [ 251.982969][ T5720] usb 4-1: ucan: device protocol version 0 is not supported [ 251.998958][ T5743] usb 2-1: USB disconnect, device number 21 [ 252.018031][ T5720] usb 4-1: ucan: probe failed; try to update the device firmware [ 252.297417][ T7975] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 252.365089][ T5743] IPVS: starting estimator thread 0... [ 252.504352][ T7976] IPVS: using max 41 ests per chain, 98400 per kthread [ 252.766377][ T30] audit: type=1400 audit(1780088276.030:2112): avc: denied { write } for pid=7977 comm="syz.4.569" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 252.800944][ T30] audit: type=1400 audit(1780088276.030:2113): avc: denied { open } for pid=7977 comm="syz.4.569" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 253.029178][ T7991] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 254.251026][ T5720] usb 4-1: USB disconnect, device number 26 [ 255.051792][ T5743] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 255.076440][ T8021] binder: 8020:8021 ioctl 8080aea1 0 returned -22 [ 255.101047][ T8021] binder: 8020:8021 ioctl c0306201 200000000240 returned -14 [ 255.117950][ T8021] binder: 8020:8021 ioctl c0845657 200000000000 returned -22 [ 255.167207][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 255.203673][ T5743] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 255.222539][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.233112][ T8027] L: renamed from team0 [ 255.238702][ T5743] usb 2-1: config 0 descriptor?? [ 255.255507][ T5743] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 255.263123][ T5743] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 255.381885][ T804] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 255.591859][ T804] usb 4-1: unable to get BOS descriptor or descriptor too short [ 255.604603][ T804] usb 4-1: not running at top speed; connect to a high speed hub [ 255.616752][ T804] usb 4-1: config 1 has an invalid interface number: 93 but max is 0 [ 255.625396][ T804] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.636727][ T804] usb 4-1: config 1 has no interface number 0 [ 255.643161][ T804] usb 4-1: config 1 interface 93 altsetting 185 endpoint 0x2 has invalid wMaxPacketSize 0 [ 255.653896][ T804] usb 4-1: config 1 interface 93 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.670043][ T804] usb 4-1: config 1 interface 93 has no altsetting 0 [ 255.680840][ T804] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 255.691130][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.691828][ T30] audit: type=1400 audit(1780088278.960:2114): avc: denied { write } for pid=8008 comm="syz.1.579" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 255.722330][ T804] usb 4-1: Product: syz [ 255.732001][ T804] usb 4-1: Manufacturer: syz [ 255.734364][ T8012] binder_alloc: 8008: pid 8008 spamming oneway? 1 buffers allocated for a total size of 4096 [ 255.736892][ T804] usb 4-1: SerialNumber: syz [ 255.788316][ T10] usb 2-1: USB disconnect, device number 22 [ 255.796977][ T30] audit: type=1400 audit(1780088278.990:2115): avc: denied { map } for pid=8008 comm="syz.1.579" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 255.822945][ T30] audit: type=1400 audit(1780088279.000:2116): avc: denied { call } for pid=8008 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 256.118626][ T8037] virtio-fs: tag not found [ 256.300068][ T8037] PKCS7: Unknown OID: [4] (bad) [ 256.306496][ T8037] PKCS7: Only support pkcs7_signedData type [ 256.441557][ T804] peak_usb 4-1:1.93 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 256.487248][ T804] peak_usb 4-1:1.93: unable to read PCAN-USB serial number (err -22) [ 256.751011][ T8047] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.590'. [ 256.785546][ T804] peak_usb 4-1:1.93: probe with driver peak_usb failed with error -22 [ 256.849869][ T804] usb 4-1: USB disconnect, device number 27 [ 257.558753][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 257.613294][ T8071] netlink: 'syz.1.596': attribute type 1 has an invalid length. [ 257.621225][ T8071] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.596'. [ 257.751559][ T30] audit: type=1400 audit(1780088281.010:2117): avc: denied { write } for pid=8051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.813737][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 257.824163][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 258.805505][ T10] usb 5-1: config 8 has an invalid interface number: 46 but max is 0 [ 258.814205][ T10] usb 5-1: config 8 has no interface number 0 [ 258.820508][ T30] audit: type=1400 audit(1780088282.080:2118): avc: denied { write } for pid=8082 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.923402][ T804] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 259.150932][ T10] usb 5-1: config 8 interface 46 has no altsetting 0 [ 259.512385][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=1700, bcdDevice=a7.db [ 259.528296][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.536425][ T10] usb 5-1: Product: syz [ 259.541334][ T10] usb 5-1: Manufacturer: syz [ 259.546437][ T10] usb 5-1: SerialNumber: syz [ 259.750242][ T804] usb 1-1: device descriptor read/all, error -71 [ 259.776572][ T8062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.819087][ T8062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.875589][ T8099] loop7: detected capacity change from 0 to 16384 [ 260.272207][ T5816] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 260.358055][ T10] smsusb:smsusb_probe: board id=5, interface number 46 [ 260.395552][ T10] usb 5-1: USB disconnect, device number 21 [ 260.432070][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 260.440835][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.479228][ T5816] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 260.512613][ T5816] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 260.555685][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.561736][ T5743] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 260.594726][ T5816] usb 3-1: config 0 descriptor?? [ 260.629043][ T30] audit: type=1326 audit(1780088283.890:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.0.607" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fe19ce59 code=0x7ffc0000 [ 260.716647][ T30] audit: type=1326 audit(1780088283.890:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.0.607" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fe19ce59 code=0x7ffc0000 [ 260.762542][ T5743] usb 4-1: Using ep0 maxpacket: 8 [ 260.774700][ T5743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.793934][ T8122] tunl0: entered promiscuous mode [ 260.802152][ T5743] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 260.812972][ T30] audit: type=1326 audit(1780088283.930:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.0.607" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fe19ce59 code=0x7ffc0000 [ 260.849588][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.852240][ T8092] audit: audit_backlog=65 > audit_backlog_limit=64 [ 260.874013][ T5743] usb 4-1: config 0 descriptor?? [ 260.977610][ T8092] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 260.988605][ T8092] audit: backlog limit exceeded [ 261.015407][ T30] audit: type=1326 audit(1780088283.930:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.0.607" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fe19ce59 code=0x7ffc0000 [ 261.124894][ T8129] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 261.139549][ T10] IPVS: starting estimator thread 0... [ 261.442221][ T5743] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 261.443485][ T5816] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x3 [ 261.492078][ T5816] hid-picolcd 0003:04D8:C002.000E: unexpected long global item [ 261.587986][ T8130] IPVS: using max 44 ests per chain, 105600 per kthread [ 261.660001][ T8131] Cannot find add_set index 65532 as target [ 261.827991][ T30] audit: type=1326 audit(1780088283.930:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.0.607" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f29fe19ce59 code=0x7ffc0000 [ 261.842199][ T5816] hid-picolcd 0003:04D8:C002.000E: device report parse failed [ 262.005450][ T30] audit: type=1326 audit(1780088283.930:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.0.607" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fe19ce59 code=0x7ffc0000 [ 262.060794][ T8117] Cannot find add_set index 0 as target [ 262.080187][ T5816] hid-picolcd 0003:04D8:C002.000E: probe with driver hid-picolcd failed with error -22 [ 262.302661][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055ff0400: rx timeout, send abort [ 262.739004][ T8139] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 262.810884][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055ff0400: abort rx timeout. Force session deactivation [ 262.844412][ T5816] usb 4-1: USB disconnect, device number 28 [ 263.055268][ T8100] netlink: 'syz.2.600': attribute type 10 has an invalid length. [ 263.086209][ T8100] bond0: (slave netdevsim1): Releasing backup interface [ 263.093490][ T8146] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8146 comm=syz.0.614 [ 263.109462][ T8147] netlink: 'syz.2.600': attribute type 10 has an invalid length. [ 263.122492][ T8133] mmap: syz.4.610 (8133): VmData 25837568 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 263.142742][ T8100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.159070][ T8100] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 263.179029][ T8100] L: Port device netdevsim1 added [ 263.209224][ T8147] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 263.241414][ T8147] L: Port device netdevsim1 removed [ 263.254768][ T8147] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.269007][ T8147] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 263.282705][ T24] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 263.375965][ T8094] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 263.453682][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 263.480885][ T24] usb 2-1: config 255 has an invalid interface number: 106 but max is 0 [ 263.502999][ T24] usb 2-1: config 255 has no interface number 0 [ 263.510503][ T8157] sctp: [Deprecated]: syz.0.619 (pid 8157) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.510503][ T8157] Use struct sctp_sack_info instead [ 263.527203][ T24] usb 2-1: config 255 interface 106 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 263.539166][ T24] usb 2-1: config 255 interface 106 altsetting 8 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 263.561767][ T24] usb 2-1: config 255 interface 106 altsetting 8 endpoint 0x3 has invalid maxpacket 64, setting to 8 [ 263.576512][ T24] usb 2-1: config 255 interface 106 altsetting 8 endpoint 0x4 has invalid wMaxPacketSize 0 [ 263.590154][ T24] usb 2-1: config 255 interface 106 altsetting 8 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 264.113167][ T24] usb 2-1: config 255 interface 106 altsetting 8 endpoint 0x5 has invalid maxpacket 1024, setting to 8 [ 264.185143][ T24] usb 2-1: config 255 interface 106 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 264.255989][ T24] usb 2-1: config 255 interface 106 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 264.391898][ T24] usb 2-1: config 255 interface 106 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 8 [ 264.566911][ T24] usb 2-1: config 255 interface 106 altsetting 8 endpoint 0x2 has invalid maxpacket 64, setting to 8 [ 264.610219][ T24] usb 2-1: config 255 interface 106 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 264.877279][ T24] usb 2-1: config 255 interface 106 has no altsetting 0 [ 265.426811][ T10] usb 3-1: USB disconnect, device number 19 [ 265.428816][ T24] usb 2-1: string descriptor 0 read error: -22 [ 265.465635][ T24] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a4b, bcdDevice=aa.f8 [ 265.506495][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.907650][ T8185] netlink: 'syz.4.625': attribute type 1 has an invalid length. [ 265.915394][ T8185] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.625'. [ 266.307811][ T8189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.319311][ T8189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.924092][ T5816] usb 2-1: USB disconnect, device number 23 [ 267.211769][ T5720] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 267.595939][ T8215] tc_dump_action: action bad kind [ 268.066927][ T5720] usb 5-1: Using ep0 maxpacket: 32 [ 268.077096][ T5720] usb 5-1: no configurations [ 268.086324][ T5720] usb 5-1: can't read configurations, error -22 [ 268.180319][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 268.180333][ T30] audit: type=1400 audit(1780088291.440:2257): avc: denied { node_bind } for pid=8211 comm="syz.3.635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 268.231768][ T5720] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 268.582453][ T5720] usb 5-1: Using ep0 maxpacket: 32 [ 268.592290][ T5720] usb 5-1: no configurations [ 268.796916][ T5720] usb 5-1: can't read configurations, error -22 [ 268.880335][ T5720] usb usb5-port1: attempt power cycle [ 269.221926][ T5720] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 269.295270][ T5720] usb 5-1: Using ep0 maxpacket: 32 [ 269.345195][ T5720] usb 5-1: no configurations [ 269.383857][ T5720] usb 5-1: can't read configurations, error -22 [ 269.481983][ T30] audit: type=1400 audit(1780088292.740:2258): avc: denied { read } for pid=8235 comm="syz.0.641" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 269.565752][ T30] audit: type=1400 audit(1780088292.770:2259): avc: denied { open } for pid=8235 comm="syz.0.641" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 269.602076][ T30] audit: type=1400 audit(1780088292.830:2260): avc: denied { read } for pid=8235 comm="syz.0.641" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 269.602211][ T5720] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 269.673301][ T5720] usb 5-1: Using ep0 maxpacket: 32 [ 269.697427][ T5720] usb 5-1: no configurations [ 269.708588][ T5720] usb 5-1: can't read configurations, error -22 [ 269.719120][ T5720] usb usb5-port1: unable to enumerate USB device [ 269.963255][ T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 270.485395][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.497573][ T10] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 270.506923][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.515255][ T10] usb 2-1: Product: syz [ 270.519504][ T10] usb 2-1: Manufacturer: syz [ 270.531209][ T10] usb 2-1: SerialNumber: syz [ 270.561618][ T10] usb 2-1: config 0 descriptor?? [ 270.606873][ T30] audit: type=1400 audit(1780088293.870:2261): avc: denied { create } for pid=8253 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 270.635037][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'. [ 270.657651][ T30] audit: type=1400 audit(1780088293.900:2262): avc: denied { setopt } for pid=8253 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 270.711428][ T10] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 271.645164][ T30] audit: type=1400 audit(1780088293.900:2263): avc: denied { read } for pid=8253 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 271.664517][ T30] audit: type=1400 audit(1780088294.210:2264): avc: denied { write } for pid=8253 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 271.683915][ T30] audit: type=1400 audit(1780088294.280:2265): avc: denied { getopt } for pid=8253 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 272.134696][ T8270] tc_dump_action: action bad kind [ 272.970679][ T8280] ubi: mtd0 is already attached to ubi16 [ 273.616581][ T5743] usb 2-1: USB disconnect, device number 24 [ 274.037052][ T30] audit: type=1400 audit(1780088297.300:2266): avc: denied { name_bind } for pid=8287 comm="syz.2.653" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 274.142195][ T8278] loop7: detected capacity change from 16384 to 0 [ 274.144185][ C0] I/O error, dev loop7, sector 12032 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 274.259290][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'. [ 274.371904][ T8294] netlink: 'syz.2.654': attribute type 1 has an invalid length. [ 274.379617][ T8294] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.654'. [ 274.855503][ T8276] ubi: mtd0 is already attached to ubi16 [ 276.670440][ T8321] tc_dump_action: action bad kind [ 277.271882][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 277.272249][ T5816] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 277.313133][ T8331] ubi: mtd0 is already attached to ubi16 [ 277.595108][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 277.604771][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.611922][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 277.618708][ T24] usb 4-1: Product: syz [ 277.620137][ T5816] usb 1-1: unable to get BOS descriptor or descriptor too short [ 277.623277][ T24] usb 4-1: Manufacturer: syz [ 277.633572][ T5816] usb 1-1: no configurations [ 277.635759][ T24] usb 4-1: SerialNumber: syz [ 277.639902][ T5816] usb 1-1: can't read configurations, error -22 [ 277.661123][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 277.792529][ T5816] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 277.823220][ T5743] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 277.971719][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 277.987162][ T5816] usb 1-1: unable to get BOS descriptor or descriptor too short [ 278.007398][ T5816] usb 1-1: no configurations [ 278.014412][ T5816] usb 1-1: can't read configurations, error -22 [ 278.022226][ T5816] usb usb1-port1: attempt power cycle [ 278.132722][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 278.451719][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 278.473038][ T8327] xt_recent: Unsupported userspace flags (000000b1) [ 278.612025][ T8344] netlink: 'syz.1.668': attribute type 1 has an invalid length. [ 278.619736][ T8344] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.668'. [ 278.972111][ T5743] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 278.979483][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.000953][ T5720] usb 4-1: USB disconnect, device number 29 [ 279.015387][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 279.034395][ T5743] ath9k_htc: Failed to initialize the device [ 279.037256][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 279.051732][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.195180][ T5720] usb 4-1: ath9k_htc: USB layer deinitialized [ 279.212225][ T10] usb 5-1: config 0 descriptor?? [ 279.265174][ T8351] FAULT_INJECTION: forcing a failure. [ 279.265174][ T8351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.295253][ T8351] CPU: 0 UID: 0 PID: 8351 Comm: syz.1.671 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.295285][ T8351] Tainted: [L]=SOFTLOCKUP [ 279.295290][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.295299][ T8351] Call Trace: [ 279.295305][ T8351] [ 279.295312][ T8351] dump_stack_lvl+0x100/0x190 [ 279.295335][ T8351] should_fail_ex.cold+0x5/0xa [ 279.295358][ T8351] _copy_from_user+0x2e/0xd0 [ 279.295376][ T8351] move_addr_to_kernel+0x65/0x170 [ 279.295398][ T8351] __sys_sendto+0x1c9/0x4b0 [ 279.295422][ T8351] ? __pfx___sys_sendto+0x10/0x10 [ 279.295451][ T8351] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 279.295470][ T8351] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 279.295508][ T8351] __x64_sys_sendto+0xe0/0x1c0 [ 279.295529][ T8351] ? do_syscall_64+0x90/0x870 [ 279.295548][ T8351] ? lockdep_hardirqs_on+0x78/0x100 [ 279.295568][ T8351] do_syscall_64+0x115/0x870 [ 279.295587][ T8351] ? clear_bhb_loop+0x40/0x90 [ 279.295608][ T8351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.295624][ T8351] RIP: 0033:0x7f871a35d68e [ 279.295638][ T8351] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 279.295654][ T8351] RSP: 002b:00007f871b28ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 279.295672][ T8351] RAX: ffffffffffffffda RBX: 00007f871b28c6c0 RCX: 00007f871a35d68e [ 279.295683][ T8351] RDX: 0000000000000020 RSI: 00007f871b28b000 RDI: 0000000000000004 [ 279.295693][ T8351] RBP: 0000000000000000 R08: 00007f871b28af04 R09: 000000000000000c [ 279.295703][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 279.295713][ T8351] R13: 00007f871b28af58 R14: 00007f871b28b000 R15: 0000000000000000 [ 279.295736][ T8351] [ 280.150776][ T8357] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.672'. [ 280.176504][ T10] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x3 [ 280.185457][ T10] hid-picolcd 0003:04D8:C002.000F: unexpected long global item [ 280.218894][ T10] hid-picolcd 0003:04D8:C002.000F: device report parse failed [ 280.336157][ T8357] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 280.338799][ T10] hid-picolcd 0003:04D8:C002.000F: probe with driver hid-picolcd failed with error -22 [ 280.359883][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 280.845139][ T8370] loop9: detected capacity change from 0 to 2640 [ 280.865573][ T8357] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 281.014160][ T8367] tc_dump_action: action bad kind [ 281.282792][ T8370] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.362334][ T8370] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.404533][ T8370] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.405740][ T8357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'. [ 281.441827][ T8370] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.451265][ T8370] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.461449][ T8370] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.471961][ T8370] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.481110][ T8370] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.493987][ T8337] netlink: 'syz.4.667': attribute type 10 has an invalid length. [ 281.510889][ T8370] ldm_validate_partition_table(): Disk read failed. [ 281.555403][ T8370] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.612160][ T8370] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.646376][ T8370] Dev loop9: unable to read RDB block 0 [ 281.663757][ T8370] loop9: unable to read partition table [ 281.672139][ T8370] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 281.742273][ T8336] netlink: 'syz.4.667': attribute type 10 has an invalid length. [ 282.491216][ T8336] team0: Port device netdevsim1 removed [ 282.506632][ T8372] ubi: mtd0 is already attached to ubi16 [ 282.519947][ T8336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.091761][ T8388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.363580][ T5816] usb 5-1: USB disconnect, device number 26 [ 284.576250][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'. [ 285.259913][ T8411] FAULT_INJECTION: forcing a failure. [ 285.259913][ T8411] name failslab, interval 1, probability 0, space 0, times 0 [ 285.613365][ T8411] CPU: 0 UID: 0 PID: 8411 Comm: syz.0.686 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.613401][ T8411] Tainted: [L]=SOFTLOCKUP [ 285.613409][ T8411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.613418][ T8411] Call Trace: [ 285.613424][ T8411] [ 285.613431][ T8411] dump_stack_lvl+0x100/0x190 [ 285.613458][ T8411] should_fail_ex.cold+0x5/0xa [ 285.613484][ T8411] ? tomoyo_realpath_from_path+0xb6/0x690 [ 285.613513][ T8411] should_failslab+0xc2/0x120 [ 285.613534][ T8411] __kmalloc_noprof+0xe0/0x850 [ 285.613561][ T8411] ? kfree+0x1dd/0x6c0 [ 285.613588][ T8411] tomoyo_realpath_from_path+0xb6/0x690 [ 285.613623][ T8411] tomoyo_path_number_perm+0x23c/0x580 [ 285.613647][ T8411] ? tomoyo_path_number_perm+0x22e/0x580 [ 285.613673][ T8411] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.613723][ T8411] ? find_held_lock+0x2b/0x80 [ 285.613740][ T8411] ? __fget_files+0x215/0x3d0 [ 285.613762][ T8411] ? hook_file_ioctl_common+0x149/0x410 [ 285.613779][ T8411] ? __fget_files+0x215/0x3d0 [ 285.613806][ T8411] ? __fget_files+0x21f/0x3d0 [ 285.613833][ T8411] security_file_ioctl+0xd3/0x230 [ 285.613861][ T8411] __x64_sys_ioctl+0xb7/0x210 [ 285.613882][ T8411] do_syscall_64+0x115/0x870 [ 285.613904][ T8411] ? clear_bhb_loop+0x40/0x90 [ 285.613926][ T8411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.613944][ T8411] RIP: 0033:0x7f29fe19ce59 [ 285.613960][ T8411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.613977][ T8411] RSP: 002b:00007f29ff07a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.613995][ T8411] RAX: ffffffffffffffda RBX: 00007f29fe415fa0 RCX: 00007f29fe19ce59 [ 285.614007][ T8411] RDX: 0000000000000000 RSI: 0000000000005386 RDI: 0000000000000003 [ 285.614017][ T8411] RBP: 00007f29ff07a090 R08: 0000000000000000 R09: 0000000000000000 [ 285.614027][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.614037][ T8411] R13: 00007f29fe416038 R14: 00007f29fe415fa0 R15: 00007ffe50915408 [ 285.614062][ T8411] [ 285.614484][ T8411] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.050185][ T8416] tc_dump_action: action bad kind [ 286.961330][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 287.733808][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 287.753802][ T5816] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 287.913971][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 287.919164][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 287.934665][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 288.015505][ T8435] ubi: mtd0 is already attached to ubi16 [ 288.192530][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.210422][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.220777][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.239138][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.256826][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.270617][ T5816] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 288.288525][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 288.321496][ T5816] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 288.339795][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.352188][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.397713][ T5816] usb 1-1: config 0 descriptor?? [ 288.496879][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 288.525067][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 288.570964][ T10] usb 5-1: usb_control_msg returned -32 [ 288.586916][ T10] usbtmc 5-1:16.0: can't read capabilities [ 288.823012][ T5816] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x3 [ 288.897087][ T8455] tc_dump_action: action bad kind [ 289.228420][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 289.240701][ T5816] hid-picolcd 0003:04D8:C002.0010: unexpected long global item [ 289.251251][ T5816] hid-picolcd 0003:04D8:C002.0010: device report parse failed [ 289.432639][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 289.566536][ T5816] hid-picolcd 0003:04D8:C002.0010: probe with driver hid-picolcd failed with error -22 [ 289.584411][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.632798][ T8430] netlink: 'syz.0.691': attribute type 10 has an invalid length. [ 289.918141][ T8430] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 289.950992][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 290.026300][ T8461] netlink: 'syz.0.691': attribute type 10 has an invalid length. [ 290.039886][ T8430] team0: Port device netdevsim1 added [ 290.075259][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 290.227944][ T8461] team0: Port device netdevsim1 removed [ 290.247344][ T8461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 290.247471][ T8430] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 290.288079][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.332504][ T10] usb 3-1: config 0 descriptor?? [ 290.490737][ T5720] usb 1-1: USB disconnect, device number 24 [ 290.776259][ T10] hid-picolcd 0003:04D8:C002.0011: unknown main item tag 0x3 [ 290.802745][ T10] hid-picolcd 0003:04D8:C002.0011: unexpected long global item [ 290.821120][ T10] hid-picolcd 0003:04D8:C002.0011: device report parse failed [ 290.840765][ T10] hid-picolcd 0003:04D8:C002.0011: probe with driver hid-picolcd failed with error -22 [ 291.231374][ T8444] netlink: 'syz.2.695': attribute type 10 has an invalid length. [ 291.266227][ T30] audit: type=1400 audit(1780088314.530:2267): avc: denied { read } for pid=8496 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.321113][ T8444] bond0: (slave netdevsim1): Releasing backup interface [ 291.324596][ T8497] ubi: mtd0 is already attached to ubi16 [ 291.627075][ T30] audit: type=1400 audit(1780088314.890:2268): avc: denied { setopt } for pid=8496 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.632390][ T8441] netlink: 'syz.2.695': attribute type 10 has an invalid length. [ 291.656735][ T8444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 291.692441][ T8444] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 291.714703][ T8448] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 291.715324][ T8444] L: Port device netdevsim1 added [ 291.797409][ T8441] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 291.879390][ T8441] L: Port device netdevsim1 removed [ 291.917834][ T8441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 291.964129][ T8441] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 292.364784][ T8517] tc_dump_action: action bad kind [ 294.551504][ T5720] usb 3-1: USB disconnect, device number 20 [ 295.002851][ T8458] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 295.052092][ T5743] usb 5-1: USB disconnect, device number 27 [ 295.153875][ T8538] loop8: detected capacity change from 0 to 7 [ 295.506571][ T8538] Dev loop8: unable to read RDB block 7 [ 295.530803][ T8538] loop8: unable to read partition table [ 295.560321][ T8538] loop8: partition table beyond EOD, truncated [ 295.614502][ T8538] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 297.280521][ T8546] ubi: mtd0 is already attached to ubi16 [ 297.367539][ T8564] netlink: 'syz.3.722': attribute type 1 has an invalid length. [ 297.492603][ T8564] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.722'. [ 297.618400][ T8573] tc_dump_action: action bad kind [ 299.402733][ T5720] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 299.823494][ T5720] usb 5-1: device descriptor read/all, error -71 [ 300.122873][ T804] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 300.541738][ T804] usb 2-1: Using ep0 maxpacket: 8 [ 300.588810][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.601700][ T5720] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 300.700054][ T804] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 300.713481][ T804] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 300.728005][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.757832][ T804] usb 2-1: config 0 descriptor?? [ 301.293109][ T5720] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 301.313499][ T5720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 301.330203][ T5720] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 301.377278][ T5720] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 301.648495][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.663761][ T5720] usb 5-1: Product: syz [ 301.669665][ T5720] usb 5-1: Manufacturer: syz [ 301.680383][ T5720] usb 5-1: SerialNumber: syz [ 301.869187][ T804] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x3 [ 301.881374][ T5720] usb 5-1: config 0 descriptor?? [ 301.886520][ T804] hid-picolcd 0003:04D8:C002.0012: unexpected long global item [ 301.904516][ T804] hid-picolcd 0003:04D8:C002.0012: device report parse failed [ 301.953637][ T804] hid-picolcd 0003:04D8:C002.0012: probe with driver hid-picolcd failed with error -22 [ 301.954380][ T8592] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 302.339722][ T8610] netlink: 'syz.1.728': attribute type 10 has an invalid length. [ 302.409235][ T8618] netlink: 'syz.1.728': attribute type 10 has an invalid length. [ 302.460806][ T8610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.495912][ T8610] team0: Port device netdevsim1 added [ 302.532279][ T8618] team0: Port device netdevsim1 removed [ 302.582532][ T8618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.623666][ T8618] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 302.642024][ T5743] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 302.869727][ T5743] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 302.904854][ T8625] tc_dump_action: action bad kind [ 303.242674][ T5743] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 303.250798][ T8590] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 303.287366][ T5743] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 303.301741][ T5743] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 303.311367][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.320724][ T5743] usb 4-1: Product: syz [ 303.325957][ T5743] usb 4-1: Manufacturer: syz [ 303.331112][ T5743] usb 4-1: SerialNumber: syz [ 303.372791][ T5743] usb 4-1: config 0 descriptor?? [ 303.382296][ T8619] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 303.395082][ T8619] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 303.405589][ T5743] usb 4-1: ucan: probing device on interface #0 [ 303.439597][ T10] usb 2-1: USB disconnect, device number 25 [ 303.505432][ T5720] usb 5-1: USB disconnect, device number 29 [ 303.808971][ T5743] usb 4-1: ucan: device reported invalid device info [ 303.815760][ T5743] usb 4-1: ucan: probe failed; try to update the device firmware [ 304.025689][ T5816] usb 4-1: USB disconnect, device number 30 [ 305.410101][ T8647] netlink: 'syz.0.743': attribute type 1 has an invalid length. [ 305.417906][ T8647] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.743'. [ 305.501239][ T8644] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 305.767125][ T8649] netlink: 'syz.1.742': attribute type 1 has an invalid length. [ 305.798975][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 305.815682][ T30] audit: type=1326 audit(1780088329.080:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.4.745" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba099ce59 code=0x7ffc0000 [ 305.869164][ T8649] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.742'. [ 305.975464][ T30] audit: type=1400 audit(1780088329.110:2270): avc: denied { write } for pid=8652 comm="syz.3.746" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 305.987461][ T8657] bridge1: port 1(dummy0) entered blocking state [ 305.998962][ T30] audit: type=1326 audit(1780088329.110:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.4.745" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba099ce59 code=0x7ffc0000 [ 306.037522][ T30] audit: type=1326 audit(1780088329.110:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.4.745" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba099ce59 code=0x7ffc0000 [ 306.079510][ T8657] bridge1: port 1(dummy0) entered disabled state [ 306.096645][ T8653] netlink: 56 bytes leftover after parsing attributes in process `syz.2.744'. [ 306.126402][ T8657] dummy0: entered allmulticast mode [ 306.148247][ T30] audit: type=1326 audit(1780088329.110:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.4.745" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fbba099ce59 code=0x7ffc0000 [ 306.152582][ T8657] dummy0: entered promiscuous mode [ 306.209807][ T30] audit: type=1326 audit(1780088329.110:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.4.745" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba099ce59 code=0x7ffc0000 [ 306.329129][ T8653] bridge1: port 1(dummy0) entered blocking state [ 306.336728][ T8653] bridge1: port 1(dummy0) entered forwarding state [ 306.354411][ T30] audit: type=1326 audit(1780088329.110:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.4.745" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba099ce59 code=0x7ffc0000 [ 306.459221][ T30] audit: type=1326 audit(1780088329.120:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.4.745" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba099ce59 code=0x7ffc0000 [ 306.498846][ T30] audit: type=1326 audit(1780088329.120:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.4.745" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba099ce59 code=0x7ffc0000 [ 306.636388][ T30] audit: type=1326 audit(1780088329.120:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.4.745" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbba099ce59 code=0x7ffc0000 [ 306.691166][ T8671] tc_dump_action: action bad kind [ 306.993750][ T8656] Cannot find add_set index 0 as target [ 307.423005][ T5741] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 307.494454][ T8687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.755'. [ 307.510809][ T8687] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8687 comm=syz.1.755 [ 307.520417][ T5741] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.678754][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 307.690950][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 307.731735][ T5816] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 307.761452][ T8690] netlink: 152 bytes leftover after parsing attributes in process `syz.1.756'. [ 307.774035][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 307.891707][ T5816] usb 5-1: Using ep0 maxpacket: 32 [ 307.909818][ T5816] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 307.923087][ T5816] usb 5-1: config 0 has no interface number 0 [ 307.939560][ T5816] usb 5-1: config 0 interface 184 has no altsetting 0 [ 307.969829][ T5816] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 307.985021][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.002204][ T5816] usb 5-1: Product: syz [ 308.006530][ T5816] usb 5-1: Manufacturer: syz [ 308.011327][ T5816] usb 5-1: SerialNumber: syz [ 308.102250][ T5816] usb 5-1: config 0 descriptor?? [ 309.262073][ T5741] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 309.483470][ T5741] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 309.510214][ T5741] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 309.534764][ T5741] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 309.548680][ T5741] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 309.558585][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.567138][ T5741] usb 2-1: Product: syz [ 309.571427][ T5741] usb 2-1: Manufacturer: syz [ 309.578461][ T5741] usb 2-1: SerialNumber: syz [ 309.584020][ T29] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 309.607937][ T5741] usb 2-1: config 0 descriptor?? [ 309.617973][ T8695] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 309.625703][ T8695] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 309.635059][ T5741] usb 2-1: ucan: probing device on interface #0 [ 309.677741][ T5816] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 309.693623][ T5816] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 309.741753][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 309.749941][ T29] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 309.759204][ T29] usb 4-1: config 0 has no interface number 0 [ 309.765748][ T29] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 309.777342][ T29] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 309.787977][ T29] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 309.804773][ T29] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 309.816678][ T29] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 309.827150][ T29] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.844130][ T29] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 309.853670][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.862222][ T29] usb 4-1: Product: syz [ 309.866642][ T29] usb 4-1: Manufacturer: syz [ 309.871312][ T29] usb 4-1: SerialNumber: syz [ 309.890154][ T29] usb 4-1: config 0 descriptor?? [ 309.933978][ T8686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.944425][ T8686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.056871][ T5741] usb 2-1: ucan: device reported invalid device info [ 310.063681][ T5741] usb 2-1: ucan: probe failed; try to update the device firmware [ 310.119065][ T29] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 310.202280][ T8705] block device autoloading is deprecated and will be removed. [ 310.225170][ T8705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 310.241757][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 310.260112][ T29] usb 2-1: USB disconnect, device number 26 [ 310.401739][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 310.408322][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 310.417618][ T24] usb 3-1: config 8 has an invalid interface number: 46 but max is 0 [ 310.426015][ T24] usb 3-1: config 8 has no interface number 0 [ 310.433361][ T24] usb 3-1: config 8 interface 46 has no altsetting 0 [ 310.442612][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=1700, bcdDevice=a7.db [ 310.477956][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.486105][ T24] usb 3-1: Product: syz [ 310.490306][ T24] usb 3-1: Manufacturer: syz [ 310.494966][ T24] usb 3-1: SerialNumber: syz [ 310.849803][ T8703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.555330][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.980687][ T8703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.090144][ T9] usb 4-1: USB disconnect, device number 31 [ 312.256171][ T24] smsusb:smsusb_probe: board id=5, interface number 46 [ 312.265610][ T24] usb 3-1: USB disconnect, device number 21 [ 312.352903][ T8719] tc_dump_action: action bad kind [ 312.828208][ T5816] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 312.854745][ T5816] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 312.900390][ T5816] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 312.931924][ T5816] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 312.955188][ T5816] usb 5-1: USB disconnect, device number 30 [ 313.369636][ T8742] gfs2: gfs2 mount does not exist [ 313.816148][ T8732] netlink: 44 bytes leftover after parsing attributes in process `syz.4.769'. [ 313.824832][ T8729] XFS (nullb0): Invalid superblock magic number [ 313.848155][ T8745] netlink: 'syz.1.766': attribute type 1 has an invalid length. [ 313.855949][ T8745] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.766'. [ 313.858754][ T804] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 313.878331][ T8732] netlink: 'syz.4.769': attribute type 15 has an invalid length. [ 313.904731][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 314.022635][ T1329] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 314.089449][ T1329] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 314.100334][ T804] usb 1-1: Using ep0 maxpacket: 8 [ 314.105054][ T1329] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 314.124557][ T804] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 314.153843][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.177311][ T804] usb 1-1: Product: syz [ 314.192741][ T804] usb 1-1: Manufacturer: syz [ 314.208656][ T804] usb 1-1: SerialNumber: syz [ 314.233429][ T804] usb 1-1: config 0 descriptor?? [ 314.456279][ T804] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 314.545841][ T8756] Bluetooth: MGMT ver 1.23 [ 314.664716][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 314.664733][ T30] audit: type=1400 audit(1780088337.930:2408): avc: denied { bind } for pid=8757 comm="syz.4.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 314.691333][ T30] audit: type=1400 audit(1780088337.950:2409): avc: denied { listen } for pid=8757 comm="syz.4.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 314.745986][ T30] audit: type=1400 audit(1780088338.010:2410): avc: denied { accept } for pid=8757 comm="syz.4.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 315.145606][ T8767] tc_dump_action: action bad kind [ 315.445633][ T8727] smc: net device vcan0 applied user defined pnetid SYZ1 [ 315.454521][ T8727] smc: net device syz_tun applied user defined pnetid SYZ1 [ 315.469639][ T804] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 315.510469][ T804] usb 1-1: USB disconnect, device number 25 [ 316.646171][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.780'. [ 316.931953][ T5816] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 317.101803][ T5816] usb 2-1: Using ep0 maxpacket: 32 [ 317.403308][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.424515][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.437988][ T5816] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 317.451561][ T5816] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 317.461070][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.471167][ T5816] usb 2-1: config 0 descriptor?? [ 317.643168][ T29] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 317.673492][ T9] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 317.942243][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 317.951089][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 317.962778][ T29] usb 5-1: config 194 has an invalid interface number: 4 but max is 0 [ 317.964994][ T5816] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0014/input/input15 [ 318.257579][ T30] audit: type=1400 audit(1780088341.520:2411): avc: denied { nlmsg_read } for pid=8790 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 318.282670][ T8795] devpts: Unknown parameter 'qid' [ 318.299957][ T29] usb 5-1: config 194 has no interface number 0 [ 318.300444][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 318.314452][ T30] audit: type=1400 audit(1780088341.550:2412): avc: denied { mount } for pid=8790 comm="syz.2.786" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 318.320848][ T29] usb 5-1: config 194 interface 4 has no altsetting 0 [ 318.350122][ T30] audit: type=1400 audit(1780088341.550:2413): avc: denied { remount } for pid=8790 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 318.361512][ T29] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.85 [ 318.370313][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 318.392763][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.395296][ T5816] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0014/input/input16 [ 318.413438][ T29] usb 5-1: Product: syz [ 318.418255][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 318.431211][ T29] usb 5-1: Manufacturer: syz [ 318.440829][ T29] usb 5-1: SerialNumber: syz [ 318.451266][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 318.492851][ T9] usb 1-1: string descriptor 0 read error: -22 [ 318.515698][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 318.535739][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.567700][ T5816] kye 0003:0458:5011.0014: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 318.675705][ T30] audit: type=1400 audit(1780088341.940:2414): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 318.762747][ T9] usb 1-1: low speed audio streaming not supported [ 318.972194][ T9] usb 1-1: low speed audio streaming not supported [ 319.473652][ C1] kye 0003:0458:5011.0014: usb_submit_urb(ctrl) failed: -1 [ 319.598782][ T8816] tc_dump_action: action bad kind [ 320.129216][ T29] usbhid 5-1:194.4: couldn't find an input interrupt endpoint [ 320.591345][ T30] audit: type=1400 audit(1780088343.500:2415): avc: denied { mount } for pid=8815 comm="syz.2.791" name="/" dev="rpc_pipefs" ino=21652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 320.615625][ T804] usb 2-1: reset high-speed USB device number 27 using dummy_hcd [ 320.643357][ T29] usb 5-1: USB disconnect, device number 31 [ 322.557228][ T9] usb 1-1: 6:0: failed to get current value for ch 0 (-22) [ 322.581066][ T5741] usb 2-1: USB disconnect, device number 27 [ 322.606722][ T9] usb 1-1: 6:0: cannot get min/max values for control 4 (id 6) [ 323.461928][ T5741] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 323.487262][ T8846] syzkaller0: entered promiscuous mode [ 323.506414][ T8846] syzkaller0: entered allmulticast mode [ 323.604665][ T9] usb 1-1: USB disconnect, device number 26 [ 323.669297][ T5741] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 323.692474][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.706549][ T5741] usb 2-1: Product: syz [ 323.710916][ T5741] usb 2-1: Manufacturer: syz [ 323.717047][ T5741] usb 2-1: SerialNumber: syz [ 323.727146][ T5741] usb 2-1: config 0 descriptor?? [ 323.752438][ T5741] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 028 [ 324.022159][ T8860] ubi: mtd0 is already attached to ubi16 [ 324.288152][ T30] audit: type=1400 audit(1780088347.290:2416): avc: denied { name_bind } for pid=8856 comm="syz.4.803" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 324.327082][ T5741] (null): failure reading functionality [ 324.365464][ T8859] ubi: mtd0 is already attached to ubi16 [ 324.646469][ T5741] i2c i2c-1: connected i2c-tiny-usb device [ 324.827556][ T9] usb 2-1: USB disconnect, device number 28 [ 325.114706][ T5741] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 325.147772][ T804] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 325.309848][ T5741] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 325.327601][ T804] usb 5-1: Using ep0 maxpacket: 8 [ 325.332867][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.341406][ T5741] usb 4-1: Product: syz [ 325.356725][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.367810][ T5741] usb 4-1: Manufacturer: syz [ 325.379539][ T5741] usb 4-1: SerialNumber: syz [ 325.385472][ T804] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 325.398671][ T804] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 325.417372][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.437719][ T5741] usb 4-1: config 0 descriptor?? [ 325.457043][ T804] usb 5-1: config 0 descriptor?? [ 326.412004][ T804] hid-picolcd 0003:04D8:C002.0015: unknown main item tag 0x3 [ 326.419986][ T804] hid-picolcd 0003:04D8:C002.0015: unexpected long global item [ 326.436401][ T804] hid-picolcd 0003:04D8:C002.0015: device report parse failed [ 326.444248][ T804] hid-picolcd 0003:04D8:C002.0015: probe with driver hid-picolcd failed with error -22 [ 326.464864][ T5741] usb 4-1: Firmware: major: 111, minor: 53, hardware type: ATUSB (0) [ 326.665809][ T5741] usb 4-1: failed to fetch extended address, random address set [ 326.830805][ T8876] netlink: 'syz.4.805': attribute type 10 has an invalid length. [ 326.889252][ T8864] netlink: 'syz.4.805': attribute type 10 has an invalid length. [ 326.978028][ T8877] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 327.611139][ T8882] libceph: secret too big 289 [ 327.838789][ T8876] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.874617][ T8876] team0: Port device netdevsim1 added [ 327.880088][ T5741] usb 4-1: USB disconnect, device number 32 [ 328.055844][ T8864] team0: Port device netdevsim1 removed [ 329.042994][ T30] audit: type=1400 audit(1780088352.310:2417): avc: denied { ioctl } for pid=8894 comm="syz.1.812" path="socket:[22693]" dev="sockfs" ino=22693 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 329.275588][ T8864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.729899][ T29] usb 5-1: USB disconnect, device number 32 [ 329.904425][ T8912] FAULT_INJECTION: forcing a failure. [ 329.904425][ T8912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.921745][ T8912] CPU: 1 UID: 0 PID: 8912 Comm: syz.0.816 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.921773][ T8912] Tainted: [L]=SOFTLOCKUP [ 329.921779][ T8912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.921787][ T8912] Call Trace: [ 329.921793][ T8912] [ 329.921798][ T8912] dump_stack_lvl+0x100/0x190 [ 329.921822][ T8912] should_fail_ex.cold+0x5/0xa [ 329.921844][ T8912] _copy_from_user+0x2e/0xd0 [ 329.921866][ T8912] memdup_user+0x6b/0xe0 [ 329.921885][ T8912] strndup_user+0x78/0xe0 [ 329.921903][ T8912] __x64_sys_mount+0x136/0x310 [ 329.921929][ T8912] ? __pfx___x64_sys_mount+0x10/0x10 [ 329.921956][ T8912] ? rcu_is_watching+0x12/0xc0 [ 329.921980][ T8912] do_syscall_64+0x115/0x870 [ 329.922001][ T8912] ? clear_bhb_loop+0x40/0x90 [ 329.922021][ T8912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.922036][ T8912] RIP: 0033:0x7f29fe19ce59 [ 329.922050][ T8912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.922069][ T8912] RSP: 002b:00007f29ff07a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 329.922085][ T8912] RAX: ffffffffffffffda RBX: 00007f29fe415fa0 RCX: 00007f29fe19ce59 [ 329.922096][ T8912] RDX: 0000200000000080 RSI: 0000200000000140 RDI: 0000000000000000 [ 329.922104][ T8912] RBP: 00007f29ff07a090 R08: 0000200000000280 R09: 0000000000000000 [ 329.922113][ T8912] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 329.922122][ T8912] R13: 00007f29fe416038 R14: 00007f29fe415fa0 R15: 00007ffe50915408 [ 329.922144][ T8912] [ 331.263152][ T30] audit: type=1400 audit(1780088354.500:2418): avc: denied { ioctl } for pid=8929 comm="syz.4.821" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 331.924356][ T30] audit: type=1400 audit(1780088354.700:2419): avc: denied { ioctl } for pid=8932 comm="syz.3.823" path="socket:[22748]" dev="sockfs" ino=22748 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 332.179705][ T8944] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 332.206285][ T8944] audit: out of memory in audit_log_start [ 332.461866][ T29] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 332.653164][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 332.673219][ T29] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 332.695648][ T29] usb 4-1: config 0 has no interface number 0 [ 332.720228][ T29] usb 4-1: config 0 interface 184 has no altsetting 0 [ 332.744225][ T29] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 332.763688][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.787009][ T29] usb 4-1: Product: syz [ 332.813899][ T29] usb 4-1: Manufacturer: syz [ 332.838024][ T29] usb 4-1: SerialNumber: syz [ 332.892505][ T29] usb 4-1: config 0 descriptor?? [ 332.919131][ T8961] cgroup: fork rejected by pids controller in /syz2 [ 333.037858][ T30] audit: type=1400 audit(1780088356.300:2420): avc: denied { write } for pid=8942 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.184710][ T30] audit: type=1400 audit(1780088356.450:2421): avc: denied { write } for pid=8971 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.558742][ T29] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 333.583620][ T29] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 333.684377][ T8977] tc_dump_action: action bad kind [ 333.995471][ T8978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.011044][ T8978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.111297][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.137339][ T29] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 335.209250][ T29] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 335.281853][ T29] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 335.330159][ T29] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 335.476607][ T29] usb 4-1: USB disconnect, device number 33 [ 335.938019][ T8990] netlink: 277 bytes leftover after parsing attributes in process `syz.1.836'. [ 335.998052][ T8992] netlink: 628 bytes leftover after parsing attributes in process `syz.4.837'. [ 336.006333][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.020081][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.028480][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.037440][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.045641][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.070047][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.076900][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.078661][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.090751][ T8992] netlink: 628 bytes leftover after parsing attributes in process `syz.4.837'. [ 336.119560][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.134674][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.147039][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.297422][ T30] audit: type=1400 audit(1780088359.560:2422): avc: denied { set_context_mgr } for pid=8991 comm="syz.4.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 336.630009][ T36] bond0: (slave netdevsim1): Releasing backup interface [ 336.662166][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.731453][ T9009] FAULT_INJECTION: forcing a failure. [ 336.731453][ T9009] name failslab, interval 1, probability 0, space 0, times 0 [ 336.755687][ T9009] CPU: 1 UID: 0 PID: 9009 Comm: syz.0.841 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.755715][ T9009] Tainted: [L]=SOFTLOCKUP [ 336.755720][ T9009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 336.755728][ T9009] Call Trace: [ 336.755733][ T9009] [ 336.755739][ T9009] dump_stack_lvl+0x100/0x190 [ 336.755761][ T9009] should_fail_ex.cold+0x5/0xa [ 336.755781][ T9009] should_failslab+0xc2/0x120 [ 336.755798][ T9009] __kmalloc_cache_noprof+0x7a/0x6f0 [ 336.755817][ T9009] ? genl_start+0x1e8/0x970 [ 336.755836][ T9009] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 336.755862][ T9009] genl_start+0x1e8/0x970 [ 336.755884][ T9009] __netlink_dump_start+0x60e/0x990 [ 336.755904][ T9009] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 336.755926][ T9009] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 336.755950][ T9009] ? __pfx_genl_get_cmd+0x10/0x10 [ 336.755967][ T9009] ? __pfx_genl_start+0x10/0x10 [ 336.755983][ T9009] ? __pfx_genl_dumpit+0x10/0x10 [ 336.756000][ T9009] ? __pfx_genl_done+0x10/0x10 [ 336.756021][ T9009] ? __dev_queue_xmit+0xa10/0x4950 [ 336.756039][ T9009] ? __radix_tree_lookup+0x217/0x2b0 [ 336.756061][ T9009] genl_rcv_msg+0x471/0x800 [ 336.756084][ T9009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.756104][ T9009] ? __pfx_tipc_nl_node_dump_monitor+0x10/0x10 [ 336.756132][ T9009] netlink_rcv_skb+0x159/0x420 [ 336.756150][ T9009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.756177][ T9009] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.756203][ T9009] ? netlink_deliver_tap+0x1ae/0xcc0 [ 336.756223][ T9009] genl_rcv+0x28/0x40 [ 336.756240][ T9009] netlink_unicast+0x585/0x850 [ 336.756261][ T9009] ? __pfx_netlink_unicast+0x10/0x10 [ 336.756285][ T9009] netlink_sendmsg+0x8b0/0xda0 [ 336.756306][ T9009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.756322][ T9009] ? __might_fault+0xa0/0x140 [ 336.756350][ T9009] ____sys_sendmsg+0x9e1/0xb70 [ 336.756366][ T9009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.756385][ T9009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.756412][ T9009] ___sys_sendmsg+0x190/0x1e0 [ 336.756431][ T9009] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.756477][ T9009] __sys_sendmsg+0x170/0x220 [ 336.756499][ T9009] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.756530][ T9009] ? rcu_is_watching+0x12/0xc0 [ 336.756555][ T9009] do_syscall_64+0x115/0x870 [ 336.756573][ T9009] ? clear_bhb_loop+0x40/0x90 [ 336.756592][ T9009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.756609][ T9009] RIP: 0033:0x7f29fe19ce59 [ 336.756624][ T9009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.756639][ T9009] RSP: 002b:00007f29ff07a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.756654][ T9009] RAX: ffffffffffffffda RBX: 00007f29fe415fa0 RCX: 00007f29fe19ce59 [ 336.756665][ T9009] RDX: 0000000020004814 RSI: 00002000000003c0 RDI: 0000000000000004 [ 336.756674][ T9009] RBP: 00007f29ff07a090 R08: 0000000000000000 R09: 0000000000000000 [ 336.756684][ T9009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.756693][ T9009] R13: 00007f29fe416038 R14: 00007f29fe415fa0 R15: 00007ffe50915408 [ 336.756717][ T9009] [ 337.208265][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.238811][ T9012] netlink: 'syz.1.842': attribute type 6 has an invalid length. [ 337.396531][ T30] audit: type=1400 audit(1780088360.650:2423): avc: denied { accept } for pid=9020 comm="syz.0.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 337.428062][ T9028] binder: 9027:9028 ioctl 4018620d 0 returned -22 [ 337.438646][ T9021] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 337.445421][ T9021] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 337.461002][ T9021] vhci_hcd vhci_hcd.0: Device attached [ 337.471179][ T9029] vhci_hcd: connection closed [ 337.487689][ T57] vhci_hcd vhci_hcd.0: stop threads [ 337.526611][ T57] vhci_hcd vhci_hcd.0: release socket [ 337.545606][ T57] vhci_hcd vhci_hcd.0: disconnect device [ 337.561786][ T5741] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 337.833082][ T5741] usb 4-1: Using ep0 maxpacket: 32 [ 337.848228][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.128174][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.155200][ T5741] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 338.165521][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.187152][ T5741] usb 4-1: config 0 descriptor?? [ 338.543539][ T5617] Bluetooth: hci2: command tx timeout [ 338.807231][ T36] bridge_slave_1: left allmulticast mode [ 338.820503][ T36] bridge_slave_1: left promiscuous mode [ 338.836058][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.881157][ T5741] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 338.891806][ T5741] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 338.906371][ T36] bridge_slave_0: left allmulticast mode [ 338.917810][ T36] bridge_slave_0: left promiscuous mode [ 338.935832][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.989066][ T36] dummy0: left allmulticast mode [ 338.995828][ T5720] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 339.012063][ T36] bridge1: port 1(dummy0) entered disabled state [ 339.084150][ T5741] ft260 0003:0403:6030.0016: failed to retrieve chip version [ 339.155393][ T5720] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 339.185731][ T5720] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.193094][ T5741] ft260 0003:0403:6030.0016: probe with driver ft260 failed with error -32 [ 339.217732][ T5720] usb 1-1: config 0 has no interface number 0 [ 339.281676][ T5720] usb 1-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 339.334564][ T5720] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 339.404182][ T5720] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 339.455960][ T5720] usb 1-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 339.487574][ T5720] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 339.519402][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.539126][ T5720] usb 1-1: Product: syz [ 339.550573][ T5720] usb 1-1: Manufacturer: syz [ 339.565436][ T5720] usb 1-1: SerialNumber: syz [ 339.609767][ T5720] usb 1-1: config 0 descriptor?? [ 339.622887][ T5720] symbolserial 1-1:0.175: symbol converter detected [ 339.634085][ T5816] usb 4-1: USB disconnect, device number 34 [ 339.667611][ T5720] usb 1-1: symbol converter now attached to ttyUSB0 [ 339.778552][ T30] audit: type=1400 audit(1780088363.040:2424): avc: denied { write } for pid=9045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.914038][ T30] audit: type=1400 audit(1780088363.080:2425): avc: denied { sys_module } for pid=9060 comm="syz.1.853" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 339.987510][ T9042] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 339.994066][ T9042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 340.001523][ T9074] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 340.008044][ T9074] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 340.014836][ T9067] netlink: 'syz.1.853': attribute type 2 has an invalid length. [ 340.017315][ T9074] vhci_hcd vhci_hcd.0: Device attached [ 340.024039][ T30] audit: type=1400 audit(1780088363.250:2426): avc: denied { write } for pid=9072 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.060814][ T9067] netlink: 'syz.1.853': attribute type 2 has an invalid length. [ 340.071464][ T9042] vhci_hcd vhci_hcd.0: Device attached [ 340.080591][ T9074] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 340.087231][ T9074] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 340.099402][ T9074] vhci_hcd vhci_hcd.0: Device attached [ 340.111516][ T30] audit: type=1400 audit(1780088363.370:2427): avc: denied { bind } for pid=9041 comm="syz.0.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.289727][ T5816] usb 33-2: new low-speed USB device number 2 using vhci_hcd [ 340.592493][ T5617] Bluetooth: hci2: command tx timeout [ 341.762335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 342.769182][ T5617] Bluetooth: hci2: command tx timeout [ 344.996341][ T5617] Bluetooth: hci2: command tx timeout [ 346.826771][ C1] sched: DL replenish lagged too much [ 348.454254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 348.524625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 348.844497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 348.884632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 348.924404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 349.133242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 373.225455][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.560677][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 468.931546][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 468.938528][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4983/1:b..l P6040/2:b..l P5633/1:b..l [ 468.949151][ C0] rcu: (detected by 0, t=10502 jiffies, g=41037, q=1391607 ncpus=2) [ 468.957230][ C0] task:udevd state:R running task stack:24584 pid:5633 tgid:5633 ppid:4983 task_flags:0x40014c flags:0x00080800 [ 468.971851][ C0] Call Trace: [ 468.975137][ C0] [ 468.978072][ C0] __schedule+0x1295/0x67a0 [ 468.982594][ C0] ? __update_page_owner_handle+0x3c7/0x550 [ 468.988486][ C0] ? __pfx___schedule+0x10/0x10 [ 468.993324][ C0] ? mark_held_locks+0x40/0x70 [ 468.998091][ C0] preempt_schedule_irq+0x50/0x90 [ 469.003117][ C0] irqentry_exit+0x205/0x970 [ 469.007717][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 469.013699][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 469.018906][ C0] Code: 05 7b 24 25 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 86 89 f2 0e 0f 82 a4 02 00 00 8b 35 0e bd f2 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 24 25 12 0f 85 ed 02 00 00 48 83 c4 [ 469.038511][ C0] RSP: 0018:ffffc90003a1f5f0 EFLAGS: 00000206 [ 469.044565][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 469.052542][ C0] RDX: 0000000000000000 RSI: ffffffff8dee9983 RDI: ffffffff8c1c4480 [ 469.060518][ C0] RBP: ffffffff8e7e5620 R08: 00000000866429ea R09: 0000000000000007 [ 469.068489][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 469.076477][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.084472][ C0] ? unwind_next_frame+0x3be/0x2090 [ 469.089675][ C0] ? unwind_next_frame+0x3be/0x2090 [ 469.094859][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 469.101012][ C0] unwind_next_frame+0xd1/0x2090 [ 469.105955][ C0] ? unwind_next_frame+0xbd/0x2090 [ 469.111087][ C0] ? kmem_cache_free+0x44a/0x6c0 [ 469.116034][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 469.122206][ C0] arch_stack_walk+0x94/0xf0 [ 469.126832][ C0] ? kmem_cache_free+0x44a/0x6c0 [ 469.131781][ C0] ? tear_down_vmas+0x2a5/0x600 [ 469.136629][ C0] stack_trace_save+0x8e/0xc0 [ 469.141311][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 469.146665][ C0] ? __lock_acquire+0x4a5/0x2630 [ 469.151631][ C0] kasan_save_stack+0x30/0x50 [ 469.156303][ C0] ? kasan_save_stack+0x30/0x50 [ 469.161146][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 469.166523][ C0] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 469.172591][ C0] ? kmem_cache_free+0x44a/0x6c0 [ 469.177573][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 469.182774][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 469.188927][ C0] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 469.194809][ C0] ? tear_down_vmas+0x2a5/0x600 [ 469.199834][ C0] kmem_cache_free+0x44a/0x6c0 [ 469.204693][ C0] tear_down_vmas+0x2a5/0x600 [ 469.209379][ C0] exit_mmap+0x469/0xa10 [ 469.213627][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 469.218390][ C0] ? trace_contention_end+0x122/0x170 [ 469.223773][ C0] ? uprobe_clear_state+0x5f/0x260 [ 469.228888][ C0] ? uprobe_clear_state+0x5f/0x260 [ 469.234008][ C0] ? __lock_acquire+0x4a5/0x2630 [ 469.238947][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 469.244570][ C0] __mmput+0x12a/0x410 [ 469.248646][ C0] mmput+0x67/0x80 [ 469.252368][ C0] do_exit+0x8b2/0x2af0 [ 469.256521][ C0] ? do_raw_spin_lock+0x128/0x260 [ 469.261540][ C0] ? __pfx_do_exit+0x10/0x10 [ 469.266123][ C0] ? do_group_exit+0x1bd/0x2a0 [ 469.270891][ C0] ? rcu_is_watching+0x12/0xc0 [ 469.275668][ C0] do_group_exit+0xd5/0x2a0 [ 469.280174][ C0] __x64_sys_exit_group+0x3e/0x50 [ 469.285193][ C0] x64_sys_call+0x102c/0x1530 [ 469.289867][ C0] do_syscall_64+0x115/0x870 [ 469.294444][ C0] ? clear_bhb_loop+0x40/0x90 [ 469.299126][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.305020][ C0] RIP: 0033:0x7fd31fcf16c5 [ 469.309429][ C0] RSP: 002b:00007ffea3a795a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 469.317841][ C0] RAX: ffffffffffffffda RBX: 00005631936bbd90 RCX: 00007fd31fcf16c5 [ 469.325818][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 469.333789][ C0] RBP: 000056319346c2c0 R08: 0000000000000000 R09: 0000000000000000 [ 469.341769][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.349741][ C0] R13: 00007ffea3a795f0 R14: 0000000000000000 R15: 0000000000000000 [ 469.357727][ C0] [ 469.360776][ C0] task:kworker/u8:10 state:R running task stack:22264 pid:6040 tgid:6040 ppid:2 task_flags:0x24248060 flags:0x00080000 [ 469.374441][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 469.380448][ C0] Call Trace: [ 469.383752][ C0] [ 469.386682][ C0] __schedule+0x1295/0x67a0 [ 469.391198][ C0] ? __pfx___schedule+0x10/0x10 [ 469.396039][ C0] ? mark_held_locks+0x40/0x70 [ 469.400806][ C0] preempt_schedule_irq+0x50/0x90 [ 469.405918][ C0] irqentry_exit+0x205/0x970 [ 469.410512][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 469.416489][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 469.421690][ C0] Code: 05 7b 24 25 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 86 89 f2 0e 0f 82 a4 02 00 00 8b 35 0e bd f2 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 24 25 12 0f 85 ed 02 00 00 48 83 c4 [ 469.441306][ C0] RSP: 0018:ffffc900052f5dd8 EFLAGS: 00000206 [ 469.447366][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000006 [ 469.455337][ C0] RDX: 0000000000000000 RSI: ffffffff8dee9983 RDI: ffffffff8c1c4480 [ 469.463315][ C0] RBP: ffffffff8e7e5620 R08: 00000000ab89e961 R09: 0000000000000007 [ 469.471286][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 469.479283][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.487262][ C0] ? unwind_next_frame+0x3be/0x2090 [ 469.492467][ C0] ? unwind_next_frame+0x3be/0x2090 [ 469.497672][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 469.503827][ C0] unwind_next_frame+0xd1/0x2090 [ 469.508767][ C0] ? unwind_next_frame+0xbd/0x2090 [ 469.513881][ C0] ? __debug_object_init+0xb5/0x3d0 [ 469.519084][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 469.525237][ C0] arch_stack_walk+0x94/0xf0 [ 469.529838][ C0] ? __debug_object_init+0xb5/0x3d0 [ 469.535035][ C0] stack_trace_save+0x8e/0xc0 [ 469.539704][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 469.545056][ C0] ? scsi_alloc_sgtables+0x1ce/0xf10 [ 469.550367][ C0] kasan_save_stack+0x30/0x50 [ 469.555043][ C0] ? kasan_save_stack+0x30/0x50 [ 469.559887][ C0] ? kasan_save_track+0x14/0x30 [ 469.564731][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 469.569748][ C0] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 469.575382][ C0] ? kmem_alloc_batch+0x49/0x170 [ 469.580323][ C0] ? debug_objects_fill_pool+0x24d/0x5a0 [ 469.585951][ C0] ? __debug_object_init+0xb5/0x3d0 [ 469.591169][ C0] kasan_save_track+0x14/0x30 [ 469.595832][ C0] __kasan_slab_alloc+0x89/0x90 [ 469.600699][ C0] kmem_cache_alloc_noprof+0x241/0x6e0 [ 469.606145][ C0] ? kmem_alloc_batch+0x49/0x170 [ 469.611096][ C0] kmem_alloc_batch+0x49/0x170 [ 469.615866][ C0] debug_objects_fill_pool+0x24d/0x5a0 [ 469.621335][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 469.627322][ C0] ? mark_held_locks+0x40/0x70 [ 469.632086][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 469.637898][ C0] __debug_object_init+0xb5/0x3d0 [ 469.642927][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 469.648561][ C0] ? mark_held_locks+0x40/0x70 [ 469.653329][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 469.659136][ C0] ? virtscsi_add_cmd+0x9f/0x160 [ 469.664085][ C0] __init_work+0x51/0x60 [ 469.668330][ C0] scsi_init_command+0x11a/0x290 [ 469.673276][ C0] scsi_queue_rq+0xbff/0x3c20 [ 469.677965][ C0] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 469.683530][ C0] ? sbitmap_get+0x1d7/0x360 [ 469.688120][ C0] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 469.694089][ C0] ? __blk_mq_alloc_driver_tag+0x27a/0x7a0 [ 469.699904][ C0] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 469.706237][ C0] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 469.713024][ C0] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 469.719018][ C0] blk_mq_run_hw_queue+0x348/0x670 [ 469.724141][ C0] blk_mq_dispatch_list+0x51d/0x1360 [ 469.729439][ C0] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 469.735167][ C0] ? blk_mq_rq_ctx_init.isra.0+0x67c/0x820 [ 469.740983][ C0] blk_mq_flush_plug_list+0x130/0x600 [ 469.746370][ C0] ? update_io_ticks+0x137/0x2a0 [ 469.751317][ C0] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 469.757222][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 469.763123][ C0] blk_add_rq_to_plug+0x1ca/0x540 [ 469.768161][ C0] ? __pfx_wbt_track+0x10/0x10 [ 469.772928][ C0] blk_mq_submit_bio+0x1d59/0x2f10 [ 469.778056][ C0] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 469.783547][ C0] ? ret_from_fork+0x72b/0xd50 [ 469.788329][ C0] __submit_bio+0x1e1/0x6c0 [ 469.792814][ C0] ? __pfx___css_rstat_updated+0x10/0x10 [ 469.798445][ C0] ? __pfx___submit_bio+0x10/0x10 [ 469.803483][ C0] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 469.809201][ C0] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 469.814930][ C0] ? submit_bio_noacct_nocheck+0x543/0xbf0 [ 469.820823][ C0] submit_bio_noacct_nocheck+0x543/0xbf0 [ 469.826459][ C0] ? rcu_read_unlock+0x17/0x60 [ 469.831224][ C0] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 469.837409][ C0] ? __pfx___might_resched+0x10/0x10 [ 469.842698][ C0] submit_bio_noacct+0xd18/0x2000 [ 469.847730][ C0] ext4_io_submit+0xf7/0x1a0 [ 469.852324][ C0] ext4_bio_write_folio+0x76a/0x1eb0 [ 469.857622][ C0] mpage_process_page_bufs+0x473/0x8d0 [ 469.863088][ C0] mpage_prepare_extent_to_map+0xb50/0x1920 [ 469.868992][ C0] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 469.875337][ C0] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 469.880973][ C0] ? ext4_init_io_end+0x24/0x170 [ 469.885923][ C0] ext4_do_writepages+0x9fe/0x3f20 [ 469.891043][ C0] ? __lock_acquire+0x4a5/0x2630 [ 469.895982][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 469.901538][ C0] ? ext4_writepages+0x347/0x790 [ 469.906471][ C0] ext4_writepages+0x347/0x790 [ 469.911230][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 469.916525][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 469.921811][ C0] do_writepages+0x278/0x600 [ 469.926403][ C0] ? __pfx_do_writepages+0x10/0x10 [ 469.931520][ C0] __writeback_single_inode+0x164/0x1350 [ 469.937150][ C0] ? find_held_lock+0x2b/0x80 [ 469.941810][ C0] ? __pfx___writeback_single_inode+0x10/0x10 [ 469.947874][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 469.953081][ C0] writeback_sb_inodes+0x766/0x1c60 [ 469.958290][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 469.963949][ C0] ? _raw_spin_unlock+0x28/0x50 [ 469.968881][ C0] ? move_expired_inodes+0x5ea/0x8f0 [ 469.974169][ C0] __writeback_inodes_wb+0xf8/0x2d0 [ 469.979369][ C0] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 469.985182][ C0] ? queue_io+0x287/0x540 [ 469.989504][ C0] wb_writeback+0x720/0xb90 [ 469.993997][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 469.999027][ C0] ? get_nr_inodes+0x100/0x150 [ 470.003797][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 470.008997][ C0] wb_workfn+0x8dd/0xc00 [ 470.013243][ C0] ? try_to_wake_up+0x15f/0x1900 [ 470.018194][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 470.022962][ C0] ? rcu_is_watching+0x12/0xc0 [ 470.027731][ C0] process_one_work+0xa0e/0x1980 [ 470.032686][ C0] ? __pfx_process_one_work+0x10/0x10 [ 470.038056][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 470.042802][ C0] worker_thread+0x5ef/0xe50 [ 470.047494][ C0] ? __pfx_worker_thread+0x10/0x10 [ 470.052607][ C0] ? kthread+0x13a/0x450 [ 470.056850][ C0] ? __pfx_worker_thread+0x10/0x10 [ 470.061956][ C0] kthread+0x370/0x450 [ 470.066019][ C0] ? __pfx_kthread+0x10/0x10 [ 470.070608][ C0] ret_from_fork+0x72b/0xd50 [ 470.075204][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 470.080319][ C0] ? __switch_to+0x800/0x1100 [ 470.084996][ C0] ? __pfx_kthread+0x10/0x10 [ 470.089579][ C0] ret_from_fork_asm+0x1a/0x30 [ 470.094426][ C0] [ 470.097447][ C0] task:udevd state:R running task stack:23640 pid:4983 tgid:4983 ppid:1 task_flags:0x400140 flags:0x00080000 [ 470.110937][ C0] Call Trace: [ 470.114215][ C0] [ 470.117142][ C0] __schedule+0x1295/0x67a0 [ 470.121667][ C0] ? __pfx___schedule+0x10/0x10 [ 470.126523][ C0] ? mark_held_locks+0x40/0x70 [ 470.131291][ C0] preempt_schedule_irq+0x50/0x90 [ 470.136322][ C0] irqentry_exit+0x205/0x970 [ 470.140921][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 470.146887][ C0] RIP: 0010:unwind_next_frame+0x1453/0x2090 [ 470.152786][ C0] Code: 4c 89 ef c6 05 9d 10 58 12 01 e8 e8 e8 ff ff e9 0f ef ff ff 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 48 c1 ea 03 80 3c 02 00 <0f> 85 a6 08 00 00 48 89 c8 4d 8b 7d 38 48 ba 00 00 00 00 00 fc ff [ 470.172398][ C0] RSP: 0018:ffffc9000351fa50 EFLAGS: 00000246 [ 470.178468][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff916c1436 [ 470.186439][ C0] RDX: 1ffff920006a3f5f RSI: 0000000000000001 RDI: ffffffff90e8c610 [ 470.194419][ C0] RBP: ffffc9000351fb08 R08: ffffffff916c143a R09: 0000000000000007 [ 470.202389][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: ffffc9000351fb10 [ 470.210361][ C0] R13: ffffc9000351fac0 R14: 0000000000000003 R15: 0000000000000001 [ 470.218351][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.224429][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 470.230607][ C0] arch_stack_walk+0x94/0xf0 [ 470.235210][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.241270][ C0] stack_trace_save+0x8e/0xc0 [ 470.245929][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 470.251308][ C0] ? __lock_acquire+0x4a5/0x2630 [ 470.256236][ C0] ? __lock_acquire+0x4a5/0x2630 [ 470.261176][ C0] save_stack+0x162/0x1e0 [ 470.265505][ C0] ? __pfx_save_stack+0x10/0x10 [ 470.270350][ C0] ? __free_frozen_pages+0x794/0x10a0 [ 470.275721][ C0] ? qlist_free_all+0x47/0xf0 [ 470.280400][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 470.286050][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 470.291069][ C0] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 470.296689][ C0] ? do_getname+0x35/0x390 [ 470.301123][ C0] ? __x64_sys_unlink+0x36/0x70 [ 470.305982][ C0] ? do_syscall_64+0x115/0x870 [ 470.310744][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.316815][ C0] ? page_ext_put+0x3e/0xd0 [ 470.321322][ C0] __reset_page_owner+0x84/0x190 [ 470.326261][ C0] __free_frozen_pages+0x794/0x10a0 [ 470.331465][ C0] qlist_free_all+0x47/0xf0 [ 470.335972][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 470.341430][ C0] __kasan_slab_alloc+0x69/0x90 [ 470.346263][ C0] kmem_cache_alloc_noprof+0x241/0x6e0 [ 470.351726][ C0] ? do_getname+0x35/0x390 [ 470.356157][ C0] do_getname+0x35/0x390 [ 470.360401][ C0] __x64_sys_unlink+0x36/0x70 [ 470.365079][ C0] do_syscall_64+0x115/0x870 [ 470.369669][ C0] ? clear_bhb_loop+0x40/0x90 [ 470.374344][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.380233][ C0] RIP: 0033:0x7fd31fd15937 [ 470.384643][ C0] RSP: 002b:00007ffea3a79758 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 470.393053][ C0] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007fd31fd15937 [ 470.401022][ C0] RDX: 0000000000000000 RSI: 0000000015846c40 RDI: 000056317c84802e [ 470.408996][ C0] RBP: 0000000000000000 R08: 0000000015888946 R09: 0000000000000001 [ 470.416965][ C0] R10: 0000000000010eaa R11: 0000000000000202 R12: 0000000000000000 [ 470.424937][ C0] R13: 000056317c863100 R14: 0000000000000000 R15: 0000000000000000 [ 470.432921][ C0] [ 470.435938][ C0] rcu: rcu_preempt kthread starved for 986 jiffies! g41037 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 470.446957][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 470.456923][ C0] rcu: RCU grace-period kthread stack dump: [ 470.462805][ C0] task:rcu_preempt state:R running task stack:26728 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 470.476294][ C0] Call Trace: [ 470.479570][ C0] [ 470.482495][ C0] __schedule+0x1295/0x67a0 [ 470.487004][ C0] ? __pfx___schedule+0x10/0x10 [ 470.491834][ C0] ? find_held_lock+0x2b/0x80 [ 470.496503][ C0] ? schedule+0x2bf/0x390 [ 470.500837][ C0] schedule+0xdd/0x390 [ 470.504903][ C0] schedule_timeout+0x127/0x280 [ 470.509749][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 470.515117][ C0] ? __pfx_process_timeout+0x10/0x10 [ 470.520412][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 470.526230][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 470.531698][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 470.536460][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 470.541745][ C0] ? prepare_to_swait_event+0x67/0x4a0 [ 470.547204][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 470.552153][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 470.557354][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 470.563165][ C0] rcu_gp_kthread+0x179/0x230 [ 470.567845][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 470.573036][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 470.578843][ C0] ? __kthread_parkme+0x18c/0x230 [ 470.583877][ C0] ? kthread+0x13a/0x450 [ 470.588118][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 470.593300][ C0] kthread+0x370/0x450 [ 470.597370][ C0] ? __pfx_kthread+0x10/0x10 [ 470.601986][ C0] ret_from_fork+0x72b/0xd50 [ 470.606581][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 470.611690][ C0] ? __switch_to+0x800/0x1100 [ 470.616369][ C0] ? __pfx_kthread+0x10/0x10 [ 470.620955][ C0] ret_from_fork_asm+0x1a/0x30 [ 470.625737][ C0] [ 470.628748][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 470.635055][ C0] Sending NMI from CPU 0 to CPUs 1: [ 470.640260][ C1] NMI backtrace for cpu 1 [ 470.640275][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.640295][ C1] Tainted: [L]=SOFTLOCKUP [ 470.640300][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 470.640308][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 470.640330][ C1] Code: f5 92 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 51 22 00 fb f4 fc 43 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 470.640343][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 470.640355][ C1] RAX: 0000000002d2718f RBX: ffff88801e2ba540 RCX: ffffffff8b894285 [ 470.640364][ C1] RDX: 0000000000000000 RSI: ffffffff8df0eee6 RDI: ffffffff8c1c4480 [ 470.640373][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 470.640381][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 470.640390][ C1] R13: ffffed1003c574a8 R14: 0000000000000001 R15: ffffffff90d70550 [ 470.640399][ C1] FS: 0000000000000000(0000) GS:ffff888124486000(0000) knlGS:0000000000000000 [ 470.640413][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.640422][ C1] CR2: 00002000000dd030 CR3: 000000000e596000 CR4: 00000000003526f0 [ 470.640432][ C1] Call Trace: [ 470.640437][ C1] [ 470.640441][ C1] default_idle+0x9/0x10 [ 470.640459][ C1] default_idle_call+0x6c/0xb0 [ 470.640478][ C1] do_idle+0x464/0x590 [ 470.640500][ C1] ? __pfx_do_idle+0x10/0x10 [ 470.640518][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 470.640542][ C1] cpu_startup_entry+0x4f/0x60 [ 470.640554][ C1] start_secondary+0x21d/0x2d0 [ 470.640570][ C1] ? __pfx_start_secondary+0x10/0x10 [ 470.640587][ C1] common_startup_64+0x13e/0x148 [ 470.640610][ C1] [ 473.945773][ T5615] Bluetooth: hci2: command 0x0406 tx timeout